Edit tour

Windows Analysis Report
http://www.baidu.com

Overview

General Information

Sample URL:	http://www.baidu.com
Analysis ID:	1542033
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2320,i,5622916104224757679,5366668800316480785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.baidu.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://top.baidu.com/board MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1992,i,17552832433797890608,5227720117257469316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ztbox?action=zpblog&appname=pcsearch&v=2.0&data=%7B%22cateid%22%3A%2299%22%2C%22actiondata%22%3A%7B%22id%22%3A18463%2C%22type%22%3A%220%22%2C%22timestamp%22%3A1729855654482%2C%22content%22%3A%7B%22page%22%3A%22home%22%2C%22source%22%3A%22%22%2C%22from%22%3A%22search%22%2C%22type%22%3A%22display%22%2C%22ext%22%3A%7B%7D%7D%7D%7D HTTP/1.1Host: mbd.baidu.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: http://www.baidu.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: http://www.baidu.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_324.2.dr, chromecache_310.2.dr	String found in binary or memory: http://api.open.baidu.com/new_hsug/data/write
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://b1.bdstatic.com/img/pc.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://bdimg.share.baidu.com
Source: chromecache_301.2.dr	String found in binary or memory: http://bdimg.share.baidu.com/static/api/js/custom/resultshare.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://bjyz-mco-searchbox201609-m12xi3-044.bjyz.baidu.com:8080/tcbox?action=pblog
Source: chromecache_301.2.dr	String found in binary or memory: http://bjyz-mco-searchbox201609-m12xi3-044.bjyz.baidu.com:8080/ztbox
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://bjyz-mco-searchbox201609-m12xi3-044.bjyz.baidu.com:8080/ztbox?action=zpblog
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://bzclk.baidu.com
Source: chromecache_451.2.dr, chromecache_254.2.dr	String found in binary or memory: http://cache.baidu.com/c?
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://click.hm.baidu.com/app.gif?ap=1801081&ch=47556
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://dj0.baidu.com/v.gif?pid=315&type=2011&portrait=
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://dj1.baidu.com/v.gif?
Source: chromecache_301.2.dr	String found in binary or memory: http://eclick.baidu.com/ps_fp.htm?
Source: chromecache_301.2.dr	String found in binary or memory: http://ecmb.bdimg.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://ecmb.bdimg.com/public03/pc.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://f3.baidu.com
Source: chromecache_351.2.dr, chromecache_452.2.dr	String found in binary or memory: http://f3.baidu.com/index.php/feedback/zx/getData
Source: chromecache_301.2.dr	String found in binary or memory: http://i.baidu.com
Source: chromecache_310.2.dr	String found in binary or memory: http://i.baidu.com/my/history?from=pssug
Source: chromecache_367.2.dr, chromecache_309.2.dr	String found in binary or memory: http://image.baidu.com/n/pc_search?
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://isphijack.baidu.com/index.php?cb=isp_hijack
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://j.br.baidu.com/v1/t/ui/p/browser/tn/10105001/ch_dl_url
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://jubao.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://koubei.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://m.baidu.com/tcbox?action=pblog
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://nourl.ubs.baidu.com
Source: chromecache_301.2.dr	String found in binary or memory: http://nsclick.baidu.com
Source: chromecache_301.2.dr	String found in binary or memory: http://open.baidu.com/stat/al_e.gif?ajax_err_url=#
Source: chromecache_301.2.dr	String found in binary or memory: http://opendata.baidu.com/api.php
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: http://passport.baidu.com/
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://passport.baidu.com/?logout&tpl=mn&u=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/aladdin-ui/honourCard4/honourCard4_ee085ad.js
Source: chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_close_icon_682280b.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_icon_show_6016362.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_sfz1_6f3f07a.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_sfz_29991ea.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_up_56db4dd.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/rrecom_icon_e34d796.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/global/img/wsCloseBtn2_0047ae2.png)
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/home/js/nu_instant_search_d67677a.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/plugins/clean_792200d.js
Source: chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/plugins/feedback_e6b277b.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/plugins/ime_6aff449.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/plugins/new_wcal_3426010.js
Source: chromecache_367.2.dr, chromecache_309.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new2_e1a824c.css
Source: chromecache_367.2.dr, chromecache_309.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new_sam_a6c95ec.css
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/sug/js/bdsug_async_e9fd2d5.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pss.bdstatic.com/r/www/cache/static/sug/js/bdsug_async_sam_sug_ab025f7.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://s.share.baidu.com
Source: chromecache_444.2.dr, chromecache_368.2.dr, chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://s.share.baidu.com/?
Source: chromecache_444.2.dr, chromecache_368.2.dr	String found in binary or memory: http://s.share.baidu.com?
Source: chromecache_310.2.dr	String found in binary or memory: http://sclick.baidu.com
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://sclick.baidu.com/w.gif
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://sclick.baidu.com/w.gif?fm=suggestion&title=%B9%D8%B1%D5&t=
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://sclick.baidu.com/w.gif?q=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://sensearch.baidu.com/sensearch/selecttext
Source: chromecache_301.2.dr	String found in binary or memory: http://sestat.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://sestat.baidu.com/cm.gif?type=cdnmonitor
Source: chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: http://sestat.baidu.com/mwb2.gif
Source: chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: http://sestat.baidu.com/webb.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://shadu.baidu.com/landingpage/competing.html?from=10064
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://ss.bdimg.com
Source: chromecache_328.2.dr, chromecache_276.2.dr	String found in binary or memory: http://ss.bdimg.com/cdn/testedge.js
Source: chromecache_328.2.dr, chromecache_276.2.dr, chromecache_324.2.dr, chromecache_310.2.dr	String found in binary or memory: http://suggestion.baidu.com/su
Source: chromecache_301.2.dr	String found in binary or memory: http://tag.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://ufo.baidu.com/listen/myhistory?product_line=20018&appid=215622&type=commonQA
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://ufo.baidu.com/listen/myhistory?type=myhistory&product_line=20018&appid=215622
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://v.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: http://velocity.baidu.com/sp
Source: chromecache_367.2.dr, chromecache_309.2.dr	String found in binary or memory: http://wiki.baidu.com/pages/viewpage.action?pageId=773880935
Source: chromecache_310.2.dr	String found in binary or memory: http://www.baidu.com
Source: chromecache_351.2.dr, chromecache_452.2.dr	String found in binary or memory: http://www.baidu.com/
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://a.app.qq.com/o/simple.jsp?pkgname=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://activity.baidu.com/activity/felog/error
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://activity.baidu.com/activity/felog/log
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://ada.baidu.com/phone-tracker/sdk
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/app/id1575660143
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/app/id427941017
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/%E4%B8%80%E5%88%BB%E7%9B%B8%E5%86%8C-%E7%99%BE%E5%BA%A6%E7%BD%91%E7%9B
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/%E5%AE%9D%E5%AE%9D%E7%9F%A5%E9%81%93-%E7%A7%91%E5%AD%A6%E5%A4%87%E5%AD
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/%E5%BE%AE%E5%8F%AD/id1410178720
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/%E7%95%AA%E4%B9%90/id1484301936
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/1/id1065829176
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1490227077
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1523487452
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1526110789
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1527030248
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1528455665
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1541812473
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1546173008
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1548246673
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1555616850
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1581796662
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id1615406726
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id393765873
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/id426340811
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://apps.apple.com/us/app/%E5%AF%BB%E5%AE%87/id1621670210
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/cheng_boy.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/cheng_girl.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/ci_boy.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/search_pc_share_icons.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/young_boy.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/img/young_girl.png
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://baiduworld.baidu.com/?lng=zh
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee-wise/#/home
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee/
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee/?from=fcad
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee/?from=ps
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee/m/?from=fcad
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/guarantee/m/?from=ps
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://baozhang.baidu.com/showbox/openapi/get-bao
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://boxer.baidu.com/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://clientmap.baidu.com/map/maplink.php?cburl=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://console.cloud.baidu-int.com/devops/icode/repos/baidu/brand-fe/tenon-components/blob/HEAD/src
Source: chromecache_367.2.dr, chromecache_309.2.dr	String found in binary or memory: https://dlswbr.baidu.com/heicha/mw/abclite-2033-s.js
Source: chromecache_311.2.dr, chromecache_445.2.dr	String found in binary or memory: https://dss0.bdstatic.com/5aV1bjqh_Q23odCf/static/mancard/img/qrcode_download-02b84e1f66.png
Source: chromecache_311.2.dr, chromecache_445.2.dr	String found in binary or memory: https://dss0.bdstatic.com/5aV1bjqh_Q23odCf/static/superman/img/w_cur-d41911290d.cur
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://github.com/RonenNess/ExpiredStorage
Source: chromecache_290.2.dr, chromecache_264.2.dr, chromecache_244.2.dr, chromecache_230.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_290.2.dr, chromecache_230.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.37.1/LICENSE
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://hku.baidu.com/h5/share/s/
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://hm.baidu.com/hm.js
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://hm.baidu.com/hm.js?
Source: chromecache_290.2.dr, chromecache_230.2.dr	String found in binary or memory: https://hpd.baidu.com/v.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://hs.baidu.com/doctorBox?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id477927812?pt=328057&ct=bottom_layer&mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id916139408?pt=625805&ct=1024129m&mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/%E5%85%A8%E6%B0%91%E5%B0%8F%E8%A7%86%E9%A2%91/id1329385145?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/%E5%B0%8F%E5%BA%A6%E8%93%9D%E7%89%99/id1437733193?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/%E7%99%BE%E5%BA%A6%E7%BD%91%E7%9B%98/id547166701?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/bai-du-hao-kan/id1092031003
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/id1281873118?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/id1437234400?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/id1533615786?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/id382201985?mt=8
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://itunes.apple.com/cn/app/id452186370
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://jiankang.baidu.com/scheme?scheme=
Source: chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://m.baidu.com
Source: chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://m.baidu.com/
Source: chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://m.baidu.com/mip/c/
Source: chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://mbd.baidu.com/ma/landingpage?t=smartapp_share&appid=
Source: chromecache_290.2.dr, chromecache_230.2.dr	String found in binary or memory: https://mbd.baidu.com/newspage/api/getpcvoicelist
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://mbd.baidu.com/newspage/api/getttsurllist
Source: chromecache_290.2.dr, chromecache_230.2.dr	String found in binary or memory: https://mbd.baidu.com/newspage/api/updateuservoice
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://mbd.baidu.com/tcbox?action=pblog
Source: chromecache_301.2.dr	String found in binary or memory: https://mbd.baidu.com/ztbox
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://mbd.baidu.com/ztbox?action=zpblog
Source: chromecache_290.2.dr, chromecache_230.2.dr	String found in binary or memory: https://mbdp02.bdstatic.com/static/mp3/nothing.mp3
Source: chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://mipcache.bdstatic.com/c/
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: https://passport.baidu.com/?getpass_index
Source: chromecache_351.2.dr, chromecache_452.2.dr, chromecache_343.2.dr, chromecache_438.2.dr	String found in binary or memory: https://passport.baidu.com/?getpass_index&tpl=mn&u=
Source: chromecache_452.2.dr	String found in binary or memory: https://passport.baidu.com/?logout&u=https://www.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://passport.baidu.com/v2/?login&tpl=mn&u=
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://passport.baidu.com/v2/?login&u=
Source: chromecache_351.2.dr, chromecache_452.2.dr, chromecache_343.2.dr, chromecache_438.2.dr	String found in binary or memory: https://passport.baidu.com/v2/?reg&regType=1&tpl=mn&u=
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: https://passport.baidu.com/v2/?reg&tpl=&u=
Source: chromecache_264.2.dr, chromecache_244.2.dr	String found in binary or memory: https://passport.qatest.baidu.com/v2/?login&u=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://photo.baidu.com/app/scheme?&scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://pss.bdstatic.com/
Source: chromecache_213.2.dr, chromecache_284.2.dr, chromecache_441.2.dr, chromecache_224.2.dr, chromecache_259.2.dr, chromecache_241.2.dr, chromecache_421.2.dr	String found in binary or memory: https://pss.bdstatic.com/r/www/cache
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://snsyun.baidu.com/wap/snsdeeplink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sp0.baidu.com/6r1_czmhAB63otqbppnN2DJv/sp
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sp0.baidu.com/9q9JcDHa2gU2pMbgoY3K
Source: chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr, chromecache_418.2.dr, chromecache_247.2.dr	String found in binary or memory: https://sp1.baidu.com/5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sp1.baidu.com/5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif?
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sp1.baidu.com/5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif?pid=
Source: chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sp1.baidu.com/5b1ZeDe5KgQFm2e88IuM_a/webb.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sptidchk.baidu.com/s.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sptidcjp.baidu.com/s.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sptidcsfo.baidu.com/s.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://sptidcsin.baidu.com/s.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://srf.baidu.com/?from=1024129m&c=apple&e=imehd&native_url=
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: https://ss0.baidu.com/6ONWsjip0QIZ8tyhnq/it/u=291248239
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ss0.baidu.com/6ONWsjip0QIZ8tyhnq/ps_default.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ss1.baidu.com/6ONWsjip0QIZ8tyhnq/ps_default.gif
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: https://ss1.baidu.com/6ONXsjip0QIZ8tyhnq/it/u=3718006945
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ss2.baidu.com/6ONWsjip0QIZ8tyhnq/ps_default.gif
Source: chromecache_257.2.dr, chromecache_314.2.dr	String found in binary or memory: https://ss2.baidu.com/6ONYsjip0QIZ8tyhnq/it/u=519039017
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ss3.baidu.com/6ONWsjip0QIZ8tyhnq/ps_default.gif
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://talent.baidu.com/jobs/list
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ug.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ulink.yy.com/urlscheme?type=scheme&action=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ulinkmvideo.baidu.com/wisedrama/system/ulink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ulinkmvideo.baidu.com/wisedrama/system/wepodulink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ulinkmvideo.baidu.com/wisedrama/system/yinciulink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://ulinkmvideo.baidu.com/yiju/system/ulink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://vse.baidu.com/echo.fcgi
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://vv.baidu.com/feedvideoui/ulink?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/baiduboxlite/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/baiduboxsenior/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/baiduboxvision/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/baidudict/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/fortunecat/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/lemonapp/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/tomas/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/xiaoduapp/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/xunyuapp/scheme?scheme=
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://wakeup.baidu.com/yoopu/scheme?scheme=
Source: chromecache_244.2.dr	String found in binary or memory: https://wappass.baidu.com/passport/?login&u=
Source: chromecache_301.2.dr	String found in binary or memory: https://wappass.baidu.com/static/machine/js/api/mkd.js
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://www.baidu.com
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://www.baidu.com/con?from=self
Source: chromecache_301.2.dr	String found in binary or memory: https://www.baidu.com/my/index
Source: chromecache_311.2.dr, chromecache_445.2.dr	String found in binary or memory: https://www.baidu.com/pctts/report/report_audio
Source: chromecache_397.2.dr, chromecache_301.2.dr	String found in binary or memory: https://www.baidu.com/pctts/report/report_audio_land_page
Source: chromecache_310.2.dr	String found in binary or memory: https://www.baidu.com/recsys/hisproxy/data/usrclear
Source: chromecache_324.2.dr, chromecache_310.2.dr	String found in binary or memory: https://www.baidu.com/recsys/hisproxy/data/usrdelete
Source: chromecache_445.2.dr	String found in binary or memory: https://www.baidu.com/search/aging-tools.html
Source: chromecache_397.2.dr, chromecache_291.2.dr, chromecache_301.2.dr, chromecache_242.2.dr	String found in binary or memory: https://www.baidu.com/wza/aria.js?appid=c890648bf4dd00d05eb9751dd0548c30

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 54895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 54664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 54985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 54724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 55014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54937
Source: unknown	Network traffic detected: HTTP traffic on port 54943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54935
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54933
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54931
Source: unknown	Network traffic detected: HTTP traffic on port 54989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54930
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54945
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54949
Source: unknown	Network traffic detected: HTTP traffic on port 54816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54941
Source: unknown	Network traffic detected: HTTP traffic on port 54766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54712
Source: unknown	Network traffic detected: HTTP traffic on port 54851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54952
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54729
Source: unknown	Network traffic detected: HTTP traffic on port 54686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54963
Source: unknown	Network traffic detected: HTTP traffic on port 54955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54908
Source: unknown	Network traffic detected: HTTP traffic on port 54921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54905
Source: unknown	Network traffic detected: HTTP traffic on port 54650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54909
Source: unknown	Network traffic detected: HTTP traffic on port 54999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54917
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54910
Source: unknown	Network traffic detected: HTTP traffic on port 54871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54926
Source: unknown	Network traffic detected: HTTP traffic on port 54883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54924
Source: unknown	Network traffic detected: HTTP traffic on port 54965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54923
Source: unknown	Network traffic detected: HTTP traffic on port 54778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54920
Source: unknown	Network traffic detected: HTTP traffic on port 54662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54652
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54658
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54897
Source: unknown	Network traffic detected: HTTP traffic on port 54763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54661
Source: unknown	Network traffic detected: HTTP traffic on port 54820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54660
Source: unknown	Network traffic detected: HTTP traffic on port 54866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54664
Source: unknown	Network traffic detected: HTTP traffic on port 54911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54667
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54666
Source: unknown	Network traffic detected: HTTP traffic on port 54660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54679
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54680
Source: unknown	Network traffic detected: HTTP traffic on port 54935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54684
Source: unknown	Network traffic detected: HTTP traffic on port 54969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54694
Source: unknown	Network traffic detected: HTTP traffic on port 54785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54691
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54857
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 54649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54851
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54853
Source: unknown	Network traffic detected: HTTP traffic on port 54933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54860
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54866
Source: unknown	Network traffic detected: HTTP traffic on port 54741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54865
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54870
Source: unknown	Network traffic detected: HTTP traffic on port 54787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54879
Source: unknown	Network traffic detected: HTTP traffic on port 54945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54876
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54875
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54880
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54649
Source: unknown	Network traffic detected: HTTP traffic on port 54753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54648
Source: unknown	Network traffic detected: HTTP traffic on port 54923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54642
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54887
Source: unknown	Network traffic detected: HTTP traffic on port 54891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54892
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54891
Source: unknown	Network traffic detected: HTTP traffic on port 54659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54890
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54697
Source: unknown	Network traffic detected: HTTP traffic on port 54876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54695
Source: unknown	Network traffic detected: HTTP traffic on port 54947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 54745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 54859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 54779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 54803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 54986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 54825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 55015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54927 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:54688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:54763 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@25/441@140/42

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2320,i,5622916104224757679,5366668800316480785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.baidu.com"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://top.baidu.com/board
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1992,i,17552832433797890608,5227720117257469316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2320,i,5622916104224757679,5366668800316480785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1992,i,17552832433797890608,5227720117257469316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
eopa.n.shifen.com	182.61.200.222	true	false	unknown
opencdnbdcharon.jomodns.com	171.214.24.36	true	false	unknown
passport.n.shifen.com	45.113.194.250	true	false	unknown
bcstobos.jomodns.com	123.235.31.48	true	false	unknown
sslbdstatic.gshifen.com	185.10.104.110	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
sslbaidu.gshifen.com	104.193.90.87	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
opencdnbdsimage.jomodns.com	61.170.103.36	true	false	unknown
opencdnbdimgtn.gshifen.com	104.193.90.94	true	false	unknown
www.wshifen.com	103.235.47.188	true	false	unknown
opencdnbd.jomodns.com	111.177.8.38	true	false	unknown
hector.baidu.com	39.156.68.81	true	false	unknown
sestat.a.shifen.com	183.240.98.60	true	false	unknown
opencdnglobal.gshifen.com	185.10.104.115	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
mbd.wshifen.com	103.235.47.212	true	false	unknown
top.n.shifen.com	111.45.3.195	true	false	unknown
hpd.a.shifen.com	45.113.194.65	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
dss0.bdstatic.com	unknown	unknown	false	unknown
t10.baidu.com	unknown	unknown	false	unknown
hpd.baidu.com	unknown	unknown	false	unknown
dss1.bdstatic.com	unknown	unknown	false	unknown
ss1.bdstatic.com	unknown	unknown	false	unknown
www.baidu.com	unknown	unknown	false	unknown
t12.baidu.com	unknown	unknown	false	unknown
ss1.baidu.com	unknown	unknown	false	unknown
t15.baidu.com	unknown	unknown	false	unknown
top.baidu.com	unknown	unknown	false	unknown
gimg3.baidu.com	unknown	unknown	false	unknown
lingjing-online.cdn.bcebos.com	unknown	unknown	false	unknown
t13.baidu.com	unknown	unknown	false	unknown
ug.baidu.com	unknown	unknown	false	unknown
gips1.baidu.com	unknown	unknown	false	unknown
mbd.baidu.com	unknown	unknown	false	unknown
sp1.baidu.com	unknown	unknown	false	unknown
pss.bdstatic.com	unknown	unknown	false	unknown
t11.baidu.com	unknown	unknown	false	unknown
sp2.baidu.com	unknown	unknown	false	unknown
hectorstatic.baidu.com	unknown	unknown	false	unknown
b.bdstatic.com	unknown	unknown	false	unknown
psstatic.cdn.bcebos.com	unknown	unknown	false	unknown
gips3.baidu.com	unknown	unknown	false	unknown
t7.baidu.com	unknown	unknown	false	unknown
t14.baidu.com	unknown	unknown	false	unknown
sp0.baidu.com	unknown	unknown	false	unknown
gips2.baidu.com	unknown	unknown	false	unknown
ss2.baidu.com	unknown	unknown	false	unknown
gips0.baidu.com	unknown	unknown	false	unknown
passport.baidu.com	unknown	unknown	false	unknown
gimg4.baidu.com	unknown	unknown	false	unknown
sestat.baidu.com	unknown	unknown	false	unknown
sclick.baidu.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_99f656e.css	false	unknown
https://pss.bdstatic.com/static/superman/img/topnav/yingxiaoicon-612169cc36.png	false	unknown
https://pss.bdstatic.com/r/www/cache/static/global/img/nicon_10750f3.png	false	unknown
https://www.baidu.com/favicon.ico	false	unknown
https://pss.bdstatic.com/static/superman/js/super_load-8301698f5e.js	false	unknown
https://pss.bdstatic.com/static/superman/js/lib/jquery-1-edb203c114.10.2.js	false	unknown
http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-card/index_610fa8a8.css	false	unknown
https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/boiling-point/result_ff637f9.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/Boxjs-search_9aa906f.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/molecules/app/page/result_2c2d38e.js	false	unknown
https://ug.baidu.com/mcp/pc/pcsearch	false	unknown
http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-card/tokens_583a0c6c.css	false	unknown
https://pss.bdstatic.com/static/superman/amd_modules/tslib-c95383af0c.js	false	unknown
https://pss.bdstatic.com/static/superman/js/components/login_guide-4fba3971ce.js	false	unknown
https://pss.bdstatic.com/static/superman/img/topnav/newyinyue-03ecd1e9b9.png	false	unknown
https://mbd.baidu.com/ztbox?action=zpblog&appname=pcsearch&v=2.0&data=%7B%22cateid%22%3A%2299%22%2C%22actiondata%22%3A%7B%22id%22%3A18463%2C%22type%22%3A%220%22%2C%22timestamp%22%3A1729855654482%2C%22content%22%3A%7B%22page%22%3A%22home%22%2C%22source%22%3A%22%22%2C%22from%22%3A%22search%22%2C%22type%22%3A%22display%22%2C%22ext%22%3A%7B%7D%7D%7D%7D	false	unknown
http://www.baidu.com/img/flexible/logo/pc/peak-result.png	false	unknown
https://ss2.baidu.com/6ONYsjip0QIZ8tyhnq/it/u=4173936571,4084506864&fm=179&app=35&f=PNG?w=514&h=32	false	unknown
http://www.baidu.com/sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855655833&req=2&csor=0	false	unknown
http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-medical/index_ecf8427e.css	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/assert_8f1a1ad.js	false	unknown
https://pss.bdstatic.com/static/superman/img/topnav/newzhibo-a6a0831ecd.png	false	unknown
http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic/tokens_6daf5cab.css	false	unknown
https://sp1.baidu.com/-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=showpv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5068611600931874	false	unknown
https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/right_recommends_merge/result_dceae3a.js	false	unknown
https://pss.bdstatic.com/static/superman/js/components/invoke-97e9694cb9.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/global/img/icons_441e82f.png	false	unknown
http://gimg3.baidu.com/rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F5ff59bf96b328865183444872e4c8f12.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=f270e08c5979c3d49be8eda99501b029	false	unknown
https://pss.bdstatic.com/r/www/cache/static/bundles/polyfill_9354efa.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/plugins/swfobject_0178953.js	false	unknown
https://pss.bdstatic.com/static/superman/img/topnav/newzhidao-da1cf444b0.png	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/ala-util/md5_b17d496.js	false	unknown
http://www.baidu.com/img/flexible/logo/pc/result.png	false	unknown
https://mbd.baidu.com/ztbox?action=zpblog&appname=pcsearch&v=2.0&data=%7B%22cateid%22%3A%2299%22%2C%22actiondata%22%3A%7B%22id%22%3A18463%2C%22type%22%3A%220%22%2C%22timestamp%22%3A1729855661553%2C%22content%22%3A%7B%22page%22%3A%22home%22%2C%22source%22%3A%22%22%2C%22from%22%3A%22search%22%2C%22type%22%3A%22show%22%2C%22value%22%3A%22csaitab%22%7D%7D%7D	false	unknown
https://ss1.baidu.com/6ONXsjip0QIZ8tyhnq/it/u=423474926,1801248814&fm=179&app=35&f=PNG?w=518&h=136&s=ADFEEB16D210A1925C7BF2EA0300E03E	false	unknown
https://ss1.baidu.com/6ONXsjip0QIZ8tyhnq/it/u=3779990328,1416553241&fm=179&app=35&f=PNG?w=108&h=108&s=E7951B62A4639D153293A4E90300401B	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/pst-log_8c0dfbd.js	false	unknown
https://pss.bdstatic.com/static/superman/js/components/content-info-12dbf9fb6d.js	false	unknown
https://psstatic.cdn.bcebos.com/basics/chat/peakAi_1721633550000.svg	false	unknown
http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs	false	unknown
https://b.bdstatic.com/searchbox/icms/searchbox/img/cheng_girl.png	false	unknown
https://pss.bdstatic.com/r/www/cache/static/molecules/app/rs/result_9519512.js	false	unknown
https://pss.bdstatic.com/static/superman/img/topnav/newjiankang-f03b804b4b.png	false	unknown
https://pss.bdstatic.com/static/superman/js/components/csaitab-log-75d5350518.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/mirror-san/app/ai_agent_distribute/index_3eaf44f.js	false	unknown
http://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/aging-tools-pc_63487d8.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/lib/esl_5fec89f.js	false	unknown
http://pss.bdstatic.com/r/www/cache/static/plugins/swfobject_0178953.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/search-sug_947981a.js	false	unknown
https://gips0.baidu.com/it/u=1516704641,3495705331&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108	false	unknown
https://pss.bdstatic.com/static/superman/js/min_super-c4c7be2850.js	false	unknown
http://pss.bdstatic.com/r/www/cache/static/plugins/bzPopper_d8249c4.js	false	unknown
https://pss.bdstatic.com/static/superman/js/components/placeholder-f3bc3565f2.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/global/js/all_async_search_a7be81b.js	false	unknown
https://pss.bdstatic.com/static/superman/amd_modules/@baidu/video-meeting-1be7f62dac.js	false	unknown
https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/promise_33d6467.js	false	unknown
https://sp1.baidu.com/-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=nodepv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5895724537290818	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://sclick.baidu.com/w.gif?q=	chromecache_328.2.dr, chromecache_276.2.dr	false	unknown
http://bzclk.baidu.com	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://github.com/zloirock/core-js	chromecache_290.2.dr, chromecache_264.2.dr, chromecache_244.2.dr, chromecache_230.2.dr	false	unknown
https://ada.baidu.com/phone-tracker/sdk	chromecache_264.2.dr, chromecache_244.2.dr	false	unknown
http://pss.bdstatic.com/r/www/cache/static/global/img/feedback_icon_show_6016362.png	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://s.share.baidu.com?	chromecache_444.2.dr, chromecache_368.2.dr	false	unknown
https://hm.baidu.com/hm.js?	chromecache_264.2.dr, chromecache_244.2.dr	false	unknown
https://wakeup.baidu.com/baidudict/scheme?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://mbd.baidu.com/newspage/api/getpcvoicelist	chromecache_290.2.dr, chromecache_230.2.dr	false	unknown
https://talent.baidu.com/jobs/list	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://sclick.baidu.com	chromecache_310.2.dr	false	unknown
http://sestat.baidu.com	chromecache_301.2.dr	false	unknown
http://s.share.baidu.com	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://photo.baidu.com/app/scheme?&scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://s.share.baidu.com/?	chromecache_444.2.dr, chromecache_368.2.dr, chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://wakeup.baidu.com/fortunecat/scheme?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://dj0.baidu.com/v.gif?pid=315&type=2011&portrait=	chromecache_328.2.dr, chromecache_276.2.dr	false	unknown
http://click.hm.baidu.com/app.gif?ap=1801081&ch=47556	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://mbd.baidu.com/ma/landingpage?t=smartapp_share&appid=	chromecache_418.2.dr, chromecache_247.2.dr	false	unknown
https://pss.bdstatic.com/r/www/cache	chromecache_213.2.dr, chromecache_284.2.dr, chromecache_441.2.dr, chromecache_224.2.dr, chromecache_259.2.dr, chromecache_241.2.dr, chromecache_421.2.dr	false	unknown
http://velocity.baidu.com/sp	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://sp1.baidu.com/5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif?pid=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://sclick.baidu.com/w.gif	chromecache_328.2.dr, chromecache_276.2.dr	false	unknown
https://activity.baidu.com/activity/felog/log	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://vv.baidu.com/feedvideoui/ulink?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://dj1.baidu.com/v.gif?	chromecache_328.2.dr, chromecache_276.2.dr	false	unknown
https://passport.baidu.com/v2/?login&u=	chromecache_264.2.dr, chromecache_244.2.dr	false	unknown
https://boxer.baidu.com/scheme?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://jiankang.baidu.com/scheme?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://baozhang.baidu.com/guarantee/m/?from=ps	chromecache_264.2.dr, chromecache_244.2.dr	false	unknown
https://dss0.bdstatic.com/5aV1bjqh_Q23odCf/static/superman/img/w_cur-d41911290d.cur	chromecache_311.2.dr, chromecache_445.2.dr	false	unknown
https://mbd.baidu.com/newspage/api/updateuservoice	chromecache_290.2.dr, chromecache_230.2.dr	false	unknown
https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE	chromecache_290.2.dr, chromecache_230.2.dr	false	unknown
http://nourl.ubs.baidu.com	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new_sam_a6c95ec.css	chromecache_367.2.dr, chromecache_309.2.dr	false	unknown
https://baozhang.baidu.com/guarantee/?from=ps	chromecache_264.2.dr, chromecache_244.2.dr	false	unknown
http://sestat.baidu.com/webb.gif	chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr	false	unknown
http://ss.bdimg.com/cdn/testedge.js	chromecache_328.2.dr, chromecache_276.2.dr	false	unknown
https://mbd.baidu.com/ztbox?action=zpblog	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://sensearch.baidu.com/sensearch/selecttext	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
http://sestat.baidu.com/mwb2.gif	chromecache_328.2.dr, chromecache_397.2.dr, chromecache_276.2.dr, chromecache_301.2.dr	false	unknown
https://wakeup.baidu.com/tomas/scheme?scheme=	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown
https://sptidcjp.baidu.com/s.gif	chromecache_397.2.dr, chromecache_301.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
123.244.94.38	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.193.90.87	sslbaidu.gshifen.com	United States	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
103.235.47.188	www.wshifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
111.45.3.195	top.n.shifen.com	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
185.10.104.115	opencdnglobal.gshifen.com	European Union	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
104.193.90.80	unknown	United States	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
220.169.152.38	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
113.219.161.38	unknown	China	63838	CT-HUNAN-HENGYANG-IDCHengyangCN	false
183.240.98.60	sestat.a.shifen.com	China	56040	CMNET-GUANGDONG-APChinaMobilecommunicationscorporation	false
220.169.152.36	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
171.214.24.36	opencdnbdcharon.jomodns.com	China	139220	CHINANET-SICHUAN-CHUANXI-IDCSichuanChuanxnIDCCN	false
113.219.142.36	unknown	China	63838	CT-HUNAN-HENGYANG-IDCHengyangCN	false
39.156.68.81	hector.baidu.com	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
182.140.225.38	unknown	China	38283	CHINANET-SCIDC-AS-APCHINANETSiChuanTelecomInternetData	false
182.140.225.36	unknown	China	38283	CHINANET-SCIDC-AS-APCHINANETSiChuanTelecomInternetData	false
111.225.213.38	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
185.10.104.124	unknown	European Union	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
104.193.90.94	opencdnbdimgtn.gshifen.com	United States	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
123.235.31.48	bcstobos.jomodns.com	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
119.167.229.38	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
60.188.66.38	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
111.177.8.38	opencdnbd.jomodns.com	China	136192	CHINATELECOM-HUBEI-XIANGYANG-IDCXiangyangHubeiProvince	false
61.170.103.36	opencdnbdsimage.jomodns.com	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
218.94.231.36	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
125.74.42.36	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
58.42.14.38	unknown	China	139203	CHINANET-GUIZHOU-GUIAN-IDCGuizhouGuiAnIDCCN	false
103.235.46.96	unknown	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
118.212.230.36	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
222.216.122.38	unknown	China	137693	CHINATELECOM-GUANGXI-NANNING-IDCCHINATELECOMGuangxiNannin	false
106.225.194.36	unknown	China	134238	CT-JIANGXI-IDCCHINANETJiangxprovinceIDCnetworkCN	false
42.101.56.48	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
125.74.1.38	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
182.61.200.222	eopa.n.shifen.com	China	38365	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
183.61.177.36	unknown	China	134763	CT-DONGGUAN-IDCCHINANETGuangdongprovincenetworkCN	false
103.235.47.212	mbd.wshifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
45.113.194.250	passport.n.shifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
185.10.104.109	unknown	European Union	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
116.163.33.36	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542033
Start date and time:	2024-10-25 13:26:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.baidu.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@25/441@140/42

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 216.58.206.78, 74.125.133.84, 34.104.35.123, 172.217.18.10, 142.250.185.74, 142.250.186.74, 142.250.186.106, 142.250.181.234, 142.250.186.42, 142.250.185.234, 172.217.16.202, 142.250.184.202, 142.250.186.138, 142.250.74.202, 142.250.185.202, 142.250.185.106, 216.58.206.42, 142.250.185.138, 142.250.185.170, 199.232.214.172, 20.242.39.171, 192.229.221.95, 52.165.164.15, 20.3.187.198, 13.85.23.206, 131.107.255.255, 142.250.186.131, 216.58.206.35, 142.250.185.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.baidu.com

Source	URL
Screenshot	https://top.baidu.com/board

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 202 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6617
Entropy (8bit):	7.961654715497248
Encrypted:	false
SSDEEP:	192:v/ECalepd7UEuagpUtRVpZ6oSJWme7VJ07qAwHiOyM3xSvTm7:3aopdvxI6RVpcoaWBL1AwHi/Tu
MD5:	6C825ED7EA4CD25657288AB4F7D0227F
SHA1:	159D18C3AE69681973E81BDB0A7E0E786B2EC310
SHA-256:	CCA2EF55292662C7224F99F750F8E651D1E9B73DA299E8FEC6C741C1390C5F9C
SHA-512:	5DE810FFB2E1908A3A63AF6BAD3333DA45DF83EBE18D463A8A858C91A319B1B11401EA3E899E6EA1106B134E74BC7593A6878DF0CEDCC11130D2E96159138261
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......B.......I.....sRGB.........IDATx..].\|T...w..E...!..."Y.J..hE.....b....U..G...V....H..Y...Y..ZE..l....'...I.QE.....!_.u...Mv.w...nv..;?.s.33...s.c...-.[...l....%`K....I..P>'u6.1Z.3q..k..k....@b\|...55u..c..i..R6\|.4.%`+.u..Nq.y.....(..G#/.'...Q.g.6...0..........2r.#.,...@....G(...y...(y..'.6.........@.....+........l##.t]:J_.$..44T....aI..........'Q.....<.B.....(..Q...O... ..`....O....O~.Y..h..j.B........j..0e#.j.RaP..j......xn$`+Jn..2.....6I...R.a...Qn......^..o.'.a.m..CxZI.....U..M.58....l........f#...4.<N.4.}.....fsci....25)j.U....<....V..~...Z=..b.%....W.W}.&.M.%.oF..hl.u..>...v.d.D."......W=.^...V.PJ....$`+.99...%A..M%.$/'..C.....ZF.V....%M.....${@Q.8..)<G._.(....)...=....K.V.c.X.B.!B..JB.UjEaN..*;...Th...lE1%&sD...Q..M...f[.^.h.x`.....\|.a..4+.[Q.J.<...I.(a.<..f.+UG`.oK...)v%...7...YI..U..8......T.#U.&}.a.... ..i....0'&.D...&-..12O.....7..W....:.u\HQ&EE.nz....+...K k/M:..7...p6..W.J....@.CI7l.'.%%w..T.....^`."

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4162
Entropy (8bit):	7.949621116850682
Encrypted:	false
SSDEEP:	96:5+eNWlYOwo6shijZVdrormN0Sw6RmLReQoAqZwyE8L9McZUfA1:5+eNWWjsoZVForm26RmteQ+P9VUY1
MD5:	6C254EA59251EB387B0198A9257FE14D
SHA1:	CFF1AEF6ACF39F50343ED7BA9AD572BA2704E741
SHA-256:	F8E747AC07C820FE89DFE4BD0ABEF1EB7B077280C3ECAED4259B87B4D46E88C6
SHA-512:	23DC1F0D6D03BFBF4F345532DEB63120143F73654A00F6BB66939F8376C0597A70B5225CEFCF15FC4D3329FECB4AC23B3A5B798FFC49197A87EACB237339736E
Malicious:	false
Reputation:	low
URL:	"https://gips0.baidu.com/it/u=1516704641,3495705331&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108"
Preview:	RIFF:...WEBPVP8X........k..k..ALPH.......I..I.5...L.&..@ i...""upk.V.......i....d...P..w8c..}....`.m...{.%.U.q.G\)..233..,.......L33333WilP..]....u".s....QD8.$)h...@f.../ ..QQ...........q.\?.lQ"..a.x...q...kH..".P@.3.............o=.\.......;.6" -..oW.ez.tSDe....oW..[.........\1=.....T....v....DA.3}..S#..".3...S..q.[)l./..SS.Y?.f.i....:.]....L.<...S.~....?}....^.0[....~x.:...k,...O...~.O..\|`wb.....W.y....C.....V..[...s.......)......K......l..s.9g./...#G.&./....R6..v.3.6.~>2....f....c..D?....Q...KA.......n>ba......?..Oz....~..u....Q"8.?>...m.....+Wr..1z...j.......;6.O...@...y......L....<y.i.~.....q.......k...$.U......B)@YbcO.r....APg8sV(..a..G.... ......f...]j.3..%..=c.A.H..j9...E..R...O.g.Wm..."..P..`.I?,..!....&.}..-..b...t....05..).....DW.b,.^..Bm!}u...C.\|.....V.Ze7...)qb.S...Q.quS.c.4..9...x......0L..\..f.....~...w......qi..Hd9][u......d.UZ.../@"$...h`m_]W.u.w.o}.0.E......Pd..8.........."...C%..+.T.0....b7R.6..9>..z.D..

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 74476
Category:	downloaded
Size (bytes):	26433
Entropy (8bit):	7.991040111693482
Encrypted:	true
SSDEEP:	768:0rp3ZuDL9BJl1FB4OtCf9dO3b1oA/35XNMa:0rns9BJl1FV4fLyoA/1
MD5:	7FACF5F8B242A7592A672E50101EA6B0
SHA1:	096452986A697B385EF9C4E0371C86A01E3201C2
SHA-256:	0F9276B5B99FA7C9610A987DD068B4CE234F2BAA0E975EACFF5EC4E9B86CB0F1
SHA-512:	AD1BFF814F81BB165439618C542A0776B362D8FC9D20328B07B92A6D650C0641049CF10024548754D7A5BEDC77D77FED27FEF86702C8FA6B052717834522C9DC
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/bundles/es6-polyfill_388d059.js
Preview:	............v.H....OA.Y@..H.".b9m9.U...AV.BdP.M.L..".Z}....~.~.{...c@..e.Y.t.@...w..S..Q...A.%.+..{t...b.;A.?LE2...i..Y.....E..:u..&..&...^....Ee.FC.m.7.\|tc.Ke.n>.2.t.Z.e...iD=...../..:..\|..5.0.0.N..........[..rWx...s..(..0.......4....vF}?N.$u..ir.e"....v%j.....A....(D~..Q....hDu.q..B.k..../...\|...p".A...n..L..I4..<.I..b......`.d..n".4.F{.A...H..x..{....V.>7#..Z.Y6....[..y.2.......]k>n.......f.Q4..x. .nb.(..r....wK..n.qk'....zh+....c...L_..\|0vG.]..U..[..k.-<.....G.K.K..i}^S5..a.9&lIE.Ln.U.\|\..LLF-./I...d>.XD.'!..I+......W.MC).6...9I#..2...S.....).......cW...\g...B3{.!!.bTe....,k...q..FC!b.z.._..Fc=..89.S.Y..$fQ..^ ....@cZniUc..(....%d.?./.....c...0t?'\|...0=........\,...q?..L..e..X..z...(.D`..s7.%l.......F....i....D.e... ..Yt#.Y...<A.....\.v;..x.@f^.......CT..,:.k.1.%a..6....f(......?.d..1...u...2..L.R..%>.-e+...A.{K#...../...Q.Z.QQ.....zd.......H..Y0.D.Y51....5.^..b.../........k~c#j4..h..P/.g.....B.(V.Z...Y1o.....b.g.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	6451
Entropy (8bit):	5.151269431237994
Encrypted:	false
SSDEEP:	192:sF9Nmh5w/9GqXGFkO1pH4iOA8Z20lY5/ay4:sF92gvE/p43rKwy4
MD5:	12DBF9FB6D608609F31753654D61B30A
SHA1:	432EE3032501BB0830ADDF2AED05A936F8B1C093
SHA-256:	FD7678FC3006B4F158D4F05778F379CB8D7E7B614EAF5EDDDD2FFED00E400B0D
SHA-512:	C3B33F57FC2A79B3DC54792CF36221E968B873FC73911CDFF88198B066D6F3098A64B41DCFC40E83DDDB56ECBC19EFC8EA709712F12DD35144FA40820A374526
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/content-info-12dbf9fb6d.js
Preview:	define("superman/components/content-info",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.ContentInfo=void 0;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false.;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{.obj[key]=value}return obj}v

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (862)
Category:	dropped
Size (bytes):	1329
Entropy (8bit):	5.212477194614991
Encrypted:	false
SSDEEP:	24:eniVps/BoAS5uI/WRWU0yFRXuh8fuDs0W5p4eiX5qxam5q5Avt2/iLHLG0Greqpe:xsZzSOwU0yfEs0W5SeUGvwQzGrc
MD5:	3352C9F1871F6F783611644471379561
SHA1:	FB09693EA23D9DDCF9411982FC316EEA82E732CF
SHA-256:	180A4E25FD5D64D51294192BD49769B9A644157DF1D8512D6392796AFB52C161
SHA-512:	3C781566670174B8B53E8FFCEFBE288FD6A73AC42748B868E81A9DEAE0B5B63ED95D75261FC62224B6FEB82BBEA1A3290CE837353A578419134107A23788AFBD
Malicious:	false
Reputation:	low
Preview:	define("@baidu/prefetch-app-data/index",["require","@searchfe/user-agent","@searchfe/promise","versions-compare"],function(e){function a(e,a){var n=new URL(e);for(var r in a)a.hasOwnProperty(r)&&("object"==typeof a[r]&&(a[r]=JSON.stringify(a[r])),n.searchParams.append(r,a[r]));return n}function n(e){var a=document.createElement("iframe"),n=document.body\|\|document.getElementsByTagName("body")[0];a.style.display="none",a.src=e,n.appendChild(a),setTimeout(function(){n.removeChild(a),a=null},0)}function r(r){var t=e("@searchfe/user-agent"),o=e("@searchfe/promise"),i=e("versions-compare"),p=window._na&&window._na.isSupportSwan&&window._na.isSupportSwan()&&window._na.getSchemeHeader&&window._na.getSchemeHeader(),s=p?window._na.getSchemeHeader()+"://swanAPI/prefetchAppData":"baiduboxapp://swanAPI/prefetchAppData",c="_bdbox_js_prefetch_app_data_"+Date.now();.r.netconf\|\|(r.netconf="1");var d={params:r\|\|{},callback:c},u=a(s,d);return new o(function(e,a){(t.isBaiduBox()&&i(t.baiduBoxVersion(),[11

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	1265
Entropy (8bit):	7.706925263725265
Encrypted:	false
SSDEEP:	24:qh/i5jSxy+nQryeYpq2ALI1+cOU0XlkycR+Qs71Iiq1v53jsh6rs8Stk:qh/i5jSxyIQrrYwLzk3Fsl2v5oCik
MD5:	DAF987AD02F4984C4E7FCFE42617B171
SHA1:	4A462DE8D070E214629425CD0F7A61C9F2F9C9F3
SHA-256:	1E0D2B1E749C3458897D0492D0D126EB4C1698E2798CF1FA1C63E9E9C5341B4B
SHA-512:	E0ACC1F1E1150EC11FF85712CE3E896BCB7068E4B322CAC7F11A2CE03D5FA94AED5EF930E69212F7D4212A9AC76242EA7CDC6E0F9AB421E7F77A6D31F0E173F9
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/qrcode/qrcode@2x-daf987ad02.png
Preview:	.PNG........IHDR...0...0..... .......sRGB........DeXIfMM.*.......i.......................................0...........0.....7l....[IDATh..Y.r.1...(.C..!1.)...`.\|a...C..]g..\G.........+sn...4.f{..Xo..5..J.~:..F6..X..z?]b^..=>....1v..=..'...D...{.P{...p..&K.%..{.........p.3..B>.}q..D2/Ws}.~H#....g...T.#..A^Y...C......U..E..n....OqJK/z.......z..Z.4....;..kI..:.p.V763A..2...2M.......Y..M.(....X......$....O....J.Bh............b`n&..5k4P.31.O.Y.a0.?...m.......H..FS.K.GK\......'.1.>.HE....8[^..sf^.}......w.<....O..:...!cw>K.^.....5...... ....m`...G.W.,Q......1]....5.9....=wa>...^....p.m8.hwp..P.........Hq<..h..2N...K.h.k..Q5.n/....E...f..]..m.`......"....BTS.e....7...F.;.....mq...........L...x...`..nz\$.LQ.V..L.p^.N.76.e.....8e.y..dH......J\|z...".d.....,SQ..0..........0.8.%N....BPe_.&..4.t.6..'.kGf....A.u.n..i..@....@.............v.>...2...H.....t;...vv..6.X.p...Qc.6pG...\xw......9f..8>.Ks...K\|.y.F....k,ia.1...Q.p...hB&......Q. .6....x

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 108, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2459
Entropy (8bit):	7.629238516422295
Encrypted:	false
SSDEEP:	48:AztZ4MCGNnXVQxLgynTTPzRBwxXSpouRU+DdJdtdQDtSshdhpsmIxIZ+odp:AoMCGMLFdWxXCDdDtd2tSshzCnIZLdp
MD5:	BE99BBA9643C1FF5D281120DC3D9F952
SHA1:	F106F6F7532D668BB50F85CA1EA5521770436BBA
SHA-256:	5A10E4A50936F06B8A5D0A27F343A4653AFD4EF136F86D10384924775DB03FC9
SHA-512:	121A5415707DD5D5DC95E0520237A02E00764255B68CF43CB2B7FAC5E807C005B0F33036125FE88271D78607BF44487B9B90E15DCA1AAEAAABD3816BC3679730
Malicious:	false
Reputation:	low
URL:	"https://ss1.baidu.com/6ONXsjip0QIZ8tyhnq/it/u=3779990328,1416553241&fm=179&app=35&f=PNG?w=108&h=108&s=E7951B62A4639D153293A4E90300401B"
Preview:	.PNG........IHDR...l...l............CPLTE.....V.f..s...U.t..h..r...0.g..f..g..n..h..j...3.g..g..g..g..h..i..o..h..g...:.g..h...?..6..=.g..j..i..g..i...9.q..l...I.z .i...C.h..s..h..n..g...Q.~'.f...R.g...L.g..h..h..v...0.f..i...D..9.g..s...D..O..=.k...R..B..D.j..n...:..;..F.l..q...C.s..p...C..5.v...O..<.o..f...E.v..o...<..I.}'.}%.l...S.\|%.t...T..>..M..S.{#..T.\|&..G..C.m..o...=.~'.{!.~(.g...E.f...3.......R..;..@.f...0.\|%..-....o..u..x..w..~'.k..s..{#.t..r...<..2.q..j...3..>..:.n..m..z"..8..5..7...y .y...+.h...)..C..A..G..D..I..6..L..,..N..E..@..J..8..Q..O..;....................................n..c..^.....y..v.......\|tRNS...........X9.!...qha3.........vPI>9%..........................}oICB0**..............~\|dd\XVK........................jgcE@.......IDATh....S.A...M4&.j..{...{..^. ..@0.`C.&.M..iyoWX.n.E.!3~..n...p..y.V.Z.J..g_.8=e..e+.I.......N_6..T..x.B.~..I.........M...Rj\|Y.....q+I.t.0wC]..).w.FK..A=e.?..\j..O5....N..6.......)8,.Pd.ih.i...#...GeG... ..-...2)..!.k.C....e..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1984
Entropy (8bit):	7.70986526485427
Encrypted:	false
SSDEEP:	48:Iv8amcF0PfKw7l8OobC/mrmXak4U3wFS7iIqtb:mBMKw7lmb4myKwwUA
MD5:	44F605C261028BDD9750BB87F7952904
SHA1:	DF42265D28D1A1B11BC0FC8DC8D44566A2C71513
SHA-256:	5D4405433E1D8BFC86FCBEA011796FA9CD84BA7E8467CAB42551856B03EEDB21
SHA-512:	06C726F25E602407AF014B6017763BACC0D73163ED2FCC976115C76A1395DEE8EF4F723B4DDA02B0AA841FA3AE1D962014367D23CB4F40964CD6AD507AEED760
Malicious:	false
Reputation:	low
URL:	"http://t10.baidu.com/it/u=4123943363,3931750118&fm=58"
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.......................................................................K.K.."........................................E.........................!.1..AQ.."2aq....#....$BU....35DEFRTbr..............................................................!1.AQ"a..q...2............?...F..J.........]..S.Z..8..m.LH.?..)...T:..?...'...&B.i....!$..J3.;......:...7....z:.qR.mM..V..g.......0..C...(.g.u47:sD[.J9([}.=....4..W.j];.........g8)8$...u...ai..i.V...LF.a.>..nw..s.o._/.G.#.l...\_..).Y..I;..mA..D...Q}D..oT.v...8.9=.N...V..q....H...i(.l.@.42.;Z.......w.w.$[.......)$...h ......l..i.+.......J}...JzR.....mM.4.f.)....=..N..u.........4.T.7..g.z..q4>....iXq]..C.(t... ..~T...........Sj.(c..'..5.mr.......GK`..z*..F.v(c.t45..F....s.{&..<..g`~...I.H.;E..n.[..XeO?.'... ..:~8.......J.N..f.c^^...s...:,...~......6.Zj1....{.{.....7.ol.<.[.N....-..(.a.<k.~.h...p?d..D.:..6..I!....E.....<@...

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1098
Entropy (8bit):	7.7414673203510445
Encrypted:	false
SSDEEP:	24:NTTUBR1VbB/AK3dUTYYv5G7M6I8OMXtu3hcahCu/Dm14JEHDE:NTIBfff3izc7q8l9u3hAu/aWJ4Y
MD5:	0FB9A1A1DE3FDEC385B16408E315FB61
SHA1:	9BA6CCC646A9A43A53B2E1094E22C833AC3AFDA2
SHA-256:	C7C44D03177DF99690998EAC2F37E495C3C2592DF2E7883E6727198B712F9545
SHA-512:	277A51E3CEE3100E47A47E721E0DFD1EFAB8CA7E33002EFC4441D6169458B85DD7FCDD195005A9E22A323870F7C814E40229882C51B2AE9D4C48425CD2A1B3BC
Malicious:	false
Reputation:	low
URL:	"http://gimg3.baidu.com/rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fdf23419aa8cd03abf0a4a9f127942997.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=6d06efc9a96a3fa8fb2e737a38390daf"
Preview:	RIFFB...WEBPVP8 6........* . .>..@.......(GPx..o.w8f.w.$...`<.~..........r.....9...%.../...n...W...].....t../...!~.......g.g8....?..J.......-...'...~.....U........?.....o..........\....)j.y......}_._....&..A!....hY.............3HA?....%.Y6..wc.>.-....bk..D..........M..A..y...q.D.H.o.I:........<.3..pu....M.E.e=.V8_....#.....i..1@.3.^.s.F..W..90{.....d......a...........py..:.........x.WgP.N..i.]...Cci.1..EN....J..FjW...0R.wX..g...x8.!......-........2.4.B...Ol..^...Axl..........w...C^7l......(...!.....M...........&..^....@*?.....e..^..B..........<.u'..[..=8.......K...3..]6..ee.BH........'(~.H.`.....'c.).<......vF.!.[.}m.}.n...(..p.\|P.B/...._ ...?.....0g..>.o..>._D.....as.~w.....s..a..~.8.../.6(.....9..d..a...\......#)...E....nI..%..g..XCc_Dg..M.?.[..,9...,X.[.2...t.`.../\...J..?..F..3..v....!.iB....N......7.&.?x.i.6c...H....F.0.+.......IFy...k...n.^.N..3..yiA..@.w.O...q.z^.X9...4q.t.....Pl..q%...o..0..ccQ.....QN5lA2...bF.v.8..L

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 132, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12802
Entropy (8bit):	7.9775089394871195
Encrypted:	false
SSDEEP:	384:krjHfQi+q52GYTH+VLIT1O5sfCQgF/yG3ZVAFFzt:kjH4i+/9E5MI/1JVu
MD5:	25768C84CCAFA2F700D74446E64978F4
SHA1:	BACE9F44F9A2609B57A0A64766111A80B14019D1
SHA-256:	1868167D3777607F62A02A2384A35B95B736C06C5B909421CD5BAE5842B2428C
SHA-512:	DEE72E30AF120941AB0EA82EC5380EC5B7CC13FCD8670351940FFA17FCF34ECC4933EB04482E1B8BA60886A23021C401D8DB10D4E39FDBA3B93F4F90A3CA908B
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/flexible/logo/pc/result@2.png
Preview:	.PNG........IHDR..............d.....sRGB.......1.IDATx..].\|....of....#......n.Q....h..Z.........l..Z.z..C....@. G.V..n8.$$!{..w......3.=.\|.....z.}..~."._....G.#....p.8.....G.#....p.8.....G.#....p.8.....G.#....p.8.....G.#....p.8....@.#@..\|.x9...._..r... .0..T..$....}k..mN5...mu5...9.p..%I.../..ee.../.R.m..8.V".....r.#0gNcQs0.=...#G.S..}.........-..0..i..L.f..#...l.=...B....\|....q.2...P2.q{..(.R.>n.e..t'.}.d.(.?.].~Y.To.....0.I8.c..R....3.}.;..v>N..H?..CI.g.-RA`......GP._.B.?..7.x..O./.\|..l&......y......vA.Q...s&.@. ..J.<.n.v..,`.....+9I;WlJ.....q_.;W{j.T.."..&.v.X...Fms7..,V.O...;.......u#PY..~.[..;.;1./.%..j..5.\|...E..F\Fe....6.q.W...;..q.......#......63..Rj.....#.,\.D8.'.s&..ltD...7....y8....w(..>......%7hf.N......,.,..u[\|?.3...O....&.n.YQV5.<.#....$..gN..UUL ,..}KZ....0...=e....).7...E+..3.s...s.LD.;....A..7}g..~.5.;.2..X..v}.......UzN.......~E.;.~..+...I.3....9.^Q..F..d]...O.....;...Cu.pR.@."..J....!0a.o.BK....GX.F..E.J..V.......

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (474)
Category:	dropped
Size (bytes):	1022
Entropy (8bit):	5.250583358652288
Encrypted:	false
SSDEEP:	24:2QWyxX3MpRRL/sqhnnqsWUXipRRlt4boVIwm0GXbmxcK1KCUcfK1XnaCFXTxU:myxHMp0qdnZWUSp43DmxcK8C/KFna0FU
MD5:	3FFFAE8D606970854D942B26E5E279F7
SHA1:	7D1DD2906A56E5D9B59D9A04E7B158C30304E580
SHA-256:	2A10F0DAEA88983E117607B8024F75AE8163FC3AE0B10945C2AD6224F3B27070
SHA-512:	D3AFA64BD8C29F8D9E38CA786C8FAE9A793A292C7060440D13532A254AC92E7DAE762EE625DA7D434D8A55C433B058603BD793B8F460154BC51EFEEBC5EBD08B
Malicious:	false
Reputation:	low
Preview:	(function(){var samNewBox=bds&&bds.comm&&bds.comm.samNewBox&&bds.comm.samNewBox===1;setTimeout(function(){try{var kw=document.getElementById("kw");kw.focus();if(samNewBox){var btn=$("#su");btn.addClass("btnfocus");var form=$("#form");form.addClass("sam_form_shadow")}kw.parentNode.className="bg s_ipt_wr new-pmd iptfocus quickdelete-wrap"}catch(e){}},0);setTimeout(function(){var kw=document.getElementById("kw");var ua=navigator.userAgent.toLowerCase();if(/ipad/.test(ua.)&&document.activeElement&&document.activeElement===kw){kw.blur()}},0)})();.$(window).on("load",function(){var rand=Math.random();if(rand<.01){try{var baseUrl="//www.baidu.com/nocache/fesplg/s.gif?log_type=hm&type=uamonitor&";var queryString="";queryString+="&c_ua="+encodeURIComponent(navigator.userAgent);queryString+="&s_ua="+encodeURIComponent(bds.comm.userAgent);var url=baseUrl+queryString;var img=new Image;var img_rand="_LOG_"+(new Date).getTime();img.onload=function(){delete window[img_rand]};window[img_rand]=img;img.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	4325
Entropy (8bit):	5.138029228496405
Encrypted:	false
SSDEEP:	96:o3H/ePdAZE9TfdHyZvZaIO9qjgKdiV5ZgS6vf:o3fcAS971ckMiVwS6H
MD5:	2E8707E357621351A1E8CDF95C9F85E3
SHA1:	2E64675644CB3D9ACAD8842654781A2554013411
SHA-256:	7F83EB5AC836F4F0C1B260151273F2C13539FE81E7AA8A75175551CF769385FC
SHA-512:	34F733653ACFF9F5FCB85FACC943F90BF05FB84F022F67E5A48ABE4E953588A969D84162719740A7384786C3A682EA63C76C5817EDCFE24C026A64527ADE55EE
Malicious:	false
Reputation:	low
Preview:	define("@searchfe/underscore/src/index",["require","@searchfe/assert"],function(n){function r(n,r){var t=n;return(r\|\|"").split(".").forEach(function(n){t=t?t[n]:void 0}),t}function t(n,r,t){n=n\|\|{};var e=(r\|\|"").split(".");e.forEach(function(r,u){n[r]=void 0!==n[r]?n[r]:{},u===e.length-1?n[r]=t:n=n[r]})}function e(n,r){for(var t=r.split("."),e=0;u(n,t[e])&&e<t.length;)n=n[t[e++]];return e>=t.length}function u(n,r){return null!==n&&void 0!==n&&K.call(n,r)}function o(n){return n=f(n),n.shift(),n}function i(n){var r=[];.for(var t in n)r.push(t);return r}function a(n){return Object.keys(Object(n))}function c(n,r){n=n\|\|{};for(var t in n)if(n.hasOwnProperty(t)&&r(n[t],t,n)===!1)break;return n}function f(n){return n?H.slice.call(n):[]}function s(n){var r=o(arguments);return H.forEach.apply(n\|\|[],r)}function p(n){var r=o(arguments);return H.filter.apply(n\|\|[],r)}function l(n,r){if(w(n)){var t=o(arguments);return H.map.apply(n\|\|[],t)}var e=[];return c(n,function(){e.push(r.apply(null,arguments)

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	6444
Entropy (8bit):	7.899124764131159
Encrypted:	false
SSDEEP:	96:ghCyEtxM1CP/np81JKTLqZjIxEHdt+SLDPRrfQuIHVZtUJ9invho4U+:mChu1CP/0JOLqhIx+tbRrYVZtUvinX
MD5:	4746F3F220C04503106C8C9A74C6C558
SHA1:	A1D2347ABF2D74D069DF85F3CE07FA339E42073A
SHA-256:	9A56683BA66AEF5D015D2BB94A217B9A5A1D103C84E526BF854C5754E15242DB
SHA-512:	3850D19F2135C5D490CD506A095069F340545FBE9A0FB2DDE877120AB3C059299F5868DCDA86A5084335D4A159B5E507F2B2325C685BB2D114D21992F73E8EB9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222...........".......................................@.........................!.1..AQ"a.2q....Rr....#34Bb..$6TU.s.................................3...........................!1Ra...Q."2Aq....34B..............?.."".>,""...." ...""...." ...""...." ...""...." ...,rO.G.w>.d...FW..7d...v..^..p}.nP...:V....{.8U.........C.~..~o...g_....E..X`.$...,..m.5.....u..q.Q...z..3.y.}..<.>...VWv.h7..:Q\Xs....XI...2pp=.RSj.t.....E...u....45...;...wM'......ty.o9...'.......y...G?O<i.\|8f.C.........s\.....K...2.F.I....2..%..n{C...nn...\.q.Q...WG.[....y.}..o...>5..Y..POHO,....R.1..1.....;\|...{I.x.o.M.Of..o.......ZrG\|z.wI..G..5].ek.C.~..!.?E..P.M..oO..dt.........`s..].0U.^.}.B.t.3E....H.$...sN..s....M'......ty...9...'......^..c].O./i.2xU.:.......i8hhs..8!.......Q......M-G......k.............2..!.?D.......~.;.:R.tf...,.....k.Z...

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (961)
Category:	dropped
Size (bytes):	9216
Entropy (8bit):	5.4719684931964885
Encrypted:	false
SSDEEP:	192:HhywzzJagwfwIC85cZLLy7yK/vWI1vCygDiggLD5BEsqQQWVj0og63p:HhywvafzC9dy7yMWIdCysiVLD5BEsqQF
MD5:	0178953914F94A1C0D556BDD0C66AD4C
SHA1:	BB433E57CF5F197D61929C76033EC60F81932C48
SHA-256:	FC727C5EE9EE4B1B181EA4F28F4545762A005B47F4EB72D8EC1CFC077A6E73FE
SHA-512:	8175E489C04DDF746F50B0678212A77261EA7D029D30D3403BA411C44C99E167FF89F9E587B910B8EAFA39EB4DA30B2114A1B271A08BB27812C1F03A8ABE32BC
Malicious:	false
Reputation:	low
Preview:	!function(){var e=function(){function t(){if(!X&&document.getElementsByTagName("body")[0]){try{var e,t=g("span");t.style.display="none",e=R.getElementsByTagName("body")[0].appendChild(t),e.parentNode.removeChild(e),e=null,t=null}catch(n){return}X=!0;for(var i=H.length,a=0;i>a;a++)H[a]()}}function n(e){X?e():H[H.length]=e}function i(e){if(typeof P.addEventListener!==O)P.addEventListener("load",e,!1);else if(typeof R.addEventListener!==O)R.addEventListener("load",e,!1);else if(typeof P.attachEvent!==O)b(P,"onload",e);.else if("function"==typeof P.onload){var t=P.onload;P.onload=function(){t(),e()}}else P.onload=e}function a(){var e=R.getElementsByTagName("body")[0],t=g(x);t.setAttribute("style","visibility:hidden;"),t.setAttribute("type",M);var n=e.appendChild(t);n?!function(){if(typeof n.GetVariable!==O)try{var i=n.GetVariable("$version");i&&(i=i.split(" ")[1].split(","),Q.pv=[w(i[0]),w(i[1]),w(i[2])])}catch(a){Q.pv=[8,0,0]}else Q.pv=[8,0,0];e.removeChild(t),n=null,r()}():r()}function r

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.1173875029350615
Encrypted:	false
SSDEEP:	3:YAf9OHrC/HHkLv3ZhEY:YA02/nirx
MD5:	3B813BA614F62B7D4A44615A2743E565
SHA1:	96C485A4A87C0CD8B7E52F67F3284A2C19EAFA89
SHA-256:	5751D0EF34F4491F23BFC120A5B085FE7854C64C0CB60EA97C5717B9B9C60C75
SHA-512:	3D5DF42E6B54FD9B88FF6295711835E56BB1E822C48D6CA0FD643B12682E3BB6EF033E500407C737CABF983C5FA315FFD0EF05FFF87CE9DB8D80526B1EA62B06
Malicious:	false
Reputation:	low
Preview:	{"err_no":0,"errmsg":"","queryid":"0x60f4dcf0c04dc0"}

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	4.720616141486747
Encrypted:	false
SSDEEP:	12:P6krtMA6kXakA/kCkWkW9aCA6k7bacdBN0/np:gXkTCWmnp
MD5:	D600F57804631038C658B4056D63812A
SHA1:	46E251BD98F509F6AB1BD7D1677E659877D2A7F5
SHA-256:	E8F727AB350843617D0AC285C439DFF120ABC053587ECFCF54D3B4655846868C
SHA-512:	851BE8477D5D07A539D010C710718BDD01CE35DB20D4A4F58E25344AB91C61A5BD4EF3BCD8EC031174243C1C3AE8283B1F712078F6920BD62BBEEA0FB39402A5
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/css/ubase_sync-d600f57804.css?v=md5
Preview:	.sui-scrollbar-container{position:relative;overflow:hidden}..sui-scrollbar-bar{border-left:1px solid #e1e1e1;border-right:1px solid #e3e3e3;border-top:1px solid #e3e3e3;border-bottom:1px solid #e3e3e3;background:#e3e3e3;width:7px;position:absolute;top:0;right:0;height:100%;cursor:pointer}..sui-scrollbar-slider{border:1px solid #e1e1e1;background:#fff;width:100%;left:-1px;position:absolute;cursor:pointer}

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 520, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17545
Entropy (8bit):	7.794920805518076
Encrypted:	false
SSDEEP:	384:G3bGLYZz1BCURttbcfrgHcwVS6DjPmO7/MQ:GaLY1xNwDgHHVSO70Q
MD5:	441E82FB1178A614395C404C341BF82B
SHA1:	4ECCE8A8CE5DFDA72820DF3D1510C205309997E2
SHA-256:	5A6353629F5CC6FA9AA961479CB4839B9E360E44E7238DD60801D5ADA0EAEBFE
SHA-512:	97AE56AC9CE166A505B3AD64F6976E101BE75C8B84B26CEA7E22DE21B3587745DBC8FF636CF71FBDA415A2C897D627B9D61742734AD675F96AAA905B74E5D86B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/global/img/icons_441e82f.png
Preview:	.PNG........IHDR.............C.......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:15427070C01611E997F8F7D4A2260468" xmpMM:InstanceID="xmp.iid:1542706FC01611E997F8F7D4A2260468" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.did:0180117407206811822AB27EAC483B70" stRef:documentID="xmp.did:0180117407206811822AB27EAC483B70"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.b....PLTE........................................LLL.......................8...?@)2.z.....#..@...........K..e...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 13180
Category:	downloaded
Size (bytes):	2660
Entropy (8bit):	7.916308286891262
Encrypted:	false
SSDEEP:	48:Xn4w9Y83oK2DK58UoyoXtBTBi5LmAHZ6P8/+b2MPqZ5XXefRI8lGYcx4akx2UNG:34wSx1DKSyo9hBW5HQm5+umMk8U4
MD5:	A631A0615443F89AAB70D61B32E071B7
SHA1:	8623A4FF1310B515E3A1DCEECE1B6D274B8BB397
SHA-256:	C3814AC88189B68ABFEF1C51BA388AF66A7CCBD2938314626A3914833AD0831A
SHA-512:	F1DBE62361AAFCF7588EA60B568C6CC36F0FC9F234BCB938B3303F6411B82E55906875289A3603C3915D6FB201F7169B8A5D6951349B5AB12E8837959254A997
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new2_e1a824c.css
Preview:	...........Zk......S(;.....I..D!?6.........H.....>A~..{..&.G..A...jF..................E.v....u..oQ^.......w.i.yyn..6.."Kp..^.._{.....7..z.....iZ6....=..h./.HOeQ5(o6..7Q..M..MS.....}CE....6bni..9vvY.?o........&.1r7..".8T.Q;..,M&.x.?....i.y.y.N./..&.....]._a..~..MY.."...97x.........#.....".Qak...w(~>T.9O...~?9W..c..lV..t...j.x...Y5.\....G<c.g.Yz:..'\.m./. tC..O...i..N.K..I.....wQ.wN...w..<.C.....].L....2............_N%>W5...H..T2.D..+.!i.-$...wU....5...<.>.~...._i[~.c0]v.d(....N...........S.N...!.Y.a..U@>m...T..~..ToS....Z.y....t......o..B...n...\T^y...MS..i...c.=91...k...E...D.4Ip.r....yE..2.e.!.H.iM..W'/N(.....s{l..k*..%.Hx.Ox./.s-..].X.=.....x..kB.:..+_..2!....=I.7/_f..'?........y.".6t..1.]......N.DP..$.....S.Q.n.Y .\.\.J.....s..?.!.58.N....e.\...k..+..M...[...D..9....~ixLst.l.u.x...5.(".7...NgnF?Y.....-;J...c..$..gi ?1.[..\|..U..W...S.QBv;...(p.l.CK.~. tn.F.]NM].K..S.\.....H.oF\.....$...f...q..jj..Q`R.U..s..A.sW....sO>..gsWN.?....@.&..:!..<..s`s.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1428
Entropy (8bit):	4.338373724873334
Encrypted:	false
SSDEEP:	24:t3zBuXMMo7sD6YAHWEwOfZiPQ47a3m447H5RHcNIhTFONnUQIsy4VtxY2XeQpAH2:VdY6qJ2Z9Sa3qXFOJhdssea
MD5:	173B723968988F1AB2A9D932B9280274
SHA1:	019DF0F82611D5C103C58517E72C7911D19F3036
SHA-256:	D930A5FA89BBEE775D45276259DE28EB93D001B87453167F536D0B9E79674A5F
SHA-512:	BCD2931EB2F104EA11EA129EDE428510B2230F0F6BB90B4CD6D7A3AE8A4FE0429342EC18E5E284755F86F919A1A96921E624192E3471CAB4F04BF30506A3F82A
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="12" viewBox="0 0 14 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M12.6054 4.94336C13.0152 4.94336 13.2201 4.94336 13.3745 5.02779C13.49 5.09099 13.5851 5.18601 13.6483 5.30158C13.7327 5.45598 13.7327 5.66088 13.7327 6.07069L13.7327 10.4266C13.7327 10.8364 13.7327 11.0413 13.6483 11.1957C13.5851 11.3112 13.49 11.4063 13.3745 11.4695C13.2201 11.5539 13.0152 11.5539 12.6054 11.5539C12.1956 11.5539 11.9906 11.5539 11.8362 11.4695C11.7207 11.4063 11.6257 11.3112 11.5625 11.1957C11.478 11.0413 11.478 10.8364 11.478 10.4266L11.478 6.07069C11.478 5.66088 11.478 5.45598 11.5625 5.30158C11.6257 5.18601 11.7207 5.09099 11.8362 5.02779C11.9906 4.94336 12.1955 4.94336 12.6054 4.94336Z" fill="white"/>.<circle cx="12.5389" cy="2.01743" r="1.45786" fill="white"/>.<path d="M7.41734 1.96311L10.8894 11.2507C10.9442 11.3973 10.8358 11.5535 10.6793 11.5535H8.97243C8.73696 11.5535 8.52658 11.4064 8.44577 11.1852L5.8259 4.01485C5

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 144135
Category:	downloaded
Size (bytes):	52375
Entropy (8bit):	7.992876098663769
Encrypted:	true
SSDEEP:	1536:fqDsjfr/15DzArbgrm1vX1wqPc5UwPp/sN3KBVTTdhH:fuy15Dsom91wqAZPp/sKTTn
MD5:	3052DD014EE6F301EA045096C72373F4
SHA1:	7150124369C0E3840C0F53432E62F76CF08B4491
SHA-256:	CDD95295D5A7BAFF3005CFAED26DBB485F2830C8B81ECA1789C2BB0C6B78E5C3
SHA-512:	6FA57BB577D259C59F226A1EB35100737A750DCA86443742A015C9E8C3AA222AEA6CAC8BFFBA87F0CDA5484C1F2113ECE0385A0B8303D2A451D1E64C603494F8
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/aging-tools-pc_63487d8.js
Preview:	...........iwSW.7.>.B...F6.m&9.......T..T.ay... $.$C(......f.<...1..6."U+..}5.......{. .NR.._..`.}...>...#.....u(..M.....R.P...^..W.+............B~....(.W.b...&.i(f..m..xi..!Q....b.....r..9[.U3...O.....TR...&'..P...g..xU.MV.^.N(..Y...M...w.onz.8it;...&T....Je..6k.b..r~.j..c.R%.f...t...T......[7...K.Z.......].VK.~.W2..Y.LG$.U...+v........L&../....r.Z.b..oi..+....;..hq.P.d...X..%V...>P%.,.K.>[,..1..f.\.M(.!...J....UK...'.._.oD.`2x.Q....I..f....b..Y....>{...6..i...>..L>.k+......`.X........V&.\|..X.4^.(m....&..$....D'.a}i.x....... .;.U./}0S....c..)+R/:.'c...D....\.4..L7.P.1I.-g.....-+..Q...8......7tV.M.l...i[!.R...)y]....Y..f.7.t.~_..dVZX.4 ..5vf.d..:Sz..;SR....$.C......;..\|..l5...3Y.G\...U.Y..c.J".......d.....=9..^.).S"D.................x59.!..\..b].e...!4.~..NfD..K .>b..j.}.Y.NT#.....IU..6..+..6l.nY....M.....c.Z.....ia....D..g..].Vs...~.rF.?.....LQ......'Y.X..Dy.~[!S....erj....p..Y.I.T....+v53Q..X.7...z.....EDl..._....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2520 x 474, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	625636
Entropy (8bit):	7.967940373726445
Encrypted:	false
SSDEEP:	12288:82Px/Uzy6DUXFEDY1qRYQo/XRFJdCU6lSdkeg4bnc4IV3NiT81WgffFnczxXx:82PWzrD8FEIWYQofJpAS3g4wpbiw1ffo
MD5:	276B90EE4FD8076E921E0600BC128A6C
SHA1:	076C23C14951533BE36BCF02E6DF0693161E8888
SHA-256:	30A92088429BF42F6A569725B76C6E32D8C29469874AE1EC0E7B647BAB7CA75F
SHA-512:	7D08790AFB954ABE7D391A7450FE30AB77B46E9161467140B17A3617BA01EC3007604E1804D8AAF6B26885556A20D133FC2380D2582B5D11F963B7AC5DB2600A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................IDATx..........s....X.J.\|.-_.c...~.~.~.....]r....{M..0....Ar.LU7s.\.d\......_._.O..TE....(..`\|.}....6....<.u.g.y.1..n[.....CC.%...M....?..E@..h...Ta..".`;.A4m..>...A.P.\.E(.}.43....(.l.t...7......g..1.;hI.y......`..y..9...M.@`.S.sK..U.j..Q..P5.?w.RV.Oj....6....R7.z...~.6.b.L.xN.s;M.5. ......#Y`,F.@f[.NF..Y...7_....j.N.\...(..Y?..C<)...s.3]...>...r.u.L..3P....Hf.L.g.K}I._Q.+.vW.]]C...9......2...g...H......\..w..E..)..-......t..b.K&.5..tG~..a.....ap\|.......-6........o....u?.T.]...$.......2@.i.......s.<.E.LmE.B..(.W.0./&!.....+.L..:k....S~e.w.....7./....y.y..rb...g..j....h(.\....V.H..@....w..^.W'..C...["....2.o....!d...E_.._....<Qk..l.2u..Sz6..!.\|.u.d'.a] ..B......7....g...l*b.$.d.....S.......[..[....?}l.f...e"..ki/.u..{....E..S...<w..oo".Md....`.@x...}...W:p:.V2..(...?........1..].o..........

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.131494784687762
Encrypted:	false
SSDEEP:	48:AQvP5MqBBth7zIWHQNGbkf4EIyB6anF9Mu6gNtwDeHyhQMzl9bPe6M:7P5BZ7r+5UwF9XtxHye56M
MD5:	75D53505189528B98177F7441EF4EBB4
SHA1:	F197B8F12BB575A21AEFEE4ABDD29D002AF23069
SHA-256:	E9BCDE96D0B9B312E2E239BEE457A8A2205BEB32D779DC52D8A9D8378C689FE5
SHA-512:	82739CF224785A8BD0896EC8EA7B8D047C417707BB3C0E6B917D9DEC47E9E76AF95F7D633692509C23C49E9C359FF42645D58995741745DAD34FE6A642479671
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/csaitab-log-75d5350518.js
Preview:	define("superman/components/csaitab-log",["require","exports","superman/components/ubc"],function(require,_exports,_ubc){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.CsaitabLog=void 0;function ownKeys(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){var symbols=Object.getOwnPropertySymbols(object);if(enumerableOnly)symbols=symbols.filter(function(sym){return Object.getOwnPropertyDescriptor(object,sym).enumerable}).;keys.push.apply(keys,symbols)}return keys}function _objectSpread(target){for(var i=1;i<arguments.length;i++){var source=arguments[i]!=null?arguments[i]:{};if(i%2){ownKeys(Object(source),true).forEach(function(key){_defineProperty(target,key,source[key])})}else if(Object.getOwnPropertyDescriptors){Object.defineProperties(target,Object.getOwnPropertyDescriptors(source))}else{ownKeys(Object(source)).forEach(function(key){Object.defineProperty(target,key,Object.getOwnPropertyDescriptor(source,key)).})}}return

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9216
Category:	downloaded
Size (bytes):	3883
Entropy (8bit):	7.948819599131649
Encrypted:	false
SSDEEP:	48:XSCHFKf9T+UPTVvYWWGLOTEXi5J2Aah+RmIDzOJnqhLxQXI8Oqcjt4xz+wma4R6a:COFK1TjSWWGQGXq/OncLQq7YUyo4DC+Y
MD5:	AF3DE5295090F8F262ABF8F4968BC9C3
SHA1:	ED9B3FBFEF995E3B1B69B4562C52E67AB422BE08
SHA-256:	C7CC79A0FC41F5C90A559DA9F6102462DAF78906A56F4C670908754DE80310C9
SHA-512:	256DB06BFCEDCB83BF4FFFDFCC7B587D66FD696A1FAD32CB3F1A7104299F5F6A6EE3F51C043ABA8BFD19DDA038EEA744E025D4F593B8322C47A567B86BB1FEE6
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/plugins/swfobject_0178953.js
Preview:	...........ZmW........^..m..7...J[zJK......X..........g$......-.F.h^...5..C%....gA.)x.!..T..#w.{..&..X....8..........X..u......x.]..L....&A.x].gj..?..$....X8L......&...G.2.].1.O.....P...'3a...x<."LL?.a...n..BM.x..o...$uiy...#..[..vW...`{.{.....Z.2....{O.^.]?.2..D.1..D$..3?....V.AfJ.".......u.$.!....uE......r..a.?r..J..[=B3.v...v....G8.~.......w7...t....fXPT.......\.......J..T.@......Ztne....x.IL.p..Ic....{[...B...B}.R.\GB.-Wi.k}..d&.d.ue..J.}..T...}.../..}.'3........}6.......7...6k..4.-... b..)..%..B.i!.oVs...o{..(..W]...1..W._.L..a.E......r.M.C.e..=&.N..n.!....[.".cX..z.>.].(....qy..g......{.L..I..'q.0m.....9.........e.)...P..T.......N....7....i....(.2..........X2... .7........^......5......S.>....9.ug8H..!....g..\188.....\.GA.....Gi....hh...;bC.3..m.q... ...!..1.j.F7.......<.....2.`.A..t..h.`.I..V.............O..8...1.mG1.......r>..?>.._...:t......R~..qsM....?.;.u.%v...@.m....j...K...]...E.d<.`..-j..Q.%s.......I.B".E...%f.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2307)
Category:	dropped
Size (bytes):	3762
Entropy (8bit):	5.069041245542247
Encrypted:	false
SSDEEP:	48:XOQLgo0cbnlQ64xjy61cmBWeThKCyaU0GKesdbCMWV8ygTwuKFUBLvgJj:XdN0mbmjy4uebfUwzWqykv+j
MD5:	B17D496C693ACEA8BBB1E74860ED7065
SHA1:	C47004CB2E092BE6E53332CB46769F766EB03F79
SHA-256:	3F5BCEB1DBE71CA462F604DC614AD8797E34CEDAE74162A8F5CE9A516FE33B7D
SHA-512:	80F4051A6BC7600481A3DBB002A60E36DB77DBDE3A1F4BB5BC93E7458C627434517B2CC77925B0091EE7E5EA0C51C5D8C77488FDD302F890CDF9935CB5261814
Malicious:	false
Reputation:	low
Preview:	define("@baidu/ala-util/md5",["require"],function(){"use strict";function n(n,r){var t=(65535&n)+(65535&r),u=(n>>16)+(r>>16)+(t>>16);return u<<16\|65535&t}function r(n,r){return n<<r\|n>>>32-r}function t(t,u,e,o,c,f){return n(r(n(n(u,t),n(o,f)),c),e)}function u(n,r,u,e,o,c,f){return t(r&u\|~r&e,n,r,o,c,f)}function e(n,r,u,e,o,c,f){return t(r&e\|u&~e,n,r,o,c,f)}function o(n,r,u,e,o,c,f){return t(r^u^e,n,r,o,c,f)}function c(n,r,u,e,o,c,f){return t(u^(r\|~e),n,r,o,c,f)}function f(r,t){r[t>>5]\|=128<<t%32,r[(t+64>>>9<<4)+14]=t;.var f,i,a,h,l,g=1732584193,d=-271733879,v=-1732584194,C=271733878;for(f=0;f<r.length;f+=16)i=g,a=d,h=v,l=C,g=u(g,d,v,C,r[f],7,-680876936),C=u(C,g,d,v,r[f+1],12,-389564586),v=u(v,C,g,d,r[f+2],17,606105819),d=u(d,v,C,g,r[f+3],22,-1044525330),g=u(g,d,v,C,r[f+4],7,-176418897),C=u(C,g,d,v,r[f+5],12,1200080426),v=u(v,C,g,d,r[f+6],17,-1473231341),d=u(d,v,C,g,r[f+7],22,-45705983),g=u(g,d,v,C,r[f+8],7,1770035416),C=u(C,g,d,v,r[f+9],12,-1958414417),v=u(v,C,g,d,r[f+10],17,-42063),d=

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	4398
Entropy (8bit):	5.184350731126256
Encrypted:	false
SSDEEP:	96:10LM6VTrOMVVEbayy+5MgF9EoRUJYTcrqCCxuMCxyKyXk:q46V/XExF9EmTGAk
MD5:	7833028D860AFF115ED44DC3ECF82E92
SHA1:	8839C37D384D841E9E32E9D83D55294364E4A8FD
SHA-256:	49501EDD5CC5C53757DDA5423C9A81FA4512910AEC096ADD4CE69D0BFDA25982
SHA-512:	DF562C0FBECA9BCB687E01687C32AE75A57EEB4A3E9A5DD7006AABA73460EB9D96EBF96063482EE257C9B42E0B00E9382E562CC0097B61902CB76AFCC86BBD3E
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/video-meet-7833028d86.js
Preview:	function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj}}return _typeof(obj)}define("superman/components/video-meet",["require","exports","@baidu/video-meeting","superman/components/guide_tips","superman/lib/event"],function(require,_exports,Meet,.GuideTips,Event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.VideoMeet=void 0;Meet=_interopRequireWildcard(Meet);GuideTips=_interopRequireWildcard(GuideTips);Event=_interopRequireWildcard(Event);function _getRequireWildcardCache(){if(typeof WeakMap!=="function")return null;var cache=new WeakMap;_getRequireWildcardCache=function _getRequireWildcardCache(){return cache};return cache}function _interopRequireWildcard(obj){if(obj&&obj.__esModule){return obj}if(.obj=

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	6100
Entropy (8bit):	7.913226442081267
Encrypted:	false
SSDEEP:	96:ghEme6HkqsoAhgJWo2ThG9ZaACc+2mayhG91BzuViUs3RapP/D0/JcTtK/tDrxSf:mVe6bAhwUG9ZaACP5hG9DuVo3g/mG4rm
MD5:	4D83E2C8D0C842244B150368413C2951
SHA1:	421D997668192786973B433915688D7593ECE497
SHA-256:	B37E8FA8F0F28EE68B5D9FD45E7749A8B331CB8C84B9CAC772D5895105C8F25B
SHA-512:	EB53C032650F740AC096476F8D053FF85EBA8F31584BEFDA8BE0AC4AA522FC00AEF99CF3D67B66C1E209B554E395B0F6B98E659B4EF71E1CF0E61C4D41E51C0F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................O..........................!1..AQ."Taq....#2br.....3RSU....6BEu..45DVc.d......................................:.........................!1AQ.Sa...."Rq.....br.$2BDT................?..):N....:N.....:N...........'H...R. #J@"...I.)4...:M..4.:@N.E .E'I..'I.t.T.)4...R.M..4..'I....`'H..."....:E)R.R):N.....:@N.....4.0....H....N.....4Rt.)..'H.I....I.):@*N.E .&.h.5'HN....`'H.I..'H.Qi.K.di`..,...?{=j1.j.9....B@.....]..}j..LcG.....;................zj....Zo-...o...qk-3.....z..:a..Z......?q.......?qi.....Q.q(.pf^.(.g.`.h..~D.kceY.O....!3......?qT..I!....9.Q.lc.q.<i..;.m...J...M.'..pR..-....t.....N.s6.+.vNX.....o............%...tk.0I.gn..B..\^....}J]..U...wi...F...?.Q#W.O..yT...Y.....guQ.U..Yo....$q..J.r.....O..yFO.......#x.\........q.+..\..:T..z<GJf.c.+......z...P...#

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4560
Entropy (8bit):	7.916008234996706
Encrypted:	false
SSDEEP:	96:1nyMZNUDqoMyNL8BKh4gN/Au7Of3rFPk3b/JtUioepkNc/qxfottNy:MMEm8L8E4Df5P2ziepku/W0y
MD5:	DA0CEA8F7E96046B1140228813422283
SHA1:	AB8A7FD7F3919077717EF42F600573B795CD36E1
SHA-256:	15DAD359B451156FB21F32C229912A4AEFA3C4829139F3D0F45921BF0F496740
SHA-512:	791932AF34E33649950E8C636487836F3A46932C1B0183595BEAA3A2BBA4B228778A64C3A374E4DC9ADD0806A2AB4D664C98B20D3A571193209EB27DC4965FD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....:IDATx..Zi...u~..3{.\....HI6iQ.EJ..Q....M#0.K..$.-.p.(p..N.$p.#H....8....%..lX...&i..a..}..]rO....\|....q)......Bomu.....W...Xk..D........%T...Q...Q...E."P..B<>.b...(D.b..xT\|D.".Q.@.".........r...k"+.....h..9x)<=fz'....J&....6W{.u...i..h..{...!m\|SNf..).U..^.4;.F;.....pp.3.3..e.b....j...1(#...V5.u-..K>r.Y.`R./V[N .H..?<l.\|4..2Y.SX.......R..L@.u({.f.!.{.._l[Ut_.y\|..o.,.qct...... .}.>.F..?.B..@.b)0.9...<.hO..B$.!.y60.)Y.l?.F..0.7l)/..8.sW.?.z.L[............."..'...\|.....\2....v.r....z.o.bY..0.8.g_...<..j..~'^.!.(.0z._......(..(.+.k......-..;..N.)./-..L(.;.=.....%.P.x.;.bw@aT.t.*..e'3s.%..Jg2... p..I.K...Zg.......J...{.s...,<B&...q..2. pe.. aA...\.$.g..*d.q.I.v....\|y.....T>,t.2P\.u.~ug4..../a]!.!@N..(.A;...".C...R...x.&P.6....;a_.&...J.......X....B.wC.....Y......o..... .N....>6........b......... i.At.n.p0...).....j.%....

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26390), with no line terminators
Category:	downloaded
Size (bytes):	26410
Entropy (8bit):	5.472830245685294
Encrypted:	false
SSDEEP:	768:3sCXFJZA4F8mfxuLhlbgzLe4iWIoYocw7gqMF:3Bfjto54t3YocwPW
MD5:	C9BE45F2F805EAA9121C27BBB9D9548A
SHA1:	7BABC74F21E4DF2CBEFD322BE919218476198F20
SHA-256:	B35B4C69E3CFA3B0DC6B7BF5845735330B245ED81DD7FCAC2D31FFB55B6F9B28
SHA-512:	921BBA5DA42EA1C2B5D3BAC6BB62D030F8001D14226D5B42F99504FE4882729871F09A08822B7571C371119B624A1F7E6AD96B2DA7D6CB3CD6A341629D0266A4
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/news-realtime/result_d7716b3.js
Preview:	define("aladdin-san/app/news-realtime/result_d7716b3",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Link_Link"],searchUiPcNode["Tts_Tts"]],function(n,r,i,o,a,s){return c={},l.m=p={0:function(e,t,n){var r=[t,n(1)],i=function(e,s){"use strict";function l(){return(l=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}function p(e){return p="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function p(t){return typeof t}:function p(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},p(e)}function c(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=function(e,t){if(!e)return;if("string"==typeof e)return u(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n\|\|"Set"===n

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1009
Entropy (8bit):	7.212644508879691
Encrypted:	false
SSDEEP:	24:gvqGjmUXTyUOQDUKydPxVQFxjHMQg2QUHkv9Z4Z+mqzC:gvpjJyUOFVDQAJM+NzC
MD5:	9F305385B56A95F7648A3911D5CC8F84
SHA1:	767881A09E808C6897052A71956D0E3AC8E92E7B
SHA-256:	A325A75B335B47C1D879249D737AD193CA9641C0AA2CB43486EB2B9646B2CD8A
SHA-512:	FA775179410203E6D70E66A1BD7E8D8CCE16CA3C1CE9AA024683BD2920659C28648ACA2A1F8F5F4D99B5B3F9C0B4A5B1853C613FF4186D92EEF2A1A7F49B4DF2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."........................................2..........................!.1AQa.."#...2CRSqr................................#........................!1A.q..a.............?..z..." ...""....)R..+.{:............Ym....$....W.R..7.I.v.H.j6....._.....A..s[.=^.....:c<r.m.o ..9.2.p6.......GD)....N.>...I..8..;k.arI.......Yr.c..Ma..c..+.[..@E=:..jV.)TR....w.>.h).....>a.\|n&.2..7}.I'.;..mu.-&...(....Lb....?d.ni>.....SH.>es..sI..Q..d..9.z8....M...q.....XN3.....1T.s.6.>...+-....m..}.I..J.......\|.i.>ek...u..MG.b...ik&.....h.v.r..^....u.9...X......&..y....jv.m1.A.+..?1.X...9.......-.../.s.%...h.L.X{....UX#.l..Q........O..O=.......l...S.0LS......f.$.n#$.:.H.F.v.....\iq.!#..u...Xl:..u-..C@8.\{.V..V.el.....^..\Tc.2.G._......Y.c#.......K...n-c.,.Y%.......q..X.Ad{..."F.....z.a].....*..B.b....U..DD....D

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	1153
Entropy (8bit):	4.847622383882747
Encrypted:	false
SSDEEP:	24:pIbHBZQamRmGqSVj3kaaVWEFzQmRlmRczJre9MdVPsjHog2:pQ+UAjUaaVHe6zsjZ2
MD5:	6F6BBC941EB1C9A1D60A74C2832E52A9
SHA1:	F2A62AD01BCB08412C0114AE512367184BD41634
SHA-256:	ADA115FDFF22F4C34F9F266380671A42D3906746E7A9CD08D87B809AF42F0556
SHA-512:	FD45A7B9BC9F5F2BDFB3905CDD5E0EF4B7084F796946A90F9F9E5DDE37963946A4E36648B7DFD811630E2D2B90AEDEF93659FE844889218355902D358E0846B3
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/plugins/compatible_ipad_input_6f6bbc9.js
Preview:	define("plugins/compatible_ipad_input",["require"],function(){function t(){function t(){return this.orientation,this.screenWidth,this.viewportScale,this.getScale=function(){this.viewportScale=void 0;var t=document.documentElement.clientWidth;if(!(screen.width>t))return this.updateOrientation(),this.screenWidth=screen.width,"portrait"===this.orientation?screen.width>screen.height&&(this.screenWidth=screen.height):screen.width<screen.height&&(this.screenWidth=screen.height),this.viewportScale=this.screenWidth/window.innerWidth,this.viewportScale.},this.updateOrientation=function(){this.orientation=window.orientation,this.orientation=void 0===this.orientation?document.documentElement.clientWidth>document.documentElement.clientHeight?"landscape":"portrait":0===this.orientation\|\|180===this.orientation?"portrait":"landscape"},!0}var i=navigator.appVersion,e=/ipad/gi.test(i),n=/UCBrowser/gi.test(i),o=/BaiduHD/gi.test(i),r=new t,s=r.getScale();e&&(n\|\|o)&&($("#head").css({position:"absolute",to

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	6338
Entropy (8bit):	5.239802156551638
Encrypted:	false
SSDEEP:	96:cH/iKL4Elf6VXBIXfOsN70AKJq37iQfq3EJGE33uGDw4kp4ZrRTvBbgrydepGslS:O9f6VlZ0Dw4j5hJ
MD5:	E35EEE0E781F9FA70CB3A9506B036DD9
SHA1:	D36B5F99AC8FCBB577C93C3F782F083A382B942C
SHA-256:	8622F842FD516D9DB5530F6C620F009997A97FB032DBDEDEB8DFE54E1ADB6FEA
SHA-512:	AD7517A37E8397522EE6B5EDB7BA9C99F8720F617C9AB9F79E70BC0CC807232C5C12031AEBCD6DDC9DEBF7F2B1F8B0606DF15257936415C7CA7E63B3F0C026F3
Malicious:	false
Reputation:	low
Preview:	F.addLog("superman:components/hotsearch",["hotsearchClick","hotsearchShow","hotsearchSet","newsClick","newsShow"]);F.addLog("superman:components",{categoryClick:"1200100001"});F.module("superman:components/hotsearch",function(require,exports,ctx){var pageNum=0;var hotsearchData;var totalPages;var $hotsearchWrapper=$(".s-hotsearch-wrapper");var $hotsearchContentWrapper=$hotsearchWrapper.find("#hotsearch-content-wrapper");var $hideHotsearchBtn=$("#s-user-setting-menu .s-set-hotsearch.set-hide").;var $showHotsearchBtn=$("#s-user-setting-menu .s-set-hotsearch.set-show");var hotTip=bds&&bds.comm&&bds.comm.nodeSample\|\|"";var aiSampleval=bds&&bds.comm&&bds.comm.aiSampleval;function parseHotsearchData(){if(!hotsearchData\|\|hotsearchData.length<1){return}var hitSample=bds&&bds.comm&&bds.comm.sampleval&&bds.comm.sampleval.indexOf("new_hotitem_num")>-1;var hitHotTip=hotTip.indexOf("change_item")>-1\|\|hotTip.indexOf("change_all")>-1;var perPage=hitSample?10:hitHotTip?16:6;totalPages=Math.floor(.hots

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 63214
Category:	downloaded
Size (bytes):	9963
Entropy (8bit):	7.976568503954238
Encrypted:	false
SSDEEP:	192:UGHFiuiHk00/0NvJS6ndznhERkbRf00qIsrX5+VQm/Hw6eRaK:UQJYAIJS6nNvbRs0xstiHXXK
MD5:	86CF57BD86E3AA2BD75E3914CF4A4D44
SHA1:	EBF8772F7CE1522C73DDEF49D87BB249017DF105
SHA-256:	BDD7F1C5066BA91085FD229530B632A7F5DABA932CC407AA4BF3B1D3F7C8DE42
SHA-512:	B78B6C11447CCFD5EEADD3E7660D0D7AE1B515DB7C138B4E0413A9F6AA1AD0ABB8E4188CA72D67FA5882711FD31C168CFE5BB19E652BFE051E431640CBBF9FB3
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic/index_b5a4f5cf.css
Preview:	...........=ko.Hr.E...vbz..S......Hp..C..r.%.fL..Iy<k..OWW...AY3;....+...............wU.\.O..r..R.)6e.<.....a.}...7.zn.u.C.=...m.n.ZvgE......S..v...c......m.M..\|Z...jz...\.....W.bsh...V.....i):.'.b.....C.Zu....\|.....z=<.W.,..w..f.&[..V.~+[.T+.i.jl.l...Tu...S....m..&>u.w..q.hE...X}I./..Za..6.......'g...T.\.~.\m.%@=.G..u..k.....r....j.@...f....Z...........z.E.iW/..v7..U..)!3...h.......-..)...z`.9..).~.-../....$...nx.V.u.>.....}[vO..h..,n.^6....`gs.......}..;...mdc4'1.m...~.^..5..o...P.g.e.y..B.$..F..\1..Q.]..m9T......f..y.$.....L.x.k.,......A.<.-..X...w.._p-5,.....5.)Vg.._...7&GC.Ttg...%nSn...`..TE......tu.\..j^+......T].1.,.........H.V...H. ..V.{%.&^42.X....^... ..X.{ 6..s[7=....,..Aw..o.....C.TCc.........o.z..n.r[...-a...jw....C..d.v.e..Lh........of.....x...!.#..l......f.MS....i..p.R.L\..XU.....C1]d.i..:FD.l.......?.~.7_Y.6.. '...`s.@=.N......@hm.0\...j.z.....!..o...y..<3*. .....{.%......B.r.6..e%.5..Ph..\0C...8....}...6V..;

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32225), with no line terminators
Category:	dropped
Size (bytes):	32259
Entropy (8bit):	5.520412103438087
Encrypted:	false
SSDEEP:	384:xXCNRgox/rxCq4QxyBcEW8k1TLjTevKe1qrZc02DXP04T8faF0ms:xXCNug/rxC0KUZcRXP04T8faFts
MD5:	4635C686864DD43B0F2C9B9684B87D28
SHA1:	38573E2D6798DC8C976F3E93884EC96D120184E2
SHA-256:	63A3F283BA49B73572B999A5BC0AD8FBE75D57AAA44281B9A3EABDFDDAC40401
SHA-512:	59520CE24C059BF6E67D52C03C53415079D80E2A4DEE1D54A57BD26B730F9BCD0DB2DD7659334C1EF15E131E1A8C5CF42154D01193973806EC4510BE07FFC980
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/boiling-point/result_ff637f9",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(i,e,o,r){return s={},l.m=a={0:function(n,t,i){var e=[t,i(1)],o=function(n,a){"use strict";function s(){return(s=Object.assign\|\|function(n){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var e in i)Object.prototype.hasOwnProperty.call(i,e)&&(n[e]=i[e])}return n}).apply(this,arguments)}function c(n){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},c(n)}function p(n,t){var i;if("undefined"==typeof Symbol\|\|null==n[Symbol.iterator]){if(Array.isArray(n)\|\|(i=function(n,t){if(!n)return;if("string"==typeof n)return g(n,t);var i=Object.prototype.toString.call(n).slice(8,-1);"Object"===i&&n.constructor&&(i=n.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(n);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14401), with no line terminators
Category:	downloaded
Size (bytes):	14439
Entropy (8bit):	5.39806350497879
Encrypted:	false
SSDEEP:	384:C8yC7pmP8vbYb4bmb/cvf7A3hINb2sykyEdUfB267w210:tyC70P88/AjASNBy7X268O0
MD5:	751FE7E5FE82EA32BB1B87BD01D42206
SHA1:	C3C0C256EBAA7BCAEF8FD327F3581060E72B5069
SHA-256:	A841511AFB4DE8E62706255774604847C600C13DF317A5363E1D34828DF8CD0B
SHA-512:	02F154EAB4739B385C79EFE834351FCA83DDB43A9246F4CF9C6B4E552C7F16E9CC6BC1022918FE5D3AD9EF6DA5973B9323CE733E39881A161FE9ECA70DEC6D4A
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/short_video/result_11e6e3d.js
Preview:	define("aladdin-san/app/short_video/result_11e6e3d",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Title_Title"],searchUiPcNode["Row_Row"],searchUiPcNode["Row_Span"],searchUiPcNode["More_More"],searchUiPcNode["VideoArticle_VideoArticle"],searchUiPcNode["TagSearch_TagSearch"]],function(n,o,r,i,a,s,c,u,l,p){return m={},d.m=f={0:function(t,e,n){var o=[e,n(1)],r=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o])}return t}).apply(this,arguments)}function u(t){return u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function u(e){return typeof e}:function u(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},u(t)}function l(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=function(t,e){if(!t)return;if("string"==typeo

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 242x161, components 3
Category:	downloaded
Size (bytes):	7441
Entropy (8bit):	7.934907344119435
Encrypted:	false
SSDEEP:	96:6kyBRwJkqwZm8ZoZ2/Dd2naOfwzJctt2KJbG8KBpHEgymkZEjcowJSJdh0miZOPA:KBq6Zm80KDg+o2KJ+XChoYSfViZO1u
MD5:	AD279AC4DC069020E026D56DE3872C36
SHA1:	102FF6BAF83656F7E2891CE6D8468A601DD3CC4B
SHA-256:	AA36E630B9891C6C442D8D49B589EECB4A4F9B80C6DB52CA89ED08D8CD489020
SHA-512:	8D0CEFA4A68122CD5FC853FD2EB6A120B61F3E8BEE0E0A3A8E58F0F9D0389C838DD5A14874487BCE50BE69116970D30EA1C5FD511E20F3EDBDD696045F3388F6
Malicious:	false
Reputation:	low
URL:	"http://t7.baidu.com/it/u=4060384012,3958510345&fm=3035&app=3035&size=f242,162&n=0&g=0n&f=JPEG?s=0EC3885612457CE20880D84B030020F5&sec=1729942089&t=36d7dc5a32cbd0372acdf6fd1c3498ae"
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C............................................................................".........................................E...........................!1A.Qaq.."2..3BRb....#r...$CDs....%Sc...................................3........................!.1AQ."aq.....#2B...3R..............?....)(....D.c...0.Py.{...D..Tt.. :W.@$.r...I..Yt.RJ.Yod..DT....T.tQH.M....).C.3..[./.3..;z....UD.k.k`.V:Z. v.`o...x.O%J........R.S..$..c...\|.....vn...O...;..........z...U..u..yf..../a.......G..`p......m}.#.=..Q3...i.........I.n]....a.rZ....#..KO...D..K..I.YeNWyy.z..?..0kUYo6.....>.....0~.x/....i[3j;&..f.r...vV.Nv353.......u....8....Rxh.7..v.R......x...z..KV>Gor..u].K.[]W.^A.._j)\|.C.0V......)..F...L..n........'Ps..A...k.6..k.\|'c.S....\.k.......\|V...V.[;.E..h.......?8.q.O%...;u......~3..W.m>..z.{.u......_pi.\|s..[..~....tN.I.....D@.DK... .g.m.z......QW..i.I.D....4.....U.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 893357
Category:	downloaded
Size (bytes):	193039
Entropy (8bit):	7.998496429594641
Encrypted:	true
SSDEEP:	3072:EpKVvGQHIK+PggmVlyWJd2NqMPHDZeW40twKD971eSi7XjsLZhRmQV7AN157l:EpKxGQHIUXyWj2NFrZL4sReiXRS15x
MD5:	F819EA0861F0D870D74B71E67C7BD470
SHA1:	EDBEBCF6DE82338FDC6BC9DE26AE5B04CD92E6C4
SHA-256:	CF63559F104B7B3E40E773D5EE3C28E21677A62368611D106843628A56E06D63
SHA-512:	644B86F619A0A4BEF11D9E438611B2E817DBB4D57A2AEFD8D3E51B984AF66D787D09C383DBDFD4700F22D2900496A8B39642F34C787EDB2ED779AF1563228ABE
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs
Preview:	............#I. v...?...2.....w.,........nN.@........GD.$/..I.B.x...'Rf........t1..#j.......L.O..]..o~.........j..~.Y......~....e.O../.....;m..~.....??..7..\|.....~..?y(.......OV.!....Y.........e.z....dY.hL7.C.>\|..go.+f....a.Y....D.R>;\|........r;}.w.....0.F...Q.\|...h.s......]...83.....bUd..r.3c....[g.X.k..w/....az<4...................I.......j.?b.&....3...b...W.2.\|eFU........y..........)...w...E....SX...j.-..vV.......R.v.k....8,a:..?....../....?....?.h.t.......`.>...CQ.^4f.!........'>..}s2..`XS....y....H0..j1..N...p\|}=...Es....m.8.";l....mw.4...Y.w.y.nN..d..A<.f....b_,...U...b~..&.I;.v'.~o.k.....5....~..jn......O.\?eh.........t?..._ai..G.%`.hD....X.{._....b,...d3.........N...... n.n..l....l?4Z...../.7.[......P.....+l...py.]6.m.....".....M.[.....^...7....r...-/g.......l].m....CFS.Yo...b.=.>.`.8...M6..f.....{..!....lv.b.On......P.6Y..9.......t.g3..n..........bq.p.i...~..XI...n..H=..5.....Ep..`.v..,I...~.j.8.q.....(.?\|.\]....`0.f

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9216
Category:	dropped
Size (bytes):	3883
Entropy (8bit):	7.948819599131649
Encrypted:	false
SSDEEP:	48:XSCHFKf9T+UPTVvYWWGLOTEXi5J2Aah+RmIDzOJnqhLxQXI8Oqcjt4xz+wma4R6a:COFK1TjSWWGQGXq/OncLQq7YUyo4DC+Y
MD5:	AF3DE5295090F8F262ABF8F4968BC9C3
SHA1:	ED9B3FBFEF995E3B1B69B4562C52E67AB422BE08
SHA-256:	C7CC79A0FC41F5C90A559DA9F6102462DAF78906A56F4C670908754DE80310C9
SHA-512:	256DB06BFCEDCB83BF4FFFDFCC7B587D66FD696A1FAD32CB3F1A7104299F5F6A6EE3F51C043ABA8BFD19DDA038EEA744E025D4F593B8322C47A567B86BB1FEE6
Malicious:	false
Reputation:	low
Preview:	...........ZmW........^..m..7...J[zJK......X..........g$......-.F.h^...5..C%....gA.)x.!..T..#w.{..&..X....8..........X..u......x.]..L....&A.x].gj..?..$....X8L......&...G.2.].1.O.....P...'3a...x<."LL?.a...n..BM.x..o...$uiy...#..[..vW...`{.{.....Z.2....{O.^.]?.2..D.1..D$..3?....V.AfJ.".......u.$.!....uE......r..a.?r..J..[=B3.v...v....G8.~.......w7...t....fXPT.......\.......J..T.@......Ztne....x.IL.p..Ic....{[...B...B}.R.\GB.-Wi.k}..d&.d.ue..J.}..T...}.../..}.'3........}6.......7...6k..4.-... b..)..%..B.i!.oVs...o{..(..W]...1..W._.L..a.E......r.M.C.e..=&.N..n.!....[.".cX..z.>.].(....qy..g......{.L..I..'q.0m.....9.........e.)...P..T.......N....7....i....(.2..........X2... .7........^......5......S.>....9.ug8H..!....g..\188.....\.GA.....Gi....hh...;bC.3..m.q... ...!..1.j.F7.......<.....2.`.A..t..h.`.I..V.............O..8...1.mG1.......r>..?>.._...:t......R~..qsM....?.;.u.%v...@.m....j...K...]...E.d<.`..-j..Q.%s.......I.B".E...%f.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47273), with no line terminators
Category:	dropped
Size (bytes):	47305
Entropy (8bit):	5.346572794854807
Encrypted:	false
SSDEEP:	384:8KtVBP2iwfTSq1WNjzswnMhTpoP4Ma7STtHTFhPRoxI3+Cmvd+rO5ppb4iW++NPf:8KtVB0X69MqCSJfLrO1utlgBE
MD5:	6A4DF9BE02B7C085E429753E33D87EE5
SHA1:	4F359FC0B173D62121D58193410F35B514058836
SHA-256:	385B073DE8B687A683584FFD2771AA037C6F52435FC7124443103FCE3F86F72F
SHA-512:	1F547CCB995881C7EB8B33D17F0E418C1DD1E56525C541C336620B82150762CC70424500D7C0B862DABA5EE06DEE213A08EB8C73AB92080D57A130C85DA08C8B
Malicious:	false
Reputation:	low
Preview:	define("mirror-san/app/ai_agent_distribute/index_3eaf44f",["tslib","san","@baidu/www-api","@baidu/ala-util/ala","@baidu/ala-util","@searchfe/inject-js","@baidu/ala-util/san-component","cosmic/toast","cosmic/icon",searchComponentsIdMap["Markdown_Markdown"],"cosmic-dqa/markdown","cosmic-dqa/citation-list","cosmic-dqa/site-vcard",searchComponentsIdMap["AIEchart_AIEchart"],"@baidu/marklang","cosmic-card/title","cosmic/swiper","cosmic/swiper-item","cosmic/image","cosmic/avatar","cosmic-card/card","cosmic/button"],(function(t,e,n,a,o,i,r,s,c,l,d,u,p,m,f,h,g,v,y,b,w,_){return function(t){var e={};function n(a){if(e[a])return e[a].exports;var o=e[a]={i:a,l:!1,exports:{}};return t[a].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,a){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},n.r=function(t){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2263
Entropy (8bit):	7.79381405061802
Encrypted:	false
SSDEEP:	48:1nPh+Z9a+ftb/SyhaPmQRh9uyJHX7bPG7pc43mAp1DY5lUfx2:1nPAXaI5haO8h9u+KZpZYbD
MD5:	03ECD1E9B97CA338AC39E9C4DDDA6927
SHA1:	1BAB5582F607E31AED57D6653E01175AADA52AB8
SHA-256:	32F658459DD806332D3727304AE55E40CD8214F0464500FD287AAA0C939D63C1
SHA-512:	69D85AF6AB833E954DB70E5EEE78283E9CE6D700E11FBBADA25FE0859DC2113C615413F7E48D74769329D9E4BD306012578091CD34D8A48AEA6C0F633FA594CD
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newyinyue-03ecd1e9b9.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....AIDATx..Z{PTU..{...,........s Q.+.........4.3M..Xf)PR.N.J.6...L,.Z.X.>@...sa.w...a.{..s..B.q.........o..d.A..?...$t0@....J.%BZ.hF...!e.f...Z#hF..2@3B....4#hFH...!..N>.R^......CG...........Vp..l\.._.......LcF....En..:...........WF..B...l..T.....fz.I.]..D...u.-.n.8N.....6g.}.\&.VA.k..eDp\|Ka...`c.5...f...E.m.2u&S.V+I...;\|.>;7p.....;....7.7....M.).g.....fj..D.:..X[..q...5..Ah~e.'o......}..p.J..D4<......H.[...~......O....a...Z\.Y.G>H..6....W...I.i.a...Q.y.D..._P.~;.:M.i....Xw9wm7.z3!..S...P.>.w.O..p-.......:A.\...t.d.)........P...w....>9)......w...j..;X..[.}.5.W....q.P-...("......c&.....X[..{....."4..._.W.liA.BC...e_....5`.M...Wi.,..,...k.}...7%.......j-... T...A.<dt...d.3..=.n."......s...X.....g...*r...4........]+.0..;6....;.......cah.r"...M..1..E.L\|.,2".u&86.0.\|E....."$TA....h.k.t.M).$r.m.X....l...mD!.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 514 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8224
Entropy (8bit):	7.923514637314261
Encrypted:	false
SSDEEP:	192:RWKJlpU+3WzH/ChvOpkfLQdaYW5rdN55EanIES:gKJUVzHqhvOSf0bW355Ehx
MD5:	CCA2581758917F68EA9FF318BE855B8E
SHA1:	4C20015481DFEC66D9AE867A987792C81C2AEBC5
SHA-256:	571F703016E98A9DEE7B29BC165BD74AD874DE0F3E699A55BF9E0E4E3886D302
SHA-512:	98BFE6EE6DAC47427393EA97F4D5F675F64B9CB02AAC7978842651D226868E29AE023882AAEFF210F347579BF1ACB707A7729FA17D4AAAD50D31C5CA7D94E4FC
Malicious:	false
Reputation:	low
URL:	"https://ss2.baidu.com/6ONYsjip0QIZ8tyhnq/it/u=4173936571,4084506864&fm=179&app=35&f=PNG?w=514&h=32"
Preview:	.PNG........IHDR....... .....`.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD.............BIDATx..{.^.....#BnM..q-..2a...^Du.q.(m.N.:.Z.t......^.mP.....$..HD..o.x....>...#.O.........Zk.....e ......Bh......F`e..........5..U...P.c.<....I...............4....qnD...........M.THj...u@..(Y...........WW.......B.z`sl.6..T.v..I...........4V..$...a.zY.a.....%..CI..bC.v.&K.O.I.....I...\...Pw...\IS$}.....}.-..I/H./I....I.xI]$}H...^....a....}\G.t.R\^..\|.!i..w.].'iW.....%...A... .8I.HzN..t..g...>.O.F....N...@..h..Q...^.Y..j...4>......>..B.8L#p..;p.....\|....n....K.b....F........$.wj...z.}.....x\|z...m0..!`.`....5:......4I..z.^7,VF.Wu.)....H.X. _...c.z...B....Uu(.IZ.....0.R`N.[.q..F.N.O......k.u...J\|/W......>....;..d.$..........JWU..U...G/....P..P.O...x.XM.G3..u-$..\.M..Q.9.[..b.F.....<.;..P..;p..-..../H..{V....f.......l.....1af..x`...C....Y..>0sy&.g.0..q..k1f=A=f..3}.[............K.}.53...c2H.pR.H9...y!..r..}1..`.p...C.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	4477
Entropy (8bit):	5.11970157523138
Encrypted:	false
SSDEEP:	48:9qWHQNGbkfaEIyB6aJF9MX46gTh/CwCMEJmF26+zUUD1hGmZBra4fTuQjB34gap1:/+3UgF9Jh/C5MEJHva2Bra4blCHp1
MD5:	B7693B0CC71A26CDD07BA8D3A97E0F36
SHA1:	59A58AF7B309B16A26287DE7EF12474D71648723
SHA-256:	74A8E618E19166D3208F87A0A3C9F42BD0EB8DC9C2AB5DDE91C2FB9649D47152
SHA-512:	9D1F6BF529D13D4A9025F99B63E0FE0E64F816C1F4C7342C452686670DAA4EF922018069F5EA405EC61D2D1D02BF0645FFA31BFCA219F2CA25A08297577BD5A5
Malicious:	false
Reputation:	low
Preview:	define("superman/components/top-right-operate/operate",["require","exports","superman/lib/extract_data","superman/lib/commonUtils"],function(require,_exports,_extract_data,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.RightTopOperate=void 0;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(.var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){.Object.defineProperty(obj,

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 106697
Category:	dropped
Size (bytes):	26073
Entropy (8bit):	7.9877324314820095
Encrypted:	false
SSDEEP:	384:5B5dZ8pbGbn8xxirLJWbDpaUL7iPoydZMOgy0f4JedrIODbGSg/La5Ncr7b5CPe:5PcponSigae8FgdrTbN077b5C2
MD5:	6D2AB66AF45903980DCF5414492F8954
SHA1:	77B0B4F9C07552D216EE718F651BBF9309CEBDE7
SHA-256:	CBE399E6404CAE8F364986616E4EFAEE73B5B328B599A17289F76EFFD123587A
SHA-512:	8C5E939DD60D40F8E4A5A1D578E39714B5F462097C90092CC4CB44D0558BC4586F91A98456151FDE0AE99FE56FF167C651DDFAB9A6DB1E5FC941BB55B888FC4F
Malicious:	false
Reputation:	low
Preview:	...........kw.8.(.Wf.{dO.........X~t...........cI..vl...o.`......I..s.%..,..B.^......Ynm..........D...w......t...yO......h<.^.....{Z.9..?..PW,\|....?.7...q..2.ev~..>.?..N..i.F....._..\|}.. ~7...x...>.\.-G..(....L''..........nS...?...@..q.h...K....z#.....Qw.hlr..N....Q......U...@.^.....ng..8.....L..S.%...3..Z...G..Zr....)...i..N....0BD..).`....\....r1.O.....D.._...h..w....t2.2;......p>.>.....s..g......._..?....8...y0.3..t.s.v....._~6e.#9.....t....'}.}6........,..)......A......vv....V.?.w...9../.V..B.S....'.r\|........_4.n....ffD..l....._.5R............)...k.9.%0]t...0.'c...b\|7.!.>..tq.q.......$F.%............_..~.Ln?.&.L..D.O..dr.g.N.,[..>.i.....].t...P..~t.s..^..x....\|...gz9<..Lq..+._.W.d>.%.H...IBa....................f...x8.>'....7.b.W..3.Y..?.......x~..p..)~....x....W.(Q...'D.,.\...%. .ZV$...1r\|2..z.%.....4...!6:.).0.........c.f../..Z....%DJ.X,...o...6!......_.....x...<.........>^......._..g.E<.!.%._i..s..pR....E.g.......YoPp..+....?....T...#.1.B

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	7.664961416654295
Encrypted:	false
SSDEEP:	24:qh/sJ40kkN1YDU8LRjMPAr0JSvum8PGBP2v8dzhx902af9:qh/mqS1b8tjDroZd89/m9
MD5:	F9B106A84823022DBC97874B6E2A2786
SHA1:	4E45221781A912AC1DEEC4CD7DCBE48080CEED26
SHA-256:	D451F415A843BD24E506EC0B9D5BC5AF47BABF13703EC3001B4CBF373DFF4544
SHA-512:	C5299966D7757DEAA4A285C41AB32484786723B6B9AFF5C9D1739E07F68173A8D89368080B8976221CE9328473AE4892AFC27FA9975FC902E5DCE4F3C96C1A00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0..... .......sRGB........DeXIfMM........i.......................................0...........0.....7l....oIDATh..Y;S.A...[.= .HKCc3S....3....CR.P..?!...+5....Wf...w7.7.=.7./.-...nz..ytO?f. .x..V..u.......ye........;0...c....Z?~...x8.g\|Z..4O..0m[0[.'.`D...:....~..Gk.3Yx....Y.wy,Km...i.!.Y{..c.....K .YP.@...)..5..[..q..)...........g..)......j..D`(=8.\|Y^?...<.y<.9........%...rt.?6..^.J.u.U.=R.:pc...Vi......g<.9....7.....=g..r.[.3.fD.g.>.m.s....._0.........8o.D..HNJU.'..mY.g"....<[.j..,....7{..&..z...g.?i=...2vg...U...CS.......'...h`..X........e ;^.%m.5Q[...x..`.........kf......h.Vw.y....;.....N.$...n...\.sq.&..h...5Y5.n...,..4..TA....m^@....-..L....N..s5f.wl'!........di..8.M...Q..\.....!...q...&.y...G...(.....;N..K.'+..[.....Kf^..H...9K...j..8.....HF.l..c.4.....b..I..5mK.g..\hp.)OYYB....2."7.<%....P9I..iQ....Q.%- 5Y[..@m.s..W....6.\|..{..>.d#.n.+T:.2.P..W.i.kI...R.:.d.W....4?H.).tG.....:....D...O.)..Z&....n...n.=.%.yn+1U.W...

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32225), with no line terminators
Category:	downloaded
Size (bytes):	32259
Entropy (8bit):	5.520412103438087
Encrypted:	false
SSDEEP:	384:xXCNRgox/rxCq4QxyBcEW8k1TLjTevKe1qrZc02DXP04T8faF0ms:xXCNug/rxC0KUZcRXP04T8faFts
MD5:	4635C686864DD43B0F2C9B9684B87D28
SHA1:	38573E2D6798DC8C976F3E93884EC96D120184E2
SHA-256:	63A3F283BA49B73572B999A5BC0AD8FBE75D57AAA44281B9A3EABDFDDAC40401
SHA-512:	59520CE24C059BF6E67D52C03C53415079D80E2A4DEE1D54A57BD26B730F9BCD0DB2DD7659334C1EF15E131E1A8C5CF42154D01193973806EC4510BE07FFC980
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/boiling-point/result_ff637f9.js
Preview:	define("aladdin-san/app/boiling-point/result_ff637f9",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(i,e,o,r){return s={},l.m=a={0:function(n,t,i){var e=[t,i(1)],o=function(n,a){"use strict";function s(){return(s=Object.assign\|\|function(n){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var e in i)Object.prototype.hasOwnProperty.call(i,e)&&(n[e]=i[e])}return n}).apply(this,arguments)}function c(n){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},c(n)}function p(n,t){var i;if("undefined"==typeof Symbol\|\|null==n[Symbol.iterator]){if(Array.isArray(n)\|\|(i=function(n,t){if(!n)return;if("string"==typeof n)return g(n,t);var i=Object.prototype.toString.call(n).slice(8,-1);"Object"===i&&n.constructor&&(i=n.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(n);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 132, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7707
Entropy (8bit):	7.913591496975338
Encrypted:	false
SSDEEP:	192:NiTvI+Oa+mwj9o5ZaAEbufq08hBUndKV4jJJ:NiLHpnaAJq08hB0Hjf
MD5:	17079C6AA820DC5400F39DEAF09573DA
SHA1:	3260F2B87C0079A5C7C0D332EFA05627E51B8E20
SHA-256:	EF5567584E1F1B541B76BCDAD11CC1A151EA9392F39803775C26371650375447
SHA-512:	716EE27B422C5015E2AF92DEC2FF27E497C00B8D210E5F6829934550AE63DB758213FDF61E2746FF38CB0E9A2E029FAE06EF0AD575949EC275C8496BD1A133EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............d.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:709387F9E92511EA8F22E951255463F7" xmpMM:DocumentID="xmp.did:709387FAE92511EA8F22E951255463F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:709387F7E92511EA8F22E951255463F7" stRef:documentID="xmp.did:709387F8E92511EA8F22E951255463F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+.......IDATx.........J...a.(`.5.bC...{..5.b.Qc..Y.5......{/...K4.. FED..D..fA.\|.w.}.+...........=.yL.......9sJ...

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21750), with no line terminators
Category:	dropped
Size (bytes):	21766
Entropy (8bit):	5.455153857669513
Encrypted:	false
SSDEEP:	384:nICUr2t0cx2RyzDMNQ7AwdAqAL7PPRWN3/LEIjf7LrhuzwiMKf2Cr:nICUVciGMc2RWZDEIj9k5r
MD5:	8DC236DE69754E5A0D2F1647E8DC656F
SHA1:	DCE461F8900C565C56D10CA9C29126E176B5E29C
SHA-256:	AE0628A238A9CA7401DFA6E601F599A6B5FE16933D45B71C444B90AD9377BFF1
SHA-512:	D70ECF4F63B0DD9135FCAA0B8E11CDB7EB1324EB432DFB3775F6E7A17D2A736D14B877A19BCCFFD88F3AD6645DACE1BC3505CA834E878FFF71F4693D4B5F69F0
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/right_toplist1/result_a423202",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(n,o,i,r){return l={},a.m=s=[function(t,e,n){var o=[e,n(1)],i=function(t,s){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o])}return t}).apply(this,arguments)}function c(t){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(e){return typeof e}:function c(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(t)}function p(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=function(t,e){if(!t)return;if("string"==typeof t)return d(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);"Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(t);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43887
Entropy (8bit):	7.966951137578801
Encrypted:	false
SSDEEP:	768:j9URsHL5jqONYXFIbfEv7LwRxcM0uGwBVsch1VCJFixv7Aai8sT+9Ft/Zd/XE:j9URsHLsONY1MEv+WM0uG2fDVU+v7AaU
MD5:	C14ACF8C77081B8C05958805FB4FF6F8
SHA1:	C4D731646BFE76772FD060E87B934639078A4D9C
SHA-256:	4F27D9DF1D6C7076E61A20F15B318EE650255A4C77048AD60CE2521A27FF7A37
SHA-512:	C373968E653C430938D7B042F86B628F7E5EF627E146009B1CA0D89A27B9D80165AD9B6566E445C36640F5BA5B632FE472D3E17C9E406D4D8F719DDD7EF5A590
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............#!....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...{.$.Q......GwM..R.......e.......5.~.`l.........-d.......okA .../.F..-^k3,..5..=.xlZt..ROOMu.#.2O.....zW......5U.'#N..'ND...+....AD.q..........U...../.~\|..7.....W.....8..{n5...g.N.'y...../.o..<.tx...K..Y.....x.A..NO.......j.\|._.~.9c.?..~.....}Z.\|.../u.f........xq.I.....1.L.=..1..M....N.A.fl...k.J.o..[...L....R...V....O..O:.X...@.6.+....I.....bz}.^.x..X.@....Z.....Z.v....?s.....r...).e..N..(...........e.z...o..<.tx...L^<....w{w.n.X....n.+..]$,!...`..+...Sl.Z...rZp......?>V;.....O..2....l.x....{..A..H...8..ue..Xv.UF."HO.T....v.}....o..<.txQ....Y.^..r..de....)QxVF...`oO.sU.,!......^_...Vm.\|..K..{.:...S.Z-:,...w....W........)......'..:..]..."..[..vw.....Z..~...K!.._..W...+W.w..n.d..~.[1x..\|.......L9.....o4hU.#-+....{w....gA.O.6.../.\....t/.........,.U.w..l..;~...B.c..Gv<....p.X.4v,......a...fS.~..[.\..O..2_n

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24774
Entropy (8bit):	7.8977443148518525
Encrypted:	false
SSDEEP:	768:7gv41RZkLaEspIxaFl5gGoYQS3k3g3/nf:8QZ4aDpIxaF150wPf
MD5:	5BF082D29588C07F842CCDE3F97243EA
SHA1:	85EB806F298D3E7EAA3D6E54682EF4E703F76949
SHA-256:	15B942249848D901938A69E03A3D44961E91C8311D7A8F1CA34FC9AFA6366B22
SHA-512:	37A093A20C3FB0361690EC3172E1B96D558AEFF826A04C7CA6CCD67A3757BF05502EAFED5D1E7D844CFD76F7AD796939D1D720092CB936C4F17CA5AE9CAE8E48
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/PCfb_5bf082d29588c07f842ccde3f97243ea.png
Preview:	.PNG........IHDR.....................sRGB.......@.IDATx..........."UPT.........%b.D.%F...\|....c.1j..h.....k.`.{C..6T@.....<.y..r..{.=..g~.93.;..Nywvv..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665), with no line terminators
Category:	downloaded
Size (bytes):	4665
Entropy (8bit):	5.254278435256975
Encrypted:	false
SSDEEP:	96:4g/39AHkZIaR4iTFX5LMLvgWcT8YbUGIBX0usaKqgebLjqDZBRg+GBDfXAE9prrM:J39AHkZd4i7oIW48YLIBX0ujK0bLGDZN
MD5:	005B12034EBD7E660D8FB368831748FB
SHA1:	B4485B5FCBE0B689C03066B8E3D21B066A823399
SHA-256:	788E59AA9F4149F9A8CF61CFACE82734B7DDF2DDD96295F8271144DE7994B1C4
SHA-512:	45276111EDAA2CE04CD519010919C45575DC80A21E508267DE9CE6F1D5A662692574211596F8283F53D712E559AE613D1BB1FAA216FBE83B9DB6E5C8217B2467
Malicious:	false
Reputation:	low
URL:	https://hector.baidu.com/a.js
Preview:	var _0x2495=['cEdPUUk=','WUVTRVA=','eUt6YnI=','c3BsaXQ=','NXwxMXw=','TGlOcm4=','d2NhWmM=','TGV2RHE=','cVFPeHQ=','UHpkTmE=','WEpZTUg=','fDJ8MTM=','MXwwfDE=','NHw2fDc=','fDR8OXw=','VHFCRFk=','fDEwfDM=','TkRkbVE=','VHJOTG0=','MTJ8OA==','cWppYUw='];(function(_0x4fcb42,_0x249590){var _0x2cff01=function(_0x175e8e){while(--_0x175e8e){_0x4fcb42['push'](_0x4fcb42['shift']());}};_0x2cff01(++_0x249590);}(_0x2495,0x1b3));var _0x2cff=function(_0x4fcb42,_0x249590){_0x4fcb42=_0x4fcb42-0x0;var _0x2cff01=_0x2495[_0x4fcb42];if(_0x2cff['fEIjCz']===undefined){(function(){var _0xf95bf2;try{var _0x3eee6d=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');');_0xf95bf2=_0x3eee6d();}catch(_0x402702){_0xf95bf2=window;}var _0x38ab06='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';_0xf95bf2['atob']\|\|(_0xf95bf2['atob']=function(_0x3071c7){var _0x3524dc=String(_0x3071c7)['replace'](/=+$/,'');var _0x15cb8d='';for(var _0x3af137=0x0,_0x2a3f28,_0x21d190,_0x35ef8d=

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31128)
Category:	dropped
Size (bytes):	126218
Entropy (8bit):	6.01416164769834
Encrypted:	false
SSDEEP:	3072:O7PD9S0c6NFyTfgHoNFHrnRHoZqQYIge+OxvuYb:q+IqQYGvfb
MD5:	4205F551042E1943072B93ADC4D5FDB2
SHA1:	A5538A8D5906CA4F7FDF6D32CDAE891F21194993
SHA-256:	928C246887B2F68CF98D86C12850052E5E7105A2988922D02BD2B7E052D0F125
SHA-512:	DDA302956A61104CACB64F4135048871B2EF7982D930DBAB613CDC0DBBC634A5BD07F552F1E481506E9EA81A8CA55974657E63BD39A8B2D2490DC9CF2C3F9929
Malicious:	false
Reputation:	low
Preview:	define("@baidu/pc-tts-player/dist/tts.amd",["exports"],function(t){"use strict";function e(t,e){for(;t.parentElement;){if(t.classList.contains(e))return!0;t=t.parentElement}return!1}function o(t,e){(function(t,e){for(var o=t.childNodes,i=0;i<o.length;i++)if(o[i]===e)return!0;return!1})(t,e)&&t.removeChild(e)}function i(t){return void 0===t&&(t=0),new kh(function(e){zd(e,t)})}function n(t){"function"==typeof t.stopPropagation?t.stopPropagation():t.cancelBubble=!0}function r(t,e,i){return void 0===e&&(e={}),void 0===i&&(i=5e3),new kh(function(n,r){t=function(t){return t+(Rf(t).call(t,"?")>=0?"&":"?").}(t);var A="JSONP_"+Uf++;window[A]=function(t){n(t),clearTimeout(s),delete window[A],o(document.body,c)};var a=$d(Ep(Ep({},e),{callback:A})),s=zd(function(){o(document.body,c),r({errorType:Yd.NET_WORK_ERROR,data:{url:t}})},i);t+=a;var c=document.createElement("script");c.src=t,document.body.appendChild(c)})}var A="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"un

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 74476
Category:	dropped
Size (bytes):	26433
Entropy (8bit):	7.991040111693482
Encrypted:	true
SSDEEP:	768:0rp3ZuDL9BJl1FB4OtCf9dO3b1oA/35XNMa:0rns9BJl1FV4fLyoA/1
MD5:	7FACF5F8B242A7592A672E50101EA6B0
SHA1:	096452986A697B385EF9C4E0371C86A01E3201C2
SHA-256:	0F9276B5B99FA7C9610A987DD068B4CE234F2BAA0E975EACFF5EC4E9B86CB0F1
SHA-512:	AD1BFF814F81BB165439618C542A0776B362D8FC9D20328B07B92A6D650C0641049CF10024548754D7A5BEDC77D77FED27FEF86702C8FA6B052717834522C9DC
Malicious:	false
Reputation:	low
Preview:	............v.H....OA.Y@..H.".b9m9.U...AV.BdP.M.L..".Z}....~.~.{...c@..e.Y.t.@...w..S..Q...A.%.+..{t...b.;A.?LE2...i..Y.....E..:u..&..&...^....Ee.FC.m.7.\|tc.Ke.n>.2.t.Z.e...iD=...../..:..\|..5.0.0.N..........[..rWx...s..(..0.......4....vF}?N.$u..ir.e"....v%j.....A....(D~..Q....hDu.q..B.k..../...\|...p".A...n..L..I4..<.I..b......`.d..n".4.F{.A...H..x..{....V.>7#..Z.Y6....[..y.2.......]k>n.......f.Q4..x. .nb.(..r....wK..n.qk'....zh+....c...L_..\|0vG.]..U..[..k.-<.....G.K.K..i}^S5..a.9&lIE.Ln.U.\|\..LLF-./I...d>.XD.'!..I+......W.MC).6...9I#..2...S.....).......cW...\g...B3{.!!.bTe....,k...q..FC!b.z.._..Fc=..89.S.Y..$fQ..^ ....@cZniUc..(....%d.?./.....c...0t?'\|...0=........\,...q?..L..e..X..z...(.D`..s7.%l.......F....i....D.e... ..Yt#.Y...<A.....\.v;..x.@f^.......CT..,:.k.1.%a..6....f(......?.d..1...u...2..L.R..%>.-e+...A.{K#...../...Q.Z.QQ.....zd.......H..Y0.D.Y51....5.^..b.../........k~c#j4..h..P/.g.....B.(V.Z...Y1o.....b.g.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	147
Entropy (8bit):	4.627839482406715
Encrypted:	false
SSDEEP:	3:YUPHMY7vafg9OHrC/HHI+eH68ftM9GJHV/HJ0P/rL1PJY7v3BrkNNHYn:YUUYjaN2/n8JVPJC/rBxYiNNHY
MD5:	995B3234C386C9968485BD304D45D5E0
SHA1:	7F4A7673C7A3166CFCBF94E0D6B28F11DEED5F08
SHA-256:	432A9795E4E233CD1E947CDA9268C8F6B4DA604D10A8DBFBFB240743AA74C2D0
SHA-512:	11BA9CA541CD5171E5526CDF313E0522C3F899A79D26DDD1FE861A94B1751A7AF37067F00F8A3B6D4D2FD26112CCE06FEA540131AD94D6ED2B123C32B8DD238C
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/sugrec?&prod=pc_his&from=pc_web&json=1&sid=60271_60852_60875&hisdata=%5B%7B%22time%22%3A1729855702%2C%22kw%22%3A%22%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C%22%2C%22fq%22%3A2%7D%5D&_t=1729855702209&req=2&bs=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&csor=0
Preview:	{"q":"","p":false,"bs":"","csor":"0","err_no":0,"errmsg":"","g":[{"type":"his_normal","sa":"h_1","q":"...."}],"queryid":"0x8fd80274d29328"}

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5222
Category:	downloaded
Size (bytes):	712
Entropy (8bit):	7.662133354340943
Encrypted:	false
SSDEEP:	12:XxooxOwviCCDdCZOYXaapX8c+zuBlViA6KQsOq7pNH+heiQRepZBNJLz:XxFEC2dCZOYKGTNlIzKQsOq7pNehHQRa
MD5:	B63716E6BE1B82A85F0680B015105F0F
SHA1:	6E01B5FAA9CE4973F07A59F8BDB45D26BD0E6424
SHA-256:	2E2EF50DFB239A557EF078097143BCCC04CE37DFFC35009B080A78771A6D34C5
SHA-512:	5102D566101D84F8DEE6C0DC3A54EA9A70FD1AC5364CA0A21B5594A28A2A2A964F8CD959B62BC38EB8B1E3EA76D0C86EA952E39F257EB73559080CEFE88E063E
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-dqa/tokens_f083bbd3.css
Preview:	.............n.0...&...Q.$...i...).=..VU..r1.{wvM.O......X}l.K...,...?......8.CV...C..v..r.m.........xt..c...m........_.r....[....k.:g.....2....dg+4....Z...?..,..=g}\.}.....s.~.9?..>V..]...%$Avz......,n..Y:.o.qe.....<n..Qa.I...UP$m.o..+...&o.6O.4{UW;.:d.KU....r;.=Zdnw.,.......n%...J-:W.#=......r.E..[..._...;w)>...Df..%..ly.w..].,..\|k7\|@eW..N..GL.7.+.T...I.>.g...NF...4.=..,.U(bW\s....4I.&g:....m...E..x.2......_....p..pSEc.&fa..b.S...u).....x\.JKG..O=.A.I.).~MUb.`..\|.U.C......t/.7..1....!.:...X:s.".C"...9xl.N2/..'...f.......z.....n..*...}...2&.C..!.&a.pT.=.......B.......6..\.~..w;..Q...Nf.....!..<....o.p..._a\..?..Y....o.h"....Pc..-z..TX[..%...M.Fb............y..f...

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (498)
Category:	downloaded
Size (bytes):	4477
Entropy (8bit):	5.11970157523138
Encrypted:	false
SSDEEP:	48:9qWHQNGbkfaEIyB6aJF9MX46gTh/CwCMEJmF26+zUUD1hGmZBra4fTuQjB34gap1:/+3UgF9Jh/C5MEJHva2Bra4blCHp1
MD5:	B7693B0CC71A26CDD07BA8D3A97E0F36
SHA1:	59A58AF7B309B16A26287DE7EF12474D71648723
SHA-256:	74A8E618E19166D3208F87A0A3C9F42BD0EB8DC9C2AB5DDE91C2FB9649D47152
SHA-512:	9D1F6BF529D13D4A9025F99B63E0FE0E64F816C1F4C7342C452686670DAA4EF922018069F5EA405EC61D2D1D02BF0645FFA31BFCA219F2CA25A08297577BD5A5
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/top-right-operate/operate-b7693b0cc7.js
Preview:	define("superman/components/top-right-operate/operate",["require","exports","superman/lib/extract_data","superman/lib/commonUtils"],function(require,_exports,_extract_data,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.RightTopOperate=void 0;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(.var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){.Object.defineProperty(obj,

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3421
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.866329801657717
Encrypted:	false
SSDEEP:	24:XTsYpSIGoYCP8Ok0WeqRx1TN0xfIhqXOkSezhNdroVUrphRwPik:XTs4ZGoXP8L0xwvTexZx5zhNdr3vE
MD5:	E516E5E57A1141C7D35857805F99A313
SHA1:	DC1096B790BE6CFDBA8D7BCEF40963E8478222C1
SHA-256:	7004467C196345520462A3F97A0751B1EADA7E3DC7F590F89ADEC1D9A3D8FFAD
SHA-512:	9143E01745FE899414E214B947EC911208DF108740E3FDDA3AFBA8C9CBBB187643101BA90C80AAC4C654E13ECA7BF3984C02D09A2C404A1A77B0AFCBEF9357A3
Malicious:	false
Reputation:	low
Preview:	...........Wao.6..._a..@..k....6...64.e....s.EU........dIN....$..x<....r../.<.B.m..HP..z)....Hp;L..\.{..!...C.>2\|.u.i..c.............e4n...Y..{.'...>]m.]..HGy.e\F.c.JAi.'.1..:.:JeR. .........EJ.1...=...XC.D....~.L0..)Y.4......d.B.Y..H.s.f....m......f..bz...$....L...4}..x-dI....1.....#Jne.!./J( O.f3S....0B/.)...QeNkGl.........7.......KL(......u..9.J[q[.]...-....!cP.E...=........`..DVl....H..6..bn...3...p.^hV.4...(..J?f......8..:.H.........O..rU`.....,R}.t.'@M.?...o.%t>...?...+u.P..3..........c.......c..QH.=.t-E:....".........__..M..U...U\|.u..e..U,.Z.....k.kP...q8=<C...c.6!..<1...9..Z......Ve.ng4g.c49.h...K......1...ZZ.m.>..0.....p...../.\jYbY.............5....4...Dr..9..2..O..x..2A......k..>b....TF.`B.Y.i.K3C.. ...'.".Q.=..5.k.6.......A.)y'.H(...s..u..S..n...fQ..&..g..{.*.._......(j?\|..r...\.8\y.1v..%i'..X..4.:.\|.u.N.... 4-........1O..6.ED.D.....pW`...K%G=.9...9.\..p......{.=..B...%t.XM..T.B...00...pj...8q.][..fW7kF.=..TN`.v.)......"p..<.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	7.898345696821117
Encrypted:	false
SSDEEP:	48:Ky7kV+NY5Z8kppuklBg4VyV924bdn6H29+hT1xnbitNHjeu2qvBIwPH4L6AGogF0:8VP8kpu74V145n/ohTLngn/IwPHrAcI1
MD5:	9981CD1FDBBABFAFB8CEC5980067E9B6
SHA1:	5B3FC9EF4029FCF64E9EE089F19120252E3DA06E
SHA-256:	C11B2ECA9E31659DFF163EFD11BDE4651ACAE1C2A04FD7EF38E0B939A7567B0E
SHA-512:	B3734BE9E44827A586CBF63550FE7D71BCC218F64DA4AD3E674B88316F55D50DC98C59018E446C693B383EC83EE4A1CFEA12221A4437DF81E035630BBFA0C852
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................^....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..MlT....TQe"".W.+.l.,..;!].\|,.....b...",.c...Q!%.]...R......Gm.XB..ME..LT.b.T.TU.Q..v..{~..3..{..s..'=.`......s.=...b.......!...D5.......P`...LTC..j(0Q..&...D5.......P`...LTC..j(0Q..&...D5.......P`....d...\.z5~.5??/w..]...[.._{...w...Zr\V...tppP.........&CCC...d.EF`. ..:uJ......HM..9.E.q.9.....)...u.....+b.\.'sss.i.&!.0.0...w...2.`.Gy.B......z$.......9z.+.2[..T#.Z(p.......V$.......EZv.4lK.^.My.>..F.....mL..^"/.GW..MMMV.......)c~.]....v...'N..&/8z.(.-.#p.X...})....F.~.[.......g......O.H%............``..\.K...G`[ .>y..P....).\.20~]l........x%.(..J .^.........>!.C.W.:o.........R.....\D..N.. ........D.........C.......^....k....w....S`........L(p1P^{.X../a.t.&.D]..*..<.....D.q.&..V...$EWW....Tr......r..x.O. =.....d{...)p.@fH\|....9...0..e.XXNJ...........P`....L...o..s.....!y....sP.J..._.......Q].Q...%..{&..n.H.s"..?Gb?....`...Ra.....#yn....".}W4..F...2

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8123
Entropy (8bit):	7.94880210884359
Encrypted:	false
SSDEEP:	192:A44SfpUUpP7dgov22+V/lyOwNMNKCMi5a74GffDMEBgqKPq+AAd7R:A4/fGUpPyRtllyOwYMi5a74stOqKPq+z
MD5:	424BBD998CA9316A90D7F306229E4BE7
SHA1:	15311F82CCFF5819BC594E68CBA55B0A0A11D637
SHA-256:	25F2C41D375F6545C8D9608E925CDC0FFBF14D27C5D04848CA28D997D31EA363
SHA-512:	F6E00D2E908374F180263CBAFC8D406AE138B00B159280459DAFC0A2E3550BB3410D6FD2532709F3E27CCCE7D31EABD96F82228230E2EF6D11555607C94188BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l...l......fW.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................IDATx..}.\.u.....,6T.B.......&I../.q..y..(..X.q..9...3.,.4..@..MR.aR.l.....]2......Ti.q(.....~Y....o@.h...y,p.....s.9.........qx.....qx.....qx......._.Z^...,nw89..qF......@.&.....v.;.....7..r.P`.\|L...Q..E,.8Ib..PD.P.;......w.........."6F.n...C....Z...gB..A,A.$.._~....U..%...p......\c.7Vy.P`..$.g@<.a.&!..._.............3.....Wc..7Wy.P`..T.........O#,..ms&...`~...0w...<....o...C..A.X............j4.\_~#f?.[!.h.}-...\.....&p.....D`....+..`U.b..JG..,...3.5/...f....6..x.J..7H.}.A..\'.....,.....s......T.D.bq+u..$.....I....VhFPFp0~.ho#..b...R...L%...Z.G.a.U-b...8i5...r..../../2Q4....)k.jY,f6..j.!.Z.$...E....../...M..sX...N..>AD(....l....HfQ.`D.%I........2~0z..7Q.7..H.;..u8......z..;......,...6&2..@s.zk.....J.sU..a.N..-k..O% ...]w:..........`.k...V..2qT1V...x*.^...,..h~.E.4.Y..`.`)....z3...+..X...&..f.6].Dc..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10639), with no line terminators
Category:	dropped
Size (bytes):	10649
Entropy (8bit):	5.377291019468688
Encrypted:	false
SSDEEP:	192:j+1H7ACpMBysdAxYItvs6EPzIP6Y0MZPyx62XwLWgYluGX7LD3++1:bCYycAnsFzIP6YrPd2XwLWgCuGr/j1
MD5:	4371BF02879AD0171AA6F0968A970B56
SHA1:	D979D2BC9337B73894F161C19B2D42F71D8B453E
SHA-256:	85873B5BEFA860DF5F7FBD35C3439C6B814F5C35AEF2C18445CEE4063041CEEF
SHA-512:	232C825AE993A1ADD5D39EA75408C39F1CEC8D1A8D42B3167FDC60F0450042BABBA799EA195D2E06C6FC7366D2F90951ADE4747D9B534594369032FB0E722DC6
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/recommend_list/result_8521caf",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(n,r,o,i){return u={},a.m=l={0:function(e,t,n){var r=[t,n(1)],o=function(e,l){"use strict";function u(){return(u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},c(e)}function s(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=function(e,t){if(!e)return;if("string"==typeof e)return f(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(e);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	564
Entropy (8bit):	5.051821460428066
Encrypted:	false
SSDEEP:	12:07Vgy7OGzGJiyo48V9ymFs2N6d2xzRCXGOTAdFcGTBy3w9ENs+w8eGizG1UKVB:0v7OGqDo4A9ymFsjd2pYXGOcEGlygeWk
MD5:	E2CEADD14D8E3FB1106E48AC89843760
SHA1:	2EC737233A3DF71D4D91476EF19D8DFC362EBD79
SHA-256:	3E4CCD740747E6805F9EFE89C3803697E9E867578DDDD215437FECEDAA8E625F
SHA-512:	03DC292CED672A7F4E999B8907474C338593D136481B8641EEF2310B5630C0DB0FE67ADA90ECE016088B68381E8F0E1EB9D3265E65337AD3858D2AD1F6A0FA7B
Malicious:	false
Reputation:	low
Preview:	F.addLog("superman:components/tips",["tipsClick","activityClick"]);F.module("superman:components/tips",function(require,exports,ctx){function init(){var $lmLink=$("#lm-new a");var activity=$("#bottom_layer .activity");if($lmLink.size()>0){$lmLink.on("mousedown",function(e){var $curLink=$(e.currentTarget);ctx.fire("tipsClick",{showType:$curLink.data("dataType"),clkText:$curLink.text(),clkImgUrl:$curLink.find("img").attr("src")})})}if(activity.length>0){activity.on("mousedown",function(){ctx.fire(."activityClick",{clickType:"activity"})})}}exports.init=init});

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	63683
Entropy (8bit):	5.3766198487912344
Encrypted:	false
SSDEEP:	768:CF9F5U1hugyH+VxdJGn9BdsT/YDdzIvdgLyKszmxc9btEd0b8CXIQP6ts+Mw6gsN:s5o69BdsgfgzB8giz6UqX8xawHngQ2
MD5:	5440D5BF38D63737FCDA82CC37DB03B1
SHA1:	28F41BAF060DB39FA6F4746FF42C044E5F1CA84E
SHA-256:	6D85368E060E1A754BD884EA780F91827E4EB52E1B93186CAAB76569882CD0E1
SHA-512:	8960AC96A54FCE03DE908DDAA8B96DAB629344CACC62CBBE2E376B83E9FB9148A3F229F4531FC05AF93B00433E09953268BDBB9D8CCD443268F713881885F5A6
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/sbase-5440d5bf38.js
Preview:	define("superman/lib/event",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.fire=fire;_exports.on=on;_exports.un=un;function fire(modName,evtName,evtArgs){F.use("superman:lib/mod_evt",function(evt){evt.fire(modName,evtName,evtArgs)})}function on(modName,evtName,handler){F.use("superman:lib/mod_evt",function(evt){evt.on(modName,evtName,handler)})}function un(modName,evtName,handler){F.use("superman:lib/mod_evt",.function(evt){evt.un(modName,evtName,handler)})}});.define("superman/lib/extract_data",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.extractData=extractData;function extractData(key){var el=document.getElementById(key);var res={};if(el){try{res=JSON.parse(el.innerHTML)}catch(e){console.error(e)}}else{console.warn("".concat(key," NOT FOUND"))}return res}});.define("superman/lib/commonUtils",["require","exports"],functi

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10328), with no line terminators
Category:	downloaded
Size (bytes):	10340
Entropy (8bit):	5.328732566643217
Encrypted:	false
SSDEEP:	192:l3twJvCp3C3XcCvPyPMZEjC62MMSabY7OmjBWbxqk:SvCdCnX8SEj52OacPWX
MD5:	8FF2F8BC66DB60D33D1C56D68A7EC2BD
SHA1:	211CD1EDB4DA52FD9CD9045F7D55CB292E3E7563
SHA-256:	05DB2A97B328BD9A89E60BA8349A134F242F8CDFC77FEDBC3FACD6B625FAC32A
SHA-512:	C704492A3217BD9D8FA3139C3B32782CAB9C35E763EBDB44736376BA396147B3B403B6E8497D5294CF077081A61D5E76591C1FA62FFD18B1E1C9AB4501640E5B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/page/result_2c2d38e.js
Preview:	define("molecules/app/page/result_2c2d38e",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(t,r,o,a){return u={0:function(n,e,t){var t=[e,t(1)],t=function(n,u){"use strict";function s(){return(s=Object.assign\|\|function(n){for(var e=1;e<arguments.length;e++){var t,r=arguments[e];for(t in r)Object.prototype.hasOwnProperty.call(r,t)&&(n[t]=r[t])}return n}).apply(this,arguments)}function c(n){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(n){return typeof n}:function c(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n})(n)}function p(n,e){var t="undefined"!=typeof Symbol&&n[Symbol.iterator]\|\|n["@@iterator"];if(!t){if(Array.isArray(n)\|\|(t=function(n,e){if(n){if("string"==typeof n)return f(n,e);var t=Object.prototype.toString.call(n).slice(8,-1);return"Map"===(t="Object"===t&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (498)
Category:	dropped
Size (bytes):	6378
Entropy (8bit):	5.177676927152298
Encrypted:	false
SSDEEP:	96:10LM6osUTrO8VlEbayC+5UgV9QlC/cbT2Wox8r3Cf5ApAlJNC3NY:q46osU/lEhV9Qr3Cf5ApAlJNCm
MD5:	F4527892F08AB76FFA73294FAE10D6CD
SHA1:	A61AB885DF37CB4CDA5A46A25EA6C49C32028CDA
SHA-256:	CF46644B0E0C331CAAA9096B2784B4135DD84E3366E12B93FD8F0F883437DBCA
SHA-512:	CDD033F63B3E74ED5917A261C0FE13C707C02E64E3E9E9A5031552ED1B4C615F34FC86DFF23F5342E96872C1738631104EE97AFDD69D3559A1030D8FBCBEDECC
Malicious:	false
Reputation:	low
Preview:	function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj}}return _typeof(obj)}define("superman/components/aging-tools",["require","exports","@baidu/aging-tools-pc","superman/lib/event"],function(require,_exports,AgingTool,_event){"use strict".;Object.defineProperty(_exports,"__esModule",{value:true});_exports.Tools=void 0;AgingTool=_interopRequireWildcard(AgingTool);function _getRequireWildcardCache(){if(typeof WeakMap!=="function")return null;var cache=new WeakMap;_getRequireWildcardCache=function _getRequireWildcardCache(){return cache};return cache}function _interopRequireWildcard(obj){if(obj&&obj.__esModule){return obj}if(obj===null\|\|_typeof(obj)!=="object"&&typeof obj!=="function"){return{"default":obj}}.var cache=_getRequireWildcardCa

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 101301
Category:	downloaded
Size (bytes):	26904
Entropy (8bit):	7.99040157856693
Encrypted:	true
SSDEEP:	768:EOl23+DgxrkOJBogih7lN2Rg3txTtDqos/lsdVXtPvrDwXL:EOl/YBSlOU1+os/GnwXL
MD5:	D994A9C792139C2A124585EF31C8D7A3
SHA1:	9FCA01C9C9F1FD39684062C910A8EC3DA676CB78
SHA-256:	B14C43D1B6AE20441394BE2B348637FA1BCDF483322EDCB7143C4AAC4DCEFC8E
SHA-512:	FB01129EEAC96D85351B3181196C86EE1A9F303A261F4D51D80D5097555BEE5D61498E4AB61F00702E284FB68A235A4D356F1853F83C9A2482078C01A4D61BB0
Malicious:	false
Reputation:	low
URL:	http://hectorstatic.baidu.com/96c9c06653ba892e.js
Preview:	...........{w.8.(..~..;..V......'N.L..%..u..........$...@. ........$".(...z.....,Y..f...f..[t..?...N.q.G..^..h7...n.\|.~~....x.....E...~..S....O..9....!.g?.g.N.!a?.........`]...<.GY:.?...........H.i2..E.}..W...r#.a?..;....=......9...../.......w..t.#K.[.>`8..Y.4q2=8.{....!tq.,..7q.C..xg.....Ow...~...d...........'=......,:.\|.w.99..9}..v...8....!t....=.....3=..'...`.1....`.s...x.....]7.....~.....=N.....0.../...3.=:..8..w...e..;..o...{..h...]>..{.0:;.eO.W.3!I......3....W_N8.sk.1................G........5..p.z.......m........UT\|..I._.....n.k2.z~.t.8Lv...3t.39:.....&.0f{.......z..L'.^.x..p.N..;..b..t..9...&).*mx.q.c8....H.....0?..Ad...zb..ZW.SG2.=..?\|;.............W..\|@....mY..{...H.9..=..7..=`. .\|>.D...9E..;.\...&\|&O..AQ..d.{.aw6..Lq..a^`...E.....i.z!...:.9_.mh...u..y:<..g....>.A....,r.G.d.f{x....px..?...Q.&.....$.y.O...j.B^.2.+&.C..A............. 9_....'....Ag...o.l....e2....,.G......1_v.c......T..71.Xw.}.r....j.i..<.G.hp...\.......

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6509)
Category:	downloaded
Size (bytes):	114415
Entropy (8bit):	5.5838033681155785
Encrypted:	false
SSDEEP:	1536:uZkwNWEGbeuiTsh30tKnVYRK+moG/jvUlm9C8HNf4qYv1NnmVW8XyxAhj+FUkeRc:uG5beuiw8fRK+moG/DLjOFT
MD5:	B82F23370AED002E42BBDC097196E123
SHA1:	1721515F9B21A1BA642D23802106A1B519EFFE38
SHA-256:	19DE10E1F181DACBBC0E1DE47A34C6E5ABDAB82317E2F8BE15FBB838C2E7DF1D
SHA-512:	2EE14DFB3991199DB4EC18D2609A7FC704B27B0B1947D8F0C99F938F0904E44E049BFE62287235721C1112CA43988F6C126E68C644C89418DDDE129500D62D41
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/guarantee-popper_b82f233.js
Preview:	define("@baidu/guarantee-popper/index",["exports"],function(e){"use strict";function t(e,t){return e(t={exports:{}},t.exports),t.exports}function n(e){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function r(e){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e.})(e)}function o(e){return(o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function i(e){return(i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor=

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (587)
Category:	downloaded
Size (bytes):	4325
Entropy (8bit):	5.138029228496405
Encrypted:	false
SSDEEP:	96:o3H/ePdAZE9TfdHyZvZaIO9qjgKdiV5ZgS6vf:o3fcAS971ckMiVwS6H
MD5:	2E8707E357621351A1E8CDF95C9F85E3
SHA1:	2E64675644CB3D9ACAD8842654781A2554013411
SHA-256:	7F83EB5AC836F4F0C1B260151273F2C13539FE81E7AA8A75175551CF769385FC
SHA-512:	34F733653ACFF9F5FCB85FACC943F90BF05FB84F022F67E5A48ABE4E953588A969D84162719740A7384786C3A682EA63C76C5817EDCFE24C026A64527ADE55EE
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/underscore_2e8707e.js
Preview:	define("@searchfe/underscore/src/index",["require","@searchfe/assert"],function(n){function r(n,r){var t=n;return(r\|\|"").split(".").forEach(function(n){t=t?t[n]:void 0}),t}function t(n,r,t){n=n\|\|{};var e=(r\|\|"").split(".");e.forEach(function(r,u){n[r]=void 0!==n[r]?n[r]:{},u===e.length-1?n[r]=t:n=n[r]})}function e(n,r){for(var t=r.split("."),e=0;u(n,t[e])&&e<t.length;)n=n[t[e++]];return e>=t.length}function u(n,r){return null!==n&&void 0!==n&&K.call(n,r)}function o(n){return n=f(n),n.shift(),n}function i(n){var r=[];.for(var t in n)r.push(t);return r}function a(n){return Object.keys(Object(n))}function c(n,r){n=n\|\|{};for(var t in n)if(n.hasOwnProperty(t)&&r(n[t],t,n)===!1)break;return n}function f(n){return n?H.slice.call(n):[]}function s(n){var r=o(arguments);return H.forEach.apply(n\|\|[],r)}function p(n){var r=o(arguments);return H.filter.apply(n\|\|[],r)}function l(n,r){if(w(n)){var t=o(arguments);return H.map.apply(n\|\|[],t)}var e=[];return c(n,function(){e.push(r.apply(null,arguments)

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1173
Entropy (8bit):	7.4222489286736195
Encrypted:	false
SSDEEP:	24:gvqBe0HlvthFwZ6jIIrbKNeMmpHaqalLOuZEs8Isc:gv9yBtoZKaNBmp6qapqpg
MD5:	BC720B8836330BF45E770E91E2843609
SHA1:	5FCC0DD9879F3D461B43673EAF968A881E806AEC
SHA-256:	936E5844568F535C74E05B7C9DD28E2576144EA4F9B84032A0EA571F48533AF8
SHA-512:	557159CF8E9780E80820F5C7B1154E617734D6913F23EBFB569219AEBBA11714C8A31DC579FF1E1E95334D65ABDDFD167263FC35776E5459C272CE9B4480981E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K..".......................................+..........................!1."A#Qa..q.%BT...............................&......................!1..A."2Qq................?..)...D@...DD....XO,PB....D.=.v..<.O..-..y..........H..........HC..m.B.UxE..t(.......s.j+0?..v...#.y.V.I...r..jJ."i?.$.M"...@r\|....b,..t...r.F...za...........O..l.+..[.\..d..0akO.f.tO._eo.\,9.l....`..Z..... .=...k.{.H\1.>..2........V..L!......n...I...m,5g..........T.ue}.t.k..{........a..v21f(Xu...c.\|.hl.`.u...:.....]....f~.1d.-^.G.&........5.M..{.GOqyq\|......-.V.g.6..I.'Cn'....d.j..<b.(....{.5.^..W=.t.oV....+.,%.y..~....F..4.=.Z...1.`./]...e..n...._HA4..R.ha\|rH..#k...q ...,x. .,\|P.n..^.=.G..5....3..g....zA.x....&c....>.Y.45_~gD.:K.Z].,i.;...fG...9..+...+&...@%f.d......dy.....*....._#1.6F....Y}p}.g.h.c.w..u..)~.....>.'!a.j..B=

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1049)
Category:	dropped
Size (bytes):	45410
Entropy (8bit):	5.392346244781981
Encrypted:	false
SSDEEP:	768:KVFd58ImF/1kHkgv/CsBcZ7Z2zPUgB3ydhHUZY91IKcwkzs:KVr58ImcRvqWIdQ+h06fDQs
MD5:	EEBEC197CF9E96AB5DA67286F7867292
SHA1:	0468898F337DD8EB4520DDD4D3B0C3067FA48479
SHA-256:	33DA032DD0A8C5CEE4E04A6DD6A0D0499714EC948BBD11B2907808E24189E15A
SHA-512:	087D36188D2FE8AEAC2E3B035259227651713F447297E297424134E27E6DFEE5CF0C76E18680FA1E3EB09F4B7F05E322CC8D7D30CCC9062ABBEFB26F75F3D672
Malicious:	false
Reputation:	low
Preview:	/*. @file ala-util ..... * @author cxtom <cxtom2008@gmail.com>. /../ global __inlinePackage, __inline */..define("@baidu/ala-util/update",["require","@baidu/ala-util/lodash"],function(a){function r(a){return Array.isArray(a)?a.concat():a&&"object"==typeof a?t(new a.constructor,a):a}var t=a("@baidu/ala-util/lodash").assign,n=Object.prototype.hasOwnProperty,c="$push",e="$unshift",l="$splice",u="$set",i="$merge",o="$apply",p=[c,e,l,u,i,o],s=p.reduce(function(a,r){return a[r]=!0,a},{});return function f(a,p){if(n.call(p,u))return p[u];var h=r(a);n.call(p,i)&&t(h,p[i]),n.call(p,c)&&p[c].forEach(function(a){h.push(a).}),n.call(p,e)&&(h=p[e].concat(h)),n.call(p,l)&&p[l].forEach(function(a){h.splice.apply(h,a)}),n.call(p,o)&&(h=p[o](h));for(var d in p)s.hasOwnProperty(d)&&s[d]\|\|(h[d]=f(a[d],p[d]));return h}});;.define("@baidu/ala-util/ala",["require","@baidu/ala-util/lodash","@baidu/ala-util/index","@baidu/ala-util/na/utils","@baidu/ala-util/na/naConfig","@baidu/ala-util/md5","@ba

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	243
Entropy (8bit):	4.577474718943218
Encrypted:	false
SSDEEP:	6:FqzWysmHTMoFrmWFM4xYXtdrrzWyUzWysODfzNYf:QzWJmHLrVxsrrzWRzWJOO
MD5:	8F1A1AD324F5F01176DD1729311CEBA7
SHA1:	6D02E80756552FB8F7C7394149C985A50B8D2F19
SHA-256:	CC88761A99C4F2D4C09F5F2465E27FDDA43E56BF46EC8F2DAD94EB56D9F7991A
SHA-512:	51F5D357A4322FFEC8F85415FB3E2512256061A0A3040F860839D303738A6276AEF4D7DCC32AB938CB4BA1DC245C3B8E0D0C5AB80070A391D9DC705CCD15F79B
Malicious:	false
Reputation:	low
Preview:	define("@searchfe/assert/index",["require"],function(){function e(e,r){if(!e)throw new Error(r)}function r(r,n,t){return e(r==n,t)}var n=e;return n.ok=e,n.equal=r,n}),define("@searchfe/assert",["@searchfe/assert/index"],function(e){return e});

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21750), with no line terminators
Category:	downloaded
Size (bytes):	21766
Entropy (8bit):	5.455153857669513
Encrypted:	false
SSDEEP:	384:nICUr2t0cx2RyzDMNQ7AwdAqAL7PPRWN3/LEIjf7LrhuzwiMKf2Cr:nICUVciGMc2RWZDEIj9k5r
MD5:	8DC236DE69754E5A0D2F1647E8DC656F
SHA1:	DCE461F8900C565C56D10CA9C29126E176B5E29C
SHA-256:	AE0628A238A9CA7401DFA6E601F599A6B5FE16933D45B71C444B90AD9377BFF1
SHA-512:	D70ECF4F63B0DD9135FCAA0B8E11CDB7EB1324EB432DFB3775F6E7A17D2A736D14B877A19BCCFFD88F3AD6645DACE1BC3505CA834E878FFF71F4693D4B5F69F0
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/right_toplist1/result_a423202.js
Preview:	define("aladdin-san/app/right_toplist1/result_a423202",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(n,o,i,r){return l={},a.m=s=[function(t,e,n){var o=[e,n(1)],i=function(t,s){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o])}return t}).apply(this,arguments)}function c(t){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(e){return typeof e}:function c(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(t)}function p(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=function(t,e){if(!t)return;if("string"==typeof t)return d(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);"Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(t);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26390), with no line terminators
Category:	dropped
Size (bytes):	26410
Entropy (8bit):	5.472830245685294
Encrypted:	false
SSDEEP:	768:3sCXFJZA4F8mfxuLhlbgzLe4iWIoYocw7gqMF:3Bfjto54t3YocwPW
MD5:	C9BE45F2F805EAA9121C27BBB9D9548A
SHA1:	7BABC74F21E4DF2CBEFD322BE919218476198F20
SHA-256:	B35B4C69E3CFA3B0DC6B7BF5845735330B245ED81DD7FCAC2D31FFB55B6F9B28
SHA-512:	921BBA5DA42EA1C2B5D3BAC6BB62D030F8001D14226D5B42F99504FE4882729871F09A08822B7571C371119B624A1F7E6AD96B2DA7D6CB3CD6A341629D0266A4
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/news-realtime/result_d7716b3",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Link_Link"],searchUiPcNode["Tts_Tts"]],function(n,r,i,o,a,s){return c={},l.m=p={0:function(e,t,n){var r=[t,n(1)],i=function(e,s){"use strict";function l(){return(l=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}function p(e){return p="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function p(t){return typeof t}:function p(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},p(e)}function c(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=function(e,t){if(!e)return;if("string"==typeof e)return u(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n\|\|"Set"===n

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10639), with no line terminators
Category:	downloaded
Size (bytes):	10649
Entropy (8bit):	5.377291019468688
Encrypted:	false
SSDEEP:	192:j+1H7ACpMBysdAxYItvs6EPzIP6Y0MZPyx62XwLWgYluGX7LD3++1:bCYycAnsFzIP6YrPd2XwLWgCuGr/j1
MD5:	4371BF02879AD0171AA6F0968A970B56
SHA1:	D979D2BC9337B73894F161C19B2D42F71D8B453E
SHA-256:	85873B5BEFA860DF5F7FBD35C3439C6B814F5C35AEF2C18445CEE4063041CEEF
SHA-512:	232C825AE993A1ADD5D39EA75408C39F1CEC8D1A8D42B3167FDC60F0450042BABBA799EA195D2E06C6FC7366D2F90951ADE4747D9B534594369032FB0E722DC6
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/recommend_list/result_8521caf.js
Preview:	define("aladdin-san/app/recommend_list/result_8521caf",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(n,r,o,i){return u={},a.m=l={0:function(e,t,n){var r=[t,n(1)],o=function(e,l){"use strict";function u(){return(u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}function c(e){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},c(e)}function s(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=function(e,t){if(!e)return;if("string"==typeof e)return f(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(e);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20028
Entropy (8bit):	7.981038335631545
Encrypted:	false
SSDEEP:	384:Fta1ocz3ViQp0JxApAF2bC80GZet1MbHdDk7v3eUnXSSvKYRKdZ:Fta1HlXCJxA5OQZetahMv3hXiYE
MD5:	226AC51819632BFA698C4C56E87DE059
SHA1:	9F20887B142C7B0872EA2341ACFCD599F502738B
SHA-256:	A2E0564685D5852A0C678DB7593254538FF69477F539747E0E4433F29223C7E5
SHA-512:	1982CF9ED36BB404EC7F41F52DC174C7605B93B130B23F505D1E437920A60DA102F7D3E3A1E2AF63D520E27A39A46584E0E31DEE42763787F515174A24390AD5
Malicious:	false
Reputation:	low
URL:	"https://ss2.baidu.com/6ONYsjip0QIZ8tyhnq/it/u=2761266866,1242382534&fm=179&app=35&f=PNG?w=120&h=170&s=1785D84E93E1895B4AFABBAF0300F008"
Preview:	.PNG........IHDR...x.........f.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD............M^IDATx..y.\U...~.U.[V.v....0..N...Pq...(Q..QpF..up..]@..Wf.......Q.PB..N...I..@....v....=..{.........}.y..R..{...s..,....Q:JG.(....J.._.l...jL...z.3..Jmu..).>5..<..._w.V.....ci....Z.:._/....\......["2.0.\|}.....;....."../../.....\......J.Uu..a..XD..H......GP....J"7........p...g.W<D..P..u.......s.........~K0X.)l..P..y#.).....N\|j.....T.Z..V.....D...o.Ln.!....+.c...G_..0C!-p.p...l.y.... .p)06.Wv...P.j.^/0NU....>.R.....}.$yFU.%z)GJ..Dm..P....,....u..4..3...}......l.....I}.c.7F~P....wB.....^.......P.9...y..Gs......m=.{.:.e..N`.@...h.v_.pw[w..._.}`6E..{.j.%..-.8J.p...a%Y.f./..D."FG-{h<./.D..)G..`....O.-.xEe.UQ.G.3p.L....p..G....yr.%'{D.\|...2.@<;{T..d..."..h....4z.....d3.....8k.i...Qe=............r.g..y....^f.^..m...>.QD.....[.oa.T1....J.Y.c.Dg.b..'...aD!.%l;Jk$.nE8....[..`.B......B.Z~..U.q....s..L./p.[.cKTv.....Kc..$...x.L..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (679)
Category:	downloaded
Size (bytes):	4256
Entropy (8bit):	5.505598126962859
Encrypted:	false
SSDEEP:	48:aKVqq/DwOCVoDIL29Tr40YR6PjR2f8PtZHEaM54C4Aw5xUd61oV9EuTaQvbLyX5q:aKoxrQbEkPtZyP5XUAdP/ui
MD5:	064271ED9B70CBF13C1E7737B490408E
SHA1:	35C1ED5A44A4AD9A312CF06EF1060559CA62EC26
SHA-256:	19356784C8CCAED118396513B2C7E4981352470B6866A49AB378BE0488CD5FC0
SHA-512:	A361713D023FFACC5CC0E094CD9129CDABA57E521096F70C52D2BD51010B7A4CD78A6EC6804C9994C608739F6096FBB85325B6A2E55A3151BC7FA39D005CF5FD
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/advert-064271ed9b.js
Preview:	F.module("superman:components/advert",function(require,exports,ctx){var $davertWrap=$("#s_popup_advert");var data=bds.comm&&bds.comm.popUpAdvert;var timer=null;var fadeTime=600;var showStyle={transition:"all 0.5s","-webkit-transition":"all 0.5s","-moz-transition":"all 0.5s","-o-transition":"all 0.5s",transform:"scale(1)","-ms-transform":"scale(1)","-moz-transform":"scale(1)","-webkit-transform":"scale(1)","-o-transform":"scale(1)",opacity:1};var hideStyle={transition:"all 0.5s",."-webkit-transition":"all 0.5s","-moz-transition":"all 0.5s","-o-transition":"all 0.5s",transform:"scale(0)","-ms-transform":"scale(0)","-moz-transform":"scale(0)","-webkit-transform":"scale(0)","-o-transform":"scale(0)",opacity:0};var TAG=data.tag;var KEY_PREFIX="advert_";var KEY_SHOWTIMES=KEY_PREFIX+TAG;var KEY_CLOSEADVERT=KEY_SHOWTIMES+"_close";function initDom(){var countDownBg=data.countDownBg\|\|"rgba(251,251,251,0.8)";var replayBg=data.replayBg\|\|"rgba(216,216,216,0.15)".;var shrinkClass="advert-shrink adve

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48568), with no line terminators
Category:	downloaded
Size (bytes):	48932
Entropy (8bit):	5.497986554354248
Encrypted:	false
SSDEEP:	768:t8CGRcFxXcufY4m1CWdKdINoBBWSqJEqS03ro+3ZYU3Hed3X4KXLk5otg:6R6xXBfY4m1CuqImVqS03ro+3ZYU3He0
MD5:	287FA29B8C5D129D14A29CCD7BFD7C48
SHA1:	81E7024CE39F394848E09972B16A4B7BF0A38D7A
SHA-256:	414EAB3A90E297361EBB1A6ACA0418DA450514E9D5A15034A2F5917E811CD54F
SHA-512:	1C3986CB96BD248A7F3491F35D7BC6C7E1150C000C241C3CFC2CAA904D52B7FA46AE2CD28169EF6AD81B47F6A1E470867302233B80DEDBB25782564CCE9C5CF1
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/se_com_default/result_be4e7b3.js
Preview:	define("aladdin-san/app/se_com_default/result_be4e7b3",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Title_Title"],searchUiPcNode["Row_Row"],searchUiPcNode["Image_Image"],searchUiPcNode["Row_Span"],searchUiPcNode["Source_Source"],searchUiPcNode["Label_Label"],searchUiPcNode["Star_Star"],searchUiPcNode["Tts_Tts"]],function(n,a,i,s,r,o,l,c,u,p,f,m){return h={},d.m=_={0:function(t,e,n){var a=[e,n(1)],i=function(t,o){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(t[a]=n[a])}return t}).apply(this,arguments)}function c(t){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(e){return typeof e}:function c(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(t)}function u(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=fu

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21352, version 1.0
Category:	downloaded
Size (bytes):	21352
Entropy (8bit):	7.990100666112436
Encrypted:	true
SSDEEP:	384:Mp/cweimfLUqO7VBqN8AQsOnsNaosVhib7UFnMJYV1vdY5feBq1emecQsXSDb:M/cffLUqOJdlsk7vib7UFn71vy5fQjr5
MD5:	13BC846D57FD07BB530283645888718D
SHA1:	5CC47E3E9B3D0AD4EBA1B008EF1BC8F51B2BC113
SHA-256:	E666932FDF79B025B15540335C176692B03905CBE5422ED6EC4DF103AB990E7F
SHA-512:	903B3EA00F9B1696C14C7C28B6862D61656027A18DCDDC0A36675A63D2CB6355246D4F6E3D2E202DC4D31BD67BB06F02B054DC80D085903D24E4B123DE3D12F6
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/global/font/iconfont_13bc846.woff2
Preview:	wOF2......Sh..........S..........................T.`..t...(..;.6.$..<..`.. ..g..K..u......L....(J.X9..OH..h;.8H.....FR..X.`n............%.....V.G.}...P...AvK.u a..~.(....wgAGl..@7m......#.\.,..[./^Y.z.a.zHR4!.:mvS.....<......o....b....p....\Q&E...8.......Y...!.........{.0.s....E..HF.mT.a.....e ).........}Q.xQA.H,T.....}i..Q.......B.i...\.+...t......{......B=.._...Z..=,....5}K_. ."aK.N"lJ.?.....=V..C..?.a..Ut.\|.S..{..r.P..).XE..;.Oj..M.^0....h.K.......lf...._.l.P.8P0..'.JR..:g?......M;r...U..C..G:UZ_.nV.$.....q.."%...;....v..w...........t<@.....}K....?.4.i.Z.H.k..?sV)-i...nu...3....U...@..I.n..Hc.Y.0...._....nX...=....:'...l.5....w..^...$..41L.=...8m.j..1...o..8$$rJ..T.1.7...Y./.u3.g.(...'.B._..._.L ..K@.`.k ......A.l........I.!..>.S.....$...Z.../..59..:...y(...!..6.c.....(&....xF.........o.1_.f.Uk...n.8.....x...p4.......j....K.. ..}.~<..=.=..3..{..z....&L:p.U..G.r..k.N..c.}.6m.Sk....-.7gV...FLk0n.AC....[...j4iV.E.6..T.P.L.b%..*./O...d..M..c{}.$J.,E

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	15964
Entropy (8bit):	4.057866639164157
Encrypted:	false
SSDEEP:	384:ippyYtKiDpI+BTZKn5bHk15YxesyMVJbJ:4btjDpfBVKn5wPYI1uD
MD5:	C95383AF0CA41ACFEBC6860E7E7958BC
SHA1:	0768E0FAD8A0FA5E20C44DA1B1716B836187BBAD
SHA-256:	6229FD66F2B7F28054150B018934F7B3A7CAF4E635C39BCD1CA6E915A3A20296
SHA-512:	4D3854FFEE5C08244F4A3DF45656FD6B8D8EC3741E9E6C416E05084198177DE00A33F7D459F0D82EF03766B8F5F7A3DB76DB9C3C25AD60E4CA5CA51191FDDD6B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/amd_modules/tslib-c95383af0c.js
Preview:	define('tslib', [. 'require',. 'amd_modules/tslib/tslib'.], function (require, mod) {. return mod;.});.var __extends;.var __assign;.var __rest;.var __decorate;.var __param;.var __metadata;.var __awaiter;.var __generator;.var __exportStar;.var __values;.var __read;.var __spread;.var __spreadArrays;.var __await;.var __asyncGenerator;.var __asyncDelegator;.var __asyncValues;.var __makeTemplateObject;.var __importStar;.var __importDefault;.var __classPrivateFieldGet;.var __classPrivateFieldSet;.var __createBinding;.(function (factory) {. var root = typeof global === 'object' ? global : typeof self === 'object' ? self : typeof this === 'object' ? this : {};. if (typeof define === 'function' && define.amd) {. define('amd_modules/tslib/tslib', [. 'require',. 'exports'. ], function (require, exports) {. factory(createExporter(root, createExporter(exports)));. });. } else if (typeof module === 'object' && typeof module.expo

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (731)
Category:	downloaded
Size (bytes):	256786
Entropy (8bit):	4.565288105395258
Encrypted:	false
SSDEEP:	3072:D39Este0vsOHoxOMJl2fR1sG1KXOEU/IGMaeuZLtsZPW+RY32SVEFKo:RfHex232+q
MD5:	1BE7F62DAC8F0DE20D70DF0E0539AE24
SHA1:	40681F7A9C4B16B61C922C433ABFD383635DCA1B
SHA-256:	BAC636F543B73B6B8864DF0217B39BA788E1EA0EEA7B5D679F7AE713FD226DCC
SHA-512:	991A5E68EA5E7363576C6642F81F9277651B9E9FF65B389CDE717B4ABABF874387849D34C204FD750F8E5D7D31EB274917EA49DE5004F2A00AC07E2F6958782C
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/amd_modules/@baidu/video-meeting-1be7f62dac.js
Preview:	define('amd_modules/@baidu/video-meeting/dist/index', [. 'require',. 'san',. 'tslib'.], function (require, t, e) {. return function (t) {. var e = {};. function n(a) {. if (e[a]). return e[a].exports;. var i = e[a] = {. i: a,. l: !1,. exports: {}. };. return t[a].call(i.exports, i, i.exports, n), i.l = !0, i.exports;. }. return n.m = t, n.c = e, n.d = function (t, e, a) {. n.o(t, e) \|\| Object.defineProperty(t, e, {. enumerable: !0,. get: a. });. }, n.r = function (t) {. 'undefined' != typeof Symbol && Symbol.toStringTag && Object.defineProperty(t, Symbol.toStringTag, { value: 'Module' }), Object.defineProperty(t, '__esModule', { value: !0 });. }, n.t = function (t, e) {. if (1 & e && (t = n(t)), 8 & e). return t;. if (4 & e && 'obje

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (862)
Category:	downloaded
Size (bytes):	1329
Entropy (8bit):	5.212477194614991
Encrypted:	false
SSDEEP:	24:eniVps/BoAS5uI/WRWU0yFRXuh8fuDs0W5p4eiX5qxam5q5Avt2/iLHLG0Greqpe:xsZzSOwU0yfEs0W5SeUGvwQzGrc
MD5:	3352C9F1871F6F783611644471379561
SHA1:	FB09693EA23D9DDCF9411982FC316EEA82E732CF
SHA-256:	180A4E25FD5D64D51294192BD49769B9A644157DF1D8512D6392796AFB52C161
SHA-512:	3C781566670174B8B53E8FFCEFBE288FD6A73AC42748B868E81A9DEAE0B5B63ED95D75261FC62224B6FEB82BBEA1A3290CE837353A578419134107A23788AFBD
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/prefetch-app-data_3352c9f.js
Preview:	define("@baidu/prefetch-app-data/index",["require","@searchfe/user-agent","@searchfe/promise","versions-compare"],function(e){function a(e,a){var n=new URL(e);for(var r in a)a.hasOwnProperty(r)&&("object"==typeof a[r]&&(a[r]=JSON.stringify(a[r])),n.searchParams.append(r,a[r]));return n}function n(e){var a=document.createElement("iframe"),n=document.body\|\|document.getElementsByTagName("body")[0];a.style.display="none",a.src=e,n.appendChild(a),setTimeout(function(){n.removeChild(a),a=null},0)}function r(r){var t=e("@searchfe/user-agent"),o=e("@searchfe/promise"),i=e("versions-compare"),p=window._na&&window._na.isSupportSwan&&window._na.isSupportSwan()&&window._na.getSchemeHeader&&window._na.getSchemeHeader(),s=p?window._na.getSchemeHeader()+"://swanAPI/prefetchAppData":"baiduboxapp://swanAPI/prefetchAppData",c="_bdbox_js_prefetch_app_data_"+Date.now();.r.netconf\|\|(r.netconf="1");var d={params:r\|\|{},callback:c},u=a(s,d);return new o(function(e,a){(t.isBaiduBox()&&i(t.baiduBoxVersion(),[11

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18885), with no line terminators
Category:	dropped
Size (bytes):	18901
Entropy (8bit):	5.383360132811373
Encrypted:	false
SSDEEP:	384:EJCL8aLtNrhbRd9sxYb0oQgNDjsZxRVzJ8w2H0GcgT0aiOij+zR:KCLPtNplQoQgCxRVl81BcbjaR
MD5:	514584C120ABC0A72EC438A853111A22
SHA1:	C18E79F936D66A12187BAFDB5FB3F41AECD88CA1
SHA-256:	A23CF03E0B4AB99724CF827A849838299395E9003A87D74591ECB3282AD5C865
SHA-512:	2A2F18F842F9A9DE77A0089DA7BB17E709BFC9CD66685E2E7E76C942BD1CA1159A22E0EAE4FE0BFF45409754A4344717D485FD802FF84782FCFE4230D55053D8
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/right_recommends_merge/result_dceae3a",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(e,r,a,i){return c={},o.m=s={0:function(t,n,e){var r=[n,e(1)],a=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t}).apply(this,arguments)}function l(t){return l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function l(n){return typeof n}:function l(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n},l(t)}function d(t,n){var e;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(e=function(t,n){if(!t)return;if("string"==typeof t)return u(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);"Object"===e&&t.constructor&&(e=t.constructor.name);if("Map"===e\|\|"Set"===e)return Array.from(t);if("Arguments"===e\|\|/^(?:Ui

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.514321014928168
Encrypted:	false
SSDEEP:	3:F+wzK/QgZsd3RlAXHEDvFpzNNFrRlAXHMhen:Fftmu3RlAXHEDfzNTrRlAXHyen
MD5:	D8249C46AA6788C1CA336401BB06624E
SHA1:	5E163898E06BC8B4451BA22CA76B02DDA553EEC4
SHA-256:	4D0E01F75F17C3C2C2C409AA50BB77579FB15AB5D2A0F0C96B655603CF35AE24
SHA-512:	A51FFD21C5861C0D1EADBE4215740AD166E0514DEE42AB5A876E0108BA3A748A797701ADA0D9D5E8434C681514DF52D77A19A067B7FEC2DEBB83BED7D28E29C0
Malicious:	false
Reputation:	low
Preview:	define("plugins/bzPopper",["require","@baidu/guarantee-popper"],function(e){return e("@baidu/guarantee-popper")});

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1716)
Category:	dropped
Size (bytes):	93750
Entropy (8bit):	5.2860318400759505
Encrypted:	false
SSDEEP:	1536:iWeYd5mYErtiaR64FLCxqJrLPkuQ+DXiz0zKbDvReG13D8AC7bb1spy3vRGt/UJD:iIayz08Q7nZ6Uq09
MD5:	65682A21B58654D8EDA27F85D0F57255
SHA1:	23D1DAA9435A827370B14C38D04AA9402BCE75FB
SHA-256:	DFE45A2B62F018FFAA1F6E280C37B14190D2719951D13E79A7B82737AD286A86
SHA-512:	A18B0A6360BB395615CD77BC9767204E5505FCE6ACA69AE8C6C39EC959369A0C5817D25E54DC3516093E814D839D5B04DBE410792DA2A816E3E438BD362D12EF
Malicious:	false
Reputation:	low
Preview:	!function(e,t){function n(e){var t=e.length,n=ct.type(e);return ct.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=kt[e]={};return ct.each(e.match(pt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(ct.acceptData(e)){var o,a,s=ct.expando,u=e.nodeType,l=u?ct.cache:e,c=u?e[s]:e[s]&&s;if(c&&l[c]&&(i\|\|l[c].data)\|\|r!==t\|\|"string"!=typeof n)return c\|\|(c=u?e[s]=tt.pop()\|\|ct.guid++:s),l[c]\|\|(l[c]=u?{}:{toJSON:ct.noop}),("object"==typeof n\|\|"function"==typeof n)&&(i?l[c]=ct.extend(l[c],n):l[c].data=ct.extend(l[c].data,n)),a=l[c],i\|\|(a.data\|\|(a.data={}),a=a.data),r!==t&&(a[ct.camelCase(n)]=r),"string"==typeof n?(o=a[n],null==o&&(o=a[ct.camelCase(n)])):o=a,o.}}function o(e,t,n){if(ct.acceptData(e)){var r,i,o=e.nodeType,a=o?ct.cache:e,u=o?e[ct.expando]:ct.expando;if(a[u]){if(t&&(r=n?a[u]:a[u].data)){ct.isArray(t)?t=t.concat(ct.map(t,ct.camelCase)):t in r?t=[t]:(t=ct.camelCase(t),t=t in r?[t]:t.split(" ")),i=t.leng

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6509)
Category:	dropped
Size (bytes):	114415
Entropy (8bit):	5.5838033681155785
Encrypted:	false
SSDEEP:	1536:uZkwNWEGbeuiTsh30tKnVYRK+moG/jvUlm9C8HNf4qYv1NnmVW8XyxAhj+FUkeRc:uG5beuiw8fRK+moG/DLjOFT
MD5:	B82F23370AED002E42BBDC097196E123
SHA1:	1721515F9B21A1BA642D23802106A1B519EFFE38
SHA-256:	19DE10E1F181DACBBC0E1DE47A34C6E5ABDAB82317E2F8BE15FBB838C2E7DF1D
SHA-512:	2EE14DFB3991199DB4EC18D2609A7FC704B27B0B1947D8F0C99F938F0904E44E049BFE62287235721C1112CA43988F6C126E68C644C89418DDDE129500D62D41
Malicious:	false
Reputation:	low
Preview:	define("@baidu/guarantee-popper/index",["exports"],function(e){"use strict";function t(e,t){return e(t={exports:{}},t.exports),t.exports}function n(e){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function r(e){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e.})(e)}function o(e){return(o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function i(e){return(i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor=

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	511
Entropy (8bit):	7.128970554470922
Encrypted:	false
SSDEEP:	12:6v/7ElcaWVQylQrdJ6LabmD5xspZLfpxtHgZ6ew3HjlTWS1YH99ES:6ajyyrdaHspZxHgijx0j/
MD5:	50D31CDA90034FEBFAAB92F9A7578E56
SHA1:	A7478946FCDCCE67195FC4052BC2D9DB4EF95B4A
SHA-256:	C08893227314F5B33C57FF95F79305CE945E7F8644FB87DDA53561990F658792
SHA-512:	C6AC448C4CEC44215BAA6F797D20892210E139917A7770B9903761D9F3D7B5E7BF07FA40216F3FFA8F19936B8228DFF5BDCB8D4DDCBF1615542B0A74385AE909
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............^....uPLTE.......................................8........A..;..p..V..............i....N........b.............G.....................tRNS.......vS<....:C...,IDAT(.S..0.....j..Y.n..'.......A...Xq.4..,?......qq.e...r.....U-e]..0.+{^.N......i.y].%...a.P.....X.,..\|......Q..%._0...Q....?.L..sV,^jn...^....".Zb..C......L.5.7...d"5[I.{.H.N...HE..D....R.@...;.....1..D..A..Mi..'4..J3.....x..^.......bC.`%.B..Z...e.%kC...k...8..<o.!0L.Q..r....Q......)5.w.....IEND.B`.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9832), with no line terminators
Category:	downloaded
Size (bytes):	9864
Entropy (8bit):	5.353071095822682
Encrypted:	false
SSDEEP:	192:EVW3VyjCpsE8XG3dwGFwPl4eqnaZsE62GScCaSGNOwka9JxG:0WCCWE8XmrFwPo0sD29c/XYc9+
MD5:	D5F2A97389C7F2D63ABA567160577FAF
SHA1:	4AAB9A1424A1799D59616BF63126C0F2B5608E83
SHA-256:	6943B68839FBE1E5B1C6950EFD77B961C295D7911B68E3AFCFA11C5AE6DA04BE
SHA-512:	99FCA9FC1188075E4C34F88A9CF2F87EACAED096B9387BBE574FB459CDC6039E8F76915A02B2FFF2EA9E5EA0255965A57A29DA4E5FB25389C30A2D392343333B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/footer/result_b668e06.js
Preview:	define("molecules/app/footer/result_b668e06",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(e,o,r,a){return c={0:function(t,n,e){var e=[n,e(1)],e=function(t,c){"use strict";function u(){return(u=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e,o=arguments[n];for(e in o)Object.prototype.hasOwnProperty.call(o,e)&&(t[e]=o[e])}return t}).apply(this,arguments)}function s(t){return(s="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function s(t){return typeof t}:function s(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function f(t,n){var e="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!e){if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return l(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(e="Object"===e&&t.constructor?t.constructor.name:e)\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Arr

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 472
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	6.760655922217657
Encrypted:	false
SSDEEP:	3:Ftt5j6IOMxjRPjCTh7ciWXPQXj9ezrdhTcN0o+NwktImwjAlq8En:Xt5j7xjRmpciWYXBez401NwkSmwR
MD5:	F4EDF39932C56817F382D8ED77B47670
SHA1:	8ACFB43E24FBD5591A8842B12ADD627692AC62F1
SHA-256:	1B83242B0BFABE79E1BEBCA0FCA6ACB16BA994F2018CFDBBB552D7F9E6B2E194
SHA-512:	30D4B4BFC1EADE6802690A23BE983C1E0F7E5298ED1DE3BD0445BA73921CCB413BED258E3BA9DACB7AAE908F374C4F32ED00A7B7D3126B3EB905A12058D2DFCA
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-card/tokens_583a0c6c.css
Preview:	...............0.D...[..C..mZc`..."B..k..6.x.,o&..'...Ff..^O.S@3..Wi.sx\6.pP.Y..A.}.F..;...[...9.....%.c..%T...Dgo.r..cOl.}.2{..Z. .....#4?-.c.5.=...$.......5............i....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7877
Entropy (8bit):	7.848820474106003
Encrypted:	false
SSDEEP:	192:TSHIIHUCD4wayFvr2pD5KvNk9mR/pCNYvYRCvCg:G50wfmcvNhxClMj
MD5:	B15C113AEDDBEB606D938010B88CF8E6
SHA1:	011387DB777FF33FA46481BB4EBABBAC796240A9
SHA-256:	264CA980F97A4F91FEECDFBB12486ED9D66F57190A0C4A302602500C589847F5
SHA-512:	E5461D90E1AD3B7730B48BB2CA0B16A236B619E1CE7D47F8E3BFB5B19288ABA6A190D48905ECF23B49E7A14152C442652916CE22A304EB5594E8EB40F5F68F30
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/bd_logo1.png
Preview:	.PNG........IHDR................8....pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 24739
Category:	downloaded
Size (bytes):	6947
Entropy (8bit):	7.970456568095279
Encrypted:	false
SSDEEP:	192:vkWW1kHxipyLhnIWW3roNfWiVrRH/Q5RA2rC19gg2:v0qHxipydnIsxoK1ig2
MD5:	961C9CE62E5D86AE5D77D62CCADF3F5B
SHA1:	EEC395EB335457E30C60E564BAA6B5659B1475C9
SHA-256:	BA6A7EF7FBA97CB16C2B66FB9B47D534C4931A5591490A1241DCE0E2292D30F6
SHA-512:	D7E65A63444E412C524EC0B60ECA1F4734CC2C2BEA7779C29027C246A5FEC9330B4D1903577B8CF2AB5128AABCFCE1B2374F1D0FF5414E03B5082AEF7ED00547
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/home/js/nu_instant_search_d67677a.js
Preview:	...........<is....+.........!V.e..(.&..#).....8.....).Uv......l.U..v.V.U.l%Q.&.F.....u..3....{.?...x....u.tG^.;...}.q..Gc+Xaf..W:.....R..J.e#.k.....6.W..0v..8.km.>..5.R..A..<7.(w-.ny..j..;0TCH....bA..{..#.wC.u...hw`$.[.b@...........6..B..xt..:.]?......ckS.8...........[......:#.f4<...G.A]k.>....uJ....N..o.7^.....G=.s..........0(....S.=3f1.L..I\9....-.\|..{...2.....).F.c....o.6....R+...qk.5... ..4..N..\|..p....}..\.7...........G.....P....9.Ti`[.M....z.PH..;..4...0.t. a).5/...kfJ.<k@.(....a)j...86..F=.t...9jW..@...K:..J,.fT..gh..~d;.D..D..;....^....2...p..z#X f......p..h.]e...SsP..]..@...S.@G.^....4=.n.....AK..~.IF1I.*I2...2+......2.+.W...~...[.83....z..b.K.P+C......m.....l..5..6..Qy4.'......$V..Dy...,D...."..#.....i2..y.G,..C.4.......a@.+]'`....f.5.X'p...(J../n<y.'....O~........6....Yc.gq?..........Ohp.b.^y`.N_...C.\|....AlSw...M.[.O......"C..z. ..;;..0.0..Vg....LS...........u..:....8..6.....NW.@...w....F..<...w.......;..n1...>....t.n8].?..x

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	16420
Entropy (8bit):	5.277788807223608
Encrypted:	false
SSDEEP:	384:F8wausvkD02NOw5ihIC8h5hkENZ6v5NeGr:LausMDCw5ihghbkWZ6v5YGr
MD5:	D776BFB1AAE5A93AD826135C4B1C8727
SHA1:	E9EA57885910893E888310D7029AC03F2D1CE813
SHA-256:	3D2D7991FB0A0D332FAF8FD84BCB9875062A8CF768B3C4DC46591BBA79CA1479
SHA-512:	B238A9EE31EC04DAC5ECE2710CDEDF8E8E70B0B5838EDB84E621DABE100B918F9B4BD3A79D61E7FDC80EEED6EB55D07B2BBBF34EF5E4E0A7DB83D7F5B980F22F
Malicious:	false
Reputation:	low
Preview:	(function(root){if(root.esl&&root.require&&root.esl.version===root.require.version){return}var define;var require;var esl;(function(global){var modModules={};var MODULE_PRE_DEFINED=1;var MODULE_ANALYZED=2;var MODULE_PREPARED=3;var MODULE_DEFINED=4;var modAutoDefineModules={};function modFlagAutoDefine(id){if(!modIs(id,MODULE_DEFINED)){modAutoDefineModules[id]=1}}var BUILDIN_MODULE={require:globalRequire,exports:1,module:1};var actualGlobalRequire=createLocalRequire();var waitTimeout.;var requireConf={baseUrl:"./",paths:{},config:{},map:{},packages:[],shim:{},waitSeconds:0,bundles:{},urlArgs:{}};function globalRequire(requireId,callback){var invalidIds=[];function monitor(id){if(id.indexOf(".")===0){invalidIds.push(id)}}if(typeof requireId==="string"){monitor(requireId)}else{each(requireId,function(id){monitor(id)})}if(invalidIds.length>0){throw new Error("[REQUIRE_FATAL]Relative ID is not allowed in global require: "+invalidIds.join(", "))}.var timeout=requireConf.waitSeconds;if(timeou

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6030
Entropy (8bit):	7.967141843536758
Encrypted:	false
SSDEEP:	96:ENP5S5JB5CxSZDgU4Z9NR2ff2DQK/gK9oELk59YtNzKDhvqNCwWXfna84WLkI:2xQXCwpgU4DNkWDQa/9o44KzJNCVXvaW
MD5:	6B0D763E13BEE9E22BED0618684D7B24
SHA1:	235ECC43B1EC021301EE29ED36A8A8E89EEBF27D
SHA-256:	163E9FFB072A22836C6B70BE132EF29421BDEB8A94F65304FA14C6DBFE5C4B67
SHA-512:	43011BBB3D8C4E8D10C757B87229ECC8C7693FDB2E09EAEC57C8EC3A9F3BCE219D9F886C6625B6FD3862C7AE32E3D7F6EB105FAC74E799FD3CB79375CBA89E38
Malicious:	false
Reputation:	low
URL:	"https://t14.baidu.com/it/u=4174420314,1164160395&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=0560FB06458199ED03C0A51B010080C1&sec=1729962000&t=e6a0802a3221db2d575c5edcda43432e"
Preview:	RIFF....WEBPVP8 z....\.......>.H.K&$"..6k....c..".C..-.-........w}{z..%.W.<K.w.?..f.....f.,....._....?...?`/.?.....~W-...............>......W.....?.............................o.....G..t....?....6. .{3l..C.=.F...k.1u....g..........?.).mj....T..p......H..M.q..1SGy.....I'.M9L.L.W....K,.....~U6E...S.-...]..9N.j7.2Exb.....U..[;S.q..........)........l`.>D.1.O..9.t.J.]. .~H..eP.l..k8.,...!7..+T......RP..b._V%...;.;.d..D......!..\|x... ..K`.......c..,.NT..qU....V..TO...l.i[..2M.O.".#....e..p....>g....P.k..+F.4.>4~A.&..4...wV0..0....'N\|9BQ....}..t.0.y.q......-7....4...Z%nTVD...).m"....t.~0.....-...&....2.4T.V2.'?.@..(.gm.e..2.N.],.........o4..#qOvH."o.\|......AC.f.=..H."n.....;;.A.hf....%}.G.za......8\|...-..-BZ.o.9.4u.c9.G.!z.C.......?....E.J.I....`KW....oX.V.D1.f.D.4.K.%F!.r.''yz....W\|".N.a...........B..g.V........(..#...8^..kp..w8n....."G.!..c...P%....."Q....=L...Uk.e....i.q.\|.j....Q/...i..`.k%.-.jl......N.E..P.^..V}6...}uL..i.....oA.w<.."@... 9..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3110)
Category:	downloaded
Size (bytes):	37319
Entropy (8bit):	5.531239581896259
Encrypted:	false
SSDEEP:	768:BBi0i7zQgwqkzGkwSpCGPNONeDW2hrnhPh/nvhI:BY0iPRR2jPNtPTI
MD5:	E2FF8E6AE619203AD20E94CAC8DD4748
SHA1:	1934010E70C2C60F8ACB7849162890A3B71B8427
SHA-256:	C20DE70553336D711D9D138238AE7F73015D7ED3E1BA88E395FE0FDF7367AD92
SHA-512:	F60B7AF86CB51C91D5E73F594E47C7FBCB7C2F973CF1B10DB9CDE6060DF4FCC426D68DD2AB08686105E98858B0E5D92DDC087F108690FFFACCE011E90A58CA45
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/boxx_e2ff8e6.js
Preview:	!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define("@baidu/boxx/dist/boxx.umd",[],n):(e=e\|\|self,e.boxx=n())}(this,function(){"use strict";function e(e){vn=e,bn.forEach(function(e){vn.apply(void 0,e)}),bn=[]}function n(){for(var e=[],n=arguments.length;n--;)e[n]=arguments[n];return vn?void vn.apply(void 0,e):void bn.push(e)}function r(e,n){function r(e){if(!(+e>=0))throw new Error("........:: "+e);return+e}if(e===n)return 0;.for(var t=(""+e).split(".").map(r),a=(""+n).split(".").map(r),o=0,i=Math.max(t.length,a.length);i>o;o++){if(t[o]>a[o]\|\|t[o]&&!a[o]&&t[o]>0)return 1;if(t[o]<a[o]\|\|a[o]&&!t[o]&&a[o]>0)return-1}return 0}function t(e){var n=e.UA,r=e.isIOS,t=e.isAndroid,a=0;if(t){var o=n.match(/(android);?\s+([\d.]+)?/);return o&&o[2]}if(r){var i=n.match(/(ipad\|iphone\|ipod).*os\s([\d_]+)/);return i&&i[2].replace(/_/g,".")}return a}function a(e){var n=e.boxType,t=e.realBoxVersion,a=e.isIOS,o=m

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 176, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3129
Entropy (8bit):	7.898345696821117
Encrypted:	false
SSDEEP:	48:Ky7kV+NY5Z8kppuklBg4VyV924bdn6H29+hT1xnbitNHjeu2qvBIwPH4L6AGogF0:8VP8kpu74V145n/ohTLngn/IwPHrAcI1
MD5:	9981CD1FDBBABFAFB8CEC5980067E9B6
SHA1:	5B3FC9EF4029FCF64E9EE089F19120252E3DA06E
SHA-256:	C11B2ECA9E31659DFF163EFD11BDE4651ACAE1C2A04FD7EF38E0B939A7567B0E
SHA-512:	B3734BE9E44827A586CBF63550FE7D71BCC218F64DA4AD3E674B88316F55D50DC98C59018E446C693B383EC83EE4A1CFEA12221A4437DF81E035630BBFA0C852
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/chengpian-9981cd1fdb.png
Preview:	.PNG........IHDR................^....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..MlT....TQe"".W.+.l.,..;!].\|,.....b...",.c...Q!%.]...R......Gm.XB..ME..LT.b.T.TU.Q..v..{~..3..{..s..'=.`......s.=...b.......!...D5.......P`...LTC..j(0Q..&...D5.......P`...LTC..j(0Q..&...D5.......P`....d...\.z5~.5??/w..]...[.._{...w...Zr\V...tppP.........&CCC...d.EF`. ..:uJ......HM..9.E.q.9.....)...u.....+b.\.'sss.i.&!.0.0...w...2.`.Gy.B......z$.......9z.+.2[..T#.Z(p.......V$.......EZv.4lK.^.My.>..F.....mL..^"/.GW..MMMV.......)c~.]....v...'N..&/8z.(.-.#p.X...})....F.~.[.......g......O.H%............``..\.K...G`[ .>y..P....).\.20~]l........x%.(..J .^.........>!.C.W.:o.........R.....\D..N.. ........D.........C.......^....k....w....S`........L(p1P^{.X../a.t.&.D]..*..<.....D.q.&..V...$EWW....Tr......r..x.O. =.....d{...)p.@fH\|....9...0..e.XXNJ...........P`....L...o..s.....!y....sP.J..._.......Q].Q...%..{&..n.H.s"..?Gb?....`...Ra.....#yn....".}W4..F...2

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1053)
Category:	dropped
Size (bytes):	41984
Entropy (8bit):	5.367959391693683
Encrypted:	false
SSDEEP:	768:VNDDy7vIfSEqrF6TuSkLFcyM1Ywnf9jftQBl0/uyZwACPVD:bvybkSEq1zG1YgjftWl0/uyZbcD
MD5:	9354EFAD5C9F5519F606C3C39434B9EC
SHA1:	29F1C62B0B8B4DD8344E028AE8AFB3F52FECDFBC
SHA-256:	D8367DDE9AF087C48A1552CEB2E92311B409E9FDB4C245285188E92F1D372632
SHA-512:	C6150F0AC6F8B8C1CDE94FBA1B2836F8C60FEF9F994991DF2651E089480C314BAC99210BDBB9C4DDC835D6C726DF638C11423759E78AA4A76D4D1CE420230598
Malicious:	false
Reputation:	low
Preview:	!function(){var t,e,r=Array,n=r.prototype,o=Object,i=o.prototype,a=Function,u=a.prototype,s=String,f=s.prototype,c=Number,l=c.prototype,h=n.slice,p=n.splice,g=n.push,d=n.unshift,y=n.concat,v=n.join,b=u.call,m=u.apply,w=Math.max,T=Math.min,j=i.toString,D="function"==typeof Symbol&&"symbol"==typeof Symbol.toStringTag,O=Function.prototype.toString,S=/^\sclass /,x=function(t){try{var e=O.call(t),r=e.replace(/\/\/.\n/g,""),n=r.replace(/\/\[.\s\S]\*\//g,""),o=n.replace(/\n/gm," ").replace(/ {2}/g," ");.return S.test(o)}catch(i){return!1}},E=function(t){try{return x(t)?!1:(O.call(t),!0)}catch(e){return!1}},M="[object Function]",I="[object GeneratorFunction]",t=function(t){if(!t)return!1;if("function"!=typeof t&&"object"!=typeof t)return!1;if(D)return E(t);if(x(t))return!1;var e=j.call(t);return e===M\|\|e===I},$=RegExp.prototype.exec,U=function(t){try{return $.call(t),!0}catch(e){return!1}},F="[object RegExp]";e=function(t){return"object"!=typeof t?!1:D?U(t):j.call(t)===F};var P,N=String.pr

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (679)
Category:	dropped
Size (bytes):	4256
Entropy (8bit):	5.505598126962859
Encrypted:	false
SSDEEP:	48:aKVqq/DwOCVoDIL29Tr40YR6PjR2f8PtZHEaM54C4Aw5xUd61oV9EuTaQvbLyX5q:aKoxrQbEkPtZyP5XUAdP/ui
MD5:	064271ED9B70CBF13C1E7737B490408E
SHA1:	35C1ED5A44A4AD9A312CF06EF1060559CA62EC26
SHA-256:	19356784C8CCAED118396513B2C7E4981352470B6866A49AB378BE0488CD5FC0
SHA-512:	A361713D023FFACC5CC0E094CD9129CDABA57E521096F70C52D2BD51010B7A4CD78A6EC6804C9994C608739F6096FBB85325B6A2E55A3151BC7FA39D005CF5FD
Malicious:	false
Reputation:	low
Preview:	F.module("superman:components/advert",function(require,exports,ctx){var $davertWrap=$("#s_popup_advert");var data=bds.comm&&bds.comm.popUpAdvert;var timer=null;var fadeTime=600;var showStyle={transition:"all 0.5s","-webkit-transition":"all 0.5s","-moz-transition":"all 0.5s","-o-transition":"all 0.5s",transform:"scale(1)","-ms-transform":"scale(1)","-moz-transform":"scale(1)","-webkit-transform":"scale(1)","-o-transform":"scale(1)",opacity:1};var hideStyle={transition:"all 0.5s",."-webkit-transition":"all 0.5s","-moz-transition":"all 0.5s","-o-transition":"all 0.5s",transform:"scale(0)","-ms-transform":"scale(0)","-moz-transform":"scale(0)","-webkit-transform":"scale(0)","-o-transform":"scale(0)",opacity:0};var TAG=data.tag;var KEY_PREFIX="advert_";var KEY_SHOWTIMES=KEY_PREFIX+TAG;var KEY_CLOSEADVERT=KEY_SHOWTIMES+"_close";function initDom(){var countDownBg=data.countDownBg\|\|"rgba(251,251,251,0.8)";var replayBg=data.replayBg\|\|"rgba(216,216,216,0.15)".;var shrinkClass="advert-shrink adve

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	65009
Entropy (8bit):	5.461589121278769
Encrypted:	false
SSDEEP:	1536:Rvf2Pq4LXR0561JZfdqqPkzUrrqFWVwqzb6LEKdvYYEX:Vf2PqzjFFIbKEKdY
MD5:	C4C7BE2850F34EF2E69DD4FAD537AC08
SHA1:	41DDED6F2A7B87986FE3D4167947DD801D61B71F
SHA-256:	EFAEF928B06D73A1B4752E5881BE284EA1FE5E6A1E753ADD798E45FC14D577B9
SHA-512:	5B5D15FC29A3BF814C4B35BB92F77B8072E14C767A1A1A1B68551CFBB17D9BD1D343E8E2030DF55C32235B5551E7B0291E25A457429575CD7898C44187CCD4ED
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/min_super-c4c7be2850.js
Preview:	F.module("common/result_page",function(require,exports,ctx){exports.createResulPageLink=function(option){if(!option\|\|!option.wd){return""}if(!option.tn){option.tn="baidutop10"}return"//www.baidu.com/s?wd="+encodeURIComponent(option.wd)+"&ie=utf-8&tn="+option.tn+"&rsv_idx=2"}});.F.module("superman:common/image_lazy_load",function(require,exports,ctx){var S=ctx.base;var _intervalId=0;var _timeoutId=0;var _dataSrcImgStack=[];var _intervaling=false;exports.isVisible=function(elm,noOffset){if(!_isVisible(elm)){return false}var hOffset=noOffset?0:60;var vOffset=noOffset?0:60;var elmPos={};try{elmPos=$(elm).offset()}catch(e){elmPos={left:0,top:0}}var scrollTop=$(document).scrollTop();var scrollLeft=$(document).scrollLeft();var viewWidth=$(window).width();var viewHeight=$(.window).height();var xa=elmPos.left-hOffset,ya=elmPos.top-vOffset,xc=elmPos.left+elm.offsetWidth+hOffset,yc=elmPos.top+elm.offsetHeight+vOffset,xa1=scrollLeft,ya1=scrollTop,xc1=scrollLeft+viewWidth,yc1=scrollTop+viewHeight;r

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43887
Entropy (8bit):	7.966951137578801
Encrypted:	false
SSDEEP:	768:j9URsHL5jqONYXFIbfEv7LwRxcM0uGwBVsch1VCJFixv7Aai8sT+9Ft/Zd/XE:j9URsHLsONY1MEv+WM0uG2fDVU+v7AaU
MD5:	C14ACF8C77081B8C05958805FB4FF6F8
SHA1:	C4D731646BFE76772FD060E87B934639078A4D9C
SHA-256:	4F27D9DF1D6C7076E61A20F15B318EE650255A4C77048AD60CE2521A27FF7A37
SHA-512:	C373968E653C430938D7B042F86B628F7E5EF627E146009B1CA0D89A27B9D80165AD9B6566E445C36640F5BA5B632FE472D3E17C9E406D4D8F719DDD7EF5A590
Malicious:	false
Reputation:	low
URL:	"https://ss1.baidu.com/6ONXsjip0QIZ8tyhnq/it/u=423474926,1801248814&fm=179&app=35&f=PNG?w=518&h=136&s=ADFEEB16D210A1925C7BF2EA0300E03E"
Preview:	.PNG........IHDR...............#!....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...{.$.Q......GwM..R.......e.......5.~.`l.........-d.......okA .../.F..-^k3,..5..=.xlZt..ROOMu.#.2O.....zW......5U.'#N..'ND...+....AD.q..........U...../.~\|..7.....W.....8..{n5...g.N.'y...../.o..<.tx...K..Y.....x.A..NO.......j.\|._.~.9c.?..~.....}Z.\|.../u.f........xq.I.....1.L.=..1..M....N.A.fl...k.J.o..[...L....R...V....O..O:.X...@.6.+....I.....bz}.^.x..X.@....Z.....Z.v....?s.....r...).e..N..(...........e.z...o..<.tx...L^<....w{w.n.X....n.+..]$,!...`..+...Sl.Z...rZp......?>V;.....O..2....l.x....{..A..H...8..ue..Xv.UF."HO.T....v.}....o..<.txQ....Y.^..r..de....)QxVF...`oO.sU.,!......^_...Vm.\|..K..{.:...S.Z-:,...w....W........)......'..:..]..."..[..vw.....Z..~...K!.._..W...+W.w..n.d..~.[1x..\|.......L9.....o4hU.#-+....{w....gA.O.6.../.\....t/.........,.U.w..l..;~...B.c..Gv<....p.X.4v,......a...fS.~..[.\..O..2_n

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	53
Entropy (8bit):	4.3865320785292194
Encrypted:	false
SSDEEP:	3:YAf9OHrC/HHkLv3QDTUBkHY:YA02/nigDTU1
MD5:	BA308FFF0B17F51B2AA6303E14D06DF8
SHA1:	63158B60E6218804D3F1BC1322AE0299BEBAE482
SHA-256:	A58909220F6F06656A0BC2C2A2190061F286832E2A35297450B8EDD0A102843E
SHA-512:	C33736603F47C135777A23BCB896EB20FA5DC923B0760DA67D692EED1E70802F42F3D80DCB75EFB4D59F36E65582621F335D7FD7A131A67608CCDBFDAD61E853
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855655833&req=2&csor=0
Preview:	{"err_no":0,"errmsg":"","queryid":"0x87f841d6574fb7"}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	2770
Entropy (8bit):	7.8017621604883205
Encrypted:	false
SSDEEP:	48:gvXvmNnhHoTcyWMBO9+Kj/ir6gwCiWkwC8Ky/Ca3K3/fIqr27/7S+1Tx:xnEcy49+oaRwhWkVaaYJ71x
MD5:	6AEC367FBDFC0527AC0C8BF3DB04A0E7
SHA1:	9B3C428008D5FC9A03A87A8F88DEDBDAA920A867
SHA-256:	17491C522B8BB572711F25E1CB0BAF45E8C4F4327FFC2DEDC5655A04269C6168
SHA-512:	FEA4FD91D194D2A3AE28ACB7A125BDBC982D36FED98652586A1BEBD54F33254F60EBB203920BC1836213F6A59DB9F3F32F4401D690FA5EE0DBEAA150267BC88B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."........................................9..........................!.1.AQa."...#2Bq.R.34bdr....................................../.......................!.A.1Q."2Bq..a..3.................?.......xwU>.(..Pe..3...#.\|....zK.A...iL.j...x...B.P....d.#8...3.K.5.U.f....L\|...-......U$.q.1.:..M.E.R......d..;u>....p..w..Z.:,....B...I[.....8 ...V,..Pkv}..p..T.<.x.%p..$(..3.3...q..u..\...rD'c.2........Z\|E$.G...v.....!....4K>..;....w...u{\|$..e. d...:f.!.....%...d.../<......w...7.f...1...T..T....W.i....PD.dAN..Z.R.$q.9..u..+..o}....vZ.....u.$.X.J@..O...itx..W.P.O.Pl...'.$.L..Od..R.%>.\|g.j.v.q..'..s.. 7..z.. .....l........2=y:.^.U.m(.r.]...V.....G\|.'.{..E..T....j..'TeRg....J2.l......%# .k..M.=..gH..eQ4..Mo.Sn..J_u.....SkG..../.....;.F.5..+EB..lKgw..iu..Rv..2.c..^..c....../m. A.B.....5Z<.[......Uh.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2315
Entropy (8bit):	7.841930881932477
Encrypted:	false
SSDEEP:	48:1nvgSx7grHEEN/2fOdGWgyBcQ6L1YbOrKPntuRo/9Bbf9:1nYSarki2mgOcPeOrKPnt79
MD5:	889054F349B43513BC7E68D8B6F1C515
SHA1:	41A99A134FA7F41EF75C43BD0ABFEF37985A3274
SHA-256:	2DBA92AFCF4535F74B5B8BDB81014E583A5BF9C9A98B803F157B0C3E5C997109
SHA-512:	D5C516C3AAF4C05BAB3604A9E7B6281C665EC48ED2D80DB9C41D7C9A939FF95083F76A6B3FA760753CA8456D88CFA126265CCC2C0BC3749410BAB38727F3EDC4
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newbaike-889054f349.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....uIDATx..[yl.E...=hA@(W[.r4r....... ...W.......A........9..H.Fb..,(rU.+.h)r.C.o...W.......b..fgg......73.\|.U.....p......2&P (.z.@.A.A..G.2B........z.(#.xP.A.A..G.2B....ex.z\..._J^.RX".............gb.0..FqlR..c36..[..h.`.O...9e]...~..U...z5..v\|..\.........2o..W,k.wV......&.b.@ N_b....H........>BB...]WW........J.dw".1D....c..\|..x.v...4.w.\|.X..9..0_...V..z.....{K.X..+......\|M.y.5..bw.25;p...m..QO.-.r.(+vH...:......-<..3 .....Qh..\|..._o..o.....-..=.3^x.v..0#L...&...(..T.F.....aP......X#.eG..p.-..m..I^l.......... .RZ....h%WL\..=X...AGC..@`...A..5'.5.$&..E........-..;F.5.5n9TN.+7....{..H#......P.%..V..#..wx..E...~...fg..=7q`....B\.'..l..6.;...<.......`m..0}..vu.\i.ZI.....H[.j..E%.,...b..O.O.c.S...3F...1.,..,..T.h`.....n.......@@,.29{........G.(.R....cm8.c..9.....D..O.!....DB3T?..0./..9..`..g.......[...+!~..y..4[....H...

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4665), with no line terminators
Category:	dropped
Size (bytes):	4665
Entropy (8bit):	5.254278435256975
Encrypted:	false
SSDEEP:	96:4g/39AHkZIaR4iTFX5LMLvgWcT8YbUGIBX0usaKqgebLjqDZBRg+GBDfXAE9prrM:J39AHkZd4i7oIW48YLIBX0ujK0bLGDZN
MD5:	005B12034EBD7E660D8FB368831748FB
SHA1:	B4485B5FCBE0B689C03066B8E3D21B066A823399
SHA-256:	788E59AA9F4149F9A8CF61CFACE82734B7DDF2DDD96295F8271144DE7994B1C4
SHA-512:	45276111EDAA2CE04CD519010919C45575DC80A21E508267DE9CE6F1D5A662692574211596F8283F53D712E559AE613D1BB1FAA216FBE83B9DB6E5C8217B2467
Malicious:	false
Reputation:	low
Preview:	var _0x2495=['cEdPUUk=','WUVTRVA=','eUt6YnI=','c3BsaXQ=','NXwxMXw=','TGlOcm4=','d2NhWmM=','TGV2RHE=','cVFPeHQ=','UHpkTmE=','WEpZTUg=','fDJ8MTM=','MXwwfDE=','NHw2fDc=','fDR8OXw=','VHFCRFk=','fDEwfDM=','TkRkbVE=','VHJOTG0=','MTJ8OA==','cWppYUw='];(function(_0x4fcb42,_0x249590){var _0x2cff01=function(_0x175e8e){while(--_0x175e8e){_0x4fcb42['push'](_0x4fcb42['shift']());}};_0x2cff01(++_0x249590);}(_0x2495,0x1b3));var _0x2cff=function(_0x4fcb42,_0x249590){_0x4fcb42=_0x4fcb42-0x0;var _0x2cff01=_0x2495[_0x4fcb42];if(_0x2cff['fEIjCz']===undefined){(function(){var _0xf95bf2;try{var _0x3eee6d=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');');_0xf95bf2=_0x3eee6d();}catch(_0x402702){_0xf95bf2=window;}var _0x38ab06='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';_0xf95bf2['atob']\|\|(_0xf95bf2['atob']=function(_0x3071c7){var _0x3524dc=String(_0x3071c7)['replace'](/=+$/,'');var _0x15cb8d='';for(var _0x3af137=0x0,_0x2a3f28,_0x21d190,_0x35ef8d=

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5226
Entropy (8bit):	7.898147144291918
Encrypted:	false
SSDEEP:	96:W75555555555555555555555555d++KsF6KYqNmJNjzF7GIlRdT6KN+YBUBGQs7B:G5555555555555555555555555d+XsY3
MD5:	8AC0D36DC0B139B0F3118A42CD9D4C2B
SHA1:	7C6F50C3536532C2DC0D6314F181EC9AE5CAC6E3
SHA-256:	40F906ACB8A86068D5DF1C80EEFBE62ECF8DCFD49B11A0C0ACD860A5352CFC79
SHA-512:	6DB639F11AE0F6495CBCFFE4E3EF5FF12D867D9D363EC8284A24669FDAF550AC7A1B7869AFBE496244B2360DED6754A6FAE82FF527D234E6C18BD5D7780E7795
Malicious:	false
Reputation:	low
URL:	"https://gips1.baidu.com/it/u=2219169068,4009499954&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2000_474"
Preview:	RIFFb...WEBPVP8X..............ALPHs.........(h#EB.&..p.........?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?..?.......VP8 .....A.......>.v.V..0) s."...in.nP\FU.t/..E..A.....~..}g...>x/\|.0..@=..F.U\|..u?.._,..O.mQ..}{..F..s..Z....xx..!~q..C.....{......`....3.{..{.....XQ]O.....{YY.1.:. ...,.MO...$,B.;..-.N.6%....F.\.W..y....N.$..R{.......W...=..o.....8.B.39Z.Yoy........ 1(w..rJ.#....U.H..._.dr.Z^.....#..U...X.F.....C.bU}5TU....O....t..a......3..N<....f..9^../.@....mEW.kj.....^2...~..8J.l..)..c...$.B.!...h.G..=.....lN..?.$"..>...X.j..j...EX.F.gcy....uW...A>.....ot....@..c....W..r.)..Y5...tm.T...u?.BO...Z....+mA_QU..C,..W...X.F..Y.M.S...Wm.P......7......33&....J4....-cj.X.....L.%W...S..L..[=P.TI.P.. .D..`.....2.. 6.LW.Q.....Z.;.F.I.....^f;.YQa...{........j+...s..mEW.............j+x...Ht..q.J..L..,L..ZU....T...C......e....}MP'.....6.....F...P..u$..5@#..TEf.[=(T r..p...9..7w....C....KK.E.u.QS..M..Q......`..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2430
Entropy (8bit):	7.86548794488282
Encrypted:	false
SSDEEP:	48:TrnJ354/jXukjjUQaGt/pgaeLIxwtG3LHFWwNaCX89ttz4id3c:Trn0LTjUIt/pKGwk3z8FDq
MD5:	10750F3F7D049AB650FBF9D36B467E44
SHA1:	5964B840EB025D9536144229CFF71B0707B8C059
SHA-256:	96C2B6EB1DFCAF461BBD8475FAEA7502C3189F04F747358904BB0C872E3FAAE8
SHA-512:	9ECDDDD43926E4E904FB57A074E8DAE50AF24D5CDE793C91A0C7243CB10EBD387B5C1E723FCD887034CD471D6B39509914DB356FB3444D591A38518C03CC4455
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`........T....sRGB........DeXIfMM........i...................................................`....+......IDATh..Y[lT...9.^...bc......"E...IP.4.....pl.$j...$..,.pP.\|akC...R....H@..4<..T.E.R.!.r..7.v.....Y...s..xhT.4........1c?...w.~...!..H....O..\|l..08x.`&.U.`.M.3>Xh.Yg[.9-?......3....g..Io......Sd..Y.3..\|Ri....l....Z.C...r....1W[[..,LgPTU....B..9..#.pVg....R...YHk..Y%...4.....E.?......_......Y.o.I;.1&.;[O..e...8Q...............n...8K.O]...:....5".x$.....%.l.6S3.>.=<<&...z.V..G..d...M.U...t\.p.v.\|....z.......o{K..?].R.L....#.V.......r.y.t..I.1~...}..tUcgwh..t.......;.`;.,..+.......n/..b..Q`.....-;U...0..B.........{...\b.$c!....e..E..^Os+.........}.....".(zE...S\|..ug......y..F..N-...O.Yr.o..Z..*3.u..H9.PD0.H...W......7Z...8..-X../g .}P.#\!f.$..........j...7...a.g."..W<...j..2;.>..e.[.."..a.,..&...{=.)...t9......9...E.."T.WN;]CC.0.....@.Q.B..EI.(....6..i...2..I\.."...,K..,...t..y....a?.X...;...L....%y.f...M..U.D\|oI....>n..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17422), with no line terminators
Category:	downloaded
Size (bytes):	17446
Entropy (8bit):	5.431025177345756
Encrypted:	false
SSDEEP:	384:aChnPFktS22qyRkECuF24DyWolhusdmgRxBHp2Cg:aChnkSOyKq2yyWMhNXxBHjg
MD5:	62541B8274BF4208C25A74BEEE9AFF98
SHA1:	E218C2089B3E90C5173BF22BD0563917A10F0829
SHA-256:	070E3F1116B4FE5DDA6526E48FCF4CDEB2CCC1FD8B93080F96C51E0DEED6FC8F
SHA-512:	66CE56934B8BAD85369C1C226F8AD8C80EB2102A13954BA9623528463FB94077DC42A54512D8D4F5F209B1900CA18B70D6777485857C92490E98500BAF379436
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/hint-float-ball-right/result_500aea8.js
Preview:	define("molecules/app/hint-float-ball-right/result_500aea8",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(n,o,r,i){return s={0:function(t,e,n){var n=[e,n(1)],n=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,o=arguments[e];for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n])}return t}).apply(this,arguments)}function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function l(t){return typeof t}:function l(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function d(t,e){var n="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!n){if(Array.isArray(t)\|\|(n=function(t,e){if(t){if("string"==typeof t)return u(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(n="Object"===n&&t.constructor?t.constructor.name:n)\|\|"Set"===n?Array.from(t):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 114
Category:	downloaded
Size (bytes):	113
Entropy (8bit):	5.342958804436536
Encrypted:	false
SSDEEP:	3:FttcuAAmoSc40Pq/tIXvwsHuLsfKLZF5XboXIE:XtcyR4tIhHuLs4Zb09
MD5:	D7A165BB6243DA3355357F857BE22F77
SHA1:	77D7E610A3830F3531FC7FBDD06303DF8ACCC239
SHA-256:	85ABB30F281232F3772D3BDD7B2AF1563BEFBD5BF27AD970840C0A35A7F5743E
SHA-512:	9DB8A9E96C7645BD3EB94D22FD81D364D37AB3802928A73AF13FFB4C38B4FFF885C20B36030D70E0761B78525EB9E6A58D227EB1C7D33E65BC40BC4EEE64D345
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/plugins/bzPopper_d8249c4.js
Preview:	..........JIM..K.P.)M..+.O.../(H-R.VJ-,.,JU.QrHJ.L).O/M,J.+IM.-.(..I+.K.....H..J-)-.S...K.f..5........../r...

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56682), with no line terminators
Category:	downloaded
Size (bytes):	57084
Entropy (8bit):	5.554708937883392
Encrypted:	false
SSDEEP:	1536:GQJhYfop2qvgJn2MigS9G0VWzZF4JPBnYK+:1Ifop2qvgJn2MigS9G0kzZFiPBnYK+
MD5:	9728E065F1B3BB18CB6E39A18134E667
SHA1:	A8D24B28B9CDDD0385FCC438F6837A560BFEBA9B
SHA-256:	F619EEDDB513F98F6C049276698444105E486BA664260EF48866038BDAAD3E35
SHA-512:	FEB566FAF2419A70CDC0E143BBB1AA6FE345DA8FFE66C95085A9F6047114C7541EACA66EF650EA4D538380EB68D238BB15F58A5C81CCD6F18D9C1B6275C1525F
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/search-tool/result_edfacac.js
Preview:	define("molecules/app/search-tool/result_edfacac",["san","tslib","@searchfe/inject-js","@baidu/www-api",searchUiPc["Input_Input"],searchUiPc["Button_Button"],searchUiPc["Calendar_Calendar"]],function(n,i,o,a,s,r,l){return p=[function(t,e,n){var n=[e,n(1)],n=function(t,r){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,i=arguments[e];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(t[n]=i[n])}return t}).apply(this,arguments)}function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,e){var n="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!n){if(Array.isArray(t)\|\|(n=function(t,e){if(t){if("string"==typeof t)return d(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(n="Object"===n&&t.constructor?t.const

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.723943592360158
Encrypted:	false
SSDEEP:	3:HDBQvXiCnMT0SATgt2mivKtUjn:9QvyuRSA0t2mC2gn
MD5:	C2A620CA7099C63683293D813D2111FC
SHA1:	AE2E1198D88097E306E71E3E43B8870E9DA0ABAC
SHA-256:	175F912E2E0137FC3C67054289D75F99B6F9955A20E30244C01D4A44AC40086F
SHA-512:	C325796CD3E5752B6414C7152E302AA5AE1CF91CC70D8FCA44F592B48163AE75A170A4D2E82503369A1948BB387118CF6663A10AA59100FB63470F417D8B6EE0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlaKp_rMcgiuxIFDah3kmsSHglfu7kcIy7ddBIFDQ7evwMSBQ1prndTEgUNc7akTQ==?alt=proto
Preview:	CgkKBw2od5JrGgAKGwoHDQ7evwMaAAoHDWmud1MaAAoHDXO2pE0aAA==

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2315
Entropy (8bit):	7.8207152590145
Encrypted:	false
SSDEEP:	48:1n0BLOxqnxVXDkeZDzQjx+LudAd9b521ZXRF9er7yPzAmPb+E9+ZTqk/bz:1n0xTnznHQFAucKt8MzTyHVxbz
MD5:	DA1CF444B022EB5CB48F651F7E104070
SHA1:	6A4D2CD500990AC04972ECCDD9E096D6BB7437C6
SHA-256:	D0B65B0566367C5326718EA732A898FA180A1F23C517D225EAFD53EA263AE01B
SHA-512:	70EA29DFFF0544742743D532B4A2930EE2ADE5F258AB9627ADE5B340D0489C8928F4E5A4C889441A540B8C7401B1A506F746F8BF81DB67C518BBF0A0A0A5BF1D
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newzhidao-da1cf444b0.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....uIDATx..ZypSE..}5M.3mJi..r...f..c....#......."..LEd`t.Q.e`..)..(r..A...X....WH..I.$~....ew_.....ow.k......4..H.?.D&..D@..=.D D .IA..1".`# F...1G..!F...1".x.9B..1"......C...x(..u..x.u.Zk...K...om.{...N...L...25O.>H..G.%.o.H..R.O.?.r.T.._]Wn..c"...G.zMJ,......!........2..9.P.dy...g'..5.1.. 8..cgc.}.-tn.=......Cb.^.....e.......bV&...'..>g......Gu.[.m...q..%......I.0G..w........p.......4K'U...G..........:.t.U..E.rC..D.@..a.eO<Q...l.]q..+...." ....B......US.;.........`......A..U..RevS..$R..pC...m.;.n.._..d._..r"{...2..G....R.YX_.\7.4.;.\.Q..G$............>Yz.....j.......2...c...N.].rs....F..(O(.}-A.."j./..eD(.../.....>X.cW.y.t.i<.5o....w.I..-o...:..i.B".5.n...r:.r.....L...i.<....<...(....x[..Q;.0.8_..4.hhs.l<.........~.F...R....7..q..~..Q..Q.s...............EH.^I..i.....hr..H.`...dz...T.m.r."..-.(MD.j..G...Te.(T..^

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1428
Entropy (8bit):	4.338373724873334
Encrypted:	false
SSDEEP:	24:t3zBuXMMo7sD6YAHWEwOfZiPQ47a3m447H5RHcNIhTFONnUQIsy4VtxY2XeQpAH2:VdY6qJ2Z9Sa3qXFOJhdssea
MD5:	173B723968988F1AB2A9D932B9280274
SHA1:	019DF0F82611D5C103C58517E72C7911D19F3036
SHA-256:	D930A5FA89BBEE775D45276259DE28EB93D001B87453167F536D0B9E79674A5F
SHA-512:	BCD2931EB2F104EA11EA129EDE428510B2230F0F6BB90B4CD6D7A3AE8A4FE0429342EC18E5E284755F86F919A1A96921E624192E3471CAB4F04BF30506A3F82A
Malicious:	false
Reputation:	low
URL:	https://psstatic.cdn.bcebos.com/basics/chat/peakAi_1721633550000.svg
Preview:	<svg width="14" height="12" viewBox="0 0 14 12" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M12.6054 4.94336C13.0152 4.94336 13.2201 4.94336 13.3745 5.02779C13.49 5.09099 13.5851 5.18601 13.6483 5.30158C13.7327 5.45598 13.7327 5.66088 13.7327 6.07069L13.7327 10.4266C13.7327 10.8364 13.7327 11.0413 13.6483 11.1957C13.5851 11.3112 13.49 11.4063 13.3745 11.4695C13.2201 11.5539 13.0152 11.5539 12.6054 11.5539C12.1956 11.5539 11.9906 11.5539 11.8362 11.4695C11.7207 11.4063 11.6257 11.3112 11.5625 11.1957C11.478 11.0413 11.478 10.8364 11.478 10.4266L11.478 6.07069C11.478 5.66088 11.478 5.45598 11.5625 5.30158C11.6257 5.18601 11.7207 5.09099 11.8362 5.02779C11.9906 4.94336 12.1955 4.94336 12.6054 4.94336Z" fill="white"/>.<circle cx="12.5389" cy="2.01743" r="1.45786" fill="white"/>.<path d="M7.41734 1.96311L10.8894 11.2507C10.9442 11.3973 10.8358 11.5535 10.6793 11.5535H8.97243C8.73696 11.5535 8.52658 11.4064 8.44577 11.1852L5.8259 4.01485C5

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31128)
Category:	downloaded
Size (bytes):	126218
Entropy (8bit):	6.01416164769834
Encrypted:	false
SSDEEP:	3072:O7PD9S0c6NFyTfgHoNFHrnRHoZqQYIge+OxvuYb:q+IqQYGvfb
MD5:	4205F551042E1943072B93ADC4D5FDB2
SHA1:	A5538A8D5906CA4F7FDF6D32CDAE891F21194993
SHA-256:	928C246887B2F68CF98D86C12850052E5E7105A2988922D02BD2B7E052D0F125
SHA-512:	DDA302956A61104CACB64F4135048871B2EF7982D930DBAB613CDC0DBBC634A5BD07F552F1E481506E9EA81A8CA55974657E63BD39A8B2D2490DC9CF2C3F9929
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/pc-tts-player_4205f55.js
Preview:	define("@baidu/pc-tts-player/dist/tts.amd",["exports"],function(t){"use strict";function e(t,e){for(;t.parentElement;){if(t.classList.contains(e))return!0;t=t.parentElement}return!1}function o(t,e){(function(t,e){for(var o=t.childNodes,i=0;i<o.length;i++)if(o[i]===e)return!0;return!1})(t,e)&&t.removeChild(e)}function i(t){return void 0===t&&(t=0),new kh(function(e){zd(e,t)})}function n(t){"function"==typeof t.stopPropagation?t.stopPropagation():t.cancelBubble=!0}function r(t,e,i){return void 0===e&&(e={}),void 0===i&&(i=5e3),new kh(function(n,r){t=function(t){return t+(Rf(t).call(t,"?")>=0?"&":"?").}(t);var A="JSONP_"+Uf++;window[A]=function(t){n(t),clearTimeout(s),delete window[A],o(document.body,c)};var a=$d(Ep(Ep({},e),{callback:A})),s=zd(function(){o(document.body,c),r({errorType:Yd.NET_WORK_ERROR,data:{url:t}})},i);t+=a;var c=document.createElement("script");c.src=t,document.body.appendChild(c)})}var A="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"un

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (498)
Category:	downloaded
Size (bytes):	6378
Entropy (8bit):	5.177676927152298
Encrypted:	false
SSDEEP:	96:10LM6osUTrO8VlEbayC+5UgV9QlC/cbT2Wox8r3Cf5ApAlJNC3NY:q46osU/lEhV9Qr3Cf5ApAlJNCm
MD5:	F4527892F08AB76FFA73294FAE10D6CD
SHA1:	A61AB885DF37CB4CDA5A46A25EA6C49C32028CDA
SHA-256:	CF46644B0E0C331CAAA9096B2784B4135DD84E3366E12B93FD8F0F883437DBCA
SHA-512:	CDD033F63B3E74ED5917A261C0FE13C707C02E64E3E9E9A5031552ED1B4C615F34FC86DFF23F5342E96872C1738631104EE97AFDD69D3559A1030D8FBCBEDECC
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/aging-tools-f4527892f0.js
Preview:	function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj}}return _typeof(obj)}define("superman/components/aging-tools",["require","exports","@baidu/aging-tools-pc","superman/lib/event"],function(require,_exports,AgingTool,_event){"use strict".;Object.defineProperty(_exports,"__esModule",{value:true});_exports.Tools=void 0;AgingTool=_interopRequireWildcard(AgingTool);function _getRequireWildcardCache(){if(typeof WeakMap!=="function")return null;var cache=new WeakMap;_getRequireWildcardCache=function _getRequireWildcardCache(){return cache};return cache}function _interopRequireWildcard(obj){if(obj&&obj.__esModule){return obj}if(obj===null\|\|_typeof(obj)!=="object"&&typeof obj!=="function"){return{"default":obj}}.var cache=_getRequireWildcardCa

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	2651
Entropy (8bit):	7.854819454613078
Encrypted:	false
SSDEEP:	48:JnMdfmJnOutovOX0bp49fRhxfDpNATU7X8VWKWn9ayDTaAXNRte8Hudj7k1c:JnKf4nRtoIN1pNATS/DTaAXZ8o2
MD5:	A5314D5C8374C8E3B4A60D609C84BA66
SHA1:	F1F43C03231EC3106977A56675B8868493474956
SHA-256:	DA16A153EE0624DABE1D62683CEE4941F8CC17456914B5F93BFE009012309013
SHA-512:	80E3D4902FA83486AAD04555DC726F41427ADA249C33B64F0C20B6540ABCF52DC399FC9C3C3E35C391C82635770016926B421AB3085E0B48232278173532F7A4
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newxueshuicon-a5314d5c83.png
Preview:	.PNG........IHDR...X...X.............sRGB........DeXIfMM........i.......................................X...........X.....H.....IDATx..].pU..>!.....BHA;..".0.S.D,..d.....u........TGGG..t.j.)3b.:)."......V A.O.$.%/..^........8.3/...s.......d.;.RL.R.s...!7..l............r..vG.(........C.....v.O,....o....}50a....}....V...s'qC...#O.-H8R......#.P..wL........<.u.&.....'..M-..s......J.....O.z3.....Pn..\C5`.I...S..+O.....aWg...o6.....G..QVy=u...>./.........PZ"....L^....{.n.q.7.<.V..p.>...J.v7.Jh..f..b....ckX.1........c.fZ.......Y.-...u.p............P......x......X..<.6r....E.7.....aW.A..=1xwu...-.....[....M..9....G......'.OE..U..8..6......7......g.n.<..........+aY....+..._.`..b..8...Qv;,.........Y0@$..4+...p]......0....d.......pD.2.].a...n.!.....:..o.u..N..[....-.w..g...,.^\...ES..+.`..Xg...........Y.[kO.=.8...G=.p..8LF....c+..:Jz..M..z7...ZAX.R*.0C;....\7C.........]x.V.>..`..../.[.....&..a'......e.r....~..,.G.ea]M.T..g.XH...d...:\|...`.G.u^.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1053)
Category:	downloaded
Size (bytes):	41984
Entropy (8bit):	5.367959391693683
Encrypted:	false
SSDEEP:	768:VNDDy7vIfSEqrF6TuSkLFcyM1Ywnf9jftQBl0/uyZwACPVD:bvybkSEq1zG1YgjftWl0/uyZbcD
MD5:	9354EFAD5C9F5519F606C3C39434B9EC
SHA1:	29F1C62B0B8B4DD8344E028AE8AFB3F52FECDFBC
SHA-256:	D8367DDE9AF087C48A1552CEB2E92311B409E9FDB4C245285188E92F1D372632
SHA-512:	C6150F0AC6F8B8C1CDE94FBA1B2836F8C60FEF9F994991DF2651E089480C314BAC99210BDBB9C4DDC835D6C726DF638C11423759E78AA4A76D4D1CE420230598
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/bundles/polyfill_9354efa.js
Preview:	!function(){var t,e,r=Array,n=r.prototype,o=Object,i=o.prototype,a=Function,u=a.prototype,s=String,f=s.prototype,c=Number,l=c.prototype,h=n.slice,p=n.splice,g=n.push,d=n.unshift,y=n.concat,v=n.join,b=u.call,m=u.apply,w=Math.max,T=Math.min,j=i.toString,D="function"==typeof Symbol&&"symbol"==typeof Symbol.toStringTag,O=Function.prototype.toString,S=/^\sclass /,x=function(t){try{var e=O.call(t),r=e.replace(/\/\/.\n/g,""),n=r.replace(/\/\[.\s\S]\*\//g,""),o=n.replace(/\n/gm," ").replace(/ {2}/g," ");.return S.test(o)}catch(i){return!1}},E=function(t){try{return x(t)?!1:(O.call(t),!0)}catch(e){return!1}},M="[object Function]",I="[object GeneratorFunction]",t=function(t){if(!t)return!1;if("function"!=typeof t&&"object"!=typeof t)return!1;if(D)return E(t);if(x(t))return!1;var e=j.call(t);return e===M\|\|e===I},$=RegExp.prototype.exec,U=function(t){try{return $.call(t),!0}catch(e){return!1}},F="[object RegExp]";e=function(t){return"object"!=typeof t?!1:D?U(t):j.call(t)===F};var P,N=String.pr

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12770
Category:	downloaded
Size (bytes):	2598
Entropy (8bit):	7.918780738989221
Encrypted:	false
SSDEEP:	48:XnblX9DhVfkeSBRB++ru0vS0sYs7J7UP8qVU1mDf/yJgIF2OX/OV:3BX9/z4B+/0a7J7UlYmD/p42Mq
MD5:	0E2880B2DFAD1CE206ECCB9EB428A62E
SHA1:	2EEA2A3E7B11EB1F61890D069158AD0F3DB53E6D
SHA-256:	53AFF0BB414A00735DB0A888D648FAD2BFC7B2C50C248CE52E47F3E91ED2EC0D
SHA-512:	3C986095022E722AAA51EA731DEBDD0D63BBE140A04F7D83D6C012EE01FD36E9E0A798FC8DCDCDCA2A5183390A606F7DCC1131B50651C7CE5C2BD5444843F384
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-card/index_610fa8a8.css
Preview:	...........Z.n..~...,..a,_..)....P..e...R..5...^$S.u..Y.Cq...#.D\Fh....A2.\1.....2.HV...s......I..X<!..H.S....t:......f.f.%.\v...$.O...@{..L..3..c.l...N...=)...tw4O....g..vF@..`..q.~..G....ENwp......,..s.;'..]..........;..X9..R..".........wA1{.'a..~.8.<D...E[...@......g.k+.iN.D..`0cV\...L...,.7...e._.p.N.2,...).5.A....d...H(...2.S.........<.....I............?5+7;L.....n...._..e"9....8.c....4...E'!!...e..v..-a...)0..X.f..A.m<..G.}...H..=....,6..............v...sI....A.SAv.1...:....'.J...fk"Y/<.=....ih....g.....7..o....s....[..#.6....y.s]=.u.\.,..O..6...l.Z...?.x...9.HJ?.....5.k.... ........kT.E...../...b..yT..?(.Q\|.%......o.. .02.....%?..o..!.7A.ro?d.....3..c.a.=..3A.y~..W}.C.,..4.h.R..T...,..S.{.........-.]cGK0......^...`uW............7...\..R.;.R...}Zj.....V..nd.f.....z..........q.... _c".g<z..G.aX.n<.......A..`.9....i.'Y.....$.....;.K.]!p&A?).J3}!.8....V.p.s.%O.....M.h.\........B.....$.r..d.@...$Y.....E...{d9#j...[n..&.M.E.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3808
Entropy (8bit):	7.944697623853042
Encrypted:	false
SSDEEP:	96:1uasqHoEQnuKc0GSQP/xtp/+7Jum1gTG1uQSp/:Fs8oPuwGhP3pAumGGAp/
MD5:	2FF540572DC684553CFFA8508E9D99BE
SHA1:	CAC276C84C53FC0561DEE9F955506E20828F46FC
SHA-256:	8D6E5CC7D15860EDEF5D08C1C7CAD640CC7782A2AF963C432300AE8DD842D3FF
SHA-512:	CE76C9F9C0ACCC5D8710F554FCDCE9F752A68C541D8CE077BA5BFA2ACEFB5D1273B96A6A008FE689F8C3C9D85C46B05054F15EC90BA78B0B87C49A103728A96E
Malicious:	false
Reputation:	low
URL:	"https://t14.baidu.com/it/u=4204299204,1324854634&fm=220&app=103&size=f256,170&n=0&f=JPEG&fmt=auto?sec=1729962000&t=232185e2f47c7a5103ff669a514092e4"
Preview:	RIFF....WEBPVP8 ....0A.......>1..D"!..... ....~3.....s.........[\|-.O...#.._../.........'....do0......=.?..H.^.........+.K....._r..?...Y/.o.\|'...\.=.G........O...x.z..............._@..}....Q.?...}........_......~...............".. V.M..cA+.(....%6....Jz..Fv`O.5q.A..3.L+N.(V=.!?.Fk\W..wK..yl..B~H..J\|wc..:?,..w.4.j.-..O...\. O5o.K....o.:..e.M.P..C.2..<..\...V.>GO......N=.s.rRq...4).q.3.<....PE../..j..e.."7V...l.x6.w.V.`..."C.`.=..#\.<.W....(....\|...Xt."u.(..l...L..d......b{...h.yl?.<..h..v.......f{.$...@.</.I.........q..?....J{O................@...~.q.f.Z..A....?W.R...^..rA>.O..x..A...+......z....T:..!kR....v.....E:...%...-t......<>t.'....C...#.!C...#...\|.....#.C.....;C.z...q.jT...}.a^.b..F7.RgUr.g.@....7&...........F^..B..h..R...U_....o..........v..~t(l...u..>..8<..s.......%..o..<.....&..U..n..._..u@..0h'....h.....z$.....p.....6.\|p.....Q...e.e.....i.....G... ......e.:,..ek..!...U...k.....x..xo....3./X6.&.S..f....d....R..(....b..v+x...w.......

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (961)
Category:	downloaded
Size (bytes):	9216
Entropy (8bit):	5.4719684931964885
Encrypted:	false
SSDEEP:	192:HhywzzJagwfwIC85cZLLy7yK/vWI1vCygDiggLD5BEsqQQWVj0og63p:HhywvafzC9dy7yMWIdCysiVLD5BEsqQF
MD5:	0178953914F94A1C0D556BDD0C66AD4C
SHA1:	BB433E57CF5F197D61929C76033EC60F81932C48
SHA-256:	FC727C5EE9EE4B1B181EA4F28F4545762A005B47F4EB72D8EC1CFC077A6E73FE
SHA-512:	8175E489C04DDF746F50B0678212A77261EA7D029D30D3403BA411C44C99E167FF89F9E587B910B8EAFA39EB4DA30B2114A1B271A08BB27812C1F03A8ABE32BC
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/plugins/swfobject_0178953.js
Preview:	!function(){var e=function(){function t(){if(!X&&document.getElementsByTagName("body")[0]){try{var e,t=g("span");t.style.display="none",e=R.getElementsByTagName("body")[0].appendChild(t),e.parentNode.removeChild(e),e=null,t=null}catch(n){return}X=!0;for(var i=H.length,a=0;i>a;a++)H[a]()}}function n(e){X?e():H[H.length]=e}function i(e){if(typeof P.addEventListener!==O)P.addEventListener("load",e,!1);else if(typeof R.addEventListener!==O)R.addEventListener("load",e,!1);else if(typeof P.attachEvent!==O)b(P,"onload",e);.else if("function"==typeof P.onload){var t=P.onload;P.onload=function(){t(),e()}}else P.onload=e}function a(){var e=R.getElementsByTagName("body")[0],t=g(x);t.setAttribute("style","visibility:hidden;"),t.setAttribute("type",M);var n=e.appendChild(t);n?!function(){if(typeof n.GetVariable!==O)try{var i=n.GetVariable("$version");i&&(i=i.split(" ")[1].split(","),Q.pv=[w(i[0]),w(i[1]),w(i[2])])}catch(a){Q.pv=[8,0,0]}else Q.pv=[8,0,0];e.removeChild(t),n=null,r()}():r()}function r

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	4398
Entropy (8bit):	5.184350731126256
Encrypted:	false
SSDEEP:	96:10LM6VTrOMVVEbayy+5MgF9EoRUJYTcrqCCxuMCxyKyXk:q46V/XExF9EmTGAk
MD5:	7833028D860AFF115ED44DC3ECF82E92
SHA1:	8839C37D384D841E9E32E9D83D55294364E4A8FD
SHA-256:	49501EDD5CC5C53757DDA5423C9A81FA4512910AEC096ADD4CE69D0BFDA25982
SHA-512:	DF562C0FBECA9BCB687E01687C32AE75A57EEB4A3E9A5DD7006AABA73460EB9D96EBF96063482EE257C9B42E0B00E9382E562CC0097B61902CB76AFCC86BBD3E
Malicious:	false
Reputation:	low
Preview:	function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj}}return _typeof(obj)}define("superman/components/video-meet",["require","exports","@baidu/video-meeting","superman/components/guide_tips","superman/lib/event"],function(require,_exports,Meet,.GuideTips,Event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.VideoMeet=void 0;Meet=_interopRequireWildcard(Meet);GuideTips=_interopRequireWildcard(GuideTips);Event=_interopRequireWildcard(Event);function _getRequireWildcardCache(){if(typeof WeakMap!=="function")return null;var cache=new WeakMap;_getRequireWildcardCache=function _getRequireWildcardCache(){return cache};return cache}function _interopRequireWildcard(obj){if(obj&&obj.__esModule){return obj}if(.obj=

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 514 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8224
Entropy (8bit):	7.923514637314261
Encrypted:	false
SSDEEP:	192:RWKJlpU+3WzH/ChvOpkfLQdaYW5rdN55EanIES:gKJUVzHqhvOSf0bW355Ehx
MD5:	CCA2581758917F68EA9FF318BE855B8E
SHA1:	4C20015481DFEC66D9AE867A987792C81C2AEBC5
SHA-256:	571F703016E98A9DEE7B29BC165BD74AD874DE0F3E699A55BF9E0E4E3886D302
SHA-512:	98BFE6EE6DAC47427393EA97F4D5F675F64B9CB02AAC7978842651D226868E29AE023882AAEFF210F347579BF1ACB707A7729FA17D4AAAD50D31C5CA7D94E4FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .....`.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD.............BIDATx..{.^.....#BnM..q-..2a...^Du.q.(m.N.:.Z.t......^.mP.....$..HD..o.x....>...#.O.........Zk.....e ......Bh......F`e..........5..U...P.c.<....I...............4....qnD...........M.THj...u@..(Y...........WW.......B.z`sl.6..T.v..I...........4V..$...a.zY.a.....%..CI..bC.v.&K.O.I.....I...\...Pw...\IS$}.....}.-..I/H./I....I.xI]$}H...^....a....}\G.t.R\^..\|.!i..w.].'iW.....%...A... .8I.HzN..t..g...>.O.F....N...@..h..Q...^.Y..j...4>......>..B.8L#p..;p.....\|....n....K.b....F........$.wj...z.}.....x\|z...m0..!`.`....5:......4I..z.^7,VF.Wu.)....H.X. _...c.z...B....Uu(.IZ.....0.R`N.[.q..F.N.O......k.u...J\|/W......>....;..d.$..........JWU..U...G/....P..P.O...x.XM.G3..u-$..\.M..Q.9.[..b.F.....<.;..P..;p..-..../H..{V....f.......l.....1af..x`...C....Y..>0sy&.g.0..q..k1f=A=f..3}.[............K.}.53...c2H.pR.H9...y!..r..}1..`.p...C.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24774
Entropy (8bit):	7.8977443148518525
Encrypted:	false
SSDEEP:	768:7gv41RZkLaEspIxaFl5gGoYQS3k3g3/nf:8QZ4aDpIxaF150wPf
MD5:	5BF082D29588C07F842CCDE3F97243EA
SHA1:	85EB806F298D3E7EAA3D6E54682EF4E703F76949
SHA-256:	15B942249848D901938A69E03A3D44961E91C8311D7A8F1CA34FC9AFA6366B22
SHA-512:	37A093A20C3FB0361690EC3172E1B96D558AEFF826A04C7CA6CCD67A3757BF05502EAFED5D1E7D844CFD76F7AD796939D1D720092CB936C4F17CA5AE9CAE8E48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.......@.IDATx..........."UPT.........%b.D.%F...\|....c.1j..h.....k.`.{C..6T@.....<.y..r..{.=..g~.93.;..Nywvv..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (7053), with no line terminators
Category:	dropped
Size (bytes):	7053
Entropy (8bit):	5.347378899376139
Encrypted:	false
SSDEEP:	96:AKzCjezNkGDmH2jy4Uj/glV2/rh7I3pN9huR+ukx7aUEaZ:AK+jehNDw2jHUj/glg/ro/hR5aaZ
MD5:	9BA416D1406D92E9348B75C032E6F8AB
SHA1:	B7F6B2A0C040A9862C1F1A4911FBA6FF80D88F40
SHA-256:	0035CE982A13A8F98C0AA4D45F5CB15FF57702AC125574598C856E0B196B7F69
SHA-512:	8560773769D23A626156325651E04D5054C7F579D4B13F0B7274098B04F83352990532C386F91298D770BAE26EDA203FD4A73134764A446B50ADDED0B89BF1DE
Malicious:	false
Reputation:	low
Preview:	var passport=passport\|\|window.passport\|\|{};passport._modulePool=passport._modulePool\|\|{},passport._define=passport._define\|\|function(s,a){passport._modulePool[s]=a&&a()},passport._getModule=passport._getModule\|\|function(s){return passport._modulePool[s]},window.upsmsStore={reg_upsms:"106929130003000002",verify_upsms:"106929130003000004",verify_text_upsms:"1069 2913 0003 000 004"},window.YY_TPL_CONFIG="yylive,yyliveserver,yyanchor,pcyy,yyudbsec,bdgameassist,yoyuyin,";try{if(window.localStorage&&window.localStorage.getItem("upsms-pcApi"))try{window.upsmsStore=JSON.parse(window.localStorage.getItem("upsms-pcApi"))}catch(e){}}catch(e){}var passport=window.passport\|\|{};passport._load=passport._load\|\|function(s,a,e){var t=document,n=t.createElement("SCRIPT");if(a){n.type="text/javascript",n.charset="UTF-8";var p=s.split("?")[0],o=Math.round(1e3*Math.random()),i=(new Date).getTime();n.readyState?n.onreadystatechange=function(){if("loaded"===n.readyState\|\|"complete"===n.readyState){if(n.onread

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8687)
Category:	downloaded
Size (bytes):	689041
Entropy (8bit):	5.49649801868102
Encrypted:	false
SSDEEP:	12288:Swp9m/WPsKwPWhCvTxTCncQQ7miL7nqFTivSCQFHMzmK6xw24vA6sPkTGkuk3hPD:Swp9EgsKwPWhCvTxTCncQQ7miL7nqFTw
MD5:	A7BE81BD3F3171C9624B479E2898F34C
SHA1:	95E3E6AFA1715443B84F73A2102C49CA4AE51B78
SHA-256:	576479F32754069D496EF9C318D00D421F27E7E5AF48FF6AFE0B07DDE4B4D063
SHA-512:	E40A30DDED3529BECBEC8A789BEF8036D3F6EB39AD35D3DEA61E24D1642FDFFF71ACA4A61F370C097FA7B74C2DE08634BC4F4BA277C3D0761AF73F8530490B35
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/global/js/all_async_search_a7be81b.js
Preview:	!function(){function getUA(){var e,t={},r=navigator.userAgent.toLowerCase();return t.mac=navigator.platform.toUpperCase().indexOf("MAC")>=0,(e=r.match(/rv:([\d.]+)\) like gecko/))?t.ie=e[1]:(e=r.match(/(msie\s\|trident.rv:)([\w.]+)/))?t.ie=e[2]:(e=r.match(/firefox\/([\d.]+)/))?t.firefox=e[1]:(e=r.match(/chrome\/([\d.]+)/))?t.chrome=e[1]:(e=r.match(/opera.([\d.]+)/))?t.opera=e[1]:(e=r.match(/version\/([\d.]+).safari/))?t.safari=e[1]:0,t}function getDefaultQueryHis(){try{return JSON.parse(localStorage.getItem("index_ls_default_query")).}catch(e){return{}}}function detectPlaceholder(e){var t="[object OperaMini]"===Object.prototype.toString.call(window.operamini);return e.ie?!1:"placeholder"in document.createElement("input")&&!t}function createPlaceHolder(e,t,r){if(t)e.attr("placeholder",r);else{var o="<div class=kw-placeholder>"+r+"</div>";e.before(o),$(".kw-placeholder").on("click",function(t){e.focus(),t.target=e.get(0),e.trigger(t)}),$(document).ready(function(){$(".kw-placeholder").t

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16004), with no line terminators
Category:	downloaded
Size (bytes):	16032
Entropy (8bit):	5.517037757092373
Encrypted:	false
SSDEEP:	384:lFcChBSoSLc+kSiYyx1jkey+uK645BUBX2P58IfG3L:wChFuc+kSd4k5T4vUB0lfG7
MD5:	6237A86BF8327F331D741F6BFDE508C0
SHA1:	D12180268096A951A0A543E8014352250142B21E
SHA-256:	89BA3A5994016A2B98F14214260CCA210441EED8E15A08128CE5B5AB8BABF367
SHA-512:	82EE181DD2C1560CE13139971EE7908A3B58848FB186B43CA7D2D56E15E4204F60A41FF454B3963F8CBD07C5C5D30F41453884A04433B37097C028E46727E33D
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/rs/result_9519512.js
Preview:	define("molecules/app/rs/result_9519512",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(e,r,o,i){return a={0:function(t,n,e){var e=[n,e(1)],e=function(t,a){"use strict";function s(){return(s=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e,r=arguments[n];for(e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])}return t}).apply(this,arguments)}function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,n){var e="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!e){if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return d(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(e="Object"===e&&t.constructor?t.constructor.name:e)\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	7.424386074233972
Encrypted:	false
SSDEEP:	24:gvq/YFSp+CeESAnCwoZ6RUsthSCh/UZ0sIwyTOTcRkvE7KCNxdy:gvVgkISY0ZmUsuK/i0seqTFY/Fy
MD5:	EBF89842595C2D763C306F3CECDA16F1
SHA1:	89FFC5F8980A63973F2AFFBA1232C5949EAE7861
SHA-256:	1921BBB1737662A10FF870B8AE3978FE17583F36398E2B37E169F05C91EC6602
SHA-512:	987BB8761F0EEBCB13594F712F13A95EC58FA05F3A72D64E51125EF850A6E8BA4F970A178B34F0A4941BD5E23805FD8185CD4AEDD2260FDC8770E69B76CA8F92
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."...................................................................!1..AQ"..#3.b........................................................1A!............?..................D.Z...ya..%JQ=.<..5V.h.......).....YB...@R..'8.x.%.I.L.{[.+R..a.g:..m.m..n0n.....d%c$v;....[;2...q..:..HXP..jU.3.........W"<...U.&3.<.O.n2..R.d.......RYG...s...O_uB......:.+..t.5.1e.X.H.........7..U.....n.DV....xYx.....I<....f.i.f...t...d...h.......)...S..[C.&5.I.F.a?....xc...........V..O.....w.x..f\|U...W..w.6..M.P..%....Y8eg.RQ.N\|....X./6)....,..............].....s._O....m......>!qc.......8...t.@H....=f./.....`03.j.!..p..<..2.;.=\|.o'...[..g..r.1..U.X..3vr.......q..:.eDRP.].....E@....gNi;.Rk...C..w..B!...TR.UH..W.....A ........eLY...\|.r..!<2...\|...\|.....n..j........={....s..Q e)=c.".g..O.}...6..}.l...inIr...(.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 106697
Category:	downloaded
Size (bytes):	26073
Entropy (8bit):	7.9877324314820095
Encrypted:	false
SSDEEP:	384:5B5dZ8pbGbn8xxirLJWbDpaUL7iPoydZMOgy0f4JedrIODbGSg/La5Ncr7b5CPe:5PcponSigae8FgdrTbN077b5C2
MD5:	6D2AB66AF45903980DCF5414492F8954
SHA1:	77B0B4F9C07552D216EE718F651BBF9309CEBDE7
SHA-256:	CBE399E6404CAE8F364986616E4EFAEE73B5B328B599A17289F76EFFD123587A
SHA-512:	8C5E939DD60D40F8E4A5A1D578E39714B5F462097C90092CC4CB44D0558BC4586F91A98456151FDE0AE99FE56FF167C651DDFAB9A6DB1E5FC941BB55B888FC4F
Malicious:	false
Reputation:	low
URL:	http://hectorstatic.baidu.com/cd37ed75a9387c5b.js
Preview:	...........kw.8.(.Wf.{dO.........X~t...........cI..vl...o.`......I..s.%..,..B.^......Ynm..........D...w......t...yO......h<.^.....{Z.9..?..PW,\|....?.7...q..2.ev~..>.?..N..i.F....._..\|}.. ~7...x...>.\.-G..(....L''..........nS...?...@..q.h...K....z#.....Qw.hlr..N....Q......U...@.^.....ng..8.....L..S.%...3..Z...G..Zr....)...i..N....0BD..).`....\....r1.O.....D.._...h..w....t2.2;......p>.>.....s..g......._..?....8...y0.3..t.s.v....._~6e.#9.....t....'}.}6........,..)......A......vv....V.?.w...9../.V..B.S....'.r\|........_4.n....ffD..l....._.5R............)...k.9.%0]t...0.'c...b\|7.!.>..tq.q.......$F.%............_..~.Ln?.&.L..D.O..dr.g.N.,[..>.i.....].t...P..~t.s..^..x....\|...gz9<..Lq..+._.W.d>.%.H...IBa....................f...x8.>'....7.b.W..3.Y..?.......x~..p..)~....x....W.(Q...'D.,.\...%. .ZV$...1r\|2..z.%.....4...!6:.).0.........c.f../..Z....%DJ.X,...o...6!......_.....x...<.........>^......._..g.E<.!.%._i..s..pR....E.g.......YoPp..+....?....T...#.1.B

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://hector.baidu.com/static/h.gif?d=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&t=1729855660211
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 520, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17545
Entropy (8bit):	7.794920805518076
Encrypted:	false
SSDEEP:	384:G3bGLYZz1BCURttbcfrgHcwVS6DjPmO7/MQ:GaLY1xNwDgHHVSO70Q
MD5:	441E82FB1178A614395C404C341BF82B
SHA1:	4ECCE8A8CE5DFDA72820DF3D1510C205309997E2
SHA-256:	5A6353629F5CC6FA9AA961479CB4839B9E360E44E7238DD60801D5ADA0EAEBFE
SHA-512:	97AE56AC9CE166A505B3AD64F6976E101BE75C8B84B26CEA7E22DE21B3587745DBC8FF636CF71FBDA415A2C897D627B9D61742734AD675F96AAA905B74E5D86B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............C.......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:15427070C01611E997F8F7D4A2260468" xmpMM:InstanceID="xmp.iid:1542706FC01611E997F8F7D4A2260468" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.did:0180117407206811822AB27EAC483B70" stRef:documentID="xmp.did:0180117407206811822AB27EAC483B70"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.b....PLTE........................................LLL.......................8...?@)2.z.....#..@...........K..e...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	7836
Entropy (8bit):	5.2085749382788435
Encrypted:	false
SSDEEP:	96:fakVCpbn6vG2yTxJF3+5UOF9u7ehqGSn659UVh0p5aos52JBDnoLqWdZRD1DN:faaCpb+PytJWF9uywbzN52XoXdb5h
MD5:	F3BC3565F275687FD2121E28C4F2ED7E
SHA1:	E97F31DCFBB8E5F1F608ECA203D220B5326F9A14
SHA-256:	3012A68F6D5F19294406843DCD9AEC31689EB89B409066591571CE982C63B40D
SHA-512:	B18C4AE7D9EE4D6C229CE683E126503B35F3D870F6AD25BA9260EAA183BF0A57911737851A6106963C4888C8414F9D508195189AC91EEFB51EF0216CB6ED04D1
Malicious:	false
Reputation:	low
Preview:	define("superman/components/placeholder",["require","exports","superman/lib/event","superman/lib/commonUtils"],function(require,_exports,_event,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.PlaceHolder=void 0;function _createForOfIteratorHelper(o){if(typeof Symbol==="undefined"\|\|o[Symbol.iterator]==null){if(Array.isArray(o)\|\|(o=_unsupportedIterableToArray(o))){var i=0;var F=function F(){};return{s:F,n:function n(){if(i>=o.length)return{done:true}.;return{done:false,value:o[i++]}},e:function e(_e){throw _e},f:F}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var it,normalCompletion=true,didErr=false,err;return{s:function s(){it=o[Symbol.iterator]()},n:function n(){var step=it.next();normalCompletion=step.done;return step},e:function e(_e2){didErr=true;err=_e2},f:function f(){try{if(!normalCompletion&&it["return"]!=null.)it["return"

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2746
Entropy (8bit):	7.863005005976925
Encrypted:	false
SSDEEP:	48:1nNUmfi5N3luiEKmZdXuh+LD4A7HyIO8cDZgFZq2SrDvi8mm+Ya:1n2mfkYfrZ9xLUiSIObe9SrDvXC
MD5:	F03B804B4BFB627D871D88C47D53913F
SHA1:	DD0380C72A85E732DBDA718DFE672603C9AA1AA1
SHA-256:	58D230E3F23C1A31EE8C8CE64FCA8EC67F7C560B4C56B1DD8FE18BE2B0192631
SHA-512:	ACF31AF4D83CD40299F9C1ECEC555706E625707904BDD079D9CA2DD388C58DE5ACB965DF79354143061FEBD28292689CCD42CE935A913A9143256170D7340644
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newjiankang-f03b804b4b.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....$IDATx..Zkl\G.....k{.;....I..I..R..W#UU.B......!QD.....U..?@E.B..."...!....MUE...7uU..&.I....c{.\|.9s.{..^..]o.d=w..s...wff.&.J.,.XV..A...0L....p..>#\|F..p".3...F.....D.g........3....'....3....._..O..[V...R\...+@..i....>?..VU(tGee........kj..P_.....r.K'.h:$...$v......H...B.B..3t....H..m..[.E...' .'Nf.j./...(D..!M...\|..E\|.,w....D?........."Q..Rf.>..._X&`.+rb...(...lSl...1Ts.....XXx...C...35AIi.W ..F...@x.L..L<..q%\|jN}...!.G.+..3.}.../.v#. :E...!.L?%.E..aGjQ.@.r.iK. .a0.-.....h...6hD.B.Vb........Y1+o@.9.4.K.&..i..fz...}..3.m.M-.0f[...].?.L~..+.F?...s...}.......P..1...x.&.H..Y:G.C.`.JGX.A...g...(V.t..'d...8e.`pw.z....8.3<....o.....1.P..$...U.aF.....Q.;.o....7 .m.7.H8oY...^8.Y.S.Tjba...K.N'.0...1.&...!.~_w{.........Sjd.Ege.d.3.=S+G;...+*.....>..}.=..f.J..\.V....$...x.B....t.8.]......g..n...t.k(....cg.................9...

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (906)
Category:	downloaded
Size (bytes):	36225
Entropy (8bit):	4.589850190670062
Encrypted:	false
SSDEEP:	768:STByhsxNUz1KRzY5605qkgiCyodqbkCDzgN6sOWRF8/MpjICSX2G:ST6sxuz4Qx/eW
MD5:	BA0FBE3DC3B2456D26CF9AA9B98529AE
SHA1:	08BF7618AE5729BE54C5380B8AE8A162F2FF702F
SHA-256:	30B0EBB386B1A86994D6C8F4596057FCD3F218F82ED9DAEF21739DDB474F33B5
SHA-512:	96DD3E204C22EB3152A34868092AA40653B59E957EACEEDF0A81905F86FE46EC7AD76A714EC05880B8040A22823CE7B1EAD3E2A6DC8A18C965064A499BABB20A
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/soutu/js/tu_ba0fbe3.js
Preview:	/*. @file ............* @author wukaifang(wukaifang@baidu.com).*/../ global s_session swfobject/./ eslint-disable fecs-camelcase/.(function () {. // ...2.0 ....... var samNewBox = bds && bds.comm && bds.comm.samNewBox;. var os = navigator.platform.toUpperCase();. var uploadServer = '//graph.baidu.com/upload';. var isMac = os.indexOf('MAC') !== -1;. var $input = $('#kw');. var $namespace = $('#form').parent();. // ............ var linkUrl = samNewBox ? 'http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new_sam_a6c95ec.css' : 'http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new2_e1a824c.css';.. var MAXSIZE = 1024 1024 * 10; // 10M.. var compressOpt = {. // ......... maxLen: 800,.. // width * height ... resolution: 1000000,.. // ........ quality: 0.75,.. // .........

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1921)
Category:	dropped
Size (bytes):	57420
Entropy (8bit):	5.428393724499845
Encrypted:	false
SSDEEP:	1536:c7UgkS5UbTGwwaogAaEaACpUUBlGFOp0SBn/:cOS5UbTGwwaPAaEa/UUEsLd/
MD5:	947981AE2C8738FA4978E847E7B8BE64
SHA1:	45168240211D47DD4B1ADA85E1DFA3110E385B41
SHA-256:	00797F642C48B9D3D263E412C64AD87CF7F4D622E9D46998AE11C0DBD004E09E
SHA-512:	F8E2440B58E62AB1EB7E4587CBBAFD13B4B48637F9D21087D2C3E44393D9BD5C7307D56038B85744A473BECC777EDDD315DB94887BF497F14297B2AEC7CA134D
Malicious:	false
Reputation:	low
Preview:	define("@baidu/search-sug/sug/index",["require"],function(require){function checkHsugIn(e){return window.__sample_hsug_length?e.length>=4\|\|encodeURIComponent(e).length>=18:e.length>=4\|\|encodeURIComponent(e).length>=18}function checkHsugShow(e){return e.length>=1&&encodeURIComponent(e).length>3}function SUGOBJ(e){var t=this,e=t.opts=e\|\|{};t.ipt=e.ipt\|\|null,t.reverse=e.reverse\|\|!1,t.form=e.form\|\|null,t.submission=e.submission\|\|null,t.maxNum=e.maxNum\|\|10,t.bds=e.bds\|\|null,t.sids=t.bds&&t.bds.comm&&t.bds.comm.sid,t.withoutMode=e.withoutMode\|\|!1,t.withoutRich=e.withoutRich\|\|!1,t.withoutStat=e.withoutStat\|\|!1,t.withoutZhixin=e.withoutZhixin\|\|!1,t.visible=!1,t.stopRefresh=!1,t.renderCallback=e.renderCallback\|\|function(){},t.selectCallback=e.selectCallback\|\|function(){},t.storestr=t.storestr\|\|"",t.storearr=t.storearr\|\|[],t.zhixinsug=[],t.zhixintemplate={},t.zhixinused={},t.zhixindata={},t.query=t.ipt&&t.ipt.value\|\|"",t.inputValue=t.query,t.showValue=t.query,t.sugValue="",t.queryValue="",t.reqV

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5357)
Category:	dropped
Size (bytes):	144135
Entropy (8bit):	5.818354811349155
Encrypted:	false
SSDEEP:	3072:0USvc7JPopxamEUcaAVkgLVo6fgWczcA24Vvgg0jwGrAoYdfGrLKxPzsQnYuhgEb:ykWpomEUcaAVkgLVoSz424Vvgg0jwG8P
MD5:	63487D8C50E44137F8B6CE2A04407F8F
SHA1:	FD76921A0C4BAB77264C2D8975F9923D3A35CD5B
SHA-256:	77DED67F98C3F5E5B0BCA2A61233F5253C4B102B9FE684B0F132621599ED0290
SHA-512:	C2E75E398C1D9A54564D961578C7EE7FF344664B731231F811367EC4E22D84818E9AF761E7BB47F6C7DA835158E62CC33C729D6A826C1773BD79B3A3637A1847
Malicious:	false
Reputation:	low
Preview:	define("@baidu/aging-tools-pc/dist/index",["san","tslib"],function(n,t){function e(n){if(o[n])return o[n].exports;var t=o[n]={i:n,l:!1,exports:{}};return i[n].call(t.exports,t,t.exports,e),t.l=!0,t.exports}return i=[function(t){t.exports=n},function(n){n.exports=t},function(n,t,e){t=function(){"use strict";function t(n){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n.})(n)}function i(n){if(null==n)throw new TypeError("Cannot convert undefined or null to object");for(var t=Object(n),e=1;e<arguments.length;e++){var i=arguments[e];if(null!=i)for(var o in i)Object.prototype.hasOwnProperty.call(i,o)&&(t[o]=i[o])}return t}var o=e(0).defineComponent;n.exports=function(n,e,a){for(var s=function(n){var t=[n];return"function"==typeof n&&(t.push(n.prototype),n.prototype.constructor&&t.push(n.prototype.constructor.prototype)),t}(n),r=0;r<

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	2068
Entropy (8bit):	5.239085499472425
Encrypted:	false
SSDEEP:	48:RiZV/2BmAVyuuY6iBbPjDjQyHCW0/0gah+yo6Ld:RiZ5qmEyuuYvjmWci9Ld
MD5:	0E4B67354FFF9B6D750438C9499673C5
SHA1:	2EE2DC3C35A91835192DD5467DEF1118913BF056
SHA-256:	669D458EDF5C4BF191E54616ECFEB50348E1245567C21DC50143E91918A04E6B
SHA-512:	2C853265218A1D43864B8968D391A572C4898997E95E671C7D048B69A7F20B619923A43E7BE214735BDEFE15B76E75142FA58E808A976759101F514DF42D24EF
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/qrcode-0e4b67354f.js
Preview:	F.module("superman:components/qrcode",function(require,exports,ctx){var login1;var $qrcodeWrapper=$("#s_qrcode_nologin");var $qrTooltip=$(".qrcode-tooltip");var called=false;function loadScript(cb){$.getScript(location.protocol+"//passport.baidu.com/passApi/js/wrapper.js?cdnversion="+(new Date).getTime(),function(){cb&&cb()})}function hoverHandler(){if(called){$qrTooltip.hide();called=false;return}ctx.fire("qrcodehover");called=true;$qrTooltip.show();if($(".qrcode-tooltip").children().length>2){.return}loadScript(function(){passport.use("login",{tangram:true,loginVersion:"v5",defaultCss:true},function(magic){login1=new magic.passport.login({product:"mn",loginType:1,qrcodeLogin:1,hasRegUrl:false,autosuggest:false,hasPlaceholder:false,u:window.document.location.href,staticPage:window.location.protocol+"//www.baidu.com/cache/user/html/v3Jump.html"});window.mmm=login1;login1.on("loginSuccess",function(evt){evt.returnValue=false;ctx.fire("qrcodeloginsuccess");setTimeout(function(){.window.d

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2430
Entropy (8bit):	7.86548794488282
Encrypted:	false
SSDEEP:	48:TrnJ354/jXukjjUQaGt/pgaeLIxwtG3LHFWwNaCX89ttz4id3c:Trn0LTjUIt/pKGwk3z8FDq
MD5:	10750F3F7D049AB650FBF9D36B467E44
SHA1:	5964B840EB025D9536144229CFF71B0707B8C059
SHA-256:	96C2B6EB1DFCAF461BBD8475FAEA7502C3189F04F747358904BB0C872E3FAAE8
SHA-512:	9ECDDDD43926E4E904FB57A074E8DAE50AF24D5CDE793C91A0C7243CB10EBD387B5C1E723FCD887034CD471D6B39509914DB356FB3444D591A38518C03CC4455
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/global/img/nicon_10750f3.png
Preview:	.PNG........IHDR.......`........T....sRGB........DeXIfMM........i...................................................`....+......IDATh..Y[lT...9.^...bc......"E...IP.4.....pl.$j...$..,.pP.\|akC...R....H@..4<..T.E.R.!.r..7.v.....Y...s..xhT.4........1c?...w.~...!..H....O..\|l..08x.`&.U.`.M.3>Xh.Yg[.9-?......3....g..Io......Sd..Y.3..\|Ri....l....Z.C...r....1W[[..,LgPTU....B..9..#.pVg....R...YHk..Y%...4.....E.?......_......Y.o.I;.1&.;[O..e...8Q...............n...8K.O]...:....5".x$.....%.l.6S3.>.=<<&...z.V..G..d...M.U...t\.p.v.\|....z.......o{K..?].R.L....#.V.......r.y.t..I.1~...}..tUcgwh..t.......;.`;.,..+.......n/..b..Q`.....-;U...0..B.........{...\b.$c!....e..E..^Os+.........}.....".(zE...S\|..ug......y..F..N-...O.Yr.o..Z..*3.u..H9.PD0.H...W......7Z...8..-X../g .}P.#\!f.$..........j...7...a.g."..W<...j..2;.>..e.[.."..a.,..&...{=.)...t9......9...E.."T.WN;]CC.0.....@.Q.B..EI.(....6..i...2..I\.."...,K..,...t..y....a?.X...;...L....%y.f...M..U.D\|oI....>n..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (731)
Category:	dropped
Size (bytes):	256786
Entropy (8bit):	4.565288105395258
Encrypted:	false
SSDEEP:	3072:D39Este0vsOHoxOMJl2fR1sG1KXOEU/IGMaeuZLtsZPW+RY32SVEFKo:RfHex232+q
MD5:	1BE7F62DAC8F0DE20D70DF0E0539AE24
SHA1:	40681F7A9C4B16B61C922C433ABFD383635DCA1B
SHA-256:	BAC636F543B73B6B8864DF0217B39BA788E1EA0EEA7B5D679F7AE713FD226DCC
SHA-512:	991A5E68EA5E7363576C6642F81F9277651B9E9FF65B389CDE717B4ABABF874387849D34C204FD750F8E5D7D31EB274917EA49DE5004F2A00AC07E2F6958782C
Malicious:	false
Reputation:	low
Preview:	define('amd_modules/@baidu/video-meeting/dist/index', [. 'require',. 'san',. 'tslib'.], function (require, t, e) {. return function (t) {. var e = {};. function n(a) {. if (e[a]). return e[a].exports;. var i = e[a] = {. i: a,. l: !1,. exports: {}. };. return t[a].call(i.exports, i, i.exports, n), i.l = !0, i.exports;. }. return n.m = t, n.c = e, n.d = function (t, e, a) {. n.o(t, e) \|\| Object.defineProperty(t, e, {. enumerable: !0,. get: a. });. }, n.r = function (t) {. 'undefined' != typeof Symbol && Symbol.toStringTag && Object.defineProperty(t, Symbol.toStringTag, { value: 'Module' }), Object.defineProperty(t, '__esModule', { value: !0 });. }, n.t = function (t, e) {. if (1 & e && (t = n(t)), 8 & e). return t;. if (4 & e && 'obje

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Category:	downloaded
Size (bytes):	16958
Entropy (8bit):	2.3435335360263334
Encrypted:	false
SSDEEP:	48:f1tUqCPazSGb8kCs9z6YNR0KgnWvpJ4a/DKL+nhqBkVKtv8yl:f1+BPGxb8rFYn0KgWL4wLhRVKVn
MD5:	717B138033A41361B32B60FC5062AB2A
SHA1:	AF9841B6F0923F890F41FEEC52C94A0CD68F01D8
SHA-256:	C70088079FE9441A726C66CE0E73AE38315EC80051D3DD542C41B82FA0A1993A
SHA-512:	1985BF59C3EE8289BBE55FBE572371D1F401949E6A0179B35CA89E292173780956161FEB257303FE9FF5FD2898CA7FD6105EB1796841ADE0E1124EEB89AA70AC
Malicious:	false
Reputation:	low
URL:	https://www.baidu.com/favicon.ico
Preview:	......@@.... .(B......(...@......... ......@..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	5.051821460428066
Encrypted:	false
SSDEEP:	12:07Vgy7OGzGJiyo48V9ymFs2N6d2xzRCXGOTAdFcGTBy3w9ENs+w8eGizG1UKVB:0v7OGqDo4A9ymFsjd2pYXGOcEGlygeWk
MD5:	E2CEADD14D8E3FB1106E48AC89843760
SHA1:	2EC737233A3DF71D4D91476EF19D8DFC362EBD79
SHA-256:	3E4CCD740747E6805F9EFE89C3803697E9E867578DDDD215437FECEDAA8E625F
SHA-512:	03DC292CED672A7F4E999B8907474C338593D136481B8641EEF2310B5630C0DB0FE67ADA90ECE016088B68381E8F0E1EB9D3265E65337AD3858D2AD1F6A0FA7B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/tips-e2ceadd14d.js
Preview:	F.addLog("superman:components/tips",["tipsClick","activityClick"]);F.module("superman:components/tips",function(require,exports,ctx){function init(){var $lmLink=$("#lm-new a");var activity=$("#bottom_layer .activity");if($lmLink.size()>0){$lmLink.on("mousedown",function(e){var $curLink=$(e.currentTarget);ctx.fire("tipsClick",{showType:$curLink.data("dataType"),clkText:$curLink.text(),clkImgUrl:$curLink.find("img").attr("src")})})}if(activity.length>0){activity.on("mousedown",function(){ctx.fire(."activityClick",{clickType:"activity"})})}}exports.init=init});

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	13977
Entropy (8bit):	7.9225467706909045
Encrypted:	false
SSDEEP:	384:A9Mw3PJxPFElEICujdmXARoWj7wsjXRPeankes7zx8GUys:p8xWaWCW/f6n7Wl
MD5:	C3D3B26C0FBA21821D43E38050DFAC77
SHA1:	6724CDDD672CC7B1AE41ACB5678F0B12AF70915A
SHA-256:	78382F5C69E360F3D0CDC1172312BA5CDDECAFAF0B8779BA21B6FF886B30CACC
SHA-512:	566180B12ECB2976F131AB251DE57CA8221816A65CAA267F79B2AC9F8AB40DC4347317B919BEF2D1E1A50391C9EE65B6215E63D696FB04FE4228CDA89C2AD380
Malicious:	false
Reputation:	low
URL:	https://lingjing-online.cdn.bcebos.com/v1/lingjing-online/external-agent-appavater/2024-09-12/9b76c283-8f08-4979-964f-0a41630ac750.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...).....:..,.......[!..5.g....o.?h..{}W.$. MG......^.3GK...u..^[...XHD...;...4P...m.....x>.....G7.FU')K...a...Uf..B..S...Rt..J.i...<E.p.Y[6.1...I...5J...N......Z$..'.FR_......g.8c........3..G<sF.B.,N.I#u.6....H##....8.?..;\|h.\|I.[.7....R4.&..-j-:..A

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56682), with no line terminators
Category:	dropped
Size (bytes):	57084
Entropy (8bit):	5.554708937883392
Encrypted:	false
SSDEEP:	1536:GQJhYfop2qvgJn2MigS9G0VWzZF4JPBnYK+:1Ifop2qvgJn2MigS9G0kzZFiPBnYK+
MD5:	9728E065F1B3BB18CB6E39A18134E667
SHA1:	A8D24B28B9CDDD0385FCC438F6837A560BFEBA9B
SHA-256:	F619EEDDB513F98F6C049276698444105E486BA664260EF48866038BDAAD3E35
SHA-512:	FEB566FAF2419A70CDC0E143BBB1AA6FE345DA8FFE66C95085A9F6047114C7541EACA66EF650EA4D538380EB68D238BB15F58A5C81CCD6F18D9C1B6275C1525F
Malicious:	false
Reputation:	low
Preview:	define("molecules/app/search-tool/result_edfacac",["san","tslib","@searchfe/inject-js","@baidu/www-api",searchUiPc["Input_Input"],searchUiPc["Button_Button"],searchUiPc["Calendar_Calendar"]],function(n,i,o,a,s,r,l){return p=[function(t,e,n){var n=[e,n(1)],n=function(t,r){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,i=arguments[e];for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(t[n]=i[n])}return t}).apply(this,arguments)}function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,e){var n="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!n){if(Array.isArray(t)\|\|(n=function(t,e){if(t){if("string"==typeof t)return d(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(n="Object"===n&&t.constructor?t.const

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16020
Entropy (8bit):	4.631991990805928
Encrypted:	false
SSDEEP:	192:VeeJneERJRutXdOaXY6YL3SoWufyYrzhDlxBWiv1JKEXs:LhAtXdOgY6ThkhDlxkq7Kes
MD5:	D156CFCC559BF6185E4257B6894E77FF
SHA1:	223560B78927EE325AC5866C268A5569951AA35C
SHA-256:	3EDE21A5E4CFE5D122FD864452AB6517B510094FA60ACFC8ED0C0A99A4E380BA
SHA-512:	F47CA01BEB1B932A840C72320A0A3050F7E61A5E32390B8563958C22DD2D28645263685661AEA79E4138706B8EC20CFB28F05A9438392B434ED0BA571BD81023
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_99f656e.css
Preview:	@font-face {. font-family: "cos-icon"; /* Project id 1775033 /. font-weight: 400;. src: url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_009eaa5.eot'); / IE9 /. src: url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_009eaa5.eot#iefix') format('embedded-opentype'), / IE6-IE8 */. url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_f82307e.woff2') format('woff2'),. url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_f062422.woff') format('woff'),. url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_6ad2f81.ttf') format('truetype'),. url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_4bc7f4b.svg#cos-icon') format('svg');.}...cos-icon {. font-family: "cos-icon" !important;. font-style: normal;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}...cos-icon-medical::before {. content: "\e7d6";.}...cos-icon-camera-test::before {. content: "\e7d5";.}

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	7836
Entropy (8bit):	5.2085749382788435
Encrypted:	false
SSDEEP:	96:fakVCpbn6vG2yTxJF3+5UOF9u7ehqGSn659UVh0p5aos52JBDnoLqWdZRD1DN:faaCpb+PytJWF9uywbzN52XoXdb5h
MD5:	F3BC3565F275687FD2121E28C4F2ED7E
SHA1:	E97F31DCFBB8E5F1F608ECA203D220B5326F9A14
SHA-256:	3012A68F6D5F19294406843DCD9AEC31689EB89B409066591571CE982C63B40D
SHA-512:	B18C4AE7D9EE4D6C229CE683E126503B35F3D870F6AD25BA9260EAA183BF0A57911737851A6106963C4888C8414F9D508195189AC91EEFB51EF0216CB6ED04D1
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/placeholder-f3bc3565f2.js
Preview:	define("superman/components/placeholder",["require","exports","superman/lib/event","superman/lib/commonUtils"],function(require,_exports,_event,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.PlaceHolder=void 0;function _createForOfIteratorHelper(o){if(typeof Symbol==="undefined"\|\|o[Symbol.iterator]==null){if(Array.isArray(o)\|\|(o=_unsupportedIterableToArray(o))){var i=0;var F=function F(){};return{s:F,n:function n(){if(i>=o.length)return{done:true}.;return{done:false,value:o[i++]}},e:function e(_e){throw _e},f:F}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var it,normalCompletion=true,didErr=false,err;return{s:function s(){it=o[Symbol.iterator]()},n:function n(){var step=it.next();normalCompletion=step.done;return step},e:function e(_e2){didErr=true;err=_e2},f:function f(){try{if(!normalCompletion&&it["return"]!=null.)it["return"

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7142
Entropy (8bit):	7.973798581526759
Encrypted:	false
SSDEEP:	96:EdRoj3N/aAgBMuzODFa9Jf8r22djfVevYcdMsBCP2XXroWlBUm8O3WRSuXmRDkir:ELoDta//CjVDD6m+XroWlB/l2Fir
MD5:	A89AFA9581ED0D48B6F09AB32B0C0CF3
SHA1:	63FCEFBF70B615A9A1497754F7F668DCF015FC15
SHA-256:	75977BBEF6F72630AE791D200BB7DE9F7A19DC31470B4128C4771C095DAA6381
SHA-512:	00FF83055F6B377C61F9E1D1BD40510FE9F105B12E44E397C3C970EDF7EF4DC5ED286B30976525187745383DE25BF60E3FC94F89E9686A12573690CF0E31BFBF
Malicious:	false
Reputation:	low
URL:	"https://t14.baidu.com/it/u=3066869826,1019512012&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=F1ECB7461C404AC8D9A3EB7C0300D07F&sec=1729962000&t=de44f08b6e18b2860c9a7d4b35dfb3c0"
Preview:	RIFF....WEBPVP8 .....q.......>.F.J.#......0..d... :.e..gW.n.}...}...9..........._]..}.~...{..F{......s..[?.W.G...o.~..=<...Q.K.3.....o._p.k.w...._j..O..#....s.~.L.......e.=....~...yZ...C..S.....\.?.w>......g ...}:VI...{...O.t...... k0W...>.ki.D%.^..s!.....>A..FTZ..H_r......K.>.....}..s...BJCw......k...H.....T...Ar.4.q.....n.K..@.W....7..s....z U..o....P..i.m1..._......:y.P..y....S.......?.,E..p..o.t......vy^.v.......B.P.....@....\|ZD+Y...S.........=...-+.s..D,.n..1...o\..0RU%................Z......#_9.......(..\|e......<.3..$9..a.q..q..u.pc.#QE..{.Q.l...i.rws..'.....iGU.Y........@...iS":v..K...c.......l=.....a...&m.F}WD...N..R...{..;R.f...a...b..m.....jm.{..Z&:.Z...WY.........g.\....r}.w...?-...F..f.....\|......@?..u.l\...T.WU.).:..p..@..K..Q..C6.j...}@W.!9.GW.......t4.Y......jX....U.fLq........?YD;........4..}.C....D-.5....-%......=.+.!.{.1.,\.(..Jn.yn..........\..r.(XnlJ..Y.......-H........8._X..`o....hw.U.#9!..._.../.."..h.......

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	9066
Entropy (8bit):	7.935034228279307
Encrypted:	false
SSDEEP:	192:mtzO6JjNurvXpHngNN497M+1I0dXWcJe3Myxezg9MC+xzJk4R9PqZknW:USBXVMiFWcJe3IzJvPUknW
MD5:	652FA32515740D86E554D5C2BCCC78AC
SHA1:	304D14BA3B425CEA8948F474BAB78CA527847E8E
SHA-256:	28E3B0A5E8BA18CB2EBCC716C5002BCCA5B6334236D7C5D1596364985DB37849
SHA-512:	973E652A7A2274711EE6C864F4073004847616A0223B0177969348F0C87248987D60BE7BF21A38E0AD352CBACE04C4C334AEA6678C7B598379EAC2B614212FA6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................M..........................!1..AQa."q..23B..#4Rr...Cb....STcs..$%DFV....................................".......................!1".#AQa.............?..(.E."h..P.`..&.M..i)8?..%q..Z.JR..I......W.5..C].nBE.%."I...R..!....3.y2([gq......=l[.I.../.\d<...drZ.<+.X....'S.~..:.Kt.o.q..T.x....}Mw.:.w..C.E....ohIY8....?...S.=.Kv..\|'....6.sXb-.$.(....O.Q......V.W..O..J.5..0..mvS).8..(...Ef...M.%.m...m...E.Z~...##r.;y..+....m?.3z1W-Oh.6.Co...>...}.s...G..#..8V.\...x.....))R.#&.9..p.......~_........<W.>...I.B.q.:..94......t.iT...(P..(.......@t..Hm.r.....S.l.......?.?..L*B:....<..V.T..?..:...Qb.ET.P..3DUH.I&.YU.B.....(...$......%..n..5..v.K$....1....y p:W7j.....w....u.s...@)p...0.Q.:.....1..Q..S...-L${R.eN).\.....$.\|U.zR/....n.mDQ+.OIR@[...R.0.z...j...

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (694)
Category:	dropped
Size (bytes):	5444
Entropy (8bit):	5.390097564327781
Encrypted:	false
SSDEEP:	96:TrXFHKuR+z8jNBK45FXJSGEdHCqHpm/JKCTuSmSG8FWqdJ:fF9lbN0dg/JJmSG8Y6J
MD5:	3C8495C05A24FA1E35F6421F60EB8B67
SHA1:	73275257DACC0C5C280011E7D1A57759E82A57C2
SHA-256:	E3F40BD06E2FB74DA4D42237EF0F0B158646B46B2D26DF7B219850F5043B14BB
SHA-512:	9D063C98FA2FA80147174659FC9C31972E7487CE5FA54E49ECDADE756E62DEF881FC611553F25E2476F461B694B09CE33DC56C4B2C0547AA95169F7D7D6E1758
Malicious:	false
Reputation:	low
Preview:	define("@searchfe/user-agent/index",["require"],function(){function e(i){var r=[[[8,0,1,0],[13,38,5,0]]],t={isAndroid:function(){return/android/i.test(i)},isIOS:function(){return/(iPhone\|iPod\|iPad)/.test(i)},isWinPhone:function(){return/Windows Phone ([\d.]+)/.test(i)},iOSVersion:function(){var e=/OS (\d+)_(\d+)/.exec(i);return e?[Number(e[1]),Number(e[2])]:[]},appleWebkitVersion:function(){var e=i.match(/ applewebkit\/([0-9.]+)/i);return e?e[1].split(".").map(parseFloat):[]},baiduBoxVersion:function(){if(!this.isBaiduBox()\|\|t.isArkWeb())return 0;.var e,n=/([\d+.]+)_(?:diordna\|enohpi)_/i,o=/baiduboxapp\/([\d+.]+)/,s=/bdhonorbrowser\/([\d+.]+)/;if(n.test(i))e=i.match(n)[1].split(".").reverse();else if(o.test(i))e=i.match(o)[1].split(".");else if(s.test(i)){e=i.match(s)[1].split(".");for(var u=0;u<r.length;u++){var a=r[u];1e7e[0]+1e5e[1]+1e3e[1]+e[1]>=1e7a[0][0]+1e5a[0][1]+1e3a[0][2]+a[0][3]&&(e=a[1])}}return e?e.map(parseFloat):[]},honorVersion:function(){var e,r=/bdhonorbrowser\/

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1921)
Category:	downloaded
Size (bytes):	57420
Entropy (8bit):	5.428393724499845
Encrypted:	false
SSDEEP:	1536:c7UgkS5UbTGwwaogAaEaACpUUBlGFOp0SBn/:cOS5UbTGwwaPAaEa/UUEsLd/
MD5:	947981AE2C8738FA4978E847E7B8BE64
SHA1:	45168240211D47DD4B1ADA85E1DFA3110E385B41
SHA-256:	00797F642C48B9D3D263E412C64AD87CF7F4D622E9D46998AE11C0DBD004E09E
SHA-512:	F8E2440B58E62AB1EB7E4587CBBAFD13B4B48637F9D21087D2C3E44393D9BD5C7307D56038B85744A473BECC777EDDD315DB94887BF497F14297B2AEC7CA134D
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/search-sug_947981a.js
Preview:	define("@baidu/search-sug/sug/index",["require"],function(require){function checkHsugIn(e){return window.__sample_hsug_length?e.length>=4\|\|encodeURIComponent(e).length>=18:e.length>=4\|\|encodeURIComponent(e).length>=18}function checkHsugShow(e){return e.length>=1&&encodeURIComponent(e).length>3}function SUGOBJ(e){var t=this,e=t.opts=e\|\|{};t.ipt=e.ipt\|\|null,t.reverse=e.reverse\|\|!1,t.form=e.form\|\|null,t.submission=e.submission\|\|null,t.maxNum=e.maxNum\|\|10,t.bds=e.bds\|\|null,t.sids=t.bds&&t.bds.comm&&t.bds.comm.sid,t.withoutMode=e.withoutMode\|\|!1,t.withoutRich=e.withoutRich\|\|!1,t.withoutStat=e.withoutStat\|\|!1,t.withoutZhixin=e.withoutZhixin\|\|!1,t.visible=!1,t.stopRefresh=!1,t.renderCallback=e.renderCallback\|\|function(){},t.selectCallback=e.selectCallback\|\|function(){},t.storestr=t.storestr\|\|"",t.storearr=t.storearr\|\|[],t.zhixinsug=[],t.zhixintemplate={},t.zhixinused={},t.zhixindata={},t.query=t.ipt&&t.ipt.value\|\|"",t.inputValue=t.query,t.showValue=t.query,t.sugValue="",t.queryValue="",t.reqV

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16004), with no line terminators
Category:	dropped
Size (bytes):	16032
Entropy (8bit):	5.517037757092373
Encrypted:	false
SSDEEP:	384:lFcChBSoSLc+kSiYyx1jkey+uK645BUBX2P58IfG3L:wChFuc+kSd4k5T4vUB0lfG7
MD5:	6237A86BF8327F331D741F6BFDE508C0
SHA1:	D12180268096A951A0A543E8014352250142B21E
SHA-256:	89BA3A5994016A2B98F14214260CCA210441EED8E15A08128CE5B5AB8BABF367
SHA-512:	82EE181DD2C1560CE13139971EE7908A3B58848FB186B43CA7D2D56E15E4204F60A41FF454B3963F8CBD07C5C5D30F41453884A04433B37097C028E46727E33D
Malicious:	false
Reputation:	low
Preview:	define("molecules/app/rs/result_9519512",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(e,r,o,i){return a={0:function(t,n,e){var e=[n,e(1)],e=function(t,a){"use strict";function s(){return(s=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e,r=arguments[n];for(e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])}return t}).apply(this,arguments)}function c(t){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(t){return typeof t}:function c(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function p(t,n){var e="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!e){if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return d(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(e="Object"===e&&t.constructor?t.constructor.name:e)\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1182)
Category:	downloaded
Size (bytes):	74476
Entropy (8bit):	5.367962493773159
Encrypted:	false
SSDEEP:	768:aXC0VNelpshpoCsNSA2NVNah6SzqJmNeah5GG9t3IByY/hQ1+haRA7/Dvt3BI2:cpmUNaER4Nem9f3fYh7/x3r
MD5:	388D059DFFA87621761C31CED2935CA4
SHA1:	997D0214DA5C397E440B67934FD94C53248E51FE
SHA-256:	7E5D30B3A8DBE644998B4722BD96B7F7F23C9F403B045F61C0566AD5A133C566
SHA-512:	347A9F2B2E8AF186AE4EBD774EBA976D40B68A0642575AEB2CCA2E39DE28106F438CF3D7409A879D474B5C3B91A36F003A22855C230EF2E715E420949D75E81B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/bundles/es6-polyfill_388d059.js
Preview:	!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n():"function"==typeof define&&define.amd?define(n):n()}(this,function(){"use strict";function e(){}function n(e,n){return function(){e.apply(n,arguments)}}function t(e){if(!(this instanceof t))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],c(e,this)}function o(e,n){for(;3===e._state;)e=e._value;.return 0===e._state?void e._deferreds.push(n):(e._handled=!0,void t._immediateFn(function(){var t=1===e._state?n.onFulfilled:n.onRejected;if(null===t)return void(1===e._state?r:i)(n.promise,e._value);var o;try{o=t(e._value)}catch(f){return void i(n.promise,f)}r(n.promise,o)}))}function r(e,o){try{if(o===e)throw new TypeError("A promise cannot be resolved with itself.");if(o&&("object"==typeof o\|\|"function"==typeof o)){var r=o.then;if(o instanceof t)return e._state=3,e._value=o,void f(e

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	143929
Entropy (8bit):	5.227244873914862
Encrypted:	false
SSDEEP:	3072:Jz1IL+ugS+yLvGJuJC8od+6f4CupVOkMKV:e+GXC8oHACwMKV
MD5:	EDB203C114D8E1115C869CA443DD6E48
SHA1:	525BF4344984E7AB03085DAEBB95B0D0E55FBBB4
SHA-256:	AC301A9D0B4250646CABF4E9E56204D09AF518367EED031562360D0F0CB9D733
SHA-512:	F9A78CCEA9B028D14016BD6DD13769FC25C569E3C4FD7EDE8DE90BE36BFA973F6A5354696B2A0D8C90286D161FFC49BFE75958FECF0E23E8393351EE707F29D9
Malicious:	false
Reputation:	low
Preview:	(function(window,undefined){var readyList,rootjQuery,core_strundefined=typeof undefined,location=window.location,document=window.document,docElem=document.documentElement,_jQuery=window.jQuery,_$=window.$,class2type={},core_deletedIds=[],core_version="1.10.2",core_concat=core_deletedIds.concat,core_push=core_deletedIds.push,core_slice=core_deletedIds.slice,core_indexOf=core_deletedIds.indexOf,core_toString=class2type.toString,core_hasOwn=class2type.hasOwnProperty,core_trim=core_version.trim,.jQuery=function(selector,context){return new jQuery.fn.init(selector,context,rootjQuery)},core_pnum=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,core_rnotwhite=/\S+/g,rtrim=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,rquickExpr=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,rsingleTag=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,rvalidchars=/^[\],:{}\s]$/,rvalidbraces=/(?:^\|:\|,)(?:\s\[)+/g,rvalidescape=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,rvalidtokens=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,.rmsPrefix=

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	65009
Entropy (8bit):	5.461589121278769
Encrypted:	false
SSDEEP:	1536:Rvf2Pq4LXR0561JZfdqqPkzUrrqFWVwqzb6LEKdvYYEX:Vf2PqzjFFIbKEKdY
MD5:	C4C7BE2850F34EF2E69DD4FAD537AC08
SHA1:	41DDED6F2A7B87986FE3D4167947DD801D61B71F
SHA-256:	EFAEF928B06D73A1B4752E5881BE284EA1FE5E6A1E753ADD798E45FC14D577B9
SHA-512:	5B5D15FC29A3BF814C4B35BB92F77B8072E14C767A1A1A1B68551CFBB17D9BD1D343E8E2030DF55C32235B5551E7B0291E25A457429575CD7898C44187CCD4ED
Malicious:	false
Reputation:	low
Preview:	F.module("common/result_page",function(require,exports,ctx){exports.createResulPageLink=function(option){if(!option\|\|!option.wd){return""}if(!option.tn){option.tn="baidutop10"}return"//www.baidu.com/s?wd="+encodeURIComponent(option.wd)+"&ie=utf-8&tn="+option.tn+"&rsv_idx=2"}});.F.module("superman:common/image_lazy_load",function(require,exports,ctx){var S=ctx.base;var _intervalId=0;var _timeoutId=0;var _dataSrcImgStack=[];var _intervaling=false;exports.isVisible=function(elm,noOffset){if(!_isVisible(elm)){return false}var hOffset=noOffset?0:60;var vOffset=noOffset?0:60;var elmPos={};try{elmPos=$(elm).offset()}catch(e){elmPos={left:0,top:0}}var scrollTop=$(document).scrollTop();var scrollLeft=$(document).scrollLeft();var viewWidth=$(window).width();var viewHeight=$(.window).height();var xa=elmPos.left-hOffset,ya=elmPos.top-vOffset,xc=elmPos.left+elm.offsetWidth+hOffset,yc=elmPos.top+elm.offsetHeight+vOffset,xa1=scrollLeft,ya1=scrollTop,xc1=scrollLeft+viewWidth,yc1=scrollTop+viewHeight;r

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1674
Entropy (8bit):	7.861660542575691
Encrypted:	false
SSDEEP:	48:P1koLJ3WqfmsxN5ZewuCMT3aPyJzyInaYOe:P1DN3WqfmKN5ZewwTqPyJzwYOe
MD5:	F6C7EF2027D84B1FBFC07B95F3CEECB5
SHA1:	CC1C8D13F2E9435E2BC25C766CE87EAE41DA6412
SHA-256:	79EFE285A79BB904AAE71B724A35232C8EAE8550F89780255D6D39A58CF44F4F
SHA-512:	05A8C723F9783D547F67C215FA58026218FA43515A0C8B219953704D67EC8574CF1B595D23C44AE1B434E60D004D015549199BE205C6C993603257AF70A366AF
Malicious:	false
Reputation:	low
URL:	"http://gimg4.baidu.com/poster/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F284bf3dba859027de945da2b4e91374b.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2004&size=f64,64&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=8296411e868e0aa9ce66e92c4fa920f9"
Preview:	RIFF....WEBPVP8 v.... ...@.@....%..8..e..._...o.?%.'._d.Y......O.O...... \|..$............z.{....k.o.[.....?.........?...\|...].......~.f......._..._....K.........;.......}......o.....?s?......m..._..... =..N..o.......D......]u.Em.)S.o.!7...../.....U+.=.....A.IX.Q.#6[.sR.9..Y......-Y....2zJ......\|..1....P9.....S.......>..O......pQ.O.eB.j....Y...X5..._....l.7......e)D/i.......g......w^..fq.q4!..U3u..L .u0.D..0.uBM.X..e............L....$).b.i......a.........$EO82v.j..V.yyr.`d..~....]G...-.*.......................1...1...m.r}/....Z/R{...t.wQ;.b?:...N.... ..m.....D\.e..y..<L.o...b."u.qfe.K.\|.%4...C<g..%LDR4W.-^...t..?ED....t....Df..U..(....y.....b.m..X_E.1..Q.#.3.J.dH.c.k..{O./.E..A..~.%....-=r..SI...is....C.....HZ...k{......l+C'..n .,!.lc.NM..J]<&[.VOf.dw.Q.t.e.1.a.&f...W..\g.@...s.S..'.5....2..v....\|\|..I....,..........$#...\|o.?..~O.!..T=.K@9..1x...n...O.9.".K=.jl[9...yG..&...>....O.w..tG.l..tl..c....j..MoV.D@.N..n..0..s..50..f_.{&.q..:U'.e.DiR.A.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 64x64, components 3
Category:	dropped
Size (bytes):	5596
Entropy (8bit):	7.881009732458932
Encrypted:	false
SSDEEP:	96:cxUawF2TBbrk+D/WJjHxwlos9ua7w1uzXLFEfwJdnvhS4MwdS:cxUawwFWhRwl94yhHnptMeS
MD5:	0838FF5399F36D9245E8A38FDC834A7D
SHA1:	4F1687FE7C55F1684F872D65E10D08F50D3E9727
SHA-256:	FF9CA8FBF49014990CA8BCBA1E9B7E3DE9E843B6F815B3BA257615D2B23D10E3
SHA-512:	6533B59699F594F4C60044997E47461FF1B54CA9AEB5378CB669AA8D79E22F5FBAD10D28B1C6C939CD2E01BFC86018505181572EB8059006FF6C07A28FFC9CBB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................@.@.............................................7............................!...1"Qq.#2ARa....$4BC.....................................6...........................!...1A."#Qaq.23...%R..$..............?.?...<,.&..j.w..E....1.=Q.R...1.i2...(..S.eV.Q.T.g..#Lb..3wc.B.l.J.$..Q...)$......V.I.Dq...\6.+.o..Q.!z`.@..D.......Sq.4... ....i..w.'...J..tM..\|._..../.v....*?.7..%...`.^g.....oG.V.w....<...>........V^B.w..,.?;......_bz<.TU...._.....lk+.3....6.+.>\|2..$.u..9."....\iB..n..m.....>..G.5.3Q...}V:.v.6.[.\%.u...~....Z .&,.`3:v...x.8.h:..1..'.H:.....4.$gn............ppp.88.^o3..,...Y..@.b..h]em.v3.....:.......Nk..Ru/........O4..=?B....Tky..~.....j... E..vy..~.t.j.)3....Ar..9U....^.Z...G.Cb..I"...N=.H..\1.\...'...U{~.Tw.....u..q..1.`...O~.]..{...J;l!...oeX.s..&8......m...o.l.a....&.?..V.b.sil..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15444
Entropy (8bit):	7.754529849677063
Encrypted:	false
SSDEEP:	384:WvD/oA79X29A/9VZ2iCHnprYx6qw9B9DvCoc2iouNJZu:O/7R3VVrCJrYxnwxDL0NZu
MD5:	D9C8750BED0B3C7D089FA7D55720D6CF
SHA1:	15E45B5ECB7C7F4F54CDC3A224E702794C1A9684
SHA-256:	22EB1E51C92F3C013305AE0319EF4477C692DC26ACBCA1518776E2FAF9D66A98
SHA-512:	197D9FB1D52230EABCF551CF9547335DEEE7C9AFC5187F32A99E168B019841248DC6B973234338911BD5C96DF8644A4F14D955357111821C22499D803FAEA922
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM.*.......i........................................................u.eg..;.IDATx.........eV......E..&..(.Q..11..$.h4&....}.......Q.sK.M.!..1 "3....C.{....f....S 0[w...U...f..{...:u.S.a...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (782)
Category:	dropped
Size (bytes):	23763
Entropy (8bit):	5.272582803301178
Encrypted:	false
SSDEEP:	192:Yf2ldDwfBy8osmDghvM3l9Om/gpnlpZGzaOUEUKz69pbGDU/U5Pkzy9mK6Z5:Yf2bDwfBxZ5hUlsEGO7U7/UnUZ5
MD5:	9AA906F3D6D2D5F6142635317E9A1CF5
SHA1:	AE942F5528EEF64B366209C05BFACB2E3F70DE31
SHA-256:	C3071D44F3C496178D7A3C7079AC50480DE8C1C9CF950E24CABD1FE5AFBFB87F
SHA-512:	7849A9546614412ACA39CAD3EE7322269617FB49B175F6CD8D712BA0D4866D0464AE6478423A09BD48E4EF7316A30C0C9676419646F6E28BF97C2CF3CE1CFC36
Malicious:	false
Reputation:	low
Preview:	define("@baidu/Boxjs-search/dist/components/data/eventListener",["require"],function(){function e(e,n){return void 0===e?!1:(n=$.extend({name:e,key:"default",callback:"function"==typeof n?n:null,promise:!1},"object"==typeof n?n:{}),o[e]=o[e]\|\|{},o[e][n.key]={callback:n.callback,promise:n.promise},n)}function n(e){return"object"==typeof e&&e.name&&e.key?(delete o[e.name][e.key],!0):!1}var o={};return window.addEventListener("baiduboxapp_callback",function(e){var n=e.callback,a=e.data;if("string"==typeof a&&0===a.indexOf("{")&&window.JSON&&JSON.parse)try{a=JSON.parse(a).}catch(e){console.log(e)}for(var t in o[n]){var i=o[n][t];try{i.callback.call(i,a,e)}catch(e){console.log(e)}}}),{regist:e,unregist:n}}),define("@baidu/Boxjs-search/dist/components/data/index",["require","@baidu/Boxjs-amd","@baidu/Boxjs-search/dist/components/data/eventListener"],function(e){function n(e,n){var o="",a="";"toggle"===n?(o=e.name,a=e.type):(o=e.name.split("-")[1],a=e.name.split("-")[0]);var t=o.substring(0,1

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Category:	dropped
Size (bytes):	16958
Entropy (8bit):	2.3435335360263334
Encrypted:	false
SSDEEP:	48:f1tUqCPazSGb8kCs9z6YNR0KgnWvpJ4a/DKL+nhqBkVKtv8yl:f1+BPGxb8rFYn0KgWL4wLhRVKVn
MD5:	717B138033A41361B32B60FC5062AB2A
SHA1:	AF9841B6F0923F890F41FEEC52C94A0CD68F01D8
SHA-256:	C70088079FE9441A726C66CE0E73AE38315EC80051D3DD542C41B82FA0A1993A
SHA-512:	1985BF59C3EE8289BBE55FBE572371D1F401949E6A0179B35CA89E292173780956161FEB257303FE9FF5FD2898CA7FD6105EB1796841ADE0E1124EEB89AA70AC
Malicious:	false
Reputation:	low
Preview:	......@@.... .(B......(...@......... ......@..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7877
Entropy (8bit):	7.848820474106003
Encrypted:	false
SSDEEP:	192:TSHIIHUCD4wayFvr2pD5KvNk9mR/pCNYvYRCvCg:G50wfmcvNhxClMj
MD5:	B15C113AEDDBEB606D938010B88CF8E6
SHA1:	011387DB777FF33FA46481BB4EBABBAC796240A9
SHA-256:	264CA980F97A4F91FEECDFBB12486ED9D66F57190A0C4A302602500C589847F5
SHA-512:	E5461D90E1AD3B7730B48BB2CA0B16A236B619E1CE7D47F8E3BFB5B19288ABA6A190D48905ECF23B49E7A14152C442652916CE22A304EB5594E8EB40F5F68F30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................8....pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 689041
Category:	dropped
Size (bytes):	221349
Entropy (8bit):	7.998081277730831
Encrypted:	true
SSDEEP:	6144:hel0ZFZygZwEBYPPQfTlktWxpz5fyHXDzrG6XqNBi:hmMFZyg5BYAZWyKD266u
MD5:	444BC47484E7D40C6DE69F50E8C3CCB9
SHA1:	6F74F9A8ACED8BECDA2D609C16790158E45AAEB3
SHA-256:	D80271A1709B3C150C84E9519D3B2F8B3C4F67EAC60156BF281906B3A73272A3
SHA-512:	2EC00775D24B6AA7F7950FF1C10E121389DF8EA40B72BA6BB583C69A6318C6BE1A32F2193E77441C2C5509DEF9BBA2A7A03DC6744FFB459A6B03C4EC59AD5BF5
Malicious:	false
Reputation:	low
Preview:	............s.V./.\|.....6`...o..x..m.g..j.=#..H...I...R..o.T.!.J.$UyI.&.7U'o..M.T%..:.......6@P.}&..4.l.....k..9Y.<Jb.U...a..sJ.......zqp.].y...Y.>...'_'.a.".B..a.H.=.FF..4.'I:..?..w;....o'......9.:..z)..G..Vz.O....s.lL..!.j.>.r.A.B/<.....,....O.1..)U.P...(.].6..p.\|<.R..2y...e...jv...;....r^N[.z...M~Qs..,..i$J.gQ...Ks.^..`1........V.Oon.r....o.. .I.&.`zBk.\.m.:.g....O3.,..?...q.,G..u...E..0.G.w.`.^&.q.". &...d..>n\|........<.[Nl..$O.yH.qB.._..[S..:.\..Q..P!-.`...Ec..q2Z..4....4...4_..hl..$.pw...us7un...;a;.....@...4.yP.g}6..6F. ...-#..L..g[.....!AN...>..v9..i.Y.i4zo.z...m..xh.\.WAJ..."....J....t.,Q....a.olc...'.....:_.d...],j.*.....E~y..G.......&.....h.o.,.7.0.S0]..b...%...x.d....'.[..\T4...F.0Y..x.H.2....wwy..F.7..c..?..4.%WU...5.......qz....m..<........ol.......qK_D...nv.........APur.\.H..]xTh=.:..7.y..~....e.B...z..q.'..tl"$..[..G)..=;..7^.t..Xz.~...]..>...!...z..:n=.a>.M.Z.W.`5...g3.g...N...>..%.{.%.w..f....s.$..uO.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	3293
Entropy (8bit):	7.814775697431077
Encrypted:	false
SSDEEP:	48:yjPQqRmQnmjWttokIQARZBW7B9SCZmpoBMNe10o1vsTSiSW4qo9UbQCSjgan3:yjQsmjWovR/WfvmCBMId10Qc1b6V
MD5:	B2A3BA5BC76044C81C882D6DE5A09CA3
SHA1:	D2C7DCCACC9294AF8DBCDAACBDA924E97170388C
SHA-256:	79128FCE31635E11F615247D454522E554D35005F5A1D5AAF45C13DD1688CA3D
SHA-512:	66C22E57F615661E6F927C54B6D817871B0A38A9D4E68CFCA15340C3139A505CE6300AC6F63FBC45DBA074321C200FCB8474A3DF36DDDCF1BF9357EC50355017
Malicious:	false
Reputation:	low
URL:	"http://t11.baidu.com/it/u=2201993677,788292129&fm=58"
Preview:	......JFIF.............C....................................................................C.......................................................................K.K..".........................................5.............................!."1A.$Qa..2..#BR3Tcq.................................0........................!..1A..2Qaq.....r.."B.............?....4iB....l[vm.yW...T..~}J.!-3....kZ..H.d.>....Zq...P.(.?7C..)...sJP.y.&.;t.j.H=T...nV.R.x.G..,....K.>.")'.:....nv......f.u....~..S}...`wTO.N\|\|..=..WkM.QKnX.@....x.[&.".C..R>....l...M...Z.....:on.Xq...6v....n............p......g.:...G........_.l...J.R.`...T.....}..1.jD.n'.c.....Q6.r=IK.9R........(.8:.?...D.zR..M.w...@.o.OIQ..nb..=.H...,...q!.P# .'......xr.=.....9.h.\|D....>....<....j...+..B.jv.I).....Lji.QN.2.@.HV...A.=".[.MP.K.dr.....F.4h."#......,.ar.PJ..T.p.....t.s&.eq...p..a.+k..=...#. ,..Q...)4..V..J.~.?.:..\..r..j.....E..$"\.*..Si.y..L...'.......jq.=..."G....7.....fc....Uj..B.$.?..O.6.\|dyq@.Y$..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760)
Category:	dropped
Size (bytes):	2035
Entropy (8bit):	5.187556739815197
Encrypted:	false
SSDEEP:	48:3ih5tI1tvU9fOOLo30K9tlSiz4rsFUCAvb:iS8OOLo30It54rbCAvb
MD5:	D9B4619654A6CDFF21A7DBE25A5AD4A2
SHA1:	89217386F3494EA643DFED03EAC0F5CA2DD5EB53
SHA-256:	729238165FC636EFDA87C5D6B6F3C909DE6CEC43B79B5F444ABD1ADD30B988E3
SHA-512:	D3EEEEBF7CCD67B125093A92B08658DB5F51E3543635862C1B8D852B31FC65F3D96DE484FB602C937CC678711C51DB18A125E2DD0C3C1208332ABBEAAF831EC7
Malicious:	false
Reputation:	low
Preview:	define("@baidu/ala-util/na/utils",["require","@searchfe/user-agent","versions-compare"],function(o){function e(o,e,r,i,n,s){var a=!1;return!o\|\|!i&&!n\|\|i&&!o.bdBoxVersion\|\|n&&!o.liteVersion?a=!0:i&&o.bdBoxVersion?e?a=t(o.bdBoxVersion.andriod.supportNaVersion,s)>0:r&&(a=t(o.bdBoxVersion.ios.supportNaVersion,s)>0):n&&o.liteVersion&&(e?a=t(o.liteVersion.andriod.supportNaVersion,s)>0:r&&(a=t(o.liteVersion.ios.supportNaVersion,s)>0)),a}function r(o,e,r,i,n,s){var a=!1;return o&&(i\|\|n)?i&&o.bdBoxVersion?e?a=t(o.bdBoxVersion.andriod.supportDeviceLogVersion,s)<=0:r&&(a=t(o.bdBoxVersion.ios.supportDeviceLogVersion,s)<=0):n&&o.liteVersion&&(e?a=t(o.liteVersion.andriod.supportDeviceLogVersion,s)<=0:r&&(a=t(o.liteVersion.ios.supportDeviceLogVersion,s)<=0)):a=!1,a.}function i(){var o=a.isAndroid(),e=a.isIOS(),r=a.isBaiduBox(),i=a.isBaiduBoxLite()\|\|a.isBaiduBoxJisu(),n=a.baiduBoxVersion();return{isAndriod:o,isIOS:e,isBaidubox:r&&!i,isBoxLite:i,browseVersion:i\|\|r?n.join("."):""}}function n(o,e,r,i){va

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	4.946472646770047
Encrypted:	false
SSDEEP:	48:i/GbgNGj+T70PZiq1lZfQpMTHxr6Y6Z/gw+j5kbY+W+eVKeaccWa/GbxggEM4Oe3:idNR70oqfEMZPV+gKpc6aggl4Ocw3K9b
MD5:	33D6467C85387635430DA9BAB90BC57A
SHA1:	7E9A219C3E3A52D78395695D79C4ECB43EE36BBF
SHA-256:	606B63043E353A883AC595B7E3C2580BAE3C60C56E51B6CB899CBE80372839BC
SHA-512:	4CE29C64217AA62C9E6E3C25B2B396D1D61209EC5CCB1D188FD9D3E7B0A80C6969AFB1BDCFF500E910DE489300A34E510A0C177C3C2E73847FFE71E23B59D1BF
Malicious:	false
Reputation:	low
Preview:	define("@searchfe/promise/src/promise",["require","@searchfe/assert","@searchfe/promise/src/set-immediate"],function(e){function t(e){u(this instanceof t,"Promise must be called with new operator"),u("function"==typeof e,"callback not defined"),this._state=r,this._fulfilledCbs=[],this._rejectedCbs=[],this._errorPending=!1,this._fromResolver(e)}function n(e){u(e._state===s,c);var t;t="function"==typeof window.PromiseRejectionEvent?window.PromiseRejectionEvent:CustomEvent;var n=new t("unhandledrejection",{promise:e,reason:e._result});.return n.reason=n.reason\|\|e._result,n}function i(e){return e&&"function"==typeof e.then}var r=0,o=1,s=2,c="cannot make RejectionEvent when promise not rejected",f={longStackTraces:!1},u=e("@searchfe/assert"),a=e("@searchfe/promise/src/set-immediate");return t.prototype._fulfill=function(e){this._result=e,this._state=o,this._flush()},t.prototype._reject=function(e){f.longStackTraces&&e&&(e.stack+="\n"+this._originalStack),this._result=e,this._state=s,this._e

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	524
Entropy (8bit):	6.878344816981975
Encrypted:	false
SSDEEP:	12:6v/7ElvaWRiLXcI5sfI/o8x/vNX7nHqJLy+mUkB59+mZbD2Wljl81:xaWALXtSfHy/FXLHmy+dknrZH2WFa1
MD5:	9ABE25229C3806267CEEAEEA75BDE1C3
SHA1:	32F72B1CD36838214CE1AAF7BB1F2CFFC2124C89
SHA-256:	5E5F4C0CE36BBC4C73439DD33075C648F8522C637EFD87EB1BF37C1D3C782AFD
SHA-512:	523E9D6D20E2F5B376E840C8B7B2AB9009F009F899FD0639539FE6F46B4D93E3DB6D99080A2C3063DC99AC2B7DC6DE06DDECC4D668EA1C97CFA5FD7F92F142A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............^....~PLTE......................................... ........._..w.......X..@.....$..7............P.......................l..E..DL..v....tRNS.......vS<....:C...0IDAT(.S..0...(G..-.(.......%!........[v.C.....a...d....8[.....d..A..V...#..c....(......3...O....r..X..\........VU.N..Z...4.eU...D...,.?.bG...]..B...R......M?.o]]$Bs..K...P.@=..@....6.Y....%'......<GS.W.vL...o.~....dd.uiN...W..P7f....t.G...w@.H..m1..`&l.M5#..x.d=.3P....@...3..\|..i}...y..l?..'...@)_.T.Q....IEND.B`.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	2770
Entropy (8bit):	7.8017621604883205
Encrypted:	false
SSDEEP:	48:gvXvmNnhHoTcyWMBO9+Kj/ir6gwCiWkwC8Ky/Ca3K3/fIqr27/7S+1Tx:xnEcy49+oaRwhWkVaaYJ71x
MD5:	6AEC367FBDFC0527AC0C8BF3DB04A0E7
SHA1:	9B3C428008D5FC9A03A87A8F88DEDBDAA920A867
SHA-256:	17491C522B8BB572711F25E1CB0BAF45E8C4F4327FFC2DEDC5655A04269C6168
SHA-512:	FEA4FD91D194D2A3AE28ACB7A125BDBC982D36FED98652586A1BEBD54F33254F60EBB203920BC1836213F6A59DB9F3F32F4401D690FA5EE0DBEAA150267BC88B
Malicious:	false
Reputation:	low
URL:	"http://t10.baidu.com/it/u=3772794375,258756471&fm=58"
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."........................................9..........................!.1.AQa."...#2Bq.R.34bdr....................................../.......................!.A.1Q."2Bq..a..3.................?.......xwU>.(..Pe..3...#.\|....zK.A...iL.j...x...B.P....d.#8...3.K.5.U.f....L\|...-......U$.q.1.:..M.E.R......d..;u>....p..w..Z.:,....B...I[.....8 ...V,..Pkv}..p..T.<.x.%p..$(..3.3...q..u..\...rD'c.2........Z\|E$.G...v.....!....4K>..;....w...u{\|$..e. d...:f.!.....%...d.../<......w...7.f...1...T..T....W.i....PD.dAN..Z.R.$q.9..u..+..o}....vZ.....u.$.X.J@..O...itx..W.P.O.Pl...'.$.L..Od..R.%>.\|g.j.v.q..'..s.. 7..z.. .....l........2=y:.^.U.m(.r.]...V.....G\|.'.{..E..T....j..'TeRg....J2.l......%# .k..M.=..gH..eQ4..Mo.Sn..J_u.....SkG..../.....;.F.5..+EB..lKgw..iu..Rv..2.c..^..c....../m. A.B.....5Z<.[......Uh.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2315
Entropy (8bit):	7.8207152590145
Encrypted:	false
SSDEEP:	48:1n0BLOxqnxVXDkeZDzQjx+LudAd9b521ZXRF9er7yPzAmPb+E9+ZTqk/bz:1n0xTnznHQFAucKt8MzTyHVxbz
MD5:	DA1CF444B022EB5CB48F651F7E104070
SHA1:	6A4D2CD500990AC04972ECCDD9E096D6BB7437C6
SHA-256:	D0B65B0566367C5326718EA732A898FA180A1F23C517D225EAFD53EA263AE01B
SHA-512:	70EA29DFFF0544742743D532B4A2930EE2ADE5F258AB9627ADE5B340D0489C8928F4E5A4C889441A540B8C7401B1A506F746F8BF81DB67C518BBF0A0A0A5BF1D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....uIDATx..ZypSE..}5M.3mJi..r...f..c....#......."..LEd`t.Q.e`..)..(r..A...X....WH..I.$~....ew_.....ow.k......4..H.?.D&..D@..=.D D .IA..1".`# F...1G..!F...1".x.9B..1"......C...x(..u..x.u.Zk...K...om.{...N...L...25O.>H..G.%.o.H..R.O.?.r.T.._]Wn..c"...G.zMJ,......!........2..9.P.dy...g'..5.1.. 8..cgc.}.-tn.=......Cb.^.....e.......bV&...'..>g......Gu.[.m...q..%......I.0G..w........p.......4K'U...G..........:.t.U..E.rC..D.@..a.eO<Q...l.]q..+...." ....B......US.;.........`......A..U..RevS..$R..pC...m.;.n.._..d._..r"{...2..G....R.YX_.\7.4.;.\.Q..G$............>Yz.....j.......2...c...N.].rs....F..(O(.}-A.."j./..eD(.../.....>X.cW.y.t.i<.5o....w.I..-o...:..i.B".5.n...r:.r.....L...i.<....<...(....x[..Q;.0.8_..4.hhs.l<.........~.F...R....7..q..~..Q..Q.s...............EH.^I..i.....hr..H.`...dz...T.m.r."..-.(MD.j..G...Te.(T..^

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	downloaded
Size (bytes):	3737
Entropy (8bit):	4.946472646770047
Encrypted:	false
SSDEEP:	48:i/GbgNGj+T70PZiq1lZfQpMTHxr6Y6Z/gw+j5kbY+W+eVKeaccWa/GbxggEM4Oe3:idNR70oqfEMZPV+gKpc6aggl4Ocw3K9b
MD5:	33D6467C85387635430DA9BAB90BC57A
SHA1:	7E9A219C3E3A52D78395695D79C4ECB43EE36BBF
SHA-256:	606B63043E353A883AC595B7E3C2580BAE3C60C56E51B6CB899CBE80372839BC
SHA-512:	4CE29C64217AA62C9E6E3C25B2B396D1D61209EC5CCB1D188FD9D3E7B0A80C6969AFB1BDCFF500E910DE489300A34E510A0C177C3C2E73847FFE71E23B59D1BF
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/promise_33d6467.js
Preview:	define("@searchfe/promise/src/promise",["require","@searchfe/assert","@searchfe/promise/src/set-immediate"],function(e){function t(e){u(this instanceof t,"Promise must be called with new operator"),u("function"==typeof e,"callback not defined"),this._state=r,this._fulfilledCbs=[],this._rejectedCbs=[],this._errorPending=!1,this._fromResolver(e)}function n(e){u(e._state===s,c);var t;t="function"==typeof window.PromiseRejectionEvent?window.PromiseRejectionEvent:CustomEvent;var n=new t("unhandledrejection",{promise:e,reason:e._result});.return n.reason=n.reason\|\|e._result,n}function i(e){return e&&"function"==typeof e.then}var r=0,o=1,s=2,c="cannot make RejectionEvent when promise not rejected",f={longStackTraces:!1},u=e("@searchfe/assert"),a=e("@searchfe/promise/src/set-immediate");return t.prototype._fulfill=function(e){this._result=e,this._state=o,this._flush()},t.prototype._reject=function(e){f.longStackTraces&&e&&(e.stack+="\n"+this._originalStack),this._result=e,this._state=s,this._e

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	8919
Entropy (8bit):	5.287664464765285
Encrypted:	false
SSDEEP:	192:JGaOCpboPyFJwH8vP/FFfUM6Goib0/LGlE51bV0EGkM6GyK1Ntp1nJTeWoq:iC2a0mfUM68bOGlE51bVHGk9GygPl
MD5:	4FBA3971CE850C09757774298F8185ED
SHA1:	D0C5328052F97F019B71C10C1820510A47F7194F
SHA-256:	4030AEBC5B377E798FE7FFA8C89704FD93A99DC5F010C7B4E95CA536307B1B64
SHA-512:	F27FDEE984D98E03BF027CB8BDAC49E6A03FC64AAC83C9D5CAC10BE1F4DB75CE1A962B1E4929BA4372BE6767686CCC440AE864F391B10A2B158E459139AE24C9
Malicious:	false
Reputation:	low
Preview:	define("superman/components/login_guide",["require","exports","superman/lib/event"],function(require,_exports,_event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _createForOfIteratorHelper(o){if(typeof Symbol==="undefined"\|\|o[Symbol.iterator]==null){if(Array.isArray(o)\|\|(o=_unsupportedIterableToArray(o))){var i=0;var F=function F(){};return{s:F,n:function n(){if(i>=o.length)return{done:true};return{done:false,value:o[i++]}},e:function e(_e){.throw _e},f:F}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var it,normalCompletion=true,didErr=false,err;return{s:function s(){it=o[Symbol.iterator]()},n:function n(){var step=it.next();normalCompletion=step.done;return step},e:function e(_e2){didErr=true;err=_e2},f:function f(){try{if(!normalCompletion&&it["return"]!=null)it["return"]()}finally{if(didErr)throw err}}}}.function _unsu

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.3865320785292194
Encrypted:	false
SSDEEP:	3:YAf9OHrC/HHkLv3FUEmQd4:YA02/nieN
MD5:	31FFCD31BD5312C56D178CFDE2558BA4
SHA1:	027C2A7D3BC0B60B52C944C586E0FF3D9B76FF7F
SHA-256:	FCBC935D2C2F178121336C40550392B89A76A064902F691E5623197D0861DBDB
SHA-512:	2B84A1DBE0C0983DEBB31CCBAF7BAD80BB77B9CAEE7CF3EE983E90119D3D066CB2AC0FE49114AFCDF5AE4E8C554C08C6801D6779D03E58CDD62B38BF4AB86AE3
Malicious:	false
Reputation:	low
Preview:	{"err_no":0,"errmsg":"","queryid":"0x8bace79a108258"}

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (694)
Category:	downloaded
Size (bytes):	5444
Entropy (8bit):	5.390097564327781
Encrypted:	false
SSDEEP:	96:TrXFHKuR+z8jNBK45FXJSGEdHCqHpm/JKCTuSmSG8FWqdJ:fF9lbN0dg/JJmSG8Y6J
MD5:	3C8495C05A24FA1E35F6421F60EB8B67
SHA1:	73275257DACC0C5C280011E7D1A57759E82A57C2
SHA-256:	E3F40BD06E2FB74DA4D42237EF0F0B158646B46B2D26DF7B219850F5043B14BB
SHA-512:	9D063C98FA2FA80147174659FC9C31972E7487CE5FA54E49ECDADE756E62DEF881FC611553F25E2476F461B694B09CE33DC56C4B2C0547AA95169F7D7D6E1758
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/user-agent_3c8495c.js
Preview:	define("@searchfe/user-agent/index",["require"],function(){function e(i){var r=[[[8,0,1,0],[13,38,5,0]]],t={isAndroid:function(){return/android/i.test(i)},isIOS:function(){return/(iPhone\|iPod\|iPad)/.test(i)},isWinPhone:function(){return/Windows Phone ([\d.]+)/.test(i)},iOSVersion:function(){var e=/OS (\d+)_(\d+)/.exec(i);return e?[Number(e[1]),Number(e[2])]:[]},appleWebkitVersion:function(){var e=i.match(/ applewebkit\/([0-9.]+)/i);return e?e[1].split(".").map(parseFloat):[]},baiduBoxVersion:function(){if(!this.isBaiduBox()\|\|t.isArkWeb())return 0;.var e,n=/([\d+.]+)_(?:diordna\|enohpi)_/i,o=/baiduboxapp\/([\d+.]+)/,s=/bdhonorbrowser\/([\d+.]+)/;if(n.test(i))e=i.match(n)[1].split(".").reverse();else if(o.test(i))e=i.match(o)[1].split(".");else if(s.test(i)){e=i.match(s)[1].split(".");for(var u=0;u<r.length;u++){var a=r[u];1e7e[0]+1e5e[1]+1e3e[1]+e[1]>=1e7a[0][0]+1e5a[0][1]+1e3a[0][2]+a[0][3]&&(e=a[1])}}return e?e.map(parseFloat):[]},honorVersion:function(){var e,r=/bdhonorbrowser\/

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	2068
Entropy (8bit):	5.239085499472425
Encrypted:	false
SSDEEP:	48:RiZV/2BmAVyuuY6iBbPjDjQyHCW0/0gah+yo6Ld:RiZ5qmEyuuYvjmWci9Ld
MD5:	0E4B67354FFF9B6D750438C9499673C5
SHA1:	2EE2DC3C35A91835192DD5467DEF1118913BF056
SHA-256:	669D458EDF5C4BF191E54616ECFEB50348E1245567C21DC50143E91918A04E6B
SHA-512:	2C853265218A1D43864B8968D391A572C4898997E95E671C7D048B69A7F20B619923A43E7BE214735BDEFE15B76E75142FA58E808A976759101F514DF42D24EF
Malicious:	false
Reputation:	low
Preview:	F.module("superman:components/qrcode",function(require,exports,ctx){var login1;var $qrcodeWrapper=$("#s_qrcode_nologin");var $qrTooltip=$(".qrcode-tooltip");var called=false;function loadScript(cb){$.getScript(location.protocol+"//passport.baidu.com/passApi/js/wrapper.js?cdnversion="+(new Date).getTime(),function(){cb&&cb()})}function hoverHandler(){if(called){$qrTooltip.hide();called=false;return}ctx.fire("qrcodehover");called=true;$qrTooltip.show();if($(".qrcode-tooltip").children().length>2){.return}loadScript(function(){passport.use("login",{tangram:true,loginVersion:"v5",defaultCss:true},function(magic){login1=new magic.passport.login({product:"mn",loginType:1,qrcodeLogin:1,hasRegUrl:false,autosuggest:false,hasPlaceholder:false,u:window.document.location.href,staticPage:window.location.protocol+"//www.baidu.com/cache/user/html/v3Jump.html"});window.mmm=login1;login1.on("loginSuccess",function(evt){evt.returnValue=false;ctx.fire("qrcodeloginsuccess");setTimeout(function(){.window.d

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 101301
Category:	dropped
Size (bytes):	26904
Entropy (8bit):	7.99040157856693
Encrypted:	true
SSDEEP:	768:EOl23+DgxrkOJBogih7lN2Rg3txTtDqos/lsdVXtPvrDwXL:EOl/YBSlOU1+os/GnwXL
MD5:	D994A9C792139C2A124585EF31C8D7A3
SHA1:	9FCA01C9C9F1FD39684062C910A8EC3DA676CB78
SHA-256:	B14C43D1B6AE20441394BE2B348637FA1BCDF483322EDCB7143C4AAC4DCEFC8E
SHA-512:	FB01129EEAC96D85351B3181196C86EE1A9F303A261F4D51D80D5097555BEE5D61498E4AB61F00702E284FB68A235A4D356F1853F83C9A2482078C01A4D61BB0
Malicious:	false
Reputation:	low
Preview:	...........{w.8.(..~..;..V......'N.L..%..u..........$...@. ........$".(...z.....,Y..f...f..[t..?...N.q.G..^..h7...n.\|.~~....x.....E...~..S....O..9....!.g?.g.N.!a?.........`]...<.GY:.?...........H.i2..E.}..W...r#.a?..;....=......9...../.......w..t.#K.[.>`8..Y.4q2=8.{....!tq.,..7q.C..xg.....Ow...~...d...........'=......,:.\|.w.99..9}..v...8....!t....=.....3=..'...`.1....`.s...x.....]7.....~.....=N.....0.../...3.=:..8..w...e..;..o...{..h...]>..{.0:;.eO.W.3!I......3....W_N8.sk.1................G........5..p.z.......m........UT\|..I._.....n.k2.z~.t.8Lv...3t.39:.....&.0f{.......z..L'.^.x..p.N..;..b..t..9...&).*mx.q.c8....H.....0?..Ad...zb..ZW.SG2.=..?\|;.............W..\|@....mY..{...H.9..=..7..=`. .\|>.D...9E..;.\...&\|&O..AQ..d.{.aw6..Lq..a^`...E.....i.z!...:.9_.mh...u..y:<..g....>.A....,r.G.d.f{x....px..?...Q.&.....$.y.O...j.B^.2.+&.C..A............. 9_....'....Ag...o.l....e2....,.G......1_v.c......T..71.Xw.}.r....j.i..<.G.hp...\.......

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1182)
Category:	dropped
Size (bytes):	74476
Entropy (8bit):	5.367962493773159
Encrypted:	false
SSDEEP:	768:aXC0VNelpshpoCsNSA2NVNah6SzqJmNeah5GG9t3IByY/hQ1+haRA7/Dvt3BI2:cpmUNaER4Nem9f3fYh7/x3r
MD5:	388D059DFFA87621761C31CED2935CA4
SHA1:	997D0214DA5C397E440B67934FD94C53248E51FE
SHA-256:	7E5D30B3A8DBE644998B4722BD96B7F7F23C9F403B045F61C0566AD5A133C566
SHA-512:	347A9F2B2E8AF186AE4EBD774EBA976D40B68A0642575AEB2CCA2E39DE28106F438CF3D7409A879D474B5C3B91A36F003A22855C230EF2E715E420949D75E81B
Malicious:	false
Reputation:	low
Preview:	!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n():"function"==typeof define&&define.amd?define(n):n()}(this,function(){"use strict";function e(){}function n(e,n){return function(){e.apply(n,arguments)}}function t(e){if(!(this instanceof t))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],c(e,this)}function o(e,n){for(;3===e._state;)e=e._value;.return 0===e._state?void e._deferreds.push(n):(e._handled=!0,void t._immediateFn(function(){var t=1===e._state?n.onFulfilled:n.onRejected;if(null===t)return void(1===e._state?r:i)(n.promise,e._value);var o;try{o=t(e._value)}catch(f){return void i(n.promise,f)}r(n.promise,o)}))}function r(e,o){try{if(o===e)throw new TypeError("A promise cannot be resolved with itself.");if(o&&("object"==typeof o\|\|"function"==typeof o)){var r=o.then;if(o instanceof t)return e._state=3,e._value=o,void f(e

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	7.424386074233972
Encrypted:	false
SSDEEP:	24:gvq/YFSp+CeESAnCwoZ6RUsthSCh/UZ0sIwyTOTcRkvE7KCNxdy:gvVgkISY0ZmUsuK/i0seqTFY/Fy
MD5:	EBF89842595C2D763C306F3CECDA16F1
SHA1:	89FFC5F8980A63973F2AFFBA1232C5949EAE7861
SHA-256:	1921BBB1737662A10FF870B8AE3978FE17583F36398E2B37E169F05C91EC6602
SHA-512:	987BB8761F0EEBCB13594F712F13A95EC58FA05F3A72D64E51125EF850A6E8BA4F970A178B34F0A4941BD5E23805FD8185CD4AEDD2260FDC8770E69B76CA8F92
Malicious:	false
Reputation:	low
URL:	"http://t12.baidu.com/it/u=2127458306,4165955239&fm=58"
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."...................................................................!1..AQ"..#3.b........................................................1A!............?..................D.Z...ya..%JQ=.<..5V.h.......).....YB...@R..'8.x.%.I.L.{[.+R..a.g:..m.m..n0n.....d%c$v;....[;2...q..:..HXP..jU.3.........W"<...U.&3.<.O.n2..R.d.......RYG...s...O_uB......:.+..t.5.1e.X.H.........7..U.....n.DV....xYx.....I<....f.i.f...t...d...h.......)...S..[C.&5.I.F.a?....xc...........V..O.....w.x..f\|U...W..w.6..M.P..%....Y8eg.RQ.N\|....X./6)....,..............].....s._O....m......>!qc.......8...t.@H....=f./.....`03.j.!..p..<..2.;.=\|.o'...[..g..r.1..U.X..3vr.......q..:.eDRP.].....E@....gNi;.Rk...C..w..B!...TR.UH..W.....A ........eLY...\|.r..!<2...\|...\|.....n..j........={....s..Q e)=c.".g..O.}...6..}.l...inIr...(.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1173
Entropy (8bit):	7.4222489286736195
Encrypted:	false
SSDEEP:	24:gvqBe0HlvthFwZ6jIIrbKNeMmpHaqalLOuZEs8Isc:gv9yBtoZKaNBmp6qapqpg
MD5:	BC720B8836330BF45E770E91E2843609
SHA1:	5FCC0DD9879F3D461B43673EAF968A881E806AEC
SHA-256:	936E5844568F535C74E05B7C9DD28E2576144EA4F9B84032A0EA571F48533AF8
SHA-512:	557159CF8E9780E80820F5C7B1154E617734D6913F23EBFB569219AEBBA11714C8A31DC579FF1E1E95334D65ABDDFD167263FC35776E5459C272CE9B4480981E
Malicious:	false
Reputation:	low
URL:	"http://t10.baidu.com/it/u=1872327486,3058802280&fm=58"
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K..".......................................+..........................!1."A#Qa..q.%BT...............................&......................!1..A."2Qq................?..)...D@...DD....XO,PB....D.=.v..<.O..-..y..........H..........HC..m.B.UxE..t(.......s.j+0?..v...#.y.V.I...r..jJ."i?.$.M"...@r\|....b,..t...r.F...za...........O..l.+..[.\..d..0akO.f.tO._eo.\,9.l....`..Z..... .=...k.{.H\1.>..2........V..L!......n...I...m,5g..........T.ue}.t.k..{........a..v21f(Xu...c.\|.hl.`.u...:.....]....f~.1d.-^.G.&........5.M..{.GOqyq\|......-.V.g.6..I.'Cn'....d.j..<b.(....{.5.^..W=.t.oV....+.,%.y..~....F..4.=.Z...1.`./]...e..n...._HA4..R.ha\|rH..#k...q ...,x. .,\|P.n..^.=.G..5....3..g....zA.x....&c....>.Y.45_~gD.:K.Z].,i.;...fG...9..+...+&...@%f.d......dy.....*....._#1.6F....Y}p}.g.h.c.w..u..)~.....>.'!a.j..B=

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	30752
Entropy (8bit):	5.505783706086418
Encrypted:	false
SSDEEP:	384:hn4bY7kTTMLmuf8geltjTY12AAUdoDWwUtjkr3nrEdabdZQBFSBZZpcLRbSy7K+0:SbY7k3MaDUtCdZN/pcLhSTO18
MD5:	8301698F5EB7CDE858916FE1847AB70F
SHA1:	9FAE0E35DFF6F613C38A150CE0F41CBA0CAAB0F6
SHA-256:	46ED5B031D49CF9B19456823FDDFB9B4127F2E38A9C91C5139BE5B84FF598828
SHA-512:	9F2B8DA44DDD325494488B8271180EBFB8BFF332F2E8FCD463E514E4585534FFF384F934CED0ABC70FD6AAD80C4670E71F7FB746E213E71226937F2196484AF2
Malicious:	false
Reputation:	low
Preview:	F.module("superman:weather/weather_tpl",function(require,exports,ctx){var isNewStyle=bds.comm&&bds.comm.newTopMenu===1;exports.pollutionLevel={0:".",10:".",20:"....",30:"....",40:"....",50:"...."};var _dom=$("#s_mod_weather");exports.createIconUrl=function(url,getStyleVal){if(!url){return""}if(!getStyleVal){return'style="background-image:url('+url+");background-image:none;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="+url+', enabled=true,sizingMethod="crop")";'}else{.return"background-image:url("+url+");background-image:none;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="+url+', enabled=true,sizingMethod="crop")'}};exports.randIconCdn=function(img){var _returnStr=(img?img:"a2").slice(1);if(isNaN(_returnStr)\|\|_returnStr.length<1){return 1}else{return parseInt(_returnStr)%8+1}};exports.randerImgPath=function(data,imgType,whichData,isNotToday){var i=whichData?whichData:0;var _c=data,_t=_c.weatherArr?_c.weatherArr[i]:

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47273), with no line terminators
Category:	downloaded
Size (bytes):	47305
Entropy (8bit):	5.346572794854807
Encrypted:	false
SSDEEP:	384:8KtVBP2iwfTSq1WNjzswnMhTpoP4Ma7STtHTFhPRoxI3+Cmvd+rO5ppb4iW++NPf:8KtVB0X69MqCSJfLrO1utlgBE
MD5:	6A4DF9BE02B7C085E429753E33D87EE5
SHA1:	4F359FC0B173D62121D58193410F35B514058836
SHA-256:	385B073DE8B687A683584FFD2771AA037C6F52435FC7124443103FCE3F86F72F
SHA-512:	1F547CCB995881C7EB8B33D17F0E418C1DD1E56525C541C336620B82150762CC70424500D7C0B862DABA5EE06DEE213A08EB8C73AB92080D57A130C85DA08C8B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/mirror-san/app/ai_agent_distribute/index_3eaf44f.js
Preview:	define("mirror-san/app/ai_agent_distribute/index_3eaf44f",["tslib","san","@baidu/www-api","@baidu/ala-util/ala","@baidu/ala-util","@searchfe/inject-js","@baidu/ala-util/san-component","cosmic/toast","cosmic/icon",searchComponentsIdMap["Markdown_Markdown"],"cosmic-dqa/markdown","cosmic-dqa/citation-list","cosmic-dqa/site-vcard",searchComponentsIdMap["AIEchart_AIEchart"],"@baidu/marklang","cosmic-card/title","cosmic/swiper","cosmic/swiper-item","cosmic/image","cosmic/avatar","cosmic-card/card","cosmic/button"],(function(t,e,n,a,o,i,r,s,c,l,d,u,p,m,f,h,g,v,y,b,w,_){return function(t){var e={};function n(a){if(e[a])return e[a].exports;var o=e[a]={i:a,l:!1,exports:{}};return t[a].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=t,n.c=e,n.d=function(t,e,a){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},n.r=function(t){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	6338
Entropy (8bit):	5.239802156551638
Encrypted:	false
SSDEEP:	96:cH/iKL4Elf6VXBIXfOsN70AKJq37iQfq3EJGE33uGDw4kp4ZrRTvBbgrydepGslS:O9f6VlZ0Dw4j5hJ
MD5:	E35EEE0E781F9FA70CB3A9506B036DD9
SHA1:	D36B5F99AC8FCBB577C93C3F782F083A382B942C
SHA-256:	8622F842FD516D9DB5530F6C620F009997A97FB032DBDEDEB8DFE54E1ADB6FEA
SHA-512:	AD7517A37E8397522EE6B5EDB7BA9C99F8720F617C9AB9F79E70BC0CC807232C5C12031AEBCD6DDC9DEBF7F2B1F8B0606DF15257936415C7CA7E63B3F0C026F3
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/hotsearch-e35eee0e78.js
Preview:	F.addLog("superman:components/hotsearch",["hotsearchClick","hotsearchShow","hotsearchSet","newsClick","newsShow"]);F.addLog("superman:components",{categoryClick:"1200100001"});F.module("superman:components/hotsearch",function(require,exports,ctx){var pageNum=0;var hotsearchData;var totalPages;var $hotsearchWrapper=$(".s-hotsearch-wrapper");var $hotsearchContentWrapper=$hotsearchWrapper.find("#hotsearch-content-wrapper");var $hideHotsearchBtn=$("#s-user-setting-menu .s-set-hotsearch.set-hide").;var $showHotsearchBtn=$("#s-user-setting-menu .s-set-hotsearch.set-show");var hotTip=bds&&bds.comm&&bds.comm.nodeSample\|\|"";var aiSampleval=bds&&bds.comm&&bds.comm.aiSampleval;function parseHotsearchData(){if(!hotsearchData\|\|hotsearchData.length<1){return}var hitSample=bds&&bds.comm&&bds.comm.sampleval&&bds.comm.sampleval.indexOf("new_hotitem_num")>-1;var hitHotTip=hotTip.indexOf("change_item")>-1\|\|hotTip.indexOf("change_all")>-1;var perPage=hitSample?10:hitHotTip?16:6;totalPages=Math.floor(.hots

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4560
Entropy (8bit):	7.916008234996706
Encrypted:	false
SSDEEP:	96:1nyMZNUDqoMyNL8BKh4gN/Au7Of3rFPk3b/JtUioepkNc/qxfottNy:MMEm8L8E4Df5P2ziepku/W0y
MD5:	DA0CEA8F7E96046B1140228813422283
SHA1:	AB8A7FD7F3919077717EF42F600573B795CD36E1
SHA-256:	15DAD359B451156FB21F32C229912A4AEFA3C4829139F3D0F45921BF0F496740
SHA-512:	791932AF34E33649950E8C636487836F3A46932C1B0183595BEAA3A2BBA4B228778A64C3A374E4DC9ADD0806A2AB4D664C98B20D3A571193209EB27DC4965FD2
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newfanyi-da0cea8f7e.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....:IDATx..Zi...u~..3{.\....HI6iQ.EJ..Q....M#0.K..$.-.p.(p..N.$p.#H....8....%..lX...&i..a..}..]rO....\|....q)......Bomu.....W...Xk..D........%T...Q...Q...E."P..B<>.b...(D.b..xT\|D.".Q.@.".........r...k"+.....h..9x)<=fz'....J&....6W{.u...i..h..{...!m\|SNf..).U..^.4;.F;.....pp.3.3..e.b....j...1(#...V5.u-..K>r.Y.`R./V[N .H..?<l.\|4..2Y.SX.......R..L@.u({.f.!.{.._l[Ut_.y\|..o.,.qct...... .}.>.F..?.B..@.b)0.9...<.hO..B$.!.y60.)Y.l?.F..0.7l)/..8.sW.?.z.L[............."..'...\|.....\2....v.r....z.o.bY..0.8.g_...<..j..~'^.!.(.0z._......(..(.+.k......-..;..N.)./-..L(.;.=.....%.P.x.;.bw@aT.t.*..e'3s.%..Jg2... p..I.K...Zg.......J...{.s...,<B&...q..2. pe.. aA...\.$.g..*d.q.I.v....\|y.....T>,t.2P\.u.~ug4..../a]!.!@N..(.A;...".C...R...x.&P.6....;a_.&...J.......X....B.wC.....Y......o..... .N....>6........b......... i.At.n.p0...).....j.%....

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	6793
Entropy (8bit):	7.845988030587557
Encrypted:	false
SSDEEP:	192:7YrrFx81WWKnQG3UNqCaIWbGfnxf6E42646:srM1WtQG3UNjhPfn96E426b
MD5:	D0BE9DEE548AD1F0CC0C0BE4EBFE93AB
SHA1:	E9553F247FC574AAF41B3A68F31F2CDD36E2A25D
SHA-256:	34B5A9D03C4E80D77B40A5D93EFF87963321F93AF812260BD8368A0A4832F2F4
SHA-512:	948879E4C8C01F5A0937D8C4F18774A913CFF9596D17ABD75ED8F0C39D468DD407E5891627105EDDF80F65A14515C3379F007A2B9E61ED65D6D914B6D5F2D40C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C......................................................................................................................<.........................!..1A."Q.Baq..#2R....$.4b..5Cs....................................3........................!1..A"Q..aq.#2.3B...R.r..............?......lf\?..Ie..YYq'V..g.T.f..fg4.#.>C.\....u/....s.:~...U.....l.B.L.@..... ....!..d....@..1A.... ..........Xm.&.U!..;1..7..#....D.*.;..r.../_.c^..h._..h....DE..G,i.N.7e..hf..(.5.w....8]..H,..X;.......c.Z8A..6=..W.....Jh/26.')=..."....P....... .......=..,L... .b...!.@....@..........SC.......8.W.VR..r^....c.....-J.P...R....9...J..?k6'3b.E.......!...=..J.T..Qs..Fp...W...7.j+..{...->..A...E.=V.uS.V..v...X..{..... (`(.@.... 'd.# ..!......@.. .... .... ...+./...+.......[...OK...^.?.U.Z....\|./F.N.K..c......^..Z..F..SI.....T..>Q..J..e..1.MZKI..?..\.?...4...&....1s.%.J....]....B...(`,@@....@....@....@..

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1716)
Category:	downloaded
Size (bytes):	93750
Entropy (8bit):	5.2860318400759505
Encrypted:	false
SSDEEP:	1536:iWeYd5mYErtiaR64FLCxqJrLPkuQ+DXiz0zKbDvReG13D8AC7bb1spy3vRGt/UJD:iIayz08Q7nZ6Uq09
MD5:	65682A21B58654D8EDA27F85D0F57255
SHA1:	23D1DAA9435A827370B14C38D04AA9402BCE75FB
SHA-256:	DFE45A2B62F018FFAA1F6E280C37B14190D2719951D13E79A7B82737AD286A86
SHA-512:	A18B0A6360BB395615CD77BC9767204E5505FCE6ACA69AE8C6C39EC959369A0C5817D25E54DC3516093E814D839D5B04DBE410792DA2A816E3E438BD362D12EF
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/jquery/jquery-1.10.2.min_65682a2.js
Preview:	!function(e,t){function n(e){var t=e.length,n=ct.type(e);return ct.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=kt[e]={};return ct.each(e.match(pt)\|\|[],function(e,n){t[n]=!0}),t}function i(e,n,r,i){if(ct.acceptData(e)){var o,a,s=ct.expando,u=e.nodeType,l=u?ct.cache:e,c=u?e[s]:e[s]&&s;if(c&&l[c]&&(i\|\|l[c].data)\|\|r!==t\|\|"string"!=typeof n)return c\|\|(c=u?e[s]=tt.pop()\|\|ct.guid++:s),l[c]\|\|(l[c]=u?{}:{toJSON:ct.noop}),("object"==typeof n\|\|"function"==typeof n)&&(i?l[c]=ct.extend(l[c],n):l[c].data=ct.extend(l[c].data,n)),a=l[c],i\|\|(a.data\|\|(a.data={}),a=a.data),r!==t&&(a[ct.camelCase(n)]=r),"string"==typeof n?(o=a[n],null==o&&(o=a[ct.camelCase(n)])):o=a,o.}}function o(e,t,n){if(ct.acceptData(e)){var r,i,o=e.nodeType,a=o?ct.cache:e,u=o?e[ct.expando]:ct.expando;if(a[u]){if(t&&(r=n?a[u]:a[u].data)){ct.isArray(t)?t=t.concat(ct.map(t,ct.camelCase)):t in r?t=[t]:(t=ct.camelCase(t),t=t in r?[t]:t.split(" ")),i=t.leng

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 132, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7707
Entropy (8bit):	7.913591496975338
Encrypted:	false
SSDEEP:	192:NiTvI+Oa+mwj9o5ZaAEbufq08hBUndKV4jJJ:NiLHpnaAJq08hB0Hjf
MD5:	17079C6AA820DC5400F39DEAF09573DA
SHA1:	3260F2B87C0079A5C7C0D332EFA05627E51B8E20
SHA-256:	EF5567584E1F1B541B76BCDAD11CC1A151EA9392F39803775C26371650375447
SHA-512:	716EE27B422C5015E2AF92DEC2FF27E497C00B8D210E5F6829934550AE63DB758213FDF61E2746FF38CB0E9A2E029FAE06EF0AD575949EC275C8496BD1A133EF
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/flexible/logo/pc/peak-result.png
Preview:	.PNG........IHDR..............d.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:709387F9E92511EA8F22E951255463F7" xmpMM:DocumentID="xmp.did:709387FAE92511EA8F22E951255463F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:709387F7E92511EA8F22E951255463F7" stRef:documentID="xmp.did:709387F8E92511EA8F22E951255463F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+.......IDATx.........J...a.(`.5.bC...{..5.b.Qc..Y.5......{/...K4.. FED..D..fA.\|.w.}.+...........=.yL.......9sJ...

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3378
Entropy (8bit):	7.906510308987039
Encrypted:	false
SSDEEP:	96:1nZY7gjm/vPn7t59ZlUSVjMjs3lkj7OZJE/+i:8ZHlZVjxlbZm+i
MD5:	612169CC36C91DDD3B1F6955EEF781F2
SHA1:	45ABC6DF0B931554E68BEBFEB8F866FBEF3A8B02
SHA-256:	A37B681C56797A3750930237005403EEFF16F51CF4C25B3FBCC9D83DCEEFB4EC
SHA-512:	EB0D394093160F80876113B497CB29F39A3AD4F0007026BACB9EEB98B04C8BA2258BD9CA5C543F60AA3B412AD4E5E321460D7326D6DEB3373BA205980393E724
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H.....IDATx..[yxT....d... ....!....Vd.Q[.P.Z,R.Y......T..j)_Km].Z.[Q....J.$.....bD..YB...Lf...$.fy3.f._.\|......s.=..;:............[.4 4 .JA..M"4..#.I...MGh..I...M".xh:B..M"..h.!.C..n<.r\.0.e.3.l./.....f3.%.t......C0m..N...t.!T..Y.p.o.A.U.k.l..Rt.pO..V..;...Y.=..VL..V.6q.n....AJ...4.,..........Y.t16.E....E..r...\....P+&....]........M.g...@.Q.........[..x.^.....I.C.b.J....d..6.U....1:Yy.3.W.v'...M.(p..M.(T5../.L....V..&"[...Y..2L./..4.JQ....[.....+.(..$I#z.J.m........O}U.fl.{'.TE^.M ....mx...Q.r.P{T.;... ..;(....b..Q...u>...k.EQ..D'../.....KD.s..2H.[...YF.p..N.w....]...\....c+.Ba&...#.y.........1J.\}..........8.....~...h4....c...B.......(;..4.. (.....}...E".n}_.Rb.I.[.l..r.........xB........ ..c0e....aA)..9@.!.R...M&.O.MaTE...w.je.D...5<ML.&{\....J..Eg.D...G.XM.C.....C..3.qB.@..2..."....B.}B.`.n..Yb.v...........w.)s.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23413), with no line terminators
Category:	downloaded
Size (bytes):	23413
Entropy (8bit):	5.721445374843312
Encrypted:	false
SSDEEP:	384:dUOCXCVrVLARlEQUAS6CGDav32X9B/5xpqMv6ODiBYfSXgVwlwtmgOHV:pCXusPUASdvChv66ugO1
MD5:	2605FE7194E0360EA9F156C4347B0030
SHA1:	A93841213292CC6E75544F4559D42B0CE1AB063E
SHA-256:	374C6CBCD4C2F5918B9F401C120E63C6043F0DCEE1BCBB47D810C42B404B7316
SHA-512:	4440412FBE9B474EA040449BA70A4130AF9A786309B719A4E689817662A2E7B38550C57FBF025DCE8C115A4D03E38A162C7E0B6BF8AEE4F46A519851FF8125D4
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/molecules/app/head-tab/result_1898ae8.js
Preview:	define("molecules/app/head-tab/result_1898ae8",["san","tslib","@searchfe/inject-js","@baidu/www-api","@baidu/ai-search-box-entry"],function(e,a,i,o,r){return c={0:function(t,n,e){var e=[n,e(1)],e=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e,a=arguments[n];for(e in a)Object.prototype.hasOwnProperty.call(a,e)&&(t[e]=a[e])}return t}).apply(this,arguments)}function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function l(t){return typeof t}:function l(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function u(t,n){var e="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!e){if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return b(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(e="Object"===e&&t.constructor?t.constructor.name:e)\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	dropped
Size (bytes):	2805
Entropy (8bit):	5.324775425927034
Encrypted:	false
SSDEEP:	48:LigR4+hV3AWLFO2mAKp1xDINWcOzbUdG+UgQB76a1HoXf6VA+TEG3pFse:nqo+WpmAKTxINWcOzoBwtH1d3pFL
MD5:	8C0DFBD52087D5A4E4ED8D0CFC0B7913
SHA1:	AB176F70D73AE9DF695EDF116950A564FF5BD76A
SHA-256:	86AAD1B51B12E22F523C6E9B9FAC4F174050988CB3A7C6B55217D7317087B5ED
SHA-512:	05E766AB347FC94636EDC59D122782B9FA2E43C24E441DC923CAF8603611D0DD0DCEB3F860657361ADCE5556B2754D097227526B736F95B1480DB7B3CFCE2199
Malicious:	false
Reputation:	low
Preview:	define("@baidu/pst-log/index",["require","@baidu/Boxjs-search"],function(r){function n(){var n=r("@baidu/Boxjs-search"),t=n.platform;return t.isBox()&&"main"===t.boxType()&&t.versionCompare(t.boxVersion(),"11.5")>=0}function t(){var n=r("@baidu/Boxjs-search");n.extend(n.versionMap,{"searchframe/readsstpst":{v:42,versionRange:["11.5"]},"searchframe/pushpst":{v:42,versionRange:["11.5"]}})}function e(n){var t=r("@baidu/Boxjs-search");return t.invoke("searchframe/pushpst",n)}function o(n){var t=r("@baidu/Boxjs-search");.return t.invoke("searchframe/readsstpst",n).then(function(r){var n={sst:"",pst:""};r.sst&&Object.keys(r.sst).length>0&&(n.sst=d(r.sst));var t=r.pst\|\|r.psts;return t&&t.length>0&&(n.pst=t.map(function(r){return d(r)}).join(",")),n}).catch(function(){})}function s(r){for(var n=r.length;0===r[--n];);r.length=n+1}function u(r,n){return r<n.length?n[r]:"<"+r+">"}function i(r){for(var n=new Array(r),t=-1;++t<r;)n[t]=0;return n}function a(r,n){if(r.length!==n.length)return r.lengt

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	63683
Entropy (8bit):	5.3766198487912344
Encrypted:	false
SSDEEP:	768:CF9F5U1hugyH+VxdJGn9BdsT/YDdzIvdgLyKszmxc9btEd0b8CXIQP6ts+Mw6gsN:s5o69BdsgfgzB8giz6UqX8xawHngQ2
MD5:	5440D5BF38D63737FCDA82CC37DB03B1
SHA1:	28F41BAF060DB39FA6F4746FF42C044E5F1CA84E
SHA-256:	6D85368E060E1A754BD884EA780F91827E4EB52E1B93186CAAB76569882CD0E1
SHA-512:	8960AC96A54FCE03DE908DDAA8B96DAB629344CACC62CBBE2E376B83E9FB9148A3F229F4531FC05AF93B00433E09953268BDBB9D8CCD443268F713881885F5A6
Malicious:	false
Reputation:	low
Preview:	define("superman/lib/event",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.fire=fire;_exports.on=on;_exports.un=un;function fire(modName,evtName,evtArgs){F.use("superman:lib/mod_evt",function(evt){evt.fire(modName,evtName,evtArgs)})}function on(modName,evtName,handler){F.use("superman:lib/mod_evt",function(evt){evt.on(modName,evtName,handler)})}function un(modName,evtName,handler){F.use("superman:lib/mod_evt",.function(evt){evt.un(modName,evtName,handler)})}});.define("superman/lib/extract_data",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.extractData=extractData;function extractData(key){var el=document.getElementById(key);var res={};if(el){try{res=JSON.parse(el.innerHTML)}catch(e){console.error(e)}}else{console.warn("".concat(key," NOT FOUND"))}return res}});.define("superman/lib/commonUtils",["require","exports"],functi

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1102
Entropy (8bit):	7.279117990711341
Encrypted:	false
SSDEEP:	24:gvq/eGzwfACBLvubjXNdXnKitDg8nsn+IHmjXBkf:gv+z4AyLvubj9dXKiaIGryg
MD5:	FF595645245FCE847D7A1AEA4D2FFFC5
SHA1:	D638C9B93CF27FD9E7B4CF7B5E1582C07387A2A7
SHA-256:	89D8E4BE545586DE598DBAC61EA130D3FA3C98F14854F8147DB62648F3EEA2D8
SHA-512:	DF22E7AAEE0C212E835977D3CAAC749039A734B5BB4AC9DF96799A7251BD10F6CC7F16757C37C0636DA4B6021C5A1CDFE9BB8A5A90E52183AF89607FE3CC1CAD
Malicious:	false
Reputation:	low
URL:	"http://t11.baidu.com/it/u=3128749531,3731582790&fm=58"
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."...................................................................!1..A."QB...2aq.................................,......................1..!Q2a....#A..Sb...............?..)...D@...DD....XY;mV,.'e....d.......Xvz..!....D.2f....\|..C....E........3.......~..!..,......h$.I...%....HHElod.....o............#.+....;b.c..$....e.e_.J..s2z3Y$O...l'..K%t0.nx.w.N.o...~..\W......,..n.+A.....`..U.EUWS..j...G.9k%...n..PE1yl .-kZG+........E...X;V....o....t.0d.6C.Z..].\|.....?..0.#.h.5c...i..\.....~S..e.>$..........[G.. .....8\5Jt.7Y.[GK.uv....;.q..Y....{...=6..I.A..>o....a....=O_........... .L... L.?@z..../.a..t.......\ .z.`.y......N5~.?._....G.....sDz..h.;..h.K7c......W.d..gk...c......Q..be.=[.....S...f.W..O3&K............dct^_..ff.j.s..../..]).1..m..X..Uk.e..j.:xw...2..&8...d.w2.....g...$vV`.._7...y.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3560
Entropy (8bit):	7.95063665337934
Encrypted:	false
SSDEEP:	96:eKsOjmr4PLSwsTgy3pbDWld/4lN+OuhvBV10U2g4TiztZZ:DRkQSwsTj3IldglN+zBV10UNlzB
MD5:	0B97D640707B97B74776BDD82620BFC8
SHA1:	B994346A29716115797BDE8BA272F45966446AFB
SHA-256:	2F2FE817115BC0FEB882AEFAEDEBB303C56DDC6D2ECB9EC35257C4136E0C695D
SHA-512:	3174BF3E352962E44F8406C372C6F72ABB4E8D11B28A1B67D310F16D6DC0283DBBEA4A783169ECFA80CBAB550EF0C9D0C2CA53585544DF5C420970375E19E737
Malicious:	false
Reputation:	low
URL:	"https://t14.baidu.com/it/u=2780622065,3836084479&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=FF94EB021598E5C85871CE7903000077&sec=1729962000&t=a5390f4c6979745c00ab9954ede8e262"
Preview:	RIFF....WEBPVP8 ....0?.......>.J.L&$#"&.j....M.{.1..i>\..............v..e...).M.?........./.]f..?..?...?.....{[S=...7.....3..xK....P.co....?..........5.(......>}.....y.9..^.@}.EC..e..E.t...X....#..t..pL..?..)^.....[./.#....S.\ ..%V...........K....8G@..n...&.L..$.(....l..Q..{K.E._2.6S.....9 .]:...Bx......\....R.\.....d..Z.-./...@L.l.Ln.'r?z..!b.DEd.5.3.I.u.{@.........'.vY..-~^..}a...u..04gP`...p.Rw...-.#z~.1....)V_....O.1+d.d.t..0z9.%..b..PgIc.iio.i3...! ..'...3[.x..B..>....pySq...h;.......Bhld........2+..\)e......D.;\|a...e.4["dr..`.yeS.m+.\|>.....'..y...YX"o. S...E.EL..TR...U.....7..^#.!..@!/.Q.F..e..,.P,.)....i."!.SvJ.....S..UG...=...?..5.....N....}T.-....z....\|=.z......O....VV..?...ZyD...4E.. .l....!P.>`.go.....j..I.....".Rm+.u...K.t..?...&J.....p.uKu..U3G.~Jo<.2..A.&.U*"..lk.8.&v.BNx.}.......4c.0S.......%:.8.aQh..C......F_..f..4..g..)....)._..w..?...@5P..v....\}0.+..#.hV. .......V..Vx.....l..4..HgLZ$. .&b.....JNz}.t.ql..(?.w.Q...'.k

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 242x161, components 3
Category:	dropped
Size (bytes):	7441
Entropy (8bit):	7.934907344119435
Encrypted:	false
SSDEEP:	96:6kyBRwJkqwZm8ZoZ2/Dd2naOfwzJctt2KJbG8KBpHEgymkZEjcowJSJdh0miZOPA:KBq6Zm80KDg+o2KJ+XChoYSfViZO1u
MD5:	AD279AC4DC069020E026D56DE3872C36
SHA1:	102FF6BAF83656F7E2891CE6D8468A601DD3CC4B
SHA-256:	AA36E630B9891C6C442D8D49B589EECB4A4F9B80C6DB52CA89ED08D8CD489020
SHA-512:	8D0CEFA4A68122CD5FC853FD2EB6A120B61F3E8BEE0E0A3A8E58F0F9D0389C838DD5A14874487BCE50BE69116970D30EA1C5FD511E20F3EDBDD696045F3388F6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C............................................................................".........................................E...........................!1A.Qaq.."2..3BRb....#r...$CDs....%Sc...................................3........................!.1AQ."aq.....#2B...3R..............?....)(....D.c...0.Py.{...D..Tt.. :W.@$.r...I..Yt.RJ.Yod..DT....T.tQH.M....).C.3..[./.3..;z....UD.k.k`.V:Z. v.`o...x.O%J........R.S..$..c...\|.....vn...O...;..........z...U..u..yf..../a.......G..`p......m}.#.=..Q3...i.........I.n]....a.rZ....#..KO...D..K..I.YeNWyy.z..?..0kUYo6.....>.....0~.x/....i[3j;&..f.r...vV.Nv353.......u....8....Rxh.7..v.R......x...z..KV>Gor..u].K.[]W.^A.._j)\|.C.0V......)..F...L..n........'Ps..A...k.6..k.\|'c.S....\.k.......\|V...V.[;.E..h.......?8.q.O%...;u......~3..W.m>..z.{.u......_pi.\|s..[..~....tN.I.....D@.DK... .g.m.z......QW..i.I.D....4.....U.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (7053), with no line terminators
Category:	downloaded
Size (bytes):	7053
Entropy (8bit):	5.347378899376139
Encrypted:	false
SSDEEP:	96:AKzCjezNkGDmH2jy4Uj/glV2/rh7I3pN9huR+ukx7aUEaZ:AK+jehNDw2jHUj/glg/ro/hR5aaZ
MD5:	9BA416D1406D92E9348B75C032E6F8AB
SHA1:	B7F6B2A0C040A9862C1F1A4911FBA6FF80D88F40
SHA-256:	0035CE982A13A8F98C0AA4D45F5CB15FF57702AC125574598C856E0B196B7F69
SHA-512:	8560773769D23A626156325651E04D5054C7F579D4B13F0B7274098B04F83352990532C386F91298D770BAE26EDA203FD4A73134764A446B50ADDED0B89BF1DE
Malicious:	false
Reputation:	low
URL:	http://passport.baidu.com/passApi/js/wrapper.js?cdnversion=1729855660344&_=1729855653595
Preview:	var passport=passport\|\|window.passport\|\|{};passport._modulePool=passport._modulePool\|\|{},passport._define=passport._define\|\|function(s,a){passport._modulePool[s]=a&&a()},passport._getModule=passport._getModule\|\|function(s){return passport._modulePool[s]},window.upsmsStore={reg_upsms:"106929130003000002",verify_upsms:"106929130003000004",verify_text_upsms:"1069 2913 0003 000 004"},window.YY_TPL_CONFIG="yylive,yyliveserver,yyanchor,pcyy,yyudbsec,bdgameassist,yoyuyin,";try{if(window.localStorage&&window.localStorage.getItem("upsms-pcApi"))try{window.upsmsStore=JSON.parse(window.localStorage.getItem("upsms-pcApi"))}catch(e){}}catch(e){}var passport=window.passport\|\|{};passport._load=passport._load\|\|function(s,a,e){var t=document,n=t.createElement("SCRIPT");if(a){n.type="text/javascript",n.charset="UTF-8";var p=s.split("?")[0],o=Math.round(1e3*Math.random()),i=(new Date).getTime();n.readyState?n.onreadystatechange=function(){if("loaded"===n.readyState\|\|"complete"===n.readyState){if(n.onread

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3938
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.558706713036857
Encrypted:	false
SSDEEP:	12:XlvyCE3RoSakuO2COuG+jMPkE79mawS1dfHVRQu:Xl5+32tuFjMsExtzHT
MD5:	8443933F8837D46EA833D602497E02B6
SHA1:	83D2848E833C0CE4E5A8333AA21C42B914490D5A
SHA-256:	F3916796B509B84EEA28654EFBDD29D32F284822EFD9F0ADCE43D856F4B48FA2
SHA-512:	FA43024FCBB077D36CEA313C26B688E1411C872B1F2E676AE59327061B91A4DDA83C56FC7F608A94937F14262B6B9DEDC0FE62E30E657D40F0C4B376370B573C
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-medical/tokens_fbc0ef3a.css
Preview:	.............n.@..../5..Z...i..%Q1'!m..^..awg..bb.7.0......K...UU.{\|==>.Up..>....p..YQ...@lgI....fC....]uv.P......P.......s.<......E3}\|3v...e.9...fu.x...Ld.r..6+..iK.........Mk.0E.r.F..h.{..r.;$...5..}n.<)e..o..]...X/..O........GE.^&.p....U3..``B.*Y........e..j... ....S+.o..Iq_<`w.y...[+....w..7........,.UJ!f:E=..B.;7...-.v.b>.............h2.w...Xd..`RJ. .p......<....l/r.D..4.7..b........8.:D2a..a.......pB.:6......+.....h.....k.OB.K4....t'...g.%E5..k....d.....m8f;u-..7.a7.x.2}.p:.>=..#T...r..?..........`b...

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (906)
Category:	dropped
Size (bytes):	36225
Entropy (8bit):	4.589850190670062
Encrypted:	false
SSDEEP:	768:STByhsxNUz1KRzY5605qkgiCyodqbkCDzgN6sOWRF8/MpjICSX2G:ST6sxuz4Qx/eW
MD5:	BA0FBE3DC3B2456D26CF9AA9B98529AE
SHA1:	08BF7618AE5729BE54C5380B8AE8A162F2FF702F
SHA-256:	30B0EBB386B1A86994D6C8F4596057FCD3F218F82ED9DAEF21739DDB474F33B5
SHA-512:	96DD3E204C22EB3152A34868092AA40653B59E957EACEEDF0A81905F86FE46EC7AD76A714EC05880B8040A22823CE7B1EAD3E2A6DC8A18C965064A499BABB20A
Malicious:	false
Reputation:	low
Preview:	/*. @file ............* @author wukaifang(wukaifang@baidu.com).*/../ global s_session swfobject/./ eslint-disable fecs-camelcase/.(function () {. // ...2.0 ....... var samNewBox = bds && bds.comm && bds.comm.samNewBox;. var os = navigator.platform.toUpperCase();. var uploadServer = '//graph.baidu.com/upload';. var isMac = os.indexOf('MAC') !== -1;. var $input = $('#kw');. var $namespace = $('#form').parent();. // ............ var linkUrl = samNewBox ? 'http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new_sam_a6c95ec.css' : 'http://pss.bdstatic.com/r/www/cache/static/soutu/css/soutu_new2_e1a824c.css';.. var MAXSIZE = 1024 1024 * 10; // 10M.. var compressOpt = {. // ......... maxLen: 800,.. // width * height ... resolution: 1000000,.. // ........ quality: 0.75,.. // .........

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	52422
Entropy (8bit):	5.2986785729858425
Encrypted:	false
SSDEEP:	1536:jmWcQvlmTDgmWMQv7mnCgghQVUJYwq+fFfEoF4HvOSF:MtUq7
MD5:	DDDDE7CD4E229228869FE227B2A42929
SHA1:	E3FB95448DC996094F9958FAFE724AE07FF55384
SHA-256:	A97216D890BD787972C5F1A2621443DD7DD3A6530D31D62ECC1B8DB96A28D382
SHA-512:	218D3802086B24E32FEE81B557E18114283877F1FE387B1FA4F96F40C8EE3F4CE130280B25D94529EA03B08D3A62CC3E14B0AAB6D39B84530422F21A968FD6EA
Malicious:	false
Reputation:	low
Preview:	jQuery.extend(F,{unique:function(){var uniq=+new Date;return function(prefix){return(prefix\|\|"")+ ++uniq}}(),mix:jQuery.extend,inherit:function(){var args=Array.prototype.slice.call(arguments),subclass=args[0],subpro=subclass.prototype,oinitialize=subpro.initialize,initializes=[],index=1,superclass,superpro;while(superclass=args[index++]){superpro=F.isFunction(superclass)?superclass.prototype:F.isPlainObject(superclass)?superclass:null;if(superpro){F.isFunction(superpro.initialize.)&&initializes.push(superpro.initialize);for(var key in superpro){if(superpro.hasOwnProperty(key)&&key!=="initialize"){subpro[key]=superpro[key]}}}}if(initializes.length){oinitialize&&initializes.push(oinitialize);subpro.initialize=function(){var args=arguments,idx=0,len=initializes.length;for(;idx<len;idx++){initializes[idx].apply(this,args)}}}return subclass}});jQuery.each("isFunction,isPlainObject,isArray".split(","),function(_,method){F[method]=jQuery[method]});.F.module("superman:superuijs/util/tool",fun

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57420
Category:	dropped
Size (bytes):	17009
Entropy (8bit):	7.9857117368766675
Encrypted:	false
SSDEEP:	384:IVpBJOOBAybxnef08CtgYj9mAWewCFevemKdIe6sCq5QzKhoy8N/gXrukJTZP:8vJOOBeM8CtNU7eTFJb6MQz+BOWFP
MD5:	4655BD4479BD9FBD9EEC924BD797555C
SHA1:	EAB68314673D25997541D08B67E73896D58B7D60
SHA-256:	78A7ED0DD44604E0CAE7C2680EF2D008EB5A42827411FC0A506B51FA4865801A
SHA-512:	A509D4A6B3092D7CDEDF8B89E29EF6AF725BB6363968E4330A177D50909727EB27878DD751ED8836F09B4F052FA6CAD7237A79073208D7B909AB2E6947EE4A7D
Malicious:	false
Reputation:	low
Preview:	...........}.s#.u...+..1... A....l.3#.........f5.&.;.....c.T.<.8..T..8..d._,.bWEIl.5.+.S....9.v.~a8.+.R....o..:..s.......oX.y....N.{.`...........[..j.D.u./f.$.g.Ud......\|..=.5.<.E4..F....i.M...tL....6J.}.-?..{.?..C.......y8.g....t.v..zU...8.4..5...Z..~.........B+.^....8...M..<.]...Y..v0O\......d.$....R.k...P.y.M...R.xq6...7.C.~.]}.@-..\vv..lH...........i...........q.H> .P....y....{<...%..m<....qp.`N.g.s.....w.!N..s.<...D>Qb..L..K.Y.\.di..?...../(.'!u.Dn.s..,...7.s.<>.7.....\.1...w.Y)[...\|.z.'..~t.2.`Y.O..,\|.w0./...U...Qq.l1."...3.T.;0...w[...h....8BD...c....=..E.w-....P2..M...8-xB,b..g.}D.........P.$.....S....~w.}....{.....z.... yA..B..........q]W~..B....v1.O^}o.........=..{....{...V..~..q..q..q?.. .x....I{..h.d.."..`_V.(.W*........n4....6=./...1.#...6..TN;...?T{.xr...Q8.r.Q;!..Hf..G.m.'..GK.$.N....8yLTL#.a..oD.T.bN...j..=..'D...Q.....6...p(..8#..M..G.-.6...%.,..^@.$.Veh.9.>.Dj.Nv.\.q.xJ.$.f..M.".2..;......dg.X[..g.o..c......X\.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 114415
Category:	downloaded
Size (bytes):	41433
Entropy (8bit):	7.994263423401719
Encrypted:	true
SSDEEP:	768:eAj/zYfK1VTy4oStcYRBY3TTszixwf03Qf1k8ck97M8uzto+sm27V:VbY2VTyOtLIUzIA03CWk2z327V
MD5:	DE5B3831E8BA9B42D0421E1B3646AE8D
SHA1:	C1F458993F7E3DA8B6EF46FEDF8AEF61FAA38F52
SHA-256:	7574DA6B2C1BFCE8333A0E795016063043E5D5C5235EFDC90C307510D8EF7549
SHA-512:	B7BD559E01BC5FF9C3208D8ACFE3CAF835CEBFB52189CC6A7E898D099F8ECA4D0E06E5F07DE8892260ED9F45E1D99CA1085D293856547187F24C7930CA00BCAE
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/guarantee-popper_b82f233.js
Preview:	............V..7.........p ..En..... @n.fe.Y..[rt....>.5....U%.d.K...=.5..R....fM..Q...._'~4,..~..y..N..4L.E.0.......I.g...q.GIl..Ud.R..Q.[=.`).C.;7i..i...w.^wo.s.w.S]...]...{...</....h..zr..;.+..n....'i..........!.y{wa7Hb.j.P......;M.<.k}=6.....I..$...I.i.21f....1..d..:I...?5.;...Yf.S...d`L2...d....,...Y6&92&9.w......j...gl.r.?5...I.m...O.B/./.S..K.d.q..y/"t..7.. .L.<:....hu.#)..:...R.&./......,^...k..._].8=...aF...C.7..,\|:N...u.;.;.........o....;.............H......BG5rI.L.1.k..\|..\|....[....'..0..#..SYr...$(&..^.N'..._..Qx9...z.L..].h..8..`..q.vg..#UZ5r..F....io.xR5vZ5f..p03...._g>.. Ih..bg..F_....N..WO.....J-{!...a..l....2..u...W.?...F>_..Y+a."L3zNR..).b.Z...e0..m.....v.98K.I8.6.$.:]....it/.(L.4.\|..K.4o....I...uG.E1..(b.O..N..qB.A.9.h@....#.o]D.z.....{..r4...]4.......;.^..W{8..m].<.N...3......9...},.+...^DY..0.E.-..:.X...8.G..Mk..}.....k.s/.....Q.(.r.H.<5..<....E.In..;....j.-D.w..H.$y.L.be0.7.W...[..T.t.\.... M.c.n...

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7242
Entropy (8bit):	5.022708415753268
Encrypted:	false
SSDEEP:	96:GRftwngh398oEwRg2t01hD1b4E54roGLHhHVYQ29NS7ZV2Xx5EAm+NkKakGkCkyS:GTpwg4hXpPJImk9Be
MD5:	89D6B96E41C39C1873AE7E3AF642D33C
SHA1:	5154FA91982D42C4B0A02587985FC8AF62344B45
SHA-256:	E2707CCF249F5C7F803780DBFE8AC99296B10C2E759D53D496C16BD30F71BA10
SHA-512:	87ECF2DD5B099CF66B7B7C461EF35C496D6D696719A7FBA6F4010E2EA2E7FB057197578EAC3A9526F69F2A125F5F67603D5107036AB363FDF12243FB9BD9275D
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/css/ubase-89d6b96e41.css?v=md5
Preview:	.sui-draggable-mask{position:fixed;_position:absolute;width:100%;height:100%;z-index:200000;left:0;top:0;-moz-user-select:none;-webkit-user-select:none;-ms-user-select:none}..sui-draggable,.sui-draggable-wraper{z-index:199999}..sui-componentWrap{*zoom:1}..sui-wraper{text-align:left}..sui-draggable-proxy{visibility:hidden}..sui-draggsort-collapse{visibility:hidden;width:100%}..sui-draggsort-holder{border:1px dashed #ccc;position:absolute}..sui-dialog{position:absolute;z-index:199999;width:390px;border:1px solid #d8d8d8;box-shadow:1px 2px 1px 0 rgba(0,0,0,.072);background:#fff;text-align:left}..sui-dialog-body{min-height:30px;_height:30px;padding:10px;color:#666;font-size:13px}..sui-dialog-close,.sui-dialog-tips em{background:url(../../img/dialog.png?v=md5) no-repeat left -218px}..sui-dialog-close{background:url(../../img/dialog.png?v=md5) no-repeat -27px -202px}..sui-dialog-close{position:absolute;width:20px;height:20px;right:10px;top:10px;text-indent:-100000px;cursor:pointer;outline:0;

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	2651
Entropy (8bit):	7.854819454613078
Encrypted:	false
SSDEEP:	48:JnMdfmJnOutovOX0bp49fRhxfDpNATU7X8VWKWn9ayDTaAXNRte8Hudj7k1c:JnKf4nRtoIN1pNATS/DTaAXZ8o2
MD5:	A5314D5C8374C8E3B4A60D609C84BA66
SHA1:	F1F43C03231EC3106977A56675B8868493474956
SHA-256:	DA16A153EE0624DABE1D62683CEE4941F8CC17456914B5F93BFE009012309013
SHA-512:	80E3D4902FA83486AAD04555DC726F41427ADA249C33B64F0C20B6540ABCF52DC399FC9C3C3E35C391C82635770016926B421AB3085E0B48232278173532F7A4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X.............sRGB........DeXIfMM........i.......................................X...........X.....H.....IDATx..].pU..>!.....BHA;..".0.S.D,..d.....u........TGGG..t.j.)3b.:)."......V A.O.$.%/..^........8.3/...s.......d.;.RL.R.s...!7..l............r..vG.(........C.....v.O,....o....}50a....}....V...s'qC...#O.-H8R......#.P..wL........<.u.&.....'..M-..s......J.....O.z3.....Pn..\C5`.I...S..+O.....aWg...o6.....G..QVy=u...>./.........PZ"....L^....{.n.q.7.<.V..p.>...J.v7.Jh..f..b....ckX.1........c.fZ.......Y.-...u.p............P......x......X..<.6r....E.7.....aW.A..=1xwu...-.....[....M..9....G......'.OE..U..8..6......7......g.n.<..........+aY....+..._.`..b..8...Qv;,.........Y0@$..4+...p]......0....d.......pD.2.].a...n.!.....:..o.u..N..[....-.w..g...,.^\...ES..+.`..Xg...........Y.[kO.=.8...G=.p..8LF....c+..:Jz..M..z7...ZAX.R*.0C;....\7C.........]x.V.>..`..../.[.....&..a'......e.r....~..,.G.ea]M.T..g.XH...d...:\|...`.G.u^.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	7.128970554470922
Encrypted:	false
SSDEEP:	12:6v/7ElcaWVQylQrdJ6LabmD5xspZLfpxtHgZ6ew3HjlTWS1YH99ES:6ajyyrdaHspZxHgijx0j/
MD5:	50D31CDA90034FEBFAAB92F9A7578E56
SHA1:	A7478946FCDCCE67195FC4052BC2D9DB4EF95B4A
SHA-256:	C08893227314F5B33C57FF95F79305CE945E7F8644FB87DDA53561990F658792
SHA-512:	C6AC448C4CEC44215BAA6F797D20892210E139917A7770B9903761D9F3D7B5E7BF07FA40216F3FFA8F19936B8228DFF5BDCB8D4DDCBF1615542B0A74385AE909
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/news-common/img/vip-2_1cbeb77.png
Preview:	.PNG........IHDR...............^....uPLTE.......................................8........A..;..p..V..............i....N........b.............G.....................tRNS.......vS<....:C...,IDAT(.S..0.....j..Y.n..'.......A...Xq.4..,?......qq.e...r.....U-e]..0.+{^.N......i.y].%...a.P.....X.,..\|......Q..%._0...Q....?.L..sV,^jn...^....".Zb..C......L.5.7...d"5[I.{.H.N...HE..D....R.@...;.....1..D..A..Mi..'4..J3.....x..^.......bC.`%.B..Z...e.%kC...k...8..<o.!0L.Q..r....Q......)5.w.....IEND.B`.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	1285
Entropy (8bit):	7.664961416654295
Encrypted:	false
SSDEEP:	24:qh/sJ40kkN1YDU8LRjMPAr0JSvum8PGBP2v8dzhx902af9:qh/mqS1b8tjDroZd89/m9
MD5:	F9B106A84823022DBC97874B6E2A2786
SHA1:	4E45221781A912AC1DEEC4CD7DCBE48080CEED26
SHA-256:	D451F415A843BD24E506EC0B9D5BC5AF47BABF13703EC3001B4CBF373DFF4544
SHA-512:	C5299966D7757DEAA4A285C41AB32484786723B6B9AFF5C9D1739E07F68173A8D89368080B8976221CE9328473AE4892AFC27FA9975FC902E5DCE4F3C96C1A00
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/qrcode/qrcode-hover@2x-f9b106a848.png
Preview:	.PNG........IHDR...0...0..... .......sRGB........DeXIfMM........i.......................................0...........0.....7l....oIDATh..Y;S.A...[.= .HKCc3S....3....CR.P..?!...+5....Wf...w7.7.=.7./.-...nz..ytO?f. .x..V..u.......ye........;0...c....Z?~...x8.g\|Z..4O..0m[0[.'.`D...:....~..Gk.3Yx....Y.wy,Km...i.!.Y{..c.....K .YP.@...)..5..[..q..)...........g..)......j..D`(=8.\|Y^?...<.y<.9........%...rt.?6..^.J.u.U.=R.:pc...Vi......g<.9....7.....=g..r.[.3.fD.g.>.m.s....._0.........8o.D..HNJU.'..mY.g"....<[.j..,....7{..&..z...g.?i=...2vg...U...CS.......'...h`..X........e ;^.%m.5Q[...x..`.........kf......h.Vw.y....;.....N.$...n...\.sq.&..h...5Y5.n...,..4..TA....m^@....-..L....N..s5f.wl'!........di..8.M...Q..\.....!...q...&.y...G...(.....;N..K.'+..[.....Kf^..H...9K...j..8.....HF.l..c.4.....b..I..5mK.g..\hp.)OYYB....2."7.<%....P9I..iQ....Q.%- 5Y[..@m.s..W....6.\|..{..>.d#.n.+T:.2.P..W.i.kI...R.:.d.W....4?H.).tG.....:....D...O.)..Z&....n...n.=.%.yn+1U.W...

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15964
Entropy (8bit):	4.057866639164157
Encrypted:	false
SSDEEP:	384:ippyYtKiDpI+BTZKn5bHk15YxesyMVJbJ:4btjDpfBVKn5wPYI1uD
MD5:	C95383AF0CA41ACFEBC6860E7E7958BC
SHA1:	0768E0FAD8A0FA5E20C44DA1B1716B836187BBAD
SHA-256:	6229FD66F2B7F28054150B018934F7B3A7CAF4E635C39BCD1CA6E915A3A20296
SHA-512:	4D3854FFEE5C08244F4A3DF45656FD6B8D8EC3741E9E6C416E05084198177DE00A33F7D459F0D82EF03766B8F5F7A3DB76DB9C3C25AD60E4CA5CA51191FDDD6B
Malicious:	false
Reputation:	low
Preview:	define('tslib', [. 'require',. 'amd_modules/tslib/tslib'.], function (require, mod) {. return mod;.});.var __extends;.var __assign;.var __rest;.var __decorate;.var __param;.var __metadata;.var __awaiter;.var __generator;.var __exportStar;.var __values;.var __read;.var __spread;.var __spreadArrays;.var __await;.var __asyncGenerator;.var __asyncDelegator;.var __asyncValues;.var __makeTemplateObject;.var __importStar;.var __importDefault;.var __classPrivateFieldGet;.var __classPrivateFieldSet;.var __createBinding;.(function (factory) {. var root = typeof global === 'object' ? global : typeof self === 'object' ? self : typeof this === 'object' ? this : {};. if (typeof define === 'function' && define.amd) {. define('amd_modules/tslib/tslib', [. 'require',. 'exports'. ], function (require, exports) {. factory(createExporter(root, createExporter(exports)));. });. } else if (typeof module === 'object' && typeof module.expo

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	7.349360770919752
Encrypted:	false
SSDEEP:	6:5ZYzhFUNzDI5PmwUEtuu8jrwbIU9zmsiasrBYdbgwZM06jHipOw/VYj69xgLl:iFUhDYuwUdu8jckKmC3d0wZM0674O9jn
MD5:	E65E5CC974BD4E5EC0AF4DF5A7DA1398
SHA1:	262A3F91BE1D374B426654029972201F9DEBFFD1
SHA-256:	E64ED4812978E383ECEA0CC69DC96E9B2B1B49F5E1AE708F4DDF70F3DA957A03
SHA-512:	A3DC9BEDCD5EF2DDF3CCA9DCA8704A09B8F2AC3E7BAB9D3E0A31B9C10ABCC9983935CFB8C187DA39DE4BAE551E747B4B99B7A9835500D3E8D0D83101957D24C1
Malicious:	false
Reputation:	low
URL:	"http://gimg3.baidu.com/rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F5ff59bf96b328865183444872e4c8f12.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=f270e08c5979c3d49be8eda99501b029"
Preview:	RIFFr...WEBPVP8 f...p....* . ...v%..t...6..U.o.......I3?....iX)=......VEA..<.....l.......,WX{dE....a...v.2.].w+...:.I...v>%w@..5v...(.......$o.c...`q.......# %..1..%me.l....a.D.. f...G=).N.[.x3.y...............s...q\|!.Ni....[,(a.@..K.....#..IQ..y....g.3...{\|..8.9..U.....1......+.p./..F.....(o..S.b.............<..Z.4...y..U..l*........{g..oAJ.......a.u.gBV...#;V .

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2430
Entropy (8bit):	7.86548794488282
Encrypted:	false
SSDEEP:	48:TrnJ354/jXukjjUQaGt/pgaeLIxwtG3LHFWwNaCX89ttz4id3c:Trn0LTjUIt/pKGwk3z8FDq
MD5:	10750F3F7D049AB650FBF9D36B467E44
SHA1:	5964B840EB025D9536144229CFF71B0707B8C059
SHA-256:	96C2B6EB1DFCAF461BBD8475FAEA7502C3189F04F747358904BB0C872E3FAAE8
SHA-512:	9ECDDDD43926E4E904FB57A074E8DAE50AF24D5CDE793C91A0C7243CB10EBD387B5C1E723FCD887034CD471D6B39509914DB356FB3444D591A38518C03CC4455
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/searchbox/nicon-10750f3f7d.png
Preview:	.PNG........IHDR.......`........T....sRGB........DeXIfMM........i...................................................`....+......IDATh..Y[lT...9.^...bc......"E...IP.4.....pl.$j...$..,.pP.\|akC...R....H@..4<..T.E.R.!.r..7.v.....Y...s..xhT.4........1c?...w.~...!..H....O..\|l..08x.`&.U.`.M.3>Xh.Yg[.9-?......3....g..Io......Sd..Y.3..\|Ri....l....Z.C...r....1W[[..,LgPTU....B..9..#.pVg....R...YHk..Y%...4.....E.?......_......Y.o.I;.1&.;[O..e...8Q...............n...8K.O]...:....5".x$.....%.l.6S3.>.=<<&...z.V..G..d...M.U...t\.p.v.\|....z.......o{K..?].R.L....#.V.......r.y.t..I.1~...}..tUcgwh..t.......;.`;.,..+.......n/..b..Q`.....-;U...0..B.........{...\b.$c!....e..E..^Os+.........}.....".(zE...S\|..ug......y..F..N-...O.Yr.o..Z..*3.u..H9.PD0.H...W......7Z...8..-X../g .}P.#\!f.$..........j...7...a.g."..W<...j..2;.>..e.[.."..a.,..&...{=.)...t9......9...E.."T.WN;]CC.0.....@.Q.B..EI.(....6..i...2..I\.."...,K..,...t..y....a?.X...;...L....%y.f...M..U.D\|oI....>n..

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3769
Category:	downloaded
Size (bytes):	494
Entropy (8bit):	7.529309332005949
Encrypted:	false
SSDEEP:	12:X7NA+5dEfLvkOLL0Dk6L1LtQKNuZIS/t/87AxjNxlln:X5mdoDj9uZIq/wAxj//
MD5:	0C19CDE38FA4E2E873F55901C6D5AFAA
SHA1:	C48CF22984472AA9D8F47B0D5EC47BB37BAB26F6
SHA-256:	75EF489F3495F2691DAB2543A3C227C8E914A7A0BD6A2D1EFE340737B80D1EEF
SHA-512:	0BE8DC0C094CD203E91968C1CB26CA6CF031E7F2DD4C88766B341084AE3F325F406AB4BB43F549D44F8D5F3DDBF528122ADB5C9885551793E8B948867AFFBC2F
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-shop/tokens_fe953515.css
Preview:	.............j.@.......X.O.M....%.E\|..C.nwv..).}3...9.[...c............U....;................=T.x.....e.$3...f......N.gw.k......,lCVK...).,).......CT`..}N.7$M...+..4Z....p{...~..~D_..1..'...m(Q.*..Y....y....).$I.e...CU..E.F\|]g.a...D.....=H.L.{=K...#.!...6.y....z....."..[..!0...j..:.:W...i...%\|...=.a...k\|c)1....I...W...:.4.e.1.......%..!...`..Ct...t.J._.Z.....H.._.5.<.E.m$..-.....L<DQ...f..r..a.y.......vb..S.1..T...N..6.$...z.5.a[2.65@..Jq.[E.4d.d.Y..........2.n....

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	3567
Entropy (8bit):	5.15536673282653
Encrypted:	false
SSDEEP:	48:FL9WHQNGbkf4EiyB6aJF9Mu6gf1fw73ll4QdjcwEx24jgYldG7sDbY4DzFyVRdYc:o+5agF9DU2J2a7vlM4NC83YCf6x
MD5:	97E9694CB9C9FF941D905A4D765F6937
SHA1:	503210B9DA9EEEE8FE9045722A4CC9A1A3275F6E
SHA-256:	1B9FEAB4627851071B3C459481831FC9F1CC8B745B11C7C35A70116147BB9810
SHA-512:	83986608756F87EEE2D3BE2EDB26F9C0CA965183A6338E60625E9CF5AD963F9FAC7F7FCB23309DC880BFA28C1D82D0B07A0A6D2AA075D6BC080FC1D36A6627F5
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/invoke-97e9694cb9.js
Preview:	define("superman/components/invoke",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if(."value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{obj[key]=value}return obj}.var InvokeServic

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	524
Entropy (8bit):	6.878344816981975
Encrypted:	false
SSDEEP:	12:6v/7ElvaWRiLXcI5sfI/o8x/vNX7nHqJLy+mUkB59+mZbD2Wljl81:xaWALXtSfHy/FXLHmy+dknrZH2WFa1
MD5:	9ABE25229C3806267CEEAEEA75BDE1C3
SHA1:	32F72B1CD36838214CE1AAF7BB1F2CFFC2124C89
SHA-256:	5E5F4C0CE36BBC4C73439DD33075C648F8522C637EFD87EB1BF37C1D3C782AFD
SHA-512:	523E9D6D20E2F5B376E840C8B7B2AB9009F009F899FD0639539FE6F46B4D93E3DB6D99080A2C3063DC99AC2B7DC6DE06DDECC4D668EA1C97CFA5FD7F92F142A3
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/news-common/img/vip-3_69137a0.png
Preview:	.PNG........IHDR...............^....~PLTE......................................... ........._..w.......X..@.....$..7............P.......................l..E..DL..v....tRNS.......vS<....:C...0IDAT(.S..0...(G..-.(.......%!........[v.C.....a...d....8[.....d..A..V...#..c....(......3...O....r..X..\........VU.N..Z...4.eU...D...,.?.bG...]..B...R......M?.o]]$Bs..K...P.@=..@....6.Y....%'......<GS.W.vL...o.~....dd.uiN...W..P7f....t.G...w@.H..m1..`&l.M5#..x.d=.3P....@...3..\|..i}...y..l?..'...@)_.T.Q....IEND.B`.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4474
Entropy (8bit):	7.9504162775910885
Encrypted:	false
SSDEEP:	96:kSpe0X4MqeYTJinxjP5wO1pOs3HYR2hfchN7AAnvp81EYml:ZtI6eOxwOpX3Ha2hiUMx8+
MD5:	61108FFA2CAC4126635B1291CC6F62AB
SHA1:	9617B4911D26E6B9233FDCD3F0EB10587ED2B048
SHA-256:	648FC7989A5F2911E40204EF8E9E560FF4D80A17CA40E1D326F7EE2F8E3539AA
SHA-512:	CEF02993E4D46A82CE73E30B7F2D004390016A33395042E12A7F264DD14331F30C4F22C315A75D89573C3E15041107FBE751108CD099F18119291E60CD561D25
Malicious:	false
Reputation:	low
URL:	"https://t13.baidu.com/it/u=1103051124,4207593305&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=2A31E60607A7ECE84C225A560200D0F9&sec=1729962000&t=3337204794c24425e7243dc722bc7cd0"
Preview:	RIFFr...WEBPVP8 f....K.......>.<.J..#!......M.......v.o...X...OD>`..<.y....)...w.;......{.....C0.5./..\~....W..5......y.....}@.)....{.X.-........;...7.?...{..'......._Z.-.......?.?..J.....K.[...?.?.\|..3...c.W./}Oa?......m...........U.......0...s..6.a...`....}.....W....k.$..q./h.....'..>^........q=..$(..f3....G-..S\|,..F.......&..#>.j.yg./..&.7q.R.... .sIk.........V~m...I.H.)y.....{f.9.../..=.....N..@..T..l.........>.}...'......&s.............Nw.3<.R...P........l.S..<...S...6:.X.U..T...x...k6.c..M.xA..ao.5..fEg...r...Y..n .s........z.<..G.Xj.7..t....e..z1..vh..-;:t.......M."9.b.c.1..j.7.d;'........a..{.:W.?.7.@..L.K..>o......m.q...8..N.b.Q'.4dk^s6.x...n....q..[.$.....&..M.@.=V...vK.H..6.Bj...>..D.Ec.3%.[..v8&....!.....dB\|.....x..)..x.YM..ry. .....V._...HSi.wl...1.?.+R.........S..M."..Y..1.8.+;o...R0i<...%..=.8f*...Y..jR....+7....v..m.&K...q.U....%[c........[.\......W.g.B%..........Y..R'2..\......B.`......G..J...V.....(....Rb....-..

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4085
Entropy (8bit):	7.925373772243591
Encrypted:	false
SSDEEP:	96:1nk8POydIDRiMV0Gva+ddXdJztYk5Yl7kkvcgmvJquw:sy+DRiMnvJ/tVYHMK
MD5:	A6A0831ECD5FDF11B86C9AE6EA945E65
SHA1:	FBA2C5E03C08835A45F50D955FCA6029064FB690
SHA-256:	382F836892F0F4FBE80511D48E87DDF49E21FD85B824EF85D2716E97EDD3E9C4
SHA-512:	EE9F3179E7B48028E4981C3748734F27B958CABFD2A7E8D9D6B141D0E4D17141DD3340BA2BDDE3F798BE12D24B24B9342B7F83A97C3ABDAF5B09B1DE6C46642B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H...._IDATx..Z...Y....:...h...8..681.b.\.R.J.(..U._...o..y...T.......<.".P.d%..c..f4.Y...w.n..~...=..X......S]}O.>}.\|...-..e.....HA..H.h3!."...)..H..2......x.>"eD.n.RFt.....)#..H..G.#.xX.<.WA.P...Wo..{.P.{\|.../.'..e.....o.y..]........>Q@..]s...+..../.O,.R .?.z.}oV].c.Z6...d..5..MV..P.f../:_}...`..FP.......6~r.\.X.4.H.JX..3k. ..\|.`........12{wyO..~...^PW..7....l.....e.=<.".V.4.#v...o.....n...I..!.V.)y?.g.=k...0..<m.Z..!....b...`Y...%q..B.....-.o..wVsuO....7.z.P...T.?FE_.M.3..jPk....NQ......!.oz.\|...u...5.n.<.E...#9Q......s!n.}.....l=\....D=>....~......K..=..r.......t,..Q.U..........@..2_8Nv<T....D...........Ff.)...W.Z\|!v.B..HB..8.....LJ.^.=\S.bL.H<a bPw....qy..j6$.Q.....ah......r..WvqA.....8.....Z!d...'....wW..uu..[.ncNa......F.....C...ww..t...@.Y......Dc...-..../......T.....}.bl6...-.&y..![..:...............Jd....x?...3.hy

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	7.279117990711341
Encrypted:	false
SSDEEP:	24:gvq/eGzwfACBLvubjXNdXnKitDg8nsn+IHmjXBkf:gv+z4AyLvubj9dXKiaIGryg
MD5:	FF595645245FCE847D7A1AEA4D2FFFC5
SHA1:	D638C9B93CF27FD9E7B4CF7B5E1582C07387A2A7
SHA-256:	89D8E4BE545586DE598DBAC61EA130D3FA3C98F14854F8147DB62648F3EEA2D8
SHA-512:	DF22E7AAEE0C212E835977D3CAAC749039A734B5BB4AC9DF96799A7251BD10F6CC7F16757C37C0636DA4B6021C5A1CDFE9BB8A5A90E52183AF89607FE3CC1CAD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."...................................................................!1..A."QB...2aq.................................,......................1..!Q2a....#A..Sb...............?..)...D@...DD....XY;mV,.'e....d.......Xvz..!....D.2f....\|..C....E........3.......~..!..,......h$.I...%....HHElod.....o............#.+....;b.c..$....e.e_.J..s2z3Y$O...l'..K%t0.nx.w.N.o...~..\W......,..n.+A.....`..U.EUWS..j...G.9k%...n..PE1yl .-kZG+........E...X;V....o....t.0d.6C.Z..].\|.....?..0.#.h.5c...i..\.....~S..e.>$..........[G.. .....8\5Jt.7Y.[GK.uv....;.q..Y....{...=6..I.A..>o....a....=O_........... .L... L.?@z..../.a..t.......\ .z.`.y......N5~.?._....G.....sDz..h.;..h.K7c......W.d..gk...c......Q..be.=[.....S...f.W..O3&K............dct^_..ff.j.s..../..]).1..m..X..Uk.e..j.:xw...2..&8...d.w2.....g...$vV`.._7...y.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29852, version 1.0
Category:	downloaded
Size (bytes):	29852
Entropy (8bit):	7.993118705390973
Encrypted:	true
SSDEEP:	768:JYSKV9X50zitunj+UTdK/jHN18ZGa1Kgzf/d3Z5c:TaR50zit7UR8N6tKE1rc
MD5:	F82307EA096D719CBF05343FAF2F4319
SHA1:	E996FEF58A03825F30A5D506129F67079757E297
SHA-256:	F164A601790448AFFB3BF09D6BE492B6A09177A90924B08934FD5E74A15E8215
SHA-512:	6BA5C93831D07D14D6F499E5880FFF42544AD00F333855AD1ED30177BFB1A986153F8BCBDE720320A7A66627DDBE87751F78B1268B3A5E09005F7F82AD5D7113
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_f82307e.woff2
Preview:	wOF2......t........t..tH.........................T.`..\|...,..a.6.$..L..(.. ..g......W..G...0...GEMR.....)......c...@...z]0..H5k&%[..lY..l.@....rD\|.M..P..:.0\|q(Y..G..\.1.X..Oqk,.'/I.TV......4/.U...c...JP.R^.!...V6}.w.<.\|'Z.5.i.?....ht.....{fv......a..pUe'.....u.x...IH...B..!.!aI6..N`...(Cd+ .....Ap..8P.Z...uV...jE7.....?....U...&%..\|..!......v..Q....1.0.x...)K.B.K....~.:.T.#92(NZ').......=....V9};:.0...;)a..P.N6;....;.u.>I..:..:.A......w.. .....^...j..L.N....,.fJ.LR.>....I....Xoo....o[.. ..{...8.V.p...;8.Jo....]...."`.]O3e......L..pYF......I.z...z.....k...1h.....89.Z.,.#..4..P.5c..$..36..d.?....M+}...s.x...:...o....F.()v...H....6..I...t..v.n.,7Zq...4......S....BR...%.Y...-..`..{.y....0....C....JRU.^..j.$...jPIv.Kj.a....=....{..{.T.{FR..........(...:..(. ............E....V.`hi<>.c.~!Y.Qs0$u.....>..&.^....P.\`....<^..c...:\|1f"" .......s./*i..J....$ .Mio....w.....bg3.,@1.P1...v..}{......BV...Q..V.. ..YW...7.^.Lh.)b..V=.7..gg^.7nB\'1.......M

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 689041
Category:	downloaded
Size (bytes):	221349
Entropy (8bit):	7.998081277730831
Encrypted:	true
SSDEEP:	6144:hel0ZFZygZwEBYPPQfTlktWxpz5fyHXDzrG6XqNBi:hmMFZyg5BYAZWyKD266u
MD5:	444BC47484E7D40C6DE69F50E8C3CCB9
SHA1:	6F74F9A8ACED8BECDA2D609C16790158E45AAEB3
SHA-256:	D80271A1709B3C150C84E9519D3B2F8B3C4F67EAC60156BF281906B3A73272A3
SHA-512:	2EC00775D24B6AA7F7950FF1C10E121389DF8EA40B72BA6BB583C69A6318C6BE1A32F2193E77441C2C5509DEF9BBA2A7A03DC6744FFB459A6B03C4EC59AD5BF5
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/global/js/all_async_search_a7be81b.js
Preview:	............s.V./.\|.....6`...o..x..m.g..j.=#..H...I...R..o.T.!.J.$UyI.&.7U'o..M.T%..:.......6@P.}&..4.l.....k..9Y.<Jb.U...a..sJ.......zqp.].y...Y.>...'_'.a.".B..a.H.=.FF..4.'I:..?..w;....o'......9.:..z)..G..Vz.O....s.lL..!.j.>.r.A.B/<.....,....O.1..)U.P...(.].6..p.\|<.R..2y...e...jv...;....r^N[.z...M~Qs..,..i$J.gQ...Ks.^..`1........V.Oon.r....o.. .I.&.`zBk.\.m.:.g....O3.,..?...q.,G..u...E..0.G.w.`.^&.q.". &...d..>n\|........<.[Nl..$O.yH.qB.._..[S..:.\..Q..P!-.`...Ec..q2Z..4....4...4_..hl..$.pw...us7un...;a;.....@...4.yP.g}6..6F. ...-#..L..g[.....!AN...>..v9..i.Y.i4zo.z...m..xh.\.WAJ..."....J....t.,Q....a.olc...'.....:_.d...],j.*.....E~y..G.......&.....h.o.,.7.0.S0]..b...%...x.d....'.[..\T4...F.0Y..x.H.2....wwy..F.7..c..?..4.%WU...5.......qz....m..<........ol.......qK_D...nv.........APur.\.H..]xTh=.:..7.y..~....e.B...z..q.'..tl"$..[..G)..=;..7^.t..Xz.~...]..>...!...z..:n=.a>.M.Z.W.`5...g3.g...N...>..%.{.%.w..f....s.$..uO.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	8178
Entropy (8bit):	5.302410300113714
Encrypted:	false
SSDEEP:	192:7sr5kveEVuOZNgope+DK7TAM2S5/rhWYH/PLbZ/j1:yGvDuOjLIT72G/FW4HfZ/j1
MD5:	5FEC89F47D0662BF5F9E4E17EEFB99DC
SHA1:	F53BED02CAF8E32C782E2DE3943C4DF55CFFE3DA
SHA-256:	0890B779F3D599DB01C14BCC827A7BAFC4293E455F6FE6B80F6A54C199DFA8F5
SHA-512:	C74304B7FA33BF1848EF260FA9F76A8EDAB15C8CC1B476749F9A39130B39B232524B1F03BB3C7ACD7BE2E345205FCEE28F4F764D57AEBE2FDF37A9E5B13E7DD1
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/lib/esl_5fec89f.js
Preview:	!function(n){if(!n.esl\|\|!n.require\|\|n.esl.version!==n.require.version){var e,t,r;!function(n){function i(n){h(n,H)\|\|(P[n]=1)}function o(n,e){function t(n){0===n.indexOf(".")&&r.push(n)}var r=[];if("string"==typeof n?t(n):D(n,function(n){t(n)}),r.length>0)throw new Error("[REQUIRE_FATAL]Relative ID is not allowed in global require: "+r.join(", "));var i=J.waitSeconds;return i&&n instanceof Array&&(N&&clearTimeout(N),N=setTimeout(a,1e3*i)),G(n,e)}function a(){function n(a,u){if(!o[a]&&!h(a,H)){o[a]=1;.var f=z[a];f?(u\|\|!h(a,C)\|\|f.hang)&&(r[a]\|\|(r[a]=1,e.push(a)),D(f.depMs,function(e){n(e.absId,e.hard)})):i[a]\|\|(i[a]=1,t.push(a))}}var e=[],t=[],r={},i={},o={};for(var a in P)n(a,1);if(e.length\|\|t.length)throw new Error("[MODULE_TIMEOUT]Hang("+(e.join(", ")\|\|"none")+") Miss("+(t.join(", ")\|\|"none")+")")}function u(n){D(K,function(e){s(n,e.deps,e.factory)}),K.length=0}function f(n,e,t){if(null==t&&(null==e?(t=n,n=null):(t=e,e=null,n instanceof Array&&(e=n,n=null))),null!=t){var r=window.opera

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 114415
Category:	dropped
Size (bytes):	41433
Entropy (8bit):	7.994263423401719
Encrypted:	true
SSDEEP:	768:eAj/zYfK1VTy4oStcYRBY3TTszixwf03Qf1k8ck97M8uzto+sm27V:VbY2VTyOtLIUzIA03CWk2z327V
MD5:	DE5B3831E8BA9B42D0421E1B3646AE8D
SHA1:	C1F458993F7E3DA8B6EF46FEDF8AEF61FAA38F52
SHA-256:	7574DA6B2C1BFCE8333A0E795016063043E5D5C5235EFDC90C307510D8EF7549
SHA-512:	B7BD559E01BC5FF9C3208D8ACFE3CAF835CEBFB52189CC6A7E898D099F8ECA4D0E06E5F07DE8892260ED9F45E1D99CA1085D293856547187F24C7930CA00BCAE
Malicious:	false
Reputation:	low
Preview:	............V..7.........p ..En..... @n.fe.Y..[rt....>.5....U%.d.K...=.5..R....fM..Q...._'~4,..~..y..N..4L.E.0.......I.g...q.GIl..Ud.R..Q.[=.`).C.;7i..i...w.^wo.s.w.S]...]...{...</....h..zr..;.+..n....'i..........!.y{wa7Hb.j.P......;M.<.k}=6.....I..$...I.i.21f....1..d..:I...?5.;...Yf.S...d`L2...d....,...Y6&92&9.w......j...gl.r.?5...I.m...O.B/./.S..K.d.q..y/"t..7.. .L.<:....hu.#)..:...R.&./......,^...k..._].8=...aF...C.7..,\|:N...u.;.;.........o....;.............H......BG5rI.L.1.k..\|..\|....[....'..0..#..SYr...$(&..^.N'..._..Qx9...z.L..].h..8..`..q.vg..#UZ5r..F....io.xR5vZ5f..p03...._g>.. Ih..bg..F_....N..WO.....J-{!...a..l....2..u...W.?...F>_..Y+a."L3zNR..).b.Z...e0..m.....v.98K.I8.6.$.:]....it/.(L.4.\|..K.4o....I...uG.E1..(b.O..N..qB.A.9.h@....#.o]D.z.....{..r4...]4.......;.^..W{8..m].<.N...3......9...},.+...^DY..0.E.-..:.X...8.G..Mk..}.....k.s/.....Q.(.r.H.<5..<....E.In..;....j.-D.w..H.$y.L.be0.7.W...[..T.t.\.... M.c.n...

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	53
Entropy (8bit):	4.212095993664379
Encrypted:	false
SSDEEP:	3:YAf9OHrC/HHkLv3yncHp:YA02/niinAp
MD5:	155AB0DA9A249601113C315DA87EDBFC
SHA1:	EEFCA8E6AD17985CF41EC56A3803F82EA9002943
SHA-256:	8947D6F9CAD828538C6088EFEA04F599C081AA38F5D4D9906940135928ADCE36
SHA-512:	3E0835F4030D4554403DD7266BEE77D754D7D5A9CEE7D8BC9DEB3CD393E3584AB78CD0831C2E14F891FAE431E3926FBBFD34F84603DCE6185D51397551FC0C18
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855666076&req=2&sc=eb&csor=0
Preview:	{"err_no":0,"errmsg":"","queryid":"0x7d9327fd03ed29"}

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15444
Entropy (8bit):	7.754529849677063
Encrypted:	false
SSDEEP:	384:WvD/oA79X29A/9VZ2iCHnprYx6qw9B9DvCoc2iouNJZu:O/7R3VVrCJrYxnwxDL0NZu
MD5:	D9C8750BED0B3C7D089FA7D55720D6CF
SHA1:	15E45B5ECB7C7F4F54CDC3A224E702794C1A9684
SHA-256:	22EB1E51C92F3C013305AE0319EF4477C692DC26ACBCA1518776E2FAF9D66A98
SHA-512:	197D9FB1D52230EABCF551CF9547335DEEE7C9AFC5187F32A99E168B019841248DC6B973234338911BD5C96DF8644A4F14D955357111821C22499D803FAEA922
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/PCtm_d9c8750bed0b3c7d089fa7d55720d6cf.png
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM.*.......i........................................................u.eg..;.IDATx.........eV......E..&..(.Q..11..$.h4&....}.......Q.sK.M.!..1 "3....C.{....f....S 0[w...U...f..{...:u.S.a...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1311
Entropy (8bit):	7.476696629745216
Encrypted:	false
SSDEEP:	24:IvqM1H1dvFkvNb0ItrIa26y1OushKlHBW4G5SkY9bdHg2Goy9J6eXX6:IvL1H1dNkvNIItrq3KhOHc4G5SkMdA2v
MD5:	935CBB3F7D540C2364020FA563F18B66
SHA1:	6C130D6D1CF8A28A6875AF857BA8FD23A78D770D
SHA-256:	5371E9E181A975B1E18C45B29D58962CF311AF82ED9000183B377E81E29F20D1
SHA-512:	CF1CCF54E2D9F3AF5273ECA436B78EAD240CA1A1C576CE6A533BEED92AABC4AA75A8BBC9FBC418B4DB8BFD7B184B2D8B0A9A035FE702B35CD68F1E56D3B69F91
Malicious:	false
Reputation:	low
URL:	"http://t10.baidu.com/it/u=2178613570,2866529354&fm=58"
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.......................................................................K.K.."......................................./...........................!1."AQ...Baq.#3Rb...............................-.......................!.1."QABaq..br..................?...)J"R..%)J"R..%)J"R.T..EuO.....)TU...\.9...ho.m!....%n.I..yH$..M...?.+=..d.A..S.2.IQR....z.....eu...0..`.....e.Z.....:...tQJ.STE..C4F.e.qU.....D6.e....(......j,.M\...5..wljl..\5KZ...j.On...v.:...o.N-.Yu.Al....e.v=z.}U}d.^S.k]...3...,..VT9..B.R.+.$..}}.U..eh.c..V.M.,.4.iR8..1..^..}.+.prLv.!1._.R.WT....~.;5Lqr.y..?y.Yv..9o..}I...$!.....oi..Z=.#.t.d..\#.#..1.1TBj2B..}.V.....[IvL...0X.\G%........RT.^.'.w..../.B..>!....u.X..,....t.v......%..qF.b.8..N=r....+..4.....-..........+E.".9...2.....c....%$..L...(.M.`w..M.w...V..c......[).0.O...%:p._p$.._..]...%X.7..c..k..\V.<.)@!......S.....^.V.u6.5.]$..g.....-..;O.....f.l[..n.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57420
Category:	downloaded
Size (bytes):	17009
Entropy (8bit):	7.9857117368766675
Encrypted:	false
SSDEEP:	384:IVpBJOOBAybxnef08CtgYj9mAWewCFevemKdIe6sCq5QzKhoy8N/gXrukJTZP:8vJOOBeM8CtNU7eTFJb6MQz+BOWFP
MD5:	4655BD4479BD9FBD9EEC924BD797555C
SHA1:	EAB68314673D25997541D08B67E73896D58B7D60
SHA-256:	78A7ED0DD44604E0CAE7C2680EF2D008EB5A42827411FC0A506B51FA4865801A
SHA-512:	A509D4A6B3092D7CDEDF8B89E29EF6AF725BB6363968E4330A177D50909727EB27878DD751ED8836F09B4F052FA6CAD7237A79073208D7B909AB2E6947EE4A7D
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/search-sug_947981a.js
Preview:	...........}.s#.u...+..1... A....l.3#.........f5.&.;.....c.T.<.8..T..8..d._,.bWEIl.5.+.S....9.v.~a8.+.R....o..:..s.......oX.y....N.{.`...........[..j.D.u./f.$.g.Ud......\|..=.5.<.E4..F....i.M...tL....6J.}.-?..{.?..C.......y8.g....t.v..zU...8.4..5...Z..~.........B+.^....8...M..<.]...Y..v0O\......d.$....R.k...P.y.M...R.xq6...7.C.~.]}.@-..\vv..lH...........i...........q.H> .P....y....{<...%..m<....qp.`N.g.s.....w.!N..s.<...D>Qb..L..K.Y.\.di..?...../(.'!u.Dn.s..,...7.s.<>.7.....\.1...w.Y)[...\|.z.'..~t.2.`Y.O..,\|.w0./...U...Qq.l1."...3.T.;0...w[...h....8BD...c....=..E.w-....P2..M...8-xB,b..g.}D.........P.$.....S....~w.}....{.....z.... yA..B..........q]W~..B....v1.O^}o.........=..{....{...V..~..q..q..q?.. .x....I{..h.d.."..`_V.(.W*........n4....6=./...1.#...6..TN;...?T{.xr...Q8.r.Q;!..Hf..G.m.'..GK.$.N....8yLTL#.a..oD.T.bN...j..=..'D...Q.....6...p(..8#..M..G.-.6...%.,..^@.$.Veh.9.>.Dj.Nv.\.q.xJ.$.f..M.".2..;......dg.X[..g.o..c......X\.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 132, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12802
Entropy (8bit):	7.9775089394871195
Encrypted:	false
SSDEEP:	384:krjHfQi+q52GYTH+VLIT1O5sfCQgF/yG3ZVAFFzt:kjH4i+/9E5MI/1JVu
MD5:	25768C84CCAFA2F700D74446E64978F4
SHA1:	BACE9F44F9A2609B57A0A64766111A80B14019D1
SHA-256:	1868167D3777607F62A02A2384A35B95B736C06C5B909421CD5BAE5842B2428C
SHA-512:	DEE72E30AF120941AB0EA82EC5380EC5B7CC13FCD8670351940FFA17FCF34ECC4933EB04482E1B8BA60886A23021C401D8DB10D4E39FDBA3B93F4F90A3CA908B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............d.....sRGB.......1.IDATx..].\|....of....#......n.Q....h..Z.........l..Z.z..C....@. G.V..n8.$$!{..w......3.=.\|.....z.}..~."._....G.#....p.8.....G.#....p.8.....G.#....p.8.....G.#....p.8.....G.#....p.8....@.#@..\|.x9...._..r... .0..T..$....}k..mN5...mu5...9.p..%I.../..ee.../.R.m..8.V".....r.#0gNcQs0.=...#G.S..}.........-..0..i..L.f..#...l.=...B....\|....q.2...P2.q{..(.R.>n.e..t'.}.d.(.?.].~Y.To.....0.I8.c..R....3.}.;..v>N..H?..CI.g.-RA`......GP._.B.?..7.x..O./.\|..l&......y......vA.Q...s&.@. ..J.<.n.v..,`.....+9I;WlJ.....q_.;W{j.T.."..&.v.X...Fms7..,V.O...;.......u#PY..~.[..;.;1./.%..j..5.\|...E..F\Fe....6.q.W...;..q.......#......63..Rj.....#.,\.D8.'.s&..ltD...7....y8....w(..>......%7hf.N......,.,..u[\|?.3...O....&.n.YQV5.<.#....$..gN..UUL ,..}KZ....0...=e....).7...E+..3.s...s.LD.;....A..7}g..~.5.;.2..X..v}.......UzN.......~E.;.~..+...I.3....9.^Q..F..d]...O.....;...Cu.pR.@."..J....!0a.o.BK....GX.F..E.J..V.......

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	6451
Entropy (8bit):	5.151269431237994
Encrypted:	false
SSDEEP:	192:sF9Nmh5w/9GqXGFkO1pH4iOA8Z20lY5/ay4:sF92gvE/p43rKwy4
MD5:	12DBF9FB6D608609F31753654D61B30A
SHA1:	432EE3032501BB0830ADDF2AED05A936F8B1C093
SHA-256:	FD7678FC3006B4F158D4F05778F379CB8D7E7B614EAF5EDDDD2FFED00E400B0D
SHA-512:	C3B33F57FC2A79B3DC54792CF36221E968B873FC73911CDFF88198B066D6F3098A64B41DCFC40E83DDDB56ECBC19EFC8EA709712F12DD35144FA40820A374526
Malicious:	false
Reputation:	low
Preview:	define("superman/components/content-info",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.ContentInfo=void 0;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false.;descriptor.configurable=true;if("value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{.obj[key]=value}return obj}v

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3476
Entropy (8bit):	7.9219906306841406
Encrypted:	false
SSDEEP:	96:mq8D9A8wmzYUOYacRualGjUoX4+SNzMtA0BOGD/gdz:mF5JwO3acRk74+CYtAfGD/uz
MD5:	2068F68C3467CE4DCFDE2F171D2DEFA1
SHA1:	2E49E45FA1C63F19CF3F396AD414EB4858F837CE
SHA-256:	55A42F883E8B9FF56C9B2BBDF4DCE4EAFEC81E71E136F3C83C87ACFE8FFCCD4E
SHA-512:	352464F9E879F5F0ED7848999ABC638C3B5D63F2399E7B154842A087132E13A9E3190F757D87C20D65A52A05285F7EFE28D0AD9BEE8AD4104DD23963EDB7ADE2
Malicious:	false
Reputation:	low
URL:	"https://gips0.baidu.com/it/u=2001002732,2616629427&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108"
Preview:	RIFF....WEBPVP8X........k..k..ALPH......Ck."Ii.p.Z.......].w.=....d...)....lg8S.j...........g2..p IR..+..l..x<...{JFn...M../..lY.b..4G...S/..L.../.M]H..D...3..$z.)..bd.J.@..DG.rb..T....v...vKK...E.$a.".^.b.....`!u......jEa\|.5...9.Z.......6.PO...X....F..sMO..@lM...`v...o}.E.R.oM<H....`.....g...p7K.(AB.....{...8L+.R.&.!.U.#e.cZ.t1:\|f...lg..q...n.IH....0..F2.U9.8..#1P.E..dA..X..)7.......Uh...J%C...)...........(.\|...@..Y....&...C....M......7.K<.........3.z..l....y...".....HK+mId..pQ.B..!..$S..s....g..R.L-iyq..N......i.1.(...B.4....TX..1...^..vM.....D..5m.k...+.........c&..j.y."..z..V.=.RL..'.....t.t........w.1..Uu...'d..~).m.>L..n.&B..C..,... .....m\|."T...Pi:../.!/.........Y.3AY.o.0..4.a.E..R...$R...X.9.d...../:m.IMG..d.--.c1..,..........-.H...`..X...."K...V..HC...vi..?b...jJ,dJ...8.!.%.v.7...}+..:Z$VMp..4. ..iP..a.....7.!.t.........[......Bk&....X.k.,.. 5Q.>.b.HV.....y...G.3......Y..LqA=Mg..J)'s..)0..Xd..g.MX[.X."..].V...0....E.E?.P .}K.!

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8687)
Category:	dropped
Size (bytes):	689041
Entropy (8bit):	5.49649801868102
Encrypted:	false
SSDEEP:	12288:Swp9m/WPsKwPWhCvTxTCncQQ7miL7nqFTivSCQFHMzmK6xw24vA6sPkTGkuk3hPD:Swp9EgsKwPWhCvTxTCncQQ7miL7nqFTw
MD5:	A7BE81BD3F3171C9624B479E2898F34C
SHA1:	95E3E6AFA1715443B84F73A2102C49CA4AE51B78
SHA-256:	576479F32754069D496EF9C318D00D421F27E7E5AF48FF6AFE0B07DDE4B4D063
SHA-512:	E40A30DDED3529BECBEC8A789BEF8036D3F6EB39AD35D3DEA61E24D1642FDFFF71ACA4A61F370C097FA7B74C2DE08634BC4F4BA277C3D0761AF73F8530490B35
Malicious:	false
Reputation:	low
Preview:	!function(){function getUA(){var e,t={},r=navigator.userAgent.toLowerCase();return t.mac=navigator.platform.toUpperCase().indexOf("MAC")>=0,(e=r.match(/rv:([\d.]+)\) like gecko/))?t.ie=e[1]:(e=r.match(/(msie\s\|trident.rv:)([\w.]+)/))?t.ie=e[2]:(e=r.match(/firefox\/([\d.]+)/))?t.firefox=e[1]:(e=r.match(/chrome\/([\d.]+)/))?t.chrome=e[1]:(e=r.match(/opera.([\d.]+)/))?t.opera=e[1]:(e=r.match(/version\/([\d.]+).safari/))?t.safari=e[1]:0,t}function getDefaultQueryHis(){try{return JSON.parse(localStorage.getItem("index_ls_default_query")).}catch(e){return{}}}function detectPlaceholder(e){var t="[object OperaMini]"===Object.prototype.toString.call(window.operamini);return e.ie?!1:"placeholder"in document.createElement("input")&&!t}function createPlaceHolder(e,t,r){if(t)e.attr("placeholder",r);else{var o="<div class=kw-placeholder>"+r+"</div>";e.before(o),$(".kw-placeholder").on("click",function(t){e.focus(),t.target=e.get(0),e.trigger(t)}),$(document).ready(function(){$(".kw-placeholder").t

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	1265
Entropy (8bit):	7.706925263725265
Encrypted:	false
SSDEEP:	24:qh/i5jSxy+nQryeYpq2ALI1+cOU0XlkycR+Qs71Iiq1v53jsh6rs8Stk:qh/i5jSxyIQrrYwLzk3Fsl2v5oCik
MD5:	DAF987AD02F4984C4E7FCFE42617B171
SHA1:	4A462DE8D070E214629425CD0F7A61C9F2F9C9F3
SHA-256:	1E0D2B1E749C3458897D0492D0D126EB4C1698E2798CF1FA1C63E9E9C5341B4B
SHA-512:	E0ACC1F1E1150EC11FF85712CE3E896BCB7068E4B322CAC7F11A2CE03D5FA94AED5EF930E69212F7D4212A9AC76242EA7CDC6E0F9AB421E7F77A6D31F0E173F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0..... .......sRGB........DeXIfMM.*.......i.......................................0...........0.....7l....[IDATh..Y.r.1...(.C..!1.)...`.\|a...C..]g..\G.........+sn...4.f{..Xo..5..J.~:..F6..X..z?]b^..=>....1v..=..'...D...{.P{...p..&K.%..{.........p.3..B>.}q..D2/Ws}.~H#....g...T.#..A^Y...C......U..E..n....OqJK/z.......z..Z.4....;..kI..:.p.V763A..2...2M.......Y..M.(....X......$....O....J.Bh............b`n&..5k4P.31.O.Y.a0.?...m.......H..FS.K.GK\......'.1.>.HE....8[^..sf^.}......w.<....O..:...!cw>K.^.....5...... ....m`...G.W.,Q......1]....5.9....=wa>...^....p.m8.hwp..P.........Hq<..h..2N...K.h.k..Q5.n/....E...f..]..m.`......"....BTS.e....7...F.;.....mq...........L...x...`..nz\$.LQ.V..L.p^.N.76.e.....8e.y..dH......J\|z...".d.....,SQ..0..........0.8.%N....BPe_.&..4.t.6..'.kGf....A.u.n..i..@....@.............v.>...2...H.....t;...vv..6.X.p...Qc.6pG...\xw......9f..8>.Ks...K\|.y.F....k,ia.1...Q.p...hB&......Q. .6....x

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 108, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2459
Entropy (8bit):	7.629238516422295
Encrypted:	false
SSDEEP:	48:AztZ4MCGNnXVQxLgynTTPzRBwxXSpouRU+DdJdtdQDtSshdhpsmIxIZ+odp:AoMCGMLFdWxXCDdDtd2tSshzCnIZLdp
MD5:	BE99BBA9643C1FF5D281120DC3D9F952
SHA1:	F106F6F7532D668BB50F85CA1EA5521770436BBA
SHA-256:	5A10E4A50936F06B8A5D0A27F343A4653AFD4EF136F86D10384924775DB03FC9
SHA-512:	121A5415707DD5D5DC95E0520237A02E00764255B68CF43CB2B7FAC5E807C005B0F33036125FE88271D78607BF44487B9B90E15DCA1AAEAAABD3816BC3679730
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l...l............CPLTE.....V.f..s...U.t..h..r...0.g..f..g..n..h..j...3.g..g..g..g..h..i..o..h..g...:.g..h...?..6..=.g..j..i..g..i...9.q..l...I.z .i...C.h..s..h..n..g...Q.~'.f...R.g...L.g..h..h..v...0.f..i...D..9.g..s...D..O..=.k...R..B..D.j..n...:..;..F.l..q...C.s..p...C..5.v...O..<.o..f...E.v..o...<..I.}'.}%.l...S.\|%.t...T..>..M..S.{#..T.\|&..G..C.m..o...=.~'.{!.~(.g...E.f...3.......R..;..@.f...0.\|%..-....o..u..x..w..~'.k..s..{#.t..r...<..2.q..j...3..>..:.n..m..z"..8..5..7...y .y...+.h...)..C..A..G..D..I..6..L..,..N..E..@..J..8..Q..O..;....................................n..c..^.....y..v.......\|tRNS...........X9.!...qha3.........vPI>9%..........................}oICB0**..............~\|dd\XVK........................jgcE@.......IDATh....S.A...M4&.j..{...{..^. ..@0.`C.&.M..iyoWX.n.E.!3~..n...p..y.V.Z.J..g_.8=e..e+.I.......N_6..T..x.B.~..I.........M...Rj\|Y.....q+I.t.0wC]..).w.FK..A=e.?..\j..O5....N..6.......)8,.Pd.ih.i...#...GeG... ..-...2)..!.k.C....e..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	16420
Entropy (8bit):	5.277788807223608
Encrypted:	false
SSDEEP:	384:F8wausvkD02NOw5ihIC8h5hkENZ6v5NeGr:LausMDCw5ihghbkWZ6v5YGr
MD5:	D776BFB1AAE5A93AD826135C4B1C8727
SHA1:	E9EA57885910893E888310D7029AC03F2D1CE813
SHA-256:	3D2D7991FB0A0D332FAF8FD84BCB9875062A8CF768B3C4DC46591BBA79CA1479
SHA-512:	B238A9EE31EC04DAC5ECE2710CDEDF8E8E70B0B5838EDB84E621DABE100B918F9B4BD3A79D61E7FDC80EEED6EB55D07B2BBBF34EF5E4E0A7DB83D7F5B980F22F
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/lib/esl-d776bfb1aa.js
Preview:	(function(root){if(root.esl&&root.require&&root.esl.version===root.require.version){return}var define;var require;var esl;(function(global){var modModules={};var MODULE_PRE_DEFINED=1;var MODULE_ANALYZED=2;var MODULE_PREPARED=3;var MODULE_DEFINED=4;var modAutoDefineModules={};function modFlagAutoDefine(id){if(!modIs(id,MODULE_DEFINED)){modAutoDefineModules[id]=1}}var BUILDIN_MODULE={require:globalRequire,exports:1,module:1};var actualGlobalRequire=createLocalRequire();var waitTimeout.;var requireConf={baseUrl:"./",paths:{},config:{},map:{},packages:[],shim:{},waitSeconds:0,bundles:{},urlArgs:{}};function globalRequire(requireId,callback){var invalidIds=[];function monitor(id){if(id.indexOf(".")===0){invalidIds.push(id)}}if(typeof requireId==="string"){monitor(requireId)}else{each(requireId,function(id){monitor(id)})}if(invalidIds.length>0){throw new Error("[REQUIRE_FATAL]Relative ID is not allowed in global require: "+invalidIds.join(", "))}.var timeout=requireConf.waitSeconds;if(timeou

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 41984
Category:	downloaded
Size (bytes):	13941
Entropy (8bit):	7.982881474100796
Encrypted:	false
SSDEEP:	384:zU1R5QjV0OqZ7FRA5RL3ph1istqo10j+HI1qNv8PEaO:qkjV095w9Zhzq5cuXMj
MD5:	EAB0E9B025E84F5C991D5385CB70BA03
SHA1:	4DEA6DF15BC4DFC3287249105816646A83C1BBCB
SHA-256:	0BE161E3B13B550FACFEBB879013F95F5295961BA9120BA0BDC75836A6779779
SHA-512:	5239BA8FDDAB7020D7A98376608763F5EB4DEB7576F71F7A317D75DAD193D51CE795FE152FC65B3B1FF2311F98306B917FDC1DDB89500B200F703A23180FCC4B
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/bundles/polyfill_9354efa.js
Preview:	...........}.r.H...j..Bx8.Y...b.4.v..v....n.....6.p..,2.s..{.~.......}..........uA.....9....YUYY.YYY..."..Q.....0m.4........3O.<./.%....8gQ...a.@B`. 42..U.F......<..-.y.f..H>..N6...14......M ....h......x...=..N......8.......\|v...a~.9.?.C...?.Q'Od.........d.xuqv..M+.@5C.>.O.s=.b$..W....f..0..;.C.Q.;.yzA...s.9...y'..Y8...[..s.m.s.,..0..;o...F..^..#.$.....<cV.r...ew.e!....\|..W..g..8+.....K...V..Z.e....l{.]t..U0x.....&D:.........y..0OR#;/5.M...Q0{.-fn[MP..& .i.J.d.q..b...(!..g5..,. x.\.......'.?......}..S......A...zd.x..(.>8..{...{..\|....`...4..>.-..)......n...e._..........+.....Fq.:..b...L.4...4..4.h6....Q.\.z.v........(.x..m....\|...Ij.7..$........K$.&.l.=.......nPd"Ge.s..7......].[.F'..S...}.F...cHW...!;..Q.:+..A..8.j.....\.>f....P..a4..[0.s.f..c._..Y...Q..x1.!...b.....X.._.. ...Y.l.\'.F....~....Gq.Oxj.Z...~.z....]....o.....A.........9.I<Lg.`...q.0..A....it...{^..E..I.#w...\|L..b..v...(.......+.X!....j$.j.ir..y..p~?M...*$t.;......d[.0.}...{...Z

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9122
Entropy (8bit):	7.965371172262726
Encrypted:	false
SSDEEP:	192:GS/Sxq1BebzUUg4IAVGIx/bg51jhuBAkpwI+fHgIelbuWe7z:pac3Qv3IAVGS/ephWxpTGgImref
MD5:	168E80F200824FE8EDC80FFC7DB7B0CE
SHA1:	E3F0122378A9298F9762EE1416F38C87DF8091D4
SHA-256:	15CA981D61C5EFF18091B0DC7198A8B2F143F7A3B45716721886A8B23C266C36
SHA-512:	375C0F93BCC220DE8650C26705D32207A752772F44E831E24AF5BFEFFA6A08D28C5E4597397160A67BAD1984F20CCBF30EB4EEFE3BF099F3DDA1C80405744564
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...l.............gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...............".IDATx..}k.].u...s."%+.Eh.5.e...j..m.t..qZ.B..A[....@..r.(....6..}....B..M..6..m..e.!.IL.v..B9j...r.0..{...c....CR.s.y`k....z}.[........q..~\?........q..J....\|....q..KD... .PP`..../`..=W...0..v..^......ONo?v...^......].a..{.,....D.)...$%..H._.@.A..Pq..../\.....2....x....>.s;V......19.i..'.....%Na...A.&..%7.$B..(.....p...._U.E.Y.GL...-.kBp?..+wkV.I...9..)J...(_J4E.42...@H8.6.BA.....i 1....$@.C.k...^f.u..O-.zh..A.@w3.....6.....M....T-..Sg_..V.&....R.\...B.m..$H..l..}.........L...C8....\|.M.....H..Q.,IPHL...`'.x.%Q..4.&.u.."3.\.e........dZVN...?0.....;.q...3........Ku...T=z....U...&1.e.a..p.X.7Fp...A.)...}!....W.......]>..L.......\|.f.X5"...e5y.x....8..Y.[..3...L..>.:!...}^........2....'.._..............A.$#P....#k..Y...[F....[D......l..._d.t@....h..5.P.+].Wmj.<....y...v..\2...J.>+.[.Z./*2..h.....!>.r...

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2307)
Category:	downloaded
Size (bytes):	3762
Entropy (8bit):	5.069041245542247
Encrypted:	false
SSDEEP:	48:XOQLgo0cbnlQ64xjy61cmBWeThKCyaU0GKesdbCMWV8ygTwuKFUBLvgJj:XdN0mbmjy4uebfUwzWqykv+j
MD5:	B17D496C693ACEA8BBB1E74860ED7065
SHA1:	C47004CB2E092BE6E53332CB46769F766EB03F79
SHA-256:	3F5BCEB1DBE71CA462F604DC614AD8797E34CEDAE74162A8F5CE9A516FE33B7D
SHA-512:	80F4051A6BC7600481A3DBB002A60E36DB77DBDE3A1F4BB5BC93E7458C627434517B2CC77925B0091EE7E5EA0C51C5D8C77488FDD302F890CDF9935CB5261814
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/ala-util/md5_b17d496.js
Preview:	define("@baidu/ala-util/md5",["require"],function(){"use strict";function n(n,r){var t=(65535&n)+(65535&r),u=(n>>16)+(r>>16)+(t>>16);return u<<16\|65535&t}function r(n,r){return n<<r\|n>>>32-r}function t(t,u,e,o,c,f){return n(r(n(n(u,t),n(o,f)),c),e)}function u(n,r,u,e,o,c,f){return t(r&u\|~r&e,n,r,o,c,f)}function e(n,r,u,e,o,c,f){return t(r&e\|u&~e,n,r,o,c,f)}function o(n,r,u,e,o,c,f){return t(r^u^e,n,r,o,c,f)}function c(n,r,u,e,o,c,f){return t(u^(r\|~e),n,r,o,c,f)}function f(r,t){r[t>>5]\|=128<<t%32,r[(t+64>>>9<<4)+14]=t;.var f,i,a,h,l,g=1732584193,d=-271733879,v=-1732584194,C=271733878;for(f=0;f<r.length;f+=16)i=g,a=d,h=v,l=C,g=u(g,d,v,C,r[f],7,-680876936),C=u(C,g,d,v,r[f+1],12,-389564586),v=u(v,C,g,d,r[f+2],17,606105819),d=u(d,v,C,g,r[f+3],22,-1044525330),g=u(g,d,v,C,r[f+4],7,-176418897),C=u(C,g,d,v,r[f+5],12,1200080426),v=u(v,C,g,d,r[f+6],17,-1473231341),d=u(d,v,C,g,r[f+7],22,-45705983),g=u(g,d,v,C,r[f+8],7,1770035416),C=u(C,g,d,v,r[f+9],12,-1958414417),v=u(v,C,g,d,r[f+10],17,-42063),d=

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1311
Entropy (8bit):	7.476696629745216
Encrypted:	false
SSDEEP:	24:IvqM1H1dvFkvNb0ItrIa26y1OushKlHBW4G5SkY9bdHg2Goy9J6eXX6:IvL1H1dNkvNIItrq3KhOHc4G5SkMdA2v
MD5:	935CBB3F7D540C2364020FA563F18B66
SHA1:	6C130D6D1CF8A28A6875AF857BA8FD23A78D770D
SHA-256:	5371E9E181A975B1E18C45B29D58962CF311AF82ED9000183B377E81E29F20D1
SHA-512:	CF1CCF54E2D9F3AF5273ECA436B78EAD240CA1A1C576CE6A533BEED92AABC4AA75A8BBC9FBC418B4DB8BFD7B184B2D8B0A9A035FE702B35CD68F1E56D3B69F91
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.......................................................................K.K.."......................................./...........................!1."AQ...Baq.#3Rb...............................-.......................!.1."QABaq..br..................?...)J"R..%)J"R..%)J"R.T..EuO.....)TU...\.9...ho.m!....%n.I..yH$..M...?.+=..d.A..S.2.IQR....z.....eu...0..`.....e.Z.....:...tQJ.STE..C4F.e.qU.....D6.e....(......j,.M\...5..wljl..\5KZ...j.On...v.:...o.N-.Yu.Al....e.v=z.}U}d.^S.k]...3...,..VT9..B.R.+.$..}}.U..eh.c..V.M.,.4.iR8..1..^..}.+.prLv.!1._.R.WT....~.;5Lqr.y..?y.Yv..9o..}I...$!.....oi..Z=.#.t.d..\#.#..1.1TBj2B..}.V.....[IvL...0X.\G%........RT.^.'.w..../.B..>!....u.X..,....t.v......%..qF.b.8..N=r....+..4.....-..........+E.".9...2.....c....%$..L...(.M.`w..M.w...V..c......[).0.O...%:p._p$.._..]...%X.7..c..k..\V.<.)@!......S.....^.V.u6.5.]$..g.....-..;O.....f.l[..n.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (577)
Category:	downloaded
Size (bytes):	2805
Entropy (8bit):	5.324775425927034
Encrypted:	false
SSDEEP:	48:LigR4+hV3AWLFO2mAKp1xDINWcOzbUdG+UgQB76a1HoXf6VA+TEG3pFse:nqo+WpmAKTxINWcOzoBwtH1d3pFL
MD5:	8C0DFBD52087D5A4E4ED8D0CFC0B7913
SHA1:	AB176F70D73AE9DF695EDF116950A564FF5BD76A
SHA-256:	86AAD1B51B12E22F523C6E9B9FAC4F174050988CB3A7C6B55217D7317087B5ED
SHA-512:	05E766AB347FC94636EDC59D122782B9FA2E43C24E441DC923CAF8603611D0DD0DCEB3F860657361ADCE5556B2754D097227526B736F95B1480DB7B3CFCE2199
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/pst-log_8c0dfbd.js
Preview:	define("@baidu/pst-log/index",["require","@baidu/Boxjs-search"],function(r){function n(){var n=r("@baidu/Boxjs-search"),t=n.platform;return t.isBox()&&"main"===t.boxType()&&t.versionCompare(t.boxVersion(),"11.5")>=0}function t(){var n=r("@baidu/Boxjs-search");n.extend(n.versionMap,{"searchframe/readsstpst":{v:42,versionRange:["11.5"]},"searchframe/pushpst":{v:42,versionRange:["11.5"]}})}function e(n){var t=r("@baidu/Boxjs-search");return t.invoke("searchframe/pushpst",n)}function o(n){var t=r("@baidu/Boxjs-search");.return t.invoke("searchframe/readsstpst",n).then(function(r){var n={sst:"",pst:""};r.sst&&Object.keys(r.sst).length>0&&(n.sst=d(r.sst));var t=r.pst\|\|r.psts;return t&&t.length>0&&(n.pst=t.map(function(r){return d(r)}).join(",")),n}).catch(function(){})}function s(r){for(var n=r.length;0===r[--n];);r.length=n+1}function u(r,n){return r<n.length?n[r]:"<"+r+">"}function i(r){for(var n=new Array(r),t=-1;++t<r;)n[t]=0;return n}function a(r,n){if(r.length!==n.length)return r.lengt

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 114956
Category:	downloaded
Size (bytes):	17740
Entropy (8bit):	7.984534833277433
Encrypted:	false
SSDEEP:	384:qE+LyB1dAR0MmANBJpV5aH188fGi2OKOuFmSCOLVoh0J8DbZhJ3a8:mLynWW2L+8EuLLI0J8l3a8
MD5:	5AE5C3F7AE00B6E60F631CD6F70A73A8
SHA1:	8838CA51B9D2F29766504AB6A92A016DB96CC859
SHA-256:	1220193E47BB3FC7BC3F5C920B579B2B9F0D84063C60239B61CF6AA435BE36CC
SHA-512:	1BC0716DD1665CFDFD94B9B3DFD23FB536BA9C42A16926527A04DE22CD4338C1CB816B9A57838B6F3DEB9437D1C6E7C27E5521A6E959C0605D0F6BFBA485B78F
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic-dqa/index_8b281c56.css
Preview:	...........}k..8.._.V...;)..~........nf...a.s..,.iM.[..'.....i.K....G..dWu....8.`D0..F.C...V.....5+.e.y...>....&....hq...sY..Uz.l.<.....!.{s..Sz.y.M._..8...g.b...o./M...J..<....m{I..P=.j...yp..C..W..i.T.7..$.P...m.}z...y.0..s........W..{..0E1.z.)..X.G..s..s.k......M.or...\|....}F:....72.c.o6..t[..k..o..y.T....n.,=...n.`.-..wAY..qH.e.Ea...\,./&d.w....,.$t.6........)..W.).'.?...H^..^.S..M..R.$d..5=.'..R.ID.....}.>...cpw..t.sZ.....7.....4.z...O.....].Yy..h~.~....\|.$.c....z.\..>$a..>.\....................~.G._....\.U~..vw.}z.i.&.E....j..,g.p9[&7.....G.j.\'I.x..y4[/..!...xF.:.(ui..N....x..K.7{.....~...9.8..&S.t"8%.d....M...j.Z.#n...c.)..Xd..].5..........E.d.$.+.i~.A...g....:.P..`...0...n....<L..Ha...\|z.PI.......v..$...-14.S....s6.....x.[..4JL..]...z....VFh..mvL....R..]i.o....<xN."..MA4/......k2..nn.G.%FkX... p.a.~.3.....x..M..,_.{......0...QFd@.S............DiJ.4..3[u....t.{..bj.....<#....../[......3....b.._`...`I..%..7.R..c.MS..X...5A...

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	3293
Entropy (8bit):	7.814775697431077
Encrypted:	false
SSDEEP:	48:yjPQqRmQnmjWttokIQARZBW7B9SCZmpoBMNe10o1vsTSiSW4qo9UbQCSjgan3:yjQsmjWovR/WfvmCBMId10Qc1b6V
MD5:	B2A3BA5BC76044C81C882D6DE5A09CA3
SHA1:	D2C7DCCACC9294AF8DBCDAACBDA924E97170388C
SHA-256:	79128FCE31635E11F615247D454522E554D35005F5A1D5AAF45C13DD1688CA3D
SHA-512:	66C22E57F615661E6F927C54B6D817871B0A38A9D4E68CFCA15340C3139A505CE6300AC6F63FBC45DBA074321C200FCB8474A3DF36DDDCF1BF9357EC50355017
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................K.K..".........................................5.............................!."1A.$Qa..2..#BR3Tcq.................................0........................!..1A..2Qaq.....r.."B.............?....4iB....l[vm.yW...T..~}J.!-3....kZ..H.d.>....Zq...P.(.?7C..)...sJP.y.&.;t.j.H=T...nV.R.x.G..,....K.>.")'.:....nv......f.u....~..S}...`wTO.N\|\|..=..WkM.QKnX.@....x.[&.".C..R>....l...M...Z.....:on.Xq...6v....n............p......g.:...G........_.l...J.R.`...T.....}..1.jD.n'.c.....Q6.r=IK.9R........(.8:.?...D.zR..M.w...@.o.OIQ..nb..=.H...,...q!.P# .'......xr.=.....9.h.\|D....>....<....j...+..B.jv.I).....Lji.QN.2.@.HV...A.=".[.MP.K.dr.....F.4h."#......,.ar.PJ..T.p.....t.s&.eq...p..a.+k..=...#. ,..Q...)4..V..J.~.?.:..\..r..j.....E..$"\.*..Si.y..L...'.......jq.=..."G....7.....fc....Uj..B.$.?..O.6.\|dyq@.Y$..

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	3567
Entropy (8bit):	5.15536673282653
Encrypted:	false
SSDEEP:	48:FL9WHQNGbkf4EiyB6aJF9Mu6gf1fw73ll4QdjcwEx24jgYldG7sDbY4DzFyVRdYc:o+5agF9DU2J2a7vlM4NC83YCf6x
MD5:	97E9694CB9C9FF941D905A4D765F6937
SHA1:	503210B9DA9EEEE8FE9045722A4CC9A1A3275F6E
SHA-256:	1B9FEAB4627851071B3C459481831FC9F1CC8B745B11C7C35A70116147BB9810
SHA-512:	83986608756F87EEE2D3BE2EDB26F9C0CA965183A6338E60625E9CF5AD963F9FAC7F7FCB23309DC880BFA28C1D82D0B07A0A6D2AA075D6BC080FC1D36A6627F5
Malicious:	false
Reputation:	low
Preview:	define("superman/components/invoke",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor)){throw new TypeError("Cannot call a class as a function")}}function _defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|false;descriptor.configurable=true;if(."value"in descriptor)descriptor.writable=true;Object.defineProperty(target,descriptor.key,descriptor)}}function _createClass(Constructor,protoProps,staticProps){if(protoProps)_defineProperties(Constructor.prototype,protoProps);if(staticProps)_defineProperties(Constructor,staticProps);return Constructor}function _defineProperty(obj,key,value){if(key in obj){Object.defineProperty(obj,key,{value:value,enumerable:true,configurable:true,writable:true})}else{obj[key]=value}return obj}.var InvokeServic

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760)
Category:	downloaded
Size (bytes):	2035
Entropy (8bit):	5.187556739815197
Encrypted:	false
SSDEEP:	48:3ih5tI1tvU9fOOLo30K9tlSiz4rsFUCAvb:iS8OOLo30It54rbCAvb
MD5:	D9B4619654A6CDFF21A7DBE25A5AD4A2
SHA1:	89217386F3494EA643DFED03EAC0F5CA2DD5EB53
SHA-256:	729238165FC636EFDA87C5D6B6F3C909DE6CEC43B79B5F444ABD1ADD30B988E3
SHA-512:	D3EEEEBF7CCD67B125093A92B08658DB5F51E3543635862C1B8D852B31FC65F3D96DE484FB602C937CC678711C51DB18A125E2DD0C3C1208332ABBEAAF831EC7
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/ala-util/na/utils_d9b4619.js
Preview:	define("@baidu/ala-util/na/utils",["require","@searchfe/user-agent","versions-compare"],function(o){function e(o,e,r,i,n,s){var a=!1;return!o\|\|!i&&!n\|\|i&&!o.bdBoxVersion\|\|n&&!o.liteVersion?a=!0:i&&o.bdBoxVersion?e?a=t(o.bdBoxVersion.andriod.supportNaVersion,s)>0:r&&(a=t(o.bdBoxVersion.ios.supportNaVersion,s)>0):n&&o.liteVersion&&(e?a=t(o.liteVersion.andriod.supportNaVersion,s)>0:r&&(a=t(o.liteVersion.ios.supportNaVersion,s)>0)),a}function r(o,e,r,i,n,s){var a=!1;return o&&(i\|\|n)?i&&o.bdBoxVersion?e?a=t(o.bdBoxVersion.andriod.supportDeviceLogVersion,s)<=0:r&&(a=t(o.bdBoxVersion.ios.supportDeviceLogVersion,s)<=0):n&&o.liteVersion&&(e?a=t(o.liteVersion.andriod.supportDeviceLogVersion,s)<=0:r&&(a=t(o.liteVersion.ios.supportDeviceLogVersion,s)<=0)):a=!1,a.}function i(){var o=a.isAndroid(),e=a.isIOS(),r=a.isBaiduBox(),i=a.isBaiduBoxLite()\|\|a.isBaiduBoxJisu(),n=a.baiduBoxVersion();return{isAndriod:o,isIOS:e,isBaidubox:r&&!i,isBoxLite:i,browseVersion:i\|\|r?n.join("."):""}}function n(o,e,r,i){va

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5914
Entropy (8bit):	7.886827419988837
Encrypted:	false
SSDEEP:	96:0ER6co82RR2hUUDDPDJDHLHvd0ZPqOhidULyezAWkCokH0l+z:0u6cv2RGrDDPlTvOZPqt+pN4m/
MD5:	717DD539645E8869BA55B703C107EE7A
SHA1:	A1156CB84A51C151F1BB68DEA2E030688F869154
SHA-256:	6B505A3D95C8605160DEE9130EDF6D8CA4886017D33C58D1BB208467F7BD9A8F
SHA-512:	3952EE737622078AAD43C2EF9749FDE4DB3FA6A4FDEF114522AF394FAD16B06EB4CA7E1F1A78AD6A8FE84EF7C36F9DF03942477AAD575702900B46BFB69C804C
Malicious:	false
Reputation:	low
URL:	"https://gips2.baidu.com/it/u=2270825998,2079407586&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2520_474"
Preview:	RIFF....WEBPVP8X..............ALPHJ.........(h.F.....9.....?.........?.........?.........?.........?...Jd..VP8 ............>.n.T...(.T..@..in.\|...y..N.R.0~............v.B..}....6......6...Xk.lC...3Z..X..P.....s...s..)...1pE7A..2".n.3@T..&..=....tz.D.....L.....n...G=.j...b.3M......m.....>U-9(.$N~~...QQ.z...z....g.V../..F ..'....{b..T{.@:....._[.\|..b..b.9z^....T.p/?.....-"..e..5.....-.f@.xE..gd.....x.....^.......kM}R\|&9.<Ak.LUI...3N...lC...."..G=.j1. .,.....UVk...\.0B..O.4.X.d^Q...Hv..4..q.!...6../.v.:.!..G=...9.........U.~{b...k.lQ@...&..@...8..!.<.....=...8.'.4....9.VKOj..%..!..j"l.C.. ..9.....e.@:...!..R..1.\|Aa..1..X.....e.&...'."D...`...\|a.k%..J$-8%..1I.......K..]EU..x^.=n!.^....2.bU.X...lC.......=...,r..z..-. ...r...5..;,/.&.\|.{0W.?O...FdfJ&.~..j.....-.."....o..B.e{;lf.. ..!..G=...#&.h....#...X!..\.....U.X!..B..xV(....vgr....N...;...%;.8...gE...!i...\|.9.#DHAQI.c5...G=...d.P.....lC...D&3...Z.....e.8.....;.6.\.C...):....[..X.D...5..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2746
Entropy (8bit):	7.863005005976925
Encrypted:	false
SSDEEP:	48:1nNUmfi5N3luiEKmZdXuh+LD4A7HyIO8cDZgFZq2SrDvi8mm+Ya:1n2mfkYfrZ9xLUiSIObe9SrDvXC
MD5:	F03B804B4BFB627D871D88C47D53913F
SHA1:	DD0380C72A85E732DBDA718DFE672603C9AA1AA1
SHA-256:	58D230E3F23C1A31EE8C8CE64FCA8EC67F7C560B4C56B1DD8FE18BE2B0192631
SHA-512:	ACF31AF4D83CD40299F9C1ECEC555706E625707904BDD079D9CA2DD388C58DE5ACB965DF79354143061FEBD28292689CCD42CE935A913A9143256170D7340644
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....$IDATx..Zkl\G.....k{.;....I..I..R..W#UU.B......!QD.....U..?@E.B..."...!....MUE...7uU..&.I....c{.\|.9s.{..^..]o.d=w..s...wff.&.J.,.XV..A...0L....p..>#\|F..p".3...F.....D.g........3....'....3....._..O..[V...R\...+@..i....>?..VU(tGee........kj..P_.....r.K'.h:$...$v......H...B.B..3t....H..m..[.E...' .'Nf.j./...(D..!M...\|..E\|.,w....D?........."Q..Rf.>..._X&`.+rb...(...lSl...1Ts.....XXx...C...35AIi.W ..F...@x.L..L<..q%\|jN}...!.G.+..3.}.../.v#. :E...!.L?%.E..aGjQ.@.r.iK. .a0.-.....h...6hD.B.Vb........Y1+o@.9.4.K.&..i..fz...}..3.m.M-.0f[...].?.L~..+.F?...s...}.......P..1...x.&.H..Y:G.C.`.JGX.A...g...(V.t..'d...8e.`pw.z....8.3<....o.....1.P..$...U.aF.....Q.;.o....7 .m.7.H8oY...^8.Y.S.Tjba...K.N'.0...1.&...!.~_w{.........Sjd.Ege.d.3.=S+G;...+*.....>..}.=..f.J..\.V....$...x.B....t.8.]......g..n...t.k(....cg.................9...

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	27406
Entropy (8bit):	5.410183460988742
Encrypted:	false
SSDEEP:	384:A2R1efZ+ZWqzWB0lOxT9yWuqGmkT4t9tyi5REepgHy2lG:3RksWSiTcTqg8tyi73
MD5:	0EDB14C814D6D7BD4879BDF0608EB6EA
SHA1:	303B723B6E95F0A8581B944E43C05E5B8F14E40A
SHA-256:	D4A5FBCDA92EF86A706CB72E0E27143362C6986766DC15A7C6382BE8A894DFA9
SHA-512:	AEDA300AFE8EBB9380A2F911D58E0A03AF8DDA8405D86CA15C2D66C19CCC42DA48920E31B916533339EC86C2C401227D6AB17C39FF8DF5397B85EAE53F8ABD01
Malicious:	false
Reputation:	low
Preview:	define("@baidu/Boxjs-amd/dist/components/cache/index",["require","@baidu/Boxjs-amd/dist/core/invoke"],function(i){var e=i("@baidu/Boxjs-amd/dist/core/invoke");return{"delete":function(i,t,r){var o={key:i,data:encodeURIComponent(JSON.stringify(t))};return e("storage/delete",o,r)},get:function(i,t,r){var o={key:i,domain:t};return e("storage/get",o,r)},set:function(i,t,r,o){var a={key:i,data:JSON.stringify(t),trustedDomains:r};return e("storage/set",a,o)}}}),define("@baidu/Boxjs-amd/dist/components/data/index",["require","@baidu/Boxjs-amd/dist/core/invoke"],function(i){function e(i,e){var t="",r="";."toggle"===e?(t=i.name,r=i.type):(t=i.name.split("-")[1],r=i.name.split("-")[0]);var o=t.substring(0,1).toUpperCase(),a=t.substring(1),n=e+o+a,d=[r,n].join("/");return d}var t=i("@baidu/Boxjs-amd/dist/core/invoke");return{get:function(i){var r=e(i,"get");return t(r,i.data,i.abtest)},set:function(i){var r=e(i,"set");return t(r,i.data,i.abtest)},toggle:function(i){var r=e(i,"toggle"),o=0;i.statu

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14401), with no line terminators
Category:	dropped
Size (bytes):	14439
Entropy (8bit):	5.39806350497879
Encrypted:	false
SSDEEP:	384:C8yC7pmP8vbYb4bmb/cvf7A3hINb2sykyEdUfB267w210:tyC70P88/AjASNBy7X268O0
MD5:	751FE7E5FE82EA32BB1B87BD01D42206
SHA1:	C3C0C256EBAA7BCAEF8FD327F3581060E72B5069
SHA-256:	A841511AFB4DE8E62706255774604847C600C13DF317A5363E1D34828DF8CD0B
SHA-512:	02F154EAB4739B385C79EFE834351FCA83DDB43A9246F4CF9C6B4E552C7F16E9CC6BC1022918FE5D3AD9EF6DA5973B9323CE733E39881A161FE9ECA70DEC6D4A
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/short_video/result_11e6e3d",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Title_Title"],searchUiPcNode["Row_Row"],searchUiPcNode["Row_Span"],searchUiPcNode["More_More"],searchUiPcNode["VideoArticle_VideoArticle"],searchUiPcNode["TagSearch_TagSearch"]],function(n,o,r,i,a,s,c,u,l,p){return m={},d.m=f={0:function(t,e,n){var o=[e,n(1)],r=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o])}return t}).apply(this,arguments)}function u(t){return u="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function u(e){return typeof e}:function u(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},u(t)}function l(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=function(t,e){if(!t)return;if("string"==typeo

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1136)
Category:	downloaded
Size (bytes):	27406
Entropy (8bit):	5.410183460988742
Encrypted:	false
SSDEEP:	384:A2R1efZ+ZWqzWB0lOxT9yWuqGmkT4t9tyi5REepgHy2lG:3RksWSiTcTqg8tyi73
MD5:	0EDB14C814D6D7BD4879BDF0608EB6EA
SHA1:	303B723B6E95F0A8581B944E43C05E5B8F14E40A
SHA-256:	D4A5FBCDA92EF86A706CB72E0E27143362C6986766DC15A7C6382BE8A894DFA9
SHA-512:	AEDA300AFE8EBB9380A2F911D58E0A03AF8DDA8405D86CA15C2D66C19CCC42DA48920E31B916533339EC86C2C401227D6AB17C39FF8DF5397B85EAE53F8ABD01
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/Boxjs-amd_0edb14c.js
Preview:	define("@baidu/Boxjs-amd/dist/components/cache/index",["require","@baidu/Boxjs-amd/dist/core/invoke"],function(i){var e=i("@baidu/Boxjs-amd/dist/core/invoke");return{"delete":function(i,t,r){var o={key:i,data:encodeURIComponent(JSON.stringify(t))};return e("storage/delete",o,r)},get:function(i,t,r){var o={key:i,domain:t};return e("storage/get",o,r)},set:function(i,t,r,o){var a={key:i,data:JSON.stringify(t),trustedDomains:r};return e("storage/set",a,o)}}}),define("@baidu/Boxjs-amd/dist/components/data/index",["require","@baidu/Boxjs-amd/dist/core/invoke"],function(i){function e(i,e){var t="",r="";."toggle"===e?(t=i.name,r=i.type):(t=i.name.split("-")[1],r=i.name.split("-")[0]);var o=t.substring(0,1).toUpperCase(),a=t.substring(1),n=e+o+a,d=[r,n].join("/");return d}var t=i("@baidu/Boxjs-amd/dist/core/invoke");return{get:function(i){var r=e(i,"get");return t(r,i.data,i.abtest)},set:function(i){var r=e(i,"set");return t(r,i.data,i.abtest)},toggle:function(i){var r=e(i,"toggle"),o=0;i.statu

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	1181
Entropy (8bit):	4.994331522837564
Encrypted:	false
SSDEEP:	24:YJyKEirYxgxO8/5+XvLLGiMk5H8pSw6sOqHAHb88P1G:YQKEKYxgjcXvHyk+pVTfHAHTPY
MD5:	A4B1C2716D33F07CAA0ED2A4CE76BEB5
SHA1:	1AD3CA67C37BC58A673A97EF468F1BE0E2138130
SHA-256:	8F3FE6212CEEA9CA5DA7D12F8E0F5FC82BBC256F403BB96E55D6092443981B06
SHA-512:	C52742762BD01AE9541B68451F09F350B8426F5954FC5351FCED92BE0ECD22C188BD985BF4D6284A3755CB363BA9043F5051117530A77BFE48881D1AA269ED10
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/versions-compare_a4b1c27.js
Preview:	define("versions-compare/src/index",["require","versions-compare/src/util"],function(r){function n(r,n){return r>n?1:n>r?-1:0}function e(r,e,t){t&&(r=r.reverse(),e=e.reverse());for(var i=r.length,o=e.length,s=0;s<Math.min(i,o);s++){var u=n(r[s],e[s]);if(0!==u)return u}if(i===o)return 0;for(var c=i>o?r:e,a=s;a<Math.max(i,o);a++)return 0===c[a]?0:n(i,o)}function t(n){var e=r("versions-compare/src/util");return e.isNumber(n)&&(n=n.toString()),e.isArray(n)&&(n=n.join(".")),e.isCorrectVersion(n)?e.toArray(n):"Wrong Params.".}return function(r,n,i){return r=t(r),n=t(n),"Wrong Params."!==r&&"Wrong Params."!==n?e(r,n,i):"Wrong Params."}}),define("versions-compare/src/util",["require"],function(){return{isArray:function(r){return"object"==typeof r&&r.constructor===Array},isString:function(r){return"string"==typeof r&&r.constructor===String},isNumber:function(r){return"number"==typeof r&&r.constructor===Number},isCorrectVersion:function(r){return/^(\d+\.)*(\d)+$/.test(r)},toArray:function(r){ret

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	3421
Entropy (8bit):	5.202004257725097
Encrypted:	false
SSDEEP:	96:6RBZD1yZTMo1iN7l8luRrsQhdjtdA9Q18Jvlg0UL:6RBZpyZTMiiNRsuBsQhToI8Lg0UL
MD5:	4644B1365B341BC21A65B69A93ED92EC
SHA1:	1B2B310663C0D1A550CE21B51D41E0B5B0FFB4B1
SHA-256:	C967C928543BC32A4FF75C26E04C9838BEBF81C5B228E119B54D6E6B002C6E02
SHA-512:	C9D3936F083C6E7B69B66F174A6173CACE88A7E4A9D74B3E2BFB0324C232D87225165DC9D99E4510D6CDC74BCBA5853C64A73AF8932FA187211E735D9C15E15E
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/plugins/every_cookie_4644b13.js
Preview:	try{!function(){function i(i){this.key=i,this.curCookie="",this.lsCookie="",this.udCookie="",this.udData=t(this.key),this.findCookie="",this.type=-1,this.IS=!1,this.support=!1,this.syncAll()}function t(i){var t=null,o=!0,e="userData"+i;if(!(t=document.getElementById(e)))try{t=document.createElement("INPUT"),t.type="hidden",t.style.display="none",t.setAttribute("id",e),t.setAttribute("data-for","result"),t.addBehavior("#default#userData"),$("body").prepend(t);var s=new Date;s.setDate(s.getDate()+365),t.expires=s.toUTCString().}catch(n){o=!1,t=null}return{setItem:function(i){try{o&&t&&(t.setAttribute(e,i),t.save(e))}catch(s){}},getItem:function(){try{if(o&&t)return t.load(e),t.getAttribute(e)\|\|""}catch(i){}},isSupport:function(){return o&&t?!0:!1}}}function o(i){return i?decodeURIComponent(document.cookie.replace(new RegExp("(?:(?:^\|.;)\\s"+i+"\\s\\=\\s([^;]).$)\|^.*$"),"$1"))\|\|"":void 0}function e(i,t,o,e,s,n){return!i\|\|/^(?:expires\|max\-age\|path\|domain\|secure)$/i.test(i)?!1:(docum

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 75x75, components 3
Category:	dropped
Size (bytes):	1984
Entropy (8bit):	7.70986526485427
Encrypted:	false
SSDEEP:	48:Iv8amcF0PfKw7l8OobC/mrmXak4U3wFS7iIqtb:mBMKw7lmb4myKwwUA
MD5:	44F605C261028BDD9750BB87F7952904
SHA1:	DF42265D28D1A1B11BC0FC8DC8D44566A2C71513
SHA-256:	5D4405433E1D8BFC86FCBEA011796FA9CD84BA7E8467CAB42551856B03EEDB21
SHA-512:	06C726F25E602407AF014B6017763BACC0D73163ED2FCC976115C76A1395DEE8EF4F723B4DDA02B0AA841FA3AE1D962014367D23CB4F40964CD6AD507AEED760
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.......................................................................K.K.."........................................E.........................!.1..AQ.."2aq....#....$BU....35DEFRTbr..............................................................!1.AQ"a..q...2............?...F..J.........]..S.Z..8..m.LH.?..)...T:..?...'...&B.i....!$..J3.;......:...7....z:.qR.mM..V..g.......0..C...(.g.u47:sD[.J9([}.=....4..W.j];.........g8)8$...u...ai..i.V...LF.a.>..nw..s.o._/.G.#.l...\_..).Y..I;..mA..D...Q}D..oT.v...8.9=.N...V..q....H...i(.l.@.42.;Z.......w.w.$[.......)$...h ......l..i.+.......J}...JzR.....mM.4.f.)....=..N..u.........4.T.7..g.z..q4>....iXq]..C.(t... ..~T...........Sj.(c..'..5.mr.......GK`..z*..F.v(c.t45..F....s.{&..<..g`~...I.H.;E..n.[..XeO?.'... ..:~8.......J.N..f.c^^...s...:,...~......6.Zj1....{.{.....7.ol.<.[.N....-..(.a.<k.~.h...p?d..D.:..6..I!....E.....<@...

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1049)
Category:	downloaded
Size (bytes):	45410
Entropy (8bit):	5.392346244781981
Encrypted:	false
SSDEEP:	768:KVFd58ImF/1kHkgv/CsBcZ7Z2zPUgB3ydhHUZY91IKcwkzs:KVr58ImcRvqWIdQ+h06fDQs
MD5:	EEBEC197CF9E96AB5DA67286F7867292
SHA1:	0468898F337DD8EB4520DDD4D3B0C3067FA48479
SHA-256:	33DA032DD0A8C5CEE4E04A6DD6A0D0499714EC948BBD11B2907808E24189E15A
SHA-512:	087D36188D2FE8AEAC2E3B035259227651713F447297E297424134E27E6DFEE5CF0C76E18680FA1E3EB09F4B7F05E322CC8D7D30CCC9062ABBEFB26F75F3D672
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/bundles/ala-util_eebec19.js
Preview:	/*. @file ala-util ..... * @author cxtom <cxtom2008@gmail.com>. /../ global __inlinePackage, __inline */..define("@baidu/ala-util/update",["require","@baidu/ala-util/lodash"],function(a){function r(a){return Array.isArray(a)?a.concat():a&&"object"==typeof a?t(new a.constructor,a):a}var t=a("@baidu/ala-util/lodash").assign,n=Object.prototype.hasOwnProperty,c="$push",e="$unshift",l="$splice",u="$set",i="$merge",o="$apply",p=[c,e,l,u,i,o],s=p.reduce(function(a,r){return a[r]=!0,a},{});return function f(a,p){if(n.call(p,u))return p[u];var h=r(a);n.call(p,i)&&t(h,p[i]),n.call(p,c)&&p[c].forEach(function(a){h.push(a).}),n.call(p,e)&&(h=p[e].concat(h)),n.call(p,l)&&p[l].forEach(function(a){h.splice.apply(h,a)}),n.call(p,o)&&(h=p[o](h));for(var d in p)s.hasOwnProperty(d)&&s[d]\|\|(h[d]=f(a[d],p[d]));return h}});;.define("@baidu/ala-util/ala",["require","@baidu/ala-util/lodash","@baidu/ala-util/index","@baidu/ala-util/na/utils","@baidu/ala-util/na/naConfig","@baidu/ala-util/md5","@ba

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 144135
Category:	dropped
Size (bytes):	52375
Entropy (8bit):	7.992876098663769
Encrypted:	true
SSDEEP:	1536:fqDsjfr/15DzArbgrm1vX1wqPc5UwPp/sN3KBVTTdhH:fuy15Dsom91wqAZPp/sKTTn
MD5:	3052DD014EE6F301EA045096C72373F4
SHA1:	7150124369C0E3840C0F53432E62F76CF08B4491
SHA-256:	CDD95295D5A7BAFF3005CFAED26DBB485F2830C8B81ECA1789C2BB0C6B78E5C3
SHA-512:	6FA57BB577D259C59F226A1EB35100737A750DCA86443742A015C9E8C3AA222AEA6CAC8BFFBA87F0CDA5484C1F2113ECE0385A0B8303D2A451D1E64C603494F8
Malicious:	false
Reputation:	low
Preview:	...........iwSW.7.>.B...F6.m&9.......T..T.ay... $.$C(......f.<...1..6."U+..}5.......{. .NR.._..`.}...>...#.....u(..M.....R.P...^..W.+............B~....(.W.b...&.i(f..m..xi..!Q....b.....r..9[.U3...O.....TR...&'..P...g..xU.MV.^.N(..Y...M...w.onz.8it;...&T....Je..6k.b..r~.j..c.R%.f...t...T......[7...K.Z.......].VK.~.W2..Y.LG$.U...+v........L&../....r.Z.b..oi..+....;..hq.P.d...X..%V...>P%.,.K.>[,..1..f.\.M(.!...J....UK...'.._.oD.`2x.Q....I..f....b..Y....>{...6..i...>..L>.k+......`.X........V&.\|..X.4^.(m....&..$....D'.a}i.x....... .;.U./}0S....c..)+R/:.'c...D....\.4..L7.P.1I.-g.....-+..Q...8......7tV.M.l...i[!.R...)y]....Y..f.7.t.~_..dVZX.4 ..5vf.d..:Sz..;SR....$.C......;..\|..l5...3Y.G\...U.Y..c.J".......d.....=9..^.).S"D.................x59.!..\..b].e...!4.~..NfD..K .>b..j.}.Y.NT#.....IU..6..+..6l.nY....M.....c.Z.....ia....D..g..].Vs...~.rF.?.....LQ......'Y.X..Dy.~[!S....erj....p..Y.I.T....+v53Q..X.7...z.....EDl..._....

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (624)
Category:	dropped
Size (bytes):	3421
Entropy (8bit):	5.202004257725097
Encrypted:	false
SSDEEP:	96:6RBZD1yZTMo1iN7l8luRrsQhdjtdA9Q18Jvlg0UL:6RBZpyZTMiiNRsuBsQhToI8Lg0UL
MD5:	4644B1365B341BC21A65B69A93ED92EC
SHA1:	1B2B310663C0D1A550CE21B51D41E0B5B0FFB4B1
SHA-256:	C967C928543BC32A4FF75C26E04C9838BEBF81C5B228E119B54D6E6B002C6E02
SHA-512:	C9D3936F083C6E7B69B66F174A6173CACE88A7E4A9D74B3E2BFB0324C232D87225165DC9D99E4510D6CDC74BCBA5853C64A73AF8932FA187211E735D9C15E15E
Malicious:	false
Reputation:	low
Preview:	try{!function(){function i(i){this.key=i,this.curCookie="",this.lsCookie="",this.udCookie="",this.udData=t(this.key),this.findCookie="",this.type=-1,this.IS=!1,this.support=!1,this.syncAll()}function t(i){var t=null,o=!0,e="userData"+i;if(!(t=document.getElementById(e)))try{t=document.createElement("INPUT"),t.type="hidden",t.style.display="none",t.setAttribute("id",e),t.setAttribute("data-for","result"),t.addBehavior("#default#userData"),$("body").prepend(t);var s=new Date;s.setDate(s.getDate()+365),t.expires=s.toUTCString().}catch(n){o=!1,t=null}return{setItem:function(i){try{o&&t&&(t.setAttribute(e,i),t.save(e))}catch(s){}},getItem:function(){try{if(o&&t)return t.load(e),t.getAttribute(e)\|\|""}catch(i){}},isSupport:function(){return o&&t?!0:!1}}}function o(i){return i?decodeURIComponent(document.cookie.replace(new RegExp("(?:(?:^\|.;)\\s"+i+"\\s\\=\\s([^;]).$)\|^.*$"),"$1"))\|\|"":void 0}function e(i,t,o,e,s,n){return!i\|\|/^(?:expires\|max\-age\|path\|domain\|secure)$/i.test(i)?!1:(docum

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18885), with no line terminators
Category:	downloaded
Size (bytes):	18901
Entropy (8bit):	5.383360132811373
Encrypted:	false
SSDEEP:	384:EJCL8aLtNrhbRd9sxYb0oQgNDjsZxRVzJ8w2H0GcgT0aiOij+zR:KCLPtNplQoQgCxRVl81BcbjaR
MD5:	514584C120ABC0A72EC438A853111A22
SHA1:	C18E79F936D66A12187BAFDB5FB3F41AECD88CA1
SHA-256:	A23CF03E0B4AB99724CF827A849838299395E9003A87D74591ECB3282AD5C865
SHA-512:	2A2F18F842F9A9DE77A0089DA7BB17E709BFC9CD66685E2E7E76C942BD1CA1159A22E0EAE4FE0BFF45409754A4344717D485FD802FF84782FCFE4230D55053D8
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/aladdin-san/app/right_recommends_merge/result_dceae3a.js
Preview:	define("aladdin-san/app/right_recommends_merge/result_dceae3a",["san","tslib","@baidu/www-api","@searchfe/inject-js"],function(e,r,a,i){return c={},o.m=s={0:function(t,n,e){var r=[n,e(1)],a=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t}).apply(this,arguments)}function l(t){return l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function l(n){return typeof n}:function l(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n},l(t)}function d(t,n){var e;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(e=function(t,n){if(!t)return;if("string"==typeof t)return u(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);"Object"===e&&t.constructor&&(e=t.constructor.name);if("Map"===e\|\|"Set"===e)return Array.from(t);if("Arguments"===e\|\|/^(?:Ui

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	dropped
Size (bytes):	2776
Entropy (8bit):	5.131494784687762
Encrypted:	false
SSDEEP:	48:AQvP5MqBBth7zIWHQNGbkf4EIyB6anF9Mu6gNtwDeHyhQMzl9bPe6M:7P5BZ7r+5UwF9XtxHye56M
MD5:	75D53505189528B98177F7441EF4EBB4
SHA1:	F197B8F12BB575A21AEFEE4ABDD29D002AF23069
SHA-256:	E9BCDE96D0B9B312E2E239BEE457A8A2205BEB32D779DC52D8A9D8378C689FE5
SHA-512:	82739CF224785A8BD0896EC8EA7B8D047C417707BB3C0E6B917D9DEC47E9E76AF95F7D633692509C23C49E9C359FF42645D58995741745DAD34FE6A642479671
Malicious:	false
Reputation:	low
Preview:	define("superman/components/csaitab-log",["require","exports","superman/components/ubc"],function(require,_exports,_ubc){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.CsaitabLog=void 0;function ownKeys(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){var symbols=Object.getOwnPropertySymbols(object);if(enumerableOnly)symbols=symbols.filter(function(sym){return Object.getOwnPropertyDescriptor(object,sym).enumerable}).;keys.push.apply(keys,symbols)}return keys}function _objectSpread(target){for(var i=1;i<arguments.length;i++){var source=arguments[i]!=null?arguments[i]:{};if(i%2){ownKeys(Object(source),true).forEach(function(key){_defineProperty(target,key,source[key])})}else if(Object.getOwnPropertyDescriptors){Object.defineProperties(target,Object.getOwnPropertyDescriptors(source))}else{ownKeys(Object(source)).forEach(function(key){Object.defineProperty(target,key,Object.getOwnPropertyDescriptor(source,key)).})}}return

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	8178
Entropy (8bit):	5.302410300113714
Encrypted:	false
SSDEEP:	192:7sr5kveEVuOZNgope+DK7TAM2S5/rhWYH/PLbZ/j1:yGvDuOjLIT72G/FW4HfZ/j1
MD5:	5FEC89F47D0662BF5F9E4E17EEFB99DC
SHA1:	F53BED02CAF8E32C782E2DE3943C4DF55CFFE3DA
SHA-256:	0890B779F3D599DB01C14BCC827A7BAFC4293E455F6FE6B80F6A54C199DFA8F5
SHA-512:	C74304B7FA33BF1848EF260FA9F76A8EDAB15C8CC1B476749F9A39130B39B232524B1F03BB3C7ACD7BE2E345205FCEE28F4F764D57AEBE2FDF37A9E5B13E7DD1
Malicious:	false
Reputation:	low
Preview:	!function(n){if(!n.esl\|\|!n.require\|\|n.esl.version!==n.require.version){var e,t,r;!function(n){function i(n){h(n,H)\|\|(P[n]=1)}function o(n,e){function t(n){0===n.indexOf(".")&&r.push(n)}var r=[];if("string"==typeof n?t(n):D(n,function(n){t(n)}),r.length>0)throw new Error("[REQUIRE_FATAL]Relative ID is not allowed in global require: "+r.join(", "));var i=J.waitSeconds;return i&&n instanceof Array&&(N&&clearTimeout(N),N=setTimeout(a,1e3*i)),G(n,e)}function a(){function n(a,u){if(!o[a]&&!h(a,H)){o[a]=1;.var f=z[a];f?(u\|\|!h(a,C)\|\|f.hang)&&(r[a]\|\|(r[a]=1,e.push(a)),D(f.depMs,function(e){n(e.absId,e.hard)})):i[a]\|\|(i[a]=1,t.push(a))}}var e=[],t=[],r={},i={},o={};for(var a in P)n(a,1);if(e.length\|\|t.length)throw new Error("[MODULE_TIMEOUT]Hang("+(e.join(", ")\|\|"none")+") Miss("+(t.join(", ")\|\|"none")+")")}function u(n){D(K,function(e){s(n,e.deps,e.factory)}),K.length=0}function f(n,e,t){if(null==t&&(null==e?(t=n,n=null):(t=e,e=null,n instanceof Array&&(e=n,n=null))),null!=t){var r=window.opera

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20028
Entropy (8bit):	7.981038335631545
Encrypted:	false
SSDEEP:	384:Fta1ocz3ViQp0JxApAF2bC80GZet1MbHdDk7v3eUnXSSvKYRKdZ:Fta1HlXCJxA5OQZetahMv3hXiYE
MD5:	226AC51819632BFA698C4C56E87DE059
SHA1:	9F20887B142C7B0872EA2341ACFCD599F502738B
SHA-256:	A2E0564685D5852A0C678DB7593254538FF69477F539747E0E4433F29223C7E5
SHA-512:	1982CF9ED36BB404EC7F41F52DC174C7605B93B130B23F505D1E437920A60DA102F7D3E3A1E2AF63D520E27A39A46584E0E31DEE42763787F515174A24390AD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.........f.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD............M^IDATx..y.\U...~.U.[V.v....0..N...Pq...(Q..QpF..up..]@..Wf.......Q.PB..N...I..@....v....=..{.........}.y..R..{...s..,....Q:JG.(....J.._.l...jL...z.3..Jmu..).>5..<..._w.V.....ci....Z.:._/....\......["2.0.\|}.....;....."../../.....\......J.Uu..a..XD..H......GP....J"7........p...g.W<D..P..u.......s.........~K0X.)l..P..y#.).....N\|j.....T.Z..V.....D...o.Ln.!....+.c...G_..0C!-p.p...l.y.... .p)06.Wv...P.j.^/0NU....>.R.....}.$yFU.%z)GJ..Dm..P....,....u..4..3...}......l.....I}.c.7F~P....wB.....^.......P.9...y..Gs......m=.{.:.e..N`.@...h.v_.pw[w..._.}`6E..{.j.%..-.8J.p...a%Y.f./..D."FG-{h<./.D..)G..`....O.-.xEe.UQ.G.3p.L....p..G....yr.%'{D.\|...2.@<;{T..d..."..h....4z.....d3.....8k.i...Qe=............r.g..y....^f.^..m...>.QD.....[.oa.T1....J.Y.c.Dg.b..'...aD!.%l;Jk$.nE8....[..`.B......B.Z~..U.q....s..L./p.[.cKTv.....Kc..$...x.L..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HDBQvXiCR:9QvyY
MD5:	0A587747D63810EB7D0DE54E1CFC138D
SHA1:	CF3924B6B286AFB7619AC8259A6D432D7D370EB4
SHA-256:	A4A028418F044FE1398FBE62116ADEC405648746E2EAF3BE4E4C29DCBB3D5B1A
SHA-512:	2F396B49DE3388C8FA987561D931D14BBA841F384663E9F14778F9CC3E90E68ADFE23E695E69AAF96D2766C8360C678B1D3CA85EE8B3EEDC5820BDEC8FD445A0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlaKp_rMcgiuxIFDah3kms=?alt=proto
Preview:	CgkKBw2od5JrGgA=

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 474, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	516024
Entropy (8bit):	7.967336483300557
Encrypted:	false
SSDEEP:	12288:uNylMxCCUpKC03cJwioHTNnNaO1ZJNFlVRu1hLez:nCriwiYayhlVIvY
MD5:	79DFBEE399A50C4DA5100A9BB1DBEA0B
SHA1:	31606EB0986795C7154459B34952CD1BE93939EE
SHA-256:	DD12D917A7AA3E81111A536D94AF6B0D8DCF47BB39139DA55B46914DEA5017B2
SHA-512:	0E32783BDC94C089674E73D195BC7BEE9D1E318F098F40921F884D20E2748B2EB51E8693CDFA90AC4F3665D19A65ACF12AEA512C1707CBD0926D99659B1AFC13
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Xs.%....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs.................IDATx....$...}.Uu....@..........;\|....aD.u.r..}.SK.+....jj..u/(.8R'#.m.}.E..?.......T.W..\\|...u.....d...2[.2"...D........5._.r...60.u..9...x.C...(4.=&M...1...G..5...?..:.v..;.{..og....?...<......z....u.....(....Chm.#..s...3.g.YR.}.'@4...!...c .Vd^`....)..}..?...`Wd..Q..#".h3F&...;.M...7.k.vCk....]`.st1.S.V..~..J.$..Y.......O~.........h$..m:.Bi.u.G.....^..rf....v....._V:..7......~%.....t.g..c:u(..wW.....+...,.l..)..t....R]Fa}."........r.ie.....L...;..v.......'..36V.i...`...?.(.....f............cw..L......N..3u..}..*o'F..cZ.w^....J. ....0.vL.....^...g.+..'...l........lS......q./.!.>b..T........M..k.....g...R....'....28...A.....K.....D2e...s..rVW.......c.3.^n..U...x}.............U....4....~.......A0.~...q.S.....<.................?.?........y{.^...f.....q...s..:..}...>vQ.....:.$.....x.C......_..

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3378
Entropy (8bit):	7.906510308987039
Encrypted:	false
SSDEEP:	96:1nZY7gjm/vPn7t59ZlUSVjMjs3lkj7OZJE/+i:8ZHlZVjxlbZm+i
MD5:	612169CC36C91DDD3B1F6955EEF781F2
SHA1:	45ABC6DF0B931554E68BEBFEB8F866FBEF3A8B02
SHA-256:	A37B681C56797A3750930237005403EEFF16F51CF4C25B3FBCC9D83DCEEFB4EC
SHA-512:	EB0D394093160F80876113B497CB29F39A3AD4F0007026BACB9EEB98B04C8BA2258BD9CA5C543F60AA3B412AD4E5E321460D7326D6DEB3373BA205980393E724
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/yingxiaoicon-612169cc36.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H.....IDATx..[yxT....d... ....!....Vd.Q[.P.Z,R.Y......T..j)_Km].Z.[Q....J.$.....bD..YB...Lf...$.fy3.f._.\|......s.=..;:............[.4 4 .JA..M"4..#.I...MGh..I...M".xh:B..M"..h.!.C..n<.r\.0.e.3.l./.....f3.%.t......C0m..N...t.!T..Y.p.o.A.U.k.l..Rt.pO..V..;...Y.=..VL..V.6q.n....AJ...4.,..........Y.t16.E....E..r...\....P+&....]........M.g...@.Q.........[..x.^.....I.C.b.J....d..6.U....1:Yy.3.W.v'...M.(p..M.(T5../.L....V..&"[...Y..2L./..4.JQ....[.....+.(..$I#z.J.m........O}U.fl.{'.TE^.M ....mx...Q.r.P{T.;... ..;(....b..Q...u>...k.EQ..D'../.....KD.s..2H.[...YF.p..N.w....]...\....c+.Ba&...#.y.........1J.\}..........8.....~...h4....c...B.......(;..4.. (.....}...E".n}_.Rb.I.[.l..r.........xB........ ..c0e....aA)..9@.!.R...M&.O.MaTE...w.je.D...5<ML.&{\....J..Eg.D...G.XM.C.....C..3.qB.@..2..."....B.}B.`.n..Yb.v...........w.)s.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4085
Entropy (8bit):	7.925373772243591
Encrypted:	false
SSDEEP:	96:1nk8POydIDRiMV0Gva+ddXdJztYk5Yl7kkvcgmvJquw:sy+DRiMnvJ/tVYHMK
MD5:	A6A0831ECD5FDF11B86C9AE6EA945E65
SHA1:	FBA2C5E03C08835A45F50D955FCA6029064FB690
SHA-256:	382F836892F0F4FBE80511D48E87DDF49E21FD85B824EF85D2716E97EDD3E9C4
SHA-512:	EE9F3179E7B48028E4981C3748734F27B958CABFD2A7E8D9D6B141D0E4D17141DD3340BA2BDDE3F798BE12D24B24B9342B7F83A97C3ABDAF5B09B1DE6C46642B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/img/topnav/newzhibo-a6a0831ecd.png
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H...._IDATx..Z...Y....:...h...8..681.b.\.R.J.(..U._...o..y...T.......<.".P.d%..c..f4.Y...w.n..~...=..X......S]}O.>}.\|...-..e.....HA..H.h3!."...)..H..2......x.>"eD.n.RFt.....)#..H..G.#.xX.<.WA.P...Wo..{.P.{\|.../.'..e.....o.y..]........>Q@..]s...+..../.O,.R .?.z.}oV].c.Z6...d..5..MV..P.f../:_}...`..FP.......6~r.\.X.4.H.JX..3k. ..\|.`........12{wyO..~...^PW..7....l.....e.=<.".V.4.#v...o.....n...I..!.V.)y?.g.=k...0..<m.Z..!....b...`Y...%q..B.....-.o..wVsuO....7.z.P...T.?FE_.M.3..jPk....NQ......!.oz.\|...u...5.n.<.E...#9Q......s!n.}.....l=\....D=>....~......K..=..r.......t,..Q.U..........@..2_8Nv<T....D...........Ff.)...W.Z\|!v.B..HB..8.....LJ.^.=\S.bL.H<a bPw....qy..j6$.Q.....ah......r..WvqA.....8.....Z!d...'....wW..uu..[.ncNa......F.....C...ww..t...@.Y......Dc...-..../......T.....}.bl6...-.&y..![..:...............Jd....x?...3.hy

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	2257
Entropy (8bit):	7.672476273503827
Encrypted:	false
SSDEEP:	48:KOT56VFUMOkmIP930/sX0mhkxbu4113vW52a/q7K825:r9LM5mIPu0X0m6u41dq2akKl5
MD5:	1429B14DD1728C3E58D10C1FCD9F37E1
SHA1:	F5179B57AB4F646CE39304E629B23D34D13DE897
SHA-256:	FD5F40DDA8553303A380C9B77D68BED3359760C492552C083CD6718B63359B5B
SHA-512:	A2D3D8EF62CFE62317961478D25573EA9B1C97E770E5C2879D8795A4E1CF144B696D8007E48BABE35E3D0133DD0AF5D5C7ED5144F2C4EADA151FF9446303BB13
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C....................................................................... . .........................................%................................."1..........................................................!.1A."..#2Q.3aBq.............?..........G7.z.F....+.....1*..k.YszB......(.c..f.^.L.....If..,....u.6T..y0..O........-....z....C.Z,+,.F...3..C: .2.".....:...j.9u..t+.$..^;Z.._[HP.T....{."...O....}?....t.aO.].bG... .....5-.F.Wei#...X.;.d._.`.......EW..v..U..A....V..\|...;T.J..e`....K......_A...%..x%...x.........-..8.>1.;&.m..n#j)..jZ.J.{.j[..px....c.rs..G......~.......*<a.-....Z.e.#.M.u...8....2..G..+..0i.5B...J...r..7/..)\|.2..X.9......54..,3-..+\Rx$u.....&.)......x.2q...i.3pk1... ..<.".&xBI4S}..-....N.(.g...!Q.l.....i.T.D... ^+.....9..>F~s.W.%..S.y5.ne.-.i.s)q.\.%....'...w.........6..[.k/je...^.......\|X^...-.Y^19......../.T.ZR...a...bH............E..0U...s...I

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	dropped
Size (bytes):	4446
Entropy (8bit):	5.445498876525151
Encrypted:	false
SSDEEP:	96:ivxiRIdfINmVVzX20Jh+gCscuDjkg1/2x02N6SSfuS/203a:fMfgkjrD5I6i1
MD5:	D9E617F782FA4F4FA3596B2C9C9F7ED3
SHA1:	6D629DC60574097B637A9E6FB342B440FB901A97
SHA-256:	0AF87B59FAEC3FDFEC2A6087C5911681B1A0DC3C08C6B8E0069DA0A5C93A1201
SHA-512:	A7153D493B4FF15BE905E81021CDD5A50CB32DBF5B7CC788F4A0C6AB8FB48BCE8DF63180BF72966D948C6FA33C19035693D366A40F5A53833F8DEE85ED7BBF87
Malicious:	false
Reputation:	low
Preview:	define("superman/components/guide_tips",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.show=show;_exports.close=close;_exports.init=init;var arrowWidth=10;var tipsHeight=34;var tipsWidth=120;var arrowSpace=8;var loginSpace=6;var txtLength=7;var bottomTxtLength=12;function closeGuideTips(option){if(option.ls){try{window.localStorage.setItem(option.ls,"1")}catch(e){}}if(option.red_dot){$(option.red_dot).removeClass(."red-point")}var newClass=option.id.trim()+"-"+option.type;$("."+newClass).hide()}function createdElement(top,left,option){var type=option.type;var txt=option.txt;var newClass=option.id.trim()+"-"+option.type;$("#"+option.id).append('\n <div class="guide-info-new '.concat(newClass,'" style="left: ').concat(left,"px;top: ").concat(top,'px;">\n <span>').concat(txt,'</span>\n <i class="c-icon guide-close" ></i>\n <div class="guide-arrow-').concat(type

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (782)
Category:	downloaded
Size (bytes):	23763
Entropy (8bit):	5.272582803301178
Encrypted:	false
SSDEEP:	192:Yf2ldDwfBy8osmDghvM3l9Om/gpnlpZGzaOUEUKz69pbGDU/U5Pkzy9mK6Z5:Yf2bDwfBxZ5hUlsEGO7U7/UnUZ5
MD5:	9AA906F3D6D2D5F6142635317E9A1CF5
SHA1:	AE942F5528EEF64B366209C05BFACB2E3F70DE31
SHA-256:	C3071D44F3C496178D7A3C7079AC50480DE8C1C9CF950E24CABD1FE5AFBFB87F
SHA-512:	7849A9546614412ACA39CAD3EE7322269617FB49B175F6CD8D712BA0D4866D0464AE6478423A09BD48E4EF7316A30C0C9676419646F6E28BF97C2CF3CE1CFC36
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/Boxjs-search_9aa906f.js
Preview:	define("@baidu/Boxjs-search/dist/components/data/eventListener",["require"],function(){function e(e,n){return void 0===e?!1:(n=$.extend({name:e,key:"default",callback:"function"==typeof n?n:null,promise:!1},"object"==typeof n?n:{}),o[e]=o[e]\|\|{},o[e][n.key]={callback:n.callback,promise:n.promise},n)}function n(e){return"object"==typeof e&&e.name&&e.key?(delete o[e.name][e.key],!0):!1}var o={};return window.addEventListener("baiduboxapp_callback",function(e){var n=e.callback,a=e.data;if("string"==typeof a&&0===a.indexOf("{")&&window.JSON&&JSON.parse)try{a=JSON.parse(a).}catch(e){console.log(e)}for(var t in o[n]){var i=o[n][t];try{i.callback.call(i,a,e)}catch(e){console.log(e)}}}),{regist:e,unregist:n}}),define("@baidu/Boxjs-search/dist/components/data/index",["require","@baidu/Boxjs-amd","@baidu/Boxjs-search/dist/components/data/eventListener"],function(e){function n(e,n){var o="",a="";"toggle"===n?(o=e.name,a=e.type):(o=e.name.split("-")[1],a=e.name.split("-")[0]);var t=o.substring(0,1

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3110)
Category:	dropped
Size (bytes):	37319
Entropy (8bit):	5.531239581896259
Encrypted:	false
SSDEEP:	768:BBi0i7zQgwqkzGkwSpCGPNONeDW2hrnhPh/nvhI:BY0iPRR2jPNtPTI
MD5:	E2FF8E6AE619203AD20E94CAC8DD4748
SHA1:	1934010E70C2C60F8ACB7849162890A3B71B8427
SHA-256:	C20DE70553336D711D9D138238AE7F73015D7ED3E1BA88E395FE0FDF7367AD92
SHA-512:	F60B7AF86CB51C91D5E73F594E47C7FBCB7C2F973CF1B10DB9CDE6060DF4FCC426D68DD2AB08686105E98858B0E5D92DDC087F108690FFFACCE011E90A58CA45
Malicious:	false
Reputation:	low
Preview:	!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define("@baidu/boxx/dist/boxx.umd",[],n):(e=e\|\|self,e.boxx=n())}(this,function(){"use strict";function e(e){vn=e,bn.forEach(function(e){vn.apply(void 0,e)}),bn=[]}function n(){for(var e=[],n=arguments.length;n--;)e[n]=arguments[n];return vn?void vn.apply(void 0,e):void bn.push(e)}function r(e,n){function r(e){if(!(+e>=0))throw new Error("........:: "+e);return+e}if(e===n)return 0;.for(var t=(""+e).split(".").map(r),a=(""+n).split(".").map(r),o=0,i=Math.max(t.length,a.length);i>o;o++){if(t[o]>a[o]\|\|t[o]&&!a[o]&&t[o]>0)return 1;if(t[o]<a[o]\|\|a[o]&&!t[o]&&a[o]>0)return-1}return 0}function t(e){var n=e.UA,r=e.isIOS,t=e.isAndroid,a=0;if(t){var o=n.match(/(android);?\s+([\d.]+)?/);return o&&o[2]}if(r){var i=n.match(/(ipad\|iphone\|ipod).*os\s([\d_]+)/);return i&&i[2].replace(/_/g,".")}return a}function a(e){var n=e.boxType,t=e.realBoxVersion,a=e.isIOS,o=m

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4124
Entropy (8bit):	7.941900090057685
Encrypted:	false
SSDEEP:	96:mGP0xLE5vOBL7UAvyv7xycssuPrZJRA2xuOqoBXD22ahUz:nsxk2BkAav0cssuPdbA2FBQhUz
MD5:	043A050F7462E81DA57DB6EEDC9A134A
SHA1:	39A00258D0ED6B73A115628C6F393DB45A93FDB2
SHA-256:	8DC6727B9A4C50748470BFD172FC712AE1C342D50F53BF6CB8D70AFC6DBA2B35
SHA-512:	7996F250EC2B9FBDD324CFCBBCB0670AD9524B834C6B877C6691CCD48FE386F42C388B5B7B4F64CE395435ED958900A1F9710BB033A0A01C26CE3001817144C8
Malicious:	false
Reputation:	low
URL:	"https://gips2.baidu.com/it/u=3009418490,2083960104&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f110_108"
Preview:	RIFF....WEBPVP8X........m..k..ALPH......3m...."...Q....$...BD..Ud.Un..g.....H@b^75.O..(p.F..1<..m......09.t...27..).5).5)l.)..2KSZ..Ekzt=R.l...\f.a.s.z..y?..".$IUsFA8.....' .....)..q1CVo...I.B&...S..7O.3R[...P.m.q.....@....:........V...;c.I&.J....Y ./ZyJ.p........4G.=.o.WW......A".U\.Vo..}7..x\.....V3.bz..:...Y....x..J..p.72m.N...X.>K..z...,.x....M.X,....6...S.vo.Op......R4..?.-x.z....(..OSm'..fq%/LO..t.{D......\$/...v..4.......KhW..;8...q.BL..-....-.@...?e..j.m&...d...m,...q.n.H..n..s.N7........d.4.3..$,.G.J............3..../Y.Z...M..\..X.M.g.....K.V.....z....Iw......q.x...LE...Ds...XP5...t.8-Ba.<.Y.Z....~g+I}.I1._p.....t2.....zws......\.D..k..8/];9.oe...p...#.`!T.X.#d..%k.F..1.xY...C.D{GTWH.....hk....(..y..N.b8l."(l.8...`...@....,..q4.....O/=..m..^X.F..R.V@.3y3t.y.(..b...Q.["U.<5.%......P....>D.C...b.....Elv.b+\|....,....H. v1.LE.q$.../)..0...,.....m...J+....a#....".(.....ByM....qU.m....`.....8.?]V.]......UQ".cP..n.....,...e...o.Y..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 41984
Category:	dropped
Size (bytes):	13941
Entropy (8bit):	7.982881474100796
Encrypted:	false
SSDEEP:	384:zU1R5QjV0OqZ7FRA5RL3ph1istqo10j+HI1qNv8PEaO:qkjV095w9Zhzq5cuXMj
MD5:	EAB0E9B025E84F5C991D5385CB70BA03
SHA1:	4DEA6DF15BC4DFC3287249105816646A83C1BBCB
SHA-256:	0BE161E3B13B550FACFEBB879013F95F5295961BA9120BA0BDC75836A6779779
SHA-512:	5239BA8FDDAB7020D7A98376608763F5EB4DEB7576F71F7A317D75DAD193D51CE795FE152FC65B3B1FF2311F98306B917FDC1DDB89500B200F703A23180FCC4B
Malicious:	false
Reputation:	low
Preview:	...........}.r.H...j..Bx8.Y...b.4.v..v....n.....6.p..,2.s..{.~.......}..........uA.....9....YUYY.YYY..."..Q.....0m.4........3O.<./.%....8gQ...a.@B`. 42..U.F......<..-.y.f..H>..N6...14......M ....h......x...=..N......8.......\|v...a~.9.?.C...?.Q'Od.........d.xuqv..M+.@5C.>.O.s=.b$..W....f..0..;.C.Q.;.yzA...s.9...y'..Y8...[..s.m.s.,..0..;o...F..^..#.$.....<cV.r...ew.e!....\|..W..g..8+.....K...V..Z.e....l{.]t..U0x.....&D:.........y..0OR#;/5.M...Q0{.-fn[MP..& .i.J.d.q..b...(!..g5..,. x.\.......'.?......}..S......A...zd.x..(.>8..{...{..\|....`...4..>.-..)......n...e._..........+.....Fq.:..b...L.4...4..4.h6....Q.\.z.v........(.x..m....\|...Ij.7..$........K$.&.l.=.......nPd"Ge.s..7......].[.F'..S...}.F...cHW...!;..Q.:+..A..8.j.....\.>f....P..a4..[0.s.f..c._..Y...Q..x1.!...b.....X.._.. ...Y.l.\'.F....~....Gq.Oxj.Z...~.z....]....o.....A.........9.I<Lg.`...q.0..A....it...{^..E..I.#w...\|L..b..v...(.......+.X!....j$.j.ir..y..p~?M...*$t.;......d[.0.}...{...Z

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	4446
Entropy (8bit):	5.445498876525151
Encrypted:	false
SSDEEP:	96:ivxiRIdfINmVVzX20Jh+gCscuDjkg1/2x02N6SSfuS/203a:fMfgkjrD5I6i1
MD5:	D9E617F782FA4F4FA3596B2C9C9F7ED3
SHA1:	6D629DC60574097B637A9E6FB342B440FB901A97
SHA-256:	0AF87B59FAEC3FDFEC2A6087C5911681B1A0DC3C08C6B8E0069DA0A5C93A1201
SHA-512:	A7153D493B4FF15BE905E81021CDD5A50CB32DBF5B7CC788F4A0C6AB8FB48BCE8DF63180BF72966D948C6FA33C19035693D366A40F5A53833F8DEE85ED7BBF87
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/guide_tips-d9e617f782.js
Preview:	define("superman/components/guide_tips",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.show=show;_exports.close=close;_exports.init=init;var arrowWidth=10;var tipsHeight=34;var tipsWidth=120;var arrowSpace=8;var loginSpace=6;var txtLength=7;var bottomTxtLength=12;function closeGuideTips(option){if(option.ls){try{window.localStorage.setItem(option.ls,"1")}catch(e){}}if(option.red_dot){$(option.red_dot).removeClass(."red-point")}var newClass=option.id.trim()+"-"+option.type;$("."+newClass).hide()}function createdElement(top,left,option){var type=option.type;var txt=option.txt;var newClass=option.id.trim()+"-"+option.type;$("#"+option.id).append('\n <div class="guide-info-new '.concat(newClass,'" style="left: ').concat(left,"px;top: ").concat(top,'px;">\n <span>').concat(txt,'</span>\n <i class="c-icon guide-close" ></i>\n <div class="guide-arrow-').concat(type

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 24739
Category:	dropped
Size (bytes):	6947
Entropy (8bit):	7.970456568095279
Encrypted:	false
SSDEEP:	192:vkWW1kHxipyLhnIWW3roNfWiVrRH/Q5RA2rC19gg2:v0qHxipydnIsxoK1ig2
MD5:	961C9CE62E5D86AE5D77D62CCADF3F5B
SHA1:	EEC395EB335457E30C60E564BAA6B5659B1475C9
SHA-256:	BA6A7EF7FBA97CB16C2B66FB9B47D534C4931A5591490A1241DCE0E2292D30F6
SHA-512:	D7E65A63444E412C524EC0B60ECA1F4734CC2C2BEA7779C29027C246A5FEC9330B4D1903577B8CF2AB5128AABCFCE1B2374F1D0FF5414E03B5082AEF7ED00547
Malicious:	false
Reputation:	low
Preview:	...........<is....+.........!V.e..(.&..#).....8.....).Uv......l.U..v.V.U.l%Q.&.F.....u..3....{.?...x....u.tG^.;...}.q..Gc+Xaf..W:.....R..J.e#.k.....6.W..0v..8.km.>..5.R..A..<7.(w-.ny..j..;0TCH....bA..{..#.wC.u...hw`$.[.b@...........6..B..xt..:.]?......ckS.8...........[......:#.f4<...G.A]k.>....uJ....N..o.7^.....G=.s..........0(....S.=3f1.L..I\9....-.\|..{...2.....).F.c....o.6....R+...qk.5... ..4..N..\|..p....}..\.7...........G.....P....9.Ti`[.M....z.PH..;..4...0.t. a).5/...kfJ.<k@.(....a)j...86..F=.t...9jW..@...K:..J,.fT..gh..~d;.D..D..;....^....2...p..z#X f......p..h.]e...SsP..]..@...S.@G.^....4=.n.....AK..~.IF1I.*I2...2+......2.+.W...~...[.83....z..b.K.P+C......m.....l..5..6..Qy4.'......$V..Dy...,D...."..#.....i2..y.G,..C.4.......a@.+]'`....f.5.X'p...(J../n<y.'....O~........6....Yc.gq?..........Ohp.b.^y`.N_...C.\|....AlSw...M.[.O......"C..z. ..;;..0.0..Vg....LS...........u..:....8..6.....NW.@...w....F..<...w.......;..n1...>....t.n8].?..x

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20520, version 1.0
Category:	downloaded
Size (bytes):	20520
Entropy (8bit):	7.991166231679419
Encrypted:	true
SSDEEP:	384:amvs+qjFIUwEpUP9QM8V16+lrKErAKuP+6GboEN7LvXxNCk:fE+UFICs8VLRfwP+6QN7P
MD5:	FA013548A97A0A659FB78863FB5DC76B
SHA1:	1E2AF1C20BC583B3AC32E980633432369661DA07
SHA-256:	743585BC2EE2F1B9437CEB021DB6136C965CDCBDB4EFC619E1F6073092B9954E
SHA-512:	F9109CD68DF4876D1C92FE10A5FD02AE7D9DBB3409E881856B8FF140CF914D663D1980D5B44957EBDF31B4ADF3433CE33BFD77A8B1B3DB271C865330AB98269B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/font/iconfont-fa013548a9.woff2
Preview:	wOF2......P(.......x..O..........................T.`......H..w.6.$.. ..R.. ..g..R...u.....n=Q..U...T......1d..M.w!#....+.....pv\|.;.D.y..$"}L..?....,5Mk`+..n<.)r.s.L.6.)"+~P.....5..x.5..$93.b.....I.&.O....P\|P.RL..O......vKm..K...[..`<.!{.....=.Tu&.6.u.)...9..6.<6J&$.U,.......[$.....1.Q.......F.LR0.....bb...&.......`..K.......m!S..$....k..v.........N.)..~.\...`....8+b.........ey......&6............;.KJ.u........Bi.X.x....{C.....%[2.,v..).8)P.$Y.....N...=.!..C..e..H.&....<%\.......wf....9\.j....}......D.J..g...f..... q&.Q^..A.@T..50...iX.0...yVBZg}7.....h.f.?{..5.D...^xY.&O..7K/...[.e1D-...3....f..-.h..\"...r..:.e..@.....F...((...uk..M.=>C<....E2\....I..^4.."N... Y0..vs.'.-...$...(....6%....,.;?.E.J.P...X.Y}.....A.......n<.. ...........4!.%..{.\|bp.I./.....t....~...j.......\|......Y.G.I...\|..:m.K....&...+..u.."...9.m.M.z,Y...+...o.Uk..3o..).f.0j..#...4.I.......Y.Vm.5.W.V.*.J..S.B...rd.)C.t.R$K.(A.8.bD..)XVTMGWO...Hp. T..I...`...x..PxL..".n.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (500)
Category:	downloaded
Size (bytes):	8919
Entropy (8bit):	5.287664464765285
Encrypted:	false
SSDEEP:	192:JGaOCpboPyFJwH8vP/FFfUM6Goib0/LGlE51bV0EGkM6GyK1Ntp1nJTeWoq:iC2a0mfUM68bOGlE51bVHGk9GygPl
MD5:	4FBA3971CE850C09757774298F8185ED
SHA1:	D0C5328052F97F019B71C10C1820510A47F7194F
SHA-256:	4030AEBC5B377E798FE7FFA8C89704FD93A99DC5F010C7B4E95CA536307B1B64
SHA-512:	F27FDEE984D98E03BF027CB8BDAC49E6A03FC64AAC83C9D5CAC10BE1F4DB75CE1A962B1E4929BA4372BE6767686CCC440AE864F391B10A2B158E459139AE24C9
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/components/login_guide-4fba3971ce.js
Preview:	define("superman/components/login_guide",["require","exports","superman/lib/event"],function(require,_exports,_event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _createForOfIteratorHelper(o){if(typeof Symbol==="undefined"\|\|o[Symbol.iterator]==null){if(Array.isArray(o)\|\|(o=_unsupportedIterableToArray(o))){var i=0;var F=function F(){};return{s:F,n:function n(){if(i>=o.length)return{done:true};return{done:false,value:o[i++]}},e:function e(_e){.throw _e},f:F}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var it,normalCompletion=true,didErr=false,err;return{s:function s(){it=o[Symbol.iterator]()},n:function n(){var step=it.next();normalCompletion=step.done;return step},e:function e(_e2){didErr=true;err=_e2},f:function f(){try{if(!normalCompletion&&it["return"]!=null)it["return"]()}finally{if(didErr)throw err}}}}.function _unsu

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	114
Entropy (8bit):	4.514321014928168
Encrypted:	false
SSDEEP:	3:F+wzK/QgZsd3RlAXHEDvFpzNNFrRlAXHMhen:Fftmu3RlAXHEDfzNTrRlAXHyen
MD5:	D8249C46AA6788C1CA336401BB06624E
SHA1:	5E163898E06BC8B4451BA22CA76B02DDA553EEC4
SHA-256:	4D0E01F75F17C3C2C2C409AA50BB77579FB15AB5D2A0F0C96B655603CF35AE24
SHA-512:	A51FFD21C5861C0D1EADBE4215740AD166E0514DEE42AB5A876E0108BA3A748A797701ADA0D9D5E8434C681514DF52D77A19A067B7FEC2DEBB83BED7D28E29C0
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/plugins/bzPopper_d8249c4.js
Preview:	define("plugins/bzPopper",["require","@baidu/guarantee-popper"],function(e){return e("@baidu/guarantee-popper")});

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 154338
Category:	downloaded
Size (bytes):	15052
Entropy (8bit):	7.976805380394672
Encrypted:	false
SSDEEP:	384:FhsPTUtm9rZ/wht+cj4r+Aeh5yldBHc8BMvWA1GclysBVqivkG52:Fq7t/M+3rZHdBH3Mu8jNJvkT
MD5:	E3309C160600EA398783CC15D9982EC9
SHA1:	52BAECFA596F4C0E7823E5C0884989BCD1510F63
SHA-256:	FF33EF2E13834CB9CCA921F1962F0EAFA717AAC3C8E690E69D6EBBCD2B4C7088
SHA-512:	37E795726BFABC563AE6B7232461BD8ADECA992BDFAEF71D5A40C651E2611426097CC743856DB91D0DC82BEE00D9C695D9C6CBD4A7CB287963B0F92A8F418279
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/@baidu/cosmic/tokens_6daf5cab.css
Preview:	...........}.......F.............lM.Z.......$A"...A..}...s..8H....x.\|.8..........~.=~....{{zyY....\|.......lg.C<.....a......[....6.hp..6.f.Dc.wj...9.s...\|.XDc......qd7..i...rY.f.f=...../m.q.t.x.....]...>.$.w..........WG:.S>.f...wY/.9..%..6{:..>_7.n.p..f..}.......{H...u.}..).v.]..>....>.6!.n.Ky.[n.A..y{.3.c..n7.Y....2].ga..X..r5.K.....Y..Kp....^..?C..6L2.wi.w.4a...<...x.l.X....]...h.a.K.p.....%.%.]...0..^qt.......,..^/......C....~s>.....^{p..r.G..N..f.2.G]&..y5n.n.e}X..t........x.R..]..\|...n...fK.]V..3t.......t7..`..i......zZ...D.[..f3..\B.5......~.oxl._.N.&.0......Ah.a..h......]....D.}.w9..W.`./...v.."4.ax.-x>....a......D..w..f..6...6..j.vO?.....K..i..X'<..&...n..a.....Q7..l....f;....../.}...-<.?....]...u.N..=...t.~..=...u.^..c.......p.{..uu....>d..6~......~p......5.B_...j=.j?.K0[.V..>-..FK..N....1.`..[q~.....\|...j7...v.5..\|......,N.Mh'...^...5....-.jt}7...l..q{v.>?........V..a...>i..s0T?...Z.ZZ?.w..B.~....nB..h....]..n-....W.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10328), with no line terminators
Category:	dropped
Size (bytes):	10340
Entropy (8bit):	5.328732566643217
Encrypted:	false
SSDEEP:	192:l3twJvCp3C3XcCvPyPMZEjC62MMSabY7OmjBWbxqk:SvCdCnX8SEj52OacPWX
MD5:	8FF2F8BC66DB60D33D1C56D68A7EC2BD
SHA1:	211CD1EDB4DA52FD9CD9045F7D55CB292E3E7563
SHA-256:	05DB2A97B328BD9A89E60BA8349A134F242F8CDFC77FEDBC3FACD6B625FAC32A
SHA-512:	C704492A3217BD9D8FA3139C3B32782CAB9C35E763EBDB44736376BA396147B3B403B6E8497D5294CF077081A61D5E76591C1FA62FFD18B1E1C9AB4501640E5B
Malicious:	false
Reputation:	low
Preview:	define("molecules/app/page/result_2c2d38e",["san","tslib","@searchfe/inject-js","@baidu/www-api"],function(t,r,o,a){return u={0:function(n,e,t){var t=[e,t(1)],t=function(n,u){"use strict";function s(){return(s=Object.assign\|\|function(n){for(var e=1;e<arguments.length;e++){var t,r=arguments[e];for(t in r)Object.prototype.hasOwnProperty.call(r,t)&&(n[t]=r[t])}return n}).apply(this,arguments)}function c(n){return(c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(n){return typeof n}:function c(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n})(n)}function p(n,e){var t="undefined"!=typeof Symbol&&n[Symbol.iterator]\|\|n["@@iterator"];if(!t){if(Array.isArray(n)\|\|(t=function(n,e){if(n){if("string"==typeof n)return f(n,e);var t=Object.prototype.toString.call(n).slice(8,-1);return"Map"===(t="Object"===t&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	11650
Entropy (8bit):	7.950631763122218
Encrypted:	false
SSDEEP:	192:mAIjce0pWbj6CpWFnTpogSEkCaPex2xoGSrxCcUg1e1mxRaaHnZFsd+msBSjYCXv:fIx6CpgnTpk9BjwCc41mxR7nc+bBkYC/
MD5:	E7B2A59ACAD40AD516B9940EE670080A
SHA1:	06869020C99A7D136ACDB7BAF7F8145111917D9F
SHA-256:	7A0146AD80CB43291B348371A2D0C87583EF653FC8768821216A6870DA2D9A59
SHA-512:	ABB1E94691FED7E66E6CDC74B9BDA63A72A35BDC43771CE82A3339AE7D0343DCBB77522E674BB11ABD3531AADB3F9DBBF39FC3C9B398C7AF01B6F10ADE197D49
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................N..........................!1.."AQ.aq..#2R...Bb.$3CSVr......D....4c.%TWdt...........................................................!1Qq.."Aa........2Bb............?..Z...C4....U..?$...,.n(..M0W.Q.D.-..Q94) .....i.U.N(.<...AKm$.O.8..(....F.<...TT3G@.P..(P.B...X..B..(.E...Q.P.h.G.T..h....G...0(6...m.rPs.Q.@RT2(.ta:jt.M...V.vcm8........Y.}........PS.c.X...>u.I#".J.9.c.x)f5x.j....yC".0.b..)..........Vh... +4.NE$....<SY...M'...y..i x..h....@u.P..G.M.......AB.(.@.(b......Q.@....h....&.E.....E.B...,.I..z.y...L..$v..*r.SU..`..@I..E.(..iA@.'q.$.^....$.S`.p..v...JM;.....D...2..CL..J.....j.h}W...../.(.@h.W.....5v..._.P..._..........Z.y2..M8.B......c.F)~.(..,..U...9....t...!_$4.&..%...!I...3..k<bI...@..-+.(..P.I.[e.nL[...Hm..7...H...r.J.\...d.).mq..v...q..>hf...{.=9

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2315
Entropy (8bit):	7.841930881932477
Encrypted:	false
SSDEEP:	48:1nvgSx7grHEEN/2fOdGWgyBcQ6L1YbOrKPntuRo/9Bbf9:1nYSarki2mgOcPeOrKPnt79
MD5:	889054F349B43513BC7E68D8B6F1C515
SHA1:	41A99A134FA7F41EF75C43BD0ABFEF37985A3274
SHA-256:	2DBA92AFCF4535F74B5B8BDB81014E583A5BF9C9A98B803F157B0C3E5C997109
SHA-512:	D5C516C3AAF4C05BAB3604A9E7B6281C665EC48ED2D80DB9C41D7C9A939FF95083F76A6B3FA760753CA8456D88CFA126265CCC2C0BC3749410BAB38727F3EDC4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....uIDATx..[yl.E...=hA@(W[.r4r....... ...W.......A........9..H.Fb..,(rU.+.h)r.C.o...W.......b..fgg......73.\|.U.....p......2&P (.z.@.A.A..G.2B........z.(#.xP.A.A..G.2B....ex.z\..._J^.RX".............gb.0..FqlR..c36..[..h.`.O...9e]...~..U...z5..v\|..\.........2o..W,k.wV......&.b.@ N_b....H........>BB...]WW........J.dw".1D....c..\|..x.v...4.w.\|.X..9..0_...V..z.....{K.X..+......\|M.y.5..bw.25;p...m..QO.-.r.(+vH...:......-<..3 .....Qh..\|..._o..o.....-..=.3^x.v..0#L...&...(..T.F.....aP......X#.eG..p.-..m..I^l.......... .RZ....h%WL\..=X...AGC..@`...A..5'.5.$&..E........-..;F.5.5n9TN.+7....{..H#......P.%..V..#..wx..E...~...fg..=7q`....B\.'..l..6.;...<.......`m..0}..vu.\i.ZI.....H[.j..E%.,...b..O.O.c.S...3F...1.,..,..T.h`.....n.......@@,.29{........G.(.R....cm8.c..9.....D..O.!....DB3T?..0./..9..`..g.......[...+!~..y..4[....H...

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	52422
Entropy (8bit):	5.2986785729858425
Encrypted:	false
SSDEEP:	1536:jmWcQvlmTDgmWMQv7mnCgghQVUJYwq+fFfEoF4HvOSF:MtUq7
MD5:	DDDDE7CD4E229228869FE227B2A42929
SHA1:	E3FB95448DC996094F9958FAFE724AE07FF55384
SHA-256:	A97216D890BD787972C5F1A2621443DD7DD3A6530D31D62ECC1B8DB96A28D382
SHA-512:	218D3802086B24E32FEE81B557E18114283877F1FE387B1FA4F96F40C8EE3F4CE130280B25D94529EA03B08D3A62CC3E14B0AAB6D39B84530422F21A968FD6EA
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/ubase-dddde7cd4e.js?v=md5
Preview:	jQuery.extend(F,{unique:function(){var uniq=+new Date;return function(prefix){return(prefix\|\|"")+ ++uniq}}(),mix:jQuery.extend,inherit:function(){var args=Array.prototype.slice.call(arguments),subclass=args[0],subpro=subclass.prototype,oinitialize=subpro.initialize,initializes=[],index=1,superclass,superpro;while(superclass=args[index++]){superpro=F.isFunction(superclass)?superclass.prototype:F.isPlainObject(superclass)?superclass:null;if(superpro){F.isFunction(superpro.initialize.)&&initializes.push(superpro.initialize);for(var key in superpro){if(superpro.hasOwnProperty(key)&&key!=="initialize"){subpro[key]=superpro[key]}}}}if(initializes.length){oinitialize&&initializes.push(oinitialize);subpro.initialize=function(){var args=arguments,idx=0,len=initializes.length;for(;idx<len;idx++){initializes[idx].apply(this,args)}}}return subclass}});jQuery.each("isFunction,isPlainObject,isArray".split(","),function(_,method){F[method]=jQuery[method]});.F.module("superman:superuijs/util/tool",fun

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5357)
Category:	downloaded
Size (bytes):	144135
Entropy (8bit):	5.818354811349155
Encrypted:	false
SSDEEP:	3072:0USvc7JPopxamEUcaAVkgLVo6fgWczcA24Vvgg0jwGrAoYdfGrLKxPzsQnYuhgEb:ykWpomEUcaAVkgLVoSz424Vvgg0jwG8P
MD5:	63487D8C50E44137F8B6CE2A04407F8F
SHA1:	FD76921A0C4BAB77264C2D8975F9923D3A35CD5B
SHA-256:	77DED67F98C3F5E5B0BCA2A61233F5253C4B102B9FE684B0F132621599ED0290
SHA-512:	C2E75E398C1D9A54564D961578C7EE7FF344664B731231F811367EC4E22D84818E9AF761E7BB47F6C7DA835158E62CC33C729D6A826C1773BD79B3A3637A1847
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/aging-tools-pc_63487d8.js
Preview:	define("@baidu/aging-tools-pc/dist/index",["san","tslib"],function(n,t){function e(n){if(o[n])return o[n].exports;var t=o[n]={i:n,l:!1,exports:{}};return i[n].call(t.exports,t,t.exports,e),t.l=!0,t.exports}return i=[function(t){t.exports=n},function(n){n.exports=t},function(n,t,e){t=function(){"use strict";function t(n){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n.})(n)}function i(n){if(null==n)throw new TypeError("Cannot convert undefined or null to object");for(var t=Object(n),e=1;e<arguments.length;e++){var i=arguments[e];if(null!=i)for(var o in i)Object.prototype.hasOwnProperty.call(i,o)&&(t[o]=i[o])}return t}var o=e(0).defineComponent;n.exports=function(n,e,a){for(var s=function(n){var t=[n];return"function"==typeof n&&(t.push(n.prototype),n.prototype.constructor&&t.push(n.prototype.constructor.prototype)),t}(n),r=0;r<

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	4.577474718943218
Encrypted:	false
SSDEEP:	6:FqzWysmHTMoFrmWFM4xYXtdrrzWyUzWysODfzNYf:QzWJmHLrVxsrrzWRzWJOO
MD5:	8F1A1AD324F5F01176DD1729311CEBA7
SHA1:	6D02E80756552FB8F7C7394149C985A50B8D2F19
SHA-256:	CC88761A99C4F2D4C09F5F2465E27FDDA43E56BF46EC8F2DAD94EB56D9F7991A
SHA-512:	51F5D357A4322FFEC8F85415FB3E2512256061A0A3040F860839D303738A6276AEF4D7DCC32AB938CB4BA1DC245C3B8E0D0C5AB80070A391D9DC705CCD15F79B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@searchfe/assert_8f1a1ad.js
Preview:	define("@searchfe/assert/index",["require"],function(){function e(e,r){if(!e)throw new Error(r)}function r(r,n,t){return e(r==n,t)}var n=e;return n.ok=e,n.equal=r,n}),define("@searchfe/assert",["@searchfe/assert/index"],function(e){return e});

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23413), with no line terminators
Category:	dropped
Size (bytes):	23413
Entropy (8bit):	5.721445374843312
Encrypted:	false
SSDEEP:	384:dUOCXCVrVLARlEQUAS6CGDav32X9B/5xpqMv6ODiBYfSXgVwlwtmgOHV:pCXusPUASdvChv66ugO1
MD5:	2605FE7194E0360EA9F156C4347B0030
SHA1:	A93841213292CC6E75544F4559D42B0CE1AB063E
SHA-256:	374C6CBCD4C2F5918B9F401C120E63C6043F0DCEE1BCBB47D810C42B404B7316
SHA-512:	4440412FBE9B474EA040449BA70A4130AF9A786309B719A4E689817662A2E7B38550C57FBF025DCE8C115A4D03E38A162C7E0B6BF8AEE4F46A519851FF8125D4
Malicious:	false
Reputation:	low
Preview:	define("molecules/app/head-tab/result_1898ae8",["san","tslib","@searchfe/inject-js","@baidu/www-api","@baidu/ai-search-box-entry"],function(e,a,i,o,r){return c={0:function(t,n,e){var e=[n,e(1)],e=function(t,s){"use strict";function c(){return(c=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e,a=arguments[n];for(e in a)Object.prototype.hasOwnProperty.call(a,e)&&(t[e]=a[e])}return t}).apply(this,arguments)}function l(t){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function l(t){return typeof t}:function l(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function u(t,n){var e="undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(!e){if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return b(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Map"===(e="Object"===e&&t.constructor?t.constructor.name:e)\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	143929
Entropy (8bit):	5.227244873914862
Encrypted:	false
SSDEEP:	3072:Jz1IL+ugS+yLvGJuJC8od+6f4CupVOkMKV:e+GXC8oHACwMKV
MD5:	EDB203C114D8E1115C869CA443DD6E48
SHA1:	525BF4344984E7AB03085DAEBB95B0D0E55FBBB4
SHA-256:	AC301A9D0B4250646CABF4E9E56204D09AF518367EED031562360D0F0CB9D733
SHA-512:	F9A78CCEA9B028D14016BD6DD13769FC25C569E3C4FD7EDE8DE90BE36BFA973F6A5354696B2A0D8C90286D161FFC49BFE75958FECF0E23E8393351EE707F29D9
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/lib/jquery-1-edb203c114.10.2.js
Preview:	(function(window,undefined){var readyList,rootjQuery,core_strundefined=typeof undefined,location=window.location,document=window.document,docElem=document.documentElement,_jQuery=window.jQuery,_$=window.$,class2type={},core_deletedIds=[],core_version="1.10.2",core_concat=core_deletedIds.concat,core_push=core_deletedIds.push,core_slice=core_deletedIds.slice,core_indexOf=core_deletedIds.indexOf,core_toString=class2type.toString,core_hasOwn=class2type.hasOwnProperty,core_trim=core_version.trim,.jQuery=function(selector,context){return new jQuery.fn.init(selector,context,rootjQuery)},core_pnum=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,core_rnotwhite=/\S+/g,rtrim=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,rquickExpr=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,rsingleTag=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,rvalidchars=/^[\],:{}\s]$/,rvalidbraces=/(?:^\|:\|,)(?:\s\[)+/g,rvalidescape=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,rvalidtokens=/"[^"\\\r\n]"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,.rmsPrefix=

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 75x75, components 3
Category:	downloaded
Size (bytes):	1009
Entropy (8bit):	7.212644508879691
Encrypted:	false
SSDEEP:	24:gvqGjmUXTyUOQDUKydPxVQFxjHMQg2QUHkv9Z4Z+mqzC:gvpjJyUOFVDQAJM+NzC
MD5:	9F305385B56A95F7648A3911D5CC8F84
SHA1:	767881A09E808C6897052A71956D0E3AC8E92E7B
SHA-256:	A325A75B335B47C1D879249D737AD193CA9641C0AA2CB43486EB2B9646B2CD8A
SHA-512:	FA775179410203E6D70E66A1BD7E8D8CCE16CA3C1CE9AA024683BD2920659C28648ACA2A1F8F5F4D99B5B3F9C0B4A5B1853C613FF4186D92EEF2A1A7F49B4DF2
Malicious:	false
Reputation:	low
URL:	"http://t12.baidu.com/it/u=3057315626,2433500578&fm=58"
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................K.K.."........................................2..........................!.1AQa.."#...2CRSqr................................#........................!1A.q..a.............?..z..." ...""....)R..+.{:............Ym....$....W.R..7.I.v.H.j6....._.....A..s[.=^.....:c<r.m.o ..9.2.p6.......GD)....N.>...I..8..;k.arI.......Yr.c..Ma..c..+.[..@E=:..jV.)TR....w.>.h).....>a.\|n&.2..7}.I'.;..mu.-&...(....Lb....?d.ni>.....SH.>es..sI..Q..d..9.z8....M...q.....XN3.....1T.s.6.>...+-....m..}.I..J.......\|.i.>ek...u..MG.b...ik&.....h.v.r..^....u.9...X......&..y....jv.m1.A.+..?1.X...9.......-.../.s.%...h.L.X{....UX#.l..Q........O..O=.......l...S.0LS......f.$.n#$.:.H.F.v.....\iq.!#..u...Xl:..u-..C@8.\{.V..V.el.....^..\Tc.2.G._......Y.c#.......K...n-c.,.Y%.......q..X.Ad{..."F.....z.a].....*..B.b....U..DD....D

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	529
Entropy (8bit):	6.401603344924375
Encrypted:	false
SSDEEP:	12:t3iQ51z3eQ1Vz9mJk9NSewkp2UwHsiu1kvub5DCuw6GjX/:F5ZhU9kkUwHsiu1EubYVJX/
MD5:	B2A7AFCD93C525DF2D5C2DC04F1A3AD3
SHA1:	BFC975DB07C0A0F4A042956A0CAFEE8A4FDE5EA5
SHA-256:	A78B8F81FECACC4F6AE4A7B9E8C807703E7C47EE988D680EFF9EEA545435E1C6
SHA-512:	7B0FFF4AA3DC23E80606AB029BDE488AD30F31B4F6642D558488380D83543379DFFCA86EF08151936F5B9234664B36203AB25B15A4F36911D534ABE61812DBDB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.#.....#...'%#)4W84004jLP?W~o..\|ozw.......wz.....................C.%''4.4f88f.z......................................................... . .."..................................+........................!1Qa..2A.."BRq......................................................1.."2............?..{t..0...o...Q..\.E$....\..'.!...C.....U.+9Q.N..2.l...U.+.,!....~}.Z...T.wn._91......+.8M.w.TO.8(t..}1@u0I.E*G..j..v.E. .!.0.}..H.4...q"k^;....d.Djem....\v.XIP.t.._.5eR4.. $.)..#.4.kr........!.I.+..M#..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48568), with no line terminators
Category:	dropped
Size (bytes):	48932
Entropy (8bit):	5.497986554354248
Encrypted:	false
SSDEEP:	768:t8CGRcFxXcufY4m1CWdKdINoBBWSqJEqS03ro+3ZYU3Hed3X4KXLk5otg:6R6xXBfY4m1CuqImVqS03ro+3ZYU3He0
MD5:	287FA29B8C5D129D14A29CCD7BFD7C48
SHA1:	81E7024CE39F394848E09972B16A4B7BF0A38D7A
SHA-256:	414EAB3A90E297361EBB1A6ACA0418DA450514E9D5A15034A2F5917E811CD54F
SHA-512:	1C3986CB96BD248A7F3491F35D7BC6C7E1150C000C241C3CFC2CAA904D52B7FA46AE2CD28169EF6AD81B47F6A1E470867302233B80DEDBB25782564CCE9C5CF1
Malicious:	false
Reputation:	low
Preview:	define("aladdin-san/app/se_com_default/result_be4e7b3",["san","tslib","@baidu/www-api","@searchfe/inject-js",searchUiPcNode["Title_Title"],searchUiPcNode["Row_Row"],searchUiPcNode["Image_Image"],searchUiPcNode["Row_Span"],searchUiPcNode["Source_Source"],searchUiPcNode["Label_Label"],searchUiPcNode["Star_Star"],searchUiPcNode["Tts_Tts"]],function(n,a,i,s,r,o,l,c,u,p,f,m){return h={},d.m=_={0:function(t,e,n){var a=[e,n(1)],i=function(t,o){"use strict";function l(){return(l=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(t[a]=n[a])}return t}).apply(this,arguments)}function c(t){return c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function c(e){return typeof e}:function c(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c(t)}function u(t,e){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=fu

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 text, with very long lines (500)
Category:	downloaded
Size (bytes):	30752
Entropy (8bit):	5.505783706086418
Encrypted:	false
SSDEEP:	384:hn4bY7kTTMLmuf8geltjTY12AAUdoDWwUtjkr3nrEdabdZQBFSBZZpcLRbSy7K+0:SbY7k3MaDUtCdZN/pcLhSTO18
MD5:	8301698F5EB7CDE858916FE1847AB70F
SHA1:	9FAE0E35DFF6F613C38A150CE0F41CBA0CAAB0F6
SHA-256:	46ED5B031D49CF9B19456823FDDFB9B4127F2E38A9C91C5139BE5B84FF598828
SHA-512:	9F2B8DA44DDD325494488B8271180EBFB8BFF332F2E8FCD463E514E4585534FFF384F934CED0ABC70FD6AAD80C4670E71F7FB746E213E71226937F2196484AF2
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/super_load-8301698f5e.js
Preview:	F.module("superman:weather/weather_tpl",function(require,exports,ctx){var isNewStyle=bds.comm&&bds.comm.newTopMenu===1;exports.pollutionLevel={0:".",10:".",20:"....",30:"....",40:"....",50:"...."};var _dom=$("#s_mod_weather");exports.createIconUrl=function(url,getStyleVal){if(!url){return""}if(!getStyleVal){return'style="background-image:url('+url+");background-image:none;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="+url+', enabled=true,sizingMethod="crop")";'}else{.return"background-image:url("+url+");background-image:none;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src="+url+', enabled=true,sizingMethod="crop")'}};exports.randIconCdn=function(img){var _returnStr=(img?img:"a2").slice(1);if(isNaN(_returnStr)\|\|_returnStr.length<1){return 1}else{return parseInt(_returnStr)%8+1}};exports.randerImgPath=function(data,imgType,whichData,isNotToday){var i=whichData?whichData:0;var _c=data,_t=_c.weatherArr?_c.weatherArr[i]:

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	1181
Entropy (8bit):	4.994331522837564
Encrypted:	false
SSDEEP:	24:YJyKEirYxgxO8/5+XvLLGiMk5H8pSw6sOqHAHb88P1G:YQKEKYxgjcXvHyk+pVTfHAHTPY
MD5:	A4B1C2716D33F07CAA0ED2A4CE76BEB5
SHA1:	1AD3CA67C37BC58A673A97EF468F1BE0E2138130
SHA-256:	8F3FE6212CEEA9CA5DA7D12F8E0F5FC82BBC256F403BB96E55D6092443981B06
SHA-512:	C52742762BD01AE9541B68451F09F350B8426F5954FC5351FCED92BE0ECD22C188BD985BF4D6284A3755CB363BA9043F5051117530A77BFE48881D1AA269ED10
Malicious:	false
Reputation:	low
Preview:	define("versions-compare/src/index",["require","versions-compare/src/util"],function(r){function n(r,n){return r>n?1:n>r?-1:0}function e(r,e,t){t&&(r=r.reverse(),e=e.reverse());for(var i=r.length,o=e.length,s=0;s<Math.min(i,o);s++){var u=n(r[s],e[s]);if(0!==u)return u}if(i===o)return 0;for(var c=i>o?r:e,a=s;a<Math.max(i,o);a++)return 0===c[a]?0:n(i,o)}function t(n){var e=r("versions-compare/src/util");return e.isNumber(n)&&(n=n.toString()),e.isArray(n)&&(n=n.join(".")),e.isCorrectVersion(n)?e.toArray(n):"Wrong Params.".}return function(r,n,i){return r=t(r),n=t(n),"Wrong Params."!==r&&"Wrong Params."!==n?e(r,n,i):"Wrong Params."}}),define("versions-compare/src/util",["require"],function(){return{isArray:function(r){return"object"==typeof r&&r.constructor===Array},isString:function(r){return"string"==typeof r&&r.constructor===String},isNumber:function(r){return"number"==typeof r&&r.constructor===Number},isCorrectVersion:function(r){return/^(\d+\.)*(\d)+$/.test(r)},toArray:function(r){ret

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 36225
Category:	downloaded
Size (bytes):	10056
Entropy (8bit):	7.9802198813065655
Encrypted:	false
SSDEEP:	192:Bk8g24nZV0VwZHw14lPCDgo2TMS6XMMTbT4O631g+0PvzAW:BkQ4nZV0Vd14lTTkX9Tn4O631g3PvF
MD5:	0B525B3B926443072F638E1665585023
SHA1:	45C9B878148A5BC8A92F75F75D3135C203FD80B2
SHA-256:	636F74772FD074037ED74BF4BBD2B806FA66654C1B3D0036A8235BCB23AE065C
SHA-512:	AE7A80C954F6D9DE3B0985AB45D667FA24CC6E4EB3E684013C057158587053280AE864046D4598ACB4CF1BC0D14520BDB93B2F7C3C38BC0B55AE59C2E6A8A394
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/soutu/js/tu_ba0fbe3.js
Preview:	...........}.w.F....+.....g.6!..L.!p.....{.5.G......I...9...<...y..YHH.....l......._.U.FR.4...}u8x$UWWWUWWW.Z..... .{].U...c..5.....W............M........!...#.[..V..F1...UY...e.?.aC.....nUe]r.].u5..v......\uu..J5...A]U.".....(.z.T<,X...xN..T$.......}7^...f...v.^.hs.#...g...u\...5Wz.y........oKT.r..).i......^.r..g..m......{.-[...A.S.(X.T..l7.H...+..{e.p-...5...z..w....nrR..0.k....u}....v!V.z..........p....B.Ad......w.....K+...~t.?..$...(d.......^..M.'..u. 7O.4......"+M..nW\...._...Z....7.P.u...o%9>.../....my.j....up........ m..........l.Ls...e..J.....w._..[={f....>~.}. .1..{TsBzytt.Q.J........hz...;..D.P....'.....A.a..n..".c-Y...i....dA.........e....+.:...p4. .w........E..U..\|..oq........N.,].>...3".MT....BD!..y....'cZ.y.....{..GB.c`.....;g....[+..<..8.YY.e..{.(.....L.#Q.q(...R..?v...C.O.s....!.....4..a...1.u...z;.9.$.B..R1.u.(14.4.i.j.9..S. ..^.1.B....8...~Q..y..*...hF.UeGiV..zE.Rd...)...l.o.F....{}+O^...'{v..p.r

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 414626
Category:	downloaded
Size (bytes):	102883
Entropy (8bit):	7.99753196044427
Encrypted:	true
SSDEEP:	1536:BeNAw/i2vMhsp/mihfBX+gvsO4gGLLFszrN6OPbCh/e0o9yHcYUMEEgxmTXTckF:3w/iBsoU5LT4szjDC1ro9yHfXwO
MD5:	B53BB0B962F71458D44B5F1151A87EA5
SHA1:	A7AAD9192A3649090AF1042CD715C32E1B6957B2
SHA-256:	C4E68038DF1BFABA95FF49AA7694175ED201587BAF9272AA3F8BB983E502101C
SHA-512:	C56B9889E7AE52D2FDADC6284BC7466FAF1BF85FCF3B4DFC1224204A7CD3176AF84A1FCDA481C9CD226400BDB4120DE98F63C561F59D3DD6AE7D8C0DFE71488F
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/
Preview:	...........is$Kr....E..awO...=.H.........,,++...u...p..HiG.V..h.lE.vI3....)[j.%E..h..O....#"3....&%3..W........w..W....?.w..q...~%.::.8>9J..N....{....7?.yc....).r.>_....^..:..z+..}{.2....\|..vF.7~>........Fjk..:.N.+w....k..5.=....9.v8..rn..D..WF..F.H4cO.m...Aw0..[...j.....p.............._..?..'......._._...........................o..w.....~..?.?~.7..........?....w..w..............\|.[..............?..............?........~...........?.._.]8.t..?.....?..w~.._.!..........................w?....................Eb.u.....h.N...n%..T=_.e..3....t..4'iw........_+.1...N.iy...{9.t.9#.-.:.a...:............u.+...eL.Vi.i..waD..6...:.....m...$...I....}0...uf. H7... rir#.l.=..@..D.....h.._......+..l.A.....8...D.......f?H..`.=.u&......:~.K.._..{.3....,.Y0.A.{!......P!9z..`.ie..@..A.5-....O7\.1..b...7.\u...oz...){._...F..s..F.Tt...y.\.V..\...f..~.v ..7...............7..w........_....(..(@.N...W..UG.).H..........x0\/....f'.v......=..vp..;.`...gW..^*......{...&..:..g

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 114
Category:	dropped
Size (bytes):	113
Entropy (8bit):	5.342958804436536
Encrypted:	false
SSDEEP:	3:FttcuAAmoSc40Pq/tIXvwsHuLsfKLZF5XboXIE:XtcyR4tIhHuLs4Zb09
MD5:	D7A165BB6243DA3355357F857BE22F77
SHA1:	77D7E610A3830F3531FC7FBDD06303DF8ACCC239
SHA-256:	85ABB30F281232F3772D3BDD7B2AF1563BEFBD5BF27AD970840C0A35A7F5743E
SHA-512:	9DB8A9E96C7645BD3EB94D22FD81D364D37AB3802928A73AF13FFB4C38B4FFF885C20B36030D70E0761B78525EB9E6A58D227EB1C7D33E65BC40BC4EEE64D345
Malicious:	false
Reputation:	low
Preview:	..........JIM..K.P.)M..+.O.../(H-R.VJ-,.,JU.QrHJ.L).O/M,J.+IM.-.(..I+.K.....H..J-)-.S...K.f..5........../r...

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3421
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	7.866329801657717
Encrypted:	false
SSDEEP:	24:XTsYpSIGoYCP8Ok0WeqRx1TN0xfIhqXOkSezhNdroVUrphRwPik:XTs4ZGoXP8L0xwvTexZx5zhNdr3vE
MD5:	E516E5E57A1141C7D35857805F99A313
SHA1:	DC1096B790BE6CFDBA8D7BCEF40963E8478222C1
SHA-256:	7004467C196345520462A3F97A0751B1EADA7E3DC7F590F89ADEC1D9A3D8FFAD
SHA-512:	9143E01745FE899414E214B947EC911208DF108740E3FDDA3AFBA8C9CBBB187643101BA90C80AAC4C654E13ECA7BF3984C02D09A2C404A1A77B0AFCBEF9357A3
Malicious:	false
Reputation:	low
URL:	http://pss.bdstatic.com/r/www/cache/static/plugins/every_cookie_4644b13.js
Preview:	...........Wao.6..._a..@..k....6...64.e....s.EU........dIN....$..x<....r../.<.B.m..HP..z)....Hp;L..\.{..!...C.>2\|.u.i..c.............e4n...Y..{.'...>]m.]..HGy.e\F.c.JAi.'.1..:.:JeR. .........EJ.1...=...XC.D....~.L0..)Y.4......d.B.Y..H.s.f....m......f..bz...$....L...4}..x-dI....1.....#Jne.!./J( O.f3S....0B/.)...QeNkGl.........7.......KL(......u..9.J[q[.]...-....!cP.E...=........`..DVl....H..6..bn...3...p.^hV.4...(..J?f......8..:.H.........O..rU`.....,R}.t.'@M.?...o.%t>...?...+u.P..3..........c.......c..QH.=.t-E:....".........__..M..U...U\|.u..e..U,.Z.....k.kP...q8=<C...c.6!..<1...9..Z......Ve.ng4g.c49.h...K......1...ZZ.m.>..0.....p...../.\jYbY.............5....4...Dr..9..2..O..x..2A......k..>b....TF.`B.Y.i.K3C.. ...'.".Q.=..5.k.6.......A.)y'.H(...s..u..S..n...fQ..&..g..{.*.._......(j?\|..r...\.8\y.1v..%i'..X..4.:.\|.u.N.... 4-........1O..6.ED.D.....pW`...K%G=.9...9.\..p......{.=..B...%t.XM..T.B...00...pj...8q.][..fW7kF.=..TN`.v.)......"p..<.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9130
Entropy (8bit):	7.962424820146921
Encrypted:	false
SSDEEP:	192:A44SdR+A8PkyX/1B8KFVe0F/ioODdBcCzlx3zo5BltE4rP4:A4/uARiB8KFVeP3DdBc6OEM4
MD5:	F40CDC7C4C29A256B28EFEC86F182172
SHA1:	33383EB748612B274703C5A72D5D53F8B4760AC9
SHA-256:	374B9B764CED8558074B46336244967101E994C283E807DBB7DDF83A92D15494
SHA-512:	5FC3050987346E0EFFA191331F9D76A7C8E104E575197F15CECC11D390100F787E98066328269E3ED4713F330752C5BE8EC3267EEB5447A3633BE3EFAB7B06E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l...l......fW.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...............#.IDATx..}m.f.u...33....B...T U.R......L....L.bG..=.+.M.q..%..:...P..n...g.8.H......2... ;H.."..Rba......=....k..y..3wfli^k\|......Z.Y..8....K............5........~.$...M..#.....{.............@..........k.s.y...s.=..o.............V.....[QV.~M7..._.....{^o.<m..7w.<wT`..k.X..@7....Y...wf`.....~.g.J...g.'...6.^.m.....v..\.8M.<C.o........x.....:...r....s..\.\|..v.....g..}w.....\|.. ..\|Z..7.v.8.`Je.....9CS..z....?..s.....y........5.;........:.....r.F:.........z....9...e.......H.v......H3.3.....?......W.Ss.... ..&`.........sv."...{......z.k.s.3~,g0...SB.(.u.^.....w..\3.}.Y......E\...N.......N..]....x..$./<....~\|..p<..y...>.P....C?.......s..L..H'.Fm...C$h..".......?}/.....~E...4.y......g....4W...........x.......v]v(B.i..M.... r9I&...($.b.....$P...=....i=..?.W.).xN?.3... ...&+...r.$.....*......+`....G.....D`).G

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2430
Entropy (8bit):	7.86548794488282
Encrypted:	false
SSDEEP:	48:TrnJ354/jXukjjUQaGt/pgaeLIxwtG3LHFWwNaCX89ttz4id3c:Trn0LTjUIt/pKGwk3z8FDq
MD5:	10750F3F7D049AB650FBF9D36B467E44
SHA1:	5964B840EB025D9536144229CFF71B0707B8C059
SHA-256:	96C2B6EB1DFCAF461BBD8475FAEA7502C3189F04F747358904BB0C872E3FAAE8
SHA-512:	9ECDDDD43926E4E904FB57A074E8DAE50AF24D5CDE793C91A0C7243CB10EBD387B5C1E723FCD887034CD471D6B39509914DB356FB3444D591A38518C03CC4455
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`........T....sRGB........DeXIfMM........i...................................................`....+......IDATh..Y[lT...9.^...bc......"E...IP.4.....pl.$j...$..,.pP.\|akC...R....H@..4<..T.E.R.!.r..7.v.....Y...s..xhT.4........1c?...w.~...!..H....O..\|l..08x.`&.U.`.M.3>Xh.Yg[.9-?......3....g..Io......Sd..Y.3..\|Ri....l....Z.C...r....1W[[..,LgPTU....B..9..#.pVg....R...YHk..Y%...4.....E.?......_......Y.o.I;.1&.;[O..e...8Q...............n...8K.O]...:....5".x$.....%.l.6S3.>.=<<&...z.V..G..d...M.U...t\.p.v.\|....z.......o{K..?].R.L....#.V.......r.y.t..I.1~...}..tUcgwh..t.......;.`;.,..+.......n/..b..Q`.....-;U...0..B.........{...\b.$c!....e..E..^Os+.........}.....".(zE...S\|..ug......y..F..N-...O.Yr.o..Z..*3.u..H9.PD0.H...W......7Z...8..-X../g .}P.#\!f.$..........j...7...a.g."..W<...j..2;.>..e.[.."..a.,..&...{=.)...t9......9...E.."T.WN;]CC.0.....@.Q.B..EI.(....6..i...2..I\.."...,K..,...t..y....a?.X...;...L....%y.f...M..U.D\|oI....>n..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	dropped
Size (bytes):	890
Entropy (8bit):	5.192050061872793
Encrypted:	false
SSDEEP:	24:8R0UjPl729B2Glmm2EnaEu8/v73Ie726B26m2EnaEuq/v73Ily:glq9cjm2Ea18b3Ieq6c6m2Ea1qb3Ily
MD5:	BA6977355D6A8A8B188AD749F44BE337
SHA1:	83D2A0B048F36FAE7DFA2DD6090717BFFC66C8ED
SHA-256:	E4609085302DAF4193FB09D77ECC8A42966E05CE338D2E87FE278F244CC3E049
SHA-512:	F3252FD5056BBDF8F8D2CAB444ADE68761D7D9F1BDE2BC3B6B7EA7BA3E15F57849A6F73C859F5CC1CC97A202EAE49D2D731BA964DFB423D7C52EC6602DBE8CA4
Malicious:	false
Reputation:	low
Preview:	define("@baidu/ala-util/na/naConfig",["require","@baidu/ala-util/lodash"],function(a){function i(a){return a?{srcid:a.srcid,tplname:a.tplname,qid:a.lid}:null}var n=a("@baidu/ala-util/lodash"),o={"poi.LandingPage":{bdBoxVersion:{andriod:{supportNaVersion:"11.10",supportDeviceLogVersion:"11.13"},ios:{supportNaVersion:"11.12",supportDeviceLogVersion:"11.13"}},alwaysSchema:!0,getSchema:function(a,o){var e=a.naParam,r=i(o);return"v44/browser/invokePoiLandingPage?params=".concat(encodeURIComponent(JSON.stringify(n.assign({},e,r)))).}},"poi.DetailPage":{bdBoxVersion:{andriod:{supportNaVersion:"11.13",supportDeviceLogVersion:"11.13"},ios:{supportNaVersion:"11.13",supportDeviceLogVersion:"11.13"}},alwaysSchema:!0,getSchema:function(a,o){var e=a.naParam,r=i(o);return"v44/browser/invokePoiDetailPage?params=".concat(encodeURIComponent(JSON.stringify(n.assign({},e,r))))}}};return{CONF:o}});

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	4.847622383882747
Encrypted:	false
SSDEEP:	24:pIbHBZQamRmGqSVj3kaaVWEFzQmRlmRczJre9MdVPsjHog2:pQ+UAjUaaVHe6zsjZ2
MD5:	6F6BBC941EB1C9A1D60A74C2832E52A9
SHA1:	F2A62AD01BCB08412C0114AE512367184BD41634
SHA-256:	ADA115FDFF22F4C34F9F266380671A42D3906746E7A9CD08D87B809AF42F0556
SHA-512:	FD45A7B9BC9F5F2BDFB3905CDD5E0EF4B7084F796946A90F9F9E5DDE37963946A4E36648B7DFD811630E2D2B90AEDEF93659FE844889218355902D358E0846B3
Malicious:	false
Reputation:	low
Preview:	define("plugins/compatible_ipad_input",["require"],function(){function t(){function t(){return this.orientation,this.screenWidth,this.viewportScale,this.getScale=function(){this.viewportScale=void 0;var t=document.documentElement.clientWidth;if(!(screen.width>t))return this.updateOrientation(),this.screenWidth=screen.width,"portrait"===this.orientation?screen.width>screen.height&&(this.screenWidth=screen.height):screen.width<screen.height&&(this.screenWidth=screen.height),this.viewportScale=this.screenWidth/window.innerWidth,this.viewportScale.},this.updateOrientation=function(){this.orientation=window.orientation,this.orientation=void 0===this.orientation?document.documentElement.clientWidth>document.documentElement.clientHeight?"landscape":"portrait":0===this.orientation\|\|180===this.orientation?"portrait":"landscape"},!0}var i=navigator.appVersion,e=/ipad/gi.test(i),n=/UCBrowser/gi.test(i),o=/BaiduHD/gi.test(i),r=new t,s=r.getScale();e&&(n\|\|o)&&($("#head").css({position:"absolute",to

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (474)
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	5.250583358652288
Encrypted:	false
SSDEEP:	24:2QWyxX3MpRRL/sqhnnqsWUXipRRlt4boVIwm0GXbmxcK1KCUcfK1XnaCFXTxU:myxHMp0qdnZWUSp43DmxcK8C/KFna0FU
MD5:	3FFFAE8D606970854D942B26E5E279F7
SHA1:	7D1DD2906A56E5D9B59D9A04E7B158C30304E580
SHA-256:	2A10F0DAEA88983E117607B8024F75AE8163FC3AE0B10945C2AD6224F3B27070
SHA-512:	D3AFA64BD8C29F8D9E38CA786C8FAE9A793A292C7060440D13532A254AC92E7DAE762EE625DA7D434D8A55C433B058603BD793B8F460154BC51EFEEBC5EBD08B
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/static/superman/js/s_super_index-3fffae8d60.js
Preview:	(function(){var samNewBox=bds&&bds.comm&&bds.comm.samNewBox&&bds.comm.samNewBox===1;setTimeout(function(){try{var kw=document.getElementById("kw");kw.focus();if(samNewBox){var btn=$("#su");btn.addClass("btnfocus");var form=$("#form");form.addClass("sam_form_shadow")}kw.parentNode.className="bg s_ipt_wr new-pmd iptfocus quickdelete-wrap"}catch(e){}},0);setTimeout(function(){var kw=document.getElementById("kw");var ua=navigator.userAgent.toLowerCase();if(/ipad/.test(ua.)&&document.activeElement&&document.activeElement===kw){kw.blur()}},0)})();.$(window).on("load",function(){var rand=Math.random();if(rand<.01){try{var baseUrl="//www.baidu.com/nocache/fesplg/s.gif?log_type=hm&type=uamonitor&";var queryString="";queryString+="&c_ua="+encodeURIComponent(navigator.userAgent);queryString+="&s_ua="+encodeURIComponent(bds.comm.userAgent);var url=baseUrl+queryString;var img=new Image;var img_rand="_LOG_"+(new Date).getTime();img.onload=function(){delete window[img_rand]};window[img_rand]=img;img.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	147
Entropy (8bit):	4.6108991763137
Encrypted:	false
SSDEEP:	3:YUPHMY7vafg9OHrC/HHI+eH68ftM9GJHV/HJ0P/rL1PJY7v3bBf6AY:YUUYjaN2/n8JVPJC/rBxYrBfC
MD5:	E2709AF4FD5822FF684B47D544514953
SHA1:	6339B28649D507012DDA1BE26E0D3229AA877078
SHA-256:	3A0331A0B81D93E28C039C18776D2C01FB31E96969C2D6C36B34D32C556C91F8
SHA-512:	190CB38728D75B47DF1A2ABE8A99AE0976EDF4EC3F4888E7BAB640F4ABD800FA593664F8AC10F63276CFFB34C666A4270A9C8799CB6FD057872C232E8599A851
Malicious:	false
Reputation:	low
Preview:	{"q":"","p":false,"bs":"","csor":"0","err_no":0,"errmsg":"","g":[{"type":"his_normal","sa":"h_1","q":"...."}],"queryid":"0x79403c222ac493"}

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 256x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9642
Entropy (8bit):	7.977497890205827
Encrypted:	false
SSDEEP:	192:vAeUPv4LM2eYnTFSuxj+An2KN5MEp4TdDRD2oSAwV4/+wlN9j5D:f+44qpSunRH8dAzZV4/tN9j5D
MD5:	90F89F88E7FE129570DB512F04CED773
SHA1:	B6E37C45C7A46F7B3308D3373D382622448A5515
SHA-256:	FEDF27A782532160AC81D97F91A72CBFA8C0E2C5E23A847B7766B9819BEDD051
SHA-512:	A8782F243CD275405459FE219269576ABDE3B324E519819B2E159A285074B2914387959C9BC5AC3CAD87D1A6B72DA6F7F717A4B6F05F75EE28F050D7DC28EB28
Malicious:	false
Reputation:	low
URL:	"https://t15.baidu.com/it/u=881387800,3041446615&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=68F2A1460DB389ED50A97019030010D0&sec=1729962000&t=81d0471c8d3585fd8fa1377e8fc7911e"
Preview:	RIFF.%..WEBPVP8 .%..0q.......>.<.H%..%.[...@..M...........<#z..Q....>7.....}.....?.......U....E...G.c..>.u..O.?..u...G.....?g...a.q......?..t..z..}...................../........U.q.?.......?.?....'.........=2.%....................O.{.........=-.. r#[8.....Jd.?J.~......78....!].O..YK)"..2....S.ZH..Io..M)s.E.2qg..<. ...2..2].e..H.0.ED..w......l.....t.S......\|1{I..._..L.N...yT.....W9.X..Wy9.zLK.R..V"v()@.b.YDFYJ0.<..8....W..-..C.....l........w...vs+....Sz....<...C...P?V.t........{,......,0.7....-.........-..#T./#.C.l.[....).v..O(.\|.A&...Y..........g...vG..)..f..S....R...]..?<<.P._.6bQ.st..(N\.\....".x .l...k``M..A..wfO.....>.&.lkZ8......#x.e.Y#U.FS1. ...MVe...*.fsTy.~r.tF\|...q.. :..h...vZ=..y.T.....7.F..N....0..4G..}WK....../.C..tK=.i.K..HU.....^=.....cO..G....a>..V...........TK....x5......2YB..\..+F...4.o{.p8....\|D.aj..}.j..yvU .......q@....~s..Q..=~S..%...8....T.........l.T.ka9Hm~.......[..#..U..,c.'...O...9.F..E....Uc.x.b..^

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x170, components 3
Category:	dropped
Size (bytes):	9704
Entropy (8bit):	7.961723547724886
Encrypted:	false
SSDEEP:	192:mg1DwDCwEJXkyGnXdnlnDYqUvfnGgbrfq+YSSQ7IyUQcllO8V4ogof+Hm:bc2jNkyyfnDYqUvvzfq+YtCjc5Vxpfgm
MD5:	83EEA5CA4716A8A7049E16565511B8E7
SHA1:	7E39E6B77D57CFA245E793913D2EB4A6DA1AFEA1
SHA-256:	BEA13BB29A3C9AF22D84296981F1806F4A1351F08B6F773E3617F314784040E4
SHA-512:	B733EDC9390AC4A42F1DE1E67001D3CB45FFECDB943C885E9338CC4EFDF31160C29EC1E75E74356E9ECF2B35D32533E37DA14CC0A1C1768BFC0B256BB5B5E958
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."........................................H........................!..1A.Qq."a..2B....#3Rb..$r..&4Cc.....%DSTs.................................0......................!1..AQ.."a2q..B........b............?...s.=....(.0...."3....B..g.._..c..nUr..^....E.s3).'<.."f"._..Q........S.Yb......2....>dV..v..5....E.#....Nq.<g.....{Gr.#.....a.....l7..j^.0.ne......6..gc....Ma.....?.^.x?.q...hQe......."U.oK,......Z....N..B....vH.......q....6..n.y.Q..}D.@4.4..Zx..C.&..8N..Td..c..P.I).d.......h.\.....D...a.H.[z..H...e.,p..C....f..I....ai.sw.[[..5{.Fi.I..`m..O.J.....bh..3....]}j$.`.zS.j.Uc....U.4I.A.7......#..Fr...^....,\|.."......*..&....r.....9X...O.....5...?.<..E.y.b=....CO%.#.%....cnw..I..%..C..&o..+.e..D_.v..>..Rk....#^.T.Qig....8.)..3.brI.'s...=..:]..nOb1Q.....ZRJ....T<A.6.#.HR..O."O\.....s.7.P.`.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 202 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6617
Entropy (8bit):	7.961654715497248
Encrypted:	false
SSDEEP:	192:v/ECalepd7UEuagpUtRVpZ6oSJWme7VJ07qAwHiOyM3xSvTm7:3aopdvxI6RVpcoaWBL1AwHi/Tu
MD5:	6C825ED7EA4CD25657288AB4F7D0227F
SHA1:	159D18C3AE69681973E81BDB0A7E0E786B2EC310
SHA-256:	CCA2EF55292662C7224F99F750F8E651D1E9B73DA299E8FEC6C741C1390C5F9C
SHA-512:	5DE810FFB2E1908A3A63AF6BAD3333DA45DF83EBE18D463A8A858C91A319B1B11401EA3E899E6EA1106B134E74BC7593A6878DF0CEDCC11130D2E96159138261
Malicious:	false
Reputation:	low
URL:	http://www.baidu.com/img/flexible/logo/pc/result.png
Preview:	.PNG........IHDR.......B.......I.....sRGB.........IDATx..].\|T...w..E...!..."Y.J..hE.....b....U..G...V....H..Y...Y..ZE..l....'...I.QE.....!_.u...Mv.w...nv..;?.s.33...s.c...-.[...l....%`K....I..P>'u6.1Z.3q..k..k....@b\|...55u..c..i..R6\|.4.%`+.u..Nq.y.....(..G#/.'...Q.g.6...0..........2r.#.,...@....G(...y...(y..'.6.........@.....+........l##.t]:J_.$..44T....aI..........'Q.....<.B.....(..Q...O... ..`....O....O~.Y..h..j.B........j..0e#.j.RaP..j......xn$`+Jn..2.....6I...R.a...Qn......^..o.'.a.m..CxZI.....U..M.58....l........f#...4.<N.4.}.....fsci....25)j.U....<....V..~...Z=..b.%....W.W}.&.M.%.oF..hl.u..>...v.d.D."......W=.^...V.PJ....$`+.99...%A..M%.$/'..C.....ZF.V....%M.....${@Q.8..)<G._.(....)...=....K.V.c.X.B.!B..JB.UjEaN..*;...Th...lE1%&sD...Q..M...f[.^.h.x`.....\|.a..4+.[Q.J.<...I.(a.<..f.+UG`.oK...)v%...7...YI..U..8......T.#U.&}.a.... ..i....0'&.D...&-..12O.....7..W....:.u\HQ&EE.nz....+...K k/M:..7...p6..W.J....@.CI7l.'.%%w..T.....^`."

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 88, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2263
Entropy (8bit):	7.79381405061802
Encrypted:	false
SSDEEP:	48:1nPh+Z9a+ftb/SyhaPmQRh9uyJHX7bPG7pc43mAp1DY5lUfx2:1nPAXaI5haO8h9u+KZpZYbD
MD5:	03ECD1E9B97CA338AC39E9C4DDDA6927
SHA1:	1BAB5582F607E31AED57D6653E01175AADA52AB8
SHA-256:	32F658459DD806332D3727304AE55E40CD8214F0464500FD287AAA0C939D63C1
SHA-512:	69D85AF6AB833E954DB70E5EEE78283E9CE6D700E11FBBADA25FE0859DC2113C615413F7E48D74769329D9E4BD306012578091CD34D8A48AEA6C0F633FA594CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...X........c....sRGB........DeXIfMM........i.......................................X...........X.....H....AIDATx..Z{PTU..{...,........s Q.+.........4.3M..Xf)PR.N.J.6...L,.Z.X.>@...sa.w...a.{..s..B.q.........o..d.A..?...$t0@....J.%BZ.hF...!e.f...Z#hF..2@3B....4#hFH...!..N>.R^......CG...........Vp..l\.._.......LcF....En..:...........WF..B...l..T.....fz.I.]..D...u.-.n.8N.....6g.}.\&.VA.k..eDp\|Ka...`c.5...f...E.m.2u&S.V+I...;\|.>;7p.....;....7.7....M.).g.....fj..D.:..X[..q...5..Ah~e.'o......}..p.J..D4<......H.[...~......O....a...Z\.Y.G>H..6....W...I.i.a...Q.y.D..._P.~;.:M.i....Xw9wm7.z3!..S...P.>.w.O..p-.......:A.\...t.d.)........P...w....>9)......w...j..;X..[.}.5.W....q.P-...("......c&.....X[..{....."4..._.W.liA.BC...e_....5`.M...Wi.,..,...k.}...7%.......j-... T...A.<dt...d.3..=.n."......s...X.....g...*r...4........]+.0..;6....;.......cah.r"...M..1..E.L\|.,2".u&86.0.\|E....."$TA....h.k.t.M).$r.m.X....l...mD!.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	13977
Entropy (8bit):	7.9225467706909045
Encrypted:	false
SSDEEP:	384:A9Mw3PJxPFElEICujdmXARoWj7wsjXRPeankes7zx8GUys:p8xWaWCW/f6n7Wl
MD5:	C3D3B26C0FBA21821D43E38050DFAC77
SHA1:	6724CDDD672CC7B1AE41ACB5678F0B12AF70915A
SHA-256:	78382F5C69E360F3D0CDC1172312BA5CDDECAFAF0B8779BA21B6FF886B30CACC
SHA-512:	566180B12ECB2976F131AB251DE57CA8221816A65CAA267F79B2AC9F8AB40DC4347317B919BEF2D1E1A50391C9EE65B6215E63D696FB04FE4228CDA89C2AD380
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...).....:..,.......[!..5.g....o.?h..{}W.$. MG......^.3GK...u..^[...XHD...;...4P...m.....x>.....G7.FU')K...a...Uf..B..S...Rt..J.i...<E.p.Y[6.1...I...5J...N......Z$..'.FR_......g.8c........3..G<sF.B.,N.I#u.6....H##....8.?..;\|h.\|I.[.7....R4.&..-j-:..A

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 36225
Category:	dropped
Size (bytes):	10056
Entropy (8bit):	7.9802198813065655
Encrypted:	false
SSDEEP:	192:Bk8g24nZV0VwZHw14lPCDgo2TMS6XMMTbT4O631g+0PvzAW:BkQ4nZV0Vd14lTTkX9Tn4O631g3PvF
MD5:	0B525B3B926443072F638E1665585023
SHA1:	45C9B878148A5BC8A92F75F75D3135C203FD80B2
SHA-256:	636F74772FD074037ED74BF4BBD2B806FA66654C1B3D0036A8235BCB23AE065C
SHA-512:	AE7A80C954F6D9DE3B0985AB45D667FA24CC6E4EB3E684013C057158587053280AE864046D4598ACB4CF1BC0D14520BDB93B2F7C3C38BC0B55AE59C2E6A8A394
Malicious:	false
Reputation:	low
Preview:	...........}.w.F....+.....g.6!..L.!p.....{.5.G......I...9...<...y..YHH.....l......._.U.FR.4...}u8x$UWWWUWWW.Z..... .{].U...c..5.....W............M........!...#.[..V..F1...UY...e.?.aC.....nUe]r.].u5..v......\uu..J5...A]U.".....(.z.T<,X...xN..T$.......}7^...f...v.^.hs.#...g...u\...5Wz.y........oKT.r..).i......^.r..g..m......{.-[...A.S.(X.T..l7.H...+..{e.p-...5...z..w....nrR..0.k....u}....v!V.z..........p....B.Ad......w.....K+...~t.?..$...(d.......^..M.'..u. 7O.4......"+M..nW\...._...Z....7.P.u...o%9>.../....my.j....up........ m..........l.Ls...e..J.....w._..[={f....>~.}. .1..{TsBzytt.Q.J........hz...;..D.P....'.....A.a..n..".c-Y...i....dA.........e....+.:...p4. .w........E..U..\|..oq........N.,].>...3".MT....BD!..y....'cZ.y.....{..GB.c`.....;g....[+..<..8.YY.e..{.(.....L.#Q.q(...R..?v...C.O.s....!.....4..a...1.u...z;.9.$.B..R1.u.(14.4.i.j.9..S. ..^.1.B....8...~Q..y..*...hF.UeGiV..zE.Rd...)...l.o.F....{}+O^...'{v..p.r

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	downloaded
Size (bytes):	890
Entropy (8bit):	5.192050061872793
Encrypted:	false
SSDEEP:	24:8R0UjPl729B2Glmm2EnaEu8/v73Ie726B26m2EnaEuq/v73Ily:glq9cjm2Ea18b3Ieq6c6m2Ea1qb3Ily
MD5:	BA6977355D6A8A8B188AD749F44BE337
SHA1:	83D2A0B048F36FAE7DFA2DD6090717BFFC66C8ED
SHA-256:	E4609085302DAF4193FB09D77ECC8A42966E05CE338D2E87FE278F244CC3E049
SHA-512:	F3252FD5056BBDF8F8D2CAB444ADE68761D7D9F1BDE2BC3B6B7EA7BA3E15F57849A6F73C859F5CC1CC97A202EAE49D2D731BA964DFB423D7C52EC6602DBE8CA4
Malicious:	false
Reputation:	low
URL:	https://pss.bdstatic.com/r/www/cache/static/amd_modules/@baidu/ala-util/na/naConfig_ba69773.js
Preview:	define("@baidu/ala-util/na/naConfig",["require","@baidu/ala-util/lodash"],function(a){function i(a){return a?{srcid:a.srcid,tplname:a.tplname,qid:a.lid}:null}var n=a("@baidu/ala-util/lodash"),o={"poi.LandingPage":{bdBoxVersion:{andriod:{supportNaVersion:"11.10",supportDeviceLogVersion:"11.13"},ios:{supportNaVersion:"11.12",supportDeviceLogVersion:"11.13"}},alwaysSchema:!0,getSchema:function(a,o){var e=a.naParam,r=i(o);return"v44/browser/invokePoiLandingPage?params=".concat(encodeURIComponent(JSON.stringify(n.assign({},e,r)))).}},"poi.DetailPage":{bdBoxVersion:{andriod:{supportNaVersion:"11.13",supportDeviceLogVersion:"11.13"},ios:{supportNaVersion:"11.13",supportDeviceLogVersion:"11.13"}},alwaysSchema:!0,getSchema:function(a,o){var e=a.naParam,r=i(o);return"v44/browser/invokePoiDetailPage?params=".concat(encodeURIComponent(JSON.stringify(n.assign({},e,r))))}}};return{CONF:o}});

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 13:27:24.240878105 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 13:27:28.615082979 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:28.615175962 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:28.615262985 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:28.615602970 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:28.615636110 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.184155941 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:29.184374094 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:29.189909935 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:29.189944983 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:29.190009117 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:29.190049887 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:29.190157890 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:29.195554018 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:29.483249903 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.483525038 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:29.483587980 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.484456062 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.484566927 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:29.485635996 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:29.485707045 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.527707100 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:29.527735949 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:29.574264050 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:30.191529989 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191546917 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191565990 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191576958 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191586971 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191597939 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191607952 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191618919 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191629887 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191631079 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.191642046 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.191796064 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.197026014 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.197046995 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.197057962 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.197139978 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.310659885 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310707092 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310756922 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.310770988 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310838938 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310851097 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310861111 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.310884953 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.310905933 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.311397076 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.311443090 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.311453104 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.311500072 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.311501980 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.311542988 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.312077045 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.312096119 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.312143087 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.354832888 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.354854107 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.354865074 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.354921103 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.396049976 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.430835009 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.430867910 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.430901051 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.430922985 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.430952072 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.430986881 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431008101 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.431354046 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431406975 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.431407928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431443930 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431485891 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431489944 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.431521893 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.431569099 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.474164009 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.474203110 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.474222898 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.474240065 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.474272966 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.474335909 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.474395990 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.550494909 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550508022 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550518990 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550529003 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550554991 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.550582886 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.550678968 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550743103 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550754070 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550764084 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550787926 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.550810099 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.550817966 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.593143940 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593198061 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593199968 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.593233109 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593276024 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.593282938 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593333006 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593379974 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.593684912 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593830109 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.593874931 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.669555902 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669610977 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669645071 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669661045 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.669748068 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669795036 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.669800043 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669852018 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669886112 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669899940 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.669920921 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.669970036 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.670569897 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.670778036 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.670806885 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.670829058 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.712310076 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712342024 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712363958 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.712400913 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712447882 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.712455034 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712488890 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712522984 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.712538004 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.756258011 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.788692951 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.788726091 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.788758993 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.788795948 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.788949013 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789001942 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789001942 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.789036989 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789081097 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.789315939 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789377928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789411068 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789429903 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.789777994 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789812088 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789833069 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.789844036 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.789894104 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.834394932 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.834903955 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.834933996 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.834965944 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.835024118 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.835058928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.835082054 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.835098028 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.835144997 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.908061981 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908133984 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908166885 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908217907 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908226013 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.908252001 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908271074 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.908287048 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.908334970 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.909012079 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.909044981 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.909075975 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:30.909106016 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.960892916 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:30.965444088 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965526104 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:30.965569019 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965655088 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965668917 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:30.965683937 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:30.965707064 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965739965 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965781927 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965924025 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.965939999 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:30.966034889 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.966073036 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:30.966156960 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:30.966202974 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.687531948 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:31.687602043 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:31.687819004 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:31.689373016 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:31.689402103 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:31.824677944 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.825062990 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.825128078 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.825675964 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.825758934 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.826347113 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.826407909 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.826663971 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.826850891 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.826869965 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.827382088 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.827400923 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.827467918 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.827482939 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.827899933 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.827930927 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.828396082 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.828459024 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.829060078 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.829142094 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.829230070 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.829276085 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.829338074 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.829416037 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.829457998 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.829832077 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.829904079 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.830816031 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.830869913 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.831507921 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.831593990 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.831619024 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.872802019 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.872802973 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.872803926 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:31.872827053 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:31.919285059 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.243249893 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243273020 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243304014 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243350029 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243361950 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.243402004 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243439913 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.243474007 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.243534088 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243583918 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.243635893 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.244510889 CEST	49741	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.244558096 CEST	443	49741	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249397039 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249455929 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249511003 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249528885 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.249577999 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249609947 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249629021 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249649048 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.249671936 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249708891 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.249710083 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.249732018 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.249746084 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249887943 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.249946117 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.252851009 CEST	49742	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.252891064 CEST	443	49742	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.255875111 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.255966902 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.256063938 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.256480932 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.256521940 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.258908987 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.258949041 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.259011984 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.259265900 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.259284019 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.260730982 CEST	49740	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.260750055 CEST	443	49740	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.284559011 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.284617901 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.284701109 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.284941912 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.284966946 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.285020113 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.285459042 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.285495996 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.285634995 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.285645962 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.286585093 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.286638975 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.286710978 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.287607908 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.289349079 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.289381981 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.289905071 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.290613890 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.293019056 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.293100119 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.293359041 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.295382023 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.295456886 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.295934916 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.296005011 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.298800945 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.300117016 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.300179005 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.305592060 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.305620909 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.425704956 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.426489115 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.426569939 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.426656008 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.430491924 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.430522919 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.431416035 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.546969891 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.547075987 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.551040888 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.551052094 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.551412106 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.599399090 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.610935926 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.651335001 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.749517918 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749571085 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749597073 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749612093 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749622107 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.749630928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749656916 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.749660015 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749705076 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.749805927 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749836922 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749852896 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749895096 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.749957085 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.749974966 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.750005007 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.800579071 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.847306967 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.847352982 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.847415924 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.847637892 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.847685099 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.847743034 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.847882986 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.847899914 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.848025084 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:32.848042965 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:32.867542982 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.867703915 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.867757082 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.867757082 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.867757082 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.867816925 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.870343924 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.870388031 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.870423079 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.870429993 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.906414986 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.911029100 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.911106110 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.911360979 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.911611080 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:32.911648989 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:32.911906004 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.912013054 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.912179947 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:32.917880058 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:32.921338081 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.115233898 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.115638971 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.115670919 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.116235971 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.116715908 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.116714001 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.116800070 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.116930962 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.117075920 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.117136955 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.118355036 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.118864059 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.118972063 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.118984938 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.119048119 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.126801014 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.126837969 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.126872063 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.126938105 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.130367994 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130400896 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130434036 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.130434036 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130490065 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.130526066 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130553961 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130610943 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.130672932 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130738020 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.130794048 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.134027958 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134080887 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134113073 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134146929 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134154081 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.134181976 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134246111 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.134294033 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.136868000 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.136904001 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.136936903 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.136936903 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.137029886 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.137276888 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.137336016 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.137341976 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.137370110 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.137382984 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.137418985 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.137551069 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.137571096 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.138729095 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.138806105 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.139588118 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.139643908 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.139677048 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.139718056 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.140086889 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140140057 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140173912 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140216112 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.140700102 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140755892 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140793085 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.140839100 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.141218901 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.141366959 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.141617060 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.141704082 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.141823053 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.141861916 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.142891884 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.142927885 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.142947912 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.142960072 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.143126011 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.143815994 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.143877029 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.143915892 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.143949986 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.143999100 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.144010067 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.146234989 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.146318913 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.146353006 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.146405935 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.149708986 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.149764061 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.149770021 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.149796963 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.150114059 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.152563095 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.152769089 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.152806997 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153012037 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153198004 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.153217077 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153281927 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153366089 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.153426886 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153501987 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153542042 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.153578043 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.154280901 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.154336929 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.154360056 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.154434919 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.154495001 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.154577971 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.154836893 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.154855013 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.156857967 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.156918049 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.157063961 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.157200098 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.157206059 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.157231092 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.159363031 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.162377119 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.177484035 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:33.177516937 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:33.192754030 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.192756891 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.192933083 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.207900047 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.208054066 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.208056927 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.208117962 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.244379044 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.244426012 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.244609118 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.245429039 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.245460987 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.245630026 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.247567892 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.247602940 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.247637987 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.247791052 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.248600960 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.250825882 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.250859976 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.250890970 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.250895023 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.250933886 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.253954887 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.254043102 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.254076004 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.254134893 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.254719973 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.257237911 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.257266998 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.257309914 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.257319927 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.257350922 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.257365942 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.258666039 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.258702040 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.258734941 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.258774042 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.262042999 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.262073040 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.262105942 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.262109041 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.262137890 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.262186050 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.265376091 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.265433073 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.265502930 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.265532970 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.265566111 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.265580893 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.268769979 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.268826008 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.268845081 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.268862963 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.269284964 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.272267103 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.272510052 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.272603989 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.292392969 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.293225050 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.293261051 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.294089079 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.294430017 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.294527054 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.296950102 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.297172070 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.297413111 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.297574997 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.297612906 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.304223061 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.339338064 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.350387096 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.350446939 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.364130020 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.364195108 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.364237070 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.364268064 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.367085934 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.367146969 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.367152929 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.367180109 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.367230892 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.367285013 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.368666887 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.368738890 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.369036913 CEST	49745	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.369052887 CEST	443	49745	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369077921 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369129896 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369199038 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.369226933 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369266033 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369389057 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369425058 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.369446039 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.369481087 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.369909048 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.371588945 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.371623993 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.371659040 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.371685982 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.371718884 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.374773026 CEST	49744	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.374790907 CEST	443	49744	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.374799967 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.374834061 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.374886036 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.374918938 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.374943972 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.374965906 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.378223896 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.378258944 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.378381968 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.379014969 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.379033089 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.380685091 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.380717993 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.380940914 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.381237984 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.381258011 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.383371115 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.383392096 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.383536100 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.383793116 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.383809090 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.388254881 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.388314009 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.388458967 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.388516903 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.389122963 CEST	49746	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.389130116 CEST	443	49746	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.392044067 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.392055035 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.392208099 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.392712116 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.392728090 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.393301964 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.393311977 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.393554926 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.393800020 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.393815041 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.396893978 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.409600973 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.409661055 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.409738064 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.409749985 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.409792900 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.409852028 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.410479069 CEST	49747	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.410485983 CEST	443	49747	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.414124966 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.414191008 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.414283991 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.414581060 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.414613962 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.416140079 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.416213036 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.416309118 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.416564941 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.416599989 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.481193066 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.481256962 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.481290102 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.481323004 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.481383085 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.481477022 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.483978987 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.484033108 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.484066963 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.484108925 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.486553907 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.486588955 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.486622095 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.486639977 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.486695051 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.488982916 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.489036083 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.489070892 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.489099979 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.492140055 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.492173910 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.492207050 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.492209911 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.492261887 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.492266893 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.492292881 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.492342949 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.523972988 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524033070 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524054050 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524075031 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524116039 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524123907 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.524136066 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524161100 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.524164915 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.524198055 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.524224043 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.598494053 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.598541021 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.598578930 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.598725080 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.601135969 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.601182938 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.601219893 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.601265907 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.601300955 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.603642941 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.603679895 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.603713989 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.603777885 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.606182098 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.606216908 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.606250048 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.606287956 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.606336117 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.609086037 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.609106064 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.609121084 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.609173059 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.645009041 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.645064116 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.645164013 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.645231962 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.645271063 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.646871090 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.652790070 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.652884007 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.653143883 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.653233051 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.653286934 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.653290987 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663446903 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663511038 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663532972 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663572073 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663590908 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663625002 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.663669109 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.663669109 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.663698912 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663727999 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.663759947 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.663795948 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.665615082 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.665774107 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.665854931 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.666043997 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.666079044 CEST	443	49754	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.666102886 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.666150093 CEST	49754	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.672377110 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.672440052 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.672586918 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.672841072 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.672871113 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.685404062 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.685683966 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.690907955 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:33.690984964 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.691026926 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:33.691093922 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.691411018 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.691553116 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:33.694463015 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.697381020 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:33.697458029 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:33.698329926 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.698767900 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.698805094 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.700006008 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.700098991 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.701244116 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.701311111 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.701551914 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.701642990 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.702020884 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.702037096 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.710458994 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.710706949 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.710717916 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.711225986 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.711301088 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.712233067 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.712286949 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.712506056 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.712583065 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.712654114 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.715377092 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.715418100 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.715435028 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.715485096 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.718050957 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.718113899 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.718178988 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.718194008 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.718209028 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.718245983 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.720582008 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.720609903 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.720623970 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.720669985 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.720702887 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.723082066 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.723098993 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.723113060 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.723150015 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.726125956 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.726141930 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.726156950 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.726188898 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.726222038 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.755371094 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:33.755462885 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:33.756922960 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.756923914 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.756931067 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.762105942 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:33.762115955 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:33.763042927 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:33.763892889 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.763943911 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.763979912 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.763989925 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.764044046 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.765204906 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:33.769779921 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.769794941 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.769849062 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.769900084 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.769963026 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.770014048 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.804292917 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.807373047 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:33.832709074 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.832727909 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.832748890 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.832823038 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.835108995 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.835174084 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.835310936 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.837907076 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.837922096 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.837938070 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.837954998 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.837989092 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.838027954 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.838035107 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.838044882 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.838080883 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.840605021 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.840620995 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.840636015 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.840667009 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.840699911 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.843395948 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.843415022 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.843430996 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.843482018 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.883548975 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.883599997 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.883702993 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.883732080 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.883765936 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.885425091 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.886986017 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.887001038 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.887078047 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.898333073 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898360968 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898375988 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898458958 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.898490906 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898507118 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898520947 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898530006 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898536921 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898545027 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.898636103 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898647070 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.898653030 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.898720026 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.904022932 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.904047966 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.904062033 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:33.904129028 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:33.928674936 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.928821087 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.928936958 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.946038961 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.946060896 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.946129084 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.946166039 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.946208954 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.950068951 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.950093985 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.950108051 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.950158119 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.954910040 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.954926014 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.954940081 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.955003023 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.955039978 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.955164909 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.955180883 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.955194950 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.955209017 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.955252886 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.955291986 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.957838058 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.957871914 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.957885981 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.957933903 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.958403111 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.958467960 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.958492041 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.958560944 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.958578110 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.958652973 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.960474014 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.960499048 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.960511923 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:33.960561991 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.960573912 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:33.960618973 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.002955914 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.003021955 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.003099918 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.003145933 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.003185987 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.003206968 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.007872105 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:34.008033991 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:34.008130074 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:34.015680075 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.015851974 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.015939951 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.044708967 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.045100927 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.045190096 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.067276955 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067305088 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067329884 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067347050 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067389011 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.067429066 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.067593098 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067605972 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.067650080 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.071981907 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.072032928 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.072046995 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.072098970 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.072187901 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.072235107 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.072243929 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.072249889 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.073415995 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.075258017 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.075274944 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.075289011 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.075361967 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.077620029 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.077663898 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.077678919 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.077682972 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.077693939 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.077738047 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.122426987 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.122495890 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.122591019 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.122662067 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.122699022 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.125413895 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.126950979 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.184760094 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.184777975 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.184792995 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.184808016 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.184869051 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.184940100 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.185022116 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.185092926 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.185142994 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.189289093 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189312935 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189340115 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189393044 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.189441919 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189471006 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189486027 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.189522028 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.189553976 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.192648888 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.192663908 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.192687988 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.192713022 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.192727089 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.192751884 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.192795992 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.193717003 CEST	49755	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.193742990 CEST	443	49755	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194200039 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.194235086 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194300890 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.194634914 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194672108 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194686890 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194704056 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.194736004 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.194783926 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.197741985 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.197761059 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.198004961 CEST	49756	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.198028088 CEST	443	49756	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.227356911 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.231599092 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.231625080 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.231997967 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.232064009 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.232671976 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.233409882 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.236401081 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.236470938 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.236656904 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.236674070 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.237030029 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:34.237050056 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:34.237087011 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 25, 2024 13:27:34.237095118 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 25, 2024 13:27:34.237778902 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.238610983 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.238620996 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.239962101 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.240345955 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.240492105 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.240530968 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.241302013 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.241333961 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.241408110 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.241441965 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.241472960 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.241492987 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.243464947 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.243689060 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.243710995 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.244877100 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.244983912 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.247374058 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.247436047 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.247961998 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.248071909 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.248186111 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.250242949 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.251389980 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.251400948 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.251446962 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.251681089 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.251693964 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.251899004 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.251971960 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.252043962 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.252919912 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.252994061 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.253057957 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.253166914 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.253176928 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.253365040 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.253448009 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.253535032 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.253551960 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.260920048 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.261199951 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.261246920 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.261898041 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.261979103 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.263214111 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.263271093 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.263712883 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.263820887 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.263849974 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.269448996 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.269659042 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.269685984 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.270179033 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.270256996 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.271167994 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.271533012 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.271981001 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.272063017 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.272253990 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.287740946 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.287740946 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.297409058 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.301753044 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.301769018 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.301776886 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.301985979 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.303040028 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.304588079 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.304598093 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306267977 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306410074 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306425095 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306479931 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.306488991 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306505919 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306521893 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.306566954 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.306713104 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306729078 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306763887 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.306780100 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.307379961 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311512947 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311528921 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311543941 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311589956 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.311628103 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.311634064 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311652899 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.311702967 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.311970949 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.312025070 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.312041044 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.312088013 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.312108994 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.312155962 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.315351963 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.322593927 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.322622061 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.322673082 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.322700024 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.350176096 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.350233078 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.350275040 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.350348949 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.350379944 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.350410938 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.350430965 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.365667105 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.365670919 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.367819071 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.367877960 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.367925882 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.367947102 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.367970943 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.367971897 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.368030071 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.368311882 CEST	49748	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.368339062 CEST	443	49748	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.372957945 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.373013973 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.373095036 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.373642921 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.373663902 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.373752117 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.373905897 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.373924971 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.374264956 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.374281883 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.374680996 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.376298904 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.376327038 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.376396894 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.376573086 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.376586914 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.380031109 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.412997007 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.413038969 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.413054943 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.413120031 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.414877892 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.414895058 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.414908886 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.414961100 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.414999008 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.416738987 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.416764021 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.416779041 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.416831017 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.418652058 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.418667078 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.418680906 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.418710947 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.418730974 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.418818951 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.418833017 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.418847084 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.418859959 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.418900967 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.418977022 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.420460939 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.420485973 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.420562029 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.420614004 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.420628071 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.420674086 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.423273087 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423332930 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423347950 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423365116 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423405886 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.423454046 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.423537970 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423588991 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423638105 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.423669100 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423755884 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423770905 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423784971 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.423814058 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.423842907 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.428428888 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428528070 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428540945 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428602934 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.428637981 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428653955 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428668022 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.428692102 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.428741932 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.429024935 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.429081917 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.429248095 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.429272890 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.429286957 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.429305077 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.429330111 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.446959019 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.446985960 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.446999073 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.447051048 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.448792934 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.448847055 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.448894024 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.448905945 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.448910952 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.448946953 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.450828075 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.450853109 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.450867891 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.450915098 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.450938940 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.452848911 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.452863932 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.452878952 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.452936888 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.454546928 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.454571962 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.454586983 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.454610109 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.454633951 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.474509001 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.478333950 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.479460955 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.479669094 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.479878902 CEST	49760	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.479942083 CEST	443	49760	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.497566938 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.497617960 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.497762918 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.497848034 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.498375893 CEST	49761	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.498394966 CEST	443	49761	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.502512932 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.502669096 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.502913952 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.503328085 CEST	49759	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.503345966 CEST	443	49759	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.504295111 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.504321098 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.504385948 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.504415989 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.504457951 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.507237911 CEST	49763	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.507246017 CEST	443	49763	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.510037899 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.510082960 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.510196924 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.510209084 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.510270119 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.511046886 CEST	49765	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.511080980 CEST	443	49765	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.518440008 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.520739079 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.520812988 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.520946980 CEST	49764	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.520986080 CEST	443	49764	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.524863958 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.526101112 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.526139021 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.526289940 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.526308060 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.526316881 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.526628017 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.526648045 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.527580023 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.527668953 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.528372049 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.530044079 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.533906937 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.534090996 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.534177065 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.534256935 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.535970926 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.535989046 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.536004066 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.536048889 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.540508986 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.540525913 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.540539026 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.540572882 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.540606022 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.545577049 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.545617104 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.545744896 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.546091080 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.546099901 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.548888922 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.548908949 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.548969030 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.549228907 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.549246073 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.549695969 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.550753117 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.555649996 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.556307077 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.569192886 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.569207907 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.569224119 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.569292068 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.571126938 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.571141005 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.571156979 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.571239948 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.571239948 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.573043108 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.573067904 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.573081017 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.573143005 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.574995041 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.575037956 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.575093985 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.575110912 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.575156927 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.575184107 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.575412989 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.577188015 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.577260971 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.577450991 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.578845978 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.578891039 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601525068 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601622105 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601674080 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601692915 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601710081 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601715088 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.601782084 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.601820946 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.601820946 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.601856947 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.621252060 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.621366978 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.696271896 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696288109 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696296930 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696304083 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696310043 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696316957 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.696444035 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.696943998 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697005033 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697026968 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697045088 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697065115 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.697099924 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.697545052 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697573900 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697582960 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697632074 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.697643042 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.699467897 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.720474005 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.720549107 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.720606089 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.720674038 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.720710039 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.720730066 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.741314888 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.741336107 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.741353035 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.741405964 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.742125988 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.742153883 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.742168903 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.742187977 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.742207050 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.744585037 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.744632006 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.744647980 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.744699955 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.746047020 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.746107101 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.746114016 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.746124029 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.746170044 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.747772932 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.747927904 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.747942924 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.747956991 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.747992039 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.748009920 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.815419912 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815438986 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815453053 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815505981 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815522909 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815578938 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.815826893 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815865040 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.815877914 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.815886021 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815901995 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.815958977 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.816771030 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.824306965 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.829798937 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.837712049 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.837794065 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.837832928 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.837862968 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.837902069 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.837920904 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.865458965 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.867140055 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867177963 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867193937 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867253065 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867268085 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867294073 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.867319107 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.867614031 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867674112 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.867702007 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867734909 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867752075 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867767096 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.867794037 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.867815018 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.868632078 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.868648052 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.868663073 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.868693113 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.870532990 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870558977 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870573997 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870641947 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870656013 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870670080 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870682955 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.870733976 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.870733976 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.870733976 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.876319885 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.882682085 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.882786036 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.883055925 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:34.889033079 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:34.895694017 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895726919 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895745039 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895777941 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895800114 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895801067 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.895852089 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895879984 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.895906925 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.895906925 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.895941973 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.908430099 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.953442097 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.953526974 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.953560114 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.953599930 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.953629971 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.953655005 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.953903913 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.954070091 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.954122066 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.965677023 CEST	49762	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:34.965713024 CEST	443	49762	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:34.982522011 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982625961 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982640982 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982670069 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.982785940 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982801914 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982817888 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.982835054 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.982862949 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.983283043 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.983309031 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.983335018 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.983361006 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.983398914 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.983416080 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.983443022 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.984231949 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.984247923 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.984263897 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.984277964 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:34.984278917 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:34.984308958 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.016114950 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.016134024 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.016179085 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.016222954 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.016294003 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.016364098 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.016364098 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.036403894 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.041804075 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.088063002 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.091871977 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.091887951 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.093153000 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.097990036 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098083019 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098097086 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098121881 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098134995 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.098138094 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098155975 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098169088 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.098210096 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.098738909 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098754883 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098769903 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.098798037 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.099144936 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099190950 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099206924 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099220991 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.099246979 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.099282980 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099298954 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099339008 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.099982977 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.099984884 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.100008965 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.100023985 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.100172043 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.100249052 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.102083921 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.102122068 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.102184057 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.108328104 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.108345032 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.108402014 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.108542919 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.110763073 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.113802910 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.113902092 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.125027895 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.125078917 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.125138044 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.125905991 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.125926971 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.135126114 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.135155916 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.135240078 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.135296106 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.135349989 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.135349989 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.147079945 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.148474932 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.148547888 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.148559093 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.148571968 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.148622990 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.148622990 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.148814917 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149028063 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149036884 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149082899 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.149105072 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149116039 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149127007 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149138927 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149156094 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.149188042 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.149965048 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149976969 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.149986029 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.150032997 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.150063992 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.151408911 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.213375092 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213526011 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213535070 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213545084 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213594913 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.213629007 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.213692904 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213704109 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.213742018 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.214073896 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214112997 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214123011 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214154959 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.214169025 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214209080 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.214654922 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214684963 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214694977 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214725018 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.214896917 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214907885 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.214943886 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.215369940 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.215478897 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.215524912 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.215696096 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.215737104 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.215744972 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.216308117 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.216828108 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.216917992 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.217045069 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.223831892 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.224157095 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.224185944 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.225380898 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.225986004 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.226161003 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.226289988 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.233000994 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.233344078 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.233361006 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.234527111 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.234935999 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.235091925 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.235109091 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254036903 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254102945 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254153013 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.254196882 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254228115 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.254246950 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.254261017 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254379034 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.254436016 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.255470037 CEST	49766	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.255486012 CEST	443	49766	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.256093025 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.259330988 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.265537024 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.265623093 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.265634060 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.265690088 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.265697956 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.265710115 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.265746117 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.265984058 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.266038895 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.266043901 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.266055107 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.266084909 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.266093969 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.267332077 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.278315067 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.285373926 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.285463095 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.285541058 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.306240082 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.318429947 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.318459034 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.328972101 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.328985929 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.328996897 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329047918 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.329082966 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329096079 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329129934 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.329400063 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329452991 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.329488993 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329500914 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329545021 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.329579115 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329591990 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.329632044 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.330451965 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330507994 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330518007 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330549955 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.330589056 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330600977 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330657005 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.330693007 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.330693007 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.391159058 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.399619102 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.399641991 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.399794102 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.400161982 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.400187016 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.400351048 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.400485992 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.400739908 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.401712894 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.401813030 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.402358055 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.402369022 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.402848959 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.402920008 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.403287888 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.403392076 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.403857946 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.403908014 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.404320955 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.404397964 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.405097961 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.405576944 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.405716896 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.405730963 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.431817055 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.431833029 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.431844950 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.431895971 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.431977034 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.431989908 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432028055 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.432081938 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432126999 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.432285070 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432316065 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432327032 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432339907 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.432357073 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.432375908 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.432619095 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436199903 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436209917 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436222076 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436259031 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.436376095 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436389923 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436424017 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.436830997 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436849117 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.436877012 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.444559097 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.444577932 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.444587946 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.444628954 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.444820881 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.444833040 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.444868088 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.444989920 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445000887 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445013046 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445035934 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.445065975 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.445167065 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445178986 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445218086 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.445492983 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445560932 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445571899 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445599079 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.445724964 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445735931 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445745945 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.445770979 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.445801973 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.446546078 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.446708918 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.446752071 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.451328993 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.451333046 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.458343029 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.466768980 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.466799021 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.466871977 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.466876030 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.466932058 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.467714071 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467746973 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467756033 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467773914 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467782021 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467806101 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467807055 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.467843056 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.467871904 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.467871904 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.467907906 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.470448971 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.470534086 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.470587015 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.474123955 CEST	49770	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.474160910 CEST	443	49770	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.474814892 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.474870920 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.474940062 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.474992037 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.475033998 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.475073099 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.475087881 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.476037025 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.489356995 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.550345898 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.550431967 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.550504923 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.551115036 CEST	49769	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.551182985 CEST	443	49769	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.552269936 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.552306890 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.552692890 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.558207035 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.559883118 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.559915066 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.559928894 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.559942961 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.559957981 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.559981108 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.560014009 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.560158968 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560185909 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560199022 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560221910 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.560246944 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.560475111 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560532093 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560545921 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560647964 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560662031 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.560681105 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.560681105 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.561239958 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.561254025 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.561269045 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.561281919 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.561305046 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.561305046 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.561711073 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.561786890 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.562206984 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.562511921 CEST	49771	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.562526941 CEST	443	49771	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.567065954 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.572429895 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599805117 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599860907 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599881887 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599921942 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599939108 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.599955082 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599971056 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.599999905 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.599999905 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.600025892 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.614497900 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.650414944 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.650445938 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.650525093 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.650541067 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.650580883 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.650595903 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.650711060 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.652399063 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.652453899 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.652522087 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.652549982 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.652600050 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.652676105 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.654721022 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.655172110 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.655235052 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.675216913 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675242901 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675256968 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675271988 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675296068 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.675333977 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.675491095 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675628901 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675671101 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.675673008 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675688982 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.675781012 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.675961971 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676016092 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676028967 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676078081 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.676120043 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676134109 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676147938 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676188946 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.676188946 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.676826954 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676884890 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676898003 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676917076 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.676944017 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.677000999 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.719183922 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.719238043 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.719307899 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.719984055 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.720009089 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.720093012 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.720110893 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.720127106 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.720155001 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.721864939 CEST	49773	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.721890926 CEST	443	49773	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.724615097 CEST	49775	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.724622965 CEST	443	49775	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.739108086 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.739593983 CEST	49774	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.739622116 CEST	443	49774	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.744518042 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.744690895 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.750066042 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.750147104 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.750468969 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.755858898 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.759166002 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:35.764523983 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:35.764578104 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:35.764760971 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:35.770389080 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:35.790770054 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.790791988 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.790803909 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.790827990 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.790911913 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.790924072 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.790956020 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.791060925 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791136026 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.791146040 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791158915 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791203976 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.791426897 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791467905 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791481018 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791520119 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.791536093 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791577101 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.791908979 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791971922 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.791982889 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.792045116 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.792078972 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.792092085 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.792140007 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.792531967 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.792618990 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.792809963 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.796215057 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.796250105 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.796400070 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.812191010 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.814575911 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.815129042 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.815192938 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.817730904 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.823808908 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.829598904 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.834119081 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.834553003 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.834573030 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.834584951 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.834635019 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.838861942 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.838888884 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.838937044 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.838947058 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.838985920 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.838985920 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.881385088 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.881788015 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881799936 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881813049 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881865978 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.881897926 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881911993 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881944895 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.881964922 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.881978035 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.882009983 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.883546114 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.883570910 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.883681059 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.884057045 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.884073019 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.903387070 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.904918909 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:35.906126022 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906259060 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906269073 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906320095 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.906321049 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906335115 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906347990 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906358957 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906387091 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.906387091 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.906426907 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.906485081 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.907082081 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907094955 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907105923 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907205105 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.907401085 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907501936 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.907505989 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907520056 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907548904 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907557011 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.907561064 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907573938 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907586098 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.907632113 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.907632113 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.908293962 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.908819914 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.909029007 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.909061909 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.909143925 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.909631014 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.909648895 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.910237074 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.910268068 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:35.910294056 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.910521030 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.911642075 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.911690950 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.916285992 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.916296959 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.916421890 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.916837931 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.916852951 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.919279099 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.921422958 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.924566984 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.926860094 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.926939011 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.927733898 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.933182001 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.950062037 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.950109959 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.950119972 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:35.950122118 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.950151920 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:35.957067013 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.957530975 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.957565069 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.957650900 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.957650900 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.957668066 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.958071947 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.958508968 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.958570004 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.959784985 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.961714029 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.961806059 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.962160110 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.974216938 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.974620104 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.974637032 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.975152969 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.984004974 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.984018087 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.984028101 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.984060049 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.985331059 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.985352039 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.985363007 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.985407114 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.985440969 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.988683939 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.988753080 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.988823891 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.996969938 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:35.997108936 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:35.997309923 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.007361889 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.021698952 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021749973 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021759987 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021869898 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021881104 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021897078 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021908998 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.021928072 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.021928072 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.021960020 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.022217035 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022275925 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022313118 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.022320032 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022331953 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022360086 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.022660971 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022672892 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022682905 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.022715092 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.022789001 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.023859024 CEST	49788	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.026832104 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.031269073 CEST	80	49788	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.031399012 CEST	49788	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.033031940 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.039346933 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.054841042 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.054852009 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.054862976 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.054917097 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.055303097 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.055330038 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.055341005 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.055355072 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.055363894 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.055394888 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.056265116 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.056284904 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.056294918 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.056309938 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.056334019 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.057271004 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.057281017 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.057291031 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.057327986 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.072449923 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.072632074 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.072640896 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.072650909 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.072681904 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.072705030 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.074435949 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.074446917 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.074516058 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.074624062 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077466011 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077518940 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077569962 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.077584028 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077601910 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.077611923 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077621937 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077636003 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.077657938 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.077759027 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077770948 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.077807903 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.082385063 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.082395077 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.082458973 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.082552910 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.082562923 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.082600117 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.085647106 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.085658073 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.085669041 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.085702896 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.085731983 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.105685949 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.117923021 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.117934942 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.117980003 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.118582964 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.160867929 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.161453962 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.161472082 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.162090063 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.162645102 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.162715912 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.162837029 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.168097973 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.190793991 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.190829992 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.190934896 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.190956116 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.190975904 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.191327095 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.191344023 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.191359997 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.191551924 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.191617966 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.191631079 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.191663980 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.191674948 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.191714048 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.193511963 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.193589926 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.196022034 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.196048021 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.196140051 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.196155071 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.196271896 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.203360081 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.207299948 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.207367897 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.207431078 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.207468033 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.207511902 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.207564116 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.208117008 CEST	49777	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.208148956 CEST	443	49777	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.210156918 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.215446949 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.216382980 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.216675043 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.216692924 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.216798067 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.216964960 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:36.216979980 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:36.219250917 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219264030 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219274998 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219322920 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.219403028 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219465971 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.219577074 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219656944 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219667912 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219715118 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.219791889 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.219851971 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.223145008 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 25, 2024 13:27:36.223164082 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 25, 2024 13:27:36.230648994 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230660915 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230673075 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230683088 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230717897 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.230777979 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.230972052 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230983973 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.230994940 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.231007099 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.231029987 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.231064081 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.231121063 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232137918 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232147932 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232156992 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232191086 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.232222080 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.232476950 CEST	80	49776	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232646942 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232817888 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232827902 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.232889891 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.232995033 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.233005047 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.233016968 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.233051062 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.233086109 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.233493090 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.233652115 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.233712912 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.280668020 CEST	49776	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.312876940 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.312937975 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.312984943 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.313007116 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.313035965 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.313107014 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.359194040 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.359253883 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.359294891 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.359330893 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.359345913 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.359380007 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.359402895 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.407013893 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.407927036 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.408025026 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.408040047 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.408330917 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.408358097 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.408718109 CEST	49779	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.408747911 CEST	443	49779	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.408848047 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.410526037 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.410605907 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.410921097 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.419969082 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:36.420001984 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:36.420254946 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:36.420741081 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:36.420758009 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:36.424629927 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.424676895 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.424707890 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.424734116 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.424777031 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.424777031 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.441536903 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.441596031 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.441641092 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.441648960 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.441698074 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.441698074 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.441772938 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.441848040 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.442209005 CEST	49772	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.442224979 CEST	443	49772	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.442913055 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.442951918 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.443192959 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.443761110 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.443783045 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.451338053 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.457779884 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.457901001 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.457916021 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.457952976 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.459281921 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.459295988 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.459311008 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.459333897 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.459364891 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.462596893 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.462649107 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.462661028 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.462721109 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.466047049 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.466069937 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.466083050 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.466103077 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.466135979 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.469595909 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.469711065 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.469721079 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.469734907 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.469789028 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.469841957 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.473264933 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.473315954 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.473457098 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.479886055 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.479947090 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.479984045 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.479995966 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.480031013 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.480040073 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769166946 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769180059 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769188881 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769196987 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769206047 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769300938 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769309998 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769323111 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769335985 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769345999 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769356966 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769366026 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769373894 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769386053 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769393921 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769390106 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769402981 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769414902 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769473076 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769473076 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769473076 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769473076 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769697905 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769769907 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.769912004 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769931078 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.769970894 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.770019054 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.770030975 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.770096064 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.770950079 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.772416115 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772428036 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772438049 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772522926 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.772770882 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772787094 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772852898 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772871017 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772872925 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.772882938 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772893906 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772902966 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.772917032 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.772927999 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.772969961 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773156881 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.773168087 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.773236990 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.773293972 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:36.773334980 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773345947 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773355961 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773365974 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773370028 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:36.773387909 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773421049 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773545027 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773555040 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773566008 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773576021 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773587942 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773596048 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773608923 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773638010 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773917913 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773957968 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.773974895 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.773983002 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.774018049 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.774018049 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.774029016 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.774163008 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.774399042 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774410009 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774420023 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774456024 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.774478912 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774499893 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774511099 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774521112 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774529934 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.774530888 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774538994 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774549007 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.774555922 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.774589062 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.774602890 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.775552988 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.778927088 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.779531956 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.779835939 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.780971050 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781300068 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781337023 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781344891 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781354904 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.781403065 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.781419992 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781436920 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.781469107 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.781477928 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781492949 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.781536102 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.781554937 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.781565905 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.781665087 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.800940037 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.800951958 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.801106930 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.801131010 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.801162958 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.801181078 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.801326036 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.801371098 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.801495075 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.801605940 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.801696062 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.802167892 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.802216053 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.802372932 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.802562952 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.802642107 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.805061102 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.805516005 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.838908911 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.839371920 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.839603901 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.839824915 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.839946032 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.840055943 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.840164900 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.840282917 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.841027021 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.841291904 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.841334105 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.841360092 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.841438055 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.841455936 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.873454094 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.874628067 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:36.876487017 CEST	49778	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.876501083 CEST	443	49778	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.881247044 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.881258965 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:36.882523060 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.882620096 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.883335114 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.883368015 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:36.884021997 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884033918 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884046078 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884076118 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.884114981 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884126902 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884156942 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.884500980 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884511948 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884522915 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884562016 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.884576082 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.884644032 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884654999 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:36.884710073 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:36.916743994 CEST	49780	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:36.916775942 CEST	443	49780	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.126564980 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.126594067 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.126645088 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.126660109 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.126677036 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.126709938 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.126727104 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.126988888 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127055883 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127084017 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127119064 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.127144098 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127157927 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.127238989 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127285004 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.127285004 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.127551079 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127649069 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.127707958 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.128031969 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.135140896 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.135159016 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.135209084 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.135210037 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.135250092 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.177264929 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.214154959 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:37.246181965 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246244907 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246299982 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246308088 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.246310949 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246346951 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246359110 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.246364117 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.246392965 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.246413946 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.257869959 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:37.280350924 CEST	49786	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.280369043 CEST	443	49786	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.328386068 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.359658003 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.359730005 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.359765053 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.359786034 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.359819889 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.359829903 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.383445024 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.394228935 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.394247055 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.395272017 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.413182974 CEST	49785	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.413207054 CEST	443	49785	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.426615000 CEST	49784	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.426628113 CEST	443	49784	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.439352989 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.469201088 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.469228029 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.469300985 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.470309019 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.470686913 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.472233057 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.472249985 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.474735022 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.478353024 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.478418112 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.478436947 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.478451014 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.478485107 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.478513002 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.511703968 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.512778997 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.512790918 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.513473034 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.513534069 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.514884949 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.514939070 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.515064001 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:37.515079975 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:37.515131950 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:37.515342951 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.515592098 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:37.515607119 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:37.523153067 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.523297071 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.523603916 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.523618937 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.525649071 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.526021957 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.526036978 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.527183056 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.527256966 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.528745890 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.528933048 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.528950930 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.529258966 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.529321909 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.529624939 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.529723883 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.529855013 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.529934883 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.530879021 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.530965090 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.531296968 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.531337976 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.531780958 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.531841040 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.531959057 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.531979084 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:37.568710089 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.583417892 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.583553076 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:37.593966007 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.594024897 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.594047070 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.594058037 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.594089985 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.594104052 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.594139099 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.594288111 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.594342947 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.594921112 CEST	49783	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.594935894 CEST	443	49783	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.707469940 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:37.712938070 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:37.719717026 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.719747066 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.719810963 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.719837904 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.719856024 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.719882011 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.719912052 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.722970009 CEST	49793	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:37.722985983 CEST	443	49793	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:37.729382038 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.729870081 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:37.729897022 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.731055021 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.731194019 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:37.733566999 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.733623981 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:37.734559059 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:37.734720945 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.734911919 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:37.734930992 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:37.775032043 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:38.012552023 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012584925 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012635946 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012648106 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012664080 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.012686014 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012696028 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012711048 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.012743950 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.012758017 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012775898 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012790918 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012833118 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012845039 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012859106 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.012864113 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.012881994 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.013024092 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.013128042 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013153076 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.013165951 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013216019 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013226032 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013410091 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013442993 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.013465881 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.013525963 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.015252113 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.016746044 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.016779900 CEST	443	49790	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.016817093 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.016843081 CEST	49790	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.017663956 CEST	49791	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.017688036 CEST	443	49791	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.020256042 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.020268917 CEST	443	49789	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.020313978 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.020638943 CEST	49789	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.030958891 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.031059027 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.034080029 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.037458897 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.037503004 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.061965942 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:38.062243938 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:38.062477112 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:38.063024044 CEST	49792	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:38.063044071 CEST	443	49792	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:38.214041948 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.214059114 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:38.214148998 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:38.214281082 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:38.217951059 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:38.217988014 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:38.320076942 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.320499897 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.320535898 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.321108103 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.321707964 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.321785927 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.322046041 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.363343000 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.451185942 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.473579884 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.480273008 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.487373114 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.487469912 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.487952948 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.490926027 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.490927935 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.490951061 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.491627932 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.491627932 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.491667986 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.493388891 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.493403912 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.494070053 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.496314049 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.498950958 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.498985052 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.499182940 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:38.499325991 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.499521971 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.499686956 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.499706030 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.504564047 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:38.567747116 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.567770004 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.567837954 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.568123102 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.570447922 CEST	49794	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.570465088 CEST	443	49794	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.587361097 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.587393045 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.587848902 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.588299036 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.588320017 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.665759087 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.665795088 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.665821075 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.665851116 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.666363955 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.666383982 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.666407108 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.666434050 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.666768074 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.668260098 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.668277979 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.668302059 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.668541908 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.670291901 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.670394897 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.670409918 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.670422077 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.670543909 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.672063112 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.672205925 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.672224998 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.672241926 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.672308922 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.672308922 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.681524038 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681571007 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681590080 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681653023 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.681682110 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681777954 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681902885 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681915998 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681950092 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.681967020 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.682012081 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.682790041 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.682843924 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.682854891 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.682885885 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.682941914 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.682971954 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.682985067 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.683060884 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.683060884 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.683837891 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.683851957 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.683929920 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.691425085 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.691467047 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.691484928 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.691579103 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.692261934 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.692291975 CEST	80	49768	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.692352057 CEST	49768	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.721822023 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:38.727771044 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:38.727998018 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:38.728377104 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:38.733971119 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:38.782766104 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.782797098 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.782824039 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.782901049 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.783433914 CEST	80	49787	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.783732891 CEST	49787	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.786257982 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.786353111 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.786433935 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.787089109 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.787127972 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.788168907 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.788227081 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.788259983 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.788865089 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:38.788885117 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:38.797105074 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797142029 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797167063 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797277927 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797293901 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797297001 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.797410011 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.797449112 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797465086 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797491074 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797535896 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.797728062 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797789097 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.797792912 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797815084 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797864914 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797880888 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.797913074 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.798156023 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.798465014 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.798517942 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.798538923 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.798568010 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.798619032 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.798654079 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.798693895 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.799293995 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.799330950 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.799346924 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.799376965 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.799798012 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.822091103 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:38.897389889 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.904625893 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.912538052 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912559986 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912594080 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912647009 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.912647009 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.912873030 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912911892 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912935972 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912952900 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:38.912961006 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.913017035 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:38.927886963 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:38.988435984 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:38.988466978 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.988569021 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.988619089 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.989073992 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:38.989141941 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:38.989207029 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.989208937 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:38.989219904 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.989268064 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:38.989438057 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:38.989454985 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:38.990060091 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.990091085 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:38.990129948 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:38.990220070 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.990264893 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:38.992012024 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:38.992105961 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:38.992254019 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:38.992270947 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.053899050 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:39.134809017 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.134877920 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.276752949 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.276988029 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.282802105 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.282840014 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.343544006 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.343621969 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.343702078 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.343722105 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:39.343735933 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.343751907 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.343827963 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:39.344137907 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.344225883 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:39.347053051 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:39.347152948 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:39.350327969 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.350872040 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.369472027 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.392978907 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.393023014 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.393513918 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.393549919 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.393594980 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.393629074 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.393645048 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.394179106 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.394272089 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.394778013 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.394800901 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.394905090 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.395059109 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.396341085 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.396512032 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.397252083 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.397294998 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.397356987 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.398025990 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.398200035 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.398571968 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.398588896 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.435354948 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.439351082 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.439702034 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.450465918 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.450778961 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:39.450834036 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:39.451772928 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:39.471144915 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:39.471311092 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:39.471406937 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:39.518255949 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.518265009 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.518599033 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.518623114 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.518702984 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.521482944 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.543008089 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:39.639234066 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.640007973 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.640084982 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.647022009 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.647047997 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.647114038 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.647123098 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.647186041 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.649319887 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649389982 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649414062 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649456978 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649477005 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649501085 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649583101 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.649583101 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.649583101 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.649583101 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.649656057 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.649728060 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.652985096 CEST	49796	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:39.653018951 CEST	443	49796	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:39.654150963 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.654175997 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.654227018 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.654279947 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.654288054 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.654320002 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.654375076 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.727366924 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.727432966 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.756841898 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.756875992 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.756886959 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.756937027 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.756964922 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.756983995 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.757005930 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.757018089 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.757035971 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.757035971 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.757045031 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.757049084 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.757081032 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.757107019 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.760894060 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.761008978 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.761183023 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.762140036 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.762170076 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.762834072 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.762842894 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.762993097 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.763724089 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.763813972 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.767278910 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.767362118 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.780515909 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.780544996 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.781780958 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.781945944 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.781963110 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.781977892 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.781996012 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782011032 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782018900 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.782069921 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.782111883 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.782121897 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782138109 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782154083 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782167912 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782179117 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.782183886 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.782210112 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.782217979 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.782247066 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.782805920 CEST	49803	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.782860994 CEST	443	49803	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.783879042 CEST	49801	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.783894062 CEST	443	49801	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.784565926 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.784661055 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.786950111 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.787439108 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.787918091 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.788176060 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.788191080 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.788206100 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.788252115 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.788333893 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.791866064 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.791888952 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.792269945 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.792285919 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.800580025 CEST	49797	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.800611973 CEST	443	49797	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.801337004 CEST	49804	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.801361084 CEST	443	49804	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.899732113 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899751902 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899768114 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899847031 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.899888039 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899916887 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899941921 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899956942 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.899974108 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.900002003 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.900657892 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.900861979 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.900870085 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.900883913 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.900908947 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.900923967 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.900964975 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.901345968 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:39.901386976 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:39.914995909 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.915016890 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.915030003 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.924098015 CEST	49735	443	192.168.2.4	172.217.18.4
Oct 25, 2024 13:27:39.924143076 CEST	443	49735	172.217.18.4	192.168.2.4
Oct 25, 2024 13:27:39.924676895 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.924721003 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.925044060 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.926032066 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.926074982 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.926214933 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.927779913 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.927814960 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.927939892 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.931093931 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.931138992 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.931279898 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.932667017 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.932692051 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.932826042 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.934062004 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.934073925 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.934159994 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.934870958 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:39.935895920 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:39.937751055 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.937762976 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.937977076 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.940576077 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:39.941334963 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:39.941435099 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:39.941447020 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:39.941956043 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.941977024 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.942411900 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.942429066 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.943152905 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.943169117 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.943578959 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.943591118 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.943955898 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.943969011 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.944518089 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:39.944539070 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:39.956137896 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:39.956170082 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:39.956365108 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:39.956876040 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:39.956891060 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.014518976 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.014544010 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.014614105 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.014735937 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.014735937 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.044081926 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:40.087456942 CEST	49805	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.087477922 CEST	443	49805	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.173762083 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.173841000 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.173979998 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.177696943 CEST	49808	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.177714109 CEST	443	49808	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.182555914 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.182720900 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.182893991 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.185271978 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.185318947 CEST	443	49807	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.185354948 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.185386896 CEST	49807	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.260725975 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.265075922 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.265281916 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.265295982 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.265311003 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.265350103 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.265400887 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.267684937 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.267764091 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.267777920 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.267791986 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.267837048 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.273756981 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.273772955 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.273787022 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.273859024 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.279412031 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.279428005 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.279442072 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.279479027 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.279514074 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.284821033 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.284888983 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.284919024 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.284976006 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.285101891 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.285485029 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.285550117 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.286108971 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.286183119 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.287148952 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.287389040 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.287501097 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.287607908 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.287703991 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.287744999 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.350895882 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.382433891 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.382455111 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.382471085 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.382508993 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.382550955 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.385341883 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.385396957 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.385413885 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.385443926 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.390779972 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.390810966 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.390825987 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.390836000 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.390877008 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.396374941 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.396400928 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.396416903 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.396461010 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.401910067 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.401997089 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.402045965 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.427491903 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.427552938 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.614845991 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.614952087 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.615653992 CEST	80	49782	111.177.8.38	192.168.2.4
Oct 25, 2024 13:27:40.615736008 CEST	49782	80	192.168.2.4	111.177.8.38
Oct 25, 2024 13:27:40.673223019 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.673306942 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.673703909 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.674067020 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.674110889 CEST	443	49809	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:40.674140930 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.674182892 CEST	49809	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:40.779618979 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.780879021 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.787983894 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.790704012 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.790740967 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.791213989 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.791481018 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.791498899 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.791596889 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.791619062 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.791627884 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.791681051 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.791954041 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792016029 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.792028904 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.792036057 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792090893 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792542934 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792601109 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792618036 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.792629957 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.792675018 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.792701960 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.793632030 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.793704987 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.793910980 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.796350002 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.796500921 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.797921896 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.797979116 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.802700996 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.802812099 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.802895069 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.827012062 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.827043056 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.827764988 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.827861071 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.828767061 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.828831911 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.831549883 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.831625938 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.842319965 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.842329979 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.843895912 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.850964069 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.850966930 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.850975037 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.854492903 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.854697943 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.854906082 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.855119944 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.855144024 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.856290102 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.856781006 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.856798887 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.857076883 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.857091904 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.857594013 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.857609034 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.857954979 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.879295111 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:40.879384995 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:40.879544020 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:40.879820108 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:40.879858017 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:40.895374060 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.899350882 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.899406910 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:40.915261030 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.915452957 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.915930033 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.916510105 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.916539907 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.917066097 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.917696953 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.917781115 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:40.917912960 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:40.955650091 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:40.959352970 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.050740957 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.091352940 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.103813887 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.104038000 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.104125977 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.108102083 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.108129025 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.108185053 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.108207941 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.108222961 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.108270884 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.110209942 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.110232115 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.110281944 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.110300064 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.110336065 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.115561008 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115590096 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115598917 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115619898 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115653992 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.115678072 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115693092 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.115693092 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.115737915 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.115788937 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.116745949 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.116802931 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.116862059 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.116873980 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.116875887 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.116895914 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.116926908 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.116959095 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.117021084 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.119844913 CEST	49811	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.119882107 CEST	443	49811	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.122486115 CEST	49814	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.122503996 CEST	443	49814	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.130367041 CEST	49810	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.130387068 CEST	443	49810	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.131450891 CEST	49813	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.131511927 CEST	443	49813	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.131865978 CEST	49815	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.131875992 CEST	443	49815	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.135024071 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.135093927 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.135175943 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.136759043 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.136830091 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.137353897 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.137367964 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.137412071 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.138936043 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.138947964 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.139244080 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.139276028 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.139276981 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.140045881 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.140069008 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222311020 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222331047 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222338915 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222352028 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222373009 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222393036 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.222393990 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222413063 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.222445011 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.222472906 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.241117001 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.241209984 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.241271019 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.241847992 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.241863966 CEST	443	49816	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.241877079 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.241919041 CEST	49816	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.244730949 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.244776011 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.244859934 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.245210886 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.245229006 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.247435093 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.249509096 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.249536991 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.249599934 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.249917030 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.249934912 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.251597881 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.251616001 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.251764059 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.251960039 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.251976013 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.252743959 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.253886938 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.253896952 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.254116058 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.254493952 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.254508972 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.256642103 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.256668091 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.256932974 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.256947041 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.257168055 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.257193089 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.257349968 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.257369995 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.258135080 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.258194923 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.259243011 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.259356022 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.259465933 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.259501934 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.259763956 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.260421038 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.260441065 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.260684967 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.260761976 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.260857105 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.260878086 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.337863922 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.337872982 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.337905884 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.337939024 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.337939024 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.337970018 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.338012934 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.338788033 CEST	49812	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.338805914 CEST	443	49812	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.346528053 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.346554041 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.346863031 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.347177029 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.347189903 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.360327005 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.360429049 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.360570908 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.360805988 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:41.360829115 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:41.414213896 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.426203012 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426266909 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426290035 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426315069 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426340103 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426357031 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426381111 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426383018 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426419020 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426422119 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426460981 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426476002 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426553965 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.426626921 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.426642895 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.551230907 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:41.551351070 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:41.583736897 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.588586092 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588630915 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588665962 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588701010 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588726997 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.588804007 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.588855982 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588912964 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588951111 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.588977098 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.588984966 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.589057922 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.589620113 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.589654922 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.589690924 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.589720011 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.590106964 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.590141058 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.590179920 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.590200901 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.590234995 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.705996037 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706044912 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706082106 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706123114 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.706140041 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706173897 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706207991 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706242085 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.706267118 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.706753016 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706804991 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706837893 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706871986 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.706911087 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.706969023 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.707412004 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.707479000 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.707510948 CEST	80	49806	123.244.94.38	192.168.2.4
Oct 25, 2024 13:27:41.707561016 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.724124908 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.724139929 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.734718084 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.734766006 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.735224009 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.735616922 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.735630035 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.771464109 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.771564007 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.771573067 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.771622896 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.771681070 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.771687984 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.771739960 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.772392035 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.772399902 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.772449970 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.772463083 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.843519926 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.843558073 CEST	49806	80	192.168.2.4	123.244.94.38
Oct 25, 2024 13:27:41.888427973 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.888521910 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.888530016 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.888569117 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.888709068 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.910825968 CEST	49817	443	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:41.910840034 CEST	443	49817	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:41.932112932 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.962718964 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:41.962779999 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.963260889 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.963356018 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:41.963979959 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.965395927 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:41.967467070 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:41.967546940 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.972119093 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:41.972151995 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:41.976933002 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.981643915 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.981698036 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.982496023 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.989881039 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.991170883 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.991446018 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.995404959 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.995436907 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.995577097 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.995989084 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.996063948 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:41.997001886 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.997054100 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:41.997128963 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.000216961 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.000233889 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.000756979 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.004667044 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.004847050 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.043344021 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.053204060 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.053226948 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.053308964 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.053309917 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.060897112 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.060973883 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.061278105 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.061316967 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.061561108 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.062463999 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.062505007 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.062561989 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.062680960 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.079786062 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.079844952 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.079936981 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.081552982 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.081564903 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.081589937 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.081890106 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.081933022 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.082437038 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.082530022 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.083441973 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.083509922 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.084208012 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.084295034 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.086045980 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.086074114 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.102196932 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:42.103355885 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.107328892 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.107669115 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:42.107748985 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:42.110832930 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:42.111876965 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.113512039 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.114168882 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.116348982 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:42.117779016 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.117799997 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.118976116 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.119956017 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.120044947 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.120157003 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.120214939 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.120723009 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.120795965 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.121711969 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.124190092 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.124206066 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.124231100 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.124378920 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.124764919 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.124851942 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.125561953 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.128568888 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.128599882 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.128916979 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.129066944 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.129137039 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.132102013 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.135616064 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.144736052 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.144743919 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.144896030 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.144911051 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.146040916 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.146114111 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.146116972 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.146188021 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.148534060 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.148613930 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.148633003 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.148715973 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.149146080 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.149306059 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.149317026 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.149456024 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.149477959 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.149539948 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.167351961 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.195338011 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.195348978 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.195776939 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.195883036 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.195894003 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.196839094 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.196866035 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.197233915 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.197478056 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.197483063 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.211231947 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.211502075 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.211509943 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.211807966 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.211885929 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.212390900 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.212444067 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.212656975 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.212707996 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.212830067 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.212836027 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.225049973 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.225056887 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.225061893 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.225064993 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.239180088 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.239234924 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.239329100 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.239362955 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.239398956 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.239583015 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.240617990 CEST	49820	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.240644932 CEST	443	49820	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.250319004 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.250368118 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.250683069 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.250991106 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.251019001 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.294646025 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:42.294682980 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:42.294699907 CEST	49798	443	192.168.2.4	4.175.87.197
Oct 25, 2024 13:27:42.294708014 CEST	443	49798	4.175.87.197	192.168.2.4
Oct 25, 2024 13:27:42.309600115 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.309645891 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.309731007 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.309758902 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.309798956 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.309855938 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.315203905 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.315259933 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.315279961 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.315351963 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.315385103 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.315414906 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.315459967 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.315489054 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.315534115 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.324561119 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324680090 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324729919 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324759007 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324767113 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.324789047 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.324796915 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.324816942 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324841022 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.324845076 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.324904919 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.324909925 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.329591990 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.329621077 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.329632998 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.329693079 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.329703093 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.329777002 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.331729889 CEST	49821	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.331737995 CEST	443	49821	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.339037895 CEST	49822	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.339066029 CEST	443	49822	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.344643116 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.345520020 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.345536947 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.346061945 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.346579075 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.346662998 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.346872091 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.361134052 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.361221075 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.361315966 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.361618042 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.361651897 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.362150908 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.362181902 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.362277985 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.362891912 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.362910032 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.363210917 CEST	49819	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:42.363231897 CEST	443	49819	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:42.364569902 CEST	49824	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.364612103 CEST	443	49824	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.365644932 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:42.365664005 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:42.365732908 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:42.366055012 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:42.366065979 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:42.367336035 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.367873907 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.367949963 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.372000933 CEST	49826	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.372009993 CEST	443	49826	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.373697042 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.373719931 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.373780966 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.373784065 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.373920918 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.375283003 CEST	49825	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.375298977 CEST	443	49825	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.375447035 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.375466108 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.375523090 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.375544071 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.375575066 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.375667095 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.378174067 CEST	49829	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.378190041 CEST	443	49829	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.387348890 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.406584978 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406646967 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406675100 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406704903 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.406709909 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406753063 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.406765938 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406791925 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.406826973 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.406833887 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406893015 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.406961918 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.408344030 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408375025 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408385038 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408406973 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408443928 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.408463955 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408477068 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.408485889 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.408539057 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.440049887 CEST	49828	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.440063000 CEST	443	49828	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.440772057 CEST	49827	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.440784931 CEST	443	49827	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.471997976 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.472022057 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.472043037 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.472085953 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.472098112 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.472109079 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.472137928 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.472163916 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.591523886 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.615282059 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.615303993 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.616594076 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.616672039 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.619108915 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.619163036 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.622263908 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.622364044 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.622757912 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.622776985 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.638767004 CEST	49830	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.638784885 CEST	443	49830	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.644937038 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.650357962 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.675889015 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.675972939 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.676035881 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.677160978 CEST	49831	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:42.677185059 CEST	443	49831	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:42.758166075 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.758207083 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.758316994 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.758697987 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.758718014 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.760833979 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.760876894 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.760935068 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.761199951 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.761215925 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.763170958 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.763212919 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.763299942 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.763607025 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.763629913 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.764404058 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.764465094 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.764535904 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.764772892 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.764803886 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.767132998 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.767155886 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.767518044 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.768382072 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.768409014 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.794943094 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.888247967 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888329983 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888365984 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888437986 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.888757944 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888792992 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888807058 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.888828039 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.888864994 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.889730930 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.889765024 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.889797926 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.889848948 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.890803099 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.890836000 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.890866995 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.890870094 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.890913963 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.891774893 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.891859055 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.891891956 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.891905069 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.910804987 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.911119938 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.911149025 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.911513090 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.911837101 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.911900043 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.911998987 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.959357977 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987411976 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987445116 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987454891 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987520933 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.987557888 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987574100 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987608910 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.987611055 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987628937 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:42.987648010 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:42.987673044 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.005821943 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.005875111 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.005889893 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.005913019 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.005949020 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.005964041 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.006006956 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.006042957 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.006078005 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.006092072 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.006115913 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.006124020 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.007173061 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.007224083 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.007251024 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.007303953 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.007359028 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.007369041 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.007405996 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.007546902 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.008337975 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.008377075 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.008486032 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.009197950 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.009341955 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.009381056 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.009434938 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.009839058 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.009897947 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.094234943 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.094567060 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.094614983 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.095818043 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.096187115 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.096354961 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.096374989 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.096399069 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106681108 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106695890 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106753111 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.106772900 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106798887 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.106807947 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106816053 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106829882 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.106837988 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.106848955 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.106864929 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.106884956 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.107575893 CEST	49833	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.107593060 CEST	443	49833	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122653008 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122710943 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122746944 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122781038 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122805119 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.122817039 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122839928 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.122852087 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.122936010 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.122977018 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.123050928 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.123085022 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.123095989 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.124114037 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124169111 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124180079 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.124203920 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124237061 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124272108 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124283075 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.124305964 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.124324083 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.125104904 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.125159025 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.125190973 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.125190973 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.125288010 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.126121998 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.126250029 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.126390934 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.136677980 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136773109 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136805058 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136828899 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.136841059 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136877060 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136899948 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.136909962 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136946917 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.136961937 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.136976004 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.137021065 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.145852089 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.151397943 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.160713911 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.160736084 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.160788059 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.160792112 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.160831928 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.197561979 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.200625896 CEST	49834	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.200670004 CEST	443	49834	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.203069925 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.203231096 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.203671932 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:43.204638004 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.205837011 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.205872059 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.206294060 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.206357956 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.206918001 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.207114935 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.207420111 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.207479000 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.208611965 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.208631039 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.209079027 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:43.215619087 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.215666056 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.215941906 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.216144085 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.216170073 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.222668886 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:43.222918987 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:43.222944021 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:43.223447084 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:43.223772049 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:43.223869085 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:43.224088907 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:43.224129915 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:43.225442886 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.225712061 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.225723982 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.227020979 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.227392912 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.227498055 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.227571964 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.286299944 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.286376953 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.307329893 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.307408094 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.339941978 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.339961052 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.339977980 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340015888 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.340094090 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340118885 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340132952 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.340331078 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340373993 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.340393066 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340408087 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340424061 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.340442896 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.341265917 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.341332912 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.341362000 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.341377020 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.341399908 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.341414928 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.341418028 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.341454029 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.342423916 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.342643976 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.342768908 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.357610941 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.358900070 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:43.358916998 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.359472990 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.359901905 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:43.360002041 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.360080957 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:43.407335997 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.455349922 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455379009 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455395937 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455490112 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.455498934 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.455544949 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.455574036 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.455602884 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455606937 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.455619097 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455636978 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455657959 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.455667973 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.455691099 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.455704927 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.455729008 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.455758095 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455774069 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455796957 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.455815077 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.456047058 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456087112 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456103086 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456116915 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.456127882 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456145048 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456171989 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.456193924 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.456814051 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456830025 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456846952 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456872940 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.456898928 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456922054 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.456943989 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.457923889 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.457937956 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.457978010 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.477653980 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.477721930 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.477741003 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.477809906 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.477809906 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.477885008 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.477931976 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.478039980 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.478646994 CEST	49839	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.478681087 CEST	443	49839	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.514282942 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.515404940 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.515419006 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.515947104 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.516016006 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.516977072 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.517030001 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.517184973 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.517258883 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.517332077 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.563333035 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.567338943 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567358971 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567367077 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567405939 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567433119 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.567440987 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567477942 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567488909 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.567498922 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.567498922 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.567512035 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.567524910 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.570947886 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571003914 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571038008 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571077108 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571101904 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571101904 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571110964 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571146011 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571254015 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571348906 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571379900 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571430922 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571461916 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571464062 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571538925 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571628094 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571702003 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571760893 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571789980 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571837902 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.571842909 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571890116 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.571966887 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.572212934 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.572247982 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.572279930 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.572323084 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.572402000 CEST	80	49767	104.193.90.80	192.168.2.4
Oct 25, 2024 13:27:43.572510004 CEST	49767	80	192.168.2.4	104.193.90.80
Oct 25, 2024 13:27:43.574275017 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.574325085 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.574371099 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.574403048 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.574428082 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.574466944 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.609122038 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.609172106 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.609426022 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.609452009 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.609605074 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.609669924 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.609782934 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.609987020 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.610064030 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.610091925 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.610130072 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.610447884 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.610557079 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.610626936 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.610877991 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.610935926 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611027956 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611079931 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611344099 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611437082 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611490965 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611500978 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611506939 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611557961 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611625910 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611712933 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611792088 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.611803055 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.611848116 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.612059116 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.612077951 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.612560034 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.612646103 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.613547087 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.613601923 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.613770008 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.613854885 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.613935947 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.620259047 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.620522022 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.620544910 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.621033907 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.621490002 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.621572018 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.621620893 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.646476030 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.646483898 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.659332991 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.659341097 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.667335987 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.686168909 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.686187983 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.686254025 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.686286926 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.686300993 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.686392069 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.690149069 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.690308094 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.690386057 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:43.690814018 CEST	49841	443	192.168.2.4	103.235.47.212
Oct 25, 2024 13:27:43.690835953 CEST	443	49841	103.235.47.212	192.168.2.4
Oct 25, 2024 13:27:43.691174984 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.691230059 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.691255093 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.691282034 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.691302061 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.691334963 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.694581032 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.694650888 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.694664001 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.694721937 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.694818020 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.694876909 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.695133924 CEST	49838	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.695158005 CEST	443	49838	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.701611042 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.701662064 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.701760054 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.702132940 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.702148914 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.725461960 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.725493908 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.748661041 CEST	54640	53	192.168.2.4	1.1.1.1
Oct 25, 2024 13:27:43.754071951 CEST	53	54640	1.1.1.1	192.168.2.4
Oct 25, 2024 13:27:43.754149914 CEST	54640	53	192.168.2.4	1.1.1.1
Oct 25, 2024 13:27:43.754189014 CEST	54640	53	192.168.2.4	1.1.1.1
Oct 25, 2024 13:27:43.760003090 CEST	53	54640	1.1.1.1	192.168.2.4
Oct 25, 2024 13:27:43.803811073 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.803832054 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.803908110 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.803942919 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.803967953 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.804141998 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.819361925 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.819396019 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.819454908 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.819587946 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.831336021 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.831404924 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.840111971 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.850353956 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.850898027 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.850919008 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.851011992 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.851011992 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.851022005 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.851408005 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.851427078 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.851495981 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.851495981 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.851502895 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.868580103 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868597984 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868669033 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868674040 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.868726015 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.868839979 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868871927 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868899107 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868957043 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.868973970 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.868983984 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869046926 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869564056 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869566917 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869597912 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869621038 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869631052 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869648933 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869658947 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869693041 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869807959 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869843960 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.869860888 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869894028 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.869923115 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.870598078 CEST	49846	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.870629072 CEST	443	49846	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.871035099 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.871078968 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.871165037 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.871651888 CEST	49842	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.871665955 CEST	443	49842	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.872214079 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.872250080 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.872389078 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.873104095 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.873126030 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.873826981 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.873841047 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.873956919 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.873982906 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.874036074 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.874048948 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.874075890 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.874094963 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.874115944 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.875463009 CEST	49845	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.875505924 CEST	443	49845	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.877144098 CEST	49844	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.877156973 CEST	443	49844	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.882610083 CEST	49843	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.882620096 CEST	443	49843	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.921451092 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.921475887 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.921551943 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.921561956 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:43.921608925 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.921608925 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:43.949820042 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.969877958 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.969903946 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.969942093 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.969980001 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.970051050 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.970062017 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.970220089 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:43.970263004 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.970335960 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.970963955 CEST	49837	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:27:43.970982075 CEST	443	49837	103.235.46.96	192.168.2.4
Oct 25, 2024 13:27:44.039004087 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.039024115 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.039130926 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.039159060 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.039216042 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.052963972 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.053225994 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.053251982 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.053936005 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.054002047 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.054960966 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.055010080 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.055186987 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.055269003 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.055351973 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.055366993 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.077404022 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:44.077631950 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:44.077706099 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:44.078201056 CEST	49835	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:44.078233957 CEST	443	49835	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:44.083767891 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:44.083806992 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:44.083951950 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:44.084256887 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:44.084273100 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:44.156476974 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.156533003 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.156594038 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.156613111 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.156649113 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.156666040 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.222959995 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.241626978 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241669893 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241689920 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241720915 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241734028 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241749048 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241766930 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241772890 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:44.241780043 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241795063 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:27:44.241847038 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:44.241847992 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:44.241847992 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:44.273452997 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.273485899 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.273546934 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.273564100 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.273598909 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.273598909 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.299849033 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.299877882 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.299966097 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.299968004 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.300029039 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.306660891 CEST	49849	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.306683064 CEST	443	49849	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.324428082 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:27:44.348855972 CEST	53	54640	1.1.1.1	192.168.2.4
Oct 25, 2024 13:27:44.350523949 CEST	54640	53	192.168.2.4	1.1.1.1
Oct 25, 2024 13:27:44.356638908 CEST	53	54640	1.1.1.1	192.168.2.4
Oct 25, 2024 13:27:44.362821102 CEST	54640	53	192.168.2.4	1.1.1.1
Oct 25, 2024 13:27:44.384228945 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.384253025 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.384468079 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.384499073 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.384567022 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.486968994 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.486994982 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.487072945 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.487087965 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.487297058 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.515047073 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.515091896 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.515255928 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.515255928 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.515269041 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.517554998 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.545886993 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.568258047 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.568288088 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.569843054 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.584475040 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.584695101 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.584976912 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.631334066 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.632677078 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.632728100 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.632879972 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.632879972 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.632896900 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.633585930 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.731092930 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.731362104 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.732220888 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.732238054 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.732398033 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.732423067 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.732597113 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.732964039 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.734657049 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.734721899 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.734997988 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.735085964 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.735219002 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.735323906 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.747823954 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.747868061 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.747904062 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.747915983 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.747941971 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.747968912 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.779334068 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.779342890 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.830677032 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.830744028 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.830820084 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.830842018 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.830878973 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.830909014 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.830955982 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.832359076 CEST	49850	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.832376003 CEST	443	49850	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.841001034 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.841049910 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.841125011 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.841140032 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.841172934 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.841187954 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.870712042 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.870738029 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.870811939 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.870822906 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.870874882 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.980511904 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.980540037 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.980593920 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.980607986 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.980622053 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.980658054 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.982109070 CEST	54642	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.982127905 CEST	443	54642	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.987433910 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.987461090 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.987507105 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.987538099 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:44.987554073 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:44.987591028 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.029442072 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.029531002 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.029553890 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.029597998 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.029611111 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.029612064 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.029664040 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.030164957 CEST	49840	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.030185938 CEST	443	49840	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.052103043 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.052138090 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.052221060 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.052637100 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.052654028 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.098376036 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.098459959 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.098515034 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.098531008 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.098556042 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.098578930 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.098613024 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.127279997 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.127537966 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:45.127553940 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.127913952 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.128360033 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:45.128426075 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.128711939 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:45.128752947 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.216804028 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.216871023 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.216929913 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.216948986 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.216984034 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.217009068 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.590742111 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.590770960 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.590831041 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.590846062 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.590851068 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.590874910 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.590907097 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.590966940 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.591218948 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.591274977 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.591284990 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.591413975 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.591471910 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.591525078 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.593216896 CEST	54641	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.593233109 CEST	443	54641	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.703108072 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.703222990 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.703274965 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:45.704329014 CEST	54643	443	192.168.2.4	39.156.68.81
Oct 25, 2024 13:27:45.704345942 CEST	443	54643	39.156.68.81	192.168.2.4
Oct 25, 2024 13:27:45.911237955 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.911550045 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.911576986 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.912075996 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.912570000 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.912570000 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:45.912655115 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:45.959367037 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471442938 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471477032 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471529007 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471548080 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471573114 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471575022 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471640110 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471681118 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471681118 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471707106 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471858025 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471879959 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.471963882 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471963882 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.471982002 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.473413944 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.521558046 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.521585941 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.521677017 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.521677017 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.521686077 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.522840977 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.641700983 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.641771078 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.641822100 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.641839981 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.641870975 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.642782927 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.759032965 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.759094000 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.759139061 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.759164095 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.759195089 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.759291887 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.862004042 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:46.867650032 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:46.876034021 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.876068115 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.876188040 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.876188040 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:46.876209974 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:46.879456997 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.112621069 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.112637043 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.112660885 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.112705946 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.112728119 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.112763882 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.112772942 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.113648891 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.113677979 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.113709927 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.113717079 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.113739967 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.113756895 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.187834024 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:47.191756964 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:47.197300911 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:47.197371960 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.197403908 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.197459936 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.197477102 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.197504997 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.197519064 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.228286028 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.228313923 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.228359938 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.228375912 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.228410959 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.228440046 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.240039110 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:47.345076084 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.345105886 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.345165968 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.345192909 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.345226049 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.345248938 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.459402084 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.459433079 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.459500074 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.459522009 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.459558010 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.459574938 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.519016981 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:27:47.548825979 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.548863888 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.548973083 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.548973083 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.548998117 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.549060106 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.568300962 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:27:47.579998016 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.580065966 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.580089092 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.580102921 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.580156088 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.696443081 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.696520090 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.696537018 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.696563959 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.696597099 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.696616888 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.698112965 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.698151112 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.698188066 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.698195934 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.698246002 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.698328018 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:27:47.698394060 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.698594093 CEST	54645	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:27:47.698615074 CEST	443	54645	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:09.133630991 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:09.133686066 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:09.133765936 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:09.134346962 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:09.134365082 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:09.165503979 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.170950890 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.536974907 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537056923 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537081957 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537097931 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537116051 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537223101 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.537440062 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537472010 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537489891 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537543058 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.537543058 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.537627935 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537643909 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.537728071 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.538316965 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.538415909 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.538431883 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.538554907 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.656169891 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656230927 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656266928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656305075 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.656322002 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656435966 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.656443119 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656476974 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656512976 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656529903 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.656610966 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.656660080 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.657104015 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.657167912 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.657203913 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.657237053 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.657265902 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.657272100 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.657310009 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.657949924 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.658015013 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.658015966 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.658049107 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.658082008 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.658113003 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.658117056 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.658180952 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.775648117 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775700092 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775741100 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775815010 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775823116 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.775851011 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775883913 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775887966 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.775921106 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775952101 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.775954962 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.775991917 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776045084 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.776176929 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776241064 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776276112 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776298046 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.776310921 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776320934 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.776346922 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776866913 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776902914 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776926041 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.776937008 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.776959896 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.777185917 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.777257919 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.777293921 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.777316093 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.777328014 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.777343988 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.824182034 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.894674063 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894712925 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894731045 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894747972 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894766092 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894783020 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.894817114 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.894881964 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.894989014 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895004034 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895020962 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895082951 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.895133972 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895149946 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895179033 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895200014 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.895263910 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.895849943 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895874023 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895906925 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895921946 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895940065 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.895968914 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.896009922 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.939467907 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.939506054 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.939529896 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:09.939543962 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:09.939604998 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.006642103 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.012223005 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013724089 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013796091 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013824940 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013848066 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.013894081 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013926983 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.013942003 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.013962984 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014012098 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.014311075 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014377117 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014411926 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014425039 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.014447927 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014482021 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014519930 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.014940023 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.014995098 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.015005112 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015039921 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015072107 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015084028 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.015105963 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015144110 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015156984 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.015712976 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.015769958 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.016010046 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.057315111 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.059273005 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.059334040 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.059376001 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.059389114 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.059416056 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.059468031 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.107511044 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.110471010 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.114612103 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.117316008 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.118499994 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.118782997 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.118808985 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.120050907 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.120522976 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.120702982 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.120857000 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.134497881 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134542942 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134608030 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.134653091 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134686947 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134722948 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134737968 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.134758949 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.134804964 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.134845018 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135140896 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135176897 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135193110 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.135211945 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135271072 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.135292053 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135706902 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135736942 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135759115 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.135788918 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135824919 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135829926 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.135859013 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.135925055 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.136014938 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.136049986 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.136100054 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.167335033 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.178081989 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.178131104 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.178169012 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.178184986 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.218907118 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.218944073 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.218975067 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.218976974 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.219048023 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.252633095 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252670050 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252722979 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.252741098 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252775908 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252811909 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252830982 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.252866030 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252917051 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.252927065 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.253142118 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253199100 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.253211975 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253247023 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253300905 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.253314018 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253348112 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253382921 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253407001 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.253420115 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.253484011 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.254147053 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.254183054 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.254220009 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.254230022 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.297451973 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.297488928 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.297518015 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.297523975 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.297656059 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.326730013 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.326778889 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.326817036 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.326852083 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.326869965 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.326890945 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.326917887 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.328489065 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.328526020 CEST	80	49737	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.328557968 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.338238955 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.338274002 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.338310003 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.338331938 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.341785908 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.345156908 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.347227097 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350433111 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350470066 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350503922 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350538015 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.350542068 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.350816965 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350852013 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350882053 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.350884914 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.350943089 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.356682062 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.356714964 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.356749058 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.357184887 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.358025074 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.358061075 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.358093977 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.359914064 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.361399889 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.361437082 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.361470938 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.361495972 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.364516020 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.364551067 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.364573002 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.368791103 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.372055054 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372128963 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372131109 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372164965 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372221947 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372231960 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372263908 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372301102 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372313023 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372337103 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372390032 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372410059 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372479916 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372515917 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372543097 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372550964 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.372612000 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.372971058 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373063087 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373099089 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373123884 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.373167992 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373202085 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373215914 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.373236895 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373272896 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.373286963 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.373970985 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.374027967 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.374190092 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.381407022 CEST	49737	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.416749954 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.416785955 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.416821003 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.416836977 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.459589005 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.460077047 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.460124016 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.460161924 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.460177898 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.469224930 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.469290018 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.469329119 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.469378948 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.469871998 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.469932079 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.469943047 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.469978094 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.470031977 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.470371008 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.470442057 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.470474005 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.470498085 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.471347094 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.471416950 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.471517086 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.479217052 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.480150938 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.480947018 CEST	54647	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.484817982 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.485671997 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.486383915 CEST	80	54647	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.486465931 CEST	54647	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.486596107 CEST	54647	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.491338015 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491374969 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491396904 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.491420031 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491481066 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.491487026 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491522074 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491555929 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491569042 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.491590977 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.491650105 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.491951942 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492021084 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492055893 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492073059 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.492091894 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492142916 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492149115 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.492177963 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492213011 CEST	80	49736	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.492232084 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.492242098 CEST	80	54647	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.527354956 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.528003931 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.528084993 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.528217077 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.528244972 CEST	443	54646	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.528285980 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.528315067 CEST	54646	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.533279896 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.533339024 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.533425093 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.533751011 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:10.533768892 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:10.536755085 CEST	49736	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.589338064 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.589720011 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.589804888 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.593978882 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.599384069 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.615283966 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.615308046 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.615334034 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.615385056 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.616152048 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:10.616194010 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:10.616276979 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:10.616641045 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:10.616658926 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:10.616995096 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.617054939 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.628866911 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.634258032 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.673022032 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673058033 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673073053 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673115015 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.673263073 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673279047 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673295975 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673310041 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.673325062 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673336983 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.673341990 CEST	80	49757	103.235.47.188	192.168.2.4
Oct 25, 2024 13:28:10.673417091 CEST	49757	80	192.168.2.4	103.235.47.188
Oct 25, 2024 13:28:10.722021103 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.722074986 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.722132921 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.722549915 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.724477053 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.724493027 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.724508047 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.724591970 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.726208925 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.726226091 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.726239920 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.726278067 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.726315022 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.727756023 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.729356050 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.729479074 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.729494095 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.729509115 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.729537010 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.729572058 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.732985020 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.733000994 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.733017921 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.733062029 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.733720064 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.736078024 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.736102104 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.736118078 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.736171007 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.736171007 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.844825983 CEST	80	49749	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.844897032 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.844930887 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.844963074 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.844996929 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.845006943 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.845032930 CEST	80	49751	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.845071077 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.875380993 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.875425100 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.875478029 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.875682116 CEST	80	49781	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.879004002 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.879064083 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.879152060 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.879657984 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.879693985 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:10.886308908 CEST	49751	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.886473894 CEST	49749	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.928109884 CEST	49781	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:10.970681906 CEST	80	49750	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.025834084 CEST	49750	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.330780983 CEST	80	54647	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.330918074 CEST	80	54647	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.330981970 CEST	54647	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.333406925 CEST	80	54647	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.383894920 CEST	54647	80	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.398102999 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:11.398149014 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:11.398372889 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:11.398673058 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:11.398694038 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:11.519651890 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:11.534001112 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.534060001 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.534147978 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.536185980 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.536238909 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.536295891 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.541431904 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.541454077 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.541528940 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.542073965 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:11.542103052 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:11.542874098 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.542913914 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.543451071 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:11.543581009 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.543601036 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.547156096 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.547202110 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.548808098 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:11.548993111 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:11.549912930 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:11.595334053 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:11.697534084 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:11.720983982 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.722770929 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.722830057 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.722930908 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.726299047 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.726319075 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.726665020 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.726696014 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.726823092 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:11.726851940 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:11.727221012 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.728420973 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:11.728492975 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:11.729332924 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.729418993 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.730004072 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:11.733702898 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:11.733793020 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:11.733953953 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:11.733964920 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:11.771348000 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:11.773756027 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.773813009 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:11.774032116 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.774473906 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.774523020 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:11.774626970 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.774967909 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.774997950 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:11.775394917 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.775413036 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:11.780612946 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:11.781441927 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.781462908 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:11.781549931 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.781817913 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:11.781837940 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.063009977 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:12.063199043 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:12.063527107 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:12.088756084 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.088785887 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.088809967 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.088888884 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.088953972 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.088992119 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.089011908 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.090635061 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.090701103 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.090708971 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.090771914 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.387168884 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.390777111 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.394887924 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.429173946 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.444120884 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.444120884 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.455610991 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.455651045 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.455960035 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.455976009 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.456413984 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.456429958 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.456924915 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.457170010 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.457235098 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.457521915 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.457559109 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.457596064 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.458178997 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.458228111 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.465210915 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.465305090 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.465456963 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.470482111 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.470544100 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.470624924 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.471354008 CEST	54661	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.471379042 CEST	443	54661	113.219.161.38	192.168.2.4
Oct 25, 2024 13:28:12.471461058 CEST	54661	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.471757889 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.471780062 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.471894026 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.472210884 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.472235918 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.472400904 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.473496914 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.473536015 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.473696947 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.473994017 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.474067926 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.474138975 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.475398064 CEST	54666	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.475435972 CEST	443	54666	113.219.161.38	192.168.2.4
Oct 25, 2024 13:28:12.475568056 CEST	54666	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.476862907 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.477029085 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.477832079 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.478100061 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.479222059 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.479235888 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.479666948 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.479684114 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.480048895 CEST	54661	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.480066061 CEST	443	54661	113.219.161.38	192.168.2.4
Oct 25, 2024 13:28:12.480308056 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.480323076 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.480751038 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.480767965 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.481245995 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:12.481267929 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:12.481782913 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:12.481822014 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:12.482547998 CEST	54666	443	192.168.2.4	113.219.161.38
Oct 25, 2024 13:28:12.482559919 CEST	443	54666	113.219.161.38	192.168.2.4
Oct 25, 2024 13:28:12.493266106 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.493287086 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.493509054 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.504060030 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.504081964 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.537192106 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.539335966 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.551026106 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:12.551460028 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.559989929 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.560170889 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:12.560197115 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:12.560343981 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.560401917 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.561413050 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:12.561502934 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:12.563901901 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:12.563986063 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:12.582915068 CEST	54648	443	192.168.2.4	103.235.46.96
Oct 25, 2024 13:28:12.582967997 CEST	443	54648	103.235.46.96	192.168.2.4
Oct 25, 2024 13:28:12.584084988 CEST	54650	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.584106922 CEST	443	54650	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.594588041 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:12.594624996 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:12.594850063 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:12.595058918 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:12.595069885 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:12.603337049 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.606410027 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.606631994 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.606654882 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.607888937 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.607958078 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.609411001 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.609443903 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.610348940 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.610420942 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.610569954 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.610697031 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.610702991 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.610742092 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.657727957 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.657752991 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.657783985 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.713671923 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.742152929 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742216110 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742235899 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742269039 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742279053 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.742324114 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742355108 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.742355108 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.742459059 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.742527962 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.743175030 CEST	54652	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.743212938 CEST	443	54652	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.761075020 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.761338949 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.761399984 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.761921883 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.761997938 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.762940884 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.763001919 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.768961906 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.769319057 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.769350052 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.770092010 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.770184040 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.771100998 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.771166086 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.773864031 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.774060011 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.774076939 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.775212049 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.775286913 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.777842045 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:12.777908087 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:12.851728916 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851759911 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851769924 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851814985 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.851823092 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851862907 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851902008 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851916075 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.851933002 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.851933002 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.851984978 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.851984978 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.919560909 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919636965 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919656992 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919698000 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919704914 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.919718981 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919737101 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919764996 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.919770956 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.919794083 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.919814110 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.970870018 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.970905066 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.970993042 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.971030951 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.971081018 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.986645937 CEST	54668	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.986814976 CEST	54669	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.987057924 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987109900 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987128973 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987171888 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.987189054 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987210989 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987229109 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987234116 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.987260103 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:12.987267971 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.987288952 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.987320900 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:12.992470026 CEST	80	54668	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:12.992547035 CEST	54668	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.992589951 CEST	80	54669	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:12.992733955 CEST	54669	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.992840052 CEST	54668	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.992986917 CEST	54669	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:12.998610973 CEST	80	54668	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:12.998961926 CEST	80	54669	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:13.016727924 CEST	54670	80	192.168.2.4	106.225.194.36
Oct 25, 2024 13:28:13.022242069 CEST	80	54670	106.225.194.36	192.168.2.4
Oct 25, 2024 13:28:13.022324085 CEST	54670	80	192.168.2.4	106.225.194.36
Oct 25, 2024 13:28:13.022659063 CEST	54670	80	192.168.2.4	106.225.194.36
Oct 25, 2024 13:28:13.025156975 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.025341034 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.025487900 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.025507927 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.028350115 CEST	80	54670	106.225.194.36	192.168.2.4
Oct 25, 2024 13:28:13.036147118 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.036175966 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.036223888 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.036242962 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.036262989 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.036331892 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.036349058 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.036458969 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.057797909 CEST	54671	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.058958054 CEST	54672	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.061568975 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.061865091 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.061981916 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.062227964 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.062669039 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.062740088 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.063210011 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.063543081 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.063627005 CEST	80	54671	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:13.063652992 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.063673019 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.063709021 CEST	54671	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.064052105 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.064065933 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.064559937 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:13.064625978 CEST	54672	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.067863941 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.070545912 CEST	54673	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.073824883 CEST	54674	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.074666023 CEST	54675	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.075808048 CEST	54676	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.076008081 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.076095104 CEST	54673	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.076875925 CEST	54677	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.077131033 CEST	54671	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.077627897 CEST	54673	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.077697992 CEST	54672	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.079186916 CEST	80	54674	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.079273939 CEST	54674	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.079709053 CEST	54674	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.079988003 CEST	80	54675	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.080064058 CEST	54675	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.080267906 CEST	54675	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.081125975 CEST	80	54676	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.081186056 CEST	54676	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.081688881 CEST	54676	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:13.082138062 CEST	80	54677	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:13.082197905 CEST	54677	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:13.082638979 CEST	80	54671	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:13.082905054 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.083050966 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:13.085146904 CEST	80	54674	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.085587978 CEST	80	54675	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.087133884 CEST	80	54676	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:13.088042974 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.088073969 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.088186979 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.088227034 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.088278055 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.102417946 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.103526115 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.106300116 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.106312037 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.106358051 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.106396914 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.106412888 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.106451035 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.106473923 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.110618114 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.114675999 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.114725113 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.114751101 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.114752054 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.114805937 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.151911974 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.151942015 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.151987076 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.152024984 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.152040958 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.152085066 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.152120113 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.152178049 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.159614086 CEST	54655	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.159652948 CEST	443	54655	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.189451933 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.189516068 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.189599991 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.189865112 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.189883947 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.193051100 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.193084002 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.193352938 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.193645000 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.193656921 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.195456028 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.195523024 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.195660114 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.195996046 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.196033001 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.206001043 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.206022978 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.206100941 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.206131935 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.206172943 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.206191063 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.220905066 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.221247911 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.221262932 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.221781969 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.221851110 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.222798109 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.222857952 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.223565102 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.224699020 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.224725008 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.225337029 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.225413084 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.225411892 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.225497961 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.225584030 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.225605011 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.226402998 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.226474047 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.226738930 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.226820946 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.226999998 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.227019072 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.229947090 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.230246067 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.230257988 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.230732918 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.230834961 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.231771946 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.231859922 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.232343912 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.232497931 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.266861916 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.266911030 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.266973019 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.267004013 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.267024994 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.267056942 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.270601034 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.270742893 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.277153969 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.277224064 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.277250051 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.277278900 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.277342081 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.277364016 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.277420998 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.279485941 CEST	54654	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.279519081 CEST	443	54654	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.287522078 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.287539959 CEST	443	54664	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.292002916 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.292071104 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.292161942 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.292695999 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.292725086 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.321692944 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:28:13.321763039 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:28:13.323607922 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.323671103 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.323728085 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.323745012 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.323772907 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.323812962 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:13.323834896 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.323843002 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:13.323909998 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:13.324724913 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:13.324743032 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:13.330976963 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.331558943 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.331592083 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.332169056 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.332256079 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.333101988 CEST	54664	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.333230019 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.333297014 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.334610939 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.334839106 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.334938049 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.335352898 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.335371017 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.336162090 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.340217113 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.340264082 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.340619087 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.340646982 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.340713024 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.340780973 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.341250896 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.341308117 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.341773033 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.341836929 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.342288971 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.342355013 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.342454910 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.342525005 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.343287945 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.343394041 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.343758106 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.343775034 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.345570087 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.346069098 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.346085072 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.346574068 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.346630096 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.347595930 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.347668886 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.348696947 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.348764896 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.349251986 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.349262953 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.363065958 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.363133907 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.363220930 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.363257885 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.363578081 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.365014076 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.365160942 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.365230083 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.367077112 CEST	54657	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.367115974 CEST	443	54657	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.367662907 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.367687941 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.367748022 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.367897987 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.367897987 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.370805979 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.370831013 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.370882988 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.370923042 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.370975971 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.376524925 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.376588106 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.376647949 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.376674891 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.376709938 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.376732111 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.376749992 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.376872063 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.379901886 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.396176100 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.396181107 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.396656036 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.396680117 CEST	443	54659	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.417470932 CEST	54653	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.417507887 CEST	443	54653	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.421144962 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.421169996 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.421236992 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.421269894 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.421315908 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.429385900 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.429414034 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.429478884 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.429517984 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.429565907 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.442467928 CEST	54659	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.519007921 CEST	54656	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.519042969 CEST	443	54656	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.520842075 CEST	54658	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:13.520858049 CEST	443	54658	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:13.534930944 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.534956932 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.534966946 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.534982920 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.535018921 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.535038948 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.535084009 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.535099030 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.535113096 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.535141945 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.544315100 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.544361115 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.544476986 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.544836998 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.544909954 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.545123100 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.545548916 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.545594931 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.545720100 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.545919895 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.545939922 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.546071053 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.546458960 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.546490908 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.546736002 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.546756029 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.547139883 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.547168016 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.547887087 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.547907114 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.550996065 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551026106 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551035881 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551069975 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551079988 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.551096916 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551132917 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.551157951 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.551162958 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.551222086 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.563154936 CEST	54662	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.563168049 CEST	443	54662	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.567141056 CEST	49836	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:28:13.568295002 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.568314075 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.568542004 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.572022915 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:13.572040081 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:13.572421074 CEST	80	49836	45.113.194.250	192.168.2.4
Oct 25, 2024 13:28:13.582415104 CEST	54651	443	192.168.2.4	119.167.229.38
Oct 25, 2024 13:28:13.582433939 CEST	443	54651	119.167.229.38	192.168.2.4
Oct 25, 2024 13:28:13.599211931 CEST	54667	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:13.599235058 CEST	443	54667	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:13.600668907 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.600696087 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.600703001 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.600740910 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.600763083 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.600774050 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.600831032 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.640646935 CEST	54665	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.640698910 CEST	443	54665	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.653310061 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.653369904 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.653420925 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.653448105 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.653481007 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.653502941 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.698321104 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698344946 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698354959 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698374987 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698412895 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698513985 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.698585987 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.698656082 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.704519987 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.704591036 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.704596996 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.704741955 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.708319902 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.708359003 CEST	443	54660	185.10.104.109	192.168.2.4
Oct 25, 2024 13:28:13.708383083 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.708496094 CEST	54660	443	192.168.2.4	185.10.104.109
Oct 25, 2024 13:28:13.763633013 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.763695002 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.763725042 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.763746977 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.763792992 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.763839006 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.763948917 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.839114904 CEST	54663	443	192.168.2.4	104.193.90.87
Oct 25, 2024 13:28:13.839143991 CEST	443	54663	104.193.90.87	192.168.2.4
Oct 25, 2024 13:28:13.957341909 CEST	80	54668	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:13.957364082 CEST	80	54668	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:13.957428932 CEST	54668	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:13.961097002 CEST	80	54669	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:13.961445093 CEST	80	54669	61.170.103.36	192.168.2.4
Oct 25, 2024 13:28:13.961503983 CEST	54669	80	192.168.2.4	61.170.103.36
Oct 25, 2024 13:28:14.026973963 CEST	80	54670	106.225.194.36	192.168.2.4
Oct 25, 2024 13:28:14.027108908 CEST	80	54670	106.225.194.36	192.168.2.4
Oct 25, 2024 13:28:14.027199030 CEST	54670	80	192.168.2.4	106.225.194.36
Oct 25, 2024 13:28:14.031881094 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.039143085 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.039156914 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.040050983 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.041615009 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.041790009 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.043941975 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.055197954 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.064471960 CEST	80	54674	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.065193892 CEST	80	54674	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.065319061 CEST	54674	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.074420929 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.077279091 CEST	80	54675	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.077312946 CEST	80	54675	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.077326059 CEST	80	54675	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.077378988 CEST	54675	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.078821898 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.078838110 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.078854084 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.078867912 CEST	80	54673	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.078916073 CEST	54673	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.078962088 CEST	54673	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.087330103 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.098813057 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.110877037 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.110925913 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.110941887 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.110974073 CEST	80	54672	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.111006021 CEST	54672	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:14.111056089 CEST	54672	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:14.116895914 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.132736921 CEST	54675	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.133042097 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.163563013 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.163614988 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.164397955 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.164422035 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.165045023 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.165128946 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.165154934 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.165174961 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.165815115 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.166090012 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.166174889 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.166888952 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.167109966 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.167579889 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.167592049 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.167671919 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.167893887 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.168646097 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.168719053 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.194767952 CEST	80	54676	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.195033073 CEST	80	54676	183.61.177.36	192.168.2.4
Oct 25, 2024 13:28:14.195223093 CEST	54676	80	192.168.2.4	183.61.177.36
Oct 25, 2024 13:28:14.208868980 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.211339951 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.238256931 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.238548994 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.238565922 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.238590002 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.239173889 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.239386082 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.239456892 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.239465952 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.240365982 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.240387917 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.240405083 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.240463972 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.240659952 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.240677118 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.242647886 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.242750883 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.243172884 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.243199110 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.254705906 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:14.254739046 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:14.254822016 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:14.255799055 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:14.255810022 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:14.286539078 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.286539078 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.286583900 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.286827087 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.287349939 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.287364006 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.287811041 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.287875891 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.288505077 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.288583994 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.290204048 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.290287971 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.290899992 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.290925980 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.292124987 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.292503119 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.292550087 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.293716908 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.293812990 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.296210051 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.296288013 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.300545931 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.304487944 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.304521084 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.304943085 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.305051088 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.305134058 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.305135012 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.305514097 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.305546999 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.306072950 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.306145906 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.306479931 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.306574106 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.306727886 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.306761026 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.310975075 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.311362028 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.311378956 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.311888933 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.311990023 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.312913895 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.312983990 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.313411951 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.313499928 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.316474915 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.316503048 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.339941025 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.348731041 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.348932981 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.368504047 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.401484966 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.401550055 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.401602030 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.401640892 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.401689053 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.401717901 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.401752949 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.404750109 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.404824018 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.404833078 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.404932022 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.405021906 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.405070066 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.405090094 CEST	443	54679	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.405102015 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.405216932 CEST	54679	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.425415993 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:28:14.425513983 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:28:14.426623106 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.426656961 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.426701069 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.426754951 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.426765919 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.426815987 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.426815987 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.428999901 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.433444023 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.433476925 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.434016943 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.435164928 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.435252905 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.435622931 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.435966969 CEST	54678	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.436006069 CEST	443	54678	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.479374886 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.487098932 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.487137079 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.487144947 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.487180948 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.487180948 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.487190008 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.487202883 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.487236977 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.487272024 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.487292051 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.487292051 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.487370968 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.489003897 CEST	54682	443	192.168.2.4	185.10.104.124
Oct 25, 2024 13:28:14.489036083 CEST	443	54682	185.10.104.124	192.168.2.4
Oct 25, 2024 13:28:14.489574909 CEST	54685	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.489592075 CEST	443	54685	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503340960 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503395081 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503442049 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503473043 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.503504038 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503519058 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503534079 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503567934 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503607035 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.503604889 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.503635883 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.503650904 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.503734112 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.505153894 CEST	54684	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.505188942 CEST	443	54684	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.506009102 CEST	54683	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.506042957 CEST	443	54683	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.515058041 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.515106916 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.515173912 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.515185118 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.515259981 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.516015053 CEST	54686	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:14.516033888 CEST	443	54686	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:14.597249031 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597284079 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597292900 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597312927 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597321987 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597378969 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597409964 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.597410917 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.597440004 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.597470999 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.597508907 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.607585907 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607652903 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607676983 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607722998 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607743979 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607741117 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.607768059 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607791901 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.607799053 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.607814074 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.607831001 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.607856989 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.716617107 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.716645956 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.716713905 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.716746092 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.716780901 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.716795921 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.724370956 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.724421978 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.724473000 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.724512100 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.724550962 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.727442980 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.736108065 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.736162901 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.736234903 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.736258030 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.736315012 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.736330032 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.736393929 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.773144007 CEST	80	54671	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.773770094 CEST	80	54671	125.74.42.36	192.168.2.4
Oct 25, 2024 13:28:14.773858070 CEST	54671	80	192.168.2.4	125.74.42.36
Oct 25, 2024 13:28:14.802376032 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.802437067 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.802479982 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.802570105 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.802653074 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.802692890 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.802716970 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.833658934 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.833709955 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.833762884 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.833785057 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.833821058 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.833842039 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.844337940 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:14.844396114 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:14.844491005 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:14.844542980 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:14.844575882 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:14.844722033 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:14.910254002 CEST	54680	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.910296917 CEST	443	54680	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.922369957 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.922420025 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.922488928 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.922518969 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.922554970 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.922579050 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.952955961 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.953002930 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.953058004 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.953069925 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.953109980 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.953133106 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.959641933 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.959686995 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.959734917 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.959743023 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.959789991 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.959814072 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.961705923 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.982459068 CEST	54681	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:14.982472897 CEST	443	54681	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:14.991817951 CEST	54649	443	192.168.2.4	220.169.152.38
Oct 25, 2024 13:28:14.991854906 CEST	443	54649	220.169.152.38	192.168.2.4
Oct 25, 2024 13:28:15.001415014 CEST	49848	80	192.168.2.4	45.113.194.250
Oct 25, 2024 13:28:15.002162933 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.002193928 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.002300978 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.003565073 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.003576994 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.007110119 CEST	80	49848	45.113.194.250	192.168.2.4
Oct 25, 2024 13:28:15.008707047 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.008805037 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.038347006 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.038394928 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.038455009 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.038491011 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.038528919 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.038556099 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.117305040 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.117346048 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.118282080 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.150185108 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.156028986 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.156075954 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.156116962 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.156152010 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.156182051 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.156203032 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.191359043 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.273365021 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.273411036 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.273510933 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.273534060 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.273566008 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.273588896 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.340529919 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.340574980 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.340745926 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.341965914 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.341984987 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.354012966 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:15.354064941 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:15.354136944 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:15.354341030 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:15.354367971 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:15.390861034 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.390913963 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.390988111 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.391014099 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.391047001 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.391086102 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.397531033 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.397557974 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.397614956 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.397633076 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.397641897 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.397676945 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.397690058 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.397777081 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.512833118 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.512878895 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.512928963 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.512950897 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.512998104 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.512998104 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.522397995 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.522454023 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.522516012 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.522532940 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.522562981 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.522588015 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.774557114 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.774574995 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.774624109 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.774701118 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.774760008 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.774761915 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.774775982 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.774844885 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.775116920 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775130033 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775177956 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775243044 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.775243044 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.775283098 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775521040 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.775791883 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.775814056 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.775837898 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775868893 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.775871992 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.775907993 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.775953054 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.775962114 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.776060104 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.819399118 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.852804899 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:15.859533072 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:15.859631062 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:15.860234022 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:15.865668058 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:15.871654987 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.871700048 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.871754885 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.871808052 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.871840000 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.871958017 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.874917030 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.874942064 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.875050068 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.875070095 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.875113964 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.875113964 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.974625111 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.975240946 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.975255966 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.975769997 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.976833105 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.976921082 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:15.977227926 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:15.987730980 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.987783909 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.987837076 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.987880945 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.987941027 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.987941027 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.990212917 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.990259886 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.990303993 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.990324020 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:15.990360975 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.990381956 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:15.993772030 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.993796110 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.993877888 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.993907928 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:15.993953943 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:15.993977070 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.019336939 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.107196093 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.107258081 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.107347965 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.107439995 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.107507944 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.107507944 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.112723112 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.112759113 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.112874985 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.112874985 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.112915039 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.112988949 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.114240885 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.114296913 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.114352942 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.114352942 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.114363909 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.114432096 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.218333006 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.222846985 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.222908020 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.222937107 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.222980976 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.223009109 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.223028898 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.225119114 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.225166082 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.225203037 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.225219965 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.225255013 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.225275993 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.232669115 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.232692957 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.232783079 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.232783079 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.232805967 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.232923031 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.251617908 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.251682997 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.253020048 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.266829967 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.266951084 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.267195940 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.299683094 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.299731016 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.299808979 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:16.299825907 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.299870014 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.299920082 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:16.299983978 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:16.307327986 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.342117071 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.342145920 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.342206001 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.342231989 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.342259884 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.342292070 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.351103067 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.351124048 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.351177931 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.351206064 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.351228952 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.351330042 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.386020899 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.386045933 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.386104107 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.386126995 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.386156082 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.386176109 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.410746098 CEST	54689	443	192.168.2.4	60.188.66.38
Oct 25, 2024 13:28:16.410768986 CEST	443	54689	60.188.66.38	192.168.2.4
Oct 25, 2024 13:28:16.426800966 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.436861992 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.436903954 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.437624931 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.437731981 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.438649893 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.439414024 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.447031021 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.447170973 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.459697008 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.459722042 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.459804058 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.459836960 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.459860086 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.459883928 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.469331980 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.469362020 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.469425917 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.469449043 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.469499111 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.469499111 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.499982119 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.500021935 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.542479992 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.576044083 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.576069117 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.576139927 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.576174974 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.576220989 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.577642918 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.577658892 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.577717066 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.577727079 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.577764988 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.583331108 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.587515116 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.587547064 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.587637901 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.587637901 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.587656021 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.587960958 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.588923931 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.588946104 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.589030027 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.589030027 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.589037895 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.591332912 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.632174969 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.632242918 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.632252932 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.632302999 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.638256073 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.638330936 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.638376951 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.638402939 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.638418913 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.638448954 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.638467073 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.638467073 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.638494015 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.691745996 CEST	54688	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.691770077 CEST	443	54688	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.694315910 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.694335938 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.694391966 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.694417000 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.694453001 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.694463015 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.695554018 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.695571899 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.695617914 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.695626020 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.695667982 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.758881092 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.758948088 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.759088993 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.759089947 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.759089947 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.759164095 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.759218931 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.812094927 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.812159061 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.812194109 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.812278986 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.812314034 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.812339067 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.813270092 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.813318014 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.813347101 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.813364029 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.813393116 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.813414097 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.858935118 CEST	54693	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.859013081 CEST	443	54693	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.859085083 CEST	54694	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.859110117 CEST	54693	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.859118938 CEST	443	54694	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.859173059 CEST	54694	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.859848022 CEST	54695	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.859869003 CEST	443	54695	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.859931946 CEST	54695	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860552073 CEST	54696	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860585928 CEST	443	54696	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.860605955 CEST	54695	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860639095 CEST	443	54695	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.860646009 CEST	54696	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860677004 CEST	54697	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860723972 CEST	443	54697	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.860774994 CEST	54697	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860795021 CEST	54693	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860821009 CEST	443	54693	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.860970974 CEST	54697	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.860997915 CEST	443	54697	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.861068010 CEST	54694	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.861079931 CEST	443	54694	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.861181021 CEST	54696	443	192.168.2.4	13.107.246.60
Oct 25, 2024 13:28:16.861198902 CEST	443	54696	13.107.246.60	192.168.2.4
Oct 25, 2024 13:28:16.878525972 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.878561020 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.878607988 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.878626108 CEST	443	54690	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.878655910 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.878676891 CEST	54690	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.880440950 CEST	54698	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.880455017 CEST	443	54698	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.880515099 CEST	54698	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.880753994 CEST	54698	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.880770922 CEST	443	54698	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.908138037 CEST	54699	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.908288002 CEST	54700	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.911571026 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911637068 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911673069 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911689043 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:16.911705971 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911741018 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911747932 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:16.911773920 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911808014 CEST	80	54692	171.214.24.36	192.168.2.4
Oct 25, 2024 13:28:16.911813974 CEST	54692	80	192.168.2.4	171.214.24.36
Oct 25, 2024 13:28:16.913551092 CEST	80	54699	220.169.152.36	192.168.2.4
Oct 25, 2024 13:28:16.913650036 CEST	54699	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.914140940 CEST	54699	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.914222002 CEST	80	54700	220.169.152.36	192.168.2.4
Oct 25, 2024 13:28:16.914268017 CEST	54700	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.915719032 CEST	54701	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.916058064 CEST	54702	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.916363955 CEST	54700	80	192.168.2.4	220.169.152.36
Oct 25, 2024 13:28:16.919540882 CEST	80	54699	220.169.152.36	192.168.2.4
Oct 25, 2024 13:28:16.921212912 CEST	80	54701	118.212.230.36	192.168.2.4
Oct 25, 2024 13:28:16.921266079 CEST	54701	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.921518087 CEST	80	54702	118.212.230.36	192.168.2.4
Oct 25, 2024 13:28:16.921566963 CEST	54702	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.921591997 CEST	54703	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.921617031 CEST	443	54703	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.921654940 CEST	80	54700	220.169.152.36	192.168.2.4
Oct 25, 2024 13:28:16.921668053 CEST	54703	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.921773911 CEST	54704	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.921817064 CEST	443	54704	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.921869993 CEST	54704	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.921889067 CEST	54705	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.921928883 CEST	443	54705	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.921986103 CEST	54705	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922027111 CEST	54706	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922038078 CEST	443	54706	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.922095060 CEST	54706	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922353983 CEST	54707	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922363997 CEST	443	54707	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.922410011 CEST	54707	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922617912 CEST	54703	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922631025 CEST	443	54703	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.922794104 CEST	54704	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922807932 CEST	443	54704	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.922959089 CEST	54705	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.922975063 CEST	443	54705	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.923139095 CEST	54706	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.923150063 CEST	443	54706	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.923233986 CEST	54701	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.923432112 CEST	54707	443	192.168.2.4	104.193.90.94
Oct 25, 2024 13:28:16.923445940 CEST	443	54707	104.193.90.94	192.168.2.4
Oct 25, 2024 13:28:16.923527002 CEST	54702	80	192.168.2.4	118.212.230.36
Oct 25, 2024 13:28:16.928734064 CEST	80	54701	118.212.230.36	192.168.2.4
Oct 25, 2024 13:28:16.928904057 CEST	80	54702	118.212.230.36	192.168.2.4
Oct 25, 2024 13:28:16.929045916 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.929069042 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.929132938 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.929151058 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.929188013 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.930710077 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.930727005 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.930761099 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.930771112 CEST	443	54687	185.10.104.115	192.168.2.4
Oct 25, 2024 13:28:16.930800915 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.930819035 CEST	54687	443	192.168.2.4	185.10.104.115
Oct 25, 2024 13:28:16.992547035 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.992628098 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.992647886 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.992666006 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.992716074 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.992746115 CEST	443	54691	182.140.225.38	192.168.2.4
Oct 25, 2024 13:28:16.992759943 CEST	54691	443	192.168.2.4	182.140.225.38
Oct 25, 2024 13:28:16.992836952 CEST	443	54691	182.140.225.38	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 13:27:28.433242083 CEST	192.168.2.4	1.1.1.1	0xe1df	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:28.433444023 CEST	192.168.2.4	1.1.1.1	0x7297	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:29.156033993 CEST	192.168.2.4	1.1.1.1	0x4f52	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:29.156171083 CEST	192.168.2.4	1.1.1.1	0x15b5	Standard query (0)	www.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.215179920 CEST	192.168.2.4	1.1.1.1	0xcdeb	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.215364933 CEST	192.168.2.4	1.1.1.1	0x4b04	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.240206957 CEST	192.168.2.4	1.1.1.1	0x29d6	Standard query (0)	dss0.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.240340948 CEST	192.168.2.4	1.1.1.1	0xc1b2	Standard query (0)	dss0.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.240552902 CEST	192.168.2.4	1.1.1.1	0x4b85	Standard query (0)	dss1.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.240657091 CEST	192.168.2.4	1.1.1.1	0xc76f	Standard query (0)	dss1.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.240783930 CEST	192.168.2.4	1.1.1.1	0xa126	Standard query (0)	ss1.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.240880966 CEST	192.168.2.4	1.1.1.1	0xd709	Standard query (0)	ss1.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.671072006 CEST	192.168.2.4	1.1.1.1	0x540f	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.671421051 CEST	192.168.2.4	1.1.1.1	0x904f	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.687412024 CEST	192.168.2.4	1.1.1.1	0x6ca2	Standard query (0)	sp2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.687530041 CEST	192.168.2.4	1.1.1.1	0x3f8b	Standard query (0)	sp2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:30.953723907 CEST	192.168.2.4	1.1.1.1	0x98e8	Standard query (0)	sp1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.953953981 CEST	192.168.2.4	1.1.1.1	0xcddb	Standard query (0)	sp1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:31.109225035 CEST	192.168.2.4	1.1.1.1	0x25cb	Standard query (0)	sp0.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.109339952 CEST	192.168.2.4	1.1.1.1	0xf77	Standard query (0)	sp0.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:32.300756931 CEST	192.168.2.4	1.1.1.1	0xc4db	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:32.301032066 CEST	192.168.2.4	1.1.1.1	0xf2df	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:32.879910946 CEST	192.168.2.4	1.1.1.1	0x7e9	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:32.880340099 CEST	192.168.2.4	1.1.1.1	0x9b26	Standard query (0)	www.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:33.252772093 CEST	192.168.2.4	1.1.1.1	0x7bbc	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:33.252962112 CEST	192.168.2.4	1.1.1.1	0xc058	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:35.548325062 CEST	192.168.2.4	1.1.1.1	0xdb6b	Standard query (0)	hectorstatic.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.549607992 CEST	192.168.2.4	1.1.1.1	0x4a76	Standard query (0)	hectorstatic.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:36.019376040 CEST	192.168.2.4	1.1.1.1	0x526d	Standard query (0)	sp1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.019711971 CEST	192.168.2.4	1.1.1.1	0x1d2d	Standard query (0)	sp1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:36.196882010 CEST	192.168.2.4	1.1.1.1	0x4282	Standard query (0)	sp2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.197067976 CEST	192.168.2.4	1.1.1.1	0x46c7	Standard query (0)	sp2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:36.409601927 CEST	192.168.2.4	1.1.1.1	0x7161	Standard query (0)	mbd.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.410069942 CEST	192.168.2.4	1.1.1.1	0x2641	Standard query (0)	mbd.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:37.504673004 CEST	192.168.2.4	1.1.1.1	0xf562	Standard query (0)	hector.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:37.505031109 CEST	192.168.2.4	1.1.1.1	0xa35a	Standard query (0)	hector.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:38.497652054 CEST	192.168.2.4	1.1.1.1	0xccfb	Standard query (0)	hectorstatic.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.498236895 CEST	192.168.2.4	1.1.1.1	0xc50	Standard query (0)	hectorstatic.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:38.528995037 CEST	192.168.2.4	1.1.1.1	0x7160	Standard query (0)	sp1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:38.528995991 CEST	192.168.2.4	1.1.1.1	0xb94e	Standard query (0)	sp1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.534842968 CEST	192.168.2.4	1.1.1.1	0x93cf	Standard query (0)	sp2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.535053968 CEST	192.168.2.4	1.1.1.1	0xa228	Standard query (0)	sp2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:39.939066887 CEST	192.168.2.4	1.1.1.1	0x4ede	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:39.939774036 CEST	192.168.2.4	1.1.1.1	0xb8d8	Standard query (0)	www.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:40.869996071 CEST	192.168.2.4	1.1.1.1	0xa019	Standard query (0)	hector.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:40.870379925 CEST	192.168.2.4	1.1.1.1	0xafda	Standard query (0)	hector.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:42.080670118 CEST	192.168.2.4	1.1.1.1	0xfb56	Standard query (0)	passport.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.080995083 CEST	192.168.2.4	1.1.1.1	0x20c1	Standard query (0)	passport.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:42.188112974 CEST	192.168.2.4	1.1.1.1	0x774c	Standard query (0)	www.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.188355923 CEST	192.168.2.4	1.1.1.1	0x8964	Standard query (0)	www.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:27:43.148760080 CEST	192.168.2.4	1.1.1.1	0xf030	Standard query (0)	passport.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:43.149138927 CEST	192.168.2.4	1.1.1.1	0xfd3	Standard query (0)	passport.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:10.074048996 CEST	192.168.2.4	1.1.1.1	0xe62a	Standard query (0)	psstatic.cdn.bcebos.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.074381113 CEST	192.168.2.4	1.1.1.1	0xf582	Standard query (0)	psstatic.cdn.bcebos.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:10.877720118 CEST	192.168.2.4	1.1.1.1	0x266	Standard query (0)	gips1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.877957106 CEST	192.168.2.4	1.1.1.1	0xd63e	Standard query (0)	gips1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:11.728298903 CEST	192.168.2.4	1.1.1.1	0x58dc	Standard query (0)	ss1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.728754997 CEST	192.168.2.4	1.1.1.1	0x1a0d	Standard query (0)	ss1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:11.735780001 CEST	192.168.2.4	1.1.1.1	0xb15	Standard query (0)	ss2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.736252069 CEST	192.168.2.4	1.1.1.1	0x688d	Standard query (0)	ss2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:11.737188101 CEST	192.168.2.4	1.1.1.1	0x90cd	Standard query (0)	gips3.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.740506887 CEST	192.168.2.4	1.1.1.1	0x9bfb	Standard query (0)	gips3.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:11.741097927 CEST	192.168.2.4	1.1.1.1	0xf4a3	Standard query (0)	gips0.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.741512060 CEST	192.168.2.4	1.1.1.1	0x3dcf	Standard query (0)	gips0.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:11.742480040 CEST	192.168.2.4	1.1.1.1	0x99de	Standard query (0)	gips2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.742846966 CEST	192.168.2.4	1.1.1.1	0xd7b1	Standard query (0)	gips2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.573240995 CEST	192.168.2.4	1.1.1.1	0x4c7	Standard query (0)	t14.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.573710918 CEST	192.168.2.4	1.1.1.1	0xdef1	Standard query (0)	t14.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.574346066 CEST	192.168.2.4	1.1.1.1	0xdd67	Standard query (0)	t13.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.574515104 CEST	192.168.2.4	1.1.1.1	0x6b44	Standard query (0)	t13.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.574948072 CEST	192.168.2.4	1.1.1.1	0xb509	Standard query (0)	t11.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.575063944 CEST	192.168.2.4	1.1.1.1	0x208a	Standard query (0)	t11.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.575443029 CEST	192.168.2.4	1.1.1.1	0x77ce	Standard query (0)	t15.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.575623989 CEST	192.168.2.4	1.1.1.1	0xde26	Standard query (0)	t15.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.576092958 CEST	192.168.2.4	1.1.1.1	0xbf3c	Standard query (0)	t10.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.576313972 CEST	192.168.2.4	1.1.1.1	0x3689	Standard query (0)	t10.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.578412056 CEST	192.168.2.4	1.1.1.1	0x26c3	Standard query (0)	t12.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.578850985 CEST	192.168.2.4	1.1.1.1	0xe0a2	Standard query (0)	t12.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:12.581087112 CEST	192.168.2.4	1.1.1.1	0xf0d3	Standard query (0)	gimg4.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.581408978 CEST	192.168.2.4	1.1.1.1	0xbcb0	Standard query (0)	gimg4.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:15.002774000 CEST	192.168.2.4	1.1.1.1	0x8060	Standard query (0)	t7.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.003249884 CEST	192.168.2.4	1.1.1.1	0x5095	Standard query (0)	t7.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:15.338572025 CEST	192.168.2.4	1.1.1.1	0xd235	Standard query (0)	gips0.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.338823080 CEST	192.168.2.4	1.1.1.1	0x4488	Standard query (0)	gips0.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.320935011 CEST	192.168.2.4	1.1.1.1	0x2016	Standard query (0)	top.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.321386099 CEST	192.168.2.4	1.1.1.1	0x4f17	Standard query (0)	top.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.427959919 CEST	192.168.2.4	1.1.1.1	0x743	Standard query (0)	gimg3.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.436290026 CEST	192.168.2.4	1.1.1.1	0x7bcc	Standard query (0)	gimg3.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.882391930 CEST	192.168.2.4	1.1.1.1	0x119f	Standard query (0)	gips2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.882632017 CEST	192.168.2.4	1.1.1.1	0x5ed6	Standard query (0)	gips2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.884476900 CEST	192.168.2.4	1.1.1.1	0x81fb	Standard query (0)	ss1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.884632111 CEST	192.168.2.4	1.1.1.1	0x7bea	Standard query (0)	ss1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.886014938 CEST	192.168.2.4	1.1.1.1	0xcea3	Standard query (0)	gips1.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.886154890 CEST	192.168.2.4	1.1.1.1	0xd85d	Standard query (0)	gips1.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.887846947 CEST	192.168.2.4	1.1.1.1	0xf43a	Standard query (0)	t15.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.888031006 CEST	192.168.2.4	1.1.1.1	0x6367	Standard query (0)	t15.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.889276981 CEST	192.168.2.4	1.1.1.1	0x1360	Standard query (0)	ss2.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.889507055 CEST	192.168.2.4	1.1.1.1	0x5ed7	Standard query (0)	ss2.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.893255949 CEST	192.168.2.4	1.1.1.1	0xcd94	Standard query (0)	t12.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.893543005 CEST	192.168.2.4	1.1.1.1	0xd8c0	Standard query (0)	t12.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.895489931 CEST	192.168.2.4	1.1.1.1	0xd6b4	Standard query (0)	gimg4.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.896171093 CEST	192.168.2.4	1.1.1.1	0xf62f	Standard query (0)	gimg4.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.897973061 CEST	192.168.2.4	1.1.1.1	0xa27c	Standard query (0)	t10.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.898180008 CEST	192.168.2.4	1.1.1.1	0xb53c	Standard query (0)	t10.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.900923967 CEST	192.168.2.4	1.1.1.1	0x9a6f	Standard query (0)	t11.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901078939 CEST	192.168.2.4	1.1.1.1	0x826d	Standard query (0)	t11.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.904040098 CEST	192.168.2.4	1.1.1.1	0x76ad	Standard query (0)	t13.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.904222012 CEST	192.168.2.4	1.1.1.1	0x66b0	Standard query (0)	t13.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.904853106 CEST	192.168.2.4	1.1.1.1	0xdb61	Standard query (0)	t14.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.905061960 CEST	192.168.2.4	1.1.1.1	0xbfb0	Standard query (0)	t14.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.907188892 CEST	192.168.2.4	1.1.1.1	0x93a8	Standard query (0)	psstatic.cdn.bcebos.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.907340050 CEST	192.168.2.4	1.1.1.1	0x9130	Standard query (0)	psstatic.cdn.bcebos.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:16.955486059 CEST	192.168.2.4	1.1.1.1	0x5d7c	Standard query (0)	t7.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.955724955 CEST	192.168.2.4	1.1.1.1	0x3041	Standard query (0)	t7.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:17.693650961 CEST	192.168.2.4	1.1.1.1	0xdbec	Standard query (0)	lingjing-online.cdn.bcebos.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.693865061 CEST	192.168.2.4	1.1.1.1	0x446c	Standard query (0)	lingjing-online.cdn.bcebos.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:18.285542965 CEST	192.168.2.4	1.1.1.1	0x7027	Standard query (0)	gimg3.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.285697937 CEST	192.168.2.4	1.1.1.1	0xea73	Standard query (0)	gimg3.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:19.932177067 CEST	192.168.2.4	1.1.1.1	0xe9d3	Standard query (0)	lingjing-online.cdn.bcebos.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:19.932465076 CEST	192.168.2.4	1.1.1.1	0xee45	Standard query (0)	lingjing-online.cdn.bcebos.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:22.896281958 CEST	192.168.2.4	1.1.1.1	0x3c9a	Standard query (0)	sestat.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:22.897054911 CEST	192.168.2.4	1.1.1.1	0xf63b	Standard query (0)	sestat.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:22.906521082 CEST	192.168.2.4	1.1.1.1	0x9903	Standard query (0)	sclick.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:22.906657934 CEST	192.168.2.4	1.1.1.1	0xf807	Standard query (0)	sclick.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:24.350349903 CEST	192.168.2.4	1.1.1.1	0xa73d	Standard query (0)	sclick.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:24.350699902 CEST	192.168.2.4	1.1.1.1	0xf2de	Standard query (0)	sclick.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:31.009088039 CEST	192.168.2.4	1.1.1.1	0x9cc0	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:31.009418964 CEST	192.168.2.4	1.1.1.1	0x8106	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:32.886709929 CEST	192.168.2.4	1.1.1.1	0xfe93	Standard query (0)	pss.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:32.886902094 CEST	192.168.2.4	1.1.1.1	0xd18f	Standard query (0)	pss.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:45.720339060 CEST	192.168.2.4	1.1.1.1	0xbe8f	Standard query (0)	b.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.720388889 CEST	192.168.2.4	1.1.1.1	0xcf37	Standard query (0)	b.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:45.726377010 CEST	192.168.2.4	1.1.1.1	0x2d6e	Standard query (0)	ug.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.726537943 CEST	192.168.2.4	1.1.1.1	0x20e8	Standard query (0)	ug.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:47.176625013 CEST	192.168.2.4	1.1.1.1	0xb00e	Standard query (0)	b.bdstatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.177042007 CEST	192.168.2.4	1.1.1.1	0x22b5	Standard query (0)	b.bdstatic.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:48.169373989 CEST	192.168.2.4	1.1.1.1	0x7a49	Standard query (0)	hpd.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:48.169725895 CEST	192.168.2.4	1.1.1.1	0xb8d0	Standard query (0)	hpd.baidu.com	65	IN (0x0001)	false
Oct 25, 2024 13:28:48.981061935 CEST	192.168.2.4	1.1.1.1	0x521f	Standard query (0)	ug.baidu.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:48.981178045 CEST	192.168.2.4	1.1.1.1	0x212d	Standard query (0)	ug.baidu.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 13:27:28.612365961 CEST	1.1.1.1	192.168.2.4	0xe1df	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:28.612395048 CEST	1.1.1.1	192.168.2.4	0x7297	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 13:27:29.166695118 CEST	1.1.1.1	192.168.2.4	0x4f52	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:29.166695118 CEST	1.1.1.1	192.168.2.4	0x4f52	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:29.166695118 CEST	1.1.1.1	192.168.2.4	0x4f52	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:29.166695118 CEST	1.1.1.1	192.168.2.4	0x4f52	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:29.326128006 CEST	1.1.1.1	192.168.2.4	0x15b5	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:29.326128006 CEST	1.1.1.1	192.168.2.4	0x15b5	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.613687038 CEST	1.1.1.1	192.168.2.4	0x29d6	No error (0)	dss0.bdstatic.com	sslbaiduv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.613687038 CEST	1.1.1.1	192.168.2.4	0x29d6	No error (0)	sslbaiduv6.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.613687038 CEST	1.1.1.1	192.168.2.4	0x29d6	No error (0)	sslbaidu.gshifen.com		104.193.90.87	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.662892103 CEST	1.1.1.1	192.168.2.4	0xc76f	No error (0)	dss1.bdstatic.com	sslbaiduv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.662892103 CEST	1.1.1.1	192.168.2.4	0xc76f	No error (0)	sslbaiduv6.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.680567026 CEST	1.1.1.1	192.168.2.4	0x904f	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.680567026 CEST	1.1.1.1	192.168.2.4	0x904f	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.680567026 CEST	1.1.1.1	192.168.2.4	0x904f	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.686517000 CEST	1.1.1.1	192.168.2.4	0x4b85	No error (0)	dss1.bdstatic.com	sslbaiduv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.686517000 CEST	1.1.1.1	192.168.2.4	0x4b85	No error (0)	sslbaiduv6.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.686517000 CEST	1.1.1.1	192.168.2.4	0x4b85	No error (0)	sslbaidu.gshifen.com		185.10.104.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.776585102 CEST	1.1.1.1	192.168.2.4	0xd709	No error (0)	ss1.bdstatic.com	sslbdstatic.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.776585102 CEST	1.1.1.1	192.168.2.4	0xd709	No error (0)	sslbdstatic.jomodns.com	sslbdstatic.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.897917032 CEST	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	dss0.bdstatic.com	sslbaiduv6.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.897917032 CEST	1.1.1.1	192.168.2.4	0xc1b2	No error (0)	sslbaiduv6.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952183008 CEST	1.1.1.1	192.168.2.4	0xa126	No error (0)	ss1.bdstatic.com	sslbdstatic.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952183008 CEST	1.1.1.1	192.168.2.4	0xa126	No error (0)	sslbdstatic.jomodns.com	sslbdstatic.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952183008 CEST	1.1.1.1	192.168.2.4	0xa126	No error (0)	sslbdstatic.gshifen.com		185.10.104.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952976942 CEST	1.1.1.1	192.168.2.4	0xcdeb	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952976942 CEST	1.1.1.1	192.168.2.4	0xcdeb	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952976942 CEST	1.1.1.1	192.168.2.4	0xcdeb	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.952976942 CEST	1.1.1.1	192.168.2.4	0xcdeb	No error (0)	opencdnglobal.gshifen.com		185.10.104.115	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:30.964620113 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.964620113 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:30.964620113 CEST	1.1.1.1	192.168.2.4	0x4b04	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.101273060 CEST	1.1.1.1	192.168.2.4	0x6ca2	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.101273060 CEST	1.1.1.1	192.168.2.4	0x6ca2	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.101273060 CEST	1.1.1.1	192.168.2.4	0x6ca2	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.101273060 CEST	1.1.1.1	192.168.2.4	0x6ca2	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.108275890 CEST	1.1.1.1	192.168.2.4	0x540f	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.108275890 CEST	1.1.1.1	192.168.2.4	0x540f	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.108275890 CEST	1.1.1.1	192.168.2.4	0x540f	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.108275890 CEST	1.1.1.1	192.168.2.4	0x540f	No error (0)	opencdnglobal.gshifen.com		185.10.104.115	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.117146015 CEST	1.1.1.1	192.168.2.4	0xf77	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.117146015 CEST	1.1.1.1	192.168.2.4	0xf77	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.192498922 CEST	1.1.1.1	192.168.2.4	0x3f8b	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.192498922 CEST	1.1.1.1	192.168.2.4	0x3f8b	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.198649883 CEST	1.1.1.1	192.168.2.4	0xcddb	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.198649883 CEST	1.1.1.1	192.168.2.4	0xcddb	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.236418962 CEST	1.1.1.1	192.168.2.4	0x98e8	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.236418962 CEST	1.1.1.1	192.168.2.4	0x98e8	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.236418962 CEST	1.1.1.1	192.168.2.4	0x98e8	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.236418962 CEST	1.1.1.1	192.168.2.4	0x98e8	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.281060934 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.281060934 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:31.281060934 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:31.281060934 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:32.787410975 CEST	1.1.1.1	192.168.2.4	0xc4db	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:32.787410975 CEST	1.1.1.1	192.168.2.4	0xc4db	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:32.787410975 CEST	1.1.1.1	192.168.2.4	0xc4db	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:32.787410975 CEST	1.1.1.1	192.168.2.4	0xc4db	No error (0)	opencdnglobal.gshifen.com		185.10.104.115	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:32.887331963 CEST	1.1.1.1	192.168.2.4	0x7e9	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:32.887331963 CEST	1.1.1.1	192.168.2.4	0x7e9	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:32.887331963 CEST	1.1.1.1	192.168.2.4	0x7e9	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:32.887331963 CEST	1.1.1.1	192.168.2.4	0x7e9	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:33.067632914 CEST	1.1.1.1	192.168.2.4	0xf2df	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.067632914 CEST	1.1.1.1	192.168.2.4	0xf2df	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.067632914 CEST	1.1.1.1	192.168.2.4	0xf2df	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.134277105 CEST	1.1.1.1	192.168.2.4	0x9b26	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.134277105 CEST	1.1.1.1	192.168.2.4	0x9b26	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.626604080 CEST	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.626604080 CEST	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.626604080 CEST	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.626604080 CEST	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	opencdnglobal.gshifen.com		104.193.90.80	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:33.626604080 CEST	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	opencdnglobal.gshifen.com		104.193.88.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:33.877578020 CEST	1.1.1.1	192.168.2.4	0xc058	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.877578020 CEST	1.1.1.1	192.168.2.4	0xc058	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:33.877578020 CEST	1.1.1.1	192.168.2.4	0xc058	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	hectorstatic.baidu.com	hectorstatic.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	hectorstatic.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		111.177.8.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		58.222.20.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		111.170.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		222.216.122.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		113.105.172.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		116.163.33.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		119.167.229.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		123.244.94.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		125.74.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:35.716301918 CEST	1.1.1.1	192.168.2.4	0xdb6b	No error (0)	opencdnbd.jomodns.com		140.249.244.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.027513981 CEST	1.1.1.1	192.168.2.4	0x1d2d	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.027513981 CEST	1.1.1.1	192.168.2.4	0x1d2d	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.190278053 CEST	1.1.1.1	192.168.2.4	0x526d	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.190278053 CEST	1.1.1.1	192.168.2.4	0x526d	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.190278053 CEST	1.1.1.1	192.168.2.4	0x526d	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.190278053 CEST	1.1.1.1	192.168.2.4	0x526d	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.205704927 CEST	1.1.1.1	192.168.2.4	0x4282	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.205704927 CEST	1.1.1.1	192.168.2.4	0x4282	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.205704927 CEST	1.1.1.1	192.168.2.4	0x4282	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.205704927 CEST	1.1.1.1	192.168.2.4	0x4282	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.298705101 CEST	1.1.1.1	192.168.2.4	0x4a76	No error (0)	hectorstatic.baidu.com	hectorstatic.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.298705101 CEST	1.1.1.1	192.168.2.4	0x4a76	No error (0)	hectorstatic.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.417563915 CEST	1.1.1.1	192.168.2.4	0x2641	No error (0)	mbd.baidu.com	mbd.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.417563915 CEST	1.1.1.1	192.168.2.4	0x2641	No error (0)	mbd.n.shifen.com	mbd.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.419188976 CEST	1.1.1.1	192.168.2.4	0x7161	No error (0)	mbd.baidu.com	mbd.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.419188976 CEST	1.1.1.1	192.168.2.4	0x7161	No error (0)	mbd.n.shifen.com	mbd.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.419188976 CEST	1.1.1.1	192.168.2.4	0x7161	No error (0)	mbd.wshifen.com		103.235.47.212	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:36.461983919 CEST	1.1.1.1	192.168.2.4	0x46c7	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:36.461983919 CEST	1.1.1.1	192.168.2.4	0x46c7	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:37.514555931 CEST	1.1.1.1	192.168.2.4	0xf562	No error (0)	hector.baidu.com		39.156.68.81	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.544969082 CEST	1.1.1.1	192.168.2.4	0xa228	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.544969082 CEST	1.1.1.1	192.168.2.4	0xa228	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	hectorstatic.baidu.com	hectorstatic.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	hectorstatic.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		123.244.94.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		58.222.20.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		111.170.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		111.177.8.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		113.105.172.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		116.163.33.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		119.167.229.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		222.216.122.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		125.74.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.665839911 CEST	1.1.1.1	192.168.2.4	0xccfb	No error (0)	opencdnbd.jomodns.com		140.249.244.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.777452946 CEST	1.1.1.1	192.168.2.4	0x7160	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.777452946 CEST	1.1.1.1	192.168.2.4	0x7160	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.784944057 CEST	1.1.1.1	192.168.2.4	0xb94e	No error (0)	sp1.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.784944057 CEST	1.1.1.1	192.168.2.4	0xb94e	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.784944057 CEST	1.1.1.1	192.168.2.4	0xb94e	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.784944057 CEST	1.1.1.1	192.168.2.4	0xb94e	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.961858988 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	sp2.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.961858988 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:38.961858988 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:38.961858988 CEST	1.1.1.1	192.168.2.4	0x93cf	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:39.253860950 CEST	1.1.1.1	192.168.2.4	0xc50	No error (0)	hectorstatic.baidu.com	hectorstatic.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:39.253860950 CEST	1.1.1.1	192.168.2.4	0xc50	No error (0)	hectorstatic.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:39.947101116 CEST	1.1.1.1	192.168.2.4	0x4ede	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:39.947101116 CEST	1.1.1.1	192.168.2.4	0x4ede	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:39.947101116 CEST	1.1.1.1	192.168.2.4	0x4ede	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:39.947101116 CEST	1.1.1.1	192.168.2.4	0x4ede	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:40.124478102 CEST	1.1.1.1	192.168.2.4	0x525f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:40.124478102 CEST	1.1.1.1	192.168.2.4	0x525f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:40.191761971 CEST	1.1.1.1	192.168.2.4	0xb8d8	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:40.191761971 CEST	1.1.1.1	192.168.2.4	0xb8d8	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:40.878684998 CEST	1.1.1.1	192.168.2.4	0xa019	No error (0)	hector.baidu.com		39.156.68.81	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.089076996 CEST	1.1.1.1	192.168.2.4	0xfb56	No error (0)	passport.baidu.com	passport.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:42.089076996 CEST	1.1.1.1	192.168.2.4	0xfb56	No error (0)	passport.n.shifen.com		45.113.194.250	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196140051 CEST	1.1.1.1	192.168.2.4	0x8964	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196140051 CEST	1.1.1.1	192.168.2.4	0x8964	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196172953 CEST	1.1.1.1	192.168.2.4	0x774c	No error (0)	www.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196172953 CEST	1.1.1.1	192.168.2.4	0x774c	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196172953 CEST	1.1.1.1	192.168.2.4	0x774c	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.196172953 CEST	1.1.1.1	192.168.2.4	0x774c	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:42.456809044 CEST	1.1.1.1	192.168.2.4	0x20c1	No error (0)	passport.baidu.com	passport.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:43.070708990 CEST	1.1.1.1	192.168.2.4	0xa56b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:43.070708990 CEST	1.1.1.1	192.168.2.4	0xa56b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:43.156522036 CEST	1.1.1.1	192.168.2.4	0xf030	No error (0)	passport.baidu.com	passport.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:27:43.156522036 CEST	1.1.1.1	192.168.2.4	0xf030	No error (0)	passport.n.shifen.com		45.113.194.250	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:27:43.314573050 CEST	1.1.1.1	192.168.2.4	0xfd3	No error (0)	passport.baidu.com	passport.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	psstatic.cdn.bcebos.com	psstatic.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	psstatic.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		220.169.152.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		183.131.185.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		218.94.231.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		218.94.232.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		219.151.25.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		180.97.198.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		42.101.4.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		42.101.56.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		58.57.102.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.563112974 CEST	1.1.1.1	192.168.2.4	0xe62a	No error (0)	opencdnbd.jomodns.com		60.188.66.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:10.684137106 CEST	1.1.1.1	192.168.2.4	0xf582	No error (0)	psstatic.cdn.bcebos.com	psstatic.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:10.684137106 CEST	1.1.1.1	192.168.2.4	0xf582	No error (0)	psstatic.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.380827904 CEST	1.1.1.1	192.168.2.4	0xd63e	No error (0)	gips1.baidu.com	gips1.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.380827904 CEST	1.1.1.1	192.168.2.4	0xd63e	No error (0)	gips1.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	gips1.baidu.com	gips1.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	gips1.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		119.167.229.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		58.222.20.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		111.170.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		111.177.8.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		113.105.172.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		116.163.33.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		222.216.122.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		123.244.94.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		125.74.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.382349968 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	opencdnbd.jomodns.com		140.249.244.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	gips0.baidu.com	gips0.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	gips0.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		60.188.66.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		183.131.185.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		218.94.231.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		218.94.232.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		58.57.102.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		180.97.198.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		42.101.4.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		42.101.56.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		219.151.25.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.749136925 CEST	1.1.1.1	192.168.2.4	0xf4a3	No error (0)	opencdnbd.jomodns.com		220.169.152.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	gips2.baidu.com	gips2.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	gips2.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		60.188.66.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		183.131.185.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		218.94.231.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		58.57.102.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		219.151.25.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		180.97.198.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		42.101.4.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		42.101.56.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		218.94.232.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:11.750957012 CEST	1.1.1.1	192.168.2.4	0x99de	No error (0)	opencdnbd.jomodns.com		220.169.152.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.212275982 CEST	1.1.1.1	192.168.2.4	0xb15	No error (0)	ss2.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.212275982 CEST	1.1.1.1	192.168.2.4	0xb15	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.212275982 CEST	1.1.1.1	192.168.2.4	0xb15	No error (0)	sslbaidu.gshifen.com		185.10.104.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	gips3.baidu.com	gips3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	gips3.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		113.219.161.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		111.170.25.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		111.174.9.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		111.225.213.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		113.219.142.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		110.185.108.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		114.232.92.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		117.33.185.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		118.180.40.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.282172918 CEST	1.1.1.1	192.168.2.4	0x90cd	No error (0)	opencdnbd.jomodns.com		120.41.32.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.330086946 CEST	1.1.1.1	192.168.2.4	0x688d	No error (0)	ss2.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.330086946 CEST	1.1.1.1	192.168.2.4	0x688d	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.414614916 CEST	1.1.1.1	192.168.2.4	0x58dc	No error (0)	ss1.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.414614916 CEST	1.1.1.1	192.168.2.4	0x58dc	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.414614916 CEST	1.1.1.1	192.168.2.4	0x58dc	No error (0)	sslbaidu.gshifen.com		104.193.90.87	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.434611082 CEST	1.1.1.1	192.168.2.4	0x9bfb	No error (0)	gips3.baidu.com	gips3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.434611082 CEST	1.1.1.1	192.168.2.4	0x9bfb	No error (0)	gips3.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.436733961 CEST	1.1.1.1	192.168.2.4	0x1a0d	No error (0)	ss1.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.436733961 CEST	1.1.1.1	192.168.2.4	0x1a0d	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.468797922 CEST	1.1.1.1	192.168.2.4	0xd7b1	No error (0)	gips2.baidu.com	gips2.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.468797922 CEST	1.1.1.1	192.168.2.4	0xd7b1	No error (0)	gips2.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.492826939 CEST	1.1.1.1	192.168.2.4	0x3dcf	No error (0)	gips0.baidu.com	gips0.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.492826939 CEST	1.1.1.1	192.168.2.4	0x3dcf	No error (0)	gips0.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.583338022 CEST	1.1.1.1	192.168.2.4	0x77ce	No error (0)	t15.baidu.com	t15.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.583338022 CEST	1.1.1.1	192.168.2.4	0x77ce	No error (0)	t15.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.583338022 CEST	1.1.1.1	192.168.2.4	0x77ce	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.583338022 CEST	1.1.1.1	192.168.2.4	0x77ce	No error (0)	opencdnbdimgtn.gshifen.com		104.193.90.94	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	t12.baidu.com	t12.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	t12.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		222.216.122.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		183.61.177.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.932687998 CEST	1.1.1.1	192.168.2.4	0x26c3	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:12.946129084 CEST	1.1.1.1	192.168.2.4	0xbcb0	No error (0)	gimg4.baidu.com	gimg4.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:12.946129084 CEST	1.1.1.1	192.168.2.4	0xbcb0	No error (0)	gimg4.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.008258104 CEST	1.1.1.1	192.168.2.4	0xdef1	No error (0)	t14.baidu.com	t14.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.008258104 CEST	1.1.1.1	192.168.2.4	0xdef1	No error (0)	t14.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.008258104 CEST	1.1.1.1	192.168.2.4	0xdef1	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.011132956 CEST	1.1.1.1	192.168.2.4	0x3689	No error (0)	t10.baidu.com	t10.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.011132956 CEST	1.1.1.1	192.168.2.4	0x3689	No error (0)	t10.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	gimg4.baidu.com	gimg4.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	gimg4.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		60.188.66.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.016022921 CEST	1.1.1.1	192.168.2.4	0xf0d3	No error (0)	opencdnbdsimage.jomodns.com		110.185.108.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.029759884 CEST	1.1.1.1	192.168.2.4	0x208a	No error (0)	t11.baidu.com	t11.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.029759884 CEST	1.1.1.1	192.168.2.4	0x208a	No error (0)	t11.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	t11.baidu.com	t11.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	t11.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		222.216.122.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.041233063 CEST	1.1.1.1	192.168.2.4	0xb509	No error (0)	opencdnbdsimage.jomodns.com		183.61.177.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	t10.baidu.com	t10.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	t10.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		183.61.177.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.049320936 CEST	1.1.1.1	192.168.2.4	0xbf3c	No error (0)	opencdnbdsimage.jomodns.com		222.216.122.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.106652021 CEST	1.1.1.1	192.168.2.4	0xe0a2	No error (0)	t12.baidu.com	t12.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.106652021 CEST	1.1.1.1	192.168.2.4	0xe0a2	No error (0)	t12.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.289132118 CEST	1.1.1.1	192.168.2.4	0x6b44	No error (0)	t13.baidu.com	t13.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.289132118 CEST	1.1.1.1	192.168.2.4	0x6b44	No error (0)	t13.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.289132118 CEST	1.1.1.1	192.168.2.4	0x6b44	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.322874069 CEST	1.1.1.1	192.168.2.4	0xdd67	No error (0)	t13.baidu.com	t13.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.322874069 CEST	1.1.1.1	192.168.2.4	0xdd67	No error (0)	t13.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.322874069 CEST	1.1.1.1	192.168.2.4	0xdd67	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.322874069 CEST	1.1.1.1	192.168.2.4	0xdd67	No error (0)	opencdnbdimgtn.gshifen.com		185.10.104.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:13.329346895 CEST	1.1.1.1	192.168.2.4	0xde26	No error (0)	t15.baidu.com	t15.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.329346895 CEST	1.1.1.1	192.168.2.4	0xde26	No error (0)	t15.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.329346895 CEST	1.1.1.1	192.168.2.4	0xde26	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.543476105 CEST	1.1.1.1	192.168.2.4	0x4c7	No error (0)	t14.baidu.com	t14.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.543476105 CEST	1.1.1.1	192.168.2.4	0x4c7	No error (0)	t14.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.543476105 CEST	1.1.1.1	192.168.2.4	0x4c7	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:13.543476105 CEST	1.1.1.1	192.168.2.4	0x4c7	No error (0)	opencdnbdimgtn.gshifen.com		104.193.90.94	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:14.253267050 CEST	1.1.1.1	192.168.2.4	0x5854	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:14.253267050 CEST	1.1.1.1	192.168.2.4	0x5854	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	gips0.baidu.com	gips0.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	gips0.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		182.140.225.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		123.235.31.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		182.106.158.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		125.74.1.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		150.138.188.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		171.214.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		171.214.24.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		121.14.156.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		124.239.243.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.346700907 CEST	1.1.1.1	192.168.2.4	0xd235	No error (0)	opencdnbd.jomodns.com		182.84.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	t7.baidu.com	t7.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	t7.baidu.com.a.bdydns.com	opencdnbdcharon.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		171.214.24.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		124.239.243.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		125.74.1.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		150.138.188.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		171.214.23.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		123.235.31.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		182.84.110.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		182.106.158.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		182.140.225.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.779339075 CEST	1.1.1.1	192.168.2.4	0x8060	No error (0)	opencdnbdcharon.jomodns.com		183.61.177.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:15.921456099 CEST	1.1.1.1	192.168.2.4	0x4488	No error (0)	gips0.baidu.com	gips0.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.921456099 CEST	1.1.1.1	192.168.2.4	0x4488	No error (0)	gips0.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.988818884 CEST	1.1.1.1	192.168.2.4	0x5095	No error (0)	t7.baidu.com	t7.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:15.988818884 CEST	1.1.1.1	192.168.2.4	0x5095	No error (0)	t7.baidu.com.a.bdydns.com	opencdnbdcharon.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.444103003 CEST	1.1.1.1	192.168.2.4	0x7bcc	No error (0)	gimg3.baidu.com	gimg3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.444103003 CEST	1.1.1.1	192.168.2.4	0x7bcc	No error (0)	gimg3.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.648731947 CEST	1.1.1.1	192.168.2.4	0x4f17	No error (0)	top.baidu.com	top.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.893661976 CEST	1.1.1.1	192.168.2.4	0x7bea	No error (0)	ss1.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.893661976 CEST	1.1.1.1	192.168.2.4	0x7bea	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.894632101 CEST	1.1.1.1	192.168.2.4	0xd85d	No error (0)	gips1.baidu.com	gips1.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.894632101 CEST	1.1.1.1	192.168.2.4	0xd85d	No error (0)	gips1.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	t12.baidu.com	t12.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	t12.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		220.169.152.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		183.131.185.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		218.94.231.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		218.94.232.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		219.151.25.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		180.97.198.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		42.101.4.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		60.188.66.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		58.57.102.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.901160002 CEST	1.1.1.1	192.168.2.4	0xcd94	No error (0)	opencdnbdsimage.jomodns.com		42.101.56.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	t11.baidu.com	t11.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	t11.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		222.216.122.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.909466028 CEST	1.1.1.1	192.168.2.4	0x9a6f	No error (0)	opencdnbdsimage.jomodns.com		183.61.177.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.912324905 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	t13.baidu.com	t13.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.912324905 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	t13.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.912324905 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.912324905 CEST	1.1.1.1	192.168.2.4	0x76ad	No error (0)	opencdnbdimgtn.gshifen.com		104.193.90.94	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.913533926 CEST	1.1.1.1	192.168.2.4	0xdb61	No error (0)	t14.baidu.com	t14.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.913533926 CEST	1.1.1.1	192.168.2.4	0xdb61	No error (0)	t14.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.913533926 CEST	1.1.1.1	192.168.2.4	0xdb61	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.913533926 CEST	1.1.1.1	192.168.2.4	0xdb61	No error (0)	opencdnbdimgtn.gshifen.com		104.193.90.94	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:16.963429928 CEST	1.1.1.1	192.168.2.4	0x3041	No error (0)	t7.baidu.com	t7.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:16.963429928 CEST	1.1.1.1	192.168.2.4	0x3041	No error (0)	t7.baidu.com.a.bdydns.com	opencdnbdcharon.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.001039028 CEST	1.1.1.1	192.168.2.4	0x2016	No error (0)	top.baidu.com	top.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.001039028 CEST	1.1.1.1	192.168.2.4	0x2016	No error (0)	top.n.shifen.com		111.45.3.195	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.100192070 CEST	1.1.1.1	192.168.2.4	0x1360	No error (0)	ss2.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.100192070 CEST	1.1.1.1	192.168.2.4	0x1360	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.100192070 CEST	1.1.1.1	192.168.2.4	0x1360	No error (0)	sslbaidu.gshifen.com		104.193.90.87	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	psstatic.cdn.bcebos.com	psstatic.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	psstatic.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		125.74.1.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		124.239.243.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		123.235.31.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		150.138.188.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		171.214.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		171.214.24.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		182.84.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		182.106.158.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		182.140.225.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.133490086 CEST	1.1.1.1	192.168.2.4	0x93a8	No error (0)	opencdnbd.jomodns.com		183.61.177.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	gimg3.baidu.com	gimg3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	gimg3.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		182.140.225.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		123.235.31.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		124.239.243.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		125.74.1.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		150.138.188.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		171.214.23.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		171.214.24.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		182.84.110.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		182.106.158.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.142047882 CEST	1.1.1.1	192.168.2.4	0x743	No error (0)	opencdnbdsimage.jomodns.com		121.14.156.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	t7.baidu.com	t7.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	t7.baidu.com.a.bdydns.com	opencdnbdcharon.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		113.219.142.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		111.174.9.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		111.225.213.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		111.170.25.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		113.219.161.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		114.232.92.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		117.33.185.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		118.180.40.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		120.41.32.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.184909105 CEST	1.1.1.1	192.168.2.4	0x5d7c	No error (0)	opencdnbdcharon.jomodns.com		121.14.156.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.306047916 CEST	1.1.1.1	192.168.2.4	0x5ed6	No error (0)	gips2.baidu.com	gips2.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.306047916 CEST	1.1.1.1	192.168.2.4	0x5ed6	No error (0)	gips2.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.316761971 CEST	1.1.1.1	192.168.2.4	0x81fb	No error (0)	ss1.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.316761971 CEST	1.1.1.1	192.168.2.4	0x81fb	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.316761971 CEST	1.1.1.1	192.168.2.4	0x81fb	No error (0)	sslbaidu.gshifen.com		185.10.104.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.325485945 CEST	1.1.1.1	192.168.2.4	0x6367	No error (0)	t15.baidu.com	t15.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.325485945 CEST	1.1.1.1	192.168.2.4	0x6367	No error (0)	t15.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.325485945 CEST	1.1.1.1	192.168.2.4	0x6367	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.360528946 CEST	1.1.1.1	192.168.2.4	0xf62f	No error (0)	gimg4.baidu.com	gimg4.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.360528946 CEST	1.1.1.1	192.168.2.4	0xf62f	No error (0)	gimg4.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.380986929 CEST	1.1.1.1	192.168.2.4	0xd8c0	No error (0)	t12.baidu.com	t12.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.380986929 CEST	1.1.1.1	192.168.2.4	0xd8c0	No error (0)	t12.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	t10.baidu.com	t10.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	t10.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		118.212.224.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		118.212.230.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		121.14.135.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		125.74.42.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		171.107.86.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.388530970 CEST	1.1.1.1	192.168.2.4	0xa27c	No error (0)	opencdnbdsimage.jomodns.com		175.4.51.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	gips2.baidu.com	gips2.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	gips2.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		222.216.122.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		183.61.177.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		61.170.99.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		61.170.103.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		106.225.194.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		113.142.207.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		118.212.224.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		118.212.230.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		121.14.135.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.390850067 CEST	1.1.1.1	192.168.2.4	0x119f	No error (0)	opencdnbd.jomodns.com		125.74.42.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.400671959 CEST	1.1.1.1	192.168.2.4	0x9130	No error (0)	psstatic.cdn.bcebos.com	psstatic.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.400671959 CEST	1.1.1.1	192.168.2.4	0x9130	No error (0)	psstatic.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.478488922 CEST	1.1.1.1	192.168.2.4	0x5ed7	No error (0)	ss2.baidu.com	sslbaidu.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.478488922 CEST	1.1.1.1	192.168.2.4	0x5ed7	No error (0)	sslbaidu.jomodns.com	sslbaidu.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	gips1.baidu.com	gips1.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	gips1.baidu.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		58.42.14.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		58.222.20.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		111.170.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		111.177.8.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		113.105.172.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		116.163.33.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		119.167.229.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		123.244.94.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		125.74.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.487565994 CEST	1.1.1.1	192.168.2.4	0xcea3	No error (0)	opencdnbd.jomodns.com		140.249.244.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.495208025 CEST	1.1.1.1	192.168.2.4	0x826d	No error (0)	t11.baidu.com	t11.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.495208025 CEST	1.1.1.1	192.168.2.4	0x826d	No error (0)	t11.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	gimg4.baidu.com	gimg4.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	gimg4.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		218.94.231.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		183.131.185.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		180.97.198.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		218.94.232.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		219.151.25.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		220.169.152.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		42.101.4.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		42.101.56.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		58.57.102.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.605946064 CEST	1.1.1.1	192.168.2.4	0xd6b4	No error (0)	opencdnbdsimage.jomodns.com		60.188.66.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.688435078 CEST	1.1.1.1	192.168.2.4	0xb53c	No error (0)	t10.baidu.com	t10.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.688435078 CEST	1.1.1.1	192.168.2.4	0xb53c	No error (0)	t10.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.768408060 CEST	1.1.1.1	192.168.2.4	0xf43a	No error (0)	t15.baidu.com	t15.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.768408060 CEST	1.1.1.1	192.168.2.4	0xf43a	No error (0)	t15.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.768408060 CEST	1.1.1.1	192.168.2.4	0xf43a	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.768408060 CEST	1.1.1.1	192.168.2.4	0xf43a	No error (0)	opencdnbdimgtn.gshifen.com		185.10.104.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:17.847729921 CEST	1.1.1.1	192.168.2.4	0xbfb0	No error (0)	t14.baidu.com	t14.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.847729921 CEST	1.1.1.1	192.168.2.4	0xbfb0	No error (0)	t14.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.847729921 CEST	1.1.1.1	192.168.2.4	0xbfb0	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.871603966 CEST	1.1.1.1	192.168.2.4	0x66b0	No error (0)	t13.baidu.com	t13.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.871603966 CEST	1.1.1.1	192.168.2.4	0x66b0	No error (0)	t13.baidu.com.a.bdydns.com	opencdnbdimgtn.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:17.871603966 CEST	1.1.1.1	192.168.2.4	0x66b0	No error (0)	opencdnbdimgtn.jomodns.com	opencdnbdimgtn.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	lingjing-online.cdn.bcebos.com	lingjing-online.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	lingjing-online.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		111.225.213.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		111.170.25.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		111.174.9.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		110.185.108.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		113.219.142.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		113.219.161.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		114.232.92.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		117.33.185.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		118.180.40.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.078383923 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	opencdnbd.jomodns.com		120.41.32.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	gimg3.baidu.com	gimg3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	gimg3.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		116.163.33.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		58.222.20.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		61.170.99.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		111.170.23.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		106.225.194.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		113.142.207.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		58.42.14.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		113.105.172.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		111.177.8.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.295334101 CEST	1.1.1.1	192.168.2.4	0x7027	No error (0)	opencdnbdsimage.jomodns.com		61.170.103.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:18.393369913 CEST	1.1.1.1	192.168.2.4	0x446c	No error (0)	lingjing-online.cdn.bcebos.com	lingjing-online.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.393369913 CEST	1.1.1.1	192.168.2.4	0x446c	No error (0)	lingjing-online.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.805802107 CEST	1.1.1.1	192.168.2.4	0xea73	No error (0)	gimg3.baidu.com	gimg3.baidu.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:18.805802107 CEST	1.1.1.1	192.168.2.4	0xea73	No error (0)	gimg3.baidu.com.a.bdydns.com	opencdnbdsimage.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	lingjing-online.cdn.bcebos.com	lingjing-online.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	lingjing-online.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		123.244.94.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		58.222.20.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		111.170.23.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		111.177.8.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		113.105.172.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		116.163.33.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		119.167.229.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		222.216.122.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		125.74.110.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.265328884 CEST	1.1.1.1	192.168.2.4	0xe9d3	No error (0)	opencdnbd.jomodns.com		140.249.244.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:20.523617983 CEST	1.1.1.1	192.168.2.4	0xee45	No error (0)	lingjing-online.cdn.bcebos.com	lingjing-online.cdn.bcebos.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:20.523617983 CEST	1.1.1.1	192.168.2.4	0xee45	No error (0)	lingjing-online.cdn.bcebos.com.a.bdydns.com	opencdnbd.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.284058094 CEST	1.1.1.1	192.168.2.4	0x9903	No error (0)	sclick.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.284058094 CEST	1.1.1.1	192.168.2.4	0x9903	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.284058094 CEST	1.1.1.1	192.168.2.4	0x9903	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:23.284058094 CEST	1.1.1.1	192.168.2.4	0x9903	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:23.355649948 CEST	1.1.1.1	192.168.2.4	0xf807	No error (0)	sclick.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.355649948 CEST	1.1.1.1	192.168.2.4	0xf807	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.412559032 CEST	1.1.1.1	192.168.2.4	0xf63b	No error (0)	sestat.baidu.com	sestat.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.417275906 CEST	1.1.1.1	192.168.2.4	0x3c9a	No error (0)	sestat.baidu.com	sestat.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:23.417275906 CEST	1.1.1.1	192.168.2.4	0x3c9a	No error (0)	sestat.a.shifen.com		183.240.98.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:23.417275906 CEST	1.1.1.1	192.168.2.4	0x3c9a	No error (0)	sestat.a.shifen.com		183.240.98.87	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:24.839363098 CEST	1.1.1.1	192.168.2.4	0xf2de	No error (0)	sclick.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:24.839363098 CEST	1.1.1.1	192.168.2.4	0xf2de	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:24.859983921 CEST	1.1.1.1	192.168.2.4	0xa73d	No error (0)	sclick.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:24.859983921 CEST	1.1.1.1	192.168.2.4	0xa73d	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:24.859983921 CEST	1.1.1.1	192.168.2.4	0xa73d	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:24.859983921 CEST	1.1.1.1	192.168.2.4	0xa73d	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017143965 CEST	1.1.1.1	192.168.2.4	0x9cc0	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017143965 CEST	1.1.1.1	192.168.2.4	0x9cc0	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017143965 CEST	1.1.1.1	192.168.2.4	0x9cc0	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017143965 CEST	1.1.1.1	192.168.2.4	0x9cc0	No error (0)	opencdnglobal.gshifen.com		104.193.90.80	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017143965 CEST	1.1.1.1	192.168.2.4	0x9cc0	No error (0)	opencdnglobal.gshifen.com		104.193.88.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017504930 CEST	1.1.1.1	192.168.2.4	0x8106	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017504930 CEST	1.1.1.1	192.168.2.4	0x8106	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:31.017504930 CEST	1.1.1.1	192.168.2.4	0x8106	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.370192051 CEST	1.1.1.1	192.168.2.4	0xd18f	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.370192051 CEST	1.1.1.1	192.168.2.4	0xd18f	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.370192051 CEST	1.1.1.1	192.168.2.4	0xd18f	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.473297119 CEST	1.1.1.1	192.168.2.4	0xfe93	No error (0)	pss.bdstatic.com	pss.bdstatic.com.a.bdydns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.473297119 CEST	1.1.1.1	192.168.2.4	0xfe93	No error (0)	pss.bdstatic.com.a.bdydns.com	opencdnbdpss.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.473297119 CEST	1.1.1.1	192.168.2.4	0xfe93	No error (0)	opencdnbdpss.jomodns.com	opencdnglobal.gshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:33.473297119 CEST	1.1.1.1	192.168.2.4	0xfe93	No error (0)	opencdnglobal.gshifen.com		104.193.90.80	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:33.473297119 CEST	1.1.1.1	192.168.2.4	0xfe93	No error (0)	opencdnglobal.gshifen.com		104.193.88.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:40.766267061 CEST	1.1.1.1	192.168.2.4	0x9152	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:40.766267061 CEST	1.1.1.1	192.168.2.4	0x9152	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	b.bdstatic.com	bcstobos.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		123.235.31.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		121.14.156.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		124.239.243.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		182.140.225.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		150.138.188.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		171.214.23.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		171.214.24.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		182.84.110.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		182.106.158.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.729181051 CEST	1.1.1.1	192.168.2.4	0xbe8f	No error (0)	bcstobos.jomodns.com		125.74.1.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.733983994 CEST	1.1.1.1	192.168.2.4	0x2d6e	No error (0)	ug.baidu.com	eopa.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:45.733983994 CEST	1.1.1.1	192.168.2.4	0x2d6e	No error (0)	eopa.n.shifen.com		182.61.200.222	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.733983994 CEST	1.1.1.1	192.168.2.4	0x2d6e	No error (0)	eopa.n.shifen.com		182.61.200.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:45.977902889 CEST	1.1.1.1	192.168.2.4	0x20e8	No error (0)	ug.baidu.com	eopa.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:46.234587908 CEST	1.1.1.1	192.168.2.4	0xcf37	No error (0)	b.bdstatic.com	bcstobos.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:47.185317039 CEST	1.1.1.1	192.168.2.4	0x22b5	No error (0)	b.bdstatic.com	bcstobos.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	b.bdstatic.com	bcstobos.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		42.101.56.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		1.193.146.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		1.194.253.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		27.148.188.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		27.221.77.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		27.221.82.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		42.101.4.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		1.71.157.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		58.42.14.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:47.349556923 CEST	1.1.1.1	192.168.2.4	0xb00e	No error (0)	bcstobos.jomodns.com		58.57.102.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:48.177273035 CEST	1.1.1.1	192.168.2.4	0x7a49	No error (0)	hpd.baidu.com	hpd.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:48.177273035 CEST	1.1.1.1	192.168.2.4	0x7a49	No error (0)	hpd.a.shifen.com		45.113.194.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:48.416754007 CEST	1.1.1.1	192.168.2.4	0xb8d0	No error (0)	hpd.baidu.com	hpd.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:48.988939047 CEST	1.1.1.1	192.168.2.4	0x521f	No error (0)	ug.baidu.com	eopa.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 13:28:48.988939047 CEST	1.1.1.1	192.168.2.4	0x521f	No error (0)	eopa.n.shifen.com		182.61.200.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:48.988939047 CEST	1.1.1.1	192.168.2.4	0x521f	No error (0)	eopa.n.shifen.com		182.61.200.222	A (IP address)	IN (0x0001)	false
Oct 25, 2024 13:28:49.302716970 CEST	1.1.1.1	192.168.2.4	0x212d	No error (0)	ug.baidu.com	eopa.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:29.190157890 CEST	428	OUT	GET / HTTP/1.1 Host: www.baidu.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:30.191529989 CEST	1236	IN	HTTP/1.1 200 OK Bdpagetype: 1 Bdqid: 0x879bb99b008dcf99 Connection: keep-alive Content-Encoding: gzip Content-Type: text/html; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:30 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: BWS/1.1 Set-Cookie: BAIDUID=7A022EDDDFEE74DAB4211D7DFC7B91EB:FG=1; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: PSTM=1729855650; expires=Thu, 31-Dec-37 23:55:55 GMT; max-age=2147483647; path=/; domain=.baidu.com Set-Cookie: BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; max-age=31536000; expires=Sat, 25-Oct-25 11:27:30 GMT; domain=.baidu.com; path=/; version=1; comment=bd Set-Cookie: BDSVRTM=3; path=/ Set-Cookie: BD_HOME=1; path=/ Traceid: 172985565007329689709771607891890786201 X-Ua-Compatible: IE=Edge,chrome=1 X-Xss-Protection: 1;mode=block Transfer-Encoding: chunked Data Raw: 62 64 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 73 24 4b 72 18 f8 bd 7f 45 11 b0 61 77 4f a1 ee 1b 3d fd 48 9c dd e8 03 a8 c6 d1 8d 06 df 2c 2c 2b 2b b3 aa 1a 75 a1 b2 aa 70 a9 cd 48 69 47 94 56 cb cb 68 92 6c 45 ae 76 49 33 ad ed 9a ed 0e 29 5b 6a c5 25 45 f2 c7 68 de 9b 99 4f fb 17 d6 dd 23 22 33 ae ac 03 8d 26 25 33 0d e6 bd 57 95 15 19 e1 e1 e1 e1 e1 77 fc e8 57 b6 0f b6 8e 3f d6 77 12 ed 71 af fb cd 8f 7e 25 95 3a 3a de 38 3e 39 4a 1c bc 4e a5 be f9 11 7b da f6 9c e6 37 3f ea 79 63 07 9a 8d 87 29 ef 72 d2 99 3e 5f d9 1a f4 c7 5e 7f 9c 3a Data Ascii: bdeis$KrEawO=H,,++upHiGVhlEvI3)[j%EhO#"3&%3WwW?wq~%::8>9JN{7?yc)r>_^:
Oct 25, 2024 13:27:30.191546917 CEST	212	IN	Data Raw: be 19 7a 2b 09 97 7d 7b be 32 f6 ae c7 19 7c f1 99 db 76 46 81 37 7e 3e 19 fb a9 ea 8a a5 87 d3 d4 c9 46 6a 6b d0 1b 3a e3 4e a3 2b 77 b2 b7 f3 dc 6b b6 bc 35 b7 3d 1a f4 bc e7 39 f1 76 38 8a d3 bd 72 6e 82 95 44 df 81 9f 57 46 9e ef 8d 46 de 48 Data Ascii: z+}{2\|vF7~>Fjk:N+wk5=9v8rnDWFFH4cOmAw0[jp_?'__ow~??~7?ww
Oct 25, 2024 13:27:30.191565990 CEST	1236	IN	Data Raw: dd ff f8 dd ef fd ab 9f fd dd 9f 7c ff 5b 7f f6 ff fd a7 ff f1 fb 7f fe b7 df fd b3 3f ff fe 9f ff e6 f7 ff fe 1f ff e7 df fc c7 3f ff 9f fe f6 bb bf fa df 7e f1 ff fc e4 17 7f f7 db df fd ce 3f f9 d9 5f fd 5d 38 0a 74 f5 cb 3f f9 0f df ff cb 3f Data Ascii: \|[??~?_]8t??w~_!w?EbuhNn%T=_e3t4'iw_+1Niy{9t9#-:a:u+eLVi
Oct 25, 2024 13:27:30.191576958 CEST	1236	IN	Data Raw: 8a 51 70 6a dc 19 de 99 07 10 e3 45 39 9c 12 d2 27 32 25 ce b0 f1 91 a0 28 fc 2c f8 0d 31 1a 9d 13 a0 cc 0a 22 ab 7e ee 73 c1 ce 75 dc b6 27 c4 bb 56 77 d0 70 ba 19 e4 15 43 f7 9c 01 77 5e cc 37 cb 85 5c 4e e7 13 d9 84 e0 d9 70 92 84 33 62 88 53 Data Ascii: QpjE9'2%(,1"~su'VwpCw^7\Np3bS8XN!Qb;0CE2 AyYkYD!^(0)Vgz+SB)b(#mt11gX^=H(R~NHqK"fm<f
Oct 25, 2024 13:27:30.191586971 CEST	1236	IN	Data Raw: b6 cd e5 e4 b3 86 88 85 4f 1b 09 cc d9 fe fc 33 63 e1 91 e8 5c 30 96 4d 9d de a8 d5 70 9e 64 d7 f0 2f 9d 2d 3d b5 4f 33 3a 1f e2 9b 23 d3 2e 01 97 99 b7 e6 21 9a 43 f2 99 b7 4f 04 99 2d b4 49 c2 c6 a1 5f a4 40 db 78 ce be fd a6 d9 99 52 ff 0b 6d Data Ascii: O3c\0Mpd/-=O3:#.!CO-I_@xRm]j^\R IB0%Rk,J;~5Jh:Qde92de08K}@$SPR#%EJ;228Krvn
Oct 25, 2024 13:27:30.191597939 CEST	1236	IN	Data Raw: 79 ad 3d 5a 23 67 ef 5a d7 6b 79 fd e6 5a b7 b3 36 e8 ae 0d d7 c0 8f be 36 6e ae e1 d0 e0 f5 77 d6 c6 ed b5 c8 35 26 31 eb cf 8f 30 c1 49 1c 6b 18 6b 2e 22 6a 53 37 eb 90 49 34 e8 76 a3 d8 cc 14 7a a7 d9 c3 06 24 44 7d 7e 24 83 cc c0 08 bc 2e c4 Data Ascii: y=Z#gZkyZ66nw5&10Ikk."jS7I4vz$D}~$.i2[b>=u8??z(HV=#L)ZR9/[pG>?U\|qb2Mj@*0X^c!17hz;SwU!MBkYz&T
Oct 25, 2024 13:27:30.191607952 CEST	1236	IN	Data Raw: 95 8f 12 b1 9f 11 a7 9d d9 20 3e df 3a ec 64 61 be 74 44 79 dd 4f 8e c6 10 ef de 1a b7 9f e7 d7 12 2c 0d 0e 8e e9 e7 70 68 ae 25 88 29 3d 5f 41 d8 e0 7f 2b 98 2e c1 b1 87 fb 96 d0 18 25 49 44 0a 9f 6b 93 7e d0 3c ab e6 fb 29 86 37 b2 ac 4a 1c 22 Data Ascii: >:datDyO,ph%)=_A+.%IDk~<)7J"h3IRX5RYK]/-xA(E$?VRsu8%]}PCA ~>}5D*x?1'> cyUSP%KoNK}MKG
Oct 25, 2024 13:27:30.191618919 CEST	1236	IN	Data Raw: 3b 0f 0b 50 6d 72 c2 3e 0e ca 59 18 f0 2f b9 fb 0d 5f 3e ad 3b ca ad 39 7e 3c 50 50 a2 78 98 e7 0f 31 7d 23 7c 58 e0 0f 73 79 b1 9a f8 7e 51 3c c5 e8 ad b0 6d 89 3f cd 63 0c 5f f8 b4 2c 9e 56 e4 c1 2a 21 04 f2 68 55 f1 b4 2c 8f 56 e3 4f 8b 21 ed Data Ascii: ;Pmr>Y/_>;9~<PPx1}#\|Xsy~Q<m?c_,V*!hU,VO!1&V+LMH$S HxbCE\|59\|w(0'<>B!CaD6?6<hv#M\|7(Bb(v}"$-"DTzB[DDE
Oct 25, 2024 13:27:30.191629887 CEST	1236	IN	Data Raw: 6f 1a 37 3e 8e 49 b1 25 a1 11 1d ca 4f 92 2d 51 38 d5 6a d8 4c 22 5e d9 fe 6f a1 5e e5 e7 30 88 8e 91 ef 2c d7 81 9a 4e 88 c1 ad 48 06 33 d7 96 bf 82 53 c8 3e 93 2c 6a 82 aa e1 5a a4 f1 9d d4 48 8a a5 20 d9 a1 f4 8c 1d 3b 10 4a 2b 4c 0d 1a 36 21 Data Ascii: o7>I%O-Q8jL"^o^0,NH3S>,jZH ;J+L6!3Ckuh/zP\4Ad\|r~(6 oa>\|T6L\>4-0K/)C*LP8ve`I!ZB^%cqr>2 )zdsnD6MP
Oct 25, 2024 13:27:30.191642046 CEST	1236	IN	Data Raw: 94 88 6e 9e 09 f7 9d 02 d8 72 87 86 98 ce e2 e7 86 fc c6 fc a3 03 44 3c b6 b8 bc 1a 4f 98 8d 20 e5 39 b0 c5 97 2f 57 15 72 0b fb a5 37 80 e2 43 58 29 1d ee a3 06 a1 b3 03 f5 bf e0 9e 69 3c b7 06 c1 35 0f e1 08 db a0 cb 9f 8a cf 11 52 68 9b bb 5d Data Ascii: nrD<O 9/Wr7CX)i<5Rh]7_)^ti2,W.@YL #SLLfewV0X%4MRzD{)K}W`#BZa=;]\|QV~&v.p(,/):K\nqFSl
Oct 25, 2024 13:27:30.197026014 CEST	1236	IN	Data Raw: 7b c7 ec 17 34 d0 58 e3 d9 a0 c5 e8 69 4e c9 01 5e 61 03 8c 14 22 ae d9 70 14 b0 c6 b3 c7 c1 09 c6 61 bb 52 74 8a 8e 6d 2c bb 5a 01 25 58 9a 55 9d 93 ca 47 9b 72 8a d9 96 9e 45 e8 cd dc 3b 3c 4a 30 0c 93 13 53 b5 1d 43 72 4c a5 c2 a9 ac e7 c8 ac Data Ascii: {4XiN^a"paRtm,Z%XUGrE;<J0SCrLCPj8S O{]RB5LI^w=G^0Y3>Uf:qFFCow"!W@pH:YjA6RbF.zp Ta?R#[t
Oct 25, 2024 13:27:32.425704956 CEST	530	OUT	GET /img/PCtm_d9c8750bed0b3c7d089fa7d55720d6cf.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1
Oct 25, 2024 13:27:32.749517918 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 15444 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:32 GMT Etag: "3c54-5f555bcf8cac0" Expires: Mon, 23 Oct 2034 11:27:32 GMT Last-Modified: Thu, 23 Feb 2023 03:37:55 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 06 00 00 00 b5 ca 0e 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 1c a0 03 00 04 00 00 00 01 00 00 01 02 00 00 00 00 75 e5 65 67 00 00 3b be 49 44 41 54 78 01 ed 9d 09 9c 14 d5 b5 87 ef ad ea 65 56 16 99 19 96 d9 10 45 03 c3 26 cd 80 88 28 ee 51 e3 1a 31 31 9a b8 24 9a 68 34 26 d1 c4 ed a7 12 7d 9a 97 98 d5 f7 b2 a8 51 df 73 4b 04 4d a2 21 ee 0b 31 20 22 33 a0 c0 80 db 43 a7 7b 18 96 01 06 66 98 e9 e9 a5 ea be 53 20 30 5b 77 d7 d6 dd 55 dd ff d2 66 ba ea 9e 7b ee b9 df ed aa 3a 75 97 53 8c 61 03 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 [TRUNCATED] Data Ascii: PNGIHDRsRGBDeXIfMM*iueg;IDATxeVE&(Q11$h4&}QsKM!1 "3C{fS 0[wUf{:uSa
Oct 25, 2024 13:27:34.374680996 CEST	530	OUT	GET /img/PCfb_5bf082d29588c07f842ccde3f97243ea.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1
Oct 25, 2024 13:27:34.696271896 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 24774 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:34 GMT Etag: "60c6-5f555bcf8cac0" Expires: Mon, 23 Oct 2034 11:27:34 GMT Last-Modified: Thu, 23 Feb 2023 03:37:55 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 06 00 00 00 b5 ca 0e 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ed 9d 07 bc 15 c5 d9 c6 e5 de 0b 22 55 50 54 b0 01 16 ec 0d 8d 9a a8 89 25 62 ef 44 8d 25 46 0c 96 cf 7c b6 18 1b 1a 63 89 31 6a d4 d8 92 68 14 f5 b3 c5 de 6b d4 60 17 7b 43 c5 0e 36 54 40 01 05 81 cb f7 3c cb 79 ae c3 72 ce b9 bb 7b ca 3d f7 de 67 7e bf 39 33 bb 3b e5 9d ff 4e 79 77 76 76 ce 02 0b d8 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 [TRUNCATED] Data Ascii: PNGIHDRsRGB@IDATx"UPT%bD%F\|c1jhk`{C6T@<yr{=g~93;Nywvv
Oct 25, 2024 13:27:35.108542919 CEST	538	OUT	GET /img/flexible/logo/pc/peak-result.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:35.436199903 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 7707 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:35 GMT Etag: "1e1b-5b00622d17d00" Expires: Mon, 23 Oct 2034 11:27:35 GMT Last-Modified: Thu, 24 Sep 2020 02:41:24 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 00 84 08 06 00 00 00 b7 64 dd 8f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 [TRUNCATED] Data Ascii: PNGIHDRdtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:709387F9E92511EA8F22E951255463F7" xmpMM:DocumentID="xmp.did:709387FAE92511EA8F22E951255463F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:709387F7E92511EA8F22E951255463F7" stRef:documentID="xmp.did:709387F8E92511EA8F22E951255463F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+IDATxJa(`5bC{5bQcY5{/
Oct 25, 2024 13:27:36.874628067 CEST	607	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855655833&req=2&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive Ps-Dataurlconfigqid: 0xd9c48fd80087333d Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:37.214154959 CEST	170	IN	HTTP/1.1 200 OK Content-Length: 53 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:27:37 GMT Data Raw: 7b 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 38 37 66 38 34 31 64 36 35 37 34 66 62 37 22 7d Data Ascii: {"err_no":0,"errmsg":"","queryid":"0x87f841d6574fb7"}
Oct 25, 2024 13:27:39.935895920 CEST	271	OUT	GET /content-search.xml HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:40.260725975 CEST	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform Content-Encoding: gzip Content-Length: 220 Content-Type: application/xml Date: Fri, 25 Oct 2024 11:27:40 GMT Etag: "ff-51bee881817c0" Expires: Fri, 25 Oct 2024 11:37:40 GMT Last-Modified: Tue, 28 Jul 2015 12:23:03 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " Pragma: no-cache Server: Apache Set-Cookie: BAIDUID=54667400AD8E82C3918EB2FC152A9E79:FG=1; expires=Sat, 25-Oct-25 11:27:40 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1 Vary: Accept-Encoding,User-Agent Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 8e 3d 6e c2 40 10 85 7b 9f 62 35 3d 1e dc 91 c8 6b 37 28 65 52 00 07 58 d6 23 6c c9 fb a3 dd 09 26 42 dc 21 6d a4 54 14 39 41 aa 14 b9 4d c2 35 58 70 41 c3 2b 9f de a7 ef 95 f5 ce f4 62 4b 21 76 ce 4a 28 f2 29 08 b2 da 35 9d dd 48 58 2d 9f 26 33 a8 2b 91 95 2f 9e ec 82 54 d0 ed 9c a2 0e 9d e7 04 88 04 db 28 a1 65 f6 8f 88 ea 21 d7 ce e0 04 a3 27 8d 2e 11 f1 4a 60 91 17 08 55 26 52 ca 45 eb 02 3f 2b 43 d5 e9 e3 f7 ef e7 eb ff fd f3 f4 7d 2c f1 d6 8f bb 55 e8 05 bf 79 92 c0 b4 63 6c d9 f4 20 98 8c ef 15 d3 a8 8c c9 39 0c 43 be 56 5d f3 7a 55 c7 7a 68 e4 7e b4 2e 29 98 78 00 bc bc c7 bb f7 ab ec 0c 5b 99 1e 23 ff 00 00 00 Data Ascii: m=n@{b5=k7(eRX#l&B!mT9AM5XpA+bK!vJ()5HX-&3+/T(e!'.J`U&RE?+C},Uycl 9CV]zUzh~.)x[#
Oct 25, 2024 13:27:46.862004042 CEST	664	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855666076&req=2&sc=eb&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive Ps-Dataurlconfigqid: 0xd9c48fd80087333d Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:47.187834024 CEST	170	IN	HTTP/1.1 200 OK Content-Length: 53 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:27:47 GMT Data Raw: 7b 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 37 64 39 33 32 37 66 64 30 33 65 64 32 39 22 7d Data Ascii: {"err_no":0,"errmsg":"","queryid":"0x7d9327fd03ed29"}
Oct 25, 2024 13:28:09.165503979 CEST	740	OUT	GET /s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs HTTP/1.1 Host: www.baidu.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:28:09.536974907 CEST	1236	IN	HTTP/1.1 200 OK Bdpagetype: 3 Bdqid: 0xcae097a40095e7dd Cache-Control: private Ckpacknum: 2 Ckrndstr: 40095e7dd Connection: keep-alive Content-Encoding: gzip Content-Security-Policy: frame-ancestors 'self' https://chat.baidu.com http://mirror-chat.baidu.com https://fj-chat.baidu.com https://hba-chat.baidu.com https://hbe-chat.baidu.com https://njjs-chat.baidu.com https://nj-chat.baidu.com https://hna-chat.baidu.com https://hnb-chat.baidu.com http://debug.baidu-int.com; Content-Type: text/html;charset=utf-8 Date: Fri, 25 Oct 2024 11:28:09 GMT Server: BWS/1.1 Set-Cookie: H_PS_PSSID=60271_60852_60875; path=/; expires=Sat, 25-Oct-25 11:28:09 GMT; domain=.baidu.com Set-Cookie: X-Use-Search-BFF-WWW=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.baidu.com Set-Cookie: delPer=0; path=/; domain=.baidu.com Set-Cookie: BD_CK_SAM=1;path=/ Set-Cookie: PSINO=7; domain=.baidu.com; path=/ Set-Cookie: BDSVRTM=29; path=/ Traceid: 1729855689019609805814618851121084884957 Vary: Accept-Encoding X-Ua-Compatible: IE=Edge,chrome=1 X-Xss-Protection: 1;mode=block Transfer-Encoding: chunked Data Raw: 32 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd c9 92 23 49 96 20 76 ee 14 e1 3f a0 c3 a5 a4 32 b3 dd e0 d8 01 77 af 2c e9 d8 bc bb a4 bb a6 f6 92 6e 4e 8f 40 0c 80 c1 1d 13 d8 0a 8b 47 44 86 24 2f 14 de 49 e1 89 42 9e 78 e0 8d e4 85 27 52 66 be 86 c3 e6 fc 05 df aa f6 74 31 03 dc 23 6a aa a6 85 81 cc 08 c0 4c d7 a7 4f 9f be 5d 7f f2 97 Data Ascii: 200#I v?2w,nN@GD$/IBx'Rft1#jLO]
Oct 25, 2024 13:28:22.994313955 CEST	1004	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=60271_60852_60875&hisdata=%5B%7B%22time%22%3A1729855702%2C%22kw%22%3A%22%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C%22%2C%22fq%22%3A2%7D%5D&_t=1729855702209&req=2&bs=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; BD_CK_SAM=1; PSINO=7; H_PS_645EC=517andvyGW2g56egSmQ%2Bpmx97n3zpfyWyKMyj%2BZl1rTzqjCTITpkXfyoJvM
Oct 25, 2024 13:28:23.323915958 CEST	265	IN	HTTP/1.1 200 OK Content-Length: 147 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:28:23 GMT Data Raw: 7b 22 71 22 3a 22 22 2c 22 70 22 3a 66 61 6c 73 65 2c 22 62 73 22 3a 22 22 2c 22 63 73 6f 72 22 3a 22 30 22 2c 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 67 22 3a 5b 7b 22 74 79 70 65 22 3a 22 68 69 73 5f 6e 6f 72 6d 61 6c 22 2c 22 73 61 22 3a 22 68 5f 31 22 2c 22 71 22 3a 22 e7 99 be e5 ba a6 e7 83 ad e6 90 9c 22 7d 5d 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 38 66 64 38 30 32 37 34 64 32 39 33 32 38 22 7d Data Ascii: {"q":"","p":false,"bs":"","csor":"0","err_no":0,"errmsg":"","g":[{"type":"his_normal","sa":"h_1","q":""}],"queryid":"0x8fd80274d29328"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49749	185.10.104.115	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:32.293359041 CEST	351	OUT	GET /r/www/cache/static/bundles/es6-polyfill_388d059.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:33.139588118 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sun, 16 Jun 2024 05:20:21 GMT Last-Modified: Wed, 12 Jun 2024 05:25:17 GMT ETag: "388d059dffa87621761c31ced2935ca4" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 11599632 Accept-Ranges: bytes Content-MD5: OI0Fnf+odiF2HDHO0pNcpA== x-bce-content-crc32: 578717120 x-bce-debug-id: JiGUcKnPd3SeEM7cZlcuKiW7Z2A7vzavS2yUAJurWP7sZlk7Zvn8dkB8olRolRNVhyKLp27XcMcMaE8R0aPdXA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4857bcfb-814b-4407-adf0-1e5573cf08db x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 13 Jun 2024 05:20:21 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 74476 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 31 32 61 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd e9 76 db 48 b6 2e f8 df 4f 41 a2 2a 59 40 12 a2 48 cd 22 13 62 39 6d 39 d3 55 b6 e5 b2 e4 ac 41 56 e9 42 64 50 84 4d 01 4c 00 d4 90 22 cf 5a 7d df a6 7f f6 8f 7e 81 7e 82 7b de a8 f7 b7 63 40 80 04 65 e7 59 f7 74 e7 40 01 81 18 77 ec d8 53 ec d8 51 1f cd e2 41 1e 25 b1 2b fc d8 7b 74 92 ab cf 62 90 3b 41 90 3f 4c 45 32 aa 89 fb 69 92 e6 59 a3 e1 cc e2 a1 18 45 b1 18 3a 75 fd f1 26 19 ce 26 a2 1f bb 5e d7 d1 f5 14 45 65 f6 46 43 fe 6d 85 37 c3 be 7c 74 63 af 4b 65 16 6e 3e 8e 32 df 74 80 5a 9f 65 a2 96 e5 69 44 3d e8 e9 f4 9a a0 2f 0b f3 a6 3a 9a 8a 7c 96 c6 35 ab 30 b5 30 9d 4e 1e dc d8 0f d3 eb d9 8d 88 f3 cc 5b 14 e5 72 57 78 8f d1 c8 ad 73 ab b5 28 ce f2 30 1e a0 9f b9 e7 e5 e3 34 b9 ab c5 e2 ae 76 46 7d 3f 4e d3 24 75 9d f7 69 72 13 65 22 ab dd cc b2 bc 76 25 6a 83 84 0a a5 b3 41 2e 86 b5 db 28 44 7e c7 eb 51 9d c5 e0 0d 68 44 75 9d 71 92 d7 42 d3 6b 2a 8d ce b4 2e a9 Data Ascii: 12a9vH.OAY@H"b9m9UAVBdPML"Z}~~{c@eYt@wSQA%+{tb;A?LE2iYE:u&&^EeFCm7\|tcKen>2tZeiD=/:\|500N[rWxs(04vF}?N$uire"v%jA.(D~QhDuqBk.
Oct 25, 2024 13:27:33.139643908 CEST	1236	IN	Data Raw: 2f b9 08 da be 7c 1b 87 f1 70 22 86 41 bd a3 12 6e c3 c9 4c 04 b7 49 34 ac e9 3c 04 49 91 a6 62 98 05 e7 17 fe 80 60 82 64 af 18 6e 22 c1 34 a2 46 7b db 41 10 08 d5 48 cf 13 78 e6 1a 7b cf 14 14 db 56 86 3e 37 23 ac 16 5a d3 59 36 c6 9c b9 c2 ea Data Ascii: /\|p"AnLI4<Ib`dn"4F{AHx{V>7#ZY6[y2]k>nfQ4x nb(rwKnqk'zh+cL_\|0vG]U[k-<GKKi}^S5a9&lIELnU\|\LLF-/Id>XD
Oct 25, 2024 13:27:33.139677048 CEST	364	IN	Data Raw: 64 da 6d fb 57 49 9e 27 37 f4 30 11 a3 9c fe a4 d1 f5 18 7f ef a2 61 3e a6 bf 63 21 13 16 ba f6 ec b5 a9 2a be 0e ea f5 d5 ba 7b cf 24 ec d7 f4 9e e9 1e 57 ff bd 68 c9 ea 15 6a ac d4 e4 27 34 eb 32 6b ac b2 4a a5 af 94 31 a4 df 20 ed bf 9b dd 5c Data Ascii: dmWI'70a>c!{$Whj'42kJ1 \uUt/u+n+A&%)4bz[\SQp%=x^N=8Fp%m\|Y-Ik9><WIZr[WDXu7g\|<\@Vi]BlIr=U
Oct 25, 2024 13:27:33.142891884 CEST	1236	IN	Data Raw: 40 37 09 a5 27 29 61 a9 9e 65 6b e4 c5 c7 8f 71 36 bb ca 06 69 74 c5 90 29 b0 39 06 36 fb 29 5b a4 0c 12 1a 61 81 a4 df e1 f0 f8 96 6a 7d 13 65 b9 88 45 da 5f 4d 72 b9 fc 7c 5e ef 54 1a a7 a8 40 9e 87 83 31 97 01 c1 b4 5e 49 2c 8e 9d 26 95 27 e9 Data Ascii: @7')aekq6it)96)[aj}eE_Mr\|^T@1^I,&'t)JRq^U~cC:EEUHh3a rtM]E kJD+8.H+bTS\|4B(WWP\&a-2~?z~mj\BF+,,Yd
Oct 25, 2024 13:27:33.142927885 CEST	1236	IN	Data Raw: 3d 12 c3 59 d1 2d 0b 60 32 5b 10 ab 39 6c ed 53 66 5a a1 2b e5 99 7b 06 e1 36 83 4a 36 98 88 50 4e 02 c0 99 79 3e b4 c3 32 e8 90 b6 02 bb 59 a3 31 b3 c8 28 38 39 cb 54 a1 9c 5f 69 5f 61 1b 86 34 a6 94 88 39 51 03 fd 81 c8 c3 04 88 44 82 78 28 fb Data Ascii: =Y-`2[9lSfZ+{6J6PNy>2Y1(89T_i_a49QDx(:@StKap^e$221~0I,Wm#F#Tp)ohDK?+(L8v^,@Oe~+jgL_/zZeaK1xH
Oct 25, 2024 13:27:33.142960072 CEST	364	IN	Data Raw: 49 d7 58 3c b5 37 10 a4 4f 7d 85 a0 f2 40 dc 3e 7d 06 27 a3 5c bb f7 04 8f 55 99 bb 82 e6 79 7b 67 6f cb 72 86 91 72 47 ea ee ed 1d 1e 4a 9d 39 0e 52 77 6b 6f e7 d0 ae 2e 76 1d b6 c4 39 be c3 96 af a1 c8 1c ea f6 f6 5e 65 5d 9d dd ed 2d 5a d5 f8 Data Ascii: IX<7O}@>}'\Uy{gorrGJ9Rwko.v9^e]-Z{}sPq_j6.vU['!g{AloXTAwT[V*`Cm[UTF;;Ag_;2Vgomr,T]
Oct 25, 2024 13:27:33.146234989 CEST	1236	IN	Data Raw: 7f 76 3b 9d 2d 38 d1 10 a0 69 56 22 fe bb 4f 4f 8c 2e b3 38 1b 24 53 f8 24 12 a2 90 26 bb e4 8e db 43 0d 0a 35 34 39 38 0d 0a 3f 83 60 76 9e 5d c0 10 33 72 67 a4 3c 3c 0e 92 78 14 5d cf 52 14 83 15 50 f2 ef 84 5d c9 d9 43 a7 72 f0 a8 e4 3c bf 08 Data Ascii: v;-8iV"OO.8$S$&C5498?`v]3rg<<x]RP]Cr<EyOY`{z$i?%9]!E-\-$6~{-aW:QAq'`gwJGt?wPh(m+k::A0GS'NaP[vp>dR
Oct 25, 2024 13:27:33.146318913 CEST	1236	IN	Data Raw: 22 72 4b 94 06 6c be a8 c2 ac 37 70 f8 2e 61 68 b3 49 cd 38 32 d1 b1 f3 51 5d f0 d2 eb e1 30 ea ea 7a 65 61 69 e1 4b 39 7a 94 26 37 6e e9 78 bd 1c c7 96 39 dc 49 8b 6b 51 0d 22 29 67 0a cc a7 c6 e1 8e 5a 47 a5 b1 c0 e4 5e d9 93 27 07 98 b2 18 4e Data Ascii: "rKl7p.ahI82Q]0zeaiK9z&7nx9IkQ")gZG^'N#'4jht+'B=yo0WY/tSG=/IP--}'WR YyhzL\|GO\@T'U[g:,0/.J<v~w^GSn jL.+D
Oct 25, 2024 13:27:33.146353006 CEST	364	IN	Data Raw: be a6 8b cb 10 50 a4 70 55 d6 f1 8c 2a 21 0a b6 a6 92 6f ea 84 35 2b e9 d3 23 a7 ef 72 ec 1e 3b f7 d0 7a f4 57 55 d2 da cd 7c 4e ed ce e7 57 da 73 8e ba 30 b1 a5 72 17 f6 d4 1b 4f 6f bc b9 d2 ce 0a f7 5b fa e7 8e 16 6f 59 fa 03 eb f3 6f fd 6b c2 Data Ascii: PpU*!o5+#r;zWU\|NWs0rOo[oYok}\|%1cB7S{;889pFxJ8iD\|{"<K mv97k`]`.,C-")dP%zK}qXU2-y{9
Oct 25, 2024 13:27:33.149708986 CEST	1236	IN	Data Raw: 11 89 cb 48 df 09 49 74 1e 11 6d 6b f7 06 45 a8 98 81 76 8a 20 4a 47 f2 7e 0f 15 8c bc f9 5c 2a 17 f0 1f 18 79 4c 74 77 0e f7 d6 db 0f 95 ae 7a c3 81 97 aa bb a5 89 d1 66 6b 93 b5 78 87 1e 1c d8 f5 4c 4c af b4 a4 3a 22 36 07 c2 d0 ad e6 63 45 52 Data Ascii: HItmkEv JG~\*yLtwzfkxLL:"6cER\dH1zT6NHc(=Dh#U}ZH{v:;r%`ZBS"]6P9Zy^>M, Bsaf@%ri505aq
Oct 25, 2024 13:27:33.149764061 CEST	1236	IN	Data Raw: 1d 05 24 2f c0 d2 5e 64 7b 31 4e 93 1b 2b 23 ec af 01 f2 da de 72 49 a3 d1 4c 16 3e bc 3a ab c7 55 5a c3 72 83 26 0a 5e a9 9c 4c d2 2b a9 5a 59 82 74 23 d2 26 f3 8b 82 37 11 85 87 38 4b 00 2d ed cc d9 eb f5 dc b1 e4 7f 9a 0b d2 1b 4f ee 62 4d 9b Data Ascii: $/^d{1N+#rIL>:UZr&^L+ZYt#&78K-ObMmYZO&)9O$M!#S*\|Axy@j rl)Y0qA\)56{lv31n5\"@C?>^@Y&\|WJnq> i9O"B(2U'#;l}
Oct 25, 2024 13:27:35.567065954 CEST	347	OUT	GET /r/www/cache/static/plugins/bzPopper_d8249c4.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:35.814575911 CEST	1057	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 09 Oct 2024 09:58:21 GMT Last-Modified: Thu, 26 Sep 2024 06:17:00 GMT ETag: "d8249c46aa6788c1ca336401bb06624e" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 375439 Accept-Ranges: bytes Content-MD5: 2CScRqpniMHKM2QBuwZiTg== x-bce-content-crc32: 801344642 x-bce-debug-id: IgpF8Wx6LvjSZrH2TSRMk2eAEbZ19ehwQD+9hpqaxk0k0TX1uNbf2HZw9lGFBV0iAjDLc9QS9mHeNyYdlyFlNw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: ab984306-5793-4b3e-87d8-6c6b830fb997 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 09:58:21 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache56 [2] Ohc-File-Size: 113 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4a 49 4d cb cc 4b d5 50 2a c8 29 4d cf cc 2b d6 4f aa 0a c8 2f 28 48 2d 52 d2 89 56 2a 4a 2d 2c cd 2c 4a 55 d2 51 72 48 4a cc 4c 29 d5 4f 2f 4d 2c 4a cc 2b 49 4d d5 2d 80 28 8a d5 49 2b cd 4b 2e c9 cc cf d3 48 d5 ac 2e 4a 2d 29 2d ca 53 00 9a 86 4b bd 66 ad a6 35 00 00 00 ff ff 03 00 82 8c c3 2f 72 00 00 00 0d 0a Data Ascii: 71JIMKP)M+O/(H-RVJ-,,JUQrHJL)O/M,J+IM-(I+K.H.J-)-SKf5/r
Oct 25, 2024 13:27:35.823808908 CEST	360	OUT	GET /r/www/cache/static/amd_modules/@baidu/search-sug_947981a.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.072449923 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 09 Oct 2024 23:35:18 GMT Last-Modified: Thu, 26 Sep 2024 06:16:58 GMT ETag: "947981ae2c8738fa4978e847e7b8be64" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 876887 Accept-Ranges: bytes Content-MD5: lHmBriyHOPpJeOhH57i+ZA== x-bce-content-crc32: 790185926 x-bce-debug-id: ECukVtC4nNvAZy+oXjztEDDNrltXvEs5B779XKiZDnOMDrH3n51qGYXf/d9Hr2Gv+uT4G8LtjqJS9b99CBneUA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 22a11576-c570-4807-9699-c7a1832405f2 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 23:35:18 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache51 [2] Ohc-File-Size: 57420 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 34 32 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d eb 73 23 d9 75 df f7 f9 2b c8 de 31 89 0e 1a 20 41 ce cc ce 02 6c c2 b3 33 23 ed d8 fb 90 86 b3 92 12 8a 66 35 81 26 d0 3b 00 1a d3 dd e0 63 09 54 d9 ae 3c ec 38 8e 9c 54 a5 92 38 aa ca a3 64 c5 5f 2c a7 62 57 45 49 6c ff 35 bb 2b e9 53 fe 85 9c df 39 f7 76 df 7e 61 38 bb 2b 95 52 b1 e5 1d a2 6f 9f fb 3a f7 dc 73 cf eb 9e 1e fa e7 c1 cc 6f 58 bf 79 e6 05 c3 c5 4e ec 7b d1 60 dc 8a 17 a3 1d fc 17 cc 86 fe 95 e5 1c 5b 91 ff 6a 11 44 be 75 e2 9c 2f 66 83 24 08 67 0d 55 64 df e8 92 8d c1 d8 1f bc 7c 8f ea 3d 9b 35 a8 3c f2 93 45 34 db b8 a4 46 c2 cb f6 e9 69 ec 4d e7 13 ff 74 4c 00 a7 13 7f 36 4a c6 7d bf 2d 3f 0e dd 7b cb a5 3f 1b 84 43 ff e3 e7 cf 1e 87 d3 79 38 f3 67 09 b5 92 02 74 1e 76 df 08 7a 55 1e d6 d1 38 bc 34 06 96 35 d7 d9 da 5a db dc 7e d6 d8 d1 c7 df fc e8 dd df 42 2b 17 5e b4 91 b8 c9 38 88 1d df 4d da e1 3c 89 Data Ascii: 4271}s#u+1 Al3#f5&;cT<8T8d_,bWEIl5+S9v~a8+Ro:soXyN{`[jDu/f$gUd\|=5<E4FiMtL6J}-?{?Cy8gtvzU845Z~B+^8M<
Oct 25, 2024 13:27:36.210156918 CEST	366	OUT	GET /r/www/cache/static/amd_modules/@baidu/guarantee-popper_b82f233.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.457779884 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu, 13 Jun 2024 12:31:54 GMT Last-Modified: Tue, 28 May 2024 07:30:54 GMT ETag: "b82f23370aed002e42bbdc097196e123" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 11832942 Accept-Ranges: bytes Content-MD5: uC8jNwrtAC5Cu9wJcZbhIw== x-bce-content-crc32: 3081183692 x-bce-debug-id: 16fjB83P1I9UlXq6jrI+QoPzJsAn2edk7U8tlO4pj9Up7B5TALPmqgkdAGyK+77v/NA1MBcsHM/dlnmCJ2BNFA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 07d0f394-ef94-48d1-a503-31e50d8a3d18 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 10 Jun 2024 12:31:54 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 114415 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 31 36 32 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc bd fb 56 db c8 b6 37 fa 7f 9e 02 b4 b2 bd a5 a6 70 20 e9 f4 45 6e c5 9b 10 92 90 10 20 40 6e ed 66 65 08 59 06 05 5b 72 74 e1 12 ec f3 3e e7 35 ce 93 9d f9 9b 55 25 95 64 91 4b af bd bf 3d be 35 d2 8d a5 52 a9 2e b3 e6 bd 66 4d 0d c3 51 14 87 b6 f5 5f 27 7e 34 2c ee 9d 16 7e ea c7 79 18 ae 4e 93 e9 34 4c ef 45 f1 30 bc b2 c4 c0 0a af a6 49 9a 67 d6 b1 18 15 71 90 47 49 6c 87 ce 8d 55 64 e1 52 96 a7 51 90 5b 3d fd 60 29 b7 43 91 3b 37 69 98 17 69 bc 14 da b9 77 a3 5e 77 6f e6 73 91 77 d5 9d 53 5d ce cb 97 b9 5d f9 aa 1d 7b 96 2e b7 3c 2f bf 9e 86 c9 68 e9 f0 7a 72 92 8c 3b 1d 2b e3 8b e6 83 6e 94 87 a9 9f 27 69 df 1c a8 1a 8b aa 19 ce dd 96 87 21 b5 79 7b 77 61 37 48 62 9a 6a 11 50 db 9e e7 95 e5 cb fa ba 3b 4d 93 3c c1 6b 7d 3d 36 b7 ec d0 a1 8e aa 49 a6 c6 24 d3 7f 9b 49 de 69 cc 32 31 66 99 fc db cc b2 31 c9 c8 98 64 f4 ef 3a 49 df 98 a4 ff 3f 35 c9 3b ff db b3 cc 8c Data Ascii: 1622V7p En @nfeY[rt>5U%dK=5R.fMQ_'~4,~yN4LE0IgqGIlUdRQ[=`)C;7iiw^woswS]]{.</hzr;+n'i!y{wa7HbjP;M<k}=6I$Ii21f1d:I?5;
Oct 25, 2024 13:28:10.341785908 CEST	459	OUT	GET /r/www/cache/static/@baidu/cosmic-card/tokens_583a0c6c.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.589338064 CEST	1118	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Tue, 22 Oct 2024 20:43:11 GMT Last-Modified: Fri, 18 Oct 2024 05:07:36 GMT ETag: "7eddfbab61d38bf007cb6c19583a0c6c" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 375060 Accept-Ranges: bytes Content-MD5: ft37q2HTi/AHy2wZWDoMbA== x-bce-content-crc32: 1763636208 x-bce-debug-id: jMRaASIm9FPbDN9hP8Y14QLfHtQVMzU5IHgBZt7mhO1yVGC6yYt1ADHoMvHU2prV07JRPNicaBBcBrEuEFDPmg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 9dc1ddef-b728-462c-9c13-73f8652ed097 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 19 Oct 2024 20:43:11 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 180 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 62 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 84 91 c1 0a c2 30 10 44 7f a7 8a 5b e8 c5 43 fd 9a 6d 5a 63 60 d3 0d e9 22 42 f1 df 6b 17 0d 36 a9 78 cc 2c 6f 26 c3 d4 86 27 08 e6 d4 46 66 99 01 5e 4f 03 53 40 33 00 0d 57 69 9b 73 78 5c 36 b2 70 50 f5 59 7f 89 41 e6 80 7d ef 46 ab f7 3b c6 2a 87 0e 5b 80 12 a0 39 05 b1 aa 19 d2 25 a4 63 11 f6 25 54 c6 c4 c4 44 67 6f 7f 72 ba 88 63 4f 6c f9 7d f3 32 7b 8c d6 8d 5a ca 20 99 aa e0 d7 c8 23 34 3f 2d e8 63 a1 35 f7 3d f4 0f c9 24 9b 03 90 b4 c1 fe 2a d9 35 8d b3 00 00 00 ff ff 03 00 f0 f3 1e 69 d8 01 00 00 0d 0a Data Ascii: b40D[CmZc`"Bk6x,o&'Ff^OS@3Wisx\6pPYA}F;[9%c%TDgorcOl}2{Z #4?-c5=$5i
Oct 25, 2024 13:28:10.593978882 CEST	461	OUT	GET /r/www/cache/static/@baidu/cosmic-medical/index_ecf8427e.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.844825983 CEST	888	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: keep-alive Expires: Sun, 20 Oct 2024 08:53:06 GMT Last-Modified: Wed, 16 Oct 2024 13:25:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: max-age=31536000 Age: 376061 Accept-Ranges: bytes Content-MD5: 1B2M2Y8AsgTpgAmY7PhCfg== x-bce-content-crc32: 0 x-bce-debug-id: TktEmMZU4Wz5ue7tfipwZpRWxRpy2AZndtLnL9XeL8JRw3FdK+Aj/DHv3iSUhgX9/cFTIlBOk7uycI2S630mNw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f4b2aff3-b1a2-48c7-964f-0ad356047727 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 17 Oct 2024 08:53:06 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache58 [2] Ohc-File-Size: 0 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	185.10.104.115	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:32.300117016 CEST	347	OUT	GET /r/www/cache/static/bundles/polyfill_9354efa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:33.130526066 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 25 Sep 2024 21:40:49 GMT Last-Modified: Thu, 12 Sep 2024 08:43:02 GMT ETag: "9354efad5c9f5519f606c3c39434b9ec" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 376005 Accept-Ranges: bytes Content-MD5: k1TvrVyfVRn2BsPDlDS57A== x-bce-content-crc32: 3721482874 x-bce-debug-id: aAEMKkwDIHO6HkrsofrfU2YpvpbfGB/2fmftPJ4aOnEccFM+Jq1XRIIgO7IC+2ED/huHYkx2FKVDggnawvvVuw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 79d186c1-a2db-4a95-bc31-4a5d9e04bb54 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 22 Sep 2024 21:40:49 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 13941 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 33 36 37 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d db 72 db 48 b2 e0 f3 6a 7f 82 42 78 38 80 59 a4 00 ea 62 1b 34 c8 76 fb d6 76 fb d6 b6 ba ed 6e 9a a3 80 c8 a2 84 36 05 70 00 d0 b2 2c 32 c2 73 ce d9 7b c4 7e c0 be ec f9 83 fd 80 7d d8 88 fd 93 e3 f3 01 fb 0b 9b 99 75 41 01 04 d5 9e 9e 9e 39 d3 17 b1 ae 59 55 59 59 99 59 59 59 85 ed e9 22 1e e7 51 12 db ce e5 fb 30 6d e4 8c b3 34 b8 93 a6 e1 05 8b 83 b4 33 4f 93 3c c9 2f e6 9c 25 c1 f3 e3 9f f9 38 67 51 90 18 c9 61 f0 40 42 60 8b 20 34 32 b2 e0 55 9e 46 f1 09 9b 06 99 91 3c 0e 9e 2d ce 8e 79 ca 66 c1 d8 48 3e 0d e2 4e 36 8b c6 9c cd 31 34 a7 e0 09 04 e7 8b ec 94 4d 20 b0 88 b3 d3 68 9a b3 0b 08 8f 93 78 1c e6 ec 3d 04 7f 4e a2 98 1d 07 8b ce 38 9c cd d8 19 04 c2 f9 7c 76 c1 ce 83 a7 61 7e da 39 0b 3f b0 43 19 84 82 3f 07 51 27 4f 64 c7 ee 05 96 1a bd 15 04 d8 8d 64 da 78 75 71 76 9c cc 9a 4d 2b a3 40 35 43 d7 3e 0c 4f Data Ascii: 3675}rHjBx8Yb4vvn6p,2s{~}uA9YUYYYYY"Q0m43O</%8gQa@B` 42UF<-yfH>N614M hx=N8\|va~9?C?Q'OddxuqvM+@5C>O
Oct 25, 2024 13:27:33.130553961 CEST	212	IN	Data Raw: d8 73 3d f6 62 24 05 f8 57 c1 ce 1f de 66 d7 c7 b3 30 cb 1a 3b ec 43 a0 51 9d 3b 97 79 7a 41 f8 e6 c1 73 ea 39 a4 01 de 79 27 e5 f3 59 38 e6 f6 ce 5b f8 b7 73 fd 6d bc 73 c2 2c cb a1 b9 30 f3 ae 0f 3b 6f b3 b7 af 46 d7 df 5e 7f bb 23 cb 24 80 8e Data Ascii: s=b$Wf0;CQ;yzAs9y'Y8[sms,0;oF^#$<cVrewe!\|Wg8+KVZel{]tU0x&D:y0OR#;/5MQ0{-fn[MP& iJdqb(!g5
Oct 25, 2024 13:27:33.130672932 CEST	1236	IN	Data Raw: 9e 2c cc 83 20 78 ba 5c e2 cf a3 15 bb 16 bc e4 27 f7 3f cc 8d 19 e7 1f f8 98 7d bf 09 53 d7 0c 04 d5 e2 e7 41 81 09 01 7a 64 f5 78 09 9a 28 bc 3e 38 9c 80 7b 83 ef a1 88 af 7b 0d bd 7c b0 a2 a1 bc 60 cf e4 12 34 fa fa 3e 9c 2d f8 f3 29 bb bb a9 Data Ascii: , x\'?}SAzdx(>8{{\|`4>-)ne_+Fq:bL444h6Q\zv(xm\|Ij7$K$&l=.nPd"Ges7][F'S}FcHW
Oct 25, 2024 13:27:33.130738020 CEST	152	IN	Data Raw: 7d bc d1 a6 f1 26 e5 a1 16 5c 78 11 a4 76 b8 79 c4 71 dd 88 35 1f c8 80 7b 87 fd ac 97 01 f7 46 79 d3 88 a0 ca 62 98 8d 82 ba f1 c7 30 fe 08 32 59 06 3a 98 1a 3f 4c 84 4a d2 1c 7f b1 d2 88 80 91 2b 24 4c a3 59 6e 2a 4a a6 ca f2 db 60 62 38 fa 2d Data Ascii: }&\xvyq5{Fyb02Y:?LJ+$LYn*J`b8-4ZR@T<8IG_#4:0^@r=lbA,p
Oct 25, 2024 13:27:33.134146929 CEST	1236	IN	Data Raw: 90 49 c6 4e 56 06 dc 02 15 34 78 85 89 2c 39 ab 55 66 ff ee 10 f1 97 e1 c1 55 34 81 3b 36 85 08 1c bb 23 c4 c1 02 b9 71 0f 6d 26 93 c5 18 b5 19 48 58 d3 1f 54 b6 64 f5 3c db 2f b1 7a b9 e5 52 ca d7 4a a1 58 54 5a 47 f2 3a 8a e3 4d 28 4e e5 42 95 Data Ascii: INV4x,9UfU4;6#qm&HXTd</zRJXTZG:M(NB(MAz}Zt#gT<(?mv:A{K)b4;5t4=>F,GDA<S[AN7K$a.'la(L-,\V)P;wK/MP?
Oct 25, 2024 13:27:33.134181976 CEST	1236	IN	Data Raw: da 2a d5 6e 30 aa 44 8d ed d0 51 d3 71 38 7e d7 38 5b 64 39 2c 4d d8 3f a8 a6 ad c2 4b 40 34 20 58 c8 21 72 c2 7b f8 e7 67 39 31 cf 81 85 e5 dc be 54 87 18 3e 4e c6 8a 59 2a 0e c2 f7 15 50 1d b7 0d fc 40 b6 ee 09 e4 7f 00 10 0f 51 d6 33 cb 85 e8 Data Ascii: n0DQq8~8[d9,M?K@4 X!r{g91T>NYP@Q3:;u1Y.yjrA8~8).n8>k!q84D2HQ0c~iI~J$>K>Na8<Z8#"c R8OiE6,SMfO&s#(\|69?~
Oct 25, 2024 13:27:33.134246111 CEST	364	IN	Data Raw: 09 4a 1c 44 a9 ed 32 40 6a 71 f6 16 b7 d3 96 a7 04 63 4a 63 32 16 f8 df 64 68 7f ac c3 f2 b7 b5 54 a0 58 ca df b4 5f 80 72 d5 9b cd 84 20 d9 d8 bf 55 c7 80 16 be fb 62 5a d8 aa 12 43 3d 2d ac 40 57 40 a3 48 95 4b 18 12 fb 6f 32 dc 1f 8a e1 aa 31 Data Ascii: JD2@jqcJc2dhTX_r UbZC=-@W@HKo21pIpQsp#b)lZkX-s\| )IB1"I")B?D@o6S"B_"rqls$VXGU%;VxbSvDsP1l$>&
Oct 25, 2024 13:27:33.137276888 CEST	1236	IN	Data Raw: b6 a3 cf f4 16 a0 ef 4e af 06 65 79 b7 0e 6e b5 bd 6e 7b d7 3b ec ee 8a bd 4e e7 d6 ad 5b 3f e1 26 a1 d8 46 79 95 26 d8 f8 0a 0d 13 69 04 6d ac eb ec 43 43 a8 72 8f 28 7b 80 4e 17 92 17 c2 3e 58 27 8c 25 27 34 17 cf 4b b4 f7 c9 d5 b3 79 70 86 a5 Data Ascii: Neynn{;N[?&Fy&imCCr({N>X'%'4KypS'\|:Le-oyj"[,^rE_XH@M$d q']n^;)V(a-hN8X"Y'dH{2~B4{
Oct 25, 2024 13:27:33.137336016 CEST	1236	IN	Data Raw: 20 fa c0 b1 e3 16 89 2d 54 c0 6f f2 f6 be ca b0 77 81 85 59 1e 26 77 6e e9 44 97 12 3b 5d 32 ea e3 6f 51 be 4b 59 a4 5b 16 ff 78 dd 9b 58 d2 fd 30 e1 ee f1 c1 f1 6e 78 e3 00 d6 ee 4d d7 00 08 13 9d 06 97 c7 21 8c d2 e3 37 58 16 7d e4 fe 01 9b 84 Data Ascii: -TowY&wnD;]2oQKY[xX0nxM!7X}yGl1#qSr^[qA@='nu!<*A;`Pd2n&hbW$e#nsuc&x-;rF;6bHnT1X{v-/%>1j>R0Eh-
Oct 25, 2024 13:27:33.137370110 CEST	364	IN	Data Raw: bd 22 3f 25 a7 77 0f 4d 7e ba 07 25 ab 8d da 97 a2 15 8e e1 0d 3f b4 3b ee bc 75 86 d7 07 23 e9 ed 92 ca b5 40 ca 40 d2 6c 46 72 27 b7 ae f4 ac d9 7b 40 f2 a4 c5 ac f6 8c 30 e8 90 82 ab c8 4d 62 0e 3a 7c 71 ef c6 2c 98 b0 23 98 cb 82 46 41 dd 18 Data Ascii: "?%wM~%?;u#@@lFr'{@0Mb:\|q,#FAM.&OA*zs-a^rcQ\ R+t95)"r~%{iOO??O\|_?_
Oct 25, 2024 13:27:33.140700102 CEST	1236	IN	Data Raw: 7f bc ef 25 ba 1f e8 f3 1e 21 ef 4c 2b 39 8c c1 61 2f 70 c4 eb f7 36 41 75 18 ff eb 9f fe e1 5f ff f4 4f 56 e9 f6 a6 25 13 c5 55 d7 e9 e6 3b 9c 7f 75 8c 14 bb 1d 89 14 86 db b3 1c 6d 6f d5 75 0b 4a c5 b8 7c 8f 13 6d 08 b0 9a 3f 02 9b 18 78 3b 2e Data Ascii: %!L+9a/p6Au_OV%U;umouJ\|m?x;.:u}8)KPqJAW;:[!hs\Mv(>~`PDlP:U5.S2Xq3YT@0`E&iwQo,HSwhGkc~*wC\|#Bjs;
Oct 25, 2024 13:27:35.739108086 CEST	356	OUT	GET /r/www/cache/static/home/js/nu_instant_search_d67677a.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:35.984004974 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 27 Sep 2024 22:06:05 GMT Last-Modified: Thu, 12 Sep 2024 08:43:03 GMT ETag: "d67677a789dff7e301037548979804f1" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 492976 Accept-Ranges: bytes Content-MD5: 1nZ3p4nf9+MBA3VIl5gE8Q== x-bce-content-crc32: 3186515 x-bce-debug-id: FXG3L/2ewIU0bd1/8lUvRi25xJuIDrGY5Es+xuUzxZHgm5uwgXJ1oh6hX7A/4X0WOQvHEDfa63zvrI/pwDKfpA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 8071f834-6d72-4be8-9dfd-2306e24c8a90 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 24 Sep 2024 22:06:05 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache60 [4] Ohc-File-Size: 24739 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 31 62 32 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 3c 69 73 1b c7 95 df f5 2b c8 91 02 cc 98 8d 8b 92 bc 0a a0 21 56 12 65 99 91 28 d1 26 1d af 23 29 a8 01 a6 01 8c 38 98 81 a7 1b 00 29 02 55 76 8e cd 1e 95 c4 d9 6c ed 91 a4 2a 55 de c4 76 ed 56 b2 55 9b 6c 25 51 ed 26 7f 46 94 ad 7f b1 ef 75 cf d1 33 18 90 90 14 7b e3 94 3f 10 04 fa 78 fd fa dd ef 75 cf 74 47 5e 87 3b be b7 c2 7d 8b 71 9d 1a 47 63 2b 58 61 66 f1 b2 ed 8c 57 3a ae c5 98 a9 89 be 52 d7 0f 4a 01 65 23 97 6b 1b 97 d9 d0 f2 36 2e 57 c2 7f 30 76 a3 d8 38 a7 6b 6d df 3e d4 8c b2 35 1c 52 cf d6 99 41 a0 ad 3c 37 dd 28 77 2d 9b 6e 79 fa f9 6a 15 be 3b 30 54 43 48 d0 c1 e9 01 62 41 18 e5 7b ce 80 fa 23 ae 77 43 14 75 e3 e8 04 68 77 60 24 82 5b b4 62 40 07 fe 98 ea c6 8c ac d3 f3 c6 ec 9c 0a 36 fa ba 42 13 02 78 74 b2 f2 3a ed 5d 3f 18 ea da d7 ef dd 63 6b 53 fc 38 a7 19 84 9b b0 c4 d9 fd 09 00 1d 5b ae 8e a0 87 ae d5 a1 3a Data Ascii: 1b23<is+!Ve(&#)8)Uvl*UvVUl%Q&Fu3{?xutG^;}qGc+XafW:RJe#k6.W0v8km>5RA<7(w-nyj;0TCHbA{#wCuhw`$[b@6Bxt:]?ckS8[:
Oct 25, 2024 13:28:10.480150938 CEST	457	OUT	GET /r/www/cache/static/@baidu/cosmic-dqa/index_8b281c56.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.724477053 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sun, 27 Oct 2024 09:34:07 GMT Last-Modified: Thu, 24 Oct 2024 08:14:37 GMT ETag: "962cc5aca43dd8984cd54fc48b281c56" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 7512 Accept-Ranges: bytes Content-MD5: lizFrKQ92JhM1U/EiygcVg== x-bce-content-crc32: 619359609 x-bce-debug-id: Cie1eB/Qrsvdh4yFEjD/ZbRYjjgnTFEmr3jam37F19XauBv+mLnJJUY000dYNwjgxUSRKWQZlaUo8qg8Um1YxA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a7bddd6e-bd32-459a-8ac0-93bc515ef3aa x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 24 Oct 2024 09:34:07 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 17740 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 31 38 30 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc 7d 6b 8f e3 38 92 e0 5f f1 56 a1 1b 95 3b 29 b7 1e 7e 17 aa b0 8b c1 ed ce e2 6e 66 17 db f3 61 16 73 83 81 2c cb 69 4d d9 96 5b 92 b3 2a 27 d1 c0 fd 96 fb 69 f7 4b 8e c1 87 c4 47 90 a2 64 57 75 df f5 dd d6 38 a5 60 44 30 18 0c 46 04 43 e4 f4 94 56 9f 8e e9 f9 e9 35 2b 8f 65 b5 79 1b e5 d1 3e 9e bd df 97 e7 26 a8 8b bf e7 9b 68 71 f9 f2 fe 73 59 ed 82 cf 55 7a d9 6c ab 3c fd 14 c0 df ec 21 fd 7b 73 2e ab 53 7a fc 79 2a b0 4d da 5f c1 b1 38 7f 12 c8 67 c9 62 b9 9d bd 6f f2 2f 4d b0 cb b3 b2 4a 9b a2 3c 93 d6 e7 1c 6d 7b 49 ab f4 89 50 3d bc 6a fc 10 a4 79 70 c8 8b a7 43 b3 89 57 e4 01 69 f2 54 9c 37 e4 dd 24 94 50 1d aa d7 6d 9a 7d 7a aa ca eb 79 17 30 2e 8a 73 d1 14 e9 f1 fd 96 b0 9f 57 94 f8 7b 8e 2a ea 30 45 31 a0 7a 7f 29 eb 82 f2 58 e5 47 c2 ec 73 fe fe 73 b1 6b 0e 9b f4 da 94 0a 9d 4d ba 6f 72 84 da db 7c 97 e7 fb f0 7d 46 3a 90 9f 9b cd 9b 37 32 Data Ascii: 180e}k8_V;)~nfas,iM['iKGdWu8`D0FCV5+ey>&hqsYUzl<!{s.SzyM_8gbo/MJ<m{IP=jypCWiT7$Pm}zy0.sW{*0E1z)XGsskMor\|}F:72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	185.10.104.115	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:32.300179005 CEST	357	OUT	GET /r/www/cache/static/global/js/all_async_search_a7be81b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:33.126801014 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 26 Oct 2024 11:53:40 GMT Last-Modified: Wed, 23 Oct 2024 09:10:59 GMT ETag: "a7be81bd3f3171c9624b479e2898f34c" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 170949 Accept-Ranges: bytes Content-MD5: p76BvT8xccliS0eeKJjzTA== x-bce-content-crc32: 1149662581 x-bce-debug-id: 4+Mor96zMHp91fyCzT1URsrquznSnlmxIRSHSvXULzyRoQ9dxvIwhRD/rrDW5l82hQX5BVG2MztWfwf04godZQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a21ff519-06ba-4d19-a210-b0ff2f81d2fd x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:53:40 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 221349 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 64 63 35 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd dd 73 e3 56 b6 2f f6 7c fb af 90 e0 1e 36 60 82 14 a9 6f 91 86 78 da dd 6d bb 67 dc b6 c7 6a 8f 3d 23 c9 08 48 82 12 ba 49 80 0d 80 52 cb 12 6f 9d 54 e5 21 a9 4a ea 24 55 79 49 e5 26 0f 37 55 27 6f c9 cb 4d dd aa 54 25 7f cc a9 3a 1f f7 bf b8 eb b7 f6 07 36 40 50 92 7d 26 95 f1 34 05 6c ec ef bd f6 fa da 6b ad bd 39 59 c4 a3 3c 4a 62 db b9 55 8f 1b 17 61 fe c3 73 4a b8 0a d2 8d d0 cd bd db a5 9b 7a 71 70 15 5d 04 79 92 b6 17 59 98 3e bf 08 e3 bc 9d 27 5f 27 d7 61 fa 22 c8 42 db e9 a7 61 be 48 e3 8d bc 3d 0b 46 46 f6 f9 34 c8 27 49 3a a3 dc 3f cc e7 2a 77 3b 8a c7 e1 c7 6f 27 b6 f5 e6 f9 0b cb 39 f6 3a ae 1d 7a 29 95 cd 47 97 f6 56 7a d5 b3 4f cf c6 ed f3 a6 73 e6 6c 4c a3 f7 21 f5 6a f4 3e d9 72 9c 41 de 8e 42 2f 3c ed 9e f7 cc 12 f6 2c 8b c2 b3 ec 2e 4f a3 31 fa f6 29 55 e1 50 1d d7 a8 c3 28 b6 5d 2e 36 89 d2 70 92 Data Ascii: dc50sV/\|6`oxmgj=#HIRoT!J$UyI&7U'oMT%:6@P}&4lk9Y<JbUasJzqp]yY>'_'a"BaH=FF4'I:?*w;o'9:z)GVzOslL!j>rAB/<,.O1)UP(].6p
Oct 25, 2024 13:27:33.126837969 CEST	1236	IN	Data Raw: 7c 3c db 52 cd 89 ac 32 79 b5 99 d1 65 9a cc c2 6a 76 91 ba 9a 3b a1 f1 06 ed 72 5e 4e 5b cd 7a 15 a6 19 4d 7e 51 73 fb d3 2c 98 04 69 24 4a 89 67 51 ac e3 e6 4b 73 b1 5e 86 93 60 31 cd ff b8 08 d3 9b af a2 8c 56 2e 4f 6f 6e e5 72 fc fe e4 db 6f Data Ascii: \|<R2yejv;r^N[zM~Qs,i$JgQKs^`1V.Oonro I&`zBk\m*:gO3,?q,Gu.E0Gw`^&q" &d>n\|<[Nl$OyHqB_[S:\QP!-`Ecq2Z444_hl$pw
Oct 25, 2024 13:27:33.126872063 CEST	364	IN	Data Raw: 28 33 28 a5 ec 68 38 f6 56 99 c4 1f 9e 3b fd 27 ab cc 98 e8 ef 9a 6a 4a 4d bb 54 83 5b 3b 19 8d 46 0d f5 b9 77 a0 c4 49 89 f5 02 57 16 2a dc 9e 4c 26 06 6b 06 24 53 e5 04 ee ed ad e3 56 41 84 a6 6f e9 00 e0 fa 04 f0 0a 87 04 e3 f1 ab 3f 11 71 0c Data Ascii: (3(h8V;'jJMT[;FwIWL&k$SVAo?q@%._]g7`TN&TV/_GaJDr%=w77/7#9@BgW1zM w"<I<psP4Ljo}MypM0IL2RTr,Yojrv^hqMp
Oct 25, 2024 13:27:33.130367994 CEST	1236	IN	Data Raw: a5 81 66 d7 11 78 93 2b e7 76 44 e2 b8 95 47 f9 34 b4 7a 31 c9 97 57 e7 1a 57 6e 7d 76 fa f3 67 c7 e7 cd e3 ad 0b 17 18 20 6e 34 62 c5 2e 77 3b 1d 42 12 b1 17 4b 5a 0a 2c db 71 29 95 00 83 aa 89 47 b4 06 3f 7c ff fa 45 32 9b d3 d6 22 18 8a 9d fe Data Ascii: fx+vDG4z1WWn}vg n4b.w;BKZ,q)G?\|E2">78[X=~XSn7FSYy<P5<5FKlqrA/9xqyz5S'G9nZUJF'~('r]Z?QW9
Oct 25, 2024 13:27:33.130400896 CEST	1236	IN	Data Raw: 56 27 3b 60 89 17 85 63 b1 a8 c8 57 9d 92 98 a6 24 38 8d cf f5 f9 6a e8 1c b7 ba ce 6d ee c5 54 b9 6a 53 4e 88 16 ca e4 ee bd 8d 89 57 e9 e5 2e 46 d9 8b 30 73 e1 c7 28 cb d7 cd 5b 0d a6 ab 4c dc 60 b3 d3 db ec 3e a1 8a 74 15 fa a8 43 70 71 35 9b Data Ascii: V';`cW$8jmTjSNW.F0s([L`>tCpq5rzfC8Lm+8$D20'RNXT[`F\|1$BZK4\G0F2rJwhfE']TFeT/e^<O/h(zv$}\v;N#$_
Oct 25, 2024 13:27:33.130434036 CEST	364	IN	Data Raw: 11 99 fc c3 51 67 3c 19 1a fd f9 10 8e a3 3c 79 60 26 64 26 bf d3 d9 ef ee 87 06 1c 4b aa 14 cc a3 fb 2b 28 f2 11 d6 d8 d9 19 ed 18 eb 29 bf 11 e3 f3 a8 3a 28 1f b1 66 07 47 87 5d 83 e1 5f 0c 47 ad 34 84 8d c1 c3 80 55 ce eb ef 4c 8e 8e f6 3a 06 Data Ascii: Qg<<y`&d&K+():(fG]_G4UL:N\|CShRmF2divh`%C-F'hF3]\S#`%@H\S%tvwM3o`Z2.e6cyY,LMT]%8
Oct 25, 2024 13:27:33.134027958 CEST	1236	IN	Data Raw: 46 0e 7f d8 dd 3e dc eb 02 5f 44 38 64 62 2d 42 1a 66 59 6b 98 26 d7 d9 5a 60 ac cf 0c b1 96 64 53 ec 39 68 48 5a b3 28 4d 93 94 b3 45 d3 b5 75 d5 65 f5 77 c2 49 77 c8 f0 3c 4d f2 3c 0a c1 4a af 29 5f 64 20 d1 3d dc e9 ee 02 1b 83 5c 87 e3 d6 fb Data Ascii: F>_D8db-BfYk&Z`dS9hHZ(MEuewIw<M<J)_d =\ I.kj~_Y5mVpdA\_>;G;l~"s=Qgx0$LghX?{kJkj6?vG5-/mfwwcj%feke9OvHbkH
Oct 25, 2024 13:27:33.134080887 CEST	1236	IN	Data Raw: 9b 04 46 bc b0 7a 2a 1d 57 4e b2 ac 32 f6 6e 4d 2f 69 e5 04 5d 76 92 36 5c a7 b5 bf 74 ad c7 f5 b2 2f a7 bb 30 44 ac ce b3 ec 5f 91 22 8c bf a5 37 b3 fc 5c f8 30 87 ce 40 77 58 39 30 73 01 39 40 55 00 10 2e 3e 28 d7 66 f5 a5 18 af 5a be 48 79 55 Data Ascii: Fz*WN2nM/i]v6\t/0D_"7\0@wX90s9@U.>(fZHyUUxF8c:v7%%<0BT_GrBNqv+]67c^%jfpV2/)sZqb`a^r_5lL]x\LuqTTm.b7WG
Oct 25, 2024 13:27:33.134113073 CEST	364	IN	Data Raw: d0 af 9b 4d db f9 6c 3c 80 cf 95 9d 13 63 33 d4 83 f5 a7 67 43 6a 2a 24 f1 ae 9c 9e 51 3a 25 df dd 45 c6 d4 f8 b4 6b b0 1f 02 55 8f 9c 23 59 4b 20 6b 51 a9 5c 47 20 ea d0 69 40 e8 66 a8 03 55 f7 09 61 19 cf ca 2c a7 57 d7 4d 54 55 d7 4d 34 bc da Data Ascii: Ml<c3gCj$Q:%EkU#YK kQ\G i@fUa,WMTUM4nZ:):WTIqeF(e#4#L(irQOr&9QU"eq'.`xM;BS5"b(z)x.TFDq}Iv
Oct 25, 2024 13:27:33.136868000 CEST	1236	IN	Data Raw: 40 2d 94 5e c4 db d9 c8 21 79 19 21 81 96 08 c1 e4 1a aa 49 53 6c 03 c3 12 b6 a1 d7 78 0d 1a 3e 88 bc e7 05 88 9d 1a 5f 5a 88 db 1a 79 b7 7a b7 f4 42 17 06 60 f0 04 be 0c 60 44 92 66 3d 2c 91 51 c6 ac 4b ce 69 b3 eb 9a 89 0a 6c dc 1a f8 0a 9c a8 Data Ascii: @-^!y!ISlx>_ZyzB``Df=,QKilja({N~T}"18e9NPWv;,_SABG7&!,/7mrJ[YKO3={PE]JGbLAy-;)6HApx{(*_f3rS
Oct 25, 2024 13:27:33.136904001 CEST	1236	IN	Data Raw: 70 87 f6 69 ff 29 02 8b 52 26 2b 5b 0c 67 51 6e 11 d6 66 04 1a 53 6f 45 12 f0 21 3f 98 03 8a c0 ca 11 c3 17 57 f8 55 5a 34 fa 4c a2 90 dc 75 24 46 2e 62 a2 e1 d5 c9 c8 bd 05 d5 a0 67 59 31 e4 c5 3c 06 05 f9 c8 4f 69 c1 05 8b 4e cc 4d a3 21 4b c5 Data Ascii: pi)R&+[gQnfSoE!?WUZ4Lu$F.bgY1<OiNM!Kff`E(+dsOV>xT?d:PI8G21=B1TKc/4TFI1H<aN[Av2KaqEp%-pNZ":6U>
Oct 25, 2024 13:27:35.552692890 CEST	351	OUT	GET /r/www/cache/static/plugins/every_cookie_4644b13.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:35.796215057 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 02 Oct 2024 06:03:56 GMT Last-Modified: Thu, 26 Sep 2024 06:17:00 GMT ETag: "4644b1365b341bc21a65b69a93ed92ec" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 876888 Accept-Ranges: bytes Content-MD5: RkSxNls0G8IaZbaak+2S7A== x-bce-content-crc32: 2690864632 x-bce-debug-id: /4bhU5qjfdBhpDpVaLvOdhfk3Wawu6IDUbkm0tKrmm+TBJzlH5PNH9w7PMNpOV9NBxbxvqlQuAgUfXi8WcRwXQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4a155333-c586-4673-a1cf-1a6fbe37c59d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 29 Sep 2024 06:03:56 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 3421 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 35 35 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a4 57 61 6f db 36 10 fd de 5f 61 b3 81 40 c6 ac 2a a5 6b 96 d9 10 8c 36 ed 80 00 c3 36 34 ed a7 65 09 14 e9 1c 73 91 45 55 a4 9c 1a 96 ff fb 8e a4 64 49 4e 82 b5 18 10 24 d4 f1 78 3c de bd f7 c8 e8 72 b3 1d 2f aa 3c d1 42 e6 94 6d db e1 48 50 c1 b6 7a 29 94 7f 0f 9b 48 70 3b 4c aa f2 5c ca 7b 01 11 21 ce 92 a9 03 43 95 3e 32 7c 88 75 1c 69 da 06 63 ce be 10 f9 a1 ab de 14 10 bd 0a dd c7 c5 65 34 6e 86 aa 2a 0a 59 ea ee 7b 93 27 ef b2 8c b2 dd 3e 5d 6d d2 5d c7 e5 48 47 79 95 65 5c 46 e3 80 63 e4 4a 41 69 f6 27 13 31 13 0b 3a a6 3a 4a 65 52 ad 20 d7 fe 1d e8 8f 19 98 e1 fb cd 45 4a 81 31 a6 b1 1c 3d 8f a4 84 58 43 e3 44 c9 c5 ef 7f 7e f9 4c 30 7f 97 29 59 8a 34 85 1c 93 f7 95 de 64 e0 a7 42 15 59 bc 89 48 2e 73 b0 66 d0 ef b4 2e c5 6d a5 81 12 91 12 0e 66 f5 d0 9c 62 7a af 16 b2 24 9c 94 a0 aa 4c db 1d e2 34 7d 0f cb 78 2d 64 49 c9 Data Ascii: 550Wao6_a@k664esEUdIN$x<r/<BmHPz)Hp;L\{!C>2\|uice4nY{'>]m]HGye\FcJAi'1::JeR EJ1=XCD~L0)Y4dBYH.sf.mfbz$L4}x-dI
Oct 25, 2024 13:27:35.812191010 CEST	342	OUT	GET /r/www/cache/static/soutu/js/tu_ba0fbe3.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.054841042 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 12 Oct 2024 14:00:22 GMT Last-Modified: Wed, 09 Oct 2024 08:25:20 GMT ETag: "ba0fbe3dc3b2456d26cf9aa9b98529ae" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 876887 Accept-Ranges: bytes Content-MD5: ug++PcOyRW0mz5qpuYUprg== x-bce-content-crc32: 2194533526 x-bce-debug-id: h9ShWZpWkAti0nLLxl/DtaYD9urQgr3dMXeRiwSGSoTksU/y6GY8HvghtP/N8HGnizoldOS0iacOc6r+VOX3Aw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1eda1e48-06d9-48de-95b8-3422188589a1 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 14:00:22 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 36225 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 31 63 35 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 7d fb 77 d4 46 b2 f0 ef f9 2b 84 97 9b 19 83 67 c6 36 21 c9 1a 4c 2e 21 70 97 f3 c1 c2 e5 b1 7b cf 35 c4 47 a3 d1 cc c8 d6 0b 49 e3 c1 a4 39 07 f2 c2 3c 02 e4 05 79 90 07 59 48 48 16 0c d9 cd 03 6c 1e 7f cc f5 c8 e3 9f f6 5f b8 55 dd 92 46 52 b7 34 03 c9 f7 7d 75 38 78 24 55 57 57 57 55 57 57 57 b7 5a 95 0d 1b 9e db 20 fd 7b 5d d3 55 a9 f3 f9 63 ff f2 35 ff d6 f5 ce 17 57 ff f5 f0 c2 ca c3 cf ba df fc bd f3 f0 4d ff ce cd ce b9 af bb 8f 1e 21 a6 dc f2 9a 96 23 b5 5b b3 b2 56 97 cd 46 31 fa f5 ef 55 59 ab b5 ca 8a 65 0c 3f b7 61 43 e5 b9 e7 2a 1b a4 86 6e 55 65 5d 72 a7 5d d5 75 35 cb 94 dc 76 dd aa ce a8 8a 07 08 f0 5c 75 75 cd f4 4a 35 cd 95 ab c0 41 5d 55 dc 92 22 1b aa ae c8 ae 0a 28 c5 7a cb 54 3c 2c 58 1c 96 de 78 4e 02 a8 54 24 ff fa bb 9d f7 ce ac 2e 7d 37 5e 1e 0d b8 66 d7 fe d7 bf 76 1e 5e a2 68 73 b2 23 b9 b2 f1 Data Ascii: 1c52}wF+g6!L.!p{5GI9<yYHHl_UFR4}u8x$UWWWUWWWZ {]Uc5WM!#[VF1UYe?aC*nUe]r]u5v\uuJ5A]U"(zT<,XxNT$.}7^fv^hs#
Oct 25, 2024 13:27:36.873454094 CEST	367	OUT	GET /r/www/cache/static/soutu/css/soutu_new2_e1a824c.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:37.127551079 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Mon, 23 Sep 2024 01:32:00 GMT Last-Modified: Thu, 12 Sep 2024 08:43:07 GMT ETag: "e1a824cb4ee4a24e6765a723f2bc2c4b" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 492978 Accept-Ranges: bytes Content-MD5: 4agky07kok5nZacj8rwsSw== x-bce-content-crc32: 583284809 x-bce-debug-id: dirkG5Ulgoep3KLu2ebbDwg8x+LIr/TWdH/GUvj+xxIZQiBmx+1kVr8eRHyzPJVjMic5A/o5VfTEsTTM7ndp9Q== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 408b13e6-bacc-4648-9e32-7d4f878d90f9 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 20 Sep 2024 01:32:00 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache62 [4] Ohc-File-Size: 13180 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 61 36 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc 5a 6b 8e db c8 11 fe ef 53 28 3b 08 d6 06 86 12 49 89 94 44 21 3f 36 19 fb 14 01 84 16 d9 92 88 a1 48 86 a4 ac f1 0a 3e 41 7e e6 1e 7b 83 dc 26 b9 47 ba fa 41 f6 8b 1c 6a 46 89 91 c5 c0 1e be ba aa ba ab fa ab af aa e7 e1 f9 12 45 ce a9 76 e2 0c a3 ea 9a a4 75 99 a1 6f 51 5e e4 f8 fb 87 07 fa f2 82 77 cf 69 e3 a4 79 79 6e 1c f2 36 c6 c7 22 4b 70 f5 c8 5e 9f 8a 5f 7b de 0d be aa cd 37 d7 b8 c8 8a 2a 7a 88 e3 f8 fb 87 69 5a 36 db 0a c7 d7 2a 3d 1c 9b 68 e1 95 2f 7f 48 4f 65 51 35 28 6f 36 19 de 37 51 9a a7 4d 8a b2 4d 53 94 e2 ba 1b 17 a1 7d 43 45 e6 0d ce 9b e8 a7 9f 36 62 6e 69 9e a5 39 76 76 59 11 3f 6f 8e 98 8a f7 16 e5 cb e6 92 26 cd 31 72 37 bb a2 22 d6 38 54 07 51 3b a9 8b 2c 4d 26 0f 78 09 3f 9b 13 aa 0e 69 1e 79 2e 79 e3 4e e8 2f 9f 8c 26 9a eb e2 dc 9c 9d 5d 93 5f 61 da 09 7e 89 bc 4d 59 d4 c4 b0 22 8f d0 8e 88 39 37 78 c3 e6 e3 11 c1 d4 f0 Data Ascii: a64ZkS(;ID!?6H>A~{&GAjFEvuoQ^wiyyn6"Kp^_{7ziZ6=h/HOeQ5(o67QMMS}CE6bni9vvY?o&1r7"8TQ;,M&x?iy.yN/&]_a~MY"97x
Oct 25, 2024 13:27:42.644937038 CEST	364	OUT	GET /r/www/cache/static/amd_modules/@baidu/aging-tools-pc_63487d8.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:42.888247967 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 01 Jun 2024 04:48:46 GMT Last-Modified: Mon, 28 Aug 2023 03:19:54 GMT ETag: "63487d8c50e44137f8b6ce2a04407f8f" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 376029 Accept-Ranges: bytes Content-MD5: Y0h9jFDkQTf4ts4qBEB/jw== x-bce-content-crc32: 3238666094 x-bce-debug-id: 9FO9Jh9Z4g+RSRjCBlYfr3G2KnX+bSD4ez5uaBB5RetfRjd3A1cYHz29liEzUqVqzEbSdYJsySsVFADTXM9LqA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 9aae3006-487b-4b9c-86f9-5fe66385555c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 29 May 2024 04:48:46 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2] Ohc-File-Size: 144135 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 63 63 39 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 53 57 96 37 fe 3e 9f 42 dc aa 07 a4 46 36 96 6d 26 39 8a 9b 90 a4 bb ba 2a 95 54 92 aa 54 da 61 79 c9 d6 b5 ad 20 24 97 24 43 28 f0 7f 19 08 f3 18 66 c2 3c 85 90 84 31 10 c0 36 f0 22 55 2b 1f a4 7d 35 bc ea af f0 9c fd db fb dc 7b ee 20 d9 4e 52 d5 fd 5f eb c9 60 9d 7d e6 b3 cf 9e ce 3e c3 cd d9 23 f9 a2 1d b7 fe 75 28 9b cf 4d ac c8 8e e6 8b a3 1d d5 52 a9 50 e9 18 1f 5e 91 cb 57 aa 2b f2 c5 9c fd a9 95 1c b0 2a d9 a2 95 b4 aa 95 42 7e c8 da 90 1c 99 28 0e 57 f3 a5 62 bc 98 ac 26 b6 69 28 66 c7 8b 89 6d f9 91 78 69 a0 b8 21 51 b6 ab 13 e5 62 8c c2 9d f6 a7 e3 a5 72 b5 d2 b7 39 5b 8e 55 33 14 95 d9 96 4f 17 93 85 f4 92 54 52 12 d3 db 26 27 fb a4 50 9e 0a 0d 67 0b 85 78 55 97 4d 56 93 5e d8 4e 28 a0 90 59 d2 e5 c5 4d ea a2 99 01 b7 77 aa 6f 6e 7a a6 38 69 74 3b b1 ad e8 26 54 cd 04 d5 8c ad 4a 65 dc 98 c4 36 6b a2 62 c7 2a d5 72 7e b8 6a f5 b9 63 ad 52 25 dc 66 bc 9a Data Ascii: cc97iwSW7>BF6m&9TTay $$C(f<16"U+}5{ NR_`}>#u(MRP^W+B~(Wb&i(fmxi!Qbr9[U3OTR&'PgxUMV^N(YMwonz8it;&TJe6kb*r~jcR%f
Oct 25, 2024 13:28:10.107511044 CEST	454	OUT	GET /r/www/cache/static/@baidu/cosmic/tokens_6daf5cab.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.350433111 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Thu, 24 Oct 2024 09:33:20 GMT Last-Modified: Mon, 21 Oct 2024 08:10:46 GMT ETag: "75de263fc4ee0017d7a546c26daf5cab" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 350366 Accept-Ranges: bytes Content-MD5: dd4mP8TuABfXpUbCba9cqw== x-bce-content-crc32: 1935381878 x-bce-debug-id: gtfnH6M9AxKsfpkxPdxZEarX5iNUu0wXevRa3ZuWbf78xIaqOLgnE3EL6fR+i+iN8zqTAiTLWmSeylNy4MG1bg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5f2b9d6d-0fe6-4704-81c5-d71467398493 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 21 Oct 2024 09:33:20 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache58 [4] Ohc-File-Size: 15052 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 31 32 38 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 7d ed 92 db b8 92 e5 ab f4 c6 c4 46 cc dd ed aa 10 f5 ad ea 88 89 d8 7f fb 1a fa a0 6c 4d cb a5 5a 95 dc ed 1e c7 bc fb 02 24 41 22 13 99 c0 41 ea ce b4 7d e3 b6 0d 9e 73 12 99 38 48 82 ac 2a f9 f5 78 fb 7c f9 38 fe fa ea ff fb e7 e5 b3 fd f5 ed 7e bb 3d 7e be bc f8 81 7b 7b 7a 79 59 bd fd cb f9 7c 9e b5 a7 df a2 c1 a5 1f 6c 67 a7 43 3c b8 f0 83 87 f3 61 1b 0f ce fd e0 ee b0 5b c6 83 8d 1f dc ac 36 b3 68 70 e6 c6 36 8b 66 d1 44 63 0e 77 6a 17 fb c5 39 1a 73 82 87 d3 7c bf 58 44 63 2e f2 ee d8 1c e7 71 64 37 c5 cd be 69 9a 98 eb 72 59 ed 66 bb 66 3d 8c dd ee fb f7 2f 6d c8 71 d1 86 74 c2 78 9f e6 fa c4 f1 5d a6 c7 fd 3e d4 24 8c 77 c9 ee 0f db 15 1b ef f2 dd ee 57 47 3a ee 53 3e ad 66 8b 96 0e 77 59 2f db 39 8b da 25 be d8 36 7b 3a dc e5 3e 5f 37 a1 6e c3 70 9f fe 66 c6 d0 7d 05 8e b3 b0 1c 8f fd 7b 48 7f d3 86 f2 75 83 7d ee ed 29 e8 76 83 5d Data Ascii: 1281}FlMZ$A"A}s8H*x\|8~=~{{zyY\|lgC<a[6hp6fDcwj9s\|XDc.qd7irYff=/mqtx]>$wWG:S>fwY/9%6{:>_7npf}{Hu})v]
Oct 25, 2024 13:28:10.479217052 CEST	458	OUT	GET /r/www/cache/static/@baidu/cosmic-dqa/tokens_f083bbd3.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.722021103 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Mon, 21 Oct 2024 01:46:32 GMT Last-Modified: Thu, 17 Oct 2024 12:56:06 GMT ETag: "8a193b7ec9b725b26984b8aff083bbd3" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 620525 Accept-Ranges: bytes Content-MD5: ihk7fsm3JbJphLiv8IO70w== x-bce-content-crc32: 3985471969 x-bce-debug-id: UORlOzbwfUrZFxK+NkiJkTgCXXaiz3pL/Xp5aFBuaFBVuCriweYsYdhNWGY3ZMHEKIaoezPND+m15CyzJHw3Bg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5d66f85f-4bb3-40fc-b073-0d05317432ff x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 18 Oct 2024 01:46:32 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache61 [2] Ohc-File-Size: 712 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 32 63 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 9c 98 e1 6e a3 30 10 84 1f 26 7f ae d2 51 d1 24 e5 14 ee 69 00 9b 14 29 0d 3d 82 a2 56 55 df fd 72 31 06 7b 77 76 4d ef 4f a5 ca df 8c c7 f6 d4 58 7d 6c fa 4b f6 d6 fc 2c 87 be 1f 3f b3 ec f6 ab b9 fd 38 f5 43 56 f7 83 b1 43 d6 9d af 76 b8 d8 72 d3 b6 6d f1 1b 10 e5 a6 b0 fb ba ad 0e 87 78 74 b4 ef 63 d6 9f b3 8b 6d fa b3 a9 86 8f ec d4 1d 5f c6 72 b3 cd 9f f6 cf 5b 0c bf 0d dd 6b 80 3a 67 15 bd 07 03 c4 32 ed bc 82 ba a8 0c 64 67 2b 34 df b4 0f 84 d9 5a 8d 8a f3 3f fd 82 2c d9 18 3d 67 7d 5c e9 7d a4 be e5 c6 18 73 00 7e ff 39 3f de a5 fb 3e 56 cd d8 5d ad 02 f8 25 24 41 76 7a b3 04 85 a3 ed f1 2c 6e 06 ad 59 3a 0d 6f f1 ac 71 65 de ed e0 09 d3 3c 6e 82 bd 51 61 94 49 f0 a7 a1 d6 ec 55 50 24 6d dd b4 6f 04 ce b9 2b 0d e3 05 26 6f 9a 36 4f e2 34 7b 55 57 3b 2a 8b 3a 64 ba 4b 55 9f ac f1 91 0a 72 3b 09 3d 5a 64 6e 77 a0 2c a8 c8 c2 f3 0b 90 b2 6e 25 ab 82 Data Ascii: 2c8n0&Q$i)=VUr1{wvMOX}lK,?8CVCvrmxtcm_r[k:g2dg+4Z?,=g}\}s~9?>V]%$Avz,nY:oqe<nQaIUP$mo+&o6O4{UW;*:dKUr;=Zdnw,n%
Oct 25, 2024 13:28:10.727756023 CEST	458	OUT	GET /r/www/cache/static/@baidu/cosmic-shop/index_ecf8427e.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.970681906 CEST	888	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: keep-alive Expires: Wed, 23 Oct 2024 15:00:43 GMT Last-Modified: Fri, 18 Oct 2024 05:07:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: max-age=31536000 Age: 375079 Accept-Ranges: bytes Content-MD5: 1B2M2Y8AsgTpgAmY7PhCfg== x-bce-content-crc32: 0 x-bce-debug-id: opPRJi7iS1SerI/dOfezHzhu2F5y42fAr7ODy3VyuuOufFsic2mw/2B/EBNLdKhj/QFSyQzrZ58op2pwcwIB3w== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 806bd853-3f05-4e5b-a23e-ebffe7acc4db x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 20 Oct 2024 15:00:43 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache58 [2] Ohc-File-Size: 0 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49757	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:32.912179947 CEST	437	OUT	GET /img/PCtm_d9c8750bed0b3c7d089fa7d55720d6cf.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1
Oct 25, 2024 13:27:33.898333073 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 15444 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:33 GMT Etag: "3c54-5f555bcf8cac0" Expires: Mon, 23 Oct 2034 11:27:33 GMT Last-Modified: Thu, 23 Feb 2023 03:37:55 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 06 00 00 00 b5 ca 0e 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 1c a0 03 00 04 00 00 00 01 00 00 01 02 00 00 00 00 75 e5 65 67 00 00 3b be 49 44 41 54 78 01 ed 9d 09 9c 14 d5 b5 87 ef ad ea 65 56 16 99 19 96 d9 10 45 03 c3 26 cd 80 88 28 ee 51 e3 1a 31 31 9a b8 24 9a 68 34 26 d1 c4 ed a7 12 7d 9a 97 98 d5 f7 b2 a8 51 df 73 4b 04 4d a2 21 ee 0b 31 20 22 33 a0 c0 80 db 43 a7 7b 18 96 01 06 66 98 e9 e9 a5 ea be 53 20 30 5b 77 d7 d6 dd 55 dd ff d2 66 ba ea 9e 7b ee b9 df ed aa 3a 75 97 53 8c 61 03 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 [TRUNCATED] Data Ascii: PNGIHDRsRGBDeXIfMM*iueg;IDATxeVE&(Q11$h4&}QsKM!1 "3C{fS 0[wUf{:uSa
Oct 25, 2024 13:27:33.898360968 CEST	1236	IN	Data Raw: 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 10 00 01 Data Ascii:
Oct 25, 2024 13:27:33.898375988 CEST	1236	IN	Data Raw: ff 71 9b f7 67 4f 9e de 9c 24 5e c6 c0 d2 e6 cc 69 2b a5 a3 97 0d 4c b1 f3 88 28 0f b3 d8 ed 76 6a 84 2e 10 00 81 cc 11 80 c3 91 39 d6 28 09 04 2c 13 50 05 bb de b2 12 1d 0a 54 ce af d6 21 76 40 64 67 4f f8 12 c1 44 c9 81 03 69 fa 42 3d 3b 97 cf Data Ascii: qgO$^i+L(vj.9(,PT!v@dgODiB=;cHC-@H#\;DN;u&E7m@p&==W$Jqe { }{4lS:z)i4=v2{@`8%@:WOyz!7Uz
Oct 25, 2024 13:27:33.898490906 CEST	1236	IN	Data Raw: 22 6e 2a 5c 39 39 43 4f 92 33 f4 35 73 85 27 c9 c5 f9 8e 22 56 38 b9 b1 b1 3c e9 e4 d4 05 0b 84 b4 68 71 e8 7a 55 b0 db 88 f9 88 24 1a f7 26 d1 10 d5 9b 12 e3 ff b9 ae b1 26 23 43 55 a9 ec 41 3a 08 e4 32 01 38 1c b9 dc ba a8 5b 56 08 68 0e 41 0f Data Ascii: "n\99CO35s'"V8<hqzU$&&#CUA:28[VhAkOFYj_Mw-~h29#iZpW[nvU`zNKgk^L['J&7XMD}%Mwc @@mtM%5LU+[_
Oct 25, 2024 13:27:33.898507118 CEST	848	IN	Data Raw: ad db c9 e8 72 7e 6d 95 10 6f 0e 59 7e 5f 4d 96 d1 a1 78 10 c8 3a 01 38 1c 59 6f 02 18 e0 46 02 ad 3b 36 d5 6a 37 a2 2c d8 3e 29 0b 65 3a a6 48 5a 0a 9b 15 87 8b 56 c5 58 7f 3f 8e 63 28 c2 10 10 c8 0e 81 01 21 86 b3 63 06 4a 05 01 77 11 88 ab 22 Data Ascii: r~moY~_Mx:8YoF;6j7,>)e:HZVX?c(!cJw"KKT,a-49($a\*%G3CbygT~`rkUYjEA vp8"zkn@$<b"r2xe&P}=goyc>{I[),[=58$
Oct 25, 2024 13:27:33.898520947 CEST	1236	IN	Data Raw: 6e 97 87 0f 6f 1f d3 da 8a d9 ef e9 43 9d 56 cd 92 cc 5f 55 e2 e2 de b4 16 d2 47 39 57 4b a5 c2 95 7d 0e e9 dc 39 6a ee e6 f2 48 77 f4 25 ea 91 29 d3 99 25 2d 62 d4 d3 e1 a1 00 1e 8b 26 ce d8 74 dc fa 86 ca d5 46 0b 59 bb b4 b6 7d 42 a0 f9 23 5a Data Ascii: noCV_UG9WK}9jHw%)%-b&tFY}B#Z{9t^d8@ W1Jgt3u4o!ygOZ\|gH=b+"[@APkf=b6%kOwKZEl2h4M}\|
Oct 25, 2024 13:27:33.898530006 CEST	1236	IN	Data Raw: 15 b2 92 71 12 e3 f7 e8 75 3c e8 09 7b 23 c5 f5 b8 81 1f 56 5d d7 b4 b2 f6 1f fa 4a 3b 28 35 69 66 70 06 0d b1 3d 70 f0 88 fb be a9 42 bd be 6e 46 f3 37 8c 5a ae f5 4a ac 6f ac 99 4b 0c 2f a4 cf 6a 9a 4f 93 7a f9 3b f5 8a 90 73 f7 a8 c4 bd 47 34 Data Ascii: qu<{#V]J;(5ifp=pBnF7ZJoK/jOz;sG45V%w- kplSj5KufYLOZ6q:(VrH5TdfW#B{l`n:FCevk{zb'2G+iIpbE%{ye>eh
Oct 25, 2024 13:27:33.898536921 CEST	424	IN	Data Raw: 2d e4 97 4f a7 1b d4 a5 66 b4 14 0e 19 7e 65 f9 f6 ed 9d 66 f2 a6 23 cf 84 40 f0 6a 02 72 3f f5 6c e4 f7 39 2b 84 4c 2b 58 7e 3b 61 46 f0 88 49 87 56 5f ef a4 17 ac 85 fc fe f1 b2 30 16 9a 3d d9 6f 25 ee 63 b2 88 c6 29 6a ad f1 8d 02 9a 6d 68 f5 Data Ascii: -Of~ef#@jr?l9+L+X~;aFIV_0=o%c)jmh&i<"M1-s-26kvQ2oSgKVE?J=\uEL-Q?6yDk8S2/_S]g?m^W!_(bOe&WRs
Oct 25, 2024 13:27:33.898636103 CEST	1236	IN	Data Raw: 83 59 1c 2b 4e 37 de 63 a3 6a 74 4d a8 c0 73 bc 63 8d b4 c9 30 9a 14 39 2b 1a 11 2b 68 90 69 aa 4d 2a 73 5a 0d 0d 35 55 08 95 2d a9 9b 11 bc 28 a7 2b 8a ca 81 80 cb 09 60 0e 87 43 1b 50 d4 d5 f9 42 9f 6c d0 22 0c 9a db e8 1d 0a a3 b6 6e ed 32 97 Data Ascii: Y+N7cjtMsc09++hiMsZ5U-(+`CPBl"n2EPPUP)rCZDOM4]jnR4VRx}z\MJq4^io@/J+Xmdc6QY5T(XU
Oct 25, 2024 13:27:33.898653030 CEST	1236	IN	Data Raw: 86 33 69 2f 61 e3 71 f1 38 cd 5d 19 62 b4 e8 f2 32 99 dd 7f 5f 39 2b 2a c4 e9 6a 94 dd 40 79 21 a9 4c 79 78 ca 31 5b 2a 06 a6 e1 08 08 d8 4f 80 26 11 7d 66 bf 56 77 6a c4 15 cc 9d ed b6 d7 6a 1a 42 09 73 2e fd 72 48 e1 90 69 74 d3 5e e1 e2 aa d0 Data Ascii: 3i/aq8]b2_9+j@y!Lyx1[O&}fVwjjBs.rHit^_m~W<rl2ZGfy_+%!@YChHN@kg,1^%k.gfZT\XnsTN<Ih+h7 ,FrD+s'r^/%
Oct 25, 2024 13:27:33.904022932 CEST	1236	IN	Data Raw: 63 ea 43 e4 6c 14 0f 9a 88 83 96 08 10 57 4b 63 cd ed bb 52 7b 1c 23 74 f4 82 58 aa 44 1e 65 a6 a1 cc 2a fa a0 97 2f 8f da 1c 55 cd 3c 01 38 1c 99 67 ae bb c4 aa d9 c7 fd 9a 96 a3 06 75 67 18 44 90 33 31 53 8c 1d 3b 60 29 2b c5 eb 38 8b 7a 37 1c Data Ascii: cClWKcR{#tXDe/U<8gugD31S;`)+8z7$o`V+uS/bCO#ynn7_DziiD+{bE:v8;R" `7R$.bZTj7n))FgZISL?y&.:
Oct 25, 2024 13:27:34.824306965 CEST	454	OUT	GET /img/PCfb_5bf082d29588c07f842ccde3f97243ea.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:35.148474932 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 24774 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:34 GMT Etag: "60c6-5f555bcf8cac0" Expires: Mon, 23 Oct 2034 11:27:34 GMT Last-Modified: Thu, 23 Feb 2023 03:37:55 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 06 00 00 00 b5 ca 0e 0a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ed 9d 07 bc 15 c5 d9 c6 e5 de 0b 22 55 50 54 b0 01 16 ec 0d 8d 9a a8 89 25 62 ef 44 8d 25 46 0c 96 cf 7c b6 18 1b 1a 63 89 31 6a d4 d8 92 68 14 f5 b3 c5 de 6b d4 60 17 7b 43 c5 0e 36 54 40 01 05 81 cb f7 3c cb 79 ae c3 72 ce b9 bb 7b ca 3d f7 de 67 7e bf 39 33 bb 3b e5 9d ff 4e 79 77 76 76 ce 02 0b d8 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 80 09 98 [TRUNCATED] Data Ascii: PNGIHDRsRGB@IDATx"UPT%bD%F\|c1jhk`{C6T@<yr{=g~93;Nywvv
Oct 25, 2024 13:27:35.904918909 CEST	445	OUT	GET /img/flexible/logo/pc/peak-result.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:36.232646942 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 7707 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:36 GMT Etag: "1e1b-5b00622d17d00" Expires: Mon, 23 Oct 2034 11:27:36 GMT Last-Modified: Thu, 24 Sep 2020 02:41:24 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 00 84 08 06 00 00 00 b7 64 dd 8f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 [TRUNCATED] Data Ascii: PNGIHDRdtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:709387F9E92511EA8F22E951255463F7" xmpMM:DocumentID="xmp.did:709387FAE92511EA8F22E951255463F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:709387F7E92511EA8F22E951255463F7" stRef:documentID="xmp.did:709387F8E92511EA8F22E951255463F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+IDATxJa(`5bC{5bQcY5{/
Oct 25, 2024 13:27:38.499182940 CEST	542	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855655833&req=2&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:38.822091103 CEST	170	IN	HTTP/1.1 200 OK Content-Length: 53 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:27:38 GMT Data Raw: 7b 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 36 30 66 34 64 63 66 30 63 30 34 64 63 30 22 7d Data Ascii: {"err_no":0,"errmsg":"","queryid":"0x60f4dcf0c04dc0"}
Oct 25, 2024 13:27:47.191756964 CEST	548	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=&hisdata=&_t=1729855666076&req=2&sc=eb&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:47.519016981 CEST	170	IN	HTTP/1.1 200 OK Content-Length: 53 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:27:47 GMT Data Raw: 7b 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 38 62 61 63 65 37 39 61 31 30 38 32 35 38 22 7d Data Ascii: {"err_no":0,"errmsg":"","queryid":"0x8bace79a108258"}
Oct 25, 2024 13:28:10.345156908 CEST	550	OUT	GET /img/bd_logo1.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; BD_CK_SAM=1; PSINO=7; BDSVRTM=29
Oct 25, 2024 13:28:10.673022032 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 7877 Content-Type: image/png Date: Fri, 25 Oct 2024 11:28:10 GMT Etag: "1ec5-502264e2ae4c0" Expires: Mon, 23 Oct 2034 11:28:10 GMT Last-Modified: Wed, 03 Sep 2014 10:00:27 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 03 00 00 00 82 14 fe 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDR8pHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF
Oct 25, 2024 13:28:23.327830076 CEST	843	OUT	GET /sugrec?&prod=pc_his&from=pc_web&json=1&sid=60271_60852_60875&hisdata=%5B%7B%22time%22%3A1729855702%2C%22kw%22%3A%22%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C%22%2C%22fq%22%3A2%7D%5D&_t=1729855702209&req=2&bs=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&csor=0 HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; BD_CK_SAM=1; PSINO=7; H_PS_645EC=517andvyGW2g56egSmQ%2Bpmx97n3zpfyWyKMyj%2BZl1rTzqjCTITpkXfyoJvM
Oct 25, 2024 13:28:23.659859896 CEST	265	IN	HTTP/1.1 200 OK Content-Length: 147 Content-Type: text/plain; charset=UTF-8 Date: Fri, 25 Oct 2024 11:28:23 GMT Data Raw: 7b 22 71 22 3a 22 22 2c 22 70 22 3a 66 61 6c 73 65 2c 22 62 73 22 3a 22 22 2c 22 63 73 6f 72 22 3a 22 30 22 2c 22 65 72 72 5f 6e 6f 22 3a 30 2c 22 65 72 72 6d 73 67 22 3a 22 22 2c 22 67 22 3a 5b 7b 22 74 79 70 65 22 3a 22 68 69 73 5f 6e 6f 72 6d 61 6c 22 2c 22 73 61 22 3a 22 68 5f 31 22 2c 22 71 22 3a 22 e7 99 be e5 ba a6 e7 83 ad e6 90 9c 22 7d 5d 2c 22 71 75 65 72 79 69 64 22 3a 22 30 78 37 39 34 30 33 63 32 32 32 61 63 34 39 33 22 7d Data Ascii: {"q":"","p":false,"bs":"","csor":"0","err_no":0,"errmsg":"","g":[{"type":"his_normal","sa":"h_1","q":""}],"queryid":"0x79403c222ac493"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49767	104.193.90.80	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:33.691411018 CEST	315	OUT	GET /r/www/cache/static/bundles/polyfill_9354efa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:34.412997007 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 25 Sep 2024 21:40:49 GMT Last-Modified: Thu, 12 Sep 2024 08:43:02 GMT ETag: "9354efad5c9f5519f606c3c39434b9ec" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 374382 Accept-Ranges: bytes Content-MD5: k1TvrVyfVRn2BsPDlDS57A== x-bce-content-crc32: 3721482874 x-bce-debug-id: aAEMKkwDIHO6HkrsofrfU2YpvpbfGB/2fmftPJ4aOnEccFM+Jq1XRIIgO7IC+2ED/huHYkx2FKVDggnawvvVuw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 79d186c1-a2db-4a95-bc31-4a5d9e04bb54 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 22 Sep 2024 21:40:49 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache57 [4] Ohc-File-Size: 41984 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 33 36 37 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d db 72 db 48 b2 e0 f3 6a 7f 82 42 78 38 80 59 a4 00 ea 62 1b 34 c8 76 fb d6 76 fb d6 b6 ba ed 6e 9a a3 80 c8 a2 84 36 05 70 00 d0 b2 2c 32 c2 73 ce d9 7b c4 7e c0 be ec f9 83 fd 80 7d d8 88 fd 93 e3 f3 01 fb 0b 9b 99 75 41 01 04 d5 9e 9e 9e 39 d3 17 b1 ae 59 55 59 59 99 59 59 59 85 ed e9 22 1e e7 51 12 db ce e5 fb 30 6d e4 8c b3 34 b8 93 a6 e1 05 8b 83 b4 33 4f 93 3c c9 2f e6 9c 25 c1 f3 e3 9f f9 38 67 51 90 18 c9 61 f0 40 42 60 8b 20 34 32 b2 e0 55 9e 46 f1 09 9b 06 99 91 3c 0e 9e 2d ce 8e 79 ca 66 c1 d8 48 3e 0d e2 4e 36 8b c6 9c cd 31 34 a7 e0 09 04 e7 8b ec 94 4d 20 b0 88 b3 d3 68 9a b3 0b 08 8f 93 78 1c e6 ec 3d 04 7f 4e a2 98 1d 07 8b ce 38 9c cd d8 19 04 c2 f9 7c 76 c1 ce 83 a7 61 7e da 39 0b 3f b0 43 19 84 82 3f 07 51 27 4f 64 c7 ee 05 96 1a bd 15 04 d8 8d 64 da 78 75 71 76 9c cc 9a 4d 2b a3 40 35 43 d7 3e 0c 4f Data Ascii: 3675}rHjBx8Yb4vvn6p,2s{~}uA9YUYYYYY"Q0m43O</%8gQa@B` 42UF<-yfH>N614M hx=N8\|va~9?C?Q'OddxuqvM+@5C>O
Oct 25, 2024 13:27:34.413038969 CEST	1236	IN	Data Raw: d8 73 3d f6 62 24 05 f8 57 c1 ce 1f de 66 d7 c7 b3 30 cb 1a 3b ec 43 a0 51 9d 3b 97 79 7a 41 f8 e6 c1 73 ea 39 a4 01 de 79 27 e5 f3 59 38 e6 f6 ce 5b f8 b7 73 fd 6d bc 73 c2 2c cb a1 b9 30 f3 ae 0f 3b 6f b3 b7 af 46 d7 df 5e 7f bb 23 cb 24 80 8e Data Ascii: s=b$Wf0;CQ;yzAs9y'Y8[sms,0;oF^#$<cVrewe!\|Wg8+KVZel{]tU0x&D:y0OR#;/5MQ0{-fn[MP& iJdqb(!g5, x\'?}S
Oct 25, 2024 13:27:34.413054943 CEST	364	IN	Data Raw: 96 cb 6d db 45 31 98 40 d5 b0 ac 7b 89 09 04 91 9b e2 9f 38 10 9a a4 20 15 29 33 ad 69 92 58 85 7c cd 85 14 5e 53 74 62 92 3a db 9e b3 82 1e 8b 9a 43 6f 54 d4 83 2a 8b 8c 37 50 6b 82 6a bd 34 58 57 a0 90 a3 a0 4a a3 c8 0f c4 38 f4 c8 95 5c 66 7b Data Ascii: mE1@{8 )3iX\|^Stb:CoT*7Pkj4XWJ8\f{h"dcGI(n "B<GF`Uz2db#a0h(zVt;9z$PZBMNPEb:rE9H\|z}&\xvyq5{
Oct 25, 2024 13:27:34.414877892 CEST	1236	IN	Data Raw: 90 49 c6 4e 56 06 dc 02 15 34 78 85 89 2c 39 ab 55 66 ff ee 10 f1 97 e1 c1 55 34 81 3b 36 85 08 1c bb 23 c4 c1 02 b9 71 0f 6d 26 93 c5 18 b5 19 48 58 d3 1f 54 b6 64 f5 3c db 2f b1 7a b9 e5 52 ca d7 4a a1 58 54 5a 47 f2 3a 8a e3 4d 28 4e e5 42 95 Data Ascii: INV4x,9UfU4;6#qm&HXTd</zRJXTZG:M(NB(MAz}Zt#gT<(?mv:A{K)b4;5t4=>F,GDA<S[AN7K$a.'la(L-,\V)P;wK/MP?
Oct 25, 2024 13:27:34.414895058 CEST	1236	IN	Data Raw: da 2a d5 6e 30 aa 44 8d ed d0 51 d3 71 38 7e d7 38 5b 64 39 2c 4d d8 3f a8 a6 ad c2 4b 40 34 20 58 c8 21 72 c2 7b f8 e7 67 39 31 cf 81 85 e5 dc be 54 87 18 3e 4e c6 8a 59 2a 0e c2 f7 15 50 1d b7 0d fc 40 b6 ee 09 e4 7f 00 10 0f 51 d6 33 cb 85 e8 Data Ascii: n0DQq8~8[d9,M?K@4 X!r{g91T>NYP@Q3:;u1Y.yjrA8~8).n8>k!q84D2HQ0c~iI~J$>K>Na8<Z8#"c R8OiE6,SMfO&s#(\|69?~
Oct 25, 2024 13:27:34.414908886 CEST	364	IN	Data Raw: 09 4a 1c 44 a9 ed 32 40 6a 71 f6 16 b7 d3 96 a7 04 63 4a 63 32 16 f8 df 64 68 7f ac c3 f2 b7 b5 54 a0 58 ca df b4 5f 80 72 d5 9b cd 84 20 d9 d8 bf 55 c7 80 16 be fb 62 5a d8 aa 12 43 3d 2d ac 40 57 40 a3 48 95 4b 18 12 fb 6f 32 dc 1f 8a e1 aa 31 Data Ascii: JD2@jqcJc2dhTX_r UbZC=-@W@HKo21pIpQsp#b)lZkX-s\| )IB1"I")B?D@o6S"B_"rqls$VXGU%;VxbSvDsP1l$>&
Oct 25, 2024 13:27:34.416738987 CEST	1236	IN	Data Raw: b6 a3 cf f4 16 a0 ef 4e af 06 65 79 b7 0e 6e b5 bd 6e 7b d7 3b ec ee 8a bd 4e e7 d6 ad 5b 3f e1 26 a1 d8 46 79 95 26 d8 f8 0a 0d 13 69 04 6d ac eb ec 43 43 a8 72 8f 28 7b 80 4e 17 92 17 c2 3e 58 27 8c 25 27 34 17 cf 4b b4 f7 c9 d5 b3 79 70 86 a5 Data Ascii: Neynn{;N[?&Fy&imCCr({N>X'%'4KypS'\|:Le-oyj"[,^rE_XH@M$d q']n^;)V(a-hN8X"Y'dH{2~B4{
Oct 25, 2024 13:27:34.416764021 CEST	1236	IN	Data Raw: 20 fa c0 b1 e3 16 89 2d 54 c0 6f f2 f6 be ca b0 77 81 85 59 1e 26 77 6e e9 44 97 12 3b 5d 32 ea e3 6f 51 be 4b 59 a4 5b 16 ff 78 dd 9b 58 d2 fd 30 e1 ee f1 c1 f1 6e 78 e3 00 d6 ee 4d d7 00 08 13 9d 06 97 c7 21 8c d2 e3 37 58 16 7d e4 fe 01 9b 84 Data Ascii: -TowY&wnD;]2oQKY[xX0nxM!7X}yGl1#qSr^[qA@='nu!<*A;`Pd2n&hbW$e#nsuc&x-;rF;6bHnT1X{v-/%>1j>R0Eh-
Oct 25, 2024 13:27:34.416779041 CEST	364	IN	Data Raw: bd 22 3f 25 a7 77 0f 4d 7e ba 07 25 ab 8d da 97 a2 15 8e e1 0d 3f b4 3b ee bc 75 86 d7 07 23 e9 ed 92 ca b5 40 ca 40 d2 6c 46 72 27 b7 ae f4 ac d9 7b 40 f2 a4 c5 ac f6 8c 30 e8 90 82 ab c8 4d 62 0e 3a 7c 71 ef c6 2c 98 b0 23 98 cb 82 46 41 dd 18 Data Ascii: "?%wM~%?;u#@@lFr'{@0Mb:\|q,#FAM.&OA*zs-a^rcQ\ R+t95)"r~%{iOO??O\|_?_
Oct 25, 2024 13:27:34.418652058 CEST	1236	IN	Data Raw: 7f bc ef 25 ba 1f e8 f3 1e 21 ef 4c 2b 39 8c c1 61 2f 70 c4 eb f7 36 41 75 18 ff eb 9f fe e1 5f ff f4 4f 56 e9 f6 a6 25 13 c5 55 d7 e9 e6 3b 9c 7f 75 8c 14 bb 1d 89 14 86 db b3 1c 6d 6f d5 75 0b 4a c5 b8 7c 8f 13 6d 08 b0 9a 3f 02 9b 18 78 3b 2e Data Ascii: %!L+9a/p6Au_OV%U;umouJ\|m?x;.:u}8)KPqJAW;:[!hs\Mv(>~`PDlP:U5.S2Xq3YT@0`E&iwQo,HSwhGkc~*wC\|#Bjs;
Oct 25, 2024 13:27:34.418667078 CEST	1236	IN	Data Raw: a0 3c 00 0a b3 a7 c9 64 81 17 1e 25 65 e3 94 f9 bc 53 e4 04 78 8c ae 7b 63 3e 6e 25 5e 2f 1d 48 87 8f 58 3c 43 9a ae 3f 9b 25 94 88 81 f8 d1 af 7f eb 6c bc 5c 3b a0 1b b6 6b 59 a8 53 0c f0 8f 7f b9 ea 6d d5 8c 53 0c a9 d9 14 bf 9d f0 6c 32 10 41 Data Ascii: <d%eSx{c>n%^/HX<C?%l\;kYSmSl2AYtl%$w6a.(ig4"#s8>g.sFDwj=.@?:1Ck\#\|eJWMUJ/gUO6(=P3<%BL^RBm>\zmZr
Oct 25, 2024 13:27:34.550753117 CEST	325	OUT	GET /r/www/cache/static/global/js/all_async_search_a7be81b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:34.741314888 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 26 Oct 2024 11:53:41 GMT Last-Modified: Wed, 23 Oct 2024 09:10:59 GMT ETag: "a7be81bd3f3171c9624b479e2898f34c" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 170098 Accept-Ranges: bytes Content-MD5: p76BvT8xccliS0eeKJjzTA== x-bce-content-crc32: 1149662581 x-bce-debug-id: 4+Mor96zMHp91fyCzT1URsrquznSnlmxIRSHSvXULzyRoQ9dxvIwhRD/rrDW5l82hQX5BVG2MztWfwf04godZQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a21ff519-06ba-4d19-a210-b0ff2f81d2fd x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:53:40 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 221349 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 64 63 35 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd dd 73 e3 56 b6 2f f6 7c fb af 90 e0 1e 36 60 82 14 a9 6f 91 86 78 da dd 6d bb 67 dc b6 c7 6a 8f 3d 23 c9 08 48 82 12 ba 49 80 0d 80 52 cb 12 6f 9d 54 e5 21 a9 4a ea 24 55 79 49 e5 26 0f 37 55 27 6f c9 cb 4d dd aa 54 25 7f cc a9 3a 1f f7 bf b8 eb b7 f6 07 36 40 50 92 7d 26 95 f1 34 05 6c ec ef bd f6 fa da 6b ad bd 39 59 c4 a3 3c 4a 62 db b9 55 8f 1b 17 61 fe c3 73 4a b8 0a d2 8d d0 cd bd db a5 9b 7a 71 70 15 5d 04 79 92 b6 17 59 98 3e bf 08 e3 bc 9d 27 5f 27 d7 61 fa 22 c8 42 db e9 a7 61 be 48 e3 8d bc 3d 0b 46 46 f6 f9 34 c8 27 49 3a a3 dc 3f cc e7 2a 77 3b 8a c7 e1 c7 6f 27 b6 f5 e6 f9 0b cb 39 f6 3a ae 1d 7a 29 95 cd 47 97 f6 56 7a d5 b3 4f cf c6 ed f3 a6 73 e6 6c 4c a3 f7 21 f5 6a f4 3e d9 72 9c 41 de 8e 42 2f 3c ed 9e f7 cc 12 f6 2c 8b c2 b3 ec 2e 4f a3 31 fa f6 29 55 e1 50 1d d7 a8 c3 28 b6 5d 2e 36 89 d2 70 92 Data Ascii: dc50sV/\|6`oxmgj=#HIRoT!J$UyI&7U'oMT%:6@P}&4lk9Y<JbUasJzqp]yY>'_'a"BaH=FF4'I:?*w;o'9:z)GVzOslL!j>rAB/<,.O1)UP(].6p
Oct 25, 2024 13:27:36.026832104 CEST	324	OUT	GET /r/www/cache/static/home/js/nu_instant_search_d67677a.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.219250917 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 27 Sep 2024 22:06:05 GMT Last-Modified: Thu, 12 Sep 2024 08:43:03 GMT ETag: "d67677a789dff7e301037548979804f1" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 865692 Accept-Ranges: bytes Content-MD5: 1nZ3p4nf9+MBA3VIl5gE8Q== x-bce-content-crc32: 3186515 x-bce-debug-id: FXG3L/2ewIU0bd1/8lUvRi25xJuIDrGY5Es+xuUzxZHgm5uwgXJ1oh6hX7A/4X0WOQvHEDfa63zvrI/pwDKfpA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 8071f834-6d72-4be8-9dfd-2306e24c8a90 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 24 Sep 2024 22:06:05 GMT Ohc-Cache-HIT: iad01-sys-jomo7.iad01.baidu.com [2], zhuzuncache60 [4] Ohc-File-Size: 24739 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 31 62 32 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 3c 69 73 1b c7 95 df f5 2b c8 91 02 cc 98 8d 8b 92 bc 0a a0 21 56 12 65 99 91 28 d1 26 1d af 23 29 a8 01 a6 01 8c 38 98 81 a7 1b 00 29 02 55 76 8e cd 1e 95 c4 d9 6c ed 91 a4 2a 55 de c4 76 ed 56 b2 55 9b 6c 25 51 ed 26 7f 46 94 ad 7f b1 ef 75 cf d1 33 18 90 90 14 7b e3 94 3f 10 04 fa 78 fd fa dd ef 75 cf 74 47 5e 87 3b be b7 c2 7d 8b 71 9d 1a 47 63 2b 58 61 66 f1 b2 ed 8c 57 3a ae c5 98 a9 89 be 52 d7 0f 4a 01 65 23 97 6b 1b 97 d9 d0 f2 36 2e 57 c2 7f 30 76 a3 d8 38 a7 6b 6d df 3e d4 8c b2 35 1c 52 cf d6 99 41 a0 ad 3c 37 dd 28 77 2d 9b 6e 79 fa f9 6a 15 be 3b 30 54 43 48 d0 c1 e9 01 62 41 18 e5 7b ce 80 fa 23 ae 77 43 14 75 e3 e8 04 68 77 60 24 82 5b b4 62 40 07 fe 98 ea c6 8c ac d3 f3 c6 ec 9c 0a 36 fa ba 42 13 02 78 74 b2 f2 3a ed 5d 3f 18 ea da d7 ef dd 63 6b 53 fc 38 a7 19 84 9b b0 c4 d9 fd 09 00 1d 5b ae 8e a0 87 ae d5 a1 3a Data Ascii: 1b23<is+!Ve(&#)8)Uvl*UvVUl%Q&Fu3{?xutG^;}qGc+XafW:RJe#k6.W0v8km>5RA<7(w-nyj;0TCHbA{#wCuhw`$[b@6Bxt:]?ckS8[:
Oct 25, 2024 13:27:38.490926027 CEST	334	OUT	GET /r/www/cache/static/amd_modules/@baidu/guarantee-popper_b82f233.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:38.681524038 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 05 Jul 2024 07:48:11 GMT Last-Modified: Thu, 20 Jun 2024 02:54:33 GMT ETag: "b82f23370aed002e42bbdc097196e123" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 9948465 Accept-Ranges: bytes Content-MD5: uC8jNwrtAC5Cu9wJcZbhIw== x-bce-content-crc32: 3081183692 x-bce-debug-id: zOMLkMnndti13P9RzNNlaFBP0o2P82+WAFmTCH/M+9gy1/kbiBd2dFUNfzhtTTByhVUw5fQB/cTDys1hIG34fw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4ea1459b-8026-40ff-8c8b-ac0220c1ea0d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 02 Jul 2024 07:48:11 GMT Ohc-Cache-HIT: iad01-sys-jomo0.iad01.baidu.com [2], zhuzuncache63 [4] Ohc-File-Size: 114415 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 61 31 64 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dc bd fb 56 db c8 b6 37 fa 7f 9e 02 b4 b2 bd a5 a6 70 20 e9 f4 45 6e c5 9b 10 92 90 10 20 40 6e ed 66 65 08 59 06 05 5b 72 74 e1 12 ec f3 3e e7 35 ce 93 9d f9 9b 55 25 95 64 91 4b af bd bf 3d be 35 d2 8d a5 52 a9 2e b3 e6 bd 66 4d 0d c3 51 14 87 b6 f5 5f 27 7e 34 2c ee 9d 16 7e ea c7 79 18 ae 4e 93 e9 34 4c ef 45 f1 30 bc b2 c4 c0 0a af a6 49 9a 67 d6 b1 18 15 71 90 47 49 6c 87 ce 8d 55 64 e1 52 96 a7 51 90 5b 3d fd 60 29 b7 43 91 3b 37 69 98 17 69 bc 14 da b9 77 a3 5e 77 6f e6 73 91 77 d5 9d 53 5d ce cb 97 b9 5d f9 aa 1d 7b 96 2e b7 3c 2f bf 9e 86 c9 68 e9 f0 7a 72 92 8c 3b 1d 2b e3 8b e6 83 6e 94 87 a9 9f 27 69 df 1c a8 1a 8b aa 19 ce dd 96 87 21 b5 79 7b 77 61 37 48 62 9a 6a 11 50 db 9e e7 95 e5 cb fa ba 3b 4d 93 3c c1 6b 7d 3d 36 b7 ec d0 a1 8e aa 49 a6 c6 24 d3 7f 9b 49 de 69 cc 32 31 66 99 fc db cc b2 31 c9 c8 98 Data Ascii: a1d9V7p En @nfeY[rt>5U%dK=5R.fMQ_'~4,~yN4LE0IgqGIlUdRQ[=`)C;7iiw^woswS]]{.</hzr;+n'i!y{wa7HbjP;M<k}=6I$Ii21f1
Oct 25, 2024 13:27:43.145852089 CEST	332	OUT	GET /r/www/cache/static/amd_modules/@baidu/aging-tools-pc_63487d8.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:43.339941978 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 01 Jun 2024 04:48:46 GMT Last-Modified: Mon, 28 Aug 2023 03:19:54 GMT ETag: "63487d8c50e44137f8b6ce2a04407f8f" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 95685 Accept-Ranges: bytes Content-MD5: Y0h9jFDkQTf4ts4qBEB/jw== x-bce-content-crc32: 3238666094 x-bce-debug-id: 37bXZfw4lkT6WN1ye2jxb3ryPfk9Kbihif0iTbIHQRJ/ytEi/vdQPGdY4Q/7rltgn437pvQErQA+qeXbu/jSkA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f338f1db-930a-42fe-9cce-75d16a287b1f x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 29 May 2024 04:48:46 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2] Ohc-File-Size: 144135 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 63 63 39 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 53 57 96 37 fe 3e 9f 42 dc aa 07 a4 46 36 96 6d 26 39 8a 9b 90 a4 bb ba 2a 95 54 92 aa 54 da 61 79 c9 d6 b5 ad 20 24 97 24 43 28 f0 7f 19 08 f3 18 66 c2 3c 85 90 84 31 10 c0 36 f0 22 55 2b 1f a4 7d 35 bc ea af f0 9c fd db fb dc 7b ee 20 d9 4e 52 d5 fd 5f eb c9 60 9d 7d e6 b3 cf 9e ce 3e c3 cd d9 23 f9 a2 1d b7 fe 75 28 9b cf 4d ac c8 8e e6 8b a3 1d d5 52 a9 50 e9 18 1f 5e 91 cb 57 aa 2b f2 c5 9c fd a9 95 1c b0 2a d9 a2 95 b4 aa 95 42 7e c8 da 90 1c 99 28 0e 57 f3 a5 62 bc 98 ac 26 b6 69 28 66 c7 8b 89 6d f9 91 78 69 a0 b8 21 51 b6 ab 13 e5 62 8c c2 9d f6 a7 e3 a5 72 b5 d2 b7 39 5b 8e 55 33 14 95 d9 96 4f 17 93 85 f4 92 54 52 12 d3 db 26 27 fb a4 50 9e 0a 0d 67 0b 85 78 55 97 4d 56 93 5e d8 4e 28 a0 90 59 d2 e5 c5 4d ea a2 99 01 b7 77 aa 6f 6e 7a a6 38 69 74 3b b1 ad e8 26 54 cd 04 d5 8c ad 4a 65 dc 98 c4 36 6b a2 62 c7 2a d5 72 7e b8 6a f5 b9 63 ad 52 25 dc 66 bc 9a b1 Data Ascii: cc97iwSW7>BF6m&9TTay $$C(f<16"U+}5{ NR_`}>#u(MRP^W+B~(Wb&i(fmxi!Qbr9[U3OTR&'PgxUMV^N(YMwonz8it;&TJe6kb*r~jcR%f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49768	104.193.90.80	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:33.691553116 CEST	319	OUT	GET /r/www/cache/static/bundles/es6-polyfill_388d059.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:34.446959019 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sun, 27 Oct 2024 08:58:26 GMT Last-Modified: Thu, 01 Jun 2023 08:32:09 GMT ETag: "388d059dffa87621761c31ced2935ca4" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 95348 Accept-Ranges: bytes Content-MD5: OI0Fnf+odiF2HDHO0pNcpA== x-bce-content-crc32: 578717120 x-bce-debug-id: fc8GTmd7brogEN9iUvNfDXDuWM9wtYJUzQX2YVAtuQZSqMS3n0B927Xg1qFeQZ2bQoqD+SfKWm5hoVqa4mP+Qw== x-bce-request-id: 7dbd0a36-5450-4300-902f-29e58bb96ccb x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:58:26 GMT Ohc-Cache-HIT: iad01-sys-jomo7.iad01.baidu.com [2] Ohc-File-Size: 74476 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 36 37 34 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd e9 76 db 48 b6 2e f8 df 4f 41 a2 2a 59 40 12 a2 48 cd 22 13 62 39 6d 39 d3 55 b6 e5 b2 e4 ac 41 56 e9 42 64 50 84 4d 01 4c 00 d4 90 22 cf 5a 7d df a6 7f f6 8f 7e 81 7e 82 7b de a8 f7 b7 63 40 80 04 65 e7 59 f7 74 e7 40 01 81 18 77 ec d8 53 ec d8 51 1f cd e2 41 1e 25 b1 2b fc d8 7b 74 92 ab cf 62 90 3b 41 90 3f 4c 45 32 aa 89 fb 69 92 e6 59 a3 e1 cc e2 a1 18 45 b1 18 3a 75 fd f1 26 19 ce 26 a2 1f bb 5e d7 d1 f5 14 45 65 f6 46 43 fe 6d 85 37 c3 be 7c 74 63 af 4b 65 16 6e 3e 8e 32 df 74 80 5a 9f 65 a2 96 e5 69 44 3d e8 e9 f4 9a a0 2f 0b f3 a6 3a 9a 8a 7c 96 c6 35 ab 30 b5 30 9d 4e 1e dc d8 0f d3 eb d9 8d 88 f3 cc 5b 14 e5 72 57 78 8f d1 c8 ad 73 ab b5 28 ce f2 30 1e a0 9f b9 e7 e5 e3 34 b9 ab c5 e2 ae 76 46 7d 3f 4e d3 24 75 9d f7 69 72 13 65 22 ab dd cc b2 bc 76 25 6a 83 84 0a a5 b3 41 2e 86 b5 db 28 44 7e c7 eb 51 9d c5 e0 0d 68 44 75 9d 71 92 d7 42 d3 6b 2a 8d ce b4 2e a9 2f b9 08 da be 7c 1b 87 f1 70 22 86 41 bd a3 12 6e c3 c9 4c 04 b7 49 34 ac [TRUNCATED] Data Ascii: 6741vH.OAY@H"b9m9UAVBdPML"Z}~~{c@eYt@wSQA%+{tb;A?LE2iYE:u&&^EeFCm7\|tcKen>2tZeiD=/:\|500N[rWxs(04vF}?N$uire"v%jA.(D~QhDuqBk./\|p"AnLI4<Ib`dn"4F{AHx
Oct 25, 2024 13:27:34.446985960 CEST	1236	IN	Data Raw: 1a 7b cf 14 14 db 56 86 3e 37 23 ac 16 5a d3 59 36 c6 9c b9 c2 ea 5b db e7 8c 79 eb 32 ba b9 11 c3 88 8a be 8a 5d 6b 3e 6e c3 b4 96 07 1d bb ea b8 95 c4 af 66 93 51 34 a1 2a ba 78 fb 20 80 6e 62 08 28 c6 b3 c9 84 72 e7 9e ea 15 ea 77 4b e5 d3 6e Data Ascii: {V>7#ZY6[y2]k>nfQ4x nb(rwKnqk'zh+cL_\|0vG]U[k-<GKKi}^S5a9&lIELnU\|\LLF-/Id>XD'!I+WMC)69I#2S)cW\gB3{
Oct 25, 2024 13:27:34.446999073 CEST	364	IN	Data Raw: d4 e4 27 34 eb 32 6b ac b2 4a a5 af 94 31 a4 df 20 ed bf 9b dd 5c 89 d4 75 93 cd 94 84 81 e4 55 74 2f 86 ee 8e e7 75 2b fa dd ef d0 88 cc 8c a5 6e ee 2b 41 26 25 29 34 f1 a3 80 96 f0 e3 62 8d 7a 9a 5b 5c 53 51 07 b0 bd ab 70 f0 c5 a8 bb 25 3d 95 Data Ascii: '42kJ1 \uUt/u+n+A&%)4bz[\SQp%=x^N=8Fp%m\|*Y-Ik9><WIZr[WDXu7g\|<\@Vi]BlIr=UOU2DzIxYZ.q7j}M]
Oct 25, 2024 13:27:34.448792934 CEST	1236	IN	Data Raw: 54 1a a7 a8 40 9e 87 83 31 97 01 c1 b4 5e 49 2c 8e 9d 26 95 27 e9 c5 74 29 f9 4a 97 52 71 93 dc 8a e5 5e 55 a4 7e b5 63 43 91 83 3a 9b 9e d9 ef 45 d7 8a 9e 45 86 55 48 c5 8f 68 33 61 20 d3 df 12 d1 72 b5 74 4d d9 17 9a f9 f6 5d 45 c8 20 6b 4a f2 Data Ascii: T@1^I,&'t)JRq^U~cC:EEUHh3a rtM]E kJD+8.H+bTS\|4B(WWP\&a-2~?z~mj\BF+,,Yd7mFcG_y]*{QDO6wrXe7dN]=)Vo
Oct 25, 2024 13:27:34.448847055 CEST	212	IN	Data Raw: 5f 61 1b 86 34 a6 94 88 39 51 03 fd 81 c8 c3 04 88 44 82 78 28 fb 3a 90 e2 d6 40 53 f3 2a d4 74 07 4b dc 61 b1 c4 cb d6 70 95 0a 94 5e 86 65 15 ea a2 83 1b 24 00 a4 b2 90 32 32 fc ee 31 7e ab 30 a2 9a 49 08 d7 15 bf 2c 57 8d ba 12 ec e0 1b 6d 88 Data Ascii: _a49QDx(:@StKap^e$221~0I,Wm#F#Tp)ohDK?+(L8v^,@Oe~+jgL_/zZeaK1xH2;oP/M/',TL{zNy
Oct 25, 2024 13:27:34.448894024 CEST	1236	IN	Data Raw: ac 4e f2 fd b0 3c 34 7c 78 4d 9a d5 cb e4 86 80 4d c8 df 97 e9 84 84 60 95 d2 b6 f2 bb a5 7e 22 27 eb 10 7b 45 1b 50 b3 0b 53 b2 c2 6d 22 fa 11 61 2a 11 fd a2 8f 2f 92 38 0f a3 38 93 d5 e0 6b 88 02 90 82 fd 01 34 94 99 46 8b 41 72 33 25 22 2b 33 Data Ascii: N<4\|xMM`~"'{EPSm"a*/88k4FAr3%"+3>73RROB%H~40.s>b4KBJ$Kb7W]\(#?D> zfdxeFdHWMy6OKg%o/0_Ek
Oct 25, 2024 13:27:34.448905945 CEST	152	IN	Data Raw: 21 94 6a 1f 1e 96 7c b5 8a 4c 76 2a 04 52 fd be ea 7d 03 99 53 5a 3c 25 e4 a8 44 d3 a9 45 59 6d e5 98 88 e6 a0 b4 30 f6 da fb ab 38 a3 fb db e9 74 ec fe 2e 75 a5 8e 87 46 03 c2 4e 1d fb c2 cb bd 70 5e 84 f1 9f 72 38 63 d6 9c a6 dd a5 30 a3 ee 18 Data Ascii: !j\|Lv*R}SZ<%DEYm08t.uFNp^r8c0ROgkkYtv;-8iV"OO.8$S$&C?`v]3rg<<x]RP
Oct 25, 2024 13:27:34.450828075 CEST	1236	IN	Data Raw: ef 84 5d c9 d9 43 a7 72 f0 a8 e4 3c bf 08 98 85 ec ee 1f 94 fd ec aa ca 18 45 a7 ee e6 f6 79 0b a1 4f 0b 59 60 7b 1d 93 7a 95 d2 9a 24 b0 b9 69 3f 25 88 39 5d c7 21 c8 45 f1 2d 5c 2d e5 24 ea e3 36 80 da e1 de 7e 7b 2d d4 be 61 16 57 3a 51 85 41 Data Ascii: ]Cr<EyOY`{z$i?%9]!E-\-$6~{-aW:QAq'`gwJGt?wPh(m+k::A0GS'NaP[vp>dR:}LRXWQIC6IAr-)yD6hd<p
Oct 25, 2024 13:27:34.450853109 CEST	1236	IN	Data Raw: 47 a5 b1 c0 e4 5e d9 93 27 07 98 b2 18 4e 23 cc dd a8 c2 27 19 02 ca ce f6 96 ad 34 6a 02 f6 b8 68 e5 89 94 74 2b 27 d7 00 42 9d e2 cb 3d b5 01 79 e0 6f 30 57 df db 59 2f f7 74 f6 0e 15 53 47 eb a5 c5 a3 1b 3d 0b af 1d 10 2f e7 b9 96 17 49 50 2d Data Ascii: G^'N#'4jht+'B=yo0WY/tSG=/IP--}'WR YyhzL\|GO\@T'U[g:,0/.J<v~w^GSn jL.+DC7m^]QI5QX"]M;YaQ6f_L
Oct 25, 2024 13:27:34.450867891 CEST	364	IN	Data Raw: fa e7 8e 16 6f 59 fa 03 eb f3 6f fd 6b c2 cb d6 87 e3 bf 7d 7c fd e1 f8 25 f1 31 63 ca 42 37 e0 e2 cb 53 7b c2 c6 da 3b ff 38 38 39 bf be 70 1f fa 8f 8b ee 46 db ef 78 f5 e0 c4 bf 0c 4a fd 38 69 11 e4 dc 0e 44 b7 b3 a0 7c da 87 7b e8 22 d0 82 ff Data Ascii: oYok}\|%1cB7S{;889pFxJ8iD\|{"<K mv97k`]`.,C-")dP%zK}qXU2-y{9?j\|zymAJ=JzZ#]k(#YBzWn
Oct 25, 2024 13:27:34.452848911 CEST	1236	IN	Data Raw: af b4 a4 3a 22 36 07 c2 d0 ad e6 63 45 52 a1 5c 87 64 07 9f 48 fb fa ae 31 d1 b6 7a 54 36 4e ea c7 1a ad 48 63 05 28 85 eb b0 10 8a 3d db 94 f1 90 b0 e6 bd ce 44 f4 1a 68 9c 23 f0 86 55 16 ac 7d e7 b0 c2 ea 5a c9 aa b6 b7 0f 48 7b d4 f2 86 a9 bb Data Ascii: :"6cER\dH1zT6NHc(=Dh#U}ZH{v:;r%`ZBS"]6P9Zy^>M, Bsaf@%ri505aqR*/0"vr(W;xXewM1$ky_%
Oct 25, 2024 13:27:35.919279099 CEST	319	OUT	GET /r/www/cache/static/plugins/every_cookie_4644b13.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.117923021 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 02 Oct 2024 06:03:56 GMT Last-Modified: Thu, 26 Sep 2024 06:17:00 GMT ETag: "4644b1365b341bc21a65b69a93ed92ec" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 876246 Accept-Ranges: bytes Content-MD5: RkSxNls0G8IaZbaak+2S7A== x-bce-content-crc32: 2690864632 x-bce-debug-id: /4bhU5qjfdBhpDpVaLvOdhfk3Wawu6IDUbkm0tKrmm+TBJzlH5PNH9w7PMNpOV9NBxbxvqlQuAgUfXi8WcRwXQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4a155333-c586-4673-a1cf-1a6fbe37c59d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 29 Sep 2024 06:03:56 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 3421 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 35 35 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a4 57 61 6f db 36 10 fd de 5f 61 b3 81 40 c6 ac 2a a5 6b 96 d9 10 8c 36 ed 80 00 c3 36 34 ed a7 65 09 14 e9 1c 73 91 45 55 a4 9c 1a 96 ff fb 8e a4 64 49 4e 82 b5 18 10 24 d4 f1 78 3c de bd f7 c8 e8 72 b3 1d 2f aa 3c d1 42 e6 94 6d db e1 48 50 c1 b6 7a 29 94 7f 0f 9b 48 70 3b 4c aa f2 5c ca 7b 01 11 21 ce 92 a9 03 43 95 3e 32 7c 88 75 1c 69 da 06 63 ce be 10 f9 a1 ab de 14 10 bd 0a dd c7 c5 65 34 6e 86 aa 2a 0a 59 ea ee 7b 93 27 ef b2 8c b2 dd 3e 5d 6d d2 5d c7 e5 48 47 79 95 65 5c 46 e3 80 63 e4 4a 41 69 f6 27 13 31 13 0b 3a a6 3a 4a 65 52 ad 20 d7 fe 1d e8 8f 19 98 e1 fb cd 45 4a 81 31 a6 b1 1c 3d 8f a4 84 58 43 e3 44 c9 c5 ef 7f 7e f9 4c 30 7f 97 29 59 8a 34 85 1c 93 f7 95 de 64 e0 a7 42 15 59 bc 89 48 2e 73 b0 66 d0 ef b4 2e c5 6d a5 81 12 91 12 0e 66 f5 d0 9c 62 7a af 16 b2 24 9c 94 a0 aa 4c db 1d e2 34 7d 0f cb 78 2d 64 49 c9 Data Ascii: 550Wao6_a@k664esEUdIN$x<r/<BmHPz)Hp;L\{!C>2\|uice4nY{'>]m]HGye\FcJAi'1::JeR EJ1=XCD~L0)Y4dBYH.sf.mfbz$L4}x-dI
Oct 25, 2024 13:27:38.494070053 CEST	316	OUT	GET /r/www/cache/static/plugins/swfobject_0178953.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:38.691425085 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Tue, 15 Oct 2024 06:09:35 GMT Last-Modified: Wed, 09 Oct 2024 08:25:17 GMT ETag: "0178953914f94a1c0d556bdd0c66ad4c" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 95687 Accept-Ranges: bytes Content-MD5: AXiVORT5ShwNVWvdDGatTA== x-bce-content-crc32: 1737066158 x-bce-debug-id: 6l91aywAvq1fd2og/dnKGBdU3Whfanaq1Fq1pVI9S4f0AQm5b1K52smJBfNBN0zrWZfcEUAUioBbJ6m58KMVUw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 54cde038-9a5f-4427-81a9-807f3b817351 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:34 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [2], zhuzuncache57 [4] Ohc-File-Size: 3883 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 63 66 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 84 5a 6d 57 db b8 12 fe ce af 00 df de d4 5e 84 09 6d b7 bb 37 a9 c8 01 4a 5b 7a 4a 4b 81 be 9c 0d b9 e7 98 58 01 b5 8e 9d b5 95 84 94 e4 bf df 67 24 f9 95 b0 97 0f 8e 2d 8d 46 d2 68 5e 9e 19 b1 35 9a c6 43 25 93 d8 f5 ee 67 41 ba 29 78 a5 21 7f dd 54 f8 90 23 77 eb 7b ab 15 26 c3 e9 58 c4 ca bf 11 ea 38 12 f4 9a 1d 2e 2e 83 9b 8f c1 58 b8 ce 75 12 2e 1c af df 1e 78 f7 2a 5d 18 96 4c f1 1b d7 c9 26 41 ec 78 5d e5 67 6a 11 09 3f 94 d9 24 0a 16 dc 89 93 58 38 4c f0 f3 ff c7 d1 0f 26 13 11 87 47 b7 32 0a 5d e5 31 e1 4f 82 14 c4 1f 93 50 f8 a9 18 27 33 61 fa 04 fa 78 3c 8d 22 4c 4c 3f ab 61 a0 86 b7 6e ec dd a7 42 4d d3 78 f5 9d 6f b5 bb a3 24 75 69 79 92 bf f3 23 11 df a8 5b 16 f0 76 57 ee 07 dd 60 7b db 7b d7 0f 06 ae b7 5a 15 32 88 c1 f7 fe 7b 4f b8 5e e7 5d 3f 1f 32 e0 a2 a4 90 44 01 31 a9 c5 44 24 a3 cd 33 3f 08 c3 e3 19 56 f8 41 66 Data Ascii: cf3ZmW^m7J[zJKXg$-Fh^5C%gA)x!T#w{&X8..Xu.x*]L&Ax]gj?$X8L&G2]1OP'3ax<"LL?anBMxo$uiy#[vW`{{Z2{O^]?2D1D$3?VAf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:34.549695969 CEST	516	OUT	GET /img/flexible/logo/pc/result.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1
Oct 25, 2024 13:27:34.870532990 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 6617 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:34 GMT Etag: "19d9-5a533d00d4900" Expires: Mon, 23 Oct 2034 11:27:34 GMT Last-Modified: Sat, 09 May 2020 09:33:56 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 42 08 06 00 00 00 16 86 49 1d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 19 93 49 44 41 54 78 01 ed 5d 0d 7c 54 c5 b5 9f b9 77 bf f2 45 0c 10 08 21 bb 81 00 22 59 8a 4a 82 0a 68 45 ad 14 df d3 a7 ad 62 d5 16 fb f0 55 ad f5 47 ab b6 96 56 9f 05 fb 89 48 ab f6 59 7f ad f6 59 db da 5a 45 fb fa 6c 95 ea ab 08 d6 27 0a 04 11 49 e0 51 45 92 0d 09 92 00 21 5f fb 75 ef 9d f7 9f 4d 76 b3 77 f7 de bb f7 6e 76 13 94 3b 3f c2 bd 73 ce 99 33 33 e7 ce 99 99 73 e6 63 09 b1 83 2d 01 5b 02 b6 04 6c 09 d8 12 b0 25 60 4b c0 96 c0 08 49 80 8e 50 3e 27 75 36 8c 31 5a 7f 33 71 d4 1c 6b 82 bc 6b e5 f5 eb a9 9c 8d 40 62 7c ea 1b 1c 35 35 75 b4 a3 63 93 b2 69 d3 05 52 36 7c ec 34 d6 25 60 2b 8a 75 99 99 4e 71 e6 79 ed e5 a1 fe c8 0f 28 a1 9f 47 23 2f 8c 27 84 d0 9b 04 51 b8 67 f7 36 ef 1f e3 30 a3 e7 fc f9 81 82 ae 88 b2 8a 32 72 13 23 a4 2c 89 f6 80 40 e8 ba dd 0d de 47 28 05 d6 0e 79 93 80 ad 28 79 12 ed 27 e6 36 d7 c9 94 bc c0 18 99 a8 97 85 40 c8 da [TRUNCATED] Data Ascii: PNGIHDRBIsRGBIDATx]\|TwE!"YJhEbUGVHYYZEl'IQE!_uMvwnv;?s33sc-[l%`KIP>'u61Z3qkk@b\|55uciR6\|4%`+uNqy(G#/'Qg602r#,@G(y(y'6@+l##t]:J_.$44TaI'Q<B(QO `OO~YhjBj0e#jRaPjxn$`+Jn26IRaQn^o'amCxZIU.M58lf#4<N4}fsci25)jU<V~Z=b%WW}&M%oFhlu>vdD"W=^.VPJ$`+99%AM%$/'CZFV%M${@Q8)<G_()=KVcXB!BJBUjEaN*;ThlE1%&sDQMf[^hx`\|a4+[QJ<I(a<f+UG`oK)v%7YIU8T#U&}a. i0'&D&-12O7W:u\HQ&EEnz
Oct 25, 2024 13:27:34.870558977 CEST	1236	IN	Data Raw: d1 2b 95 de 8e a7 4b 20 6b 2f 4d 3a ab 8f 37 a4 b6 2e 70 36 16 13 57 11 4a 2e c6 e2 e0 40 07 43 49 37 6c 92 27 dd 25 25 77 ef dc 54 d6 15 97 80 7f 5e 60 89 22 b3 17 cc ac d0 63 d4 78 b8 69 87 6f 45 3c 6d f2 d3 bf e8 70 b1 d2 1d 7c 17 b0 29 c9 70 Data Ascii: +K k/M:7.p6WJ.@CI7l'%%wT^`"cxioE<mp\|)pwJ>(>LapX=?^\|.B#6Ocb,?6kAQD-rr-q*ED==bo07?x&ShAt\|z8e)-3}4S_/
Oct 25, 2024 13:27:34.870573997 CEST	1236	IN	Data Raw: ae c0 74 d7 d2 4b 2b b7 34 6e 4f a7 ee 0a f6 ff 0c 1f ed b4 74 8c 75 08 ca f3 8d 59 f5 81 57 f7 6c f7 be 98 9a 5a a0 c2 2f 71 fb e4 97 8d f6 a6 25 a7 81 f3 61 6d f2 3e 31 91 ca 13 e0 44 b8 21 99 66 e4 df d9 01 e4 99 50 14 85 b0 99 88 5f 63 b9 1c Data Ascii: tK+4nOtuYWlZ/q%am>1D!fP_cZubO^yJJEX^7a7>:c4rZ%=w"gp8b4-SK RS(>=Wubz>jWCx]2)Jbj>-F
Oct 25, 2024 13:27:34.870641947 CEST	636	IN	Data Raw: e3 19 29 b8 28 1c 11 3b 07 60 f4 bd 9c 8e 28 6c e9 52 b1 e5 f9 3f ae 49 c9 50 15 15 05 61 1f c9 72 2b b8 8a 91 41 04 02 9b 1c a5 d2 4b 1d e3 c7 d7 96 77 76 f6 18 90 0e 0b 35 b0 2d 25 f8 1b 05 bd 38 94 64 58 bc 72 9f 98 55 4a 44 de ec 9f db 72 47 Data Ascii: )(;`(lR?IPar+AKwv5-%8dXrUJDrGr9V8k`?\FZzhb(TM`_#"1T9<S=)s7SbsTv<P/ZhN)Yx=Mm0L(/\SLb
Oct 25, 2024 13:27:34.870656013 CEST	1236	IN	Data Raw: 74 ad f4 df be b3 6c c4 94 44 2b ff 4c 30 d8 52 b7 f0 ab 5e 33 d1 d9 78 2e 01 f5 ef cc e4 7d 44 c1 4c c4 89 ad 04 53 0f df 8f ae 96 64 de 85 9b d5 47 62 e4 a0 5e 3a 5c d8 30 64 1c e8 11 99 84 63 41 ef 3a ac 55 7c 56 8b 7c d6 4c 27 f9 dc 95 43 76 Data Ascii: tlD+L0R^3x.}DLSdGb^:\0dcA:U\|V\|L'CvE09vlhZT3I.0']<OLUQtaG6(fyWX^"ZR2Ii1w"\zDREj\|G-%-,(llm='<j))$B
Oct 25, 2024 13:27:34.870670080 CEST	1236	IN	Data Raw: 11 2a ac 05 3c 14 c7 f1 27 24 89 c1 85 5d 86 a3 c2 af c1 d9 b4 8f b0 e8 3e c4 6f d5 54 12 4a 9f 13 a8 d3 8f 9d c3 2b e2 4a c2 79 18 8f 28 d0 d0 66 b7 78 13 27 cc 10 b0 cc cc a6 c8 51 79 6a 06 ba 18 9a 3a 1c ff 43 c2 98 46 50 9c 4d 81 56 68 84 52 Data Ascii: *<'$]>oTJ+Jy(fx'Qyj:CFPMVhR~U5FDxF%DNradcmZ'jT65a#S{ZDP8+<,{hx fA6olO3$'(\e$
Oct 25, 2024 13:27:34.870682955 CEST	90	IN	Data Raw: 71 0f e2 bd 19 67 b8 f7 52 81 34 16 0a e2 0e ab 07 a7 60 cc d2 da 73 5a a7 0b 32 ee 09 50 f8 ef b5 28 d3 d1 20 aa 91 e7 44 f0 1e 8b 3c 3c c8 13 ff e0 0d a2 a4 11 f9 6e 74 38 84 a7 ad 2a 88 71 4d 4f 5e ec ff 03 8b 32 18 96 74 95 5b 20 00 00 00 00 Data Ascii: qgR4`sZ2P( D<<nt8*qMO^2t[ IENDB`
Oct 25, 2024 13:27:35.108402014 CEST	535	OUT	GET /img/flexible/logo/pc/result@2.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:35.431817055 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 12802 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:35 GMT Etag: "3202-5a533d00d4900" Expires: Mon, 23 Oct 2034 11:27:35 GMT Last-Modified: Sat, 09 May 2020 09:33:56 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 00 84 08 06 00 00 00 b7 64 dd 8f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 31 bc 49 44 41 54 78 01 ed 5d 09 7c 14 d5 fd 7f 6f 66 af 9c 10 ee 23 bb 01 c5 2a 09 a0 10 6e 14 51 a9 8a b7 b6 68 0f b5 5a b5 b5 b5 ad b6 f5 c0 e3 af f1 6c b5 ad 5a db 7a d7 a3 da 43 11 ef bb da d2 aa 40 80 20 47 02 56 11 c8 6e 38 03 24 24 21 7b ce bc ff 77 12 12 93 cd ee ce b1 33 9b 3d de 7c 08 bb f3 de ef 7a df 99 7d bf f7 7e ef 22 84 5f 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 40 96 23 40 b3 bc 7c bc 78 39 84 c0 8c 19 5f 14 cb 72 fe 00 bf 20 97 30 99 0a 54 14 82 24 1c 09 d9 8a a4 7d 6b 97 8e 6d 4e 35 14 f3 e6 6d 75 35 07 c8 08 39 e2 70 ca a2 ec 94 25 49 14 98 d0 92 2f 0a cd 65 65 a3 9b 17 2f a6 52 aa 6d e2 fa 38 02 56 22 c0 1d 8a 95 e8 72 d9 96 23 30 67 4e 63 51 73 [TRUNCATED] Data Ascii: PNGIHDRdsRGB1IDATx]\|of#nQhZlZzC@ GVn8$$!{w3=\|z}~"_G#p8G#p8G#p8G#p8G#p8@#@\|x9_r 0T$}kmN5mu59p%I/ee/Rm8V"r#0gNcQs0=#GS}.-0iL.f#l=B\|q2P2q{(R>net'}d(?]~YTo0I8cR3};v>NH?CIg-RA`GP_B?7xO/\|l&yvAQs&@ J<nv,`+9I;WlJq_;W{jT"&vXFms7,V.O;u#PY~[;;1/%j5\|EF\Fe6qW;q#63Rj#,\D8's&ltD.7y8w(>%7hfN,,u[\|?3O&nYQV5<#$gNUUL ,}KZ0=e)7E+3ssLD;A7}g~5;2Xv}UzN~E;~+I39^QFd]O
Oct 25, 2024 13:27:35.431833029 CEST	1236	IN	Data Raw: 3b f9 b8 9d 43 75 b0 70 52 8e 40 bf 22 c0 1d 4a bf c2 cf 95 ab 21 30 61 86 6f 12 42 4b f3 d4 e8 92 cf 47 58 8d 46 be a1 45 ce 84 4a ef e1 56 8c 9d c4 d0 ed 0c b5 87 af 8c 91 ce 93 38 02 69 89 00 77 28 69 f9 58 b8 51 5d 08 c8 61 72 6e d7 77 ab 3f Data Ascii: ;CupR@"J!0aoBKGXFEJV8iw(iXQ]arnw?18-:cDEL9j4<#.p.O^[pTF4mXakZ&FxG Up*(0:k/OT1rE;q>@3,T+VF5e
Oct 25, 2024 13:27:35.431844950 CEST	1236	IN	Data Raw: 84 29 be 73 25 2a 3f 83 b5 23 58 70 ae f7 a2 88 d2 b0 3b 37 d6 94 dd 96 88 73 e2 f4 86 59 92 24 bf 09 a7 32 28 11 9d a6 3c 4a 76 3a 44 71 de ba 95 a5 9f 6b a2 8f 41 54 59 c9 ec ed c4 f7 a6 1e 07 1a 43 cc 57 49 82 70 c3 a6 d5 ee fb be 4a e8 fb ad Data Ascii: )s%?#Xp;7sY$2(<Jv:DqkATYCWIpJHgC}a67u}-)NCo)TTz!3dajNbr1zUe[XlyTv=a<w4\3)HDG?VY^doS
Oct 25, 2024 13:27:35.431977034 CEST	1236	IN	Data Raw: 3b 4d 9d 3a ac 38 28 65 cb fd 6d bb 7d 3e 59 96 5f 82 43 39 07 95 b7 c6 99 6b ca 38 03 9b 0a fa 07 e5 48 b0 61 7c 65 fd 13 13 a6 6d 4f b0 11 64 74 69 34 de 33 66 6a 99 b5 68 15 b0 0f 9a 16 3a 4e c3 11 88 85 00 77 28 b1 50 e1 69 2a 08 b0 bd 2a 04 Data Ascii: ;M:8(em}>Y_C9k8Ha\|emOdti43fjh:Nw(Pi**i=a-Gdc\"_{QrfPRxVctWjAalJVge+%aNV^FK>SfuD)&[p.?-%-Cf&6-^Q'+
Oct 25, 2024 13:27:35.431989908 CEST	1236	IN	Data Raw: dd ab ec af 75 bd 1e 9e 54 d3 a2 e7 34 b9 b1 b5 e1 26 3d 7a d7 2d 77 6f 07 1e e6 97 8b 92 ad 79 a4 e8 72 3d b6 70 5a 8e 40 22 04 b2 c1 a1 a0 0e 21 36 26 cb 37 c3 a9 3c ca 9d 4a a2 c7 6d 4d 1e 3d cc fd 43 78 f2 e7 4d 94 5e 53 28 8a ba 56 b4 2b db Data Ascii: uT4&=z-woyr=pZ@"!6&7<JmM=CxM^S(V+`m$`F1~KEezd)H~'-gND2>J<O/YP\|.#t#/uih@1A\|ZtRtA++G}BH#M~NPC J<]
Oct 25, 2024 13:28:10.006642103 CEST	729	OUT	GET /img/bd_logo1.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; BD_CK_SAM=1; PSINO=7; BDSVRTM=29
Oct 25, 2024 13:28:10.326730013 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 7877 Content-Type: image/png Date: Fri, 25 Oct 2024 11:28:10 GMT Etag: "1ec5-502264e2ae4c0" Expires: Mon, 23 Oct 2034 11:28:10 GMT Last-Modified: Wed, 03 Sep 2014 10:00:27 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 01 02 08 03 00 00 00 82 14 fe 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDR8pHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49776	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:34.883055925 CEST	440	OUT	GET /img/flexible/logo/pc/result.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:35.881788015 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 6617 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:35 GMT Etag: "19d9-5a533d00d4900" Expires: Mon, 23 Oct 2034 11:27:35 GMT Last-Modified: Sat, 09 May 2020 09:33:56 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 42 08 06 00 00 00 16 86 49 1d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 19 93 49 44 41 54 78 01 ed 5d 0d 7c 54 c5 b5 9f b9 77 bf f2 45 0c 10 08 21 bb 81 00 22 59 8a 4a 82 0a 68 45 ad 14 df d3 a7 ad 62 d5 16 fb f0 55 ad f5 47 ab b6 96 56 9f 05 fb 89 48 ab f6 59 7f ad f6 59 db da 5a 45 fb fa 6c 95 ea ab 08 d6 27 0a 04 11 49 e0 51 45 92 0d 09 92 00 21 5f fb 75 ef 9d f7 9f 4d 76 b3 77 f7 de bb f7 6e 76 13 94 3b 3f c2 bd 73 ce 99 33 33 e7 ce 99 99 73 e6 63 09 b1 83 2d 01 5b 02 b6 04 6c 09 d8 12 b0 25 60 4b c0 96 c0 08 49 80 8e 50 3e 27 75 36 8c 31 5a 7f 33 71 d4 1c 6b 82 bc 6b e5 f5 eb a9 9c 8d 40 62 7c ea 1b 1c 35 35 75 b4 a3 63 93 b2 69 d3 05 52 36 7c ec 34 d6 25 60 2b 8a 75 99 99 4e 71 e6 79 ed e5 a1 fe c8 0f 28 a1 9f 47 23 2f 8c 27 84 d0 9b 04 51 b8 67 f7 36 ef 1f e3 30 a3 e7 fc f9 81 82 ae 88 b2 8a 32 72 13 23 a4 2c 89 f6 80 40 e8 ba dd 0d de 47 28 05 d6 0e 79 93 80 ad 28 79 12 ed 27 e6 36 d7 c9 94 bc c0 18 99 a8 97 85 40 c8 da [TRUNCATED] Data Ascii: PNGIHDRBIsRGBIDATx]\|TwE!"YJhEbUGVHYYZEl'IQE!_uMvwnv;?s33sc-[l%`KIP>'u61Z3qkk@b\|55uciR6\|4%`+uNqy(G#/'Qg602r#,@G(y(y'6@+l##t]:J_.$44TaI'Q<B(QO `OO~YhjBj0e#jRaPjxn$`+Jn26IRaQn^o'amCxZIU.M58lf#4<N4}fsci25)jU<V~Z=b%WW}&M%oFhlu>vdD"W=^.VPJ$`+99%AM%$/'CZFV%M${@Q8)<G_()=KVcXB!BJBUjEaN*;ThlE1%&sDQMf[^hx`\|a4+[QJ<I(a<f+UG`oK)v%7YIU8T#U&}a. i0'&D&-12O7W:u\HQ&EEnz
Oct 25, 2024 13:27:35.881799936 CEST	212	IN	Data Raw: d1 2b 95 de 8e a7 4b 20 6b 2f 4d 3a ab 8f 37 a4 b6 2e 70 36 16 13 57 11 4a 2e c6 e2 e0 40 07 43 49 37 6c 92 27 dd 25 25 77 ef dc 54 d6 15 97 80 7f 5e 60 89 22 b3 17 cc ac d0 63 d4 78 b8 69 87 6f 45 3c 6d f2 d3 bf e8 70 b1 d2 1d 7c 17 b0 29 c9 70 Data Ascii: +K k/M:7.p6WJ.@CI7l'%%wT^`"cxioE<mp\|)pwJ>(>LapX=?^\|.B#6Ocb,?6kAQD-rr-q*ED==bo07?x&ShAt\|z8
Oct 25, 2024 13:27:35.881813049 CEST	1236	IN	Data Raw: ac fa d6 65 84 29 bf d2 2d 33 a5 ad 84 8a ff d2 b4 7d f2 db f1 34 f6 53 5f 02 b6 8d a2 2f 9b 18 c6 5f df 7c 3d b6 c3 3f a0 d7 e0 38 11 16 40 aa 23 d1 c8 86 ba 3a e6 8c b3 6b dc 5e f5 ac 48 a9 1f d3 9c df 63 d4 e8 8d c3 f9 13 c6 fb 21 42 84 6f 0a Data Ascii: e)-3}4S_/_\|=?8@#:k^Hc!Bo51i~jm[-%+)Q0zyGjY%{zBM$G#4f\|gK/#y[<O(V)PfW
Oct 25, 2024 13:27:35.881897926 CEST	1236	IN	Data Raw: 04 7f 6a 57 43 e5 0e b5 78 09 99 5d d7 32 8d 29 4a 62 6a 93 8a cf 3e ce ca 99 1c fc 2d 46 17 d8 e2 ea d0 d8 e0 fd 2e 11 84 95 28 53 50 8d 19 88 f1 e9 16 11 e8 83 13 4a 7c 97 eb d9 3a 5a e9 4e 66 58 ee a7 5e 3a d2 1c 54 96 bf 7a 43 d2 66 1d 92 13 Data Ascii: jWCx]2)Jbj>-F.(SPJ\|:ZNfX^:TzCfkk(%zQcG0?Y#+.)G};w4LbS8s5FP"u%wG=AZ]KAfyk0`%9l[l5tbp4_#:.
Oct 25, 2024 13:27:35.881911993 CEST	1236	IN	Data Raw: 59 78 8e 87 cc 3d c3 4d c6 8f 13 89 c7 83 fe 6d 30 4c 28 17 e3 af 9a cf 2f 5c 53 4c ae ba 62 c8 e3 de b8 27 42 ee be 37 fd 33 5c b4 a8 80 ac f8 f2 d0 2e fd e3 dd 0a f9 e2 4d 87 13 3c a1 ba d8 eb c4 1e 9e 55 df 32 6b f6 54 ef d7 ec c5 c5 84 68 54 Data Ascii: Yx=Mm0L(/\SLb'B73\.M<U2kThT/!%<C*D.X_jCESwRQ>}#t:nIrg+#$Te%JfbU+TtGrKM#(Vl,CV%1/"1$?eL&+
Oct 25, 2024 13:27:35.881964922 CEST	636	IN	Data Raw: 4a 2c 44 6e 18 82 e8 bf e1 ea 99 25 b0 1f f2 aa 28 68 59 47 8d 3c 6b 1b 37 07 55 8a 52 50 20 90 a7 9e a8 20 6b d6 1d 23 5b b6 85 48 97 85 a9 58 24 aa b6 86 66 4c 73 92 4f f8 5d e4 dd c6 1c 1a d1 b8 87 4d 5f a2 06 18 91 3e ea cb c1 82 63 c0 25 7c Data Ascii: J,Dn%(hYG<k7URP k#[HX$fLsO]M_>c%\|8a6Dv^' <*8l9\cm03f,.6jTB7uNR#?MU^rcp`//d)^hVo$p8 Q(E4\|Q[L
Oct 25, 2024 13:27:35.881978035 CEST	1114	IN	Data Raw: bf 0d 15 05 c3 33 ce 24 27 b3 cb c9 fb 8e f8 ea bc c0 d8 1b 28 d2 ed 9a 5c 65 f6 24 86 cb cf c1 18 3b 80 22 18 96 02 0d b8 ce 98 42 33 07 4b c0 c6 86 ca 16 dc eb fb 16 7a a2 b3 8d 12 72 5b 65 c9 15 6d d8 41 3c 86 2c be a8 90 54 4d 36 14 b1 2e ab Data Ascii: 3$'(\e$;"B3Kzr[emA<,TM6.G&-RJ\|<qTv\,SrQ'T\y0B\|%?d'&~8s\|#\6]4'cn-JpOY_
Oct 25, 2024 13:27:35.903387070 CEST	442	OUT	GET /img/flexible/logo/pc/result@2.png HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753
Oct 25, 2024 13:27:36.230648994 CEST	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Content-Length: 12802 Content-Type: image/png Date: Fri, 25 Oct 2024 11:27:36 GMT Etag: "3202-5a533d00d4900" Expires: Mon, 23 Oct 2034 11:27:36 GMT Last-Modified: Sat, 09 May 2020 09:33:56 GMT Server: Apache Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 00 84 08 06 00 00 00 b7 64 dd 8f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 31 bc 49 44 41 54 78 01 ed 5d 09 7c 14 d5 fd 7f 6f 66 af 9c 10 ee 23 bb 01 c5 2a 09 a0 10 6e 14 51 a9 8a b7 b6 68 0f b5 5a b5 b5 b5 ad b6 f5 c0 e3 af f1 6c b5 ad 5a db 7a d7 a3 da 43 11 ef bb da d2 aa 40 80 20 47 02 56 11 c8 6e 38 03 24 24 21 7b ce bc ff 77 12 12 93 cd ee ce b1 33 9b 3d de 7c 08 bb f3 de ef 7a df 99 7d bf f7 7e ef 22 84 5f 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 00 47 80 23 c0 11 e0 08 70 04 38 02 1c 01 8e 40 96 23 40 b3 bc 7c bc 78 39 84 c0 8c 19 5f 14 cb 72 fe 00 bf 20 97 30 99 0a 54 14 82 24 1c 09 d9 8a a4 7d 6b 97 8e 6d 4e 35 14 f3 e6 6d 75 35 07 c8 08 39 e2 70 ca a2 ec 94 25 49 14 98 d0 92 2f 0a cd 65 65 a3 9b 17 2f a6 52 aa 6d e2 fa 38 02 56 22 c0 1d 8a 95 e8 72 d9 96 23 30 67 4e 63 51 73 [TRUNCATED] Data Ascii: PNGIHDRdsRGB1IDATx]\|of#nQhZlZzC@ GVn8$$!{w3=\|z}~"_G#p8G#p8G#p8G#p8G#p8@#@\|x9_r 0T$}kmN5mu59p%I/ee/Rm8V"r#0gNcQs0=#GS}.-0iL.f#l=B\|q2P2q{(R>net'}d(?]~YTo0I8cR3};v>NH?CIg-RA`GP_B?7xO/\|l&yvAQs&@ J<nv,`+9I;WlJq_;W{jT"&vXFms7,V.O;u#PY~[;;1/%j5\|EF\Fe6qW;q#63Rj#,\D8's&ltD.7y8w(>%7hfN,,u[\|?3O&nYQV5<#$gNUUL ,}KZ0=e)7E+3ssLD;A7}g~5;2Xv}UzN~E;~+I39^QFd]O
Oct 25, 2024 13:27:36.230660915 CEST	1236	IN	Data Raw: 3b f9 b8 9d 43 75 b0 70 52 8e 40 bf 22 c0 1d 4a bf c2 cf 95 ab 21 30 61 86 6f 12 42 4b f3 d4 e8 92 cf 47 58 8d 46 be a1 45 ce 84 4a ef e1 56 8c 9d c4 d0 ed 0c b5 87 af 8c 91 ce 93 38 02 69 89 00 77 28 69 f9 58 b8 51 5d 08 c8 61 72 6e d7 77 ab 3f Data Ascii: ;CupR@"J!0aoBKGXFEJV8iw(iXQ]arnw?18-:cDEL9j4<#.p.O^[pTF4mXakZ&FxG Up*(0:k/OT1rE;q>@3,T+VF5e
Oct 25, 2024 13:27:36.230673075 CEST	1236	IN	Data Raw: 84 29 be 73 25 2a 3f 83 b5 23 58 70 ae f7 a2 88 d2 b0 3b 37 d6 94 dd 96 88 73 e2 f4 86 59 92 24 bf 09 a7 32 28 11 9d a6 3c 4a 76 3a 44 71 de ba 95 a5 9f 6b a2 8f 41 54 59 c9 ec ed c4 f7 a6 1e 07 1a 43 cc 57 49 82 70 c3 a6 d5 ee fb be 4a e8 fb ad Data Ascii: )s%?#Xp;7sY$2(<Jv:DqkATYCWIpJHgC}a67u}-)NCo)TTz!3dajNbr1zUe[XlyTv=a<w4\3)HDG?VY^doS
Oct 25, 2024 13:27:36.230683088 CEST	369	IN	Data Raw: 3b 4d 9d 3a ac 38 28 65 cb fd 6d bb 7d 3e 59 96 5f 82 43 39 07 95 b7 c6 99 6b ca 38 03 9b 0a fa 07 e5 48 b0 61 7c 65 fd 13 13 a6 6d 4f b0 11 64 74 69 34 de 33 66 6a 99 b5 68 15 b0 0f 9a 16 3a 4e c3 11 88 85 00 77 28 b1 50 e1 69 2a 08 b0 bd 2a 04 Data Ascii: ;M:8(em}>Y_C9k8Ha\|emOdti43fjh:Nw(Pi**i=a-Gdc\"_{QrfPRxVctWjAalJVge+%aNV^FK>SfuD)&[p.?-%-Cf&6-^Q'+
Oct 25, 2024 13:27:36.230972052 CEST	1236	IN	Data Raw: 1b be 16 92 e4 0f 30 ce 31 d8 98 76 83 5c 98 99 06 bb 1f 29 9f e6 0d 6e 5c e5 79 da 88 14 81 d1 55 38 9c cb 08 ab 21 1e 84 d8 fe 69 88 91 33 f5 0b 02 be bc bc d1 4c 0a bd ac 55 39 66 29 be 52 16 92 7f ad 95 de 08 1d 77 28 46 50 cb 71 9e da ea d1 Data Ascii: 01v\)n\yU8!i3LU9f)Rw(FPq1CjTL3"$M3iL6v3Yw'uhgZHMDPL2EB0CQV3AB)45AM61BcGS((!!A,v"3.H'S_x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49781	185.10.104.115	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:35.750468969 CEST	348	OUT	GET /r/www/cache/static/plugins/swfobject_0178953.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.772416115 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Tue, 15 Oct 2024 06:09:34 GMT Last-Modified: Wed, 09 Oct 2024 08:25:17 GMT ETag: "0178953914f94a1c0d556bdd0c66ad4c" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 376022 Accept-Ranges: bytes Content-MD5: AXiVORT5ShwNVWvdDGatTA== x-bce-content-crc32: 1737066158 x-bce-debug-id: 6l91aywAvq1fd2og/dnKGBdU3Whfanaq1Fq1pVI9S4f0AQm5b1K52smJBfNBN0zrWZfcEUAUioBbJ6m58KMVUw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 54cde038-9a5f-4427-81a9-807f3b817351 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:34 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache57 [4] Ohc-File-Size: 3883 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 66 32 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 84 5a 6d 57 db b8 12 fe ce af 00 df de d4 5e 84 09 6d b7 bb 37 a9 c8 01 4a 5b 7a 4a 4b 81 be 9c 0d b9 e7 98 58 01 b5 8e 9d b5 95 84 94 e4 bf df 67 24 f9 95 b0 97 0f 8e 2d 8d 46 d2 68 5e 9e 19 b1 35 9a c6 43 25 93 d8 f5 ee 67 41 ba 29 78 a5 21 7f dd 54 f8 90 23 77 eb 7b ab 15 26 c3 e9 58 c4 ca bf 11 ea 38 12 f4 9a 1d 2e 2e 83 9b 8f c1 58 b8 ce 75 12 2e 1c af df 1e 78 f7 2a 5d 18 96 4c f1 1b d7 c9 26 41 ec 78 5d e5 67 6a 11 09 3f 94 d9 24 0a 16 dc 89 93 58 38 4c f0 f3 ff c7 d1 0f 26 13 11 87 47 b7 32 0a 5d e5 31 e1 4f 82 14 c4 1f 93 50 f8 a9 18 27 33 61 fa 04 fa 78 3c 8d 22 4c 4c 3f ab 61 a0 86 b7 6e ec dd a7 42 4d d3 78 f5 9d 6f b5 bb a3 24 75 69 79 92 bf f3 23 11 df a8 5b 16 f0 76 57 ee 07 dd 60 7b db 7b d7 0f 06 ae b7 5a 15 32 88 c1 f7 fe 7b 4f b8 5e e7 5d 3f 1f 32 e0 a2 a4 90 44 01 31 a9 c5 44 24 a3 cd 33 3f 08 c3 e3 19 56 f8 41 Data Ascii: f2bZmW^m7J[zJKXg$-Fh^5C%gA)x!T#w{&X8..Xu.x*]L&Ax]gj?$X8L&G2]1OP'3ax<"LL?anBMxo$uiy#[vW`{{Z2{O^]?2D1D$3?VA
Oct 25, 2024 13:27:36.772428036 CEST	1236	IN	Data Raw: 66 4a c4 22 dd e2 fc 93 f7 b0 d9 75 a2 24 08 21 03 b6 b5 e7 75 45 94 89 cd 92 cb f9 03 72 cd e5 61 f3 3f 72 c1 a4 4a 05 c3 5b 3d 42 33 b8 76 cf 98 93 c4 76 8c d7 dd c8 47 38 f9 7e 1c ce 8b d1 86 d0 a8 88 e2 f9 77 37 7f a9 2a 0d 74 85 09 92 9c 66 Data Ascii: fJ"u$!uEra?rJ[=B3vvG8~w7*tfXPT\JT@ZtnexILpIc.{[BB}R\GB-Wik}d&dueJ.}T}/}'3}676k4- b)%B
Oct 25, 2024 13:27:36.772438049 CEST	364	IN	Data Raw: e3 9d 83 e3 97 af 77 f6 f6 86 a3 9d ff bc 3c fc 73 e7 c5 8b 17 bf ff fe fc f7 17 6d fc 3d dd 7f a5 a3 e5 26 c5 32 fe 54 47 c6 a7 9b 3a 7a f1 a7 30 b8 6d e7 e9 be b3 ad b6 9d 57 bb 66 92 7d e8 ad 3f 92 69 a6 f4 66 36 ca f5 e6 0a 69 24 cc 1e f8 d4 Data Ascii: w<sm=&2TG:z0mWf}?if6i$3DXd5>v!5D1@mJqdY>ja2^q\(#i':`f=Xtt1e:N+MlZ}oK2L:nsfzOT3
Oct 25, 2024 13:27:36.772770882 CEST	1236	IN	Data Raw: ce 08 ee 89 97 df e5 90 db ca 10 1a de d3 5a 52 21 20 79 d2 e6 a9 33 b7 49 61 63 02 ed a8 4b d9 9d aa e5 a4 87 8b 13 8a 34 65 01 a1 70 5e 15 6f 70 53 99 f8 dc 1f 42 ac 4a d8 f1 34 b6 a0 9b 57 e8 20 83 4c 9c 10 81 16 4c 41 73 9d ab 99 a8 26 ec 2e Data Ascii: ZR! y3IacK4ep^opSBJ4W LLAs&.55xLq(c&lW<*B@\\|?39"oqAO6~6,{nPuU1A"vt(+:Y.?lHtAJn8J!%rI1
Oct 25, 2024 13:27:36.772787094 CEST	763	IN	Data Raw: 36 70 45 52 b0 68 00 72 be 21 65 4b 8d d9 77 8a 0d 15 c0 d4 54 64 60 62 04 e6 72 9c 7a bf ea ea 02 b2 a0 7a 55 71 8b c1 15 3e eb d7 10 3c 46 53 79 61 c2 25 fb d6 cf 6f 5e 06 3c 60 84 9f a0 cf 1b b6 c0 4d 35 f2 46 dd 55 60 b9 0c c6 66 16 48 11 b6 Data Ascii: 6pERhr!eKwTd`brzzUq><FSya%o^<`M5FU`fHBOh=\o_h%F5Q~b3tmh\|gVjVs4E2 a:uK5>D3b[x@[Xq-VJ9t6+s{t^^
Oct 25, 2024 13:27:36.772871017 CEST	763	IN	Data Raw: 36 70 45 52 b0 68 00 72 be 21 65 4b 8d d9 77 8a 0d 15 c0 d4 54 64 60 62 04 e6 72 9c 7a bf ea ea 02 b2 a0 7a 55 71 8b c1 15 3e eb d7 10 3c 46 53 79 61 c2 25 fb d6 cf 6f 5e 06 3c 60 84 9f a0 cf 1b b6 c0 4d 35 f2 46 dd 55 60 b9 0c c6 66 16 48 11 b6 Data Ascii: 6pERhr!eKwTd`brzzUq><FSya%o^<`M5FU`fHBOh=\o_h%F5Q~b3tmh\|gVjVs4E2 a:uK5>D3b[x@[Xq-VJ9t6+s{t^^
Oct 25, 2024 13:28:10.110471010 CEST	453	OUT	GET /r/www/cache/static/@baidu/cosmic/index_b5a4f5cf.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.356682062 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 26 Oct 2024 09:51:59 GMT Last-Modified: Wed, 23 Oct 2024 08:32:22 GMT ETag: "1488ebec7fd7062f3a13143eb5a4f5cf" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 173395 Accept-Ranges: bytes Content-MD5: FIjr7H/XBi86ExQ+taT1zw== x-bce-content-crc32: 3657678148 x-bce-debug-id: 1DzKSVWrjCYxd2f0yyLLRICo1Xu+GICT2KuUYZR6cYI+YewVsd16jbmTes38WUjIO4XQTLCLTQ6nNZcEQg/fjQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f945da29-20af-45f6-be05-d933b0924c83 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 09:51:59 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache65 [2] Ohc-File-Size: 9963 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 32 36 65 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 3d 6b 6f e3 48 72 7f 45 d8 c1 00 76 62 7a f5 f0 53 06 16 17 e4 cb 05 48 70 1f ee 43 2e f9 72 a0 25 ca 66 4c 89 02 49 79 3c 6b cc 7f 4f 57 57 bf bb fa 41 59 33 3b 17 e4 16 b7 2b 93 dd d5 d5 d5 f5 ee ea e6 e5 aa ed 8b f2 b5 1c ca ee bd a9 77 55 f1 5c d5 4f cf c3 72 fa ed 52 bf 29 36 65 d3 3c 96 ab 97 0b f3 61 bd 7d b2 fe de 37 e5 aa 7a 6e 9b 75 d5 bd 43 e3 a7 ae 3d ec d6 c5 aa 6d da 6e f9 5a 76 67 45 01 ad f9 df c5 e3 53 b1 ae 76 c3 f9 c3 63 db b1 0e cb cb c5 fe 6d d2 b7 4d bd 9e 7c 5a af d6 eb 6a 7a b5 16 ef 8a ae 5c d7 87 de 00 c1 01 57 eb 62 73 68 1a 80 f0 56 f4 f5 ef f5 ee 69 29 3a b0 27 0f 62 1e b3 e9 f4 f3 43 fb 5a 75 9b a6 fd b2 7c ae 19 e4 dd c3 97 7a 3d 3c f3 57 d6 2c df fa 77 d9 eb 66 ff 26 5b b1 9f 56 ab 7e 2b 5b cd af 54 2b f8 69 b5 6a 6c da 6c d7 b2 d3 d5 54 75 82 9f ac 53 b1 2e bb 97 6d bb ae 26 3e 75 e9 77 06 a5 71 14 68 45 f4 a6 de Data Ascii: 26eb=koHrEvbzSHpC.r%fLIy<kOWWAY3;+wU\OrR)6e<a}7znuC=mnZvgESvcmM\|Zjz\WbshVi):'bCZu\|z=<W,wf&[V~+[T+ijllTuS.m&>uwqhE
Oct 25, 2024 13:28:10.356714964 CEST	1236	IN	Data Raw: 58 7d 49 e8 bc 2f f9 c6 5a 61 7f dd 36 9b cd e2 db 9f b6 d5 ba 2e 27 67 fb ae da 54 9d 5c ee 7e f5 5c 6d ab 25 40 3d 7f 47 90 bb 75 d7 d6 6b fe fb b1 ac d7 87 72 bf f7 d1 c8 6a 99 40 eb e6 e6 66 f1 e0 a1 f1 cd 5a 2e e0 d5 fd fb ba ee 19 ac af cb Data Ascii: X}I/Za6.'gT\~\m%@=Gukrj@fZ.zEiW/v7U)!3h-)z`9)~-/$nx.Vu>}[vOh,n^6`gs};mdc4'1m~^5oPgeyB$F\1
Oct 25, 2024 13:28:10.356749058 CEST	364	IN	Data Raw: 0d fb bf f0 e5 c4 1b e3 89 45 ab e7 aa 64 93 4f 3a 8b 54 d0 d6 54 dc d7 e3 20 b8 72 81 fc 43 28 fc 7a 6b ce bd 0c 04 f9 ac b7 82 34 e0 12 0b df a1 1e 9a 8a ce 71 51 38 62 c0 7c 78 e4 dd 44 8c 41 87 da 5d f5 74 68 ca 2e da 46 86 e3 66 92 c5 a7 87 Data Ascii: EdO:TT rC(zk4qQ8b\|xDA]th.Ffn\|Ns mhZlaDINQip?j78\|hqYd:Oc6dOlTn'i[bJZ&qCML:99jcfV~Sg-nk_])#C&+CUo`
Oct 25, 2024 13:28:10.358025074 CEST	1236	IN	Data Raw: e1 40 cd 77 4b 50 a0 4d 8c 23 a4 dd 62 6c 6b 29 8e 00 5c 9c 38 25 9a 62 9b 46 29 51 f0 ea 5c 76 55 1a 14 e1 f6 db 49 bd c5 44 9b 41 79 81 c1 0d e8 32 d4 5e f0 d3 e9 e7 74 e2 7f f2 de 1a 3f 0e 20 38 27 1b 86 b1 a8 d4 dc a4 cf 63 1a 89 8c f9 6d d7 Data Ascii: @wKPM#blk)\8%bF)Q\vUIDAy2^t? 8'cmq?~ad/:FJm <A3Dtr'cb.gwqmWIMDb1JRniG.aI8SL'j}pygD)8>o
Oct 25, 2024 13:28:10.358061075 CEST	1236	IN	Data Raw: cb d7 9a 39 0c 50 57 1e ef 53 88 76 56 5f 91 b0 4b f4 c4 5a 14 6f b5 80 a6 1d d0 c1 84 28 8a d3 53 20 b1 99 89 8b 5c ed 30 29 99 b2 26 3a 38 f3 3f ec fa 6a 20 5a 09 f7 8d 62 38 bf 31 62 77 e1 bf 08 48 a8 cb 37 82 21 25 e1 dc 46 2e 31 44 ad 8f 3f Data Ascii: 9PWSvV_KZo(S \0)&:8?j Zb81bwH7!%F.1D?\~?F$(}A\inq)/Us9:<f_No:'0/tm79k^S\|}eHAyn,p8V]'#+syg3
Oct 25, 2024 13:28:10.358093977 CEST	364	IN	Data Raw: 17 2e ae 88 20 a3 a8 5b 3f 66 6e 10 6c b8 f9 4f 99 55 85 7b 81 67 a0 bd 23 7d 27 0c d1 dc 6b 1f 45 2b d0 61 90 c8 8c 9a 04 3c fc 4d 6f 6e 5b c6 4b ea 4d e0 2a d7 50 ce fb 49 55 42 60 ba 03 7a 09 b5 e9 58 6c 63 3e b8 3d c9 67 64 69 18 7b c6 42 c7 Data Ascii: . [?fnlOU{g#}'kE+a<Mon[KM*PIUB`zXlc>=gdi{BV![Y&tj~FSr/L6DQeS;&"vz3&{2B\(<W{Prv}qywL1ozP<\|\c:lbyN
Oct 25, 2024 13:28:10.368791103 CEST	458	OUT	GET /r/www/cache/static/@baidu/cosmic-card/index_610fa8a8.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.615283966 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sun, 27 Oct 2024 09:34:08 GMT Last-Modified: Thu, 24 Oct 2024 08:14:37 GMT ETag: "3c4ca88b1f5499b7aa12d3d5610fa8a8" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 88618 Accept-Ranges: bytes Content-MD5: PEyoix9UmbeqEtPVYQ+oqA== x-bce-content-crc32: 1437921718 x-bce-debug-id: m8aH0ZL0O/WPrizn+nawUKw10xA+Zc2U3cHPzga2OQf30iIjIyoAg3M02IpQE7l9wM5mhawd4HSKN4fLpad2rg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 400e440c-6eae-47c1-a684-f2af702f7ae9 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 24 Oct 2024 09:34:07 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 2598 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 61 32 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bc 5a eb 6e e3 ba 11 7e 15 e3 1c 2c 10 17 61 2c 5f e3 95 81 c5 29 d0 1f ed 8f a2 8f 50 d0 12 65 f3 84 12 05 52 8e 9d 35 f2 ee 1d 5e 24 53 12 75 b1 d3 b3 59 ec ae 43 71 86 df dc 87 23 bf 44 5c 46 68 7f da ef 19 41 32 e2 82 5c 31 a3 87 0c d1 82 a4 32 8c 48 56 10 b1 db 73 11 13 81 04 8e e9 49 86 ef 58 3c 21 04 84 48 f0 53 16 93 18 c9 74 3a f1 af 06 bb 98 ca 9c e1 8f 90 66 8c 66 04 25 8c 5c 76 09 cf 0a 24 e9 4f e2 f0 2a c8 a5 40 7b 1e 7f 4c cd e3 33 a1 87 63 e1 6c d0 ab 82 1c 4e 0c 8b de 3d 29 01 98 e9 74 77 34 4f e7 9b fc b2 d3 67 db 85 db 76 46 40 a2 ec 60 8f cd 71 ac 7e 0b 03 47 16 99 e3 88 a0 e5 45 4e 77 70 da fe 8d 16 06 a8 2c 04 7f 73 e1 3b 27 db 87 d3 5d c4 19 17 ce 1e fd bb a1 a7 d9 3b 11 92 58 39 12 9c 52 f6 11 22 9c e7 ca 0c 1f 12 94 ff fc 77 41 31 7b fe 27 61 ef a4 a0 11 7e 96 38 03 3c 44 d0 e4 f3 45 5b 8d a6 f8 40 d0 01 d4 9d 83 e9 04 67 0c 6b 2b Data Ascii: a26Zn~,a,_)PeR5^$SuYCq#D\FhA2\12HVsIX<!HSt:ff%\v$O*@{L3clN=)tw4OgvF@`q~GENwp,s;'];X9R"wA1{'a~8<DE[@gk+
Oct 25, 2024 13:28:10.628866911 CEST	459	OUT	GET /r/www/cache/static/@baidu/cosmic-shop/tokens_fe953515.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:10.875380993 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 12 Oct 2024 07:59:24 GMT Last-Modified: Mon, 30 Sep 2024 03:36:44 GMT ETag: "d6a664b2160978ba21f663d2fe953515" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 375060 Accept-Ranges: bytes Content-MD5: 1qZkshYJeLoh9mPS/pU1FQ== x-bce-content-crc32: 3513648690 x-bce-debug-id: k8aIbC75lJ6xdKNsOSOnlUS1NUOXrc/H5WL+H1wRyxr0Nvwle2/unIs4dHpyjY3KXU3u24x94pUTWMrCcNAI8A== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 2d5b6c68-5d24-4d75-90bd-c266e9f5bae0 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 07:59:24 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 494 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 94 96 e1 6a c2 40 10 84 1f a6 7f 2a f4 c4 aa 58 b0 4f 13 4d a2 01 eb c9 25 88 45 7c f7 06 43 f4 6e 77 76 ce fe 29 c8 7d 33 99 9d b5 39 a7 5b df ba d3 f6 63 1d bc ef ae ce f5 1f db fe cf c1 07 d7 55 97 ce f9 a3 3b 85 e6 a7 08 bf ee d0 ec f6 dd fa ad 2e 16 f3 d5 f2 9b a1 3d 54 d7 80 78 1e 03 8f 8d 0f 65 15 24 33 af 18 95 66 fa fc 12 ec ee bf 1c 4e 16 67 77 c5 b6 6b ce 15 01 a3 c6 1e 2c 6c 43 56 4b ad c5 dc 29 ba 2c 29 8c dc 17 0b ab 03 1e 43 54 2a 60 d9 ec 7d 4e ea 37 24 4d 11 b5 f3 9d 2b ab a3 34 5a ad c0 b3 c6 70 7b 7f ae 02 7e a4 ec 7e 44 5f db 11 31 16 ad 27 a4 1a 09 6d 28 51 c8 2a a3 e6 59 06 b9 1f ea 79 1f 91 b9 0d 29 e9 24 49 ed 65 d3 16 9b 43 55 d2 1d 45 9d 46 7c 5d 67 d8 61 9e dc 13 44 b1 12 97 0d c0 3d 48 d1 4c fe 7b 3d 4b 96 a8 8a 23 f7 21 05 b3 f2 36 ed 79 d7 ee fd e9 7a 97 b2 f1 d7 e7 22 bc e7 5b 9a 0c 21 30 92 f5 00 6a 2e 85 3a f1 3a 57 ca f4 Data Ascii: 1eej@XOM%E\|Cnwv)}39[cU;.=Txe$3fNgwk,lCVK),)CT`}N7$M+4Zp{~~D_1'm(Q*Yy)$IeCUEF\|]gaD=HL{=K#!6yz"[!0j.::W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49782	111.177.8.38	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:35.764760971 CEST	441	OUT	GET /cd37ed75a9387c5b.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
Oct 25, 2024 13:27:36.774399042 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 26073 Connection: keep-alive Expires: Fri, 25 Oct 2024 10:19:12 GMT Last-Modified: Fri, 25 Oct 2024 09:04:30 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 7703 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMT Ohc-Cache-HIT: xiangy2ct52 [2], cdix84 [2] Ohc-File-Size: 26073 X-Cache-Status: HIT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 77 db 38 b2 28 fa 57 66 d6 ba 7b 64 4f bc ef 10 0f be da ed d9 ab 9d 58 7e 74 ac 8e f5 b4 94 9b b5 17 09 90 b6 63 49 f6 c4 76 6c a7 a7 cf 6f bf 60 15 08 91 00 a9 c8 49 fa ec 73 f2 25 86 0a 2c 00 85 42 a1 5e 00 b6 f2 87 a5 b8 bf ba 59 6e 6d ff fe 97 cf c9 a7 bf fc b7 f7 c4 44 cc f6 de 77 06 8b f9 a7 e1 e1 74 af b3 d3 99 79 4f 87 a3 f3 b3 e2 cf f4 68 3c 17 5e 04 7f 2e c6 ec b8 7b 5a fc 39 1a f5 3f f7 bb 50 57 2c 7c de f7 1e 8b 3f f3 37 dd e8 f4 71 0f ea 32 f9 65 76 7e 0c c8 3e 1e 3f ab ff 4e 8f 1e 69 fe 46 14 bf 0c 0f e7 5f e4 01 7c 7d fc fa 20 7e 37 f8 05 ea 9d 9f 78 aa 08 15 3e 1e 5c 9c 2d 47 f0 eb 28 be 12 14 fe 4c 27 27 c9 e4 80 c3 af 93 9e d7 c7 0a 82 f5 6e 53 0a bf ca 85 3f 99 9e df 40 85 c3 71 d1 68 c6 bc db e2 4b ea cf c5 12 7a 23 bb bd fb e9 e4 51 77 ec b1 68 6c 72 ff 9c 4e 04 f6 ba f7 51 1c 01 da e9 f3 c5 55 f6 1a 07 40 c7 5e 7f 81 bf 9e cf 6e 67 14 fa 38 a5 f1 c3 14 ff 4c d9 d8 53 ff 25 f3 fd a3 33 ef 1a 5a 19 cd ce 47 13 a0 5a 72 d4 f7 c4 d1 29 f6 ba [TRUNCATED] Data Ascii: kw8(Wf{dOX~tcIvlo`Is%,B^YnmDwtyOh<^.{Z9?PW,\|?7q2ev~>?NiF_\|} ~7x>\-G(L''nS?@qhKz#QwhlrNQU@^ng8LS%3ZGZr)iN0BD)`\r1OD_hw.t22;p>>sg_?8y03tsv_~6e#9t'}}6,)AvvV?w9/VBS.'r\|_4nffDl_5R.)k9%0]t0'cb\|7!>tqq.$F%_~Ln?&LD.OdrgN,[>i]tP~ts^x\|gz9<Lq+_Wd>%HIBa
Oct 25, 2024 13:27:36.774410009 CEST	1236	IN	Data Raw: 94 c0 14 ff c6 66 97 02 a7 78 38 e9 3e 27 1a d9 e2 e9 37 81 62 e3 57 c5 f5 33 e4 59 b5 82 3f 8b 05 b2 ce e1 ed e1 78 7e 80 f3 70 e6 e9 29 7e 8b f5 94 ac 78 90 e7 c8 f1 57 bf 28 51 00 7f f6 27 44 cd 2c 0e 5c ad f4 df b0 25 c5 20 f7 5a 56 24 8b fe Data Ascii: fx8>'7bW3Y?x~p)~xW(Q'D,\% ZV$1r\|2z%4!6:)0cf/Z%DJX,o6!_x.<>^_gE<!%_ispREgYoPp+?T#
Oct 25, 2024 13:27:36.774420023 CEST	424	IN	Data Raw: b4 52 ae 0e b5 04 1c 3f 49 e4 c2 b3 95 5e ae 74 27 aa 8d 86 42 d7 d7 26 82 9a ad 27 3d 63 67 6a 87 d2 9a 72 6f d4 fb ed ec 23 ce e3 c1 7c 92 4d 50 77 51 4b 7a 86 62 3c 9b cc ae 53 6f 54 22 d3 12 4b 1e f6 0f 86 28 f3 c6 07 f3 4b 89 1c 3b 5d c9 47 Data Ascii: R?I^t'B&'=cgjro#\|MPwQKzb<SoT"K(K;]Gk!^r<$Ti><MsFO&HOHkw124ZQ\X(F6{-^JF^ML\4 Pb B6,q3Nsx
Oct 25, 2024 13:27:36.774478912 CEST	1236	IN	Data Raw: a7 f7 65 f6 38 5b 94 4a 41 81 ef ed a2 7b a5 07 ab f4 fc 50 a2 3c 2d e6 54 73 85 9c 9f f8 d3 a5 36 32 d5 b6 3a d1 db c4 29 ec 79 a3 ee b9 d4 9c 7e d8 55 e2 05 85 e2 97 0b da fb 82 03 1d f5 2e 53 34 39 d4 de c4 de 2e a0 e7 e3 c3 98 4c 71 6a 13 25 Data Ascii: e8[JA{P<-Ts62:)y~U.S49.Lqj%VM_^y+i&]E`:K/{7.RGcTq]!RKvFjK\2re;QV-6qiJ{].$z}\|vpWSgx}rs
Oct 25, 2024 13:27:36.774499893 CEST	1236	IN	Data Raw: bd a1 ae 20 0f 88 d2 97 d0 7d 3e 91 bf 4d 71 63 3b 63 f3 df a4 16 3e a4 fb 9c a1 df 7e 36 bc 79 ca 51 f8 28 4b e8 7a 5c 72 a5 2c fb 2b ae 2e b8 de 33 c6 b4 77 92 8e 70 7f 99 dc fe eb 0c 17 48 72 f0 f4 3a 41 39 9c 1c cd 07 e3 11 7a 72 97 72 38 19 Data Ascii: }>Mqc;c>~6yQ(Kz\r,+.3wpHr:A9zrr8iL~-S-,~ij6mO;-(M_.=WG&R@,~i$I+b<W(qXzQ]kmrp4&-Z&ffRK%:i
Oct 25, 2024 13:27:36.774511099 CEST	424	IN	Data Raw: ab f6 c2 0e 47 d7 17 23 8c 43 8c 16 f3 a3 d1 81 de 4e 7a e5 e6 79 4a e7 f9 a9 76 a7 be f6 0f b4 21 9b 2e 9e 46 b2 5c 86 c7 85 2b a9 7f de 3b 1f 2d 4a f7 d9 5c 0b f7 29 3d b9 c9 c6 a5 d9 5e 6a 37 09 ba cf 66 87 f3 4b 6d 5a 27 2b db 5b f1 c0 e5 4c Data Ascii: G#CNzyJv!.F\+;-J\)=^j7fKmZ'+[L{G o?7eG--Oor-+g~C{eB-x?\+@!7v/>z'KMtlN[wgt\|=qO{vSatA66'C<]$Vl>44
Oct 25, 2024 13:27:36.774521112 CEST	1236	IN	Data Raw: bf 7e 2c d9 55 bb 36 a6 85 b7 4d 9b 9e 9e 1c 64 18 dd 4f 47 e3 e5 a0 8b fe e2 6e f7 69 a6 23 4e de 7c 71 36 d1 96 dd f8 63 29 ae cf c7 b7 da b5 31 3d bf 1c eb 00 d8 f8 70 76 d8 47 db 20 59 28 fb 58 3b f7 59 ff 59 6f de 93 05 f1 87 47 5a 8f 39 78 Data Ascii: ~,U6MdOGni#N\|q6c)1=pvG Y(X;YYoGZ9x4_fY)Uxwzsg=erTXz=*QY-\f}ZT(Z[MSKwl98;/+bP9,N^9}]"x}
Oct 25, 2024 13:27:36.774530888 CEST	212	IN	Data Raw: bd 4f 65 9c 0d cc b9 32 10 54 6a 40 30 fe 81 d6 6a bb 57 5a 22 cc 0a 5b e7 19 e3 e9 85 53 bf 74 18 a8 ba 68 5d 4a 22 c7 da dd a3 98 fd 41 cb 5d f0 c5 a2 70 28 f4 e2 a4 74 d2 15 6e 2b ed 5f 55 a6 c7 5c 93 78 5e 9a c8 ca 5a ce b5 27 73 e2 f9 97 c3 Data Ascii: Oe2Tj@0jWZ"[Sth]J"A]p(tn+_U\x^Z'sOgZ(bMzucMJO)!8nYs3Hsk'cdt[jw\g[5U>6G{3'*C>O:3$;z-I:
Oct 25, 2024 13:27:36.774538994 CEST	1236	IN	Data Raw: a7 53 1d 80 18 cf 26 19 1e 27 50 7a 12 ff 15 23 3a 19 eb 79 99 de ed 8f fa 4c 67 f9 4d 8b 14 13 34 5e 8a 84 2b 24 c3 d9 94 e8 5c 3e a3 2b 28 c5 b0 f0 5f c8 b1 fc 6d b2 28 f5 9f 67 f9 5a 4b 83 f8 b3 36 08 66 e7 fd cf da aa 51 9b 62 b1 f6 c0 33 3c Data Ascii: S&'Pz#:yLgM4^+$\>+(_m(gZK6fQb3<@#ymWvLPHeVx0uT&Yz4yt*S'P[ttu_lOBOg1dO3!No#_fp7k
Oct 25, 2024 13:27:36.774555922 CEST	1236	IN	Data Raw: d5 5a ad 8a 20 11 1e 85 8d 16 1b 36 1b b0 f4 d3 80 56 15 09 79 23 1e 16 4a 94 54 bb 16 d4 27 91 44 71 fd 07 4a ac 79 cf d5 50 b6 4c b3 2e cf ec 98 a6 b7 77 51 4b f8 93 9a 43 86 aa 36 d7 d2 2b a6 51 e8 15 a0 28 a7 a4 5c 13 2d 60 d5 54 1b e7 6a c5 Data Ascii: Z 6Vy#JT'DqJyPL.wQKC6+Q(\-`Tj}B/<`m.g.^-3bb->i?u3}oGb8ri2l'YIAFH0g-.T.rkbmGabawK
Oct 25, 2024 13:27:36.775552988 CEST	1236	IN	Data Raw: c2 54 da 51 08 2f 16 9c 97 51 20 fc d4 ed d5 96 a9 b9 63 c6 da 28 03 40 d9 c0 9a 3a 32 81 ad 36 8b 67 24 55 9d b3 48 09 03 e2 d5 9b 43 c4 b8 a0 e0 cf ed 5a 00 07 9b da 55 73 24 6e 1e 96 f7 c3 4f 0f f7 97 cf f5 69 e2 24 8d 49 6c a6 84 c4 6a b3 a6 Data Ascii: TQ/Q c(@:26g$UHCZUs$nOi$IljzJP=%Iq<~$"Y9D `= WD{ah"s-Ss}Nf1'(&ViW+. /[fIB]$\3?",J0%1-8eU=+)x P@0
Oct 25, 2024 13:27:39.934870958 CEST	492	OUT	GET /96c9c06653ba892e.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:40.265075922 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 26904 Connection: keep-alive Expires: Fri, 25 Oct 2024 08:45:51 GMT Last-Modified: Fri, 25 Oct 2024 07:09:31 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 13307 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:45:51 GMT Ohc-Cache-HIT: xiangy2ct51 [2], bdix189 [2] Ohc-File-Size: 26904 X-Cache-Status: HIT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 77 db 38 f2 28 f8 ff 7e 8a cc b9 3b 91 d4 56 d2 04 f8 8e a3 be 27 4e fc 4c ec c4 b2 25 d9 f2 75 cf e1 03 b4 14 eb e1 b1 e4 d8 ee 24 fb d9 17 40 81 20 09 10 b2 9c ee df 9e 9d e9 24 22 0b 28 14 0a 85 7a 01 04 9a d9 dd 2c 59 8e e7 b3 66 eb fb 8b 66 f9 e1 5b 74 fb e2 3f d6 83 93 c5 4e e7 a2 71 8e 47 93 e1 5e af d3 68 37 d2 dd f0 6e 7f 7c cd 7e 7e fc b0 7f 7f 78 ca 7f 0e 07 ae 45 ff f9 f4 7e 0b c5 53 fe e6 c4 ea 4f 92 eb 39 fb d9 c5 e1 b7 21 be 67 3f 0f 67 f7 4e f6 21 61 3f e3 f1 bb d1 fe e0 98 fd dc ff 60 5d 9d e1 80 fd 3c c3 47 59 3a e1 3f a3 de b0 db ef 9f f3 b2 b4 d1 e1 e9 02 da 7f 48 d9 9b 69 32 df 9f 02 45 18 7d 8e a6 57 bc a5 1e 72 23 cb 61 3f b3 0f 3b c1 91 cd 1b 3d b7 8f af 8e cf f6 39 a2 c1 e4 af e1 09 2f d0 b3 96 83 d4 e2 e8 f7 77 0f dc 74 97 23 4b fa 5b f3 3e 60 38 ef 1f 59 09 34 71 32 3d 38 8c 7b fc e7 c7 93 eb bb 21 74 71 80 2c fa 93 37 71 8c 43 14 cf 78 67 d2 b3 ad fb d8 e6 ad 9d 4f 77 b2 08 f0 7e b6 87 a3 64 fc 8e 97 1d 8c d0 f1 ec 9d e4 c1 09 27 3d [TRUNCATED] Data Ascii: {w8(~;V'NL%u$@ $"(z,Yff[t?NqG^h7n\|~~xE~SO9!g?gN!a?`]<GY:?Hi2E}Wr#a?;=9/wt#K[>`8Y4q2=8{!tq,7qCxgOw~d'=,:\|w999}v8!t=3='`1`sx]7~=N0/3=:8we;o{h]>{0:;eOW3!I3W_N8sk1G5pzmUT\|I_nk2z~t8Lv3t39:&0f{zL'^xpN;bt9&)*mxqc8H0?AdzbZWSG2=?\|;W\|@mY{H9=7=` \|>D
Oct 25, 2024 13:28:17.695038080 CEST	677	OUT	GET /cd37ed75a9387c5b.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7 If-Modified-Since: Fri, 25 Oct 2024 09:04:30 GMT
Oct 25, 2024 13:28:18.015821934 CEST	470	IN	HTTP/1.1 304 Not Modified Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/javascript; charset=utf-8 Connection: keep-alive Expires: Fri, 25 Oct 2024 10:19:12 GMT Last-Modified: Fri, 25 Oct 2024 09:04:30 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 7744 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMT Ohc-Cache-HIT: xiangy2ct52 [2], cdix84 [2] Ohc-File-Size: 26073 X-Cache-Status: HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49787	104.193.90.80	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:35.927733898 CEST	315	OUT	GET /r/www/cache/static/plugins/bzPopper_d8249c4.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:36.773156881 CEST	1057	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 09 Oct 2024 09:58:21 GMT Last-Modified: Thu, 26 Sep 2024 06:17:00 GMT ETag: "d8249c46aa6788c1ca336401bb06624e" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 874237 Accept-Ranges: bytes Content-MD5: 2CScRqpniMHKM2QBuwZiTg== x-bce-content-crc32: 801344642 x-bce-debug-id: IgpF8Wx6LvjSZrH2TSRMk2eAEbZ19ehwQD+9hpqaxk0k0TX1uNbf2HZw9lGFBV0iAjDLc9QS9mHeNyYdlyFlNw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: ab984306-5793-4b3e-87d8-6c6b830fb997 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 09:58:21 GMT Ohc-Cache-HIT: iad01-sys-jomo8.iad01.baidu.com [2], zhuzuncache56 [2] Ohc-File-Size: 114 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4a 49 4d cb cc 4b d5 50 2a c8 29 4d cf cc 2b d6 4f aa 0a c8 2f 28 48 2d 52 d2 89 56 2a 4a 2d 2c cd 2c 4a 55 d2 51 72 48 4a cc 4c 29 d5 4f 2f 4d 2c 4a cc 2b 49 4d d5 2d 80 28 8a d5 49 2b cd 4b 2e c9 cc cf d3 48 d5 ac 2e 4a 2d 29 2d ca 53 00 9a 86 4b bd 66 ad a6 35 00 00 00 ff ff 03 00 82 8c c3 2f 72 00 00 00 0d 0a Data Ascii: 71JIMKP)M+O/(H-RVJ-,,JUQrHJL)O/M,J+IM-(I+K.H.J-)-SKf5/r
Oct 25, 2024 13:27:36.773168087 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 13:27:36.773293972 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 25, 2024 13:27:37.707469940 CEST	310	OUT	GET /r/www/cache/static/soutu/js/tu_ba0fbe3.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:38.012552023 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Sat, 12 Oct 2024 14:00:22 GMT Last-Modified: Wed, 09 Oct 2024 08:25:20 GMT ETag: "ba0fbe3dc3b2456d26cf9aa9b98529ae" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 104654 Accept-Ranges: bytes Content-MD5: ug++PcOyRW0mz5qpuYUprg== x-bce-content-crc32: 2194533526 x-bce-debug-id: h9ShWZpWkAti0nLLxl/DtaYD9urQgr3dMXeRiwSGSoTksU/y6GY8HvghtP/N8HGnizoldOS0iacOc6r+VOX3Aw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1eda1e48-06d9-48de-95b8-3422188589a1 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 14:00:22 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache60 [4] Ohc-File-Size: 36225 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 32 37 34 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 7d fb 77 d4 46 b2 f0 ef f9 2b 84 97 9b 19 83 67 c6 36 21 c9 1a 4c 2e 21 70 97 f3 c1 c2 e5 b1 7b cf 35 c4 47 a3 d1 cc c8 d6 0b 49 e3 c1 a4 39 07 f2 c2 3c 02 e4 05 79 90 07 59 48 48 16 0c d9 cd 03 6c 1e 7f cc f5 c8 e3 9f f6 5f b8 55 dd 92 46 52 b7 34 03 c9 f7 7d 75 38 78 24 55 57 57 57 55 57 57 57 b7 5a 95 0d 1b 9e db 20 fd 7b 5d d3 55 a9 f3 f9 63 ff f2 35 ff d6 f5 ce 17 57 ff f5 f0 c2 ca c3 cf ba df fc bd f3 f0 4d ff ce cd ce b9 af bb 8f 1e 21 a6 dc f2 9a 96 23 b5 5b b3 b2 56 97 cd 46 31 fa f5 ef 55 59 ab b5 ca 8a 65 0c 3f b7 61 43 e5 b9 e7 2a 1b a4 86 6e 55 65 5d 72 a7 5d d5 75 35 cb 94 dc 76 dd aa ce a8 8a 07 08 f0 5c 75 75 cd f4 4a 35 cd 95 ab c0 41 5d 55 dc 92 22 1b aa ae c8 ae 0a 28 c5 7a cb 54 3c 2c 58 1c 96 de 78 4e 02 a8 54 24 ff fa bb 9d f7 ce ac 2e 7d 37 5e 1e 0d b8 66 d7 fe d7 bf 76 1e 5e a2 68 73 b2 23 b9 b2 f1 Data Ascii: 2748}wF+g6!L.!p{5GI9<yYHHl_UFR4}u8x$UWWWUWWWZ {]Uc5WM!#[VF1UYe?aC*nUe]r]u5v\uuJ5A]U"(zT<,XxNT$.}7^fv^hs#
Oct 25, 2024 13:27:38.012584925 CEST	1236	IN	Data Raw: 67 b5 fd aa 75 5c 9a 94 aa 35 57 7a fe 79 fc 83 1c 1a f1 df e5 08 6f 4b 54 d4 72 a1 8c 29 cf 69 0d d9 b3 9c b2 ad cb 5e dd 72 8c b2 67 1d b6 6d d5 d9 01 ec 15 87 7b e8 2d 5b b7 e4 da 41 d5 99 53 1d 28 58 a8 54 1a 8e 6c 37 cb 91 48 2a 0c a3 d0 2b Data Ascii: gu\5WzyoKTr)i^rgm{-[AS(XTl7H+{ep-5zwnrR0ku}v!VzpBAdwK+~t?$(d^M'u 7O4"+MnW\_Z7
Oct 25, 2024 13:27:38.012635946 CEST	364	IN	Data Raw: d8 3b 58 10 12 a1 f4 64 a3 b9 e0 8a e2 82 99 93 b9 0a c3 ca 2a af 17 8b 45 0c b6 a7 dc a3 af 4c 1c a9 1c a9 0c 93 62 1d 62 6f fa 73 f8 95 e2 d4 91 76 e9 e8 c6 23 e5 e1 8d 45 88 05 88 5a 6b 91 86 35 47 60 66 46 0c 4d 27 a6 ea 11 cb 69 90 aa 76 02 Data Ascii: ;XdELbbosv#EZk5G`fFM'iv-b;A-(eY'Zm: r< r]QiQf5"7ET\b{.6-Cjj6J4@2uR'HMWR#6i#YRS&^R"BT4Nu
Oct 25, 2024 13:27:38.012648106 CEST	1236	IN	Data Raw: 88 a3 12 bd 45 9c 36 01 91 1b 0d a2 19 c4 98 23 06 68 ab 4d 8c 79 62 e8 c4 98 25 46 93 18 c7 c8 3c dc 04 c1 3a a4 e5 12 d0 94 ec 92 39 8d 18 26 31 40 b0 35 62 ab a4 0e 65 e1 5f 8d 18 32 31 14 62 9c 20 c6 71 62 42 2b 6c 62 6a a0 7a 62 36 88 d9 22 Data Ascii: E6#hMyb%F<:9&1@5be_21b qbB+lbjzb6"&hJ''1"#-bm#36q&qH%-52O\2Q#nD;2}O#qOF\UZ!^xM \*gox69TMjLZ#`l(B
Oct 25, 2024 13:27:38.012686014 CEST	1236	IN	Data Raw: 9c 25 39 26 87 c6 37 6f 1e 92 fa d5 89 50 90 5b 9e 85 eb 0c ba ea 81 83 b1 ea f5 21 09 5c 8c a2 36 2d 1d c2 dd c9 a1 ce b5 5b fe 9d 1b 9d 1b 6f af fe e3 93 ee 4f 3f 05 4b 28 8f de ef 7c 71 6a a8 92 db ac 42 68 cb b9 38 83 f6 14 60 67 20 29 26 69 Data Ascii: %9&7oP[!\6-[oO?K(\|qjBh8`g )&iCHQ_j"u}a^_p\<+X!1sac`FcY:m_?b,>t>MAii$zu^m[ %[S-xQZ(*
Oct 25, 2024 13:27:38.012696028 CEST	364	IN	Data Raw: 64 4f 12 6c 0f 42 18 cc 72 f3 24 c8 1b 49 c2 aa fb 15 49 1b b2 9b 6e 4a 38 d2 84 80 46 b3 fc 7e 67 f1 b3 c8 68 56 df 7c d0 39 b3 bc b2 74 7e 65 b9 b7 eb 17 21 d4 ae 99 54 ee 48 1f ab 89 59 18 b6 98 7b 8e 9e 21 58 fe 2c f2 a5 11 92 ab 7c 10 b6 43 Data Ascii: dOlBr$IInJ8F~ghV\|9t~e!THY{!X,\|C?LWM~x2tr 't]pkk]^vE{'bVYmulX$k\(@Au_V\|\|{wV_ rppXRF8p/oX`Zs
Oct 25, 2024 13:27:38.012758017 CEST	1236	IN	Data Raw: 06 5d 80 9a 1d 33 38 8e 06 dd f9 97 b0 67 69 2b 26 2a c0 ce 7f 07 6b fa ad a3 54 6a fb a0 c0 05 45 ce a7 7b f1 d7 ce e3 ab ab 6f 7f 0b 9a 4d 20 c5 bc 4d dd 52 5a ae c0 ed 0a 3d 4e c0 bb db b4 da e9 5e 90 cb 08 b3 ac 2c 16 98 b7 ed 5b 39 aa 25 36 Data Ascii: ]38gi+&kTjE{oM MRZ=N^,[9%6bP\)S;VK~;{X:7~\\7rREP6ab`b9.aB_Ly3F. qFLHpBx0D2^gil34cJ~A-24a
Oct 25, 2024 13:27:38.012775898 CEST	212	IN	Data Raw: 87 22 2e 66 5a 35 15 df 4d c1 c1 80 16 2b 87 77 ca 9e b5 c7 6a 27 cf c7 49 97 6e 39 e1 b9 1a 71 c0 0e d3 a3 1b ac ac 0b 23 5f 04 dc 60 10 55 ce bd 50 13 82 e7 cc 67 94 47 08 25 87 ef f2 e0 0b 66 c5 02 0d e0 21 28 d0 70 3d 02 aa 10 34 00 81 ef 26 Data Ascii: ".fZ5M+wj'In9q#_`UPgG%f!(p=4&[\|ptw08_<NDq;XMWTmJw>[_'\\LU!n_a,n7M>f/IeZBE
Oct 25, 2024 13:27:38.012790918 CEST	1236	IN	Data Raw: f0 0a 1a d0 2a 10 78 c5 84 30 98 75 20 f0 0c f4 b5 10 04 71 d5 fc 5d 7e b6 9f b8 81 93 b1 68 e7 c4 c5 9b 9d 4b 57 99 7f 4b 20 c5 d2 a4 38 2d 1f d4 5d 61 60 47 17 c4 d0 47 2e 5f cc 71 a2 5c 51 b6 0e 97 ed de b8 02 08 30 5c e6 95 29 e3 26 e7 e4 b6 Data Ascii: x0u q]~hKWK 8-]a`GG._q\Q0\)&&G@tVa6 0bP)5])t~EjD:WSf%M]n]~GYMub(rr6W^a2Op!uyuH$oQ*U
Oct 25, 2024 13:27:38.473579884 CEST	328	OUT	GET /r/www/cache/static/amd_modules/@baidu/search-sug_947981a.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:27:38.665759087 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 09 Oct 2024 23:35:18 GMT Last-Modified: Thu, 26 Sep 2024 06:16:58 GMT ETag: "947981ae2c8738fa4978e847e7b8be64" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 874239 Accept-Ranges: bytes Content-MD5: lHmBriyHOPpJeOhH57i+ZA== x-bce-content-crc32: 790185926 x-bce-debug-id: ECukVtC4nNvAZy+oXjztEDDNrltXvEs5B779XKiZDnOMDrH3n51qGYXf/d9Hr2Gv+uT4G8LtjqJS9b99CBneUA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 22a11576-c570-4807-9699-c7a1832405f2 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 23:35:18 GMT Ohc-Cache-HIT: iad01-sys-jomo8.iad01.baidu.com [2], zhuzuncache51 [2] Ohc-File-Size: 57420 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Data Raw: 34 32 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d eb 73 23 d9 75 df f7 f9 2b c8 de 31 89 0e 1a 20 41 ce cc ce 02 6c c2 b3 33 23 ed d8 fb 90 86 b3 92 12 8a 66 35 81 26 d0 3b 00 1a d3 dd e0 63 09 54 d9 ae 3c ec 38 8e 9c 54 a5 92 38 aa ca a3 64 c5 5f 2c a7 62 57 45 49 6c ff 35 bb 2b e9 53 fe 85 9c df 39 f7 76 df 7e 61 38 bb 2b 95 52 b1 e5 1d a2 6f 9f fb 3a f7 dc 73 cf eb 9e 1e fa e7 c1 cc 6f 58 bf 79 e6 05 c3 c5 4e ec 7b d1 60 dc 8a 17 a3 1d fc 17 cc 86 fe 95 e5 1c 5b 91 ff 6a 11 44 be 75 e2 9c 2f 66 83 24 08 67 0d 55 64 df e8 92 8d c1 d8 1f bc 7c 8f ea 3d 9b 35 a8 3c f2 93 45 34 db b8 a4 46 c2 cb f6 e9 69 ec 4d e7 13 ff 74 4c 00 a7 13 7f 36 4a c6 7d bf 2d 3f 0e dd 7b cb a5 3f 1b 84 43 ff e3 e7 cf 1e 87 d3 79 38 f3 67 09 b5 92 02 74 1e 76 df 08 7a 55 1e d6 d1 38 bc 34 06 96 35 d7 d9 da 5a db dc 7e d6 d8 d1 c7 df fc e8 dd df 42 2b 17 5e b4 91 b8 c9 38 88 1d df 4d da e1 3c 89 Data Ascii: 4271}s#u+1 Al3#f5&;cT<8T8d_,bWEIl5+S9v~a8+Ro:soXyN{`[jDu/f$gUd\|=5<E4FiMtL6J}-?{?Cy8gtvzU845Z~B+^8M<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49806	123.244.94.38	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:38.728377104 CEST	460	OUT	GET /cd37ed75a9387c5b.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:39.781945944 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 26073 Connection: keep-alive Expires: Fri, 25 Oct 2024 10:19:12 GMT Last-Modified: Fri, 25 Oct 2024 09:04:30 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 7707 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMT Ohc-Cache-HIT: cyct52 [2], cdix84 [1] Ohc-File-Size: 26073 X-Cache-Status: HIT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 77 db 38 b2 28 fa 57 66 d6 ba 7b 64 4f bc ef 10 0f be da ed d9 ab 9d 58 7e 74 ac 8e f5 b4 94 9b b5 17 09 90 b6 63 49 f6 c4 76 6c a7 a7 cf 6f bf 60 15 08 91 00 a9 c8 49 fa ec 73 f2 25 86 0a 2c 00 85 42 a1 5e 00 b6 f2 87 a5 b8 bf ba 59 6e 6d ff fe 97 cf c9 a7 bf fc b7 f7 c4 44 cc f6 de 77 06 8b f9 a7 e1 e1 74 af b3 d3 99 79 4f 87 a3 f3 b3 e2 cf f4 68 3c 17 5e 04 7f 2e c6 ec b8 7b 5a fc 39 1a f5 3f f7 bb 50 57 2c 7c de f7 1e 8b 3f f3 37 dd e8 f4 71 0f ea 32 f9 65 76 7e 0c c8 3e 1e 3f ab ff 4e 8f 1e 69 fe 46 14 bf 0c 0f e7 5f e4 01 7c 7d fc fa 20 7e 37 f8 05 ea 9d 9f 78 aa 08 15 3e 1e 5c 9c 2d 47 f0 eb 28 be 12 14 fe 4c 27 27 c9 e4 80 c3 af 93 9e d7 c7 0a 82 f5 6e 53 0a bf ca 85 3f 99 9e df 40 85 c3 71 d1 68 c6 bc db e2 4b ea cf c5 12 7a 23 bb bd fb e9 e4 51 77 ec b1 68 6c 72 ff 9c 4e 04 f6 ba f7 51 1c 01 da e9 f3 c5 55 f6 1a 07 40 c7 5e 7f 81 bf 9e cf 6e 67 14 fa 38 a5 f1 c3 14 ff 4c d9 d8 53 ff 25 f3 fd a3 33 ef 1a 5a 19 cd ce 47 13 a0 5a 72 d4 f7 c4 d1 29 f6 ba [TRUNCATED] Data Ascii: kw8(Wf{dOX~tcIvlo`Is%,B^YnmDwtyOh<^.{Z9?PW,\|?7q2ev~>?NiF_\|} ~7x>\-G(L''nS?@qhKz#QwhlrNQU@^ng8LS%3ZGZr)iN0BD)`\r1OD_hw.t22;p>>sg_?8y03tsv_~6e#9t'}}6,)AvvV?w9/VBS.'r\|_4nffDl_5R.)k9%0]t0'cb\|7!>tqq.$F%_~Ln?&LD.OdrgN,[>i]tP~ts^x\|gz9<Lq+_Wd>%HIBa
Oct 25, 2024 13:27:39.781963110 CEST	1236	IN	Data Raw: 66 97 02 a7 78 38 e9 3e 27 1a d9 e2 e9 37 81 62 e3 57 c5 f5 33 e4 59 b5 82 3f 8b 05 b2 ce e1 ed e1 78 7e 80 f3 70 e6 e9 29 7e 8b f5 94 ac 78 90 e7 c8 f1 57 bf 28 51 00 7f f6 27 44 cd 2c 0e 5c ad f4 df b0 25 c5 20 f7 5a 56 24 8b fe a7 31 72 7c 32 Data Ascii: fx8>'7bW3Y?x~p)~xW(Q'D,\% ZV$1r\|2z%4!6:)0cf/Z%DJX,o6!_x.<>^_gE<!%_ispREgYoPp+?T#1B:
Oct 25, 2024 13:27:39.781977892 CEST	424	IN	Data Raw: 04 1c 3f 49 e4 c2 b3 95 5e ae 74 27 aa 8d 86 42 d7 d7 26 82 9a ad 27 3d 63 67 6a 87 d2 9a 72 6f d4 fb ed ec 23 ce e3 c1 7c 92 4d 50 77 51 4b 7a 86 62 3c 9b cc ae 53 6f 54 22 d3 12 4b 1e f6 0f 86 28 f3 c6 07 f3 4b 89 1c 3b 5d c9 47 90 04 a3 6b 94 Data Ascii: ?I^t'B&'=cgjro#\|MPwQKzb<SoT"K(K;]Gk!^r<$Ti><MsFO&HOHkw124ZQ\X(F6{-^JF^ML\4 Pb B6,q3Nsxk
Oct 25, 2024 13:27:39.781996012 CEST	1236	IN	Data Raw: 5b 94 4a 41 81 ef ed a2 7b a5 07 ab f4 fc 50 a2 3c 2d e6 54 73 85 9c 9f f8 d3 a5 36 32 d5 b6 3a d1 db c4 29 ec 79 a3 ee b9 d4 9c 7e d8 55 e2 05 85 e2 97 0b da fb 82 03 1d f5 2e 53 34 39 d4 de c4 de 2e a0 e7 e3 c3 98 4c 71 6a 13 25 56 c5 17 ad 4d Data Ascii: [JA{P<-Ts62:)y~U.S49.Lqj%VM_^y+i&]E`:K/{7.RGcTq]!RKvFjK\2re;QV-6qiJ{].$z}\|vpWSgx}rsvS<
Oct 25, 2024 13:27:39.782011032 CEST	212	IN	Data Raw: 88 d2 97 d0 7d 3e 91 bf 4d 71 63 3b 63 f3 df a4 16 3e a4 fb 9c a1 df 7e 36 bc 79 ca 51 f8 28 4b e8 7a 5c 72 a5 2c fb 2b ae 2e b8 de 33 c6 b4 77 92 8e 70 7f 99 dc fe eb 0c 17 48 72 f0 f4 3a 41 39 9c 1c cd 07 e3 11 7a 72 97 72 38 19 69 93 bf af 4c Data Ascii: }>Mqc;c>~6yQ(Kz\r,+.3wpHr:A9zrr8iL~-S-,~ij6mO;-(M_.=WG&R@,~i$I+b<W(qXzQ]kmrp4&-Z&ff
Oct 25, 2024 13:27:39.782121897 CEST	1236	IN	Data Raw: 7f af cd d5 e9 e8 16 8c e2 ab fd 52 cf 98 d2 4b 25 3a f5 dc ee df 69 cb f5 ed a2 f7 59 5b 58 4a ef bd d6 a6 ca a8 3b 7e 1e a1 8b 68 b8 22 90 3c 78 ba 15 28 2f 95 f6 73 a5 f5 8c 64 dc ed 8b ae f6 50 c7 0f c7 1f d1 04 22 6a 65 a0 2f 7c b0 ec d3 b3 Data Ascii: RK%:iY[XJ;~h"<x(/sdP"je/\|2W)2^zNxlYnjjC{p$fz#6q6Aoo`A%BK$3-~B:(=.O.Ehod3O1)*L-V~..Ms\|rX
Oct 25, 2024 13:27:39.782138109 CEST	1236	IN	Data Raw: 99 36 36 cf c7 27 c2 43 ae 3c f4 e7 f2 19 5d b3 24 56 6c ab fd e2 ca 3e 34 34 25 19 06 52 0b 13 f0 98 69 62 c6 5e 5a 6a 41 d1 e7 14 b7 aa 64 39 fb 94 a2 f9 31 a2 e3 65 29 fb 26 4f 81 96 4a 85 d7 13 d9 0b 36 99 a3 db c7 33 14 fd 93 c3 fe 9b 33 d4 Data Ascii: 66'C<]$Vl>44%Rib^ZjAd91e)&OJ633D1(+<trW1)mXiJ^t)z:V(}7@M-[:Fgo7lL<v\|ci~,U6MdOGni#N\|q6
Oct 25, 2024 13:27:39.782154083 CEST	1236	IN	Data Raw: 87 5d 7c a5 3d 64 d9 78 3f d1 02 a2 70 5a ea ba d3 f3 de 97 21 72 6e d2 bd e5 63 ed e7 56 ac a0 3d 39 c7 dd 98 6b bd 23 79 e3 7d 46 b6 2e 86 35 1c f7 8e 87 28 2e 8e 0f bb 65 d4 ae 48 7e c8 d0 eb 0a 4b 05 6d 2d 79 d4 bf 2b b3 4c 0e e3 fc bc 0c 04 Data Ascii: ]\|=dx?pZ!rncV=9k#y}F.5(.eH~Km-y+LeuFgG3Iv~5AqTgRdhwg<&x\|}p!W_ye)h>~7<G}K.nId%^j{I'Oe2Tj@0jWZ"[Sth
Oct 25, 2024 13:27:39.782167912 CEST	1236	IN	Data Raw: d2 ac 95 c1 d1 db e7 2f 67 d6 c4 91 c0 0f 3d 6f 35 71 9e 2f 22 7f af 98 e1 0a b4 9c a1 98 ab 2e c7 7b ef 3f 54 67 88 24 32 5e cd 10 8f 29 43 3a 22 aa f7 9d 79 b6 bc b8 57 b2 65 d7 d4 fd d9 d4 5b fd a6 e6 e4 77 d3 c2 ab bd ce 7f 74 5e 6d 75 3c b5 Data Ascii: /g=o5q/".{?Tg$2^)C:"yWe[wt^mu<*a9b$5xpYAud&2[oFUN{VW~4U$?=SWd5QUty2mc{.FQ5$,B^gU'T{oY:{
Oct 25, 2024 13:27:39.782183886 CEST	848	IN	Data Raw: fe 5d bb a1 a1 54 9f 09 cb 82 e7 a1 6d e3 17 1b 0d 7a b0 00 31 ea 00 34 8d 94 a5 59 1b 4d 21 db 71 c7 70 46 83 02 a8 19 86 52 64 85 7f a7 b3 a7 76 8f 66 34 20 19 b6 b2 a5 ed 17 db a9 8d 0d f1 28 65 a5 d8 cb eb 94 a2 9d 9f 14 25 fe 5a 91 fe 05 53 Data Ascii: ]Tmz14YM!qpFRdvf4 (e%ZS^R_hOU5I7L;<jD,N,g=Y+1$((PZ'NlciY\akwGdQCoP#z_5/-6/>4@x)&
Oct 25, 2024 13:27:39.787918091 CEST	1236	IN	Data Raw: 20 ec 95 81 ed b6 a0 e5 be 63 c8 af 9d 15 2e bc 2c 83 80 2d e2 82 69 f9 e6 f9 20 29 ab ce 07 22 77 47 dd 0c c3 ae ef 18 9a 6e 57 88 5a 4d 14 61 22 24 72 fb f7 3f 40 76 bd 7d 18 2c 92 f9 7c f8 29 c9 f3 2b 51 99 9a d5 0e 1d 70 62 1c 2f 58 a8 07 10 Data Ascii: c.,-i )"wGnWZMa"$r?@v},\|)+Qpb/Xu4:F;VK1k9qWwa`x\|b*8m8-SA?t:2'AW,R ;I50~\|w;Jy544,$2S2XoNU!x
Oct 25, 2024 13:27:41.247435093 CEST	460	OUT	GET /96c9c06653ba892e.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:41.588586092 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:41 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 26904 Connection: keep-alive Expires: Fri, 25 Oct 2024 08:45:51 GMT Last-Modified: Fri, 25 Oct 2024 07:09:31 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 13308 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:45:51 GMT Ohc-Cache-HIT: cyct51 [2], bdix189 [2] Ohc-File-Size: 26904 X-Cache-Status: HIT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 77 db 38 f2 28 f8 ff 7e 8a cc b9 3b 91 d4 56 d2 04 f8 8e a3 be 27 4e fc 4c ec c4 b2 25 d9 f2 75 cf e1 03 b4 14 eb e1 b1 e4 d8 ee 24 fb d9 17 40 81 20 09 10 b2 9c ee df 9e 9d e9 24 22 0b 28 14 0a 85 7a 01 04 9a d9 dd 2c 59 8e e7 b3 66 eb fb 8b 66 f9 e1 5b 74 fb e2 3f d6 83 93 c5 4e e7 a2 71 8e 47 93 e1 5e af d3 68 37 d2 dd f0 6e 7f 7c cd 7e 7e fc b0 7f 7f 78 ca 7f 0e 07 ae 45 ff f9 f4 7e 0b c5 53 fe e6 c4 ea 4f 92 eb 39 fb d9 c5 e1 b7 21 be 67 3f 0f 67 f7 4e f6 21 61 3f e3 f1 bb d1 fe e0 98 fd dc ff 60 5d 9d e1 80 fd 3c c3 47 59 3a e1 3f a3 de b0 db ef 9f f3 b2 b4 d1 e1 e9 02 da 7f 48 d9 9b 69 32 df 9f 02 45 18 7d 8e a6 57 bc a5 1e 72 23 cb 61 3f b3 0f 3b c1 91 cd 1b 3d b7 8f af 8e cf f6 39 a2 c1 e4 af e1 09 2f d0 b3 96 83 d4 e2 e8 f7 77 0f dc 74 97 23 4b fa 5b f3 3e 60 38 ef 1f 59 09 34 71 32 3d 38 8c 7b fc e7 c7 93 eb bb 21 74 71 80 2c fa 93 37 71 8c 43 14 cf 78 67 d2 b3 ad fb d8 e6 ad 9d 4f 77 b2 08 f0 7e b6 87 a3 64 fc 8e 97 1d 8c d0 f1 ec 9d e4 c1 09 27 3d [TRUNCATED] Data Ascii: {w8(~;V'NL%u$@ $"(z,Yff[t?NqG^h7n\|~~xE~SO9!g?gN!a?`]<GY:?Hi2E}Wr#a?;=9/wt#K[>`8Y4q2=8{!tq,7qCxgOw~d'=,:\|w999}v8!t=3='`1`sx]7~=N0/3=:8we;o{h]>{0:;eOW3!I3W_N8sk1G5pzmUT\|I_nk2z~t8Lv3t39:&0f{zL'^xpN;bt9&)*mxqc8H0?AdzbZWSG2=?\|;W\|@mY{H9=7=` \|>D9E
Oct 25, 2024 13:28:18.284080029 CEST	559	OUT	GET /cd37ed75a9387c5b.js HTTP/1.1 Host: hectorstatic.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7 If-Modified-Since: Fri, 25 Oct 2024 09:04:30 GMT
Oct 25, 2024 13:28:18.623253107 CEST	465	IN	HTTP/1.1 304 Not Modified Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/javascript; charset=utf-8 Connection: keep-alive Expires: Fri, 25 Oct 2024 10:19:12 GMT Last-Modified: Fri, 25 Oct 2024 09:04:30 GMT Cache-Control: max-age=3600 Content-Encoding: gzip Age: 7746 Accept-Ranges: bytes Ohc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMT Ohc-Cache-HIT: cyct52 [2], cdix84 [1] Ohc-File-Size: 26073 X-Cache-Status: HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49836	45.113.194.250	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:42.110832930 CEST	531	OUT	GET /passApi/js/wrapper.js?cdnversion=1729855660344&_=1729855653595 HTTP/1.1 Host: passport.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:43.136677980 CEST	294	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Type: application/x-javascript Date: Fri, 25 Oct 2024 11:27:42 GMT Etag: W/"67170f7a-1b8d" Last-Modified: Tue, 22 Oct 2024 02:35:38 GMT Server: BWS Tracecode: 42255197190296791306102519 Vary: Accept-Encoding Transfer-Encoding: chunked
Oct 25, 2024 13:27:43.136773109 CEST	1236	IN	Data Raw: 65 64 34 0d 0a 76 61 72 20 70 61 73 73 70 6f 72 74 3d 70 61 73 73 70 6f 72 74 7c 7c 77 69 6e 64 6f 77 2e 70 61 73 73 70 6f 72 74 7c 7c 7b 7d 3b 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 75 6c 65 50 6f 6f 6c 3d 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 Data Ascii: ed4var passport=passport\|\|window.passport\|\|{};passport._modulePool=passport._modulePool\|\|{},passport._define=passport._define\|\|function(s,a){passport._modulePool[s]=a&&a()},passport._getModule=passport._getModule\|\|function(s){return passport
Oct 25, 2024 13:27:43.136805058 CEST	1236	IN	Data Raw: 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 69 3b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 6e 73 63 6c 69 63 6b 2e 62 61 69 64 75 2e Data Ascii: new Date).getTime()-i;(new Image).src=document.location.protocol+"//nsclick.baidu.com/v.gif?pid=111&type=1023&url="+encodeURIComponent(p)+"&time="+s}e&&e()},n.src=100===o?p+"?t="+Math.random():s,t.getElementsByTagName("head")[0].appendChild(n)
Oct 25, 2024 13:27:43.136841059 CEST	1236	IN	Data Raw: 68 61 64 2e 6a 73 3f 74 74 3d 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 70 61 73 73 70 6f 72 74 2e 5f 67 65 74 4d 6f 64 75 6c 65 28 70 29 3b 69 66 28 21 73 29 Data Ascii: had.js?tt="+(new Date).getTime(),!0,function(){var s=passport._getModule(p);if(!s)throw new Error("load "+p+"module script error.");e&&e(s)})}var n=passport.getDomain()+a,p=s+".js",o=passport._getModule(p);o?e&&e(o):passport._load(n,!0,t)},pas
Oct 25, 2024 13:27:43.136877060 CEST	1236	IN	Data Raw: 69 6e 5f 38 32 34 35 65 66 39 2e 6a 73 22 29 3b 76 61 72 20 63 3d 7b 6c 6f 67 69 6e 3a 6e 2c 6c 6f 67 69 6e 5f 74 61 6e 67 72 61 6d 3a 70 2c 73 6d 73 6c 6f 67 69 6e 45 6e 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 73 6d 73 6c 6f 67 69 6e 45 6e 5f Data Ascii: in_8245ef9.js");var c={login:n,login_tangram:p,smsloginEn:"/passApi/js/smsloginEn_4956c6c.js"b50,smsloginEn_tangram:"/passApi/js/smsloginEn_tangram_41dfec3.js",loginWLtoPC:"/passApi/js/loginWLtoPC_0c3b87b.js",accConnect:"/passApi/js/accCon
Oct 25, 2024 13:27:43.136909962 CEST	848	IN	Data Raw: 64 43 61 72 64 56 65 72 69 66 79 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 73 65 63 6f 6e 64 43 61 72 64 56 65 72 69 66 79 5f 39 33 39 66 35 63 35 2e 6a 73 22 2c 73 65 63 6f 6e 64 43 61 72 64 56 65 72 69 66 79 5f 74 61 6e 67 72 61 6d 3a 22 2f 70 Data Ascii: dCardVerify:"/passApi/js/secondCardVerify_939f5c5.js",secondCardVerify_tangram:"/passApi/js/secondCardVerify_tangram_ffb3951.js",IDCertifyQrcode:"/passApi/js/IDCertifyQrcode_89e4e0f.js",IDCertifyQrcode_tangram:"/passApi/js/IDCertifyQrcode_tang
Oct 25, 2024 13:27:43.136946917 CEST	1236	IN	Data Raw: 36 65 33 30 2e 6a 73 22 2c 72 65 61 6c 55 73 65 72 54 61 67 5f 74 61 6e 67 72 61 6d 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 72 65 61 6c 55 73 65 72 54 61 67 5f 74 61 6e 67 72 61 6d 5f 32 62 63 39 61 64 61 2e 6a 73 22 2c 62 69 6e 64 3a 22 2f 70 Data Ascii: 6e30.js",realUserTag_tangram:"/passApi/js/realUserTag_tangram_2bc9ada.js",bind:"/passApi/js/bind_c50879a.js",bind_tangram:"/passApi/js/bind_tangram_fa33897.js",multiBind:"/passApi/js/multiBind_d3f9413.js",multiBind_tangram:"/passApi/js/multiBi
Oct 25, 2024 13:27:43.136976004 CEST	51	IN	Data Raw: 74 2e 5f 75 73 65 28 6c 2c 63 5b 6c 5d 2c 65 29 7d 29 3a 70 61 73 73 70 6f 72 74 2e 5f 75 73 65 28 6c 2c 63 5b 6c 5d 2c 65 29 7d 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: t._use(l,c[l],e)}):passport._use(l,c[l],e)};0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49848	45.113.194.250	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:27:43.203671932 CEST	499	OUT	GET /passApi/js/wrapper.js?cdnversion=1729855660344&_=1729855653595 HTTP/1.1 Host: passport.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
Oct 25, 2024 13:27:44.241626978 CEST	1236	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Type: application/x-javascript Date: Fri, 25 Oct 2024 11:27:44 GMT Etag: W/"67170f7a-1b8d" Last-Modified: Tue, 22 Oct 2024 02:35:38 GMT Server: BWS Tracecode: 31424426550429895690102519 Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 32 34 0d 0a 76 61 72 20 70 61 73 73 70 6f 72 74 3d 70 61 73 73 70 6f 72 74 7c 7c 77 69 6e 64 6f 77 2e 70 61 73 73 70 6f 72 74 7c 7c 7b 7d 3b 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 75 6c 65 50 6f 6f 6c 3d 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 75 6c 65 50 6f 6f 6c 7c 7c 7b 7d 2c 70 61 73 73 70 6f 72 74 2e 5f 64 65 66 69 6e 65 3d 70 61 73 73 70 6f 72 74 2e 5f 64 65 66 69 6e 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 75 6c 65 50 6f 6f 6c 5b 73 5d 3d 61 26 26 61 28 29 7d 2c 70 61 73 73 70 6f 72 74 2e 5f 67 65 74 4d 6f 64 75 6c 65 3d 70 61 73 73 70 6f 72 74 2e 5f 67 65 74 4d 6f 64 75 6c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 70 61 73 73 70 6f 72 74 2e 5f 6d 6f 64 75 6c 65 50 6f 6f 6c 5b 73 5d 7d 2c 77 69 6e 64 6f 77 2e 75 70 73 6d 73 53 74 6f 72 65 3d 7b 72 65 67 5f 75 70 73 6d 73 3a 22 31 30 36 39 32 39 31 33 30 30 30 33 30 30 30 30 30 32 22 2c 76 65 72 69 66 79 5f 75 70 73 6d 73 3a 22 31 30 36 39 32 39 31 33 30 30 30 33 30 30 [TRUNCATED] Data Ascii: a24var passport=passport\|\|window.passport\|\|{};passport._modulePool=passport._modulePool\|\|{},passport._define=passport._define\|\|function(s,a){passport._modulePool[s]=a&&a()},passport._getModule=passport._getModule\|\|function(s){return passport._modulePool[s]},window.upsmsStore={reg_upsms:"106929130003000002",verify_upsms:"106929130003000004",verify_text_upsms:"1069 2913 0003 000 004"},window.YY_TPL_CONFIG="yylive,yyliveserver,yyanchor,pcyy,yyudbsec,bdgameassist,yoyuyin,";try{if(window.localStorage&&window.localStorage.getItem("upsms-pcApi"))try{window.upsmsStore=JSON.parse(window.localStorage.getItem("upsms-pcApi"))}catch(e){}}catch(e){}var passport=window.passport\|\|{};passport._load=passport._load\|\|function(s,a,e){var t=document,n=t.createElement("SCRIPT");if(a){n.type="text/javascript",n.charset="UTF-8";var p=s.split("?")[0],o=Math.round(1e3*Math.random()),i=(new Date).getTime();n.readyState?n.onreadystatechange=function(){if(
Oct 25, 2024 13:27:44.241669893 CEST	1236	IN	Data Raw: 22 6c 6f 61 64 65 64 22 3d 3d 3d 6e 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 72 65 61 64 79 53 74 61 74 65 29 7b 69 66 28 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 31 Data Ascii: "loaded"===n.readyState\|\|"complete"===n.readyState){if(n.onreadystatechange=null,100===o){var s=(new Date).getTime()-i;(new Image).src=document.location.protocol+"//nsclick.baidu.com/v.gif?pid=111&type=1023&url="+encodeURIComponent(p)+"&time="
Oct 25, 2024 13:27:44.241689920 CEST	424	IN	Data Raw: 20 61 3b 72 65 74 75 72 6e 20 61 3d 70 61 73 73 70 6f 72 74 26 26 22 68 74 74 70 73 22 3d 3d 3d 70 61 73 73 70 6f 72 74 2e 5f 70 72 6f 74 6f 63 6f 6c 3f 22 68 74 74 70 73 3a 22 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3f 77 69 6e 64 6f 77 Data Ascii: a;return a=passport&&"https"===passport._protocol?"https:":window.location?window.location.protocol.toLowerCase():document.location.protocol.toLowerCase(),s[a]\|\|s["https:"]},passport._use=passport._use\|\|function(s,a,e){function t(){passport._
Oct 25, 2024 13:27:44.241720915 CEST	1236	IN	Data Raw: 0a 31 30 30 30 0d 0a 22 29 3b 65 26 26 65 28 73 29 7d 29 7d 76 61 72 20 6e 3d 70 61 73 73 70 6f 72 74 2e 67 65 74 44 6f 6d 61 69 6e 28 29 2b 61 2c 70 3d 73 2b 22 2e 6a 73 22 2c 6f 3d 70 61 73 73 70 6f 72 74 2e 5f 67 65 74 4d 6f 64 75 6c 65 28 70 Data Ascii: 1000");e&&e(s)})}var n=passport.getDomain()+a,p=s+".js",o=passport._getModule(p);o?e&&e(o):passport._load(n,!0,t)},passport.loadPass=function(s,a){var e=passport.getDomain()+s,t=document.createElement("link");t.rel="stylesheet",t.type="text
Oct 25, 2024 13:27:44.241734028 CEST	225	IN	Data Raw: 2f 6a 73 2f 73 6d 73 6c 6f 67 69 6e 45 6e 5f 74 61 6e 67 72 61 6d 5f 34 31 64 66 65 63 33 2e 6a 73 22 2c 6c 6f 67 69 6e 57 4c 74 6f 50 43 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 6c 6f 67 69 6e 57 4c 74 6f 50 43 5f 30 63 33 62 38 37 62 2e 6a 73 Data Ascii: /js/smsloginEn_tangram_41dfec3.js",loginWLtoPC:"/passApi/js/loginWLtoPC_0c3b87b.js",accConnect:"/passApi/js/accConnect_5cdef16.js",accConnect_tangram:"/passApi/js/accConnect_tangram_05a70e7.js",accRealName:"/passApi/js/accRea
Oct 25, 2024 13:27:44.241749048 CEST	1236	IN	Data Raw: 6c 4e 61 6d 65 5f 66 35 35 33 62 35 62 2e 6a 73 22 2c 61 63 63 52 65 61 6c 4e 61 6d 65 5f 74 61 6e 67 72 61 6d 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 61 63 63 52 65 61 6c 4e 61 6d 65 5f 74 61 6e 67 72 61 6d 5f 64 36 61 65 64 39 66 2e 6a 73 22 Data Ascii: lName_f553b5b.js",accRealName_tangram:"/passApi/js/accRealName_tangram_d6aed9f.js",checkPhone:"/passApi/js/checkPhone_43658c5.js",checkPhone_tangram:"/passApi/js/checkPhone_tangram_3bb7007.js",checkIDcard:"/passApi/js/checkIDcard_767bde2.js",c
Oct 25, 2024 13:27:44.241766930 CEST	1236	IN	Data Raw: 61 6d 5f 39 36 37 62 64 62 30 2e 6a 73 22 2c 6c 6f 67 69 6e 57 61 70 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 6c 6f 67 69 6e 57 61 70 5f 31 65 34 39 31 63 64 2e 6a 73 22 2c 72 65 67 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 72 65 67 5f 61 37 39 Data Ascii: am_967bdb0.js",loginWap:"/passApi/js/loginWap_1e491cd.js",reg:"/passApi/js/reg_a7932e1.js",reg_tangram:"/passApi/js/reg_tangram_5d50d5b.js",regPhone:"/passApi/js/regPhone_0b82a7d.js",regPhone_tangram:"/passApi/js/regPhone_tangram_9061a06.js",f
Oct 25, 2024 13:27:44.241780043 CEST	172	IN	Data Raw: 6a 73 22 2c 75 6e 69 5f 72 65 62 69 6e 64 47 75 69 64 65 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 75 6e 69 5f 72 65 62 69 6e 64 47 75 69 64 65 5f 36 62 36 38 39 38 38 2e 6a 73 22 2c 75 6e 69 5f 72 65 62 69 6e 64 47 75 69 64 65 5f 74 61 6e 67 72 Data Ascii: js",uni_rebindGuide:"/passApi/js/uni_rebindGuide_6b68988.js",uni_rebindGuide_tangram:"/passApi/js/uni_rebindGuide_tangram_aac9967.js",ucTravelComplete:"/passApi/js//ucTra
Oct 25, 2024 13:27:44.241795063 CEST	373	IN	Data Raw: 31 36 39 0d 0a 76 65 6c 43 6f 6d 70 6c 65 74 65 2e 6a 73 22 2c 75 63 54 72 61 76 65 6c 43 6f 6d 70 6c 65 74 65 5f 74 61 6e 67 72 61 6d 3a 22 2f 70 61 73 73 41 70 69 2f 6a 73 2f 75 63 54 72 61 76 65 6c 43 6f 6d 70 6c 65 74 65 5f 74 61 6e 67 72 61 Data Ascii: 169velComplete.js",ucTravelComplete_tangram:"/passApi/js/ucTravelComplete_tangram_03648e8.js"},d={login:o,ucTravelComplete:"/passApi/css/ucTravelComplete_329b943.css"},l=s+t;2===arguments.length&&(e=a),a&&a.tangramInst&&(passport.tangramInst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	54647	185.10.104.115	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:10.486596107 CEST	462	OUT	GET /r/www/cache/static/@baidu/cosmic-medical/tokens_fbc0ef3a.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 13:28:11.330780983 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Mon, 14 Oct 2024 01:41:19 GMT Last-Modified: Thu, 10 Oct 2024 04:39:07 GMT ETag: "facf67d639133f74fa41b57afbc0ef3a" Cache-Control: max-age=31536000 Content-Encoding: gzip Age: 375475 Accept-Ranges: bytes Content-MD5: +s9n1jkTP3T6QbV6+8DvOg== x-bce-content-crc32: 1623166867 x-bce-debug-id: 4aEEvKePPLd244QJkU7B9EpzLmNZVaCJu3oyOyLpzN54xrJYA2lTYKz/hii4YFcwlWLuf1MD1Cg/IY+uMuTbew== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 43b32bba-9551-4b59-ad5d-83f364e6fa76 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:41:19 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 530 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: * Data Raw: 32 31 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8c 96 ef 6e 82 40 10 c4 1f c6 2f 35 e9 19 5a 1b ab f6 69 10 0e 25 51 31 27 21 6d 8c ef 5e c3 1f 61 77 67 f7 fc 62 62 f6 37 c3 30 8b 9c 8b ac ba ba 4b f6 be 0d 55 55 df 9c 7b 7c 3d 3d 3e 8e 55 70 bb 2a e4 3e b8 f2 dc f8 70 f5 db 59 51 14 ab 1f 40 6c 67 49 92 ad b3 f5 66 43 a7 b5 ff ad 5d 75 76 97 50 9e d2 f0 e7 8e e5 fe 50 0f b0 89 b6 d7 02 c4 73 8c 3c fa b8 8c f9 f4 16 45 33 7d 7c 33 76 8f b9 84 65 1b 39 9c ac cd 9e 66 75 d9 78 0c f4 a1 4c 64 ef 72 7f e6 36 2b b6 90 69 4b a6 1d df cd c0 e2 de f9 12 4d 6b d6 30 45 bf 72 13 46 ee cb a5 68 02 7b ab 18 72 e5 3b 24 cd e5 e5 35 dd 1d 7d 6e d6 3c 29 65 e4 e5 6f 84 b3 5d 98 d8 15 58 2f 1c 17 4f 2a aa 91 8b 12 de fd d8 10 47 45 1c 5e 26 17 70 ef f6 ae 0f 55 33 be 1d 60 60 42 f0 9f 2a 59 89 e1 c5 1b ee d1 17 1f 65 c3 98 b5 6a 86 85 1b 20 0a b1 b3 b1 53 2b 03 6f 9e b0 49 71 5f 3c 60 77 f2 79 99 a5 c7 5b 2b a5 89 86 Data Ascii: 212n@/5Zi%Q1'!m^awgbb70KUU{\|==>Up>pYQ@lgIfC]uvPPs<E3}\|3ve9fuxLdr6+iKMk0ErFh{r;$5}n<)eo]X/OGE^&pU3``B*Yej S+oIq_<`wy[+
Oct 25, 2024 13:28:11.330918074 CEST	233	IN	Data Raw: d7 77 93 86 37 94 b8 9f cf bb cb 92 99 a6 a1 2c ac 55 4a 21 66 3a 45 3d 80 da 96 42 1d 3b 37 84 92 ce 2d ad 76 eb 88 62 3e fc a4 91 1e 8c d0 f4 96 12 f4 d5 bf 14 85 68 32 84 77 ac e9 c8 58 64 9c 9e 60 52 4a e6 20 eb 70 ff 9a 01 80 80 8b 3c f4 b0 Data Ascii: w7,UJ!f:E=B;7-vb>h2wXd`RJ p<l/rD47b8:D2aapB:6+hkOBK4t'g%E5kdm8f;u-7a7x2}p:>=#Tr?`b
Oct 25, 2024 13:28:11.333406925 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	54668	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:12.992840052 CEST	692	OUT	GET /it/u=2127458306,4165955239&fm=58 HTTP/1.1 Host: t12.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:13.957341909 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 1239 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:46:37 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: ebf89842595c2d763c306f3cecda16f1 Age: 69273 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:46:37 GMT Ohc-Cache-HIT: sh6ct65 [2], cdix129 [2] Ohc-File-Size: 1239 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 2a 10 00 01 03 03 04 01 04 01 05 01 00 00 00 00 00 00 01 02 03 04 00 05 11 06 07 12 21 31 13 14 41 51 22 08 15 23 33 81 62 ff c4 00 19 01 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 ff c4 00 1e 11 01 01 01 01 00 01 05 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 11 13 31 41 21 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2a 94 a5 02 94 a5 02 94 a5 02 94 a5 02 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"!1AQ"#3b1A!?DZya%JQ=<5Vh)YB@R'8x%IL{[+Rag:mmn0nd%c$v;[;2q:HXPjU3W"<U&3<On2RdRYGsO_uB:+t51eXH7UnDVxYxI<fiftdh)S[C&5IFa?xcVOwxf\|UWw6MP%Y8egRQN\|X/6),]
Oct 25, 2024 13:28:13.957364082 CEST	505	IN	Data Raw: 73 f1 91 5f 4f b5 a7 af ec 6d d4 a8 16 e8 16 c8 17 3e 21 71 63 fb 97 14 90 b0 07 f6 38 80 8c 9c 74 02 40 48 c0 1d 8a c1 3d 66 dc 96 2f 90 10 dc 18 92 60 2a 30 33 9e 6a e9 21 0a f5 70 af c5 3c 9d ce 32 12 3b 1f 3d 7c d6 6f 27 a4 eb d7 5b cf eb 67 Data Ascii: s_Om>!qc8t@H=f/`03j!p<2;=\|o'[gr1UX3vrq:eDRP]E@gNi;RkC.wB!TRUHWA eLY\|r!<2\|\|nj={sQ e)=c"gO}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	54669	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:12.992986917 CEST	692	OUT	GET /it/u=3057315626,2433500578&fm=58 HTTP/1.1 Host: t12.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:13.961097002 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 1009 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:38:53 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 9f305385b56a95f7648a3911d5cc8f84 Age: 67033 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:38:53 GMT Ohc-Cache-HIT: sh6ct51 [2], xaix191 [2] Ohc-File-Size: 1009 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 08 ff c4 00 32 10 00 01 03 02 04 05 01 05 09 01 00 00 00 00 00 00 01 00 02 03 04 11 05 06 12 21 13 31 41 51 61 14 07 22 23 91 a1 16 32 43 52 53 71 72 81 c1 d1 ff c4 00 18 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff c4 00 23 11 00 02 02 01 04 02 02 03 00 00 00 00 00 00 00 00 00 01 02 03 11 04 12 21 31 41 b1 71 81 13 61 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 7a [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"2!1AQa"#2CRSqr#!1Aqa?z" "")R+.{:Ym$WR7IvHj6_As[=^:c<rmo 92p6GD)N>I8;karIYrcMac+[@E=:jV)TRw>h)>a\|n&27}I';mu.-&(Lb.?dni>SH>es.sIQd9z8MqXN31Ts6>+-m}I.J\|i>ekuMGbik&hvr^u9X&y
Oct 25, 2024 13:28:13.961445093 CEST	275	IN	Data Raw: 0e 8a be 6a 76 81 6d 31 80 41 f3 b8 2b 94 cc 99 3f 31 e2 58 bc f5 94 39 ca aa 82 09 18 c6 b2 06 f1 2d 19 02 c4 8d 2f 03 73 bf 25 d8 ce ca 87 68 e1 4c c6 58 7b da 99 aa ff 00 55 58 23 aa 6c 80 cb 51 1b db d4 08 ad f5 ba db 4f aa b3 4f 3d d5 f7 f0 Data Ascii: jvm1A+?1X9-/s%hLX{UX#lQOO=lS0LSf$n#$:HFv\iq.!#uXl:u-C@8\{VVel^\Tc2G_Yc#Kn-c,Y%qXAd{"Fza]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	54670	106.225.194.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.022659063 CEST	888	OUT	GET /poster/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F284bf3dba859027de945da2b4e91374b.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2004&size=f64,64&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=8296411e868e0aa9ce66e92c4fa920f9 HTTP/1.1 Host: gimg4.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.026973963 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 1674 Connection: keep-alive Expires: Mon, 04 Nov 2024 06:44:11 GMT Last-Modified: Tue, 27 Jan 1970 00:00:00 GMT ETag: f6c7ef2027d84b1fbfc07b95f3ceecb5 Age: 369765 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Sat, 05 Oct 2024 06:44:11 GMT Ohc-Cache-HIT: nc3ct68 [2], qdix104 [2], qdix104 [2], wzix68 [2], qdix104 [2], czix104 [2], qdix104 [2], qdix104 [2] Ohc-File-Size: 1674 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: 52 49 46 46 82 06 00 00 57 45 42 50 56 50 38 20 76 06 00 00 f0 20 00 9d 01 2a 40 00 40 00 00 00 00 25 b0 03 38 d5 05 65 f7 05 f5 5f c3 0f d7 6f f6 3f 25 94 27 e5 5f 64 ff 59 ff b3 e6 10 f1 9f f7 4f c8 4f ee fe e9 7f aa fe 20 7c 90 f1 24 fe bf f9 1d da 8b cc 07 f1 8f ea 9f e6 ff c0 7a b3 7b 0e f4 00 fe 6b fd 6f ac 5b d0 03 f5 a7 d5 3f fd 87 fc 7f f3 7f 04 bf b1 3f f5 ff bc 7c 01 fe aa 5d c7 fd d3 f1 a7 aa f3 c8 de b5 7e e5 66 01 fb d7 e3 97 e6 06 b0 5f f2 ef ea 9f 91 5f 94 b9 ce ff 4b ff 0d f8 f5 f9 19 af 1b f9 3b cc 0d 1e 9f e9 7f 15 7d f2 bf ba fb 8e f6 c5 f9 6f f5 af f5 9f de 3f 73 3f b5 fd 81 ff 1a fe 6d fe 0b fb 5f ed 87 f5 ff fd 9e 20 3d 0f ff 4e 8e cd 6f 98 b4 af a5 a2 ea d3 44 1e 8a 07 ce a6 b3 e1 5d 75 aa 45 6d 98 29 53 07 6f 2e 21 37 ac ec db fe e4 2f 06 0f ef d9 88 c5 55 2b ee 3d b9 ef d1 c2 c3 41 e2 49 58 bf 51 e5 23 36 5b d9 73 52 e0 39 1a ab 59 c5 b0 00 fe ff ff be 2d 59 f9 be 94 f0 32 7a 4a a4 9e b1 a4 85 9b 7c 87 f2 31 dc f5 ea 9b 2e 50 39 f2 02 09 0c e7 53 97 8e f9 b5 95 f9 2e 3e ec [TRUNCATED] Data Ascii: RIFFWEBPVP8 v @@%8e_o?%'_dYOO \|$z{ko[??\|]~f__K;}o?s?m_ =NoD]uEm)So.!7/U+=AIXQ#6[sR9Y-Y2zJ\|1.P9S.>OpQOeBjYX5_l7e)D/igw^fqq4!U3uL u0D0uBMXeL$)bia$EO82vj.Vyyr`d~]G-*11mr}/Z/R{twQ;b?:N mD\ey<Lob"uqfeK\|%4C<g%LDR4W-^t?EDt
Oct 25, 2024 13:28:14.027108908 CEST	1018	IN	Data Raw: 91 cc ab f5 0d 44 66 ef c1 55 1b 86 28 16 e4 1d f3 79 99 b3 82 12 b7 62 dc a6 6d 13 ae 58 5f 45 8f 31 ce ba cf b4 51 be 23 ab 33 ac 4a 89 64 48 ed 63 bb 6b a0 04 7b 4f d4 2f 08 45 11 f3 b9 41 12 ef 7e a7 25 02 0b 12 eb 2d 3d 72 a8 e9 53 49 98 a4 Data Ascii: DfU(ybmX_E1Q#3JdHck{O/EA~%-=rSIisCHZk{l+C'n ,!lcNMJ]<&[VOfdwQte1a&fW\g@sS'52v\|\|I,$#\|o?~O!T=K@91x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	54671	125.74.42.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.077131033 CEST	692	OUT	GET /it/u=3128749531,3731582790&fm=58 HTTP/1.1 Host: t11.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.773144007 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/jpeg Content-Length: 1102 Connection: keep-alive Expires: Sun, 10 Nov 2024 05:01:58 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: ff595645245fce847d7a1aea4d2fffc5 Age: 992851 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 11 Oct 2024 05:01:58 GMT Ohc-Cache-HIT: lz3ct79 [2], csix79 [2] Ohc-File-Size: 1102 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 02 04 06 07 03 08 ff c4 00 2e 10 00 01 04 02 01 03 03 03 02 07 01 00 00 00 00 00 01 00 02 03 11 04 05 12 06 21 31 13 14 41 15 22 51 42 a1 07 16 32 61 71 81 91 b1 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 04 02 05 ff c4 00 2c 11 00 01 03 02 04 03 07 05 00 00 00 00 00 00 00 00 00 01 02 11 03 31 04 12 21 51 32 61 81 05 13 14 23 41 a1 e1 53 62 91 c1 f0 ff da 00 0c 03 01 00 02 11 03 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK".!1A"QB2aq,1!Q2a#ASb?)D@DDXY;mV,'edXvz!D2f\|CE3~!,h$I%HHElodo#+;bc$ee_Js2z3Y$Ol'K%t0nxwNo.~\W,n.+A`UEUWSj*G9k%nPE1yl -kZG+EX;Vot0d6CZ]\|?0#h5ci\~Se>$[G 8\5Jt7Y[GKuv;qY
Oct 25, 2024 13:28:14.773770094 CEST	368	IN	Data Raw: 7b 96 c4 e9 3d 36 ca 7f 49 ee 41 e1 f8 3e 6f b2 d9 0e c6 61 a8 f7 9e 9b 3d 4f 5f d3 e3 de ab d5 e1 ff 00 8a 0d 9d 19 20 c3 8b 4c ed bb 9d a0 8b 20 4c cc 3f 40 7a 94 1f cd b1 19 2f bc 61 d5 f1 74 2a d4 cc 9a 89 1f 17 a1 ef 5c 20 13 7a ad 60 8c 79 Data Ascii: {=6IA>oa=O_ L L?@z/at*\ z`yN5~?_GsDz.h;hK7cWdgkcQbe=[SfWO3&Kdct^_ffjs/])1mXUkej:xw2&8.dw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	54673	183.61.177.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.077627897 CEST	691	OUT	GET /it/u=3772794375,258756471&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.078821898 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 2770 Connection: keep-alive Expires: Sat, 16 Nov 2024 10:23:20 GMT Last-Modified: Fri, 23 Jan 1970 00:00:00 GMT ETag: 6aec367fbdfc0527ac0c8bf3db04a0e7 Age: 336858 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 17 Oct 2024 10:23:20 GMT Ohc-Cache-HIT: dg4ct53 [2], qdix171 [2] Ohc-File-Size: 2770 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 00 01 05 06 08 04 03 02 ff c4 00 39 10 00 01 03 03 03 02 04 03 07 01 08 03 00 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 41 51 61 14 22 81 08 15 23 32 42 71 91 52 17 33 34 62 64 72 82 b1 92 a1 e1 ff c4 00 1c 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 06 01 03 07 00 08 ff c4 00 2f 11 00 01 03 03 02 03 07 02 07 00 00 00 00 00 00 00 01 02 03 11 00 04 21 05 41 12 31 51 06 22 32 42 71 81 a1 61 d1 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"9!1AQa"#2BqR34bdr/!A1Q"2Bqa3?xwU>(Pe3#\|zKAiLjxBPd#83K5UfL\|-U$q1:MERd;u>pwZ:,BI[8 V,.Pkv}.pT<x%p$(33qu\.rD'c2Z\|E$Gv!4K>;wu{\|$e d:f!%d/<w7f1TTWiPDdANZR$q9u+o}vZu$XJ@O
Oct 25, 2024 13:28:14.078838110 CEST	1236	IN	Data Raw: 69 74 78 97 07 57 a9 50 13 4f a9 50 6c ab 9a a0 27 c6 83 24 ed 4c a0 d2 4f 64 83 c0 52 b7 25 3e 81 7c 67 8d 6a d3 b4 76 9c 71 ef c7 27 85 b2 73 b1 e1 9e 20 37 98 c8 8f 7a ca dd 20 08 de b5 e2 e4 c6 6c 80 b9 0c a4 91 91 b9 c0 32 3d 79 3a a7 5e bd Data Ascii: itxWPOPl'$LOdR%>\|gjvq's 7z l2=y:^Um(r]VG\|'{ETj'TeRgJ2l%# kM=gHeQ4MoSnJ_uSkG/;F5+EBlKgwiuRv2c^c/m A
Oct 25, 2024 13:28:14.078854084 CEST	424	IN	Data Raw: df 50 2a 16 ad 61 33 68 92 0b 25 6a 06 44 27 8e 18 94 3d 14 07 01 5e 8b 1f 30 f7 1c 68 fb fe c5 34 50 55 68 b3 c5 d0 f2 3e f8 8f 9a 44 9b a5 0f 10 ad a8 e5 3e 03 b3 9b 9e e4 18 ab 96 d8 c2 1f 53 29 2e 20 7a 05 63 23 f9 d7 56 a1 ec eb 82 05 d3 6e Data Ascii: Pa3h%jD'=^0h4PUh>D>S). zc#VnCSJ)B;KB?csR(x#"DIlep{/r`T{2B^N} jy>TpBW:=cCy8p(cEJ;VLR\
Oct 25, 2024 13:28:14.078867912 CEST	377	IN	Data Raw: fb 3e de 17 03 68 9b 5c 75 ab 76 23 9f 30 4b e8 f1 24 a8 1f 3f 08 10 13 ff 00 22 0f b6 89 d1 7e cd 16 52 22 ec 93 58 af be fe 39 75 2e b4 d8 cf b2 42 0f fd e8 9b ae d3 69 d6 ca e0 2b 93 f4 cf cf 2f 9a e3 a1 a5 ab 20 54 47 d8 ce b8 fc 98 97 05 0d Data Ascii: >h\uv#0K$?"~R"X9u.Bi+/ TGY'G><uylUPMS7mP?P:}1B ;QngU*~vR-9z"ZYop0h[m\4`V}-V# [ZY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	54672	125.74.42.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.077697992 CEST	691	OUT	GET /it/u=2201993677,788292129&fm=58 HTTP/1.1 Host: t11.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.110877037 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 3293 Connection: keep-alive Expires: Fri, 22 Nov 2024 10:37:48 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: b2a3ba5bc76044c81c882d6de5a09ca3 Age: 175810 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 10:37:48 GMT Ohc-Cache-HIT: lz3ct57 [2], bdix121 [2] Ohc-File-Size: 3293 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 07 08 09 01 02 06 04 03 ff c4 00 35 10 00 01 03 03 03 03 04 00 05 02 05 05 00 00 00 00 01 02 03 04 05 06 11 00 07 08 12 13 21 09 22 31 41 14 24 51 61 81 15 32 16 17 23 42 52 33 54 63 71 83 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 04 05 06 07 08 02 ff c4 00 30 11 00 01 02 05 03 01 07 03 04 03 00 00 00 00 00 00 01 02 03 00 04 05 11 21 06 12 31 41 07 13 32 51 61 71 81 14 16 91 15 72 a1 [TRUNCATED] Data Ascii: JFIFCCKK"5!"1A$Qa2#BR3Tcq0!1A2Qaqr"B?4iBl[vmyWT~}J!-3kZHd>ZqP(?7C)sJPy&;tjH=TnVRxG,K>")':nvfu~S}`wTON\|\|=WkMQKnX@x[&"CR>l.MZ:on.Xq6vnpg:G_lJR`T}1jDn'cQ6r=IK9R(8:?DzRMw@.oOIQnb=H,q!P# '
Oct 25, 2024 13:28:14.110925913 CEST	1236	IN	Data Raw: ea 09 fa 78 72 e5 9a 3d c8 de c5 d5 2e 39 93 68 0a 7c 44 a6 c6 ab 87 11 3e dc 99 f5 05 e4 3c 03 81 95 7f 6a 02 fd cd 2b 09 19 42 87 6a 76 a5 49 29 0a fa fa d5 eb 4c 6a 69 1d 51 4e 13 32 e0 a5 40 d9 48 56 14 95 0e 41 1d 3d 22 b1 5b a3 4d 50 e7 4b Data Ascii: xr=.9h\|D><j+BjvI)LjiQN2@HVA="[MPKdrF4h"#,arPJTpts&eqpa+k=# ,Q)4V.J~?:\rjE$"\*SiyL'.jq="G7fcU
Oct 25, 2024 13:28:14.110941887 CEST	1236	IN	Data Raw: 27 20 94 4a 2e 21 43 f6 52 48 fe 70 75 09 51 ed 3e b6 27 43 3f ab ad 48 b8 ff 00 24 36 06 0d af 6b 90 6e 38 3f c4 7b 93 d2 14 8f a6 df f4 49 4a f3 85 67 23 8c 8b 8b 18 da ed dd 1a ce f0 59 13 af 2d c4 dd 6b de fd a3 c1 5b 8a 72 99 32 4b 6c c5 98 Data Ascii: ' J.!CRHpuQ>'C?H$6kn8?{IJg#Y-k[r2Kl :Xec@FUxG[r7o+t;Rn8$e8=zj7FYSS}qp-kY=)Br$y=)HcpUr8L6nM.u*B)NBJcT:8m
Oct 25, 2024 13:28:14.110974073 CEST	88	IN	Data Raw: 08 23 e7 c7 93 9f 04 bf 4f ae 20 4f 94 e4 d9 3b 32 c2 9c 79 c7 5c 71 42 ad 35 20 a9 cf 0e 1c 07 b0 3a 87 83 8f 91 e3 e3 4f 46 8d 2d a9 85 75 79 c2 4d 97 66 5b 1b 75 6b 40 b2 2c da 52 60 d2 a9 91 c3 10 62 21 6a 50 69 b1 f0 90 54 49 3f c9 27 4a da Data Ascii: #O O;2y\qB5 :OF-uyMf[uk@,R`b!jPiTI?'J4h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	54674	183.61.177.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.079709053 CEST	692	OUT	GET /it/u=2178613570,2866529354&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.064471960 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 1311 Connection: keep-alive Expires: Fri, 22 Nov 2024 10:12:31 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 935cbb3f7d540c2364020fa563f18b66 Age: 177157 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 10:12:31 GMT Ohc-Cache-HIT: dg4ct58 [2], czix74 [2] Ohc-File-Size: 1311 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 07 04 05 06 08 03 ff c4 00 2f 10 00 01 03 04 00 04 04 06 01 05 00 00 00 00 00 00 01 02 03 04 00 05 06 11 07 12 21 31 13 22 41 51 08 14 15 42 61 71 91 23 33 52 62 81 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 03 07 ff c4 00 2d 11 00 01 03 03 02 03 05 09 00 00 00 00 00 00 00 00 01 00 02 11 03 04 21 05 31 12 22 51 41 42 61 71 f0 13 62 72 81 91 a1 b1 c1 e1 ff da 00 0c 03 01 00 02 11 [TRUNCATED] Data Ascii: JFIFHHC!"$"$CKK"/!1"AQBaq#3Rb-!1"QABaqbr?)J"R%)J"R%)J"RTE*uO)TU\9hom!%nIyH$M?+=d.AS2IQRzeu0`eZ:tQJSTEC4FeqUD6e(j,M\5wljl\5KZjOnv:oN-YuAlev=z}U}d^Sk]3,VT9BR+$}}UehcVM,4iR81^}+prLv!1_RWT~;5Lqry?yYv9o}I$!oiZ=#td\##11TBj2B}V
Oct 25, 2024 13:28:14.065193892 CEST	577	IN	Data Raw: a1 e9 eb e9 5b 49 76 4c b6 17 c3 93 30 58 b3 5c 47 25 f9 c7 ae 90 10 da 90 fb f0 fc 52 54 9e 5e e5 27 cb bd 77 1f 8a b6 d0 2f 2a 9d 42 9c 00 3e 21 8c e3 f7 d7 75 07 58 d1 ad ed 2c dc f6 d4 e2 74 8c 76 f7 a7 a4 8c 0e cf 25 83 99 71 46 db 62 91 38 Data Ascii: [IvL0X\G%RT^'w/*B>!uX,tv%qFb8N=r+4-+E"92c%$L(M`wMwVc.[)0O%:p_p$_]%X7ck\V<)@!S^Vu65]$g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	54675	183.61.177.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.080267906 CEST	692	OUT	GET /it/u=4123943363,3931750118&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.077279091 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/jpeg Content-Length: 1984 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:41:27 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 44f605c261028bdd9750bb87f7952904 Age: 171962 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:41:27 GMT Ohc-Cache-HIT: dg4ct59 [2], suzix59 [2] Ohc-File-Size: 1984 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 07 05 06 00 03 08 04 02 ff c4 00 45 10 00 01 03 03 02 02 06 05 06 09 0d 00 00 00 00 00 01 02 03 04 00 05 11 06 21 07 31 12 13 41 51 81 91 22 32 61 71 d2 08 14 16 23 a1 d1 15 17 24 42 55 82 92 b1 c1 33 35 44 45 46 52 54 62 72 83 93 94 a3 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 00 01 02 03 05 04 07 ff c4 00 2a 11 00 01 03 02 05 03 03 05 01 00 00 00 00 00 00 00 01 00 02 03 04 11 05 06 12 21 [TRUNCATED] Data Ascii: JFIFHHC!"$"$CKK"E!1AQ"2aq#$BU35DEFRTbr!1AQ"aq2?FJ]SZ8mLH?)T:?'&Bi!$J3;:7z:qRmMVg0C(gu47:sD[J9([}=4Wj];g8)8$uaiiVLFa>nwso_/G#l\_)YI;mADQ}DoTv89=NVqHi(l@42;Zww$[)$h li+J}JzRmM4f)=Nu
Oct 25, 2024 13:28:14.077312946 CEST	1236	IN	Data Raw: b2 d3 2e e2 f6 9c 86 b6 e3 34 a7 54 94 37 b9 00 67 03 7a 85 d0 71 34 3e ab 82 fb cd 69 58 71 5d 8e e0 43 8d 28 74 8e 08 c8 20 8e ce 7e 54 c0 9f 19 b9 90 9f 88 e8 fa b7 db 53 6a f7 28 63 f8 d2 27 86 97 35 e9 6d 72 a8 13 95 d5 b4 ea d5 0e 47 4b 60 Data Ascii: .4T7gzq4>iXq]C(t ~TSj(c'5mrGK`z*Fv(ct45Fs{&<g`~IH;En[XeO?' :~8JNfc^^s:,~6Zj1{{7ol<[N-(a<k~hp?dD
Oct 25, 2024 13:28:14.077326059 CEST	15	IN	Data Raw: bd 96 f3 42 87 45 29 e4 39 d1 aa 15 ab ff d9 Data Ascii: BE)9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	54676	183.61.177.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:13.081688881 CEST	692	OUT	GET /it/u=1872327486,3058802280&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:14.194767952 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/jpeg Content-Length: 1173 Connection: keep-alive Expires: Wed, 20 Nov 2024 03:17:43 GMT Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT ETag: bc720b8836330bf45e770e91e2843609 Age: 127597 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:17:43 GMT Ohc-Cache-HIT: dg4ct57 [2], cdix78 [2], cdix78 [2] Ohc-File-Size: 1173 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 07 02 05 06 01 08 ff c4 00 2b 10 00 01 04 02 01 03 03 03 04 03 00 00 00 00 00 00 01 00 02 03 04 05 11 06 12 21 31 13 22 41 23 51 61 07 14 71 81 25 42 54 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 02 03 04 06 ff c4 00 26 11 00 02 01 04 01 02 06 03 00 00 00 00 00 00 00 00 00 01 02 03 11 21 31 04 05 41 12 22 32 51 71 c1 81 91 f0 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 29 11 10 04 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"+!1"A#Qaq%BT&!1A"2Qq?)D@DDXO,PBD=v<O-yHHCmBUxEt(sj+0?v#yVIrjJ"i?$M"@r\|b,trFzaOl+[\d0akOftO_eo\,9l`Z =k{H\1>2VL!nIm,5gTue}tk{*av21f(Xuc\|.hl`u:]f~1d-^G&5M{GOqyq\|-Vg6I'C
Oct 25, 2024 13:28:14.195033073 CEST	451	IN	Data Raw: 6e 27 a8 e8 0f 03 64 eb 6a 14 df a7 3c 62 cd 28 e8 de 8a f5 da 8c 7b a5 35 ec 5e 95 d1 be 57 3d cf 74 ae 6f 56 9c f2 e7 93 b3 fd 2b 0e 2c 25 18 79 bf bf 7e fb fc 94 dd 46 ac 2a d6 bc 34 be 3d db 5a c6 15 96 31 8c 60 ad 2f 5d c9 cf 82 c7 65 ea e7 Data Ascii: n'dj<b({5^W=toV+,%y~F4=Z1`/]en_HA4Rha\|rH#kq ,x ,\|Pn^=G53gzAx&c>Y45_~gD:KZ],i;fG9++&@%fd.dy_#16F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	54692	171.214.24.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:15.860234022 CEST	817	OUT	GET /it/u=4060384012,3958510345&fm=3035&app=3035&size=f242,162&n=0&g=0n&f=JPEG?s=0EC3885612457CE20880D84B030020F5&sec=1729942089&t=36d7dc5a32cbd0372acdf6fd1c3498ae HTTP/1.1 Host: t7.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:16.911571026 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:16 GMT Content-Type: image/jpeg Content-Length: 7441 Connection: keep-alive Expires: Sun, 24 Nov 2024 03:21:19 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: ad279ac4dc069020e026d56de3872c36 Age: 28826 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 03:21:19 GMT Ohc-Cache-HIT: cd10ct60 [2], xiangyix162 [2] Ohc-File-Size: 7441 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a1 00 f2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 05 06 07 08 03 02 09 ff c4 00 45 10 00 01 03 03 01 05 04 05 09 04 09 05 01 00 00 00 01 00 02 03 04 05 11 06 07 12 21 31 41 13 51 61 71 08 14 22 32 81 15 33 42 52 62 91 a1 b1 c1 23 72 82 92 16 24 43 44 73 a2 c2 d1 e1 25 53 63 b2 f0 83 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 33 11 00 02 01 03 02 04 04 04 06 01 05 00 00 00 00 00 00 01 02 03 04 11 12 21 05 [TRUNCATED] Data Ascii: JFIFHHC!"$"$C"E!1AQaq"23BRb#r$CDs%Sc3!1AQ"aq#2B3R?)(Dc0Py{DTt :W@$rIY*tRJYodDTTtQHM)C3[/3;z.UDkk`V:Z v`oxO%JRS$c\|vnO;zUuyf/aG`pm}#=Q3iIn]arZ#KODKIYeNWyyz?0kUYo6.>0~x/i[3j;&fr.vVNv353u8
Oct 25, 2024 13:28:16.911637068 CEST	1236	IN	Data Raw: 82 b8 d7 14 2a 52 78 68 fa 37 0c e2 76 d7 90 52 83 fe fa ae 8c a7 78 e2 a1 a3 03 05 7a 10 be 4b 56 3e 47 6f 72 f9 a4 75 5d ef 4b d4 ba 5b 5d 57 ec 5e 41 96 9a 5f 6a 29 7c c7 43 e2 30 56 f3 d0 da fe c9 aa 03 29 83 fd 46 e4 7f ba 4c f1 97 9f fc 6e Data Ascii: Rxh7vRxzKV>Goru]K[]W^A_j)\|C0V)FLn.'PsAk6k\|'cS\k\|VV[;Eh*?8qO%;u~3Wm>z{u_pi\|s[~tNID@DK gmz
Oct 25, 2024 13:28:16.911673069 CEST	1236	IN	Data Raw: d9 fc 3b c3 6d ed e3 fe a3 7f 24 92 de 31 6d 65 fa e3 af a7 d7 b1 99 7a 33 ec c8 5e ab 62 d6 77 ca 7c db 69 a4 cd be 17 b7 85 44 ad 3f 3a 7b d8 d3 cb bd c3 3c 9b c7 a0 b6 89 65 6d ff 00 41 5f ac 85 9b fe bd 6e 9e 00 3e d3 a3 70 6f e3 85 71 d3 ae Data Ascii: ;m$1mez3^bw\|iD?:{<emA_n>poqub 1+(JoO#u.NAT\;0oda,&Ij1#<3n{:YUhp5i#uWmn
Oct 25, 2024 13:28:16.911705971 CEST	1236	IN	Data Raw: 56 fe 8a fb ab 22 2c 92 9a 5e 84 39 9f 91 ff 00 75 63 28 3c ed e4 74 d7 92 01 14 26 50 66 25 10 22 06 0a 04 3c 90 25 d0 08 2a 42 82 a4 72 40 8a 49 3d f7 79 a2 89 3e 71 de 65 15 6d 10 2b 7a 04 29 d0 21 52 89 32 0a 21 45 26 34 11 11 08 02 22 26 22 Data Ascii: V",^9uc(<t&Pf%"<%*Br@I=y>qem+z)!R2!E&4"&"u$-'V>?3loWQa>Ymgmvfvk%^$'x,c\pk{9<p.uUAUCkovg,ak@#qh-lGmfkgm-+'kwt{s;`
Oct 25, 2024 13:28:16.911741018 CEST	848	IN	Data Raw: 70 cb 48 ef 5e 21 a1 bc f0 b9 9e ed e9 21 aa e7 de 16 9d 2d 69 a1 cf bb eb 75 32 4e e1 e6 1a 18 33 f1 58 4d e3 6c 5b 57 b9 39 ec fe 92 53 db 62 77 d1 a1 a4 63 0f c1 ce 0e 77 e2 b4 46 d6 a3 e8 60 9d ed 25 ea 76 97 00 15 2c b7 4b 6c 31 19 24 ad a7 Data Ascii: pH^!!-iu2N3XMl[W9SbwcwF`%v,Kl1$kpOhrNot6V.p\|K\|RIy{He,n_]"wMnXt nFqN%~kir[C1094[exY/kok_,{BlDP{=T2
Oct 25, 2024 13:28:16.911773920 CEST	1236	IN	Data Raw: ea 38 2b 68 e7 65 45 34 ec 12 45 2b 0e 5a f6 9e 44 7f f7 78 5c 3e 21 69 19 d5 72 97 5e a7 4a d7 8b dd 59 e9 8c 1f 91 3e 58 5b e7 9e fc fe c2 48 1b 2c 7b af ce e9 e6 01 c6 7c 17 a9 53 d1 41 59 e8 d1 8d 25 84 65 bf e2 35 af ea 6a a8 f6 e8 ba 22 10 Data Ascii: 8+heE4E+ZDx\>!ir^JY>X[H,{\|SAY%e5j""yTrP$<}eeBLE0STD_Svp<Ypck}0^(^;eT-Ze@dixdwUJK#ISk_cb1mC:
Oct 25, 2024 13:28:16.911808014 CEST	920	IN	Data Raw: 56 2b e5 8d e2 45 dc 47 3e 53 4d 00 87 0b 6e cb a3 74 db f9 5b 4c 7f e1 cf 20 ff 00 52 f8 83 45 e9 c8 66 6c 9e a3 24 bb a7 3b b2 ce f7 34 f9 8c f1 52 57 b4 fb 30 55 e2 6b 16 69 cd 41 76 a0 64 d6 db 6c 93 53 48 e2 3b 5e d1 8d 6b b0 70 40 de 70 cf Data Ascii: V+EG>SMnt[L REfl$;4RW0UkiAvdlSH;^kp@pzUH=ZHg6815cCZ:8,CQl$U#'-t8f5iw+7~PSRRRUoViNpq-kF J2TVt`\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	54699	220.169.152.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:16.914140940 CEST	513	OUT	GET /it/u=2127458306,4165955239&fm=58 HTTP/1.1 Host: t12.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:17.998143911 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 1239 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:46:37 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: ebf89842595c2d763c306f3cecda16f1 Age: 171679 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:46:37 GMT Ohc-Cache-HIT: yy2ct65 [2], cdix129 [2] Ohc-File-Size: 1239 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 2a 10 00 01 03 03 04 01 04 01 05 01 00 00 00 00 00 00 01 02 03 04 00 05 11 06 07 12 21 31 13 14 41 51 22 08 15 23 33 81 62 ff c4 00 19 01 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 ff c4 00 1e 11 01 01 01 01 00 01 05 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 11 13 31 41 21 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 2a 94 a5 02 94 a5 02 94 a5 02 94 a5 02 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"!1AQ"#3b1A!?DZya%JQ=<5Vh)YB@R'8x%IL{[+Rag:mmn0nd%c$v;[;2q:HXPjU3W"<U&3<On2RdRYGsO_uB:+t51eXH7UnDVxYxI<fiftdh)S[C&5IFa?xcVOwxf\|UWw6MP%Y8egRQN\|X/6),]
Oct 25, 2024 13:28:17.998220921 CEST	506	IN	Data Raw: fe 73 f1 91 5f 4f b5 a7 af ec 6d d4 a8 16 e8 16 c8 17 3e 21 71 63 fb 97 14 90 b0 07 f6 38 80 8c 9c 74 02 40 48 c0 1d 8a c1 3d 66 dc 96 2f 90 10 dc 18 92 60 2a 30 33 9e 6a e9 21 0a f5 70 af c5 3c 9d ce 32 12 3b 1f 3d 7c d6 6f 27 a4 eb d7 5b cf eb Data Ascii: s_Om>!qc8t@H=f/`03j!p<2;=\|o'[gr1UX3vrq:eDRP]E@gNi;RkC.wB!TRUHWA eLY\|r!<2\|\|nj={sQ e)=c"gO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	54700	220.169.152.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:16.916363955 CEST	513	OUT	GET /it/u=3057315626,2433500578&fm=58 HTTP/1.1 Host: t12.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:17.989021063 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 1009 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:38:53 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 9f305385b56a95f7648a3911d5cc8f84 Age: 172159 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:38:53 GMT Ohc-Cache-HIT: yy2ct51 [2], xaix191 [2] Ohc-File-Size: 1009 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 03 07 08 ff c4 00 32 10 00 01 03 02 04 05 01 05 09 01 00 00 00 00 00 00 01 00 02 03 04 11 05 06 12 21 13 31 41 51 61 14 07 22 23 91 a1 16 32 43 52 53 71 72 81 c1 d1 ff c4 00 18 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff c4 00 23 11 00 02 02 01 04 02 02 03 00 00 00 00 00 00 00 00 00 01 02 03 11 04 12 21 31 41 b1 71 81 13 61 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 7a [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"2!1AQa"#2CRSqr#!1Aqa?z" "")R+.{:Ym$WR7IvHj6_As[=^:c<rmo 92p6GD)N>I8;karIYrcMac+[@E=:jV)TRw>h)>a\|n&27}I';mu.-&(Lb.?dni>SH>es.sIQd9z8MqXN31Ts6>+-m}I.J\|i>ekuMGbik&hvr^u9X&y
Oct 25, 2024 13:28:17.989130020 CEST	276	IN	Data Raw: e4 0e 8a be 6a 76 81 6d 31 80 41 f3 b8 2b 94 cc 99 3f 31 e2 58 bc f5 94 39 ca aa 82 09 18 c6 b2 06 f1 2d 19 02 c4 8d 2f 03 73 bf 25 d8 ce ca 87 68 e1 4c c6 58 7b da 99 aa ff 00 55 58 23 aa 6c 80 cb 51 1b db d4 08 ad f5 ba db 4f aa b3 4f 3d d5 f7 Data Ascii: jvm1A+?1X9-/s%hLX{UX#lQOO=lS0LSf$n#$:HFv\iq.!#uXl:u-C@8\{VVel^\Tc2G_Yc#Kn-c,Y%qXAd{"Fza]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	54701	118.212.230.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:16.923233986 CEST	512	OUT	GET /it/u=2201993677,788292129&fm=58 HTTP/1.1 Host: t11.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:17.957117081 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 3293 Connection: keep-alive Expires: Fri, 22 Nov 2024 10:37:48 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: b2a3ba5bc76044c81c882d6de5a09ca3 Age: 174802 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 10:37:48 GMT Ohc-Cache-HIT: nc7ct57 [2], bdix121 [2] Ohc-File-Size: 3293 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 07 08 09 01 02 06 04 03 ff c4 00 35 10 00 01 03 03 03 03 04 00 05 02 05 05 00 00 00 00 01 02 03 04 05 06 11 00 07 08 12 13 21 09 22 31 41 14 24 51 61 81 15 32 16 17 23 42 52 33 54 63 71 83 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 04 05 06 07 08 02 ff c4 00 30 11 00 01 02 05 03 01 07 03 04 03 00 00 00 00 00 00 01 02 03 00 04 05 11 21 06 12 31 41 07 13 32 51 61 71 81 14 16 91 15 72 a1 [TRUNCATED] Data Ascii: JFIFCCKK"5!"1A$Qa2#BR3Tcq0!1A2Qaqr"B?4iBl[vmyWT~}J!-3kZHd>ZqP(?7C)sJPy&;tjH=TnVRxG,K>")':nvfu~S}`wTON\|\|=WkMQKnX@x[&"CR>l.MZ:on.Xq6vnpg:G_lJR`T}1jDn'cQ6r=IK9R(8:?DzRMw@.oOIQnb=H,q!P# '
Oct 25, 2024 13:28:17.957156897 CEST	1236	IN	Data Raw: ea 09 fa 78 72 e5 9a 3d c8 de c5 d5 2e 39 93 68 0a 7c 44 a6 c6 ab 87 11 3e dc 99 f5 05 e4 3c 03 81 95 7f 6a 02 fd cd 2b 09 19 42 87 6a 76 a5 49 29 0a fa fa d5 eb 4c 6a 69 1d 51 4e 13 32 e0 a5 40 d9 48 56 14 95 0e 41 1d 3d 22 b1 5b a3 4d 50 e7 4b Data Ascii: xr=.9h\|D><j+BjvI)LjiQN2@HVA="[MPKdrF4h"#,arPJTpts&eqpa+k=# ,Q)4V.J~?:\rjE$"\*SiyL'.jq="G7fcU
Oct 25, 2024 13:28:17.957168102 CEST	1236	IN	Data Raw: 27 20 94 4a 2e 21 43 f6 52 48 fe 70 75 09 51 ed 3e b6 27 43 3f ab ad 48 b8 ff 00 24 36 06 0d af 6b 90 6e 38 3f c4 7b 93 d2 14 8f a6 df f4 49 4a f3 85 67 23 8c 8b 8b 18 da ed dd 1a ce f0 59 13 af 2d c4 dd 6b de fd a3 c1 5b 8a 72 99 32 4b 6c c5 98 Data Ascii: ' J.!CRHpuQ>'C?H$6kn8?{IJg#Y-k[r2Kl :Xec@FUxG[r7o+t;Rn8$e8=zj7FYSS}qp-kY=)Br$y=)HcpUr8L6nM.u*B)NBJcT:8m
Oct 25, 2024 13:28:17.957201004 CEST	88	IN	Data Raw: 08 23 e7 c7 93 9f 04 bf 4f ae 20 4f 94 e4 d9 3b 32 c2 9c 79 c7 5c 71 42 ad 35 20 a9 cf 0e 1c 07 b0 3a 87 83 8f 91 e3 e3 4f 46 8d 2d a9 85 75 79 c2 4d 97 66 5b 1b 75 6b 40 b2 2c da 52 60 d2 a9 91 c3 10 62 21 6a 50 69 b1 f0 90 54 49 3f c9 27 4a da Data Ascii: #O O;2y\qB5 :OF-uyMf[uk@,R`b!jPiTI?'J4h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	54702	118.212.230.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:16.923527002 CEST	513	OUT	GET /it/u=3128749531,3731582790&fm=58 HTTP/1.1 Host: t11.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.013026953 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 1102 Connection: keep-alive Expires: Sat, 23 Nov 2024 11:04:02 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: ff595645245fce847d7a1aea4d2fffc5 Age: 71651 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 11:04:02 GMT Ohc-Cache-HIT: nc7ct79 [2], csix79 [4] Ohc-File-Size: 1102 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 02 04 06 07 03 08 ff c4 00 2e 10 00 01 04 02 01 03 03 03 02 07 01 00 00 00 00 00 01 00 02 03 11 04 05 12 06 21 31 13 14 41 15 22 51 42 a1 07 16 32 61 71 81 91 b1 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 04 02 05 ff c4 00 2c 11 00 01 03 02 04 03 07 05 00 00 00 00 00 00 00 00 00 01 02 11 03 31 04 12 21 51 32 61 81 05 13 14 23 41 a1 e1 53 62 91 c1 f0 ff da 00 0c 03 01 00 02 11 03 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK".!1A"QB2aq,1!Q2a#ASb?)D@DDXY;mV,'edXvz!D2f\|CE3~!,h$I%HHElodo#+;bc$ee_Js2z3Y$Ol'K%t0nxwNo.~\W,n.+A`UEUWSj*G9k%nPE1yl -kZG+EX;Vot0d6CZ]\|?0#h5ci\~Se>$[G 8\5Jt7Y[GKuv;qY{
Oct 25, 2024 13:28:18.013257027 CEST	367	IN	Data Raw: 96 c4 e9 3d 36 ca 7f 49 ee 41 e1 f8 3e 6f b2 d9 0e c6 61 a8 f7 9e 9b 3d 4f 5f d3 e3 de ab d5 e1 ff 00 8a 0d 9d 19 20 c3 8b 4c ed bb 9d a0 8b 20 4c cc 3f 40 7a 94 1f cd b1 19 2f bc 61 d5 f1 74 2a d4 cc 9a 89 1f 17 a1 ef 5c 20 13 7a ad 60 8c 79 e7 Data Ascii: =6IA>oa=O_ L L?@z/at*\ z`yN5~?_GsDz.h;hK7cWdgkcQbe=[SfWO3&Kdct^_ffjs/])1mXUkej:xw2&8.dw2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	54711	182.140.225.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.150156021 CEST	872	OUT	GET /rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fdf23419aa8cd03abf0a4a9f127942997.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=6d06efc9a96a3fa8fb2e737a38390daf HTTP/1.1 Host: gimg3.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.252023935 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/webp Content-Length: 1098 Connection: keep-alive Expires: Wed, 06 Nov 2024 03:53:26 GMT Last-Modified: Mon, 19 Jan 1970 00:00:00 GMT ETag: 0fb9a1a1de3fdec385b16408e315fb61 Age: 116355 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 07 Oct 2024 03:53:26 GMT Ohc-Cache-HIT: cd5ct56 [2], czix56 [2] Ohc-File-Size: 1098 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: 52 49 46 46 42 04 00 00 57 45 42 50 56 50 38 20 36 04 00 00 b0 18 00 9d 01 2a 20 00 20 00 3e 04 01 40 00 00 08 96 c0 09 d3 28 47 50 78 c7 e2 6f e3 77 38 66 ae 77 13 24 0e 00 1b 60 3c c0 7e b4 fe 8e fb 2e fe 99 fb 80 f2 72 eb 18 f4 00 fd 39 f4 bb f6 25 ff 01 ff 2f d8 03 f5 6e d8 03 f5 57 d4 1e eb 5d c2 f5 1b f6 d7 74 03 c8 2f d5 9f ab fe 21 7e d3 e9 9c fe 93 f8 ab fb 67 fe 67 38 8f e3 bf d6 bf 1b 3f 2e f6 4a 7f 16 fe a9 f8 f9 b2 2d fc bf fb 27 e4 bf f8 af 7e ff e7 bf aa fe d8 ff 55 f6 a1 f2 e7 f8 9f cb cf a0 3f e2 df c8 bf b7 ff 6f fe ed fe 7f fb cf ff 8f a4 df 5c 1e 83 ff ac 29 6a de 79 19 b2 a2 c3 d1 dc 7d 5f db 5f eb 1c e3 e2 26 07 05 41 21 aa df ca 8d ca 68 59 a9 80 00 fe ff ff af 80 7f f1 88 b2 c3 cc c9 b9 33 48 41 3f fc d2 df cb 82 25 a3 59 36 b7 a0 77 63 f5 3e aa 2d f9 b8 bc cc 62 6b d4 c9 a2 44 04 a7 ef 2e f5 ff e9 f3 8e bd fa ee ab 4d f5 c5 41 ca e1 79 b1 08 f8 71 dc 44 0b 48 00 6f 0e 49 3a 8a 0f 8b 87 8c a1 ad fa 3c f2 a4 99 33 17 dc 70 75 b9 1f 02 a9 4d d8 9d 45 df 65 3d 9a 56 38 5f 9e a6 [TRUNCATED] Data Ascii: RIFFBWEBPVP8 6* >@(GPxow8fw$`<~.r9%/nW]t/!~gg8?.J-'~U?o\)jy}__&A!hY3HA?%Y6wc>-bkD.MAyqDHoI:<3puMEe=V8_#i1@3^sFW90{da.py:xWgPNi]Cci1ENJFjW0RwXgx8!-24BOl^Axl.wC^7l(!M&^@*?e^B<u'[=8K3]6eeBH'(~H`'c)<vF![}m}n(p\|PB/_ ?0g>o>_Das~ws
Oct 25, 2024 13:28:18.253093958 CEST	364	IN	Data Raw: b5 d4 61 ca 01 7e ac 38 d8 c3 8c 01 2f a6 36 28 ee 1e 8b d1 d6 39 f3 0d 64 da a0 f8 61 be 18 d7 80 5c ff db e7 a0 db c2 e8 23 29 07 b9 03 45 c1 09 9d d2 6e 49 87 ba 25 86 02 67 bb a0 58 43 63 5f 44 67 fc d5 a6 4d e0 3f a5 5b 80 86 2c 39 b3 b5 ce Data Ascii: a~8/6(9da\#)EnI%gXCc_DgM?[,9,X[2t`/\J?F3v!iBN7&?xi6cHF0+IFykn^N3yiA@wOqz^X94qtPlq%o0.ccQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	54710	182.140.225.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.150348902 CEST	885	OUT	GET /rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F5ff59bf96b328865183444872e4c8f12.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=f270e08c5979c3d49be8eda99501b029 HTTP/1.1 Host: gimg3.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.239353895 CEST	877	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/webp Content-Length: 378 Connection: keep-alive Expires: Sat, 26 Oct 2024 23:23:54 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: e65e5cc974bd4e5ec0af4df5a7da1398 Age: 84559 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 26 Sep 2024 23:23:54 GMT Ohc-Cache-HIT: cd5ct70 [2], xaix86 [4] Ohc-File-Size: 378 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: 52 49 46 46 72 01 00 00 57 45 42 50 56 50 38 20 66 01 00 00 70 06 00 9d 01 2a 20 00 20 00 04 c0 76 25 b0 02 74 ca 11 d7 36 80 96 55 de 6f b3 03 95 de ef 7f 03 49 33 3f 96 f2 a4 e5 bf 06 69 58 29 3d f9 e7 d8 01 d0 e9 56 45 41 f4 9c 3c ef 00 00 fe f3 6c 1c c6 01 b2 13 95 8d 2c 57 58 7b 64 45 e6 07 94 9c 61 d6 c8 0e 76 81 32 ec 5d 06 77 2b fd b3 fd 3a d0 49 9f 7f dd 76 3e 25 77 40 14 ba 35 76 a4 cc c6 b0 28 aa bb 98 ca e1 c7 fc 24 6f 86 63 15 fc 9f 60 71 af e1 83 0d 2e a6 1c 7f 23 20 25 0d 99 31 cd 2a ce 25 6d 65 be 6c d5 e7 1e 8d 61 f0 44 fa c7 20 66 ba fc e0 47 3d 29 04 4e e9 8d 5b 81 78 33 fa 79 8f 91 e3 e6 e1 f1 ee d7 d6 8d 94 81 97 13 90 81 73 bc 82 bc 71 7c 21 1f 4e 69 a5 a7 82 9f 5b 2c 28 61 f8 40 8d a4 4b 8c b7 1b f8 c4 94 23 1e d1 49 51 09 cb 79 f5 d4 d1 10 67 7f 33 13 c1 01 7b 7c f1 dc 2a 38 02 39 12 ae 55 fc fe bd 95 86 31 b4 12 f4 15 aa ef 2b f5 70 82 2f 1a ae 46 e1 c0 cb d1 a4 ee 28 6f 96 a5 53 0d 62 0e e4 17 18 b8 ac 8a 0c 8c b0 d7 10 1e 3c c5 97 9b 5a ed 34 fc fe d2 79 0c ab 55 1a d6 6c [TRUNCATED] Data Ascii: RIFFrWEBPVP8 fp* v%t6UoI3?iX)=VEA<l,WX{dEav2]w+:Iv>%w@5v($oc`q.# %1%melaD fG=)N[x3ysq\|!Ni[,(a@K#IQyg3{\|89U1+p/F(oSb<Z4yUl*{goAJ.augBV#;V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	54715	113.219.142.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.191247940 CEST	638	OUT	GET /it/u=4060384012,3958510345&fm=3035&app=3035&size=f242,162&n=0&g=0n&f=JPEG?s=0EC3885612457CE20880D84B030020F5&sec=1729942089&t=36d7dc5a32cbd0372acdf6fd1c3498ae HTTP/1.1 Host: t7.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.231743097 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 7441 Connection: keep-alive Expires: Sun, 24 Nov 2024 03:22:14 GMT Last-Modified: Sun, 04 Jan 1970 00:00:00 GMT ETag: ad279ac4dc069020e026d56de3872c36 Age: 29164 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 03:22:14 GMT Ohc-Cache-HIT: chenzct60 [2], cdix162 [1] Ohc-File-Size: 7441 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a1 00 f2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 05 06 07 08 03 02 09 ff c4 00 45 10 00 01 03 03 01 05 04 05 09 04 09 05 01 00 00 00 01 00 02 03 04 05 11 06 07 12 21 31 41 13 51 61 71 08 14 22 32 81 15 33 42 52 62 91 a1 b1 c1 23 72 82 92 16 24 43 44 73 a2 c2 d1 e1 25 53 63 b2 f0 83 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 33 11 00 02 01 03 02 04 04 04 06 01 05 00 00 00 00 00 00 01 02 03 04 11 12 21 05 [TRUNCATED] Data Ascii: JFIFHHC!"$"$C"E!1AQaq"23BRb#r$CDs%Sc3!1AQ"aq#2B3R?)(Dc0Py{DTt :W@$rIY*tRJYodDTTtQHM)C3[/3;z.UDkk`V:Z v`oxO%JRS$c\|vnO;zUuyf/aG`pm}#=Q3iIn]arZ#KODKIYeNWyyz?0kUYo6.>0~x/i[3j;&fr.vVNv353u8
Oct 25, 2024 13:28:18.231766939 CEST	1236	IN	Data Raw: 14 2a 52 78 68 fa 37 0c e2 76 d7 90 52 83 fe fa ae 8c a7 78 e2 a1 a3 03 05 7a 10 be 4b 56 3e 47 6f 72 f9 a4 75 5d ef 4b d4 ba 5b 5d 57 ec 5e 41 96 9a 5f 6a 29 7c c7 43 e2 30 56 f3 d0 da fe c9 aa 03 29 83 fd 46 e4 7f ba 4c f1 97 9f fc 6e e4 ff 00 Data Ascii: Rxh7vRxzKV>Goru]K[]W^A_j)\|C0V)FLn.'PsAk6k\|'cS\k\|VV[;Eh*?8qO%;u~3Wm>z{u_pi\|s[~tNID@DK gmz
Oct 25, 2024 13:28:18.231780052 CEST	1236	IN	Data Raw: c3 6d ed e3 fe a3 7f 24 92 de 31 6d 65 fa e3 af a7 d7 b1 99 7a 33 ec c8 5e ab 62 d6 77 ca 7c db 69 a4 cd be 17 b7 85 44 ad 3f 3a 7b d8 d3 cb bd c3 3c 9b c7 a0 b6 89 65 6d ff 00 41 5f ac 85 9b fe bd 6e 9e 00 3e d3 a3 70 6f e3 85 71 d3 ae a2 75 9e Data Ascii: m$1mez3^bw\|iD?:{<emA_n>poqub 1+(JoO#u.NAT\;0oda,&Ij1#<3n{:YUhp5i#uWmnYi
Oct 25, 2024 13:28:18.231868982 CEST	1236	IN	Data Raw: fb ab 22 2c 92 9a 5e 84 39 9f 91 ff 00 75 63 28 3c ed e4 74 d7 92 01 14 26 50 66 25 10 22 06 0a 04 3c 90 25 d0 08 2a 42 82 a4 72 40 8a 49 3d f7 79 a2 89 3e 71 de 65 15 6d 10 2b 7a 04 29 d0 21 52 89 32 0a 21 45 26 34 11 11 08 02 22 26 22 f7 a1 e6 Data Ascii: ",^9uc(<t&Pf%"<%*Br@I=y>qem+z)!R2!E&4"&"u$-'V>?3loWQa>Ymgmvfvk%^$'x,c\pk{9<p.uUAUCkovg,ak@#qh-lGmfkgm-+'kwt{s;`/U
Oct 25, 2024 13:28:18.231882095 CEST	1236	IN	Data Raw: ef 5e 21 a1 bc f0 b9 9e ed e9 21 aa e7 de 16 9d 2d 69 a1 cf bb eb 75 32 4e e1 e6 1a 18 33 f1 58 4d e3 6c 5b 57 b9 39 ec fe 92 53 db 62 77 d1 a1 a4 63 0f c1 ce 0e 77 e2 b4 46 d6 a3 e8 60 9d ed 25 ea 76 97 00 15 2c b7 4b 6c 31 19 24 ad a7 6b 1a 70 Data Ascii: ^!!-iu2N3XMl[W9SbwcwF`%v,Kl1$kpOhrNot6V.p\|K\|RIy{He,n_]"wMnXt nFqN%~kir[C1094[exY/kok_,{BlDP{=T2
Oct 25, 2024 13:28:18.231893063 CEST	1236	IN	Data Raw: 82 a6 96 e1 00 8b 79 a1 ce 79 fa 07 86 3c ca d9 9b 15 a8 86 7b 05 64 c2 08 99 5b 1d 59 64 92 b5 98 7b 98 5a 0b 5b 9e 78 1e d0 c2 aa b5 5f 0e 1a b1 92 b9 cb 42 c9 e7 61 d9 65 fe ba 8a 39 ee 35 54 96 b7 38 02 62 90 3a 49 07 98 6f 00 7c 33 9f 25 f7 Data Ascii: yy<{d[Yd{Z[x_Bae95T8b:Io\|3%N=bPKQS)i2N:'gp.`q@;7Q]tZggdriv=wI^~*o7zWzW;cqtqO<\Uk<r%DM.
Oct 25, 2024 13:28:18.231904030 CEST	529	IN	Data Raw: d8 a4 77 93 0a c5 4e 8a a7 2d 50 ca 7e e7 4e b7 1d bc b8 a4 e9 55 6a 4b d9 6d ed 83 1e d2 9a 52 d1 a6 6e cf ba 5a cd 57 6e e8 8c 38 9e 41 23 5a d2 41 38 f6 41 04 e0 0c e7 96 56 5a fb 9b c9 06 38 db cb 88 70 eb e6 bc 1b 6f ac 7f 28 0b 47 da 20 2a Data Ascii: wN-P~NUjKmRnZWn8A#ZA8AVZ8po(G *6xTRYj^AE<fJw-q9xKSJ$;$drp_[ib<>J0QXMJkujG=/aHe%>PL'E2N(p $r%N >\2;/\&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	54720	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.451522112 CEST	512	OUT	GET /it/u=3772794375,258756471&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.403003931 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 2770 Connection: keep-alive Expires: Sat, 16 Nov 2024 10:23:20 GMT Last-Modified: Fri, 23 Jan 1970 00:00:00 GMT ETag: 6aec367fbdfc0527ac0c8bf3db04a0e7 Age: 304272 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 17 Oct 2024 10:23:20 GMT Ohc-Cache-HIT: sh6ct85 [2], qdix171 [2] Ohc-File-Size: 2770 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 00 01 05 06 08 04 03 02 ff c4 00 39 10 00 01 03 03 03 02 04 03 07 01 08 03 00 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 41 51 61 14 22 81 08 15 23 32 42 71 91 52 17 33 34 62 64 72 82 b1 92 a1 e1 ff c4 00 1c 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 06 01 03 07 00 08 ff c4 00 2f 11 00 01 03 03 02 03 07 02 07 00 00 00 00 00 00 00 01 02 03 11 00 04 21 05 41 12 31 51 06 22 32 42 71 81 a1 61 d1 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"9!1AQa"#2BqR34bdr/!A1Q"2Bqa3?xwU>(Pe3#\|zKAiLjxBPd#83K5UfL\|-U$q1:MERd;u>pwZ:,BI[8 V,.Pkv}.pT<x%p$(33qu\.rD'c2Z\|E$Gv!4K>;wu{\|$e d:f!%d/<w7f1TTWiPDdANZR$q9u+o}vZu$XJ@O
Oct 25, 2024 13:28:18.403059959 CEST	1236	IN	Data Raw: 69 74 78 97 07 57 a9 50 13 4f a9 50 6c ab 9a a0 27 c6 83 24 ed 4c a0 d2 4f 64 83 c0 52 b7 25 3e 81 7c 67 8d 6a d3 b4 76 9c 71 ef c7 27 85 b2 73 b1 e1 9e 20 37 98 c8 8f 7a ca dd 20 08 de b5 e2 e4 c6 6c 80 b9 0c a4 91 91 b9 c0 32 3d 79 3a a7 5e bd Data Ascii: itxWPOPl'$LOdR%>\|gjvq's 7z l2=y:^Um(r]VG\|'{ETj'TeRgJ2l%# kM=gHeQ4MoSnJ_uSkG/;F5+EBlKgwiuRv2c^c/m A
Oct 25, 2024 13:28:18.403072119 CEST	424	IN	Data Raw: df 50 2a 16 ad 61 33 68 92 0b 25 6a 06 44 27 8e 18 94 3d 14 07 01 5e 8b 1f 30 f7 1c 68 fb fe c5 34 50 55 68 b3 c5 d0 f2 3e f8 8f 9a 44 9b a5 0f 10 ad a8 e5 3e 03 b3 9b 9e e4 18 ab 96 d8 c2 1f 53 29 2e 20 7a 05 63 23 f9 d7 56 a1 ec eb 82 05 d3 6e Data Ascii: Pa3h%jD'=^0h4PUh>D>S). zc#VnCSJ)B;KB?csR(x#"DIlep{/r`T{2B^N} jy>TpBW:=cCy8p(cEJ;VLR\
Oct 25, 2024 13:28:18.403084040 CEST	377	IN	Data Raw: fb 3e de 17 03 68 9b 5c 75 ab 76 23 9f 30 4b e8 f1 24 a8 1f 3f 08 10 13 ff 00 22 0f b6 89 d1 7e cd 16 52 22 ec 93 58 af be fe 39 75 2e b4 d8 cf b2 42 0f fd e8 9b ae d3 69 d6 ca e0 2b 93 f4 cf cf 2f 9a e3 a1 a5 ab 20 54 47 d8 ce b8 fc 98 97 05 0d Data Ascii: >h\uv#0K$?"~R"X9u.Bi+/ TGY'G><uylUPMS7mP?P:}1B ;QngU*~vR-9z"ZYop0h[m\4`V}-V# [ZY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	54721	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.451910019 CEST	513	OUT	GET /it/u=4123943363,3931750118&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.447357893 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 1984 Connection: keep-alive Expires: Fri, 22 Nov 2024 11:41:27 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 44f605c261028bdd9750bb87f7952904 Age: 171951 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:41:27 GMT Ohc-Cache-HIT: sh6ct59 [2], suzix59 [2] Ohc-File-Size: 1984 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 07 05 06 00 03 08 04 02 ff c4 00 45 10 00 01 03 03 02 02 06 05 06 09 0d 00 00 00 00 00 01 02 03 04 00 05 11 06 21 07 31 12 13 41 51 81 91 22 32 61 71 d2 08 14 16 23 a1 d1 15 17 24 42 55 82 92 b1 c1 33 35 44 45 46 52 54 62 72 83 93 94 a3 ff c4 00 1b 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 00 01 02 03 05 04 07 ff c4 00 2a 11 00 01 03 02 05 03 03 05 01 00 00 00 00 00 00 00 01 00 02 03 04 11 05 06 12 21 [TRUNCATED] Data Ascii: JFIFHHC!"$"$CKK"E!1AQ"2aq#$BU35DEFRTbr!1AQ"aq2?FJ]SZ8mLH?)T:?'&Bi!$J3;:7z:qRmMVg0C(gu47:sD[J9([}=4Wj];g8)8$uaiiVLFa>nwso_/G#l\_)YI;mADQ}DoTv89=NVqHi(l@42;Zww$[)$h li+J}JzRmM4f)=Nu
Oct 25, 2024 13:28:18.447376966 CEST	1236	IN	Data Raw: b2 d3 2e e2 f6 9c 86 b6 e3 34 a7 54 94 37 b9 00 67 03 7a 85 d0 71 34 3e ab 82 fb cd 69 58 71 5d 8e e0 43 8d 28 74 8e 08 c8 20 8e ce 7e 54 c0 9f 19 b9 90 9f 88 e8 fa b7 db 53 6a f7 28 63 f8 d2 27 86 97 35 e9 6d 72 a8 13 95 d5 b4 ea d5 0e 47 4b 60 Data Ascii: .4T7gzq4>iXq]C(t ~TSj(c'5mrGK`z*Fv(ct45Fs{&<g`~IH;En[XeO?' :~8JNfc^^s:,~6Zj1{{7ol<[N-(a<k~hp?dD
Oct 25, 2024 13:28:18.447387934 CEST	15	IN	Data Raw: bd 96 f3 42 87 45 29 e4 39 d1 aa 15 ab ff d9 Data Ascii: BE)9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	54722	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.451953888 CEST	513	OUT	GET /it/u=2178613570,2866529354&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.419255972 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 1311 Connection: keep-alive Expires: Fri, 22 Nov 2024 10:12:31 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 935cbb3f7d540c2364020fa563f18b66 Age: 177340 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 10:12:31 GMT Ohc-Cache-HIT: sh6ct74 [2], czix74 [2] Ohc-File-Size: 1311 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 07 04 05 06 08 03 ff c4 00 2f 10 00 01 03 04 00 04 04 06 01 05 00 00 00 00 00 00 01 02 03 04 00 05 06 11 07 12 21 31 13 22 41 51 08 14 15 42 61 71 91 23 33 52 62 81 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 03 07 ff c4 00 2d 11 00 01 03 03 02 03 05 09 00 00 00 00 00 00 00 00 01 00 02 11 03 04 21 05 31 12 22 51 41 42 61 71 f0 13 62 72 81 91 a1 b1 c1 e1 ff da 00 0c 03 01 00 02 11 [TRUNCATED] Data Ascii: JFIFHHC!"$"$CKK"/!1"AQBaq#3Rb-!1"QABaqbr?)J"R%)J"R%)J"RTE*uO)TU\9hom!%nIyH$M?+=d.AS2IQRzeu0`eZ:tQJSTEC4FeqUD6e(j,M\5wljl\5KZjOnv:oN-YuAlev=z}U}d^Sk]3,VT9BR+$}}UehcVM,4iR81^}+prLv!1_RWT~;5Lqry?yYv9o}I$!oiZ=#td\##11TBj2B}V
Oct 25, 2024 13:28:18.419327021 CEST	577	IN	Data Raw: a1 e9 eb e9 5b 49 76 4c b6 17 c3 93 30 58 b3 5c 47 25 f9 c7 ae 90 10 da 90 fb f0 fc 52 54 9e 5e e5 27 cb bd 77 1f 8a b6 d0 2f 2a 9d 42 9c 00 3e 21 8c e3 f7 d7 75 07 58 d1 ad ed 2c dc f6 d4 e2 74 8c 76 f7 a7 a4 8c 0e cf 25 83 99 71 46 db 62 91 38 Data Ascii: [IvL0X\G%RT^'w/*B>!uX,tv%qFb8N=r+4-+E"92c%$L(M`wMwVc.[)0O%:p_p$_]%X7ck\V<)@!S^Vu65]$g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	54723	61.170.103.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.452528954 CEST	513	OUT	GET /it/u=1872327486,3058802280&fm=58 HTTP/1.1 Host: t10.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.435445070 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 1173 Connection: keep-alive Expires: Wed, 20 Nov 2024 03:17:44 GMT Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT ETag: bc720b8836330bf45e770e91e2843609 Age: 127870 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:17:43 GMT Ohc-Cache-HIT: sh6ct78 [2], cdix78 [2], cdix78 [2] Ohc-File-Size: 1173 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 4b 00 4b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 07 02 05 06 01 08 ff c4 00 2b 10 00 01 04 02 01 03 03 03 04 03 00 00 00 00 00 00 01 00 02 03 04 05 11 06 12 21 31 13 22 41 23 51 61 07 14 71 81 25 42 54 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 05 02 03 04 06 ff c4 00 26 11 00 02 01 04 01 02 06 03 00 00 00 00 00 00 00 00 00 01 02 03 11 21 31 04 05 41 12 22 32 51 71 c1 81 91 f0 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb 29 11 10 04 [TRUNCATED] Data Ascii: JFIFC!"$"$CKK"+!1"A#Qaq%BT&!1A"2Qq?)D@DDXO,PBD=v<O-yHHCmBUxEt(sj+0?v#yVIrjJ"i?$M"@r\|b,trFzaOl+[\d0akOftO_eo\,9l`Z =k{H\1>2VL!nIm,5gTue}tk{*av21f(Xuc\|.hl`u:]f~1d-^G&5M{GOqyq\|-Vg6I'C
Oct 25, 2024 13:28:18.435456991 CEST	451	IN	Data Raw: 6e 27 a8 e8 0f 03 64 eb 6a 14 df a7 3c 62 cd 28 e8 de 8a f5 da 8c 7b a5 35 ec 5e 95 d1 be 57 3d cf 74 ae 6f 56 9c f2 e7 93 b3 fd 2b 0e 2c 25 18 79 bf bf 7e fb fc 94 dd 46 ac 2a d6 bc 34 be 3d db 5a c6 15 96 31 8c 60 ad 2f 5d c9 cf 82 c7 65 ea e7 Data Ascii: n'dj<b({5^W=toV+,%y~F4=Z1`/]en_HA4Rha\|rH#kq ,x ,\|Pn^=G53gzAx&c>Y45_~gD:KZ],i;fG9++&@%fd.dy_#16F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	54725	218.94.231.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:17.612523079 CEST	709	OUT	GET /poster/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F284bf3dba859027de945da2b4e91374b.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2004&size=f64,64&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=8296411e868e0aa9ce66e92c4fa920f9 HTTP/1.1 Host: gimg4.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:18.580349922 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 5596 Connection: keep-alive Expires: Tue, 19 Nov 2024 14:08:59 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 0838ff5399f36d9245e8a38fdc834a7d Age: 368422 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Sun, 20 Oct 2024 14:08:59 GMT Ohc-Cache-HIT: suz5ct68 [2], bdix104 [2] Ohc-File-Size: 5596 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 40 00 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 02 03 01 00 00 00 00 00 00 00 00 00 00 0a 00 07 08 09 04 06 01 02 05 03 ff c4 00 37 10 00 01 04 01 02 04 04 03 06 04 07 00 00 00 00 00 03 01 02 04 05 06 07 11 00 08 12 21 09 13 14 31 22 51 71 15 23 32 41 52 61 16 17 81 b1 24 34 42 43 91 c1 f0 ff c4 00 1d 01 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 09 07 08 03 05 04 06 0a 02 ff c4 00 36 11 00 02 02 01 02 04 05 02 04 05 04 03 01 00 00 00 01 02 03 04 05 06 11 00 07 12 21 08 13 14 31 41 15 22 23 51 [TRUNCATED] Data Ascii: JFIFHHCC@@7!1"Qq#2ARa$4BC6!1A"#Qaq23%R$??<,&jwE1=QR1i2(SeVQTg#Lb3wcBlJ$Q)$VIDq\6+oQ!z`@DSq4 iw'JtM\|_/v*?7%.`^goGVw<>V^Bw,?;_bz<TU_lk+36+>\|2$u9"\iBnm>G53Q}V:v6[\%u~Z &,`3:vx8h:1'H:
Oct 25, 2024 13:28:18.580363035 CEST	1236	IN	Data Raw: d3 34 0f 24 67 6e cd be e3 8d 87 8e e3 c6 9f 85 c1 c1 c2 e0 e0 e1 70 70 70 b8 38 38 ab 5e 6f 33 e9 93 f5 2c d8 aa 9d e9 59 89 d7 40 10 62 b5 ef 68 5d 65 6d 08 76 33 a6 b9 8a a8 8e 3a c6 93 12 1b 1f b2 f4 08 4e 6b 1c 88 52 75 2f 7f 12 fc c1 b5 16 Data Ascii: 4$gnppp88^o3,Y@bh]emv3:NkRu/O4=?BTky~j Evy~tj)3Ar9U.^ZGCbI"N=H\1\'U{~Twuq1`O~]{J;l!oeXs&8mo
Oct 25, 2024 13:28:18.580375910 CEST	1236	IN	Data Raw: 7a f7 ed b8 6b d0 b1 2f 1c 9d 5b 55 bd 8c 52 ab a5 e5 bf 37 2b 6b 1a 95 2a 6a 2c 5a 68 fd 55 20 11 cd 85 97 29 57 2f 42 c4 fd cf fb 3e 6e ba 57 8e f4 6c 06 e9 0d aa 78 ec 88 ee a6 93 05 32 35 00 e7 1f 84 fe 68 72 8e 2b 99 89 a8 c7 a9 f4 8d 5d e4 Data Ascii: zk/[UR7+k*j,ZhU )W/B>nWlx25hr+]Q` hfQh-`$oyY`{/uVb(],EEj9M~^O~' XGtdHdbLue!v ~zgMic6=n!Ml[7
Oct 25, 2024 13:28:18.580466032 CEST	1236	IN	Data Raw: c3 f9 91 df b1 1e ff 00 b8 23 7d 88 3f 90 ff 00 3c 12 77 2b be 23 3a 7b a1 de 1c 15 79 a6 a8 d9 ad b6 69 a3 b6 12 f4 4f 1a c3 99 31 ac c8 b5 02 f2 04 24 b4 d3 8a a8 3e 6a 3d 63 43 5c 46 54 26 dd dd 11 af 8f 4d 57 8f da cf 2b 4a 61 c6 8b 29 2d 78 Data Ascii: #}?<w+#:{yiO1$>j=cC\FT&MW+Ja)-x>bg5,tpG0e1JrzkU6:=[v(V1s:6M-[zAQ-cPZ5cdua5;%M[\|+$yJFVTWXB=[+ZY{sd5
Oct 25, 2024 13:28:18.580478907 CEST	848	IN	Data Raw: 10 e5 d3 48 79 78 c7 53 1c d2 cc 46 0d 1b 0c 31 36 d6 ec fb d8 65 19 09 44 8d ff 00 13 7f 90 ca 47 d8 d8 bd 5e df 30 71 94 82 ae 88 e7 39 b0 20 c5 16 c3 4b 61 a5 b4 5e 9c d1 b5 0d 4c 06 36 2a be 62 a8 b3 69 87 9d 7e eb 28 1f 7d cb 92 6f 34 c7 70 Data Ascii: HyxSF16eDG^0q9 Ka^L6bi~(}o4pH`"1pss:Qwj#XDi$#Xw/ry<g0/Fx{x0m$fXR,kGA>l4-:60'v%HTr1Zy]KiMe
Oct 25, 2024 13:28:18.580490112 CEST	308	IN	Data Raw: 59 a3 62 0b 94 ec 4f 52 dd 59 63 9e b5 aa d2 c9 05 8a f3 c4 c1 e2 9a 09 e2 64 96 19 a2 70 1e 39 63 75 91 18 06 56 04 03 c4 4b 5e 40 b9 2f 76 47 fc 56 ee 5a 74 89 d7 1e a9 66 6e ec 4a 23 aa fd 42 bb ad 49 fc 3e ae 5c 7f f1 7c 5d 1f 65 f9 7d 5f 17 Data Ascii: YbORYcdp9cuVK^@/vGVZtfnJ#BI>\\|]e}_FK;3y>FWZQWQ(y$c^VK:PVB]]8bA0bC; E;4`@BcZ1DN",<,L,#Idr$31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	54739	116.163.33.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:18.307552099 CEST	706	OUT	GET /rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fbjh%2Fuser%2F5ff59bf96b328865183444872e4c8f12.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=f270e08c5979c3d49be8eda99501b029 HTTP/1.1 Host: gimg3.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:19.405230999 CEST	1030	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:19 GMT Content-Type: image/jpeg Content-Length: 529 Connection: keep-alive Expires: Sun, 27 Oct 2024 11:35:35 GMT Last-Modified: Tue, 27 Jan 1970 00:00:00 GMT ETag: b2a7afcd93c525df2d5c2dc04f1a3ad3 Age: 1875384 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 27 Sep 2024 11:35:35 GMT Ohc-Cache-HIT: cs2ie70 [2], xaix86 [4] Ohc-File-Size: 529 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 23 18 1a 1e 1a 16 23 1e 1c 1e 27 25 23 29 34 57 38 34 30 30 34 6a 4c 50 3f 57 7e 6f 84 82 7c 6f 7a 77 8b 9c c8 a9 8b 94 bd 96 77 7a ae ed b0 bd ce d5 e0 e2 e0 87 a7 f5 ff f3 d9 ff c8 db e0 d7 ff db 00 43 01 25 27 27 34 2e 34 66 38 38 66 d7 8f 7a 8f d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 d7 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 16 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 04 05 03 ff c4 00 2b 10 00 02 01 03 02 03 06 07 00 00 00 00 00 00 00 00 01 02 03 00 04 11 12 21 31 51 61 13 14 32 41 91 d1 22 42 52 71 81 a1 b1 ff c4 00 17 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff c4 00 1d 11 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 11 12 31 03 13 22 32 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 a1 7b 74 c1 8c 30 9c 11 e2 6f a7 a0 eb 51 a6 91 5c 95 45 24 93 bb [TRUNCATED] Data Ascii: JFIFHHC##'%#)4W84004jLP?W~o\|ozwwzC%''4.4f88fz "+!1Qa2A"BRq1"2?{t0oQ\E$\'!CU+9QN2lU+,!~}ZTwn_91+8MwTO8(t}1@u0IE*GjvE !0}H4q"k^;dDjem\vXIPt_5eR4 $)#4kr!I+M#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	54738	116.163.33.36	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:18.307596922 CEST	693	OUT	GET /rel/src=https%3A%2F%2Fpic.rmb.bdstatic.com%2Fdf23419aa8cd03abf0a4a9f127942997.jpeg&refer=http%3A%2F%2Fwww.baidu.com&app=2010&size=f32,32&n=0&g=0n&q=100&fmt=auto?sec=1729962000&t=6d06efc9a96a3fa8fb2e737a38390daf HTTP/1.1 Host: gimg3.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:19.423959017 CEST	1236	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:19 GMT Content-Type: image/jpeg Content-Length: 2257 Connection: keep-alive Expires: Wed, 13 Nov 2024 10:08:59 GMT Last-Modified: Tue, 13 Jan 1970 00:00:00 GMT ETag: 1429b14dd1728c3e58d10c1fcd9f37e1 Age: 772886 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 14 Oct 2024 10:08:59 GMT Ohc-Cache-HIT: cs2ie56 [2], xaix56 [2] Ohc-File-Size: 2257 X-Cache-Status: HIT Timing-Allow-Origin: * Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 09 04 05 06 07 08 0a ff c4 00 25 10 00 01 05 01 00 01 04 02 03 01 00 00 00 00 00 00 03 01 02 04 05 06 07 08 11 12 13 14 09 15 00 16 22 31 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 05 07 08 06 02 04 ff c4 00 2e 11 00 02 02 01 03 03 03 02 06 02 03 00 00 00 00 00 01 02 03 04 11 05 06 12 00 13 21 07 31 41 14 22 15 16 23 32 51 81 33 61 42 71 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ec 13 01 e6 c7 [TRUNCATED] Data Ascii: JFIF``CC %"1.!1A"#2Q3aBq?G7zF+1*kYszB(cf^LIf,u6Ty0O-zCZ,+,F3C: 2":j9ut+$^;Z_[HPT.{"O}?taO]bG 5-FWei#X;d_`EWvUAV\|;TJe`K_A%x%x-8>1;&mn#j)jZJ{j[pxcrsG~*<a-Ze#Mu82G+0i5BJ
Oct 25, 2024 13:28:19.423993111 CEST	1236	IN	Data Raw: fa 8e 9b 72 07 a1 37 2f b9 e7 82 29 7c 10 32 b1 18 58 95 39 18 c9 c9 ff 00 c1 35 34 9d a7 2c 33 2d db d6 2b 5c 52 78 24 75 a4 9d 08 03 cf 26 12 29 e5 ef 80 07 8f e7 e3 a5 78 ce 32 71 f2 f7 e1 69 e8 33 70 6b 31 b2 e1 e6 20 e7 a8 c2 3c e1 22 1f 26 Data Ascii: r7/)\|2X954,3-+\Rx$u&)x2qi3pk1 <"&xBI4S}-N(g!QliTD ^+9>F~sW%Sy5ne-is)q\%'w6[k/je^\|X^-Y^19/TZRabH
Oct 25, 2024 13:28:19.424026012 CEST	287	IN	Data Raw: eb 5a 66 ad 7e c5 7a b0 bd 64 61 56 39 2f f0 79 a6 44 77 7e 6b 24 ca 7b 63 0a aa ca 01 63 ec 30 09 eb 4f c7 f1 c9 d2 67 2e aa 0f 4a da 8a f2 ce b9 02 2d 20 70 bc 94 17 ab 5d 38 51 0a d0 92 7a f3 44 3b 82 e1 02 1b 94 0e 72 0d ae 03 53 da 8a c4 f4 Data Ascii: Zf~zdaV9/yDw~k${cc0Og.J- p]8QzD;rS"4]b2ka2As?mR]4N6L0!\|H\X?oqdRJ<mj*b+up?bGjbCX2pGa!0z^{R\[I^MK}$#2"1%y/Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49788	104.193.90.80	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:21.045912981 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	54791	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:23.354486942 CEST	1200	OUT	GET /w.gif?q=%B0%D9%B6%C8%C8%C8%CB%D1&fm=se&T=1729855689&y=FCDFFF21&rsv_cache=0&rsv_pre=0&rsv_reh=91_420_402_136_127_91_91_91_91_91_91\|340&rsv_scr=1280_2834_0_0_1024_1280&rsv_psid=7A022EDDDFEE74DAB4211D7DFC7B91EB&rsv_pstm=1729855650&rsv_idc=&rsv_sid=60271_60852_60875&cid=0&qid=cae097a40095e7dd&t=1729855696991&rsv_iorr=1&rsv_tn=baidu&rsv_ssl=0&path=http%3A%2F%2Fwww.baidu.com%2Fs%3Fwd%3D%25E7%2599%25BE%25E5%25BA%25A6%25E7%2583%25AD%25E6%2590%259C%26sa%3Dire_dl_gh_logo_texing%26rsv_dl%3Digh_logo_pcs&rsv_did=b57bb8df017e5a5401e2cb0abd0f8981 HTTP/1.1 Host: sclick.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
Oct 25, 2024 13:28:24.345696926 CEST	400	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Connection: keep-alive Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:28:24 GMT Etag: "6614bbef-0" Expires: Mon, 23 Oct 2034 11:28:24 GMT Last-Modified: Tue, 09 Apr 2024 03:54:23 GMT Server: Apache 2.0 Set-Cookie: BDORZ=B490B5EBF6F3CD402E515D22BCDA1598; max-age=86400; domain=.baidu.com; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	54793	183.240.98.60	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:23.423511028 CEST	854	OUT	GET /wb.gif?type=3&fm=flow_monitor&data=%5B%7B%7D%5D&q=%B0%D9%B6%C8%C8%C8%CB%D1&qid=cae097a40095e7dd&rsv_did=28d12c81a13dd230029e0e2bea421d57&rsv_tn=baidu&rsv_sid=60271_60852_60875&t=1729855696986 HTTP/1.1 Host: sestat.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	54801	103.235.47.188	80	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 13:28:24.866089106 CEST	1061	OUT	GET /w.gif?q=%B0%D9%B6%C8%C8%C8%CB%D1&fm=se&T=1729855689&y=FCDFFF21&rsv_cache=0&rsv_pre=0&rsv_reh=91_420_402_136_127_91_91_91_91_91_91\|340&rsv_scr=1280_2834_0_0_1024_1280&rsv_psid=7A022EDDDFEE74DAB4211D7DFC7B91EB&rsv_pstm=1729855650&rsv_idc=&rsv_sid=60271_60852_60875&cid=0&qid=cae097a40095e7dd&t=1729855696991&rsv_iorr=1&rsv_tn=baidu&rsv_ssl=0&path=http%3A%2F%2Fwww.baidu.com%2Fs%3Fwd%3D%25E7%2599%25BE%25E5%25BA%25A6%25E7%2583%25AD%25E6%2590%259C%26sa%3Dire_dl_gh_logo_texing%26rsv_dl%3Digh_logo_pcs&rsv_did=b57bb8df017e5a5401e2cb0abd0f8981 HTTP/1.1 Host: sclick.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7; BDORZ=B490B5EBF6F3CD402E515D22BCDA1598
Oct 25, 2024 13:28:25.874650002 CEST	400	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=315360000 Connection: keep-alive Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:28:25 GMT Etag: "6614bbef-0" Expires: Mon, 23 Oct 2034 11:28:25 GMT Last-Modified: Tue, 09 Apr 2024 03:54:23 GMT Server: Apache 2.0 Set-Cookie: BDORZ=B490B5EBF6F3CD402E515D22BCDA1598; max-age=86400; domain=.baidu.com; path=/

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:31 UTC	574	OUT	GET /r/www/static/font/cosmic/pc/cos-icon_99f656e.css HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:32 UTC	900	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 16020 Connection: close Expires: Wed, 23 Oct 2024 08:19:11 GMT Last-Modified: Wed, 17 Jul 2024 02:34:32 GMT ETag: "d156cfcc559bf6185e4257b6894e77ff" Cache-Control: max-age=31536000 Age: 375011 Accept-Ranges: bytes Content-MD5: 0VbPzFWb9hheQle2iU53/w== x-bce-content-crc32: 3914414778 x-bce-debug-id: 5QmDH8My+Vd2E7+qPKlRw6Ue8IVhw3v0MbiJB0JAkGvdnKTdxp7C073KsHSmgx5H/Tm8TuqwWVTBr34VDZD9Pw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 8320f36f-d27d-4f2a-93e6-5dd50a705eb7 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 20 Oct 2024 08:19:11 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache54 [2] Ohc-File-Size: 16020 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:32 UTC	15484	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 63 6f 73 2d 69 63 6f 6e 22 3b 20 2f 2a 20 50 72 6f 6a 65 63 74 20 69 64 20 31 37 37 35 30 33 33 20 2a 2f 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 2f 70 73 73 2e 62 64 73 74 61 74 69 63 2e 63 6f 6d 2f 72 2f 77 77 77 2f 73 74 61 74 69 63 2f 66 6f 6e 74 2f 63 6f 73 6d 69 63 2f 70 63 2f 63 6f 73 2d 69 63 6f 6e 5f 30 30 39 65 61 61 35 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 2a 2f 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 2f 70 73 73 2e 62 64 73 74 61 74 69 63 2e 63 6f 6d 2f 72 2f 77 77 77 2f 73 74 61 74 69 63 2f 66 6f 6e 74 2f 63 6f 73 6d 69 63 2f 70 63 2f 63 6f 73 2d 69 63 6f 6e 5f 30 Data Ascii: @font-face { font-family: "cos-icon"; /* Project id 1775033 / font-weight: 400; src: url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_009eaa5.eot'); / IE9 */ src: url('//pss.bdstatic.com/r/www/static/font/cosmic/pc/cos-icon_0
2024-10-25 11:27:32 UTC	536	IN	Data Raw: 22 5c 65 36 63 34 22 3b 0a 7d 0a 0a 2e 63 6f 73 2d 69 63 6f 6e 2d 74 6f 2d 75 70 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 63 37 22 3b 0a 7d 0a 0a 2e 63 6f 73 2d 69 63 6f 6e 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 63 38 22 3b 0a 7d 0a 0a 2e 63 6f 73 2d 69 63 6f 6e 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 63 39 22 3b 0a 7d 0a 0a 2e 63 6f 73 2d 69 63 6f 6e 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 36 63 61 22 3b 0a 7d 0a 0a 2e 63 6f 73 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 75 Data Ascii: "\e6c4";}.cos-icon-to-up::before { content: "\e6c7";}.cos-icon-info-circle::before { content: "\e6c8";}.cos-icon-caret-right::before { content: "\e6c9";}.cos-icon-question-circle::before { content: "\e6ca";}.cos-icon-arrow-u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:31 UTC	622	OUT	GET /static/superman/img/topnav/newfanyi-da0cea8f7e.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:32 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:31 GMT Content-Type: image/png Content-Length: 4560 Connection: close Expires: Mon, 14 Oct 2024 00:00:08 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "da0cea8f7e96046b1140228813422283" Cache-Control: max-age=31536000 Age: 376024 Accept-Ranges: bytes Content-MD5: 2gzqj36WBGsRQCKIE0Iigw== x-bce-content-crc32: 3211882637 x-bce-debug-id: y3fUGUnn0kNRJhzZvbtCVmGZ4Rstryq8npD4ECLMhqfP0mJWvqDTdD/8v1i/0/LCiHkt7aof3I4GithLLebIEw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: da5d1756-9e31-4fc7-aa63-e7c43c10e9e6 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 00:00:08 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 4560 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:32 UTC	4560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 11 3a 49 44 41 54 78 01 ed 5a 69 8c 1c c7 75 7e d5 dd 33 7b df bb 5c ae a8 e5 f2 92 48 49 36 69 51 94 45 4a b2 1d 51 97 13 19 8a 4d 23 30 02 4b 0e 84 24 80 2d c8 70 90 28 70 e4 1f 4e e0 24 70 f2 23 48 94 00 01 1c 38 88 0f 18 b0 25 1b 06 6c 58 06 a3 c3 26 69 ca d4 61 c2 e2 7d df dc 5d 72 4f 2e f7 9e e9 ae 7c df ab ee d9 19 71 29 ed cc 0e 03 18 98 42 6f 6d 75 1d af de fb de ab 57 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXH:IDATxZiu~3{\HI6iQEJQM#0K$-p(pN$p#H8%lX&ia}]rO.\|q)BomuW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:31 UTC	627	OUT	GET /static/superman/img/topnav/newxueshuicon-a5314d5c83.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:32 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:31 GMT Content-Type: image/png Content-Length: 2651 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "a5314d5c8374c8e3b4a60d609c84ba66" Cache-Control: max-age=31536000 Age: 375444 Accept-Ranges: bytes Content-MD5: pTFNXIN0yOO0pg1gnIS6Zg== x-bce-content-crc32: 3165450194 x-bce-debug-id: c/BtKYYNZAyeN5NDMHQm1UisHac1cOx/KowylUnUJWL3tBvzMNwXZZwy6IFR97aKmbt4g+aq8wJWDLoaXnCquw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4411d1d5-0702-4526-b3f8-0628e4c8793c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 2651 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:32 UTC	2651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 06 00 00 01 06 92 00 a2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 09 c5 49 44 41 54 78 01 ed 5d 0d 70 55 c5 15 3e 21 bf 04 12 12 10 42 48 41 3b da a9 88 22 fe 30 08 53 da 80 44 2c 08 15 64 c6 11 06 1c 1c 75 fc a9 05 14 c7 16 a6 d3 54 47 47 47 b4 2a fe 74 c4 6a 85 29 33 62 a9 3a 29 ca 9f 22 a2 a0 83 fc e9 a8 a8 b5 56 20 41 f9 4f 08 24 e4 25 2f bd e7 5e ce be dd bd bb f7 bd fb de de 90 38 bb 33 2f f7 ec d9 73 ce 9e fb ed be bd fb f6 9e dd 64 b5 Data Ascii: PNGIHDRXXsRGBDeXIfMMiXXHIDATx]pU>!BHA;"0SD,duTGGGtj)3b:)"V AO$%/^83/sd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 11:27:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191850 Date: Fri, 25 Oct 2024 11:27:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	623	OUT	GET /static/superman/img/qrcode/qrcode@2x-daf987ad02.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	883	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 1265 Connection: close Expires: Thu, 24 Oct 2024 01:55:23 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "daf987ad02f4984c4e7fcfe42617b171" Cache-Control: max-age=31536000 Age: 375446 Accept-Ranges: bytes Content-MD5: 2vmHrQL0mExOf8/kJhexcQ== x-bce-content-crc32: 436621703 x-bce-debug-id: JyOIwaOthBi4jnXVSN1EphgbbENZ0ANyFWJM44xEBw/2My36/g7bTqGidJGsLysBKAf3GQ4RRPBo67WvO3UN2A== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 759179d0-445f-48ef-b826-0cb4a84bbc64 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 21 Oct 2024 01:55:23 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 1265 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:33 UTC	1265	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 01 20 05 c9 11 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 30 a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 db 37 6c 0c 00 00 04 5b 49 44 41 54 68 05 ed 59 b9 72 14 31 10 95 a6 28 9c 43 04 05 21 31 19 29 8e f1 17 60 88 7c 61 07 84 ac 43 af c3 5d 67 10 f8 5c 47 d8 fc 00 10 9b 94 8c 98 90 2b 73 6e 82 11 fd 34 f3 66 7b a5 b9 58 6f 19 17 35 aa f2 4a ea 7e 3a ba d5 87 46 36 a6 a2 58 d2 97 d7 7a 3f 5d 62 5e 99 d4 bd 3d 3e d8 b1 9e 01 a2 31 76 d5 99 f4 3d 88 00 27 f8 01 12 44 b4 97 d6 7b cf 50 7b 06 87 83 70 Data Ascii: PNGIHDR00 sRGBDeXIfMM*i007l[IDAThYr1(C!1)`\|aC]g\G+sn4f{Xo5J~:F6Xz?]b^=>1v='D{P{p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	622	OUT	GET /static/superman/img/topnav/newbaike-889054f349.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 2315 Connection: close Expires: Mon, 19 Aug 2024 18:02:25 GMT Last-Modified: Fri, 09 Aug 2024 11:44:01 GMT ETag: "889054f349b43513bc7e68d8b6f1c515" Cache-Control: max-age=31536000 Age: 376026 Accept-Ranges: bytes Content-MD5: iJBU80m0NRO8fmjYtvHFFQ== x-bce-content-crc32: 2941438211 x-bce-debug-id: nJIhNDoMsctxCS54aZsa1u8qljZrTgLdp2GJRtM2YLZ3h3ky8HBRXab5Ad7Fss6Ji6nzD/zfptmVfVRKv7sA6w== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 71968c93-0d6e-469c-90ef-43b1b20e32e4 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 16 Aug 2024 18:02:25 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache61 [2] Ohc-File-Size: 2315 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:33 UTC	2315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 75 49 44 41 54 78 01 ed 5b 79 6c 15 45 18 df eb 3d 68 41 40 28 57 5b ee 72 34 72 84 a3 12 e4 d0 1a c0 20 0a 12 09 57 a3 88 e1 12 8f a4 a2 41 05 a4 86 a8 09 1e 8d 01 39 15 a2 48 0b 46 62 e4 12 2c 28 72 55 ce 96 2b 14 68 29 72 96 43 ee b3 6f 0f 7f 8f 57 b7 bb fb f6 ed db 9d dd 62 d1 d9 bf 66 67 67 be f9 be df fb cd 37 33 df 7c 8f 55 14 85 a1 0f c3 70 14 84 10 02 14 88 32 26 50 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHuIDATx[ylE=hA@(W[r4r WA9HFb,(rU+h)rCoWbfgg73\|Up2&P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	623	OUT	GET /static/superman/img/topnav/newzhidao-da1cf444b0.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 2315 Connection: close Expires: Wed, 09 Oct 2024 11:35:54 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "da1cf444b022eb5cb48f651f7e104070" Cache-Control: max-age=31536000 Age: 376026 Accept-Ranges: bytes Content-MD5: 2hz0RLAi61y0j2UffhBAcA== x-bce-content-crc32: 4036195702 x-bce-debug-id: ab1zCjAxSOPhPAXfb9ygSLpWh/rZw8kHtRDq9zHKPgJcMV3f9+X1mXjdBST7rG+yhGXneHSDmP877MY2vQazqQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 594a6879-1552-41fc-8a15-22e2e30e5699 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 11:35:54 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache50 [2] Ohc-File-Size: 2315 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:33 UTC	2315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 75 49 44 41 54 78 01 ed 5a 79 70 53 45 18 cf 7d 35 4d d3 33 6d 4a 69 c1 02 72 14 11 e4 66 14 90 63 10 e5 d4 a2 9c 23 8e ce e0 f0 07 02 8e 22 87 c2 a8 4c 45 64 60 74 9c 51 01 65 60 ec 14 29 ca e1 28 72 14 95 41 a8 14 a1 58 b9 0a c8 95 a6 57 48 93 a6 49 d3 24 7e 9a ce eb be 97 e6 65 77 5f 92 fa c7 eb f4 8f 6f 77 bf 6b 7f f9 f6 db dd ef ad 34 10 08 48 c4 3f 89 44 26 82 10 44 40 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHuIDATxZypSE}5M3mJirfc#"LEd`tQe`)(rAXWHI$~ew_owk4H?D&D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	625	OUT	GET /static/superman/img/topnav/newjiankang-f03b804b4b.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 2746 Connection: close Expires: Sat, 12 Oct 2024 11:38:26 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f03b804b4bfb627d871d88c47d53913f" Cache-Control: max-age=31536000 Age: 375040 Accept-Ranges: bytes Content-MD5: 8DuAS0v7Yn2HHYjEfVORPw== x-bce-content-crc32: 2359456334 x-bce-debug-id: gwZJUVj2zSbQgQ6K53Y0I4xkIYT+wfN7dtAa8yP4qYSv8r5Ww0yaSstW1G9iOW0i/njvdNh5byquNzAdbvfrnA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 7316255e-7117-4949-b347-dc023376e30a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2746 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:33 UTC	2746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0a 24 49 44 41 54 78 01 ed 5a 6b 6c 5c 47 15 be fb b0 b3 6b 7b 1d 3b 9b fa 1d d2 a4 49 9c 07 49 e3 18 52 9a 96 57 23 55 55 13 42 05 88 96 fe a1 e2 21 51 44 a4 aa 12 12 08 55 e2 1f 3f 40 45 15 42 06 15 d4 22 f1 0f 09 21 d2 04 a1 a2 2a 4d 55 45 ad 93 14 37 75 55 97 e0 26 d8 49 1d fc de d8 b5 63 7b bd 7c df 39 73 d7 7b 9d bb 5e ef de 5d 6f 2a ee 64 3d 77 e6 dc 73 e6 9e f3 cd 77 66 Data Ascii: PNGIHDRXXcsRGBDeXIfMMiXXH$IDATxZkl\Gk{;IIRW#UUB!QDU?@EB"!MUE7uU&Ic{\|9s{^]o*d=wswf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	562	OUT	GET /static/superman/js/lib/jquery-1-edb203c114.10.2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	833	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 143929 Connection: close Expires: Fri, 31 May 2024 06:47:25 GMT Last-Modified: Tue, 06 Jun 2023 08:42:36 GMT ETag: "edb203c114d8e1115c869ca443dd6e48" Cache-Control: max-age=31536000 Age: 375041 Accept-Ranges: bytes Content-MD5: 7bIDwRTY4RFchpykQ91uSA== x-bce-content-crc32: 1196392526 x-bce-debug-id: 6xkN0zvBOO9cMC+0fPcA9GC1RiLCdi7/RylAk8Z7IB5rtOeEGvxTSe2PyoHs/pkT2vwXoXggS/S2TYuikUp1Og== x-bce-request-id: 561bd67a-58b7-4494-8a4c-84822792cf9c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 28 May 2024 06:47:25 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 143929 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:33 UTC	15551	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 72 65 61 64 79 4c 69 73 74 2c 72 6f 6f 74 6a 51 75 65 72 79 2c 63 6f 72 65 5f 73 74 72 75 6e 64 65 66 69 6e 65 64 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 6c 6f 63 61 74 69 6f 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 64 6f 63 75 6d 65 6e 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 64 6f 63 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 5f 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 5f 24 3d 77 69 6e 64 6f 77 2e 24 2c 63 6c 61 73 73 32 74 79 70 65 3d 7b 7d 2c 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 3d 5b 5d 2c 63 6f 72 65 5f 76 65 72 73 69 6f 6e 3d 22 31 2e 31 Data Ascii: (function(window,undefined){var readyList,rootjQuery,core_strundefined=typeof undefined,location=window.location,document=window.document,docElem=document.documentElement,_jQuery=window.jQuery,_$=window.$,class2type={},core_deletedIds=[],core_version="1.1
2024-10-25 11:27:33 UTC	16384	IN	Data Raw: 6d 29 26 26 65 6c 65 6d 2e 69 64 3d 3d 3d 6d 29 7b 72 65 73 75 6c 74 73 2e 70 75 73 68 28 65 6c 65 6d 29 3b 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 7d 7d 7d 65 6c 73 65 20 69 66 28 6d 61 74 63 68 5b 32 5d 29 7b 70 75 73 68 2e 61 70 70 6c 79 28 72 65 73 75 6c 74 73 2c 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 65 6c 65 63 74 6f 72 29 29 3b 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 0a 7d 65 6c 73 65 20 69 66 28 28 6d 3d 6d 61 74 63 68 5b 33 5d 29 26 26 73 75 70 70 6f 72 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 7b 70 75 73 68 2e 61 70 70 6c 79 28 72 65 73 75 6c 74 73 2c 63 6f 6e 74 Data Ascii: m)&&elem.id===m){results.push(elem);return results}}}else if(match[2]){push.apply(results,context.getElementsByTagName(selector));return results}else if((m=match[3])&&support.getElementsByClassName&&context.getElementsByClassName){push.apply(results,cont
2024-10-25 11:27:33 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 3c 30 3f 61 72 67 75 6d 65 6e 74 2b 6c 65 6e 67 74 68 3a 61 72 67 75 6d 65 6e 74 3b 66 6f 72 28 3b 2b 2b 69 3c 6c 65 6e 67 74 68 3b 29 7b 6d 61 74 63 68 49 6e 64 65 78 65 73 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 6d 61 74 63 68 49 6e 64 65 78 65 73 7d 29 7d 7d 3b 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 22 6e 74 68 22 5d 3d 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 22 65 71 22 5d 0a 3b 66 6f 72 28 69 20 69 6e 7b 72 61 64 69 6f 3a 74 72 75 65 2c 63 68 65 63 6b 62 6f 78 3a 74 72 75 65 2c 66 69 6c 65 3a 74 72 75 65 2c 70 61 73 73 77 6f 72 64 3a 74 72 75 65 2c 69 6d 61 67 65 3a 74 72 75 65 7d 29 7b 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 69 5d 3d 63 72 65 61 74 65 49 6e 70 75 74 50 73 65 75 64 6f 28 69 29 7d 66 6f 72 28 69 20 69 6e 7b 73 Data Ascii: gument<0?argument+length:argument;for(;++i<length;){matchIndexes.push(i)}return matchIndexes})}};Expr.pseudos["nth"]=Expr.pseudos["eq"];for(i in{radio:true,checkbox:true,file:true,password:true,image:true}){Expr.pseudos[i]=createInputPseudo(i)}for(i in{s
2024-10-25 11:27:33 UTC	16384	IN	Data Raw: 6c 69 70 3d 3d 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3b 66 6f 72 28 69 20 69 6e 20 6a 51 75 65 72 79 28 73 75 70 70 6f 72 74 29 29 7b 62 72 65 61 6b 7d 73 75 70 70 6f 72 74 2e 6f 77 6e 4c 61 73 74 3d 69 21 3d 3d 22 30 22 3b 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 2c 6d 61 72 67 69 6e 44 69 76 2c 74 64 73 2c 64 69 76 52 65 73 65 74 3d 22 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 Data Ascii: lip==="content-box";for(i in jQuery(support)){break}support.ownLast=i!=="0";jQuery(function(){var container,marginDiv,tds,divReset="padding:0;margin:0;border:0;display:block;box-sizing:content-box;-moz-box-sizing:content-box;-webkit-box-sizing:content-box
2024-10-25 11:27:33 UTC	16384	IN	Data Raw: 66 61 6c 73 65 3a 76 61 6c 75 65 2c 6e 61 6d 65 29 7d 7d 3b 6a 51 75 65 72 79 2e 65 61 63 68 28 5b 22 77 69 64 74 68 22 2c 22 68 65 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 61 6d 65 29 7b 6a 51 75 65 72 79 2e 61 74 74 72 48 6f 6f 6b 73 5b 6e 61 6d 65 5d 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 76 61 6c 75 65 29 7b 69 66 28 76 61 6c 75 65 3d 3d 3d 22 22 29 7b 65 6c 65 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 61 6d 65 2c 22 61 75 74 6f 22 29 3b 72 65 74 75 72 6e 20 76 61 6c 75 65 7d 7d 7d 7d 29 7d 69 66 28 21 6a 51 75 65 72 79 2e 73 75 70 70 6f 72 74 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 29 7b 6a 51 75 65 72 79 2e 65 61 63 68 28 5b 22 68 72 65 66 22 2c 22 73 72 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 0a Data Ascii: false:value,name)}};jQuery.each(["width","height"],function(i,name){jQuery.attrHooks[name]={set:function(elem,value){if(value===""){elem.setAttribute(name,"auto");return value}}}})}if(!jQuery.support.hrefNormalized){jQuery.each(["href","src"],function(i,
2024-10-25 11:27:34 UTC	16384	IN	Data Raw: 2e 6f 72 69 67 54 79 70 65 2b 22 2e 22 2b 68 61 6e 64 6c 65 4f 62 6a 2e 6e 61 6d 65 73 70 61 63 65 3a 68 61 6e 64 6c 65 4f 62 6a 2e 6f 72 69 67 54 79 70 65 2c 68 61 6e 64 6c 65 4f 62 6a 2e 73 65 6c 65 63 74 6f 72 2c 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 0a 69 66 28 74 79 70 65 6f 66 20 74 79 70 65 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 74 79 70 65 20 69 6e 20 74 79 70 65 73 29 7b 74 68 69 73 2e 6f 66 66 28 74 79 70 65 2c 73 65 6c 65 63 74 6f 72 2c 74 79 70 65 73 5b 74 79 70 65 5d 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 73 65 6c 65 63 74 6f 72 3d 3d 3d 66 61 6c 73 65 7c 7c 74 79 70 65 6f 66 20 73 65 6c 65 63 74 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6e 3d 73 65 Data Ascii: .origType+"."+handleObj.namespace:handleObj.origType,handleObj.selector,handleObj.handler);return this}if(typeof types==="object"){for(type in types){this.off(type,selector,types[type])}return this}if(selector===false\|\|typeof selector==="function"){fn=se
2024-10-25 11:27:34 UTC	16384	IN	Data Raw: 6f 64 65 73 5b 69 2b 2b 5d 29 7b 69 66 28 73 65 6c 65 63 74 69 6f 6e 26 26 6a 51 75 65 72 79 2e 69 6e 41 72 72 61 79 28 65 6c 65 6d 2c 73 65 6c 65 63 74 69 6f 6e 29 21 3d 3d 2d 31 29 7b 63 6f 6e 74 69 6e 75 65 7d 63 6f 6e 74 61 69 6e 73 3d 6a 51 75 65 72 79 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 65 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 6c 65 6d 29 3b 74 6d 70 3d 67 65 74 41 6c 6c 28 73 61 66 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 65 6d 29 2c 22 73 63 72 69 70 74 22 29 3b 69 66 28 63 6f 6e 74 61 69 6e 73 29 7b 73 65 74 47 6c 6f 62 61 6c 45 76 61 6c 28 74 6d 70 29 7d 69 66 28 73 63 72 69 70 74 73 29 7b 6a 3d 30 3b 77 68 69 6c 65 28 65 6c 65 6d 3d 74 6d 70 5b 6a 2b 2b 5d 29 7b 69 66 28 72 73 63 72 69 70 74 54 79 70 65 2e 74 65 73 74 28 65 Data Ascii: odes[i++]){if(selection&&jQuery.inArray(elem,selection)!==-1){continue}contains=jQuery.contains(elem.ownerDocument,elem);tmp=getAll(safe.appendChild(elem),"script");if(contains){setGlobalEval(tmp)}if(scripts){j=0;while(elem=tmp[j++]){if(rscriptType.test(e
2024-10-25 11:27:34 UTC	16384	IN	Data Raw: 69 6e 65 64 29 7b 28 66 6c 61 74 4f 70 74 69 6f 6e 73 5b 6b 65 79 5d 3f 74 61 72 67 65 74 3a 64 65 65 70 7c 7c 28 64 65 65 70 3d 7b 7d 29 29 5b 6b 65 79 5d 3d 73 72 63 5b 6b 65 79 5d 7d 7d 69 66 28 64 65 65 70 29 7b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 74 61 72 67 65 74 2c 64 65 65 70 29 7d 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d 0a 6a 51 75 65 72 79 2e 66 6e 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 70 61 72 61 6d 73 2c 63 61 6c 6c 62 61 63 6b 29 7b 69 66 28 74 79 70 65 6f 66 20 75 72 6c 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 5f 6c 6f 61 64 29 7b 72 65 74 75 72 6e 20 5f 6c 6f 61 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 73 65 6c 65 63 74 6f 72 2c 72 65 73 70 6f 6e 73 65 2c 74 Data Ascii: ined){(flatOptions[key]?target:deep\|\|(deep={}))[key]=src[key]}}if(deep){jQuery.extend(true,target,deep)}return target}jQuery.fn.load=function(url,params,callback){if(typeof url!=="string"&&_load){return _load.apply(this,arguments)}var selector,response,t
2024-10-25 11:27:34 UTC	13690	IN	Data Raw: 70 3a 66 75 6e 63 74 69 6f 6e 28 67 6f 74 6f 45 6e 64 29 7b 76 61 72 20 69 6e 64 65 78 3d 30 2c 6c 65 6e 67 74 68 3d 67 6f 74 6f 45 6e 64 3f 61 6e 69 6d 61 74 69 6f 6e 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 73 74 6f 70 70 65 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 73 74 6f 70 70 65 64 3d 74 72 75 65 3b 66 6f 72 28 3b 69 6e 64 65 78 3c 6c 65 6e 67 74 68 3b 69 6e 64 65 78 2b 2b 29 7b 61 6e 69 6d 61 74 69 6f 6e 2e 74 77 65 65 6e 73 5b 69 6e 64 65 78 5d 2e 72 75 6e 28 31 29 7d 69 66 28 67 6f 74 6f 45 6e 64 29 7b 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 6c 65 6d 2c 5b 61 6e 69 6d 61 74 69 6f 6e 2c 67 6f 74 6f 45 6e 64 5d 29 7d 65 6c 73 65 7b 64 65 66 65 72 72 65 64 2e 72 65 6a 65 63 74 57 69 74 68 28 65 6c 65 Data Ascii: p:function(gotoEnd){var index=0,length=gotoEnd?animation.tweens.length:0;if(stopped){return this}stopped=true;for(;index<length;index++){animation.tweens[index].run(1)}if(gotoEnd){deferred.resolveWith(elem,[animation,gotoEnd])}else{deferred.rejectWith(ele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49754	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	552	OUT	GET /static/superman/js/lib/esl-d776bfb1aa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 16420 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "d776bfb1aae5a93ad826135c4b1c8727" Cache-Control: max-age=31536000 Age: 376021 Accept-Ranges: bytes Content-MD5: 13a/sarlqTrYJhNcSxyHJw== x-bce-content-crc32: 1931967198 x-bce-debug-id: d0L2rTibneb6xb+2ZRZBc0wMIZeMn5gkeYWXkDGjkU/aGxhaBJ1ebvMSMCehQXqghQxOI7xHambcqb62w8TKyQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5a0fa480-ef5f-47a4-8f2a-342541604968 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache51 [2] Ohc-File-Size: 16420 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:33 UTC	15477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 29 7b 69 66 28 72 6f 6f 74 2e 65 73 6c 26 26 72 6f 6f 74 2e 72 65 71 75 69 72 65 26 26 72 6f 6f 74 2e 65 73 6c 2e 76 65 72 73 69 6f 6e 3d 3d 3d 72 6f 6f 74 2e 72 65 71 75 69 72 65 2e 76 65 72 73 69 6f 6e 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 64 65 66 69 6e 65 3b 76 61 72 20 72 65 71 75 69 72 65 3b 76 61 72 20 65 73 6c 3b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 7b 76 61 72 20 6d 6f 64 4d 6f 64 75 6c 65 73 3d 7b 7d 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 50 52 45 5f 44 45 46 49 4e 45 44 3d 31 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 41 4e 41 4c 59 5a 45 44 3d 32 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 50 52 45 50 41 52 45 44 3d 33 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 44 45 46 49 4e 45 44 3d 34 3b 76 61 72 20 6d 6f 64 Data Ascii: (function(root){if(root.esl&&root.require&&root.esl.version===root.require.version){return}var define;var require;var esl;(function(global){var modModules={};var MODULE_PRE_DEFINED=1;var MODULE_ANALYZED=2;var MODULE_PREPARED=3;var MODULE_DEFINED=4;var mod
2024-10-25 11:27:33 UTC	943	IN	Data Raw: 28 29 7b 76 61 72 20 72 65 61 64 79 53 74 61 74 65 3d 73 63 72 69 70 74 2e 72 65 61 64 79 53 74 61 74 65 3b 69 66 28 74 79 70 65 6f 66 20 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 2f 5e 28 6c 6f 61 64 65 64 7c 63 6f 6d 70 6c 65 74 65 29 24 2f 2e 74 65 73 74 28 72 65 61 64 79 53 74 61 74 65 29 29 7b 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 3d 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 3b 73 63 72 69 70 74 3d 6e 75 6c 6c 3b 6f 6e 6c 6f 61 64 28 29 7d 7d 63 75 72 72 65 6e 74 6c 79 41 64 64 69 6e 67 53 63 72 69 70 74 3d 73 63 72 69 70 74 0a 3b 62 61 73 65 45 6c 65 6d 65 6e 74 3f 68 65 61 64 45 6c 65 6d 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 63 72 69 70 74 2c 62 61 Data Ascii: (){var readyState=script.readyState;if(typeof readyState==="undefined"\|\|/^(loaded\|complete)$/.test(readyState)){script.onload=script.onreadystatechange=null;script=null;onload()}}currentlyAddingScript=script;baseElement?headElement.insertBefore(script,ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	395	OUT	GET /static/superman/img/topnav/newxueshuicon-a5314d5c83.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 2651 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "a5314d5c8374c8e3b4a60d609c84ba66" Cache-Control: max-age=31536000 Age: 375446 Accept-Ranges: bytes Content-MD5: pTFNXIN0yOO0pg1gnIS6Zg== x-bce-content-crc32: 3165450194 x-bce-debug-id: c/BtKYYNZAyeN5NDMHQm1UisHac1cOx/KowylUnUJWL3tBvzMNwXZZwy6IFR97aKmbt4g+aq8wJWDLoaXnCquw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4411d1d5-0702-4526-b3f8-0628e4c8793c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 2651 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:33 UTC	2651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 06 00 00 01 06 92 00 a2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 09 c5 49 44 41 54 78 01 ed 5d 0d 70 55 c5 15 3e 21 bf 04 12 12 10 42 48 41 3b da a9 88 22 fe 30 08 53 da 80 44 2c 08 15 64 c6 11 06 1c 1c 75 fc a9 05 14 c7 16 a6 d3 54 47 47 47 b4 2a fe 74 c4 6a 85 29 33 62 a9 3a 29 ca 9f 22 a2 a0 83 fc e9 a8 a8 b5 56 20 41 f9 4f 08 24 e4 25 2f bd e7 5e ce be dd bd bb f7 bd fb de de 90 38 bb 33 2f f7 ec d9 73 ce 9e fb ed be bd fb f6 9e dd 64 b5 Data Ascii: PNGIHDRXXsRGBDeXIfMMiXXHIDATx]pU>!BHA;"0SD,duTGGGtj)3b:)"V AO$%/^83/sd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	390	OUT	GET /static/superman/img/topnav/newfanyi-da0cea8f7e.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:33 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Type: image/png Content-Length: 4560 Connection: close Expires: Mon, 14 Oct 2024 00:00:08 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "da0cea8f7e96046b1140228813422283" Cache-Control: max-age=31536000 Age: 376026 Accept-Ranges: bytes Content-MD5: 2gzqj36WBGsRQCKIE0Iigw== x-bce-content-crc32: 3211882637 x-bce-debug-id: y3fUGUnn0kNRJhzZvbtCVmGZ4Rstryq8npD4ECLMhqfP0mJWvqDTdD/8v1i/0/LCiHkt7aof3I4GithLLebIEw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: da5d1756-9e31-4fc7-aa63-e7c43c10e9e6 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 00:00:08 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 4560 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:33 UTC	4560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 11 3a 49 44 41 54 78 01 ed 5a 69 8c 1c c7 75 7e d5 dd 33 7b df bb 5c ae a8 e5 f2 92 48 49 36 69 51 94 45 4a b2 1d 51 97 13 19 8a 4d 23 30 02 4b 0e 84 24 80 2d c8 70 90 28 70 e4 1f 4e e0 24 70 f2 23 48 94 00 01 1c 38 88 0f 18 b0 25 1b 06 6c 58 06 a3 c3 26 69 ca d4 61 c2 e2 7d df dc 5d 72 4f 2e f7 9e e9 ae 7c df ab ee d9 19 71 29 ed cc 0e 03 18 98 42 6f 6d 75 1d af de fb de ab 57 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXH:IDATxZiu~3{\HI6iQEJQM#0K$-p(pN$p#H8%lX&ia}]rO.\|q)BomuW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49758	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 11:27:34 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191849 Date: Fri, 25 Oct 2024 11:27:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 11:27:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	391	OUT	GET /static/superman/img/qrcode/qrcode@2x-daf987ad02.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	883	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: image/png Content-Length: 1265 Connection: close Expires: Thu, 24 Oct 2024 01:55:23 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "daf987ad02f4984c4e7fcfe42617b171" Cache-Control: max-age=31536000 Age: 375447 Accept-Ranges: bytes Content-MD5: 2vmHrQL0mExOf8/kJhexcQ== x-bce-content-crc32: 436621703 x-bce-debug-id: JyOIwaOthBi4jnXVSN1EphgbbENZ0ANyFWJM44xEBw/2My36/g7bTqGidJGsLysBKAf3GQ4RRPBo67WvO3UN2A== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 759179d0-445f-48ef-b826-0cb4a84bbc64 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 21 Oct 2024 01:55:23 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 1265 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:34 UTC	1265	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 01 20 05 c9 11 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 30 a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 db 37 6c 0c 00 00 04 5b 49 44 41 54 68 05 ed 59 b9 72 14 31 10 95 a6 28 9c 43 04 05 21 31 19 29 8e f1 17 60 88 7c 61 07 84 ac 43 af c3 5d 67 10 f8 5c 47 d8 fc 00 10 9b 94 8c 98 90 2b 73 6e 82 11 fd 34 f3 66 7b a5 b9 58 6f 19 17 35 aa f2 4a ea 7e 3a ba d5 87 46 36 a6 a2 58 d2 97 d7 7a 3f 5d 62 5e 99 d4 bd 3d 3e d8 b1 9e 01 a2 31 76 d5 99 f4 3d 88 00 27 f8 01 12 44 b4 97 d6 7b cf 50 7b 06 87 83 70 Data Ascii: PNGIHDR00 sRGBDeXIfMM*i007l[IDAThYr1(C!1)`\|aC]g\G+sn4f{Xo5J~:F6Xz?]b^=>1v='D{P{p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	550	OUT	GET /static/superman/js/sbase-5440d5bf38.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 63683 Connection: close Expires: Fri, 11 Oct 2024 16:33:55 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "5440d5bf38d63737fcda82cc37db03b1" Cache-Control: max-age=31536000 Age: 375870 Accept-Ranges: bytes Content-MD5: VEDVvzjWNzf82oLMN9sDsQ== x-bce-content-crc32: 1758889232 x-bce-debug-id: 7bhV6CAGKJGZUG2IdHCF/F7gCpPOt8s6XZJ+wq0i4g9cHqYmsXZz27SJtNUjZO0uSRzHs2Gwrg3dNqPUtAYqLA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1804b643-1d1b-4656-bfc7-d9e518f64f65 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 16:33:55 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 63683 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:34 UTC	15477	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 66 69 72 65 3d 66 69 72 65 3b 5f 65 78 70 6f 72 74 73 2e 6f 6e 3d 6f 6e 3b 5f 65 78 70 6f 72 74 73 2e 75 6e 3d 75 6e 3b 66 75 6e 63 74 69 6f 6e 20 66 69 72 65 28 6d 6f 64 4e 61 6d 65 2c 65 76 74 4e 61 6d 65 2c 65 76 74 41 72 67 73 29 7b 46 2e 75 73 65 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 Data Ascii: define("superman/lib/event",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.fire=fire;_exports.on=on;_exports.un=un;function fire(modName,evtName,evtArgs){F.use("superman:lib
2024-10-25 11:27:34 UTC	16384	IN	Data Raw: 61 74 63 68 2c 6b 65 79 29 7b 76 61 72 20 72 65 70 6c 61 63 65 72 3d 64 61 74 61 5b 6b 65 79 5d 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 65 70 6c 61 63 65 72 29 29 7b 72 65 70 6c 61 63 65 72 3d 72 65 70 6c 61 63 65 72 28 6b 65 79 29 7d 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 6c 61 63 65 72 3f 22 22 3a 72 65 70 6c 61 63 65 72 7d 29 7d 72 65 74 75 72 6e 20 73 6f 75 72 63 65 7d 2c 0a 65 6e 63 6f 64 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 73 6f 75 72 63 65 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 73 6f 75 72 63 65 29 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c Data Ascii: atch,key){var replacer=data[key];if("[object Function]"==toString.call(replacer)){replacer=replacer(key)}return"undefined"==typeof replacer?"":replacer})}return source},encodeHTML:function(source){return String(source).replace(/&/g,"&").replace(/</g,
2024-10-25 11:27:34 UTC	16384	IN	Data Raw: 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 73 76 6e 4d 6f 64 3d 61 72 72 5b 30 5d 3b 6e 61 6d 65 3d 61 72 72 5b 31 5d 7d 65 6c 73 65 20 69 66 28 62 61 73 65 50 61 74 68 29 7b 73 76 6e 4d 6f 64 3d 62 61 73 65 50 61 74 68 2e 73 70 6c 69 74 28 22 2f 22 29 5b 31 5d 7d 73 76 6e 4d 6f 64 3d 73 76 6e 4d 6f 64 7c 7c 22 73 75 70 65 72 6d 61 6e 22 0a 3b 76 61 72 20 69 73 43 53 53 3d 2f 5c 2e 63 73 73 28 3f 3a 5c 3f 7c 24 29 2f 69 2e 74 65 73 74 28 6e 61 6d 65 29 3b 69 66 28 69 73 43 53 53 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 6d 6f 64 75 6c 65 46 69 6c 65 4d 61 70 5b 73 76 6e 4d 6f 64 5d 5b 6e 61 6d 65 5d 29 7b 46 2e 5f 75 73 65 43 6f 6e 66 69 67 26 26 28 6e 61 6d 65 3d 4d 6f 64 75 6c 65 2e 6d 6f 64 75 6c 65 46 69 6c 65 4d 61 70 5b 73 76 6e 4d 6f 64 5d 5b 6e 61 6d 65 5d Data Ascii: e.split(":");svnMod=arr[0];name=arr[1]}else if(basePath){svnMod=basePath.split("/")[1]}svnMod=svnMod\|\|"superman";var isCSS=/\.css(?:\?\|$)/i.test(name);if(isCSS){if(Module.moduleFileMap[svnMod][name]){F._useConfig&&(name=Module.moduleFileMap[svnMod][name]
2024-10-25 11:27:34 UTC	15438	IN	Data Raw: 66 7d 2c 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 70 6f 62 6a 2c 63 61 6c 6c 62 61 63 6b 2c 75 72 6c 29 7b 76 61 72 20 73 65 6c 66 3d 74 68 69 73 3b 73 65 6c 66 2e 5f 5f 73 65 6e 64 50 72 65 48 6f 6f 6b 26 26 73 65 6c 66 2e 5f 5f 73 65 6e 64 50 72 65 48 6f 6f 6b 28 70 6f 62 6a 29 3b 76 61 72 20 69 64 3d 22 6c 22 2b 44 61 74 65 2e 6e 6f 77 28 29 3b 76 61 72 20 72 65 71 3d 77 69 6e 64 6f 77 5b 69 64 5d 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 70 61 72 61 6d 73 3d 22 22 3b 76 61 72 20 74 69 6d 65 72 3d 6e 75 6c 6c 3b 75 72 6c 3d 75 72 6c 7c 7c 73 65 6c 66 2e 62 61 73 65 55 52 4c 3b 72 65 71 2e 6f 6e 6c 6f 61 64 3d 72 65 71 2e 6f 6e 65 72 72 6f 72 3d 72 65 71 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 69 64 5d 3d 6e Data Ascii: f},send:function(pobj,callback,url){var self=this;self.__sendPreHook&&self.__sendPreHook(pobj);var id="l"+Date.now();var req=window[id]=new Image;var params="";var timer=null;url=url\|\|self.baseURL;req.onload=req.onerror=req.onabort=function(){window[id]=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49761	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	390	OUT	GET /static/superman/img/topnav/newbaike-889054f349.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: image/png Content-Length: 2315 Connection: close Expires: Mon, 19 Aug 2024 18:02:25 GMT Last-Modified: Fri, 09 Aug 2024 11:44:01 GMT ETag: "889054f349b43513bc7e68d8b6f1c515" Cache-Control: max-age=31536000 Age: 376027 Accept-Ranges: bytes Content-MD5: iJBU80m0NRO8fmjYtvHFFQ== x-bce-content-crc32: 2941438211 x-bce-debug-id: nJIhNDoMsctxCS54aZsa1u8qljZrTgLdp2GJRtM2YLZ3h3ky8HBRXab5Ad7Fss6Ji6nzD/zfptmVfVRKv7sA6w== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 71968c93-0d6e-469c-90ef-43b1b20e32e4 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 16 Aug 2024 18:02:25 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache61 [2] Ohc-File-Size: 2315 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:34 UTC	2315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 75 49 44 41 54 78 01 ed 5b 79 6c 15 45 18 df eb 3d 68 41 40 28 57 5b ee 72 34 72 84 a3 12 e4 d0 1a c0 20 0a 12 09 57 a3 88 e1 12 8f a4 a2 41 05 a4 86 a8 09 1e 8d 01 39 15 a2 48 0b 46 62 e4 12 2c 28 72 55 ce 96 2b 14 68 29 72 96 43 ee b3 6f 0f 7f 8f 57 b7 bb fb f6 ed db 9d dd 62 d1 d9 bf 66 67 67 be f9 be df fb cd 37 33 df 7c 8f 55 14 85 a1 0f c3 70 14 84 10 02 14 88 32 26 50 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHuIDATx[ylE=hA@(W[r4r WA9HFb,(rU+h)rCoWbfgg73\|Up2&P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	577	OUT	GET /static/superman/css/ubase_sync-d600f57804.css?v=md5 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	894	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/css; charset=utf-8 Content-Length: 407 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:07 GMT ETag: "d600f57804631038c658b4056d63812a" Cache-Control: max-age=31536000 Age: 374999 Accept-Ranges: bytes Content-MD5: 1gD1eARjEDjGWLQFbWOBKg== x-bce-content-crc32: 99606430 x-bce-debug-id: BqI6cfv9/4T7M9UyxrYC2bgkrbdzZq7SNzCVcwc/18rI8dpAHXNf3thbk9mOGJccRRkBHnzypEp49RaIGKx3ZA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5fd33fce-61ec-493b-a31c-70d2909d102d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache56 [2] Ohc-File-Size: 407 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:34 UTC	407	IN	Data Raw: 2e 73 75 69 2d 73 63 72 6f 6c 6c 62 61 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 0a 2e 73 75 69 2d 73 63 72 6f 6c 6c 62 61 72 2d 62 61 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 31 65 31 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 33 65 33 65 33 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 33 65 33 65 33 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 33 65 33 65 33 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 33 65 33 65 33 3b 77 69 64 74 68 3a 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 Data Ascii: .sui-scrollbar-container{position:relative;overflow:hidden}.sui-scrollbar-bar{border-left:1px solid #e1e1e1;border-right:1px solid #e3e3e3;border-top:1px solid #e3e3e3;border-bottom:1px solid #e3e3e3;background:#e3e3e3;width:7px;position:absolute;top:0;r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	391	OUT	GET /static/superman/img/topnav/newzhidao-da1cf444b0.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: image/png Content-Length: 2315 Connection: close Expires: Wed, 09 Oct 2024 11:35:54 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "da1cf444b022eb5cb48f651f7e104070" Cache-Control: max-age=31536000 Age: 376027 Accept-Ranges: bytes Content-MD5: 2hz0RLAi61y0j2UffhBAcA== x-bce-content-crc32: 4036195702 x-bce-debug-id: ab1zCjAxSOPhPAXfb9ygSLpWh/rZw8kHtRDq9zHKPgJcMV3f9+X1mXjdBST7rG+yhGXneHSDmP877MY2vQazqQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 594a6879-1552-41fc-8a15-22e2e30e5699 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 06 Oct 2024 11:35:54 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache50 [2] Ohc-File-Size: 2315 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:34 UTC	2315	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 75 49 44 41 54 78 01 ed 5a 79 70 53 45 18 cf 7d 35 4d d3 33 6d 4a 69 c1 02 72 14 11 e4 66 14 90 63 10 e5 d4 a2 9c 23 8e ce e0 f0 07 02 8e 22 87 c2 a8 4c 45 64 60 74 9c 51 01 65 60 ec 14 29 ca e1 28 72 14 95 41 a8 14 a1 58 b9 0a c8 95 a6 57 48 93 a6 49 d3 24 7e 9a ce eb be 97 e6 65 77 5f 92 fa c7 eb f4 8f 6f 77 bf 6b 7f f9 f6 db dd ef ad 34 10 08 48 c4 3f 89 44 26 82 10 44 40 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHuIDATxZypSE}5M3mJirfc#"LEd`tQe`)(rAXWHI$~ew_owk4H?D&D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	393	OUT	GET /static/superman/img/topnav/newjiankang-f03b804b4b.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: image/png Content-Length: 2746 Connection: close Expires: Sat, 12 Oct 2024 11:38:26 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f03b804b4bfb627d871d88c47d53913f" Cache-Control: max-age=31536000 Age: 375041 Accept-Ranges: bytes Content-MD5: 8DuAS0v7Yn2HHYjEfVORPw== x-bce-content-crc32: 2359456334 x-bce-debug-id: gwZJUVj2zSbQgQ6K53Y0I4xkIYT+wfN7dtAa8yP4qYSv8r5Ww0yaSstW1G9iOW0i/njvdNh5byquNzAdbvfrnA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 7316255e-7117-4949-b347-dc023376e30a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2746 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:34 UTC	2746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0a 24 49 44 41 54 78 01 ed 5a 6b 6c 5c 47 15 be fb b0 b3 6b 7b 1d 3b 9b fa 1d d2 a4 49 9c 07 49 e3 18 52 9a 96 57 23 55 55 13 42 05 88 96 fe a1 e2 21 51 44 a4 aa 12 12 08 55 e2 1f 3f 40 45 15 42 06 15 d4 22 f1 0f 09 21 d2 04 a1 a2 2a 4d 55 45 ad 93 14 37 75 55 97 e0 26 d8 49 1d fc de d8 b5 63 7b bd 7c df 39 73 d7 7b 9d bb 5e ef de 5d 6f 2a ee 64 3d 77 e6 dc 73 e6 9e f3 cd 77 66 Data Ascii: PNGIHDRXXcsRGBDeXIfMMiXXH$IDATxZkl\Gk{;IIRW#UUB!QDU?@EB"!MUE7uU&Ic{\|9s{^]o*d=wswf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	558	OUT	GET /static/superman/js/s_super_index-3fffae8d60.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	903	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 1022 Connection: close Expires: Sat, 12 Oct 2024 11:38:26 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "3fffae8d606970854d942b26e5e279f7" Cache-Control: max-age=31536000 Age: 881069 Accept-Ranges: bytes Content-MD5: P/+ujWBpcIVNlCsm5eJ59w== x-bce-content-crc32: 29587601 x-bce-debug-id: uS/BjJtTQ/uJ80Kiqkqm1Axp9sv+xAB3x4RA5Si3ypbBrhivSNLzeMs1CprMQ/FmzcRLOzOSreSnCdEbHcF+Dw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b0369cef-2cde-49cd-afb2-9fff1c18f7e9 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 1022 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:34 UTC	1022	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 61 6d 4e 65 77 42 6f 78 3d 62 64 73 26 26 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 4e 65 77 42 6f 78 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 4e 65 77 42 6f 78 3d 3d 3d 31 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 6b 77 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6b 77 22 29 3b 6b 77 2e 66 6f 63 75 73 28 29 3b 69 66 28 73 61 6d 4e 65 77 42 6f 78 29 7b 76 61 72 20 62 74 6e 3d 24 28 22 23 73 75 22 29 3b 62 74 6e 2e 61 64 64 43 6c 61 73 73 28 22 62 74 6e 66 6f 63 75 73 22 29 3b 76 61 72 20 66 6f 72 6d 3d 24 28 22 23 66 6f 72 6d 22 29 3b 66 6f 72 6d 2e 61 64 64 43 6c 61 73 73 28 22 73 61 6d 5f 66 6f Data Ascii: (function(){var samNewBox=bds&&bds.comm&&bds.comm.samNewBox&&bds.comm.samNewBox===1;setTimeout(function(){try{var kw=document.getElementById("kw");kw.focus();if(samNewBox){var btn=$("#su");btn.addClass("btnfocus");var form=$("#form");form.addClass("sam_fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:34 UTC	554	OUT	GET /static/superman/js/min_super-c4c7be2850.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:34 UTC	908	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:34 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 65009 Connection: close Expires: Sat, 27 Jul 2024 13:18:53 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "c4c7be2850f34ef2e69dd4fad537ac08" Cache-Control: max-age=31536000 Age: 8027777 Accept-Ranges: bytes Content-MD5: xMe+KFDzTvLmndT61TesCA== x-bce-content-crc32: 1240981424 x-bce-debug-id: WmH78bccgmuGjuQmtChUfqovFkEumuREG56B/T9vzhJ4IyOpoz+tLPLhFgZZPZ2dxvfPhfkboIasdHmhYX2BRg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1b462aba-fa30-4494-b7a0-01acfcca2700 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 24 Jul 2024 13:18:53 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 65009 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:34 UTC	15476	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 63 6f 6d 6d 6f 6e 2f 72 65 73 75 6c 74 5f 70 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 65 78 70 6f 72 74 73 2e 63 72 65 61 74 65 52 65 73 75 6c 50 61 67 65 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 29 7b 69 66 28 21 6f 70 74 69 6f 6e 7c 7c 21 6f 70 74 69 6f 6e 2e 77 64 29 7b 72 65 74 75 72 6e 22 22 7d 69 66 28 21 6f 70 74 69 6f 6e 2e 74 6e 29 7b 6f 70 74 69 6f 6e 2e 74 6e 3d 22 62 61 69 64 75 74 6f 70 31 30 22 7d 72 65 74 75 72 6e 22 2f 2f 77 77 77 2e 62 61 69 64 75 2e 63 6f 6d 2f 73 3f 77 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 70 74 69 6f 6e 2e 77 64 29 2b 22 26 69 65 3d 75 74 66 2d 38 26 74 6e 3d 22 2b 6f 70 74 Data Ascii: F.module("common/result_page",function(require,exports,ctx){exports.createResulPageLink=function(option){if(!option\|\|!option.wd){return""}if(!option.tn){option.tn="baidutop10"}return"//www.baidu.com/s?wd="+encodeURIComponent(option.wd)+"&ie=utf-8&tn="+opt
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 69 63 6b 3a 22 35 31 30 30 30 30 30 30 30 34 22 7d 29 3b 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 61 67 69 6e 67 2d 74 6f 6f 6c 73 22 2c 7b 74 6f 6f 6c 43 6c 69 63 6b 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 63 72 69 70 74 5f 65 72 72 6f 72 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 63 72 69 70 74 5f 6c 6f 61 64 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 65 72 76 69 63 65 3a 22 35 31 30 30 30 30 30 30 30 30 22 7d 29 3b 0a 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 2f 63 61 72 64 69 74 65 6d 5f 6c 6f 67 22 2c 5b 22 63 61 72 64 49 74 65 6d 4c 6f 67 22 5d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 2f 63 Data Ascii: ick:"5100000004"});F.addLog("superman:aging-tools",{toolClick:"5100000000",new_aria_script_error:"5100000000",new_aria_script_load:"5100000000",new_aria_service:"5100000000"});F.addLog("superman:lib/carditem_log",["cardItemLog"]);F.module("superman:lib/c
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 64 6c 65 72 2c 66 61 6c 73 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 74 6f 70 44 65 66 61 75 6c 74 28 65 29 7b 69 66 28 69 73 49 45 29 7b 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 66 61 6c 73 65 7d 65 6c 73 65 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 53 74 79 6c 65 28 73 74 79 6c 65 53 74 72 29 7b 69 66 28 69 73 49 45 29 7b 76 61 72 20 73 74 79 6c 65 53 68 65 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 53 74 79 6c 65 53 68 65 65 74 28 29 3b 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 73 74 79 6c 65 53 74 72 7d 65 6c 73 65 7b 76 61 72 20 73 74 79 6c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 73 74 79 6c 65 2e 74 79 70 Data Ascii: dler,false)}}function stopDefault(e){if(isIE){e.returnValue=false}else{e.preventDefault()}}function addStyle(styleStr){if(isIE){var styleSheet=document.createStyleSheet();styleSheet.cssText=styleStr}else{var style=document.createElement("style");style.typ
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 64 69 76 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 69 65 36 69 66 72 61 6d 65 2c 64 69 76 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 6f 63 4d 6f 75 73 65 44 6f 77 6e 28 65 29 7b 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 76 61 72 20 65 6c 6d 3d 65 2e 74 61 72 67 65 74 7c 7c 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3b 69 66 28 65 6c 6d 3d 3d 69 70 74 29 72 65 74 75 72 6e 3b 77 68 69 6c 65 28 65 6c 6d 3d 65 6c 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 0a 69 66 28 65 6c 6d 3d 3d 64 69 76 29 7b 72 65 74 75 72 6e 7d 7d 47 6c 6f 62 61 6c 43 74 72 6c 2e 64 6d 28 7b 74 79 70 65 3a 22 6d 6f 75 73 65 64 6f 77 6e 5f 6f 74 68 65 72 22 7d 29 7d 66 75 Data Ascii: e.style.position="absolute";div.parentNode.insertBefore(ie6iframe,div)}}function docMouseDown(e){e=e\|\|window.event;var elm=e.target\|\|e.srcElement;if(elm==ipt)return;while(elm=elm.parentNode){if(elm==div){return}}GlobalCtrl.dm({type:"mousedown_other"})}fu
2024-10-25 11:27:35 UTC	381	IN	Data Raw: 69 73 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 3b 69 66 28 68 57 72 61 70 2e 68 61 73 43 6c 61 73 73 28 22 73 2d 70 73 2d 69 73 6c 69 74 65 22 29 29 7b 72 65 74 75 72 6e 7d 69 66 28 21 73 5f 73 65 73 73 69 6f 6e 2e 69 73 4c 6f 67 69 6e 29 7b 72 65 74 75 72 6e 7d 69 66 28 74 6f 70 3e 3d 6b 77 54 6f 70 2d 31 38 29 7b 5f 72 6f 6c 6c 65 72 2e 74 6f 70 46 79 28 6c 65 66 74 2c 74 6f 70 29 7d 65 6c 73 65 7b 5f 72 6f 6c 6c 65 72 2e 75 6e 54 6f 70 46 79 28 6c 65 66 74 2c 74 6f 70 29 7d 69 66 28 69 73 49 45 37 29 7b 69 66 28 74 6f 70 3d 3d 30 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 75 70 4d 65 6e 75 5b 30 5d 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 7d 2c 32 30 30 29 7d 65 6c 73 65 7b 75 70 4d 65 6e 75 5b 30 5d 2e 73 74 79 6c 65 2e Data Ascii: is).scrollLeft();if(hWrap.hasClass("s-ps-islite")){return}if(!s_session.isLogin){return}if(top>=kwTop-18){_roller.topFy(left,top)}else{_roller.unTopFy(left,top)}if(isIE7){if(top==0){setTimeout(function(){upMenu[0].style.zoom=1},200)}else{upMenu[0].style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	380	OUT	GET /static/superman/js/lib/esl-d776bfb1aa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 16420 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "d776bfb1aae5a93ad826135c4b1c8727" Cache-Control: max-age=31536000 Age: 376023 Accept-Ranges: bytes Content-MD5: 13a/sarlqTrYJhNcSxyHJw== x-bce-content-crc32: 1931967198 x-bce-debug-id: d0L2rTibneb6xb+2ZRZBc0wMIZeMn5gkeYWXkDGjkU/aGxhaBJ1ebvMSMCehQXqghQxOI7xHambcqb62w8TKyQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5a0fa480-ef5f-47a4-8f2a-342541604968 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache51 [2] Ohc-File-Size: 16420 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:35 UTC	15477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 29 7b 69 66 28 72 6f 6f 74 2e 65 73 6c 26 26 72 6f 6f 74 2e 72 65 71 75 69 72 65 26 26 72 6f 6f 74 2e 65 73 6c 2e 76 65 72 73 69 6f 6e 3d 3d 3d 72 6f 6f 74 2e 72 65 71 75 69 72 65 2e 76 65 72 73 69 6f 6e 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 64 65 66 69 6e 65 3b 76 61 72 20 72 65 71 75 69 72 65 3b 76 61 72 20 65 73 6c 3b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 7b 76 61 72 20 6d 6f 64 4d 6f 64 75 6c 65 73 3d 7b 7d 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 50 52 45 5f 44 45 46 49 4e 45 44 3d 31 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 41 4e 41 4c 59 5a 45 44 3d 32 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 50 52 45 50 41 52 45 44 3d 33 3b 76 61 72 20 4d 4f 44 55 4c 45 5f 44 45 46 49 4e 45 44 3d 34 3b 76 61 72 20 6d 6f 64 Data Ascii: (function(root){if(root.esl&&root.require&&root.esl.version===root.require.version){return}var define;var require;var esl;(function(global){var modModules={};var MODULE_PRE_DEFINED=1;var MODULE_ANALYZED=2;var MODULE_PREPARED=3;var MODULE_DEFINED=4;var mod
2024-10-25 11:27:35 UTC	943	IN	Data Raw: 28 29 7b 76 61 72 20 72 65 61 64 79 53 74 61 74 65 3d 73 63 72 69 70 74 2e 72 65 61 64 79 53 74 61 74 65 3b 69 66 28 74 79 70 65 6f 66 20 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 2f 5e 28 6c 6f 61 64 65 64 7c 63 6f 6d 70 6c 65 74 65 29 24 2f 2e 74 65 73 74 28 72 65 61 64 79 53 74 61 74 65 29 29 7b 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 3d 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 3b 73 63 72 69 70 74 3d 6e 75 6c 6c 3b 6f 6e 6c 6f 61 64 28 29 7d 7d 63 75 72 72 65 6e 74 6c 79 41 64 64 69 6e 67 53 63 72 69 70 74 3d 73 63 72 69 70 74 0a 3b 62 61 73 65 45 6c 65 6d 65 6e 74 3f 68 65 61 64 45 6c 65 6d 65 6e 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 63 72 69 70 74 2c 62 61 Data Ascii: (){var readyState=script.readyState;if(typeof readyState==="undefined"\|\|/^(loaded\|complete)$/.test(readyState)){script.onload=script.onreadystatechange=null;script=null;onload()}}currentlyAddingScript=script;baseElement?headElement.insertBefore(script,ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	565	OUT	GET /static/superman/js/components/hotsearch-e35eee0e78.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6338 Connection: close Expires: Mon, 23 Sep 2024 16:21:51 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "e35eee0e781f9fa70cb3a9506b036dd9" Cache-Control: max-age=31536000 Age: 374998 Accept-Ranges: bytes Content-MD5: 417uDngfn6cMs6lQawNt2Q== x-bce-content-crc32: 2931100553 x-bce-debug-id: 1pLuk0n1+RdfxH3FL+VgiLgXg4z3bmPXYBx27NviHPJyY3uCtlP2RicKRx0Tyr6abUmNc434J9UZtwxxlekLjw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: cc3147ef-63a3-4f4b-bca0-a31b1dee121d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 20 Sep 2024 16:21:51 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 6338 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:35 UTC	6338	IN	Data Raw: 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 74 73 65 61 72 63 68 22 2c 5b 22 68 6f 74 73 65 61 72 63 68 43 6c 69 63 6b 22 2c 22 68 6f 74 73 65 61 72 63 68 53 68 6f 77 22 2c 22 68 6f 74 73 65 61 72 63 68 53 65 74 22 2c 22 6e 65 77 73 43 6c 69 63 6b 22 2c 22 6e 65 77 73 53 68 6f 77 22 5d 29 3b 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 22 2c 7b 63 61 74 65 67 6f 72 79 43 6c 69 63 6b 3a 22 31 32 30 30 31 30 30 30 30 31 22 7d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 74 73 65 61 72 63 68 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 70 61 67 65 Data Ascii: F.addLog("superman:components/hotsearch",["hotsearchClick","hotsearchShow","hotsearchSet","newsClick","newsShow"]);F.addLog("superman:components",{categoryClick:"1200100001"});F.module("superman:components/hotsearch",function(require,exports,ctx){var page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	626	OUT	GET /static/superman/img/topnav/yingxiaoicon-612169cc36.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: image/png Content-Length: 3378 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "612169cc36c91ddd3b1f6955eef781f2" Cache-Control: max-age=31536000 Age: 376030 Accept-Ranges: bytes Content-MD5: YSFpzDbJHd07H2lV7veB8g== x-bce-content-crc32: 2380670192 x-bce-debug-id: 7mU6EBUQ9i7mkDILaJ54XBFbqDpqnEjkY3MV7OTNVBVKSmxuWG3j4BhJVfXuZqhEMXj4Bu0g7Q+gdnqpyygddg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f61f2cdb-ab6a-4314-9cbb-4a8d457498d8 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache52 [2] Ohc-File-Size: 3378 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:35 UTC	3378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0c 9c 49 44 41 54 78 01 ed 5b 79 78 54 d5 15 ff cd 64 92 c9 be 12 20 a0 12 02 a8 21 84 00 09 c8 56 64 b1 51 5b f8 50 a4 5a 2c 52 fb 59 a4 a2 d6 d6 f5 d3 ba 54 f9 94 6a 29 5f 4b 6d 5d c0 5a a9 5b 51 16 ab 96 0a 4a 8b 24 04 c5 18 0c 11 62 44 08 18 59 42 16 b2 ce 4c 66 eb ef ce 9b 24 f3 66 79 33 f3 66 c2 5f ef 7c ef 9b b9 cb b9 ef de fb 9b 73 cf 3d e7 dc 3b 3a a7 d3 09 8d 00 bd 06 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHIDATx[yxTd !VdQ[PZ,RYTj)_Km]Z[QJ$bDYBLf$fy3f_\|s=;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49772	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	390	OUT	GET /static/superman/js/lib/jquery-1-edb203c114.10.2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	833	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 143929 Connection: close Expires: Fri, 31 May 2024 06:47:25 GMT Last-Modified: Tue, 06 Jun 2023 08:42:36 GMT ETag: "edb203c114d8e1115c869ca443dd6e48" Cache-Control: max-age=31536000 Age: 375043 Accept-Ranges: bytes Content-MD5: 7bIDwRTY4RFchpykQ91uSA== x-bce-content-crc32: 1196392526 x-bce-debug-id: 6xkN0zvBOO9cMC+0fPcA9GC1RiLCdi7/RylAk8Z7IB5rtOeEGvxTSe2PyoHs/pkT2vwXoXggS/S2TYuikUp1Og== x-bce-request-id: 561bd67a-58b7-4494-8a4c-84822792cf9c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 28 May 2024 06:47:25 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 143929 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:35 UTC	15551	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 72 65 61 64 79 4c 69 73 74 2c 72 6f 6f 74 6a 51 75 65 72 79 2c 63 6f 72 65 5f 73 74 72 75 6e 64 65 66 69 6e 65 64 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 6c 6f 63 61 74 69 6f 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 64 6f 63 75 6d 65 6e 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 64 6f 63 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 5f 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 5f 24 3d 77 69 6e 64 6f 77 2e 24 2c 63 6c 61 73 73 32 74 79 70 65 3d 7b 7d 2c 63 6f 72 65 5f 64 65 6c 65 74 65 64 49 64 73 3d 5b 5d 2c 63 6f 72 65 5f 76 65 72 73 69 6f 6e 3d 22 31 2e 31 Data Ascii: (function(window,undefined){var readyList,rootjQuery,core_strundefined=typeof undefined,location=window.location,document=window.document,docElem=document.documentElement,_jQuery=window.jQuery,_$=window.$,class2type={},core_deletedIds=[],core_version="1.1
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 6d 29 26 26 65 6c 65 6d 2e 69 64 3d 3d 3d 6d 29 7b 72 65 73 75 6c 74 73 2e 70 75 73 68 28 65 6c 65 6d 29 3b 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 7d 7d 7d 65 6c 73 65 20 69 66 28 6d 61 74 63 68 5b 32 5d 29 7b 70 75 73 68 2e 61 70 70 6c 79 28 72 65 73 75 6c 74 73 2c 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 65 6c 65 63 74 6f 72 29 29 3b 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 0a 7d 65 6c 73 65 20 69 66 28 28 6d 3d 6d 61 74 63 68 5b 33 5d 29 26 26 73 75 70 70 6f 72 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 7b 70 75 73 68 2e 61 70 70 6c 79 28 72 65 73 75 6c 74 73 2c 63 6f 6e 74 Data Ascii: m)&&elem.id===m){results.push(elem);return results}}}else if(match[2]){push.apply(results,context.getElementsByTagName(selector));return results}else if((m=match[3])&&support.getElementsByClassName&&context.getElementsByClassName){push.apply(results,cont
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 3c 30 3f 61 72 67 75 6d 65 6e 74 2b 6c 65 6e 67 74 68 3a 61 72 67 75 6d 65 6e 74 3b 66 6f 72 28 3b 2b 2b 69 3c 6c 65 6e 67 74 68 3b 29 7b 6d 61 74 63 68 49 6e 64 65 78 65 73 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 6d 61 74 63 68 49 6e 64 65 78 65 73 7d 29 7d 7d 3b 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 22 6e 74 68 22 5d 3d 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 22 65 71 22 5d 0a 3b 66 6f 72 28 69 20 69 6e 7b 72 61 64 69 6f 3a 74 72 75 65 2c 63 68 65 63 6b 62 6f 78 3a 74 72 75 65 2c 66 69 6c 65 3a 74 72 75 65 2c 70 61 73 73 77 6f 72 64 3a 74 72 75 65 2c 69 6d 61 67 65 3a 74 72 75 65 7d 29 7b 45 78 70 72 2e 70 73 65 75 64 6f 73 5b 69 5d 3d 63 72 65 61 74 65 49 6e 70 75 74 50 73 65 75 64 6f 28 69 29 7d 66 6f 72 28 69 20 69 6e 7b 73 Data Ascii: gument<0?argument+length:argument;for(;++i<length;){matchIndexes.push(i)}return matchIndexes})}};Expr.pseudos["nth"]=Expr.pseudos["eq"];for(i in{radio:true,checkbox:true,file:true,password:true,image:true}){Expr.pseudos[i]=createInputPseudo(i)}for(i in{s
2024-10-25 11:27:35 UTC	16384	IN	Data Raw: 6c 69 70 3d 3d 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 3b 66 6f 72 28 69 20 69 6e 20 6a 51 75 65 72 79 28 73 75 70 70 6f 72 74 29 29 7b 62 72 65 61 6b 7d 73 75 70 70 6f 72 74 2e 6f 77 6e 4c 61 73 74 3d 69 21 3d 3d 22 30 22 3b 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 2c 6d 61 72 67 69 6e 44 69 76 2c 74 64 73 2c 64 69 76 52 65 73 65 74 3d 22 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 Data Ascii: lip==="content-box";for(i in jQuery(support)){break}support.ownLast=i!=="0";jQuery(function(){var container,marginDiv,tds,divReset="padding:0;margin:0;border:0;display:block;box-sizing:content-box;-moz-box-sizing:content-box;-webkit-box-sizing:content-box
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 66 61 6c 73 65 3a 76 61 6c 75 65 2c 6e 61 6d 65 29 7d 7d 3b 6a 51 75 65 72 79 2e 65 61 63 68 28 5b 22 77 69 64 74 68 22 2c 22 68 65 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 61 6d 65 29 7b 6a 51 75 65 72 79 2e 61 74 74 72 48 6f 6f 6b 73 5b 6e 61 6d 65 5d 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 76 61 6c 75 65 29 7b 69 66 28 76 61 6c 75 65 3d 3d 3d 22 22 29 7b 65 6c 65 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 61 6d 65 2c 22 61 75 74 6f 22 29 3b 72 65 74 75 72 6e 20 76 61 6c 75 65 7d 7d 7d 7d 29 7d 69 66 28 21 6a 51 75 65 72 79 2e 73 75 70 70 6f 72 74 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 29 7b 6a 51 75 65 72 79 2e 65 61 63 68 28 5b 22 68 72 65 66 22 2c 22 73 72 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 0a Data Ascii: false:value,name)}};jQuery.each(["width","height"],function(i,name){jQuery.attrHooks[name]={set:function(elem,value){if(value===""){elem.setAttribute(name,"auto");return value}}}})}if(!jQuery.support.hrefNormalized){jQuery.each(["href","src"],function(i,
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 2e 6f 72 69 67 54 79 70 65 2b 22 2e 22 2b 68 61 6e 64 6c 65 4f 62 6a 2e 6e 61 6d 65 73 70 61 63 65 3a 68 61 6e 64 6c 65 4f 62 6a 2e 6f 72 69 67 54 79 70 65 2c 68 61 6e 64 6c 65 4f 62 6a 2e 73 65 6c 65 63 74 6f 72 2c 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 0a 69 66 28 74 79 70 65 6f 66 20 74 79 70 65 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 74 79 70 65 20 69 6e 20 74 79 70 65 73 29 7b 74 68 69 73 2e 6f 66 66 28 74 79 70 65 2c 73 65 6c 65 63 74 6f 72 2c 74 79 70 65 73 5b 74 79 70 65 5d 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 73 65 6c 65 63 74 6f 72 3d 3d 3d 66 61 6c 73 65 7c 7c 74 79 70 65 6f 66 20 73 65 6c 65 63 74 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6e 3d 73 65 Data Ascii: .origType+"."+handleObj.namespace:handleObj.origType,handleObj.selector,handleObj.handler);return this}if(typeof types==="object"){for(type in types){this.off(type,selector,types[type])}return this}if(selector===false\|\|typeof selector==="function"){fn=se
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 6f 64 65 73 5b 69 2b 2b 5d 29 7b 69 66 28 73 65 6c 65 63 74 69 6f 6e 26 26 6a 51 75 65 72 79 2e 69 6e 41 72 72 61 79 28 65 6c 65 6d 2c 73 65 6c 65 63 74 69 6f 6e 29 21 3d 3d 2d 31 29 7b 63 6f 6e 74 69 6e 75 65 7d 63 6f 6e 74 61 69 6e 73 3d 6a 51 75 65 72 79 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 65 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 6c 65 6d 29 3b 74 6d 70 3d 67 65 74 41 6c 6c 28 73 61 66 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 65 6d 29 2c 22 73 63 72 69 70 74 22 29 3b 69 66 28 63 6f 6e 74 61 69 6e 73 29 7b 73 65 74 47 6c 6f 62 61 6c 45 76 61 6c 28 74 6d 70 29 7d 69 66 28 73 63 72 69 70 74 73 29 7b 6a 3d 30 3b 77 68 69 6c 65 28 65 6c 65 6d 3d 74 6d 70 5b 6a 2b 2b 5d 29 7b 69 66 28 72 73 63 72 69 70 74 54 79 70 65 2e 74 65 73 74 28 65 Data Ascii: odes[i++]){if(selection&&jQuery.inArray(elem,selection)!==-1){continue}contains=jQuery.contains(elem.ownerDocument,elem);tmp=getAll(safe.appendChild(elem),"script");if(contains){setGlobalEval(tmp)}if(scripts){j=0;while(elem=tmp[j++]){if(rscriptType.test(e
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 69 6e 65 64 29 7b 28 66 6c 61 74 4f 70 74 69 6f 6e 73 5b 6b 65 79 5d 3f 74 61 72 67 65 74 3a 64 65 65 70 7c 7c 28 64 65 65 70 3d 7b 7d 29 29 5b 6b 65 79 5d 3d 73 72 63 5b 6b 65 79 5d 7d 7d 69 66 28 64 65 65 70 29 7b 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 74 61 72 67 65 74 2c 64 65 65 70 29 7d 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d 0a 6a 51 75 65 72 79 2e 66 6e 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 70 61 72 61 6d 73 2c 63 61 6c 6c 62 61 63 6b 29 7b 69 66 28 74 79 70 65 6f 66 20 75 72 6c 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 5f 6c 6f 61 64 29 7b 72 65 74 75 72 6e 20 5f 6c 6f 61 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 76 61 72 20 73 65 6c 65 63 74 6f 72 2c 72 65 73 70 6f 6e 73 65 2c 74 Data Ascii: ined){(flatOptions[key]?target:deep\|\|(deep={}))[key]=src[key]}}if(deep){jQuery.extend(true,target,deep)}return target}jQuery.fn.load=function(url,params,callback){if(typeof url!=="string"&&_load){return _load.apply(this,arguments)}var selector,response,t
2024-10-25 11:27:36 UTC	13690	IN	Data Raw: 70 3a 66 75 6e 63 74 69 6f 6e 28 67 6f 74 6f 45 6e 64 29 7b 76 61 72 20 69 6e 64 65 78 3d 30 2c 6c 65 6e 67 74 68 3d 67 6f 74 6f 45 6e 64 3f 61 6e 69 6d 61 74 69 6f 6e 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3a 30 3b 69 66 28 73 74 6f 70 70 65 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 73 74 6f 70 70 65 64 3d 74 72 75 65 3b 66 6f 72 28 3b 69 6e 64 65 78 3c 6c 65 6e 67 74 68 3b 69 6e 64 65 78 2b 2b 29 7b 61 6e 69 6d 61 74 69 6f 6e 2e 74 77 65 65 6e 73 5b 69 6e 64 65 78 5d 2e 72 75 6e 28 31 29 7d 69 66 28 67 6f 74 6f 45 6e 64 29 7b 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 6c 65 6d 2c 5b 61 6e 69 6d 61 74 69 6f 6e 2c 67 6f 74 6f 45 6e 64 5d 29 7d 65 6c 73 65 7b 64 65 66 65 72 72 65 64 2e 72 65 6a 65 63 74 57 69 74 68 28 65 6c 65 Data Ascii: p:function(gotoEnd){var index=0,length=gotoEnd?animation.tweens.length:0;if(stopped){return this}stopped=true;for(;index<length;index++){animation.tweens[index].run(1)}if(gotoEnd){deferred.resolveWith(elem,[animation,gotoEnd])}else{deferred.rejectWith(ele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49774	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	622	OUT	GET /static/superman/img/topnav/newzhibo-a6a0831ecd.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: image/png Content-Length: 4085 Connection: close Expires: Sat, 12 Oct 2024 11:38:27 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "a6a0831ecd5fdf11b86c9ae6ea945e65" Cache-Control: max-age=31536000 Age: 375039 Accept-Ranges: bytes Content-MD5: pqCDHs1f3xG4bJrm6pReZQ== x-bce-content-crc32: 3387288523 x-bce-debug-id: gJBnIJdb/LXj1CmtFPJJlolAU45M7FCWt3iwgtQAG95Nws+e2p72EEbG2YfAmkz1C6cplrLQjVc20evzT5ifmw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 71e4a6cd-2185-451f-809e-424c18ce074a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 4085 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:35 UTC	4085	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0f 5f 49 44 41 54 78 01 ed 5a d9 93 1d d7 59 ff be de ee 3a fb a2 d1 68 b4 8d d6 38 92 c0 36 38 31 04 62 12 5c c5 52 84 4a 1c 28 92 14 55 94 5f 80 ca 13 6f fc 07 79 a6 8a 87 54 91 17 1e e0 85 04 a8 3c 84 22 c6 82 50 b6 64 25 16 b6 63 ad c8 92 66 34 a3 59 ef dc 99 b9 77 e6 6e bd 1c 7e df e9 db 3d f7 ce 58 8e fa 8e 1c 0b e8 53 5d 7d 4f 9f 3e 7d fa 7c bf ef f7 2d e7 f4 65 a5 14 a5 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXH_IDATxZY:h8681b\RJ(U_oyT<"Pd%cf4Ywn~=XS]}O>}\|-e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	386	OUT	GET /static/superman/js/s_super_index-3fffae8d60.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	903	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 1022 Connection: close Expires: Sat, 12 Oct 2024 11:38:26 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "3fffae8d606970854d942b26e5e279f7" Cache-Control: max-age=31536000 Age: 881070 Accept-Ranges: bytes Content-MD5: P/+ujWBpcIVNlCsm5eJ59w== x-bce-content-crc32: 29587601 x-bce-debug-id: uS/BjJtTQ/uJ80Kiqkqm1Axp9sv+xAB3x4RA5Si3ypbBrhivSNLzeMs1CprMQ/FmzcRLOzOSreSnCdEbHcF+Dw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b0369cef-2cde-49cd-afb2-9fff1c18f7e9 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 1022 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:35 UTC	1022	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 61 6d 4e 65 77 42 6f 78 3d 62 64 73 26 26 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 4e 65 77 42 6f 78 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 4e 65 77 42 6f 78 3d 3d 3d 31 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 6b 77 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6b 77 22 29 3b 6b 77 2e 66 6f 63 75 73 28 29 3b 69 66 28 73 61 6d 4e 65 77 42 6f 78 29 7b 76 61 72 20 62 74 6e 3d 24 28 22 23 73 75 22 29 3b 62 74 6e 2e 61 64 64 43 6c 61 73 73 28 22 62 74 6e 66 6f 63 75 73 22 29 3b 76 61 72 20 66 6f 72 6d 3d 24 28 22 23 66 6f 72 6d 22 29 3b 66 6f 72 6d 2e 61 64 64 43 6c 61 73 73 28 22 73 61 6d 5f 66 6f Data Ascii: (function(){var samNewBox=bds&&bds.comm&&bds.comm.samNewBox&&bds.comm.samNewBox===1;setTimeout(function(){try{var kw=document.getElementById("kw");kw.focus();if(samNewBox){var btn=$("#su");btn.addClass("btnfocus");var form=$("#form");form.addClass("sam_fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	623	OUT	GET /static/superman/img/topnav/newyinyue-03ecd1e9b9.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:35 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:35 GMT Content-Type: image/png Content-Length: 2263 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "03ecd1e9b97ca338ac39e9c4ddda6927" Cache-Control: max-age=31536000 Age: 375448 Accept-Ranges: bytes Content-MD5: A+zR6bl8ozisOenE3dppJw== x-bce-content-crc32: 3477335213 x-bce-debug-id: wDDCckJIsZ8ip/vmbg1W6xUzlSKNGKzQwNwmxbzdzfHZqgpoPg2jeOMza0VgWPFaQxCQa5L+3RxiktILUPYraQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: abddc916-70e3-499f-9fc2-55790ed78656 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2263 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:35 UTC	2263	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 41 49 44 41 54 78 01 ed 5a 7b 50 54 55 18 df 7b f7 c9 ee 82 2c bb 80 99 ef e8 a9 e9 a4 f9 18 73 20 51 1b 2b 1d e9 ad c5 88 96 92 1a 8a a6 e5 34 96 33 4d 99 e5 58 66 29 50 52 89 4e 99 4a 13 36 96 16 bd 4c 2c f2 81 5a ce 58 19 3e 40 f3 01 cb 73 61 b9 77 1f b7 0f 61 d6 7b ef ee 9e 73 bc f7 42 fd 71 f8 eb dc ef fb 9d ef fb ce 8f 6f bf f3 64 04 41 d0 d1 3f 9d 8e a5 24 74 30 40 89 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHAIDATxZ{PTU{,s Q+43MXf)PRNJ6L,ZX>@sawa{sBqodA?$t0@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49777	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	623	OUT	GET /static/superman/img/topnav/chengpian-9981cd1fdb.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:36 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: image/png Content-Length: 3129 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "9981cd1fdbbabfafb8cec5980067e9b6" Cache-Control: max-age=31536000 Age: 375043 Accept-Ranges: bytes Content-MD5: mYHNH9u6v6+4zsWYAGfptg== x-bce-content-crc32: 2916630045 x-bce-debug-id: 7/c6SSgwt9gM2X4ee6rhY85+8T9S42GzBU6br3N+F8fRrSJ3CTslO8nDid7WJ3MX9phYwWmmeY9DCCJiUUfnjQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 0dc342c3-4e87-4f94-b127-038fdd2816a8 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 3129 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:36 UTC	3129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 b0 08 06 00 00 00 af b7 e4 5e 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0b ce 49 44 41 54 78 01 ed 9d 4d 6c 54 d7 15 c7 cf 54 51 65 22 22 81 57 8e 2b 15 6c 9c 2c 02 0b 3b 21 5d d9 7c 2c 88 12 16 14 a4 62 96 c6 c9 22 2c 1c 63 16 95 f2 51 21 2a 25 a1 5d d9 86 2e a0 52 1d bc ab 9d 06 09 47 6d d3 58 42 80 dd 4d 45 a9 91 4c 54 11 62 a1 54 18 54 55 c6 51 a2 e2 76 e3 bc ff 7b 7e c6 d8 33 9e af 7b df dc 73 ef ff 27 3d cd 60 18 89 99 f9 f9 bc 73 cf 3d f7 de dc 62 84 10 a2 93 c5 1f 08 21 8a a1 c0 44 35 14 98 a8 86 02 13 d5 50 60 a2 1a 0a 4c 54 43 81 89 6a 28 30 51 0d 05 26 aa a1 c0 44 Data Ascii: PNGIHDR^pHYs%%IR$sRGBgAMAaIDATxMlTTQe""W+l,;!]\|,b",cQ!*%].RGmXBMELTbTTUQv{~3{s'=`s=b!D5P`LTCj(0Q&D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49778	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:35 UTC	378	OUT	GET /static/superman/js/sbase-5440d5bf38.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:36 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 63683 Connection: close Expires: Fri, 11 Oct 2024 16:33:55 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "5440d5bf38d63737fcda82cc37db03b1" Cache-Control: max-age=31536000 Age: 375872 Accept-Ranges: bytes Content-MD5: VEDVvzjWNzf82oLMN9sDsQ== x-bce-content-crc32: 1758889232 x-bce-debug-id: 7bhV6CAGKJGZUG2IdHCF/F7gCpPOt8s6XZJ+wq0i4g9cHqYmsXZz27SJtNUjZO0uSRzHs2Gwrg3dNqPUtAYqLA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1804b643-1d1b-4656-bfc7-d9e518f64f65 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 16:33:55 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 63683 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:36 UTC	15477	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 66 69 72 65 3d 66 69 72 65 3b 5f 65 78 70 6f 72 74 73 2e 6f 6e 3d 6f 6e 3b 5f 65 78 70 6f 72 74 73 2e 75 6e 3d 75 6e 3b 66 75 6e 63 74 69 6f 6e 20 66 69 72 65 28 6d 6f 64 4e 61 6d 65 2c 65 76 74 4e 61 6d 65 2c 65 76 74 41 72 67 73 29 7b 46 2e 75 73 65 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 Data Ascii: define("superman/lib/event",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.fire=fire;_exports.on=on;_exports.un=un;function fire(modName,evtName,evtArgs){F.use("superman:lib
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 61 74 63 68 2c 6b 65 79 29 7b 76 61 72 20 72 65 70 6c 61 63 65 72 3d 64 61 74 61 5b 6b 65 79 5d 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 65 70 6c 61 63 65 72 29 29 7b 72 65 70 6c 61 63 65 72 3d 72 65 70 6c 61 63 65 72 28 6b 65 79 29 7d 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 6c 61 63 65 72 3f 22 22 3a 72 65 70 6c 61 63 65 72 7d 29 7d 72 65 74 75 72 6e 20 73 6f 75 72 63 65 7d 2c 0a 65 6e 63 6f 64 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 73 6f 75 72 63 65 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 73 6f 75 72 63 65 29 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c Data Ascii: atch,key){var replacer=data[key];if("[object Function]"==toString.call(replacer)){replacer=replacer(key)}return"undefined"==typeof replacer?"":replacer})}return source},encodeHTML:function(source){return String(source).replace(/&/g,"&").replace(/</g,
2024-10-25 11:27:36 UTC	16384	IN	Data Raw: 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 73 76 6e 4d 6f 64 3d 61 72 72 5b 30 5d 3b 6e 61 6d 65 3d 61 72 72 5b 31 5d 7d 65 6c 73 65 20 69 66 28 62 61 73 65 50 61 74 68 29 7b 73 76 6e 4d 6f 64 3d 62 61 73 65 50 61 74 68 2e 73 70 6c 69 74 28 22 2f 22 29 5b 31 5d 7d 73 76 6e 4d 6f 64 3d 73 76 6e 4d 6f 64 7c 7c 22 73 75 70 65 72 6d 61 6e 22 0a 3b 76 61 72 20 69 73 43 53 53 3d 2f 5c 2e 63 73 73 28 3f 3a 5c 3f 7c 24 29 2f 69 2e 74 65 73 74 28 6e 61 6d 65 29 3b 69 66 28 69 73 43 53 53 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 6d 6f 64 75 6c 65 46 69 6c 65 4d 61 70 5b 73 76 6e 4d 6f 64 5d 5b 6e 61 6d 65 5d 29 7b 46 2e 5f 75 73 65 43 6f 6e 66 69 67 26 26 28 6e 61 6d 65 3d 4d 6f 64 75 6c 65 2e 6d 6f 64 75 6c 65 46 69 6c 65 4d 61 70 5b 73 76 6e 4d 6f 64 5d 5b 6e 61 6d 65 5d Data Ascii: e.split(":");svnMod=arr[0];name=arr[1]}else if(basePath){svnMod=basePath.split("/")[1]}svnMod=svnMod\|\|"superman";var isCSS=/\.css(?:\?\|$)/i.test(name);if(isCSS){if(Module.moduleFileMap[svnMod][name]){F._useConfig&&(name=Module.moduleFileMap[svnMod][name]
2024-10-25 11:27:36 UTC	15438	IN	Data Raw: 66 7d 2c 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 70 6f 62 6a 2c 63 61 6c 6c 62 61 63 6b 2c 75 72 6c 29 7b 76 61 72 20 73 65 6c 66 3d 74 68 69 73 3b 73 65 6c 66 2e 5f 5f 73 65 6e 64 50 72 65 48 6f 6f 6b 26 26 73 65 6c 66 2e 5f 5f 73 65 6e 64 50 72 65 48 6f 6f 6b 28 70 6f 62 6a 29 3b 76 61 72 20 69 64 3d 22 6c 22 2b 44 61 74 65 2e 6e 6f 77 28 29 3b 76 61 72 20 72 65 71 3d 77 69 6e 64 6f 77 5b 69 64 5d 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 70 61 72 61 6d 73 3d 22 22 3b 76 61 72 20 74 69 6d 65 72 3d 6e 75 6c 6c 3b 75 72 6c 3d 75 72 6c 7c 7c 73 65 6c 66 2e 62 61 73 65 55 52 4c 3b 72 65 71 2e 6f 6e 6c 6f 61 64 3d 72 65 71 2e 6f 6e 65 72 72 6f 72 3d 72 65 71 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 5b 69 64 5d 3d 6e Data Ascii: f},send:function(pobj,callback,url){var self=this;self.__sendPreHook&&self.__sendPreHook(pobj);var id="l"+Date.now();var req=window[id]=new Image;var params="";var timer=null;url=url\|\|self.baseURL;req.onload=req.onerror=req.onabort=function(){window[id]=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49779	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	629	OUT	GET /static/superman/img/qrcode/qrcode-hover@2x-f9b106a848.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:36 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: image/png Content-Length: 1285 Connection: close Expires: Fri, 11 Oct 2024 17:37:32 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f9b106a84823022dbc97874b6e2a2786" Cache-Control: max-age=31536000 Age: 376847 Accept-Ranges: bytes Content-MD5: +bEGqEgjAi28l4dLbionhg== x-bce-content-crc32: 2367946980 x-bce-debug-id: 4BeEU0t1eC8CXQLpKLJB+RIcKB0p9RUYUCuXYoKORyjguftJMYBFyUUbmVhn9SLnw99QkriXioKRoCgBDx5ulQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b8d42f77-27a4-485b-91f1-46a3ef53b66b x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 17:37:32 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 1285 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:36 UTC	1285	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 01 20 05 c9 11 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 30 a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 db 37 6c 0c 00 00 04 6f 49 44 41 54 68 05 ed 59 3b 53 14 41 10 de d9 5b 02 3d 20 d0 48 4b 43 63 33 53 89 a5 ea 10 33 d1 d4 1f c0 43 52 8e 50 0a ce 3f 21 18 f9 b8 2b 35 c6 d4 cc 98 d0 57 66 e0 81 09 77 37 f6 37 bb 3d d7 37 b3 2f 8f 2d a1 ac dd 2a 6e 7a ba bf 79 74 4f 3f 66 97 20 c8 78 14 f3 97 56 fb df 75 a8 9e 06 a3 d1 8b de f3 79 65 04 86 d9 08 9f 04 c3 e1 3b 30 01 0e f1 63 90 c4 04 dd 5a 3f 7e Data Ascii: PNGIHDR00 sRGBDeXIfMMi007loIDAThY;SA[= HKCc3S3CRP?!+5Wfw77=7/-nzytO?f xVuye;0cZ?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	559	OUT	GET /static/superman/amd_modules/tslib-c95383af0c.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:36 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 15964 Connection: close Expires: Tue, 20 Aug 2024 23:02:07 GMT Last-Modified: Fri, 09 Aug 2024 11:44:01 GMT ETag: "c95383af0ca41acfebc6860e7e7958bc" Cache-Control: max-age=31536000 Age: 877603 Accept-Ranges: bytes Content-MD5: yVODrwykGs/rxoYOfnlYvA== x-bce-content-crc32: 2211686602 x-bce-debug-id: t+N4rGPSg66r61adbAnrSE4gjJr5weYGlasu928ZMhhYxp3uAml2qz0SVOmXZOhMCzxb1gvoU8Yq1Z5Wm//hBg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: dc5ae14c-e7d8-4972-addd-a915ebc3f30e x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 17 Aug 2024 23:02:07 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 15964 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:36 UTC	15477	IN	Data Raw: 64 65 66 69 6e 65 28 27 74 73 6c 69 62 27 2c 20 5b 0a 20 20 20 20 27 72 65 71 75 69 72 65 27 2c 0a 20 20 20 20 27 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 74 73 6c 69 62 2f 74 73 6c 69 62 27 0a 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 6d 6f 64 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 6f 64 3b 0a 7d 29 3b 0a 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 3b 0a 76 61 72 20 5f 5f 61 73 73 69 67 6e 3b 0a 76 61 72 20 5f 5f 72 65 73 74 3b 0a 76 61 72 20 5f 5f 64 65 63 6f 72 61 74 65 3b 0a 76 61 72 20 5f 5f 70 61 72 61 6d 3b 0a 76 61 72 20 5f 5f 6d 65 74 61 64 61 74 61 3b 0a 76 61 72 20 5f 5f 61 77 61 69 74 65 72 3b 0a 76 61 72 20 5f 5f 67 65 6e 65 72 61 74 6f 72 3b 0a 76 61 72 20 5f 5f 65 78 70 6f 72 74 53 74 61 72 3b 0a 76 61 72 20 5f 5f 76 Data Ascii: define('tslib', [ 'require', 'amd_modules/tslib/tslib'], function (require, mod) { return mod;});var __extends;var __assign;var __rest;var __decorate;var __param;var __metadata;var __awaiter;var __generator;var __exportStar;var __v
2024-10-25 11:27:36 UTC	487	IN	Data Raw: 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 77 61 69 74 27 2c 20 5f 5f 61 77 61 69 74 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 27 2c 20 5f 5f 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 44 65 6c 65 67 61 74 6f 72 27 2c 20 5f 5f 61 73 79 6e 63 44 65 6c 65 67 61 74 6f 72 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 56 61 6c 75 65 73 27 2c 20 5f 5f 61 73 79 6e 63 56 61 6c 75 65 73 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a 65 63 74 27 2c 20 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a Data Ascii: __spreadArrays); exporter('__await', __await); exporter('__asyncGenerator', __asyncGenerator); exporter('__asyncDelegator', __asyncDelegator); exporter('__asyncValues', __asyncValues); exporter('__makeTemplateObject', __makeTemplateObj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	382	OUT	GET /static/superman/js/min_super-c4c7be2850.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:37 UTC	908	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 65009 Connection: close Expires: Sat, 27 Jul 2024 13:18:53 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "c4c7be2850f34ef2e69dd4fad537ac08" Cache-Control: max-age=31536000 Age: 8027780 Accept-Ranges: bytes Content-MD5: xMe+KFDzTvLmndT61TesCA== x-bce-content-crc32: 1240981424 x-bce-debug-id: WmH78bccgmuGjuQmtChUfqovFkEumuREG56B/T9vzhJ4IyOpoz+tLPLhFgZZPZ2dxvfPhfkboIasdHmhYX2BRg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1b462aba-fa30-4494-b7a0-01acfcca2700 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 24 Jul 2024 13:18:53 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 65009 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:37 UTC	15476	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 63 6f 6d 6d 6f 6e 2f 72 65 73 75 6c 74 5f 70 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 65 78 70 6f 72 74 73 2e 63 72 65 61 74 65 52 65 73 75 6c 50 61 67 65 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 29 7b 69 66 28 21 6f 70 74 69 6f 6e 7c 7c 21 6f 70 74 69 6f 6e 2e 77 64 29 7b 72 65 74 75 72 6e 22 22 7d 69 66 28 21 6f 70 74 69 6f 6e 2e 74 6e 29 7b 6f 70 74 69 6f 6e 2e 74 6e 3d 22 62 61 69 64 75 74 6f 70 31 30 22 7d 72 65 74 75 72 6e 22 2f 2f 77 77 77 2e 62 61 69 64 75 2e 63 6f 6d 2f 73 3f 77 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 70 74 69 6f 6e 2e 77 64 29 2b 22 26 69 65 3d 75 74 66 2d 38 26 74 6e 3d 22 2b 6f 70 74 Data Ascii: F.module("common/result_page",function(require,exports,ctx){exports.createResulPageLink=function(option){if(!option\|\|!option.wd){return""}if(!option.tn){option.tn="baidutop10"}return"//www.baidu.com/s?wd="+encodeURIComponent(option.wd)+"&ie=utf-8&tn="+opt
2024-10-25 11:27:37 UTC	16384	IN	Data Raw: 69 63 6b 3a 22 35 31 30 30 30 30 30 30 30 34 22 7d 29 3b 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 61 67 69 6e 67 2d 74 6f 6f 6c 73 22 2c 7b 74 6f 6f 6c 43 6c 69 63 6b 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 63 72 69 70 74 5f 65 72 72 6f 72 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 63 72 69 70 74 5f 6c 6f 61 64 3a 22 35 31 30 30 30 30 30 30 30 30 22 2c 6e 65 77 5f 61 72 69 61 5f 73 65 72 76 69 63 65 3a 22 35 31 30 30 30 30 30 30 30 30 22 7d 29 3b 0a 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 2f 63 61 72 64 69 74 65 6d 5f 6c 6f 67 22 2c 5b 22 63 61 72 64 49 74 65 6d 4c 6f 67 22 5d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 6c 69 62 2f 63 Data Ascii: ick:"5100000004"});F.addLog("superman:aging-tools",{toolClick:"5100000000",new_aria_script_error:"5100000000",new_aria_script_load:"5100000000",new_aria_service:"5100000000"});F.addLog("superman:lib/carditem_log",["cardItemLog"]);F.module("superman:lib/c
2024-10-25 11:27:37 UTC	16384	IN	Data Raw: 64 6c 65 72 2c 66 61 6c 73 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 74 6f 70 44 65 66 61 75 6c 74 28 65 29 7b 69 66 28 69 73 49 45 29 7b 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 66 61 6c 73 65 7d 65 6c 73 65 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 53 74 79 6c 65 28 73 74 79 6c 65 53 74 72 29 7b 69 66 28 69 73 49 45 29 7b 76 61 72 20 73 74 79 6c 65 53 68 65 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 53 74 79 6c 65 53 68 65 65 74 28 29 3b 73 74 79 6c 65 53 68 65 65 74 2e 63 73 73 54 65 78 74 3d 73 74 79 6c 65 53 74 72 7d 65 6c 73 65 7b 76 61 72 20 73 74 79 6c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 73 74 79 6c 65 2e 74 79 70 Data Ascii: dler,false)}}function stopDefault(e){if(isIE){e.returnValue=false}else{e.preventDefault()}}function addStyle(styleStr){if(isIE){var styleSheet=document.createStyleSheet();styleSheet.cssText=styleStr}else{var style=document.createElement("style");style.typ
2024-10-25 11:27:37 UTC	16384	IN	Data Raw: 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 64 69 76 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 69 65 36 69 66 72 61 6d 65 2c 64 69 76 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 6f 63 4d 6f 75 73 65 44 6f 77 6e 28 65 29 7b 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 76 61 72 20 65 6c 6d 3d 65 2e 74 61 72 67 65 74 7c 7c 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3b 69 66 28 65 6c 6d 3d 3d 69 70 74 29 72 65 74 75 72 6e 3b 77 68 69 6c 65 28 65 6c 6d 3d 65 6c 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 0a 69 66 28 65 6c 6d 3d 3d 64 69 76 29 7b 72 65 74 75 72 6e 7d 7d 47 6c 6f 62 61 6c 43 74 72 6c 2e 64 6d 28 7b 74 79 70 65 3a 22 6d 6f 75 73 65 64 6f 77 6e 5f 6f 74 68 65 72 22 7d 29 7d 66 75 Data Ascii: e.style.position="absolute";div.parentNode.insertBefore(ie6iframe,div)}}function docMouseDown(e){e=e\|\|window.event;var elm=e.target\|\|e.srcElement;if(elm==ipt)return;while(elm=elm.parentNode){if(elm==div){return}}GlobalCtrl.dm({type:"mousedown_other"})}fu
2024-10-25 11:27:37 UTC	381	IN	Data Raw: 69 73 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 3b 69 66 28 68 57 72 61 70 2e 68 61 73 43 6c 61 73 73 28 22 73 2d 70 73 2d 69 73 6c 69 74 65 22 29 29 7b 72 65 74 75 72 6e 7d 69 66 28 21 73 5f 73 65 73 73 69 6f 6e 2e 69 73 4c 6f 67 69 6e 29 7b 72 65 74 75 72 6e 7d 69 66 28 74 6f 70 3e 3d 6b 77 54 6f 70 2d 31 38 29 7b 5f 72 6f 6c 6c 65 72 2e 74 6f 70 46 79 28 6c 65 66 74 2c 74 6f 70 29 7d 65 6c 73 65 7b 5f 72 6f 6c 6c 65 72 2e 75 6e 54 6f 70 46 79 28 6c 65 66 74 2c 74 6f 70 29 7d 69 66 28 69 73 49 45 37 29 7b 69 66 28 74 6f 70 3d 3d 30 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 75 70 4d 65 6e 75 5b 30 5d 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 7d 2c 32 30 30 29 7d 65 6c 73 65 7b 75 70 4d 65 6e 75 5b 30 5d 2e 73 74 79 6c 65 2e Data Ascii: is).scrollLeft();if(hWrap.hasClass("s-ps-islite")){return}if(!s_session.isLogin){return}if(top>=kwTop-18){_roller.topFy(left,top)}else{_roller.unTopFy(left,top)}if(isIE7){if(top==0){setTimeout(function(){upMenu[0].style.zoom=1},200)}else{upMenu[0].style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49784	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	394	OUT	GET /static/superman/img/topnav/yingxiaoicon-612169cc36.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:37 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: image/png Content-Length: 3378 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "612169cc36c91ddd3b1f6955eef781f2" Cache-Control: max-age=31536000 Age: 376032 Accept-Ranges: bytes Content-MD5: YSFpzDbJHd07H2lV7veB8g== x-bce-content-crc32: 2380670192 x-bce-debug-id: 7mU6EBUQ9i7mkDILaJ54XBFbqDpqnEjkY3MV7OTNVBVKSmxuWG3j4BhJVfXuZqhEMXj4Bu0g7Q+gdnqpyygddg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f61f2cdb-ab6a-4314-9cbb-4a8d457498d8 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache52 [2] Ohc-File-Size: 3378 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:37 UTC	3378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0c 9c 49 44 41 54 78 01 ed 5b 79 78 54 d5 15 ff cd 64 92 c9 be 12 20 a0 12 02 a8 21 84 00 09 c8 56 64 b1 51 5b f8 50 a4 5a 2c 52 fb 59 a4 a2 d6 d6 f5 d3 ba 54 f9 94 6a 29 5f 4b 6d 5d c0 5a a9 5b 51 16 ab 96 0a 4a 8b 24 04 c5 18 0c 11 62 44 08 18 59 42 16 b2 ce 4c 66 eb ef ce 9b 24 f3 66 79 33 f3 66 c2 5f ef 7c ef 9b b9 cb b9 ef de fb 9b 73 cf 3d e7 dc 3b 3a a7 d3 09 8d 00 bd 06 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHIDATx[yxTd !VdQ[PZ,RYTj)_Km]Z[QJ$bDYBLf$fy3f_\|s=;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49785	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	393	OUT	GET /static/superman/js/components/hotsearch-e35eee0e78.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:37 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6338 Connection: close Expires: Mon, 23 Sep 2024 16:21:51 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "e35eee0e781f9fa70cb3a9506b036dd9" Cache-Control: max-age=31536000 Age: 375000 Accept-Ranges: bytes Content-MD5: 417uDngfn6cMs6lQawNt2Q== x-bce-content-crc32: 2931100553 x-bce-debug-id: 1pLuk0n1+RdfxH3FL+VgiLgXg4z3bmPXYBx27NviHPJyY3uCtlP2RicKRx0Tyr6abUmNc434J9UZtwxxlekLjw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: cc3147ef-63a3-4f4b-bca0-a31b1dee121d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 20 Sep 2024 16:21:51 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache60 [2] Ohc-File-Size: 6338 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:37 UTC	6338	IN	Data Raw: 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 74 73 65 61 72 63 68 22 2c 5b 22 68 6f 74 73 65 61 72 63 68 43 6c 69 63 6b 22 2c 22 68 6f 74 73 65 61 72 63 68 53 68 6f 77 22 2c 22 68 6f 74 73 65 61 72 63 68 53 65 74 22 2c 22 6e 65 77 73 43 6c 69 63 6b 22 2c 22 6e 65 77 73 53 68 6f 77 22 5d 29 3b 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 22 2c 7b 63 61 74 65 67 6f 72 79 43 6c 69 63 6b 3a 22 31 32 30 30 31 30 30 30 30 31 22 7d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 68 6f 74 73 65 61 72 63 68 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 70 61 67 65 Data Ascii: F.addLog("superman:components/hotsearch",["hotsearchClick","hotsearchShow","hotsearchSet","newsClick","newsShow"]);F.addLog("superman:components",{categoryClick:"1200100001"});F.module("superman:components/hotsearch",function(require,exports,ctx){var page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49786	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:36 UTC	391	OUT	GET /static/superman/img/topnav/newyinyue-03ecd1e9b9.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:37 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: image/png Content-Length: 2263 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "03ecd1e9b97ca338ac39e9c4ddda6927" Cache-Control: max-age=31536000 Age: 376032 Accept-Ranges: bytes Content-MD5: A+zR6bl8ozisOenE3dppJw== x-bce-content-crc32: 3477335213 x-bce-debug-id: wDDCckJIsZ8ip/vmbg1W6xUzlSKNGKzQwNwmxbzdzfHZqgpoPg2jeOMza0VgWPFaQxCQa5L+3RxiktILUPYraQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: abddc916-70e3-499f-9fc2-55790ed78656 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2263 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:37 UTC	2263	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 08 41 49 44 41 54 78 01 ed 5a 7b 50 54 55 18 df 7b f7 c9 ee 82 2c bb 80 99 ef e8 a9 e9 a4 f9 18 73 20 51 1b 2b 1d e9 ad c5 88 96 92 1a 8a a6 e5 34 96 33 4d 99 e5 58 66 29 50 52 89 4e 99 4a 13 36 96 16 bd 4c 2c f2 81 5a ce 58 19 3e 40 f3 01 cb 73 61 b9 77 1f b7 0f 61 d6 7b ef ee 9e 73 bc f7 42 fd 71 f8 eb dc ef fb 9d ef fb ce 8f 6f bf f3 64 04 41 d0 d1 3f 9d 8e a5 24 74 30 40 89 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXHAIDATxZ{PTU{,s Q+43MXf)PRNJ6L,ZX>@sawa{sBqodA?$t0@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49793	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:37 UTC	390	OUT	GET /static/superman/img/topnav/newzhibo-a6a0831ecd.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:37 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:37 GMT Content-Type: image/png Content-Length: 4085 Connection: close Expires: Sat, 12 Oct 2024 11:38:27 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "a6a0831ecd5fdf11b86c9ae6ea945e65" Cache-Control: max-age=31536000 Age: 375041 Accept-Ranges: bytes Content-MD5: pqCDHs1f3xG4bJrm6pReZQ== x-bce-content-crc32: 3387288523 x-bce-debug-id: gJBnIJdb/LXj1CmtFPJJlolAU45M7FCWt3iwgtQAG95Nws+e2p72EEbG2YfAmkz1C6cplrLQjVc20evzT5ifmw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 71e4a6cd-2185-451f-809e-424c18ce074a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 09 Oct 2024 11:38:26 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 4085 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:37 UTC	4085	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 58 08 02 00 00 00 fe f7 a7 63 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 58 a0 03 00 04 00 00 00 01 00 00 00 58 00 00 00 00 e7 80 48 10 00 00 0f 5f 49 44 41 54 78 01 ed 5a d9 93 1d d7 59 ff be de ee 3a fb a2 d1 68 b4 8d d6 38 92 c0 36 38 31 04 62 12 5c c5 52 84 4a 1c 28 92 14 55 94 5f 80 ca 13 6f fc 07 79 a6 8a 87 54 91 17 1e e0 85 04 a8 3c 84 22 c6 82 50 b6 64 25 16 b6 63 ad c8 92 66 34 a3 59 ef dc 99 b9 77 e6 6e bd 1c 7e df e9 db 3d f7 ce 58 8e fa 8e 1c 0b e8 53 5d 7d 4f 9f 3e 7d fa 7c bf ef f7 2d e7 f4 65 a5 14 a5 Data Ascii: PNGIHDRXXcsRGBDeXIfMM*iXXH_IDATxZY:h8681b\RJ(U_oyT<"Pd%cf4Ywn~=XS]}O>}\|-e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49790	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:37 UTC	880	OUT	GET /-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=showpv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5068611600931874 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:38 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:37 GMT Pragma: no-cache Server: nginx/1.8.0 Tracecode: 16577372693759562506102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49791	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:37 UTC	1790	OUT	GET /-L-Ysjip0QIZ8tyhnq/v.gif?mod=superman%3Acomponents&submod=hotsearch&utype=undefined&superver=supernewplus&portrait=undefined&logPortrait=undefined&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.8927525686940847&m=superman%3Acomponents_hotsearchShow&showType=hotword&words=%5B%22%E4%B9%A0%E8%BF%91%E5%B9%B3%E6%8F%90%E5%87%BA%E4%B8%AD%E5%9B%BD%E4%B8%BB%E5%BC%A0%22%2C%22%E8%81%9A%E5%85%A8%E7%90%83%E5%8D%97%E6%96%B9%E5%90%88%E5%8A%9B%EF%BC%8C%E8%A1%8C%E5%91%BD%E8%BF%90%E4%B8%8E%E5%85%B1%E5%A4%A7%E9%81%93%22%2C%22%E4%B8%AD%E5%8D%B0%E5%86%9B%E9%98%9F%E5%BC%80%E5%A7%8B%E4%BB%8E%E8%BE%B9%E5%A2%83%E6%92%A4%E9%80%80%EF%BC%9F%E4%B8%AD%E6%96%B9%E5%9B%9E%E5%BA%94%22%2C%22%E4%BA%BA%E8%B4%A9%E5%AD%90%E4%BD%99%E5%8D%8E%E8%8B%B1%E8%A2%AB%E5%88%A4%E6%AD%BB%E5%88%91%20%E5%BD%93%E5%BA%AD%E8%A1%A8%E7%A4%BA%E4%B8%8A%E8%AF%89%22%2C%22%E9%A6%96%E4%BE%8BAI%E6%9C%BA%E5%99%A8%E4%BA%BA%E8%87%B4%E6%AD%BB%E6%A1%88%E9 [TRUNCATED] Host: sp2.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:38 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:37 GMT Pragma: no-cache Server: nginx/1.8.0 Tracecode: 16577386562720509194102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49789	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:37 UTC	880	OUT	GET /-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=nodepv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5895724537290818 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:38 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:37 GMT Pragma: no-cache Server: nginx/1.8.0 Tracecode: 16577432270311143690102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49792	103.235.47.212	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:37 UTC	886	OUT	POST /ztbox?action=zpblog&appname=pcsearch&v=2.0&data=%7B%22cateid%22%3A%2299%22%2C%22actiondata%22%3A%7B%22id%22%3A18463%2C%22type%22%3A%220%22%2C%22timestamp%22%3A1729855654482%2C%22content%22%3A%7B%22page%22%3A%22home%22%2C%22source%22%3A%22%22%2C%22from%22%3A%22search%22%2C%22type%22%3A%22display%22%2C%22ext%22%3A%7B%7D%7D%7D%7D HTTP/1.1 Host: mbd.baidu.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://www.baidu.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:38 UTC	360	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: http://www.baidu.com Content-Length: 44 Content-Type: application/json; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:37 GMT X-Bfe-Svbbrers: MTczLjI1NC4yNTAuODE=,1.0 Connection: close
2024-10-25 11:27:38 UTC	44	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 30 22 2c 22 6c 6f 67 69 64 22 3a 22 31 30 39 31 31 34 33 39 31 39 33 31 34 32 34 35 36 34 31 33 22 7d Data Ascii: {"error":"0","logid":"10911439193142456413"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49794	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:38 UTC	622	OUT	GET /static/superman/img/searchbox/nicon-10750f3f7d.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:38 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:38 GMT Content-Type: image/png Content-Length: 2430 Connection: close Expires: Fri, 11 Oct 2024 16:33:55 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "10750f3f7d049ab650fbf9d36b467e44" Cache-Control: max-age=31536000 Age: 376033 Accept-Ranges: bytes Content-MD5: EHUPP30EmrZQ+/nTa0Z+RA== x-bce-content-crc32: 1035437411 x-bce-debug-id: lHXAk1VqZXTxbQE0+zg5+JDzJ9FHSsq8yLFprYxjj+ToYaGHFO3jSQAfwXNQ5wjySvRsirqv+KB9ppsEtwNMrA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b076b8d8-4213-46f3-b5fc-3ec0a90656f1 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 16:33:55 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 2430 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:38 UTC	2430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 60 08 06 00 00 00 07 06 b2 54 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 18 a0 03 00 04 00 00 00 01 00 00 00 60 00 00 00 00 2b 97 de a3 00 00 08 e8 49 44 41 54 68 05 ed 59 5b 6c 54 c7 19 9e 39 bb 5e af bd 97 62 63 1b ea d6 8a 15 04 a9 22 45 b2 09 0f 49 50 a4 34 8d c2 1b c4 96 b0 70 6c 87 24 6a ec ae b1 d7 a8 85 24 0d e0 2c e4 82 70 50 14 7c 61 6b 43 9b 12 db 90 52 09 07 94 97 48 40 91 a2 34 3c 10 8c 54 1a 45 a9 52 12 21 dc 72 c9 ae bb 37 df 76 cf f4 fb cf ee 59 ce ee d9 73 bc b6 78 68 54 af 34 9e ff fc d7 99 ff cc fc Data Ascii: PNGIHDR`TsRGBDeXIfMM*i`+IDAThY[lT9^bc"EIP4pl$j$,pP\|akCRH@4<TER!r7vYsxhT4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49796	39.156.68.81	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:38 UTC	516	OUT	GET /a.js HTTP/1.1 Host: hector.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:39 UTC	381	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 4665 Content-Type: text/javascript; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:39 GMT Etag: 127820938356576951971860884 Keep-Alive: timeout=60 Set-Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:39 GMT; path=/; Secure; SameSite=None Connection: close
2024-10-25 11:27:39 UTC	2358	IN	Data Raw: 76 61 72 20 5f 30 78 32 34 39 35 3d 5b 27 63 45 64 50 55 55 6b 3d 27 2c 27 57 55 56 54 52 56 41 3d 27 2c 27 65 55 74 36 59 6e 49 3d 27 2c 27 63 33 42 73 61 58 51 3d 27 2c 27 4e 58 77 78 4d 58 77 3d 27 2c 27 54 47 6c 4f 63 6d 34 3d 27 2c 27 64 32 4e 68 57 6d 4d 3d 27 2c 27 54 47 56 32 52 48 45 3d 27 2c 27 63 56 46 50 65 48 51 3d 27 2c 27 55 48 70 6b 54 6d 45 3d 27 2c 27 57 45 70 5a 54 55 67 3d 27 2c 27 66 44 4a 38 4d 54 4d 3d 27 2c 27 4d 58 77 77 66 44 45 3d 27 2c 27 4e 48 77 32 66 44 63 3d 27 2c 27 66 44 52 38 4f 58 77 3d 27 2c 27 56 48 46 43 52 46 6b 3d 27 2c 27 66 44 45 77 66 44 4d 3d 27 2c 27 54 6b 52 6b 62 56 45 3d 27 2c 27 56 48 4a 4f 54 47 30 3d 27 2c 27 4d 54 4a 38 4f 41 3d 3d 27 2c 27 63 57 70 70 59 55 77 3d 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: var _0x2495=['cEdPUUk=','WUVTRVA=','eUt6YnI=','c3BsaXQ=','NXwxMXw=','TGlOcm4=','d2NhWmM=','TGV2RHE=','cVFPeHQ=','UHpkTmE=','WEpZTUg=','fDJ8MTM=','MXwwfDE=','NHw2fDc=','fDR8OXw=','VHFCRFk=','fDEwfDM=','TkRkbVE=','VHJOTG0=','MTJ8OA==','cWppYUw='];(function(
2024-10-25 11:27:39 UTC	1352	IN	Data Raw: 28 5f 30 78 33 64 35 33 61 33 2c 5f 30 78 33 35 32 64 39 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 64 35 33 61 33 2b 5f 30 78 33 35 32 64 39 31 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 65 27 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 63 30 37 31 33 65 2c 5f 30 78 31 39 62 38 30 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 63 30 37 31 33 65 2b 5f 30 78 31 39 62 38 30 33 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 63 27 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 61 37 32 62 38 2c 5f 30 78 34 62 64 39 32 37 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 61 37 32 62 38 2b 5f 30 78 34 62 64 39 32 37 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 32 27 29 5d 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (_0x3d53a3,_0x352d91){return _0x3d53a3+_0x352d91;};_0x3fc986[_0x2cff('0xe')]=function(_0xc0713e,_0x19b803){return _0xc0713e+_0x19b803;};_0x3fc986[_0x2cff('0xc')]=function(_0x1a72b8,_0x4bd927){return _0x1a72b8+_0x4bd927;};_0x3fc986[_0x2cff('0x2')]=function
2024-10-25 11:27:39 UTC	955	IN	Data Raw: 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 32 5d 2b 3d 5f 30 78 35 65 63 36 64 63 5b 5f 30 78 32 63 66 66 28 27 30 78 31 30 27 29 5d 28 5f 30 78 34 34 66 32 61 31 5b 30 78 32 5d 2c 5f 30 78 32 37 35 31 34 38 5b 30 78 32 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 31 5d 2b 3d 5f 30 78 35 65 63 36 64 63 5b 5f 30 78 32 63 66 66 28 27 30 78 65 27 29 5d 28 5f 30 78 34 34 66 32 61 31 5b 30 78 31 5d 2c 5f 30 78 32 37 35 31 34 38 5b 30 78 31 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 31 5d 26 3d 30 78 66 66 66 66 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 33 5d 2b Data Ascii: );continue;case'3':_0x3bd1dd[0x2]+=_0x5ec6dc[_0x2cff('0x10')](_0x44f2a1[0x2],_0x275148[0x2]);continue;case'4':_0x3bd1dd[0x1]+=_0x5ec6dc[_0x2cff('0xe')](_0x44f2a1[0x1],_0x275148[0x1]);continue;case'5':_0x3bd1dd[0x1]&=0xffff;continue;case'6':_0x3bd1dd[0x3]+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49797	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	583	OUT	GET /static/superman/font/iconfont-fa013548a9.woff2 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.baidu.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:39 UTC	941	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: application/octet-stream Content-Length: 20520 Connection: close Expires: Fri, 11 Oct 2024 16:33:55 GMT Last-Modified: Fri, 06 Sep 2024 06:38:07 GMT ETag: "fa013548a97a0a659fb78863fb5dc76b" Cache-Control: max-age=31536000 Age: 376033 Accept-Ranges: bytes Content-MD5: +gE1SKl6CmWft4hj+13Haw== x-bce-content-crc32: 1599834994 x-bce-debug-id: IfoGvocwQkUFtNOesEaCEBBbySYsikvVqUHRtwiL2DZCJnMNEDst/gVmW0DEbelIehFEnjMW0Y2/OE8+Y4cxmQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b7ac8388-72c5-4564-bcd8-4f06899cb1da x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 16:33:55 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 20520 X-Cache-Status: HIT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-10-25 11:27:39 UTC	15443	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 50 28 00 0b 00 00 00 00 a5 78 00 00 4f d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 95 12 0a 82 90 48 81 da 77 01 36 02 24 03 85 20 0b 82 52 00 04 20 05 84 67 07 94 52 1b 8f 88 75 84 c7 01 00 f9 6e 3d 51 94 e4 55 8c a2 82 54 91 fd ff 9f 93 93 31 64 98 b0 4d ab 77 21 23 0b 9d ab d0 2b d8 cd bc bd 89 2a de 70 76 7c 86 3b 14 44 df 79 9f 9f 24 22 2a 7d 4c d0 d0 3f b4 2e fb bf 2c 35 4d 6b 60 2b 9e 0a 6e 3c c1 29 72 fb 73 92 4c 14 36 12 29 22 2b 7e 50 b8 89 96 d0 8e 0b 35 2a 88 e9 78 96 35 d0 fb 24 39 33 ee 62 b5 ae ca cb 0f 49 8a 26 04 4f dd eb ec fe 50 7c 50 95 52 4c 01 9d 4f 03 ff fd 1f e6 9d 99 df b6 76 4b 6d de 84 c2 4b b8 a0 11 5b b0 9c 60 3c 02 21 7b 04 c8 18 ed fe 3d fd 54 75 26 Data Ascii: wOF2P(xOT`Hw6$ R gRun=QUT1dMw!#+pv\|;Dy$"}L?.,5Mk`+n<)rsL6)"+~P5*x5$93bI&OP\|PRLOvKmK[`<!{=Tu&
2024-10-25 11:27:39 UTC	5077	IN	Data Raw: 97 b6 e7 39 39 5c fe 28 c7 f5 75 7a 55 dc 89 fb b1 f7 4f c4 65 9a fa 27 bb 73 24 3f c4 74 49 7a 49 9c b2 fe 4d 67 ca 25 f1 f7 fb 0a 60 f8 af 41 5d a2 5b 48 d5 c9 8f 01 75 87 73 b9 3f b9 49 17 27 07 f6 7f 52 21 46 98 b3 76 07 40 f3 f3 2e a2 47 c4 b3 fa 3f da ea b1 3f b1 f5 b6 93 1f 17 4b 6f 21 d2 d4 20 67 f7 d3 aa 7d 00 d2 9a a4 f3 3c 1d 0d b9 df 1c 56 01 e7 b8 da 09 03 b5 0f c7 92 99 b5 61 8a 66 62 58 d8 44 cd 14 38 91 d0 41 bd 34 dc 9e 5c 9f 53 fc 21 38 3a f8 b1 38 0c 4a 0f 1a ce cd 4d 81 29 7a fa 24 45 81 24 76 dc 31 d1 76 f1 43 5d d9 22 72 35 a9 3d b9 dc 32 d5 4c 33 23 27 47 6d 57 33 3e 26 50 d4 1a 9a 49 3f 92 b4 ce c8 ea 8d e1 11 0b 22 a1 0b b4 61 1f a7 92 c6 66 7f 9c 4d da 53 43 17 e8 a0 bf 45 15 15 b1 4e b9 91 59 7b b8 b1 91 d1 cb 3d 5e ce cf 3b 23 Data Ascii: 99\(uzUOe's$?tIzIMg%`A][Hus?I'R!Fv@.G??Ko! g}<VafbXD8A4\S!8:8JM)z$E$v1vC]"r5=2L3#'GmW3>&PI?"afMSCENY{=^;#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49801	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	391	OUT	GET /static/superman/img/topnav/chengpian-9981cd1fdb.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:39 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: image/png Content-Length: 3129 Connection: close Expires: Mon, 14 Oct 2024 01:50:56 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "9981cd1fdbbabfafb8cec5980067e9b6" Cache-Control: max-age=31536000 Age: 375046 Accept-Ranges: bytes Content-MD5: mYHNH9u6v6+4zsWYAGfptg== x-bce-content-crc32: 2916630045 x-bce-debug-id: 7/c6SSgwt9gM2X4ee6rhY85+8T9S42GzBU6br3N+F8fRrSJ3CTslO8nDid7WJ3MX9phYwWmmeY9DCCJiUUfnjQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 0dc342c3-4e87-4f94-b127-038fdd2816a8 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 11 Oct 2024 01:50:56 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 3129 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:39 UTC	3129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 b0 08 06 00 00 00 af b7 e4 5e 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0b ce 49 44 41 54 78 01 ed 9d 4d 6c 54 d7 15 c7 cf 54 51 65 22 22 81 57 8e 2b 15 6c 9c 2c 02 0b 3b 21 5d d9 7c 2c 88 12 16 14 a4 62 96 c6 c9 22 2c 1c 63 16 95 f2 51 21 2a 25 a1 5d d9 86 2e a0 52 1d bc ab 9d 06 09 47 6d d3 58 42 80 dd 4d 45 a9 91 4c 54 11 62 a1 54 18 54 55 c6 51 a2 e2 76 e3 bc ff 7b 7e c6 d8 33 9e af 7b df dc 73 ef ff 27 3d cd 60 18 89 99 f9 f9 bc 73 cf 3d f7 de dc 62 84 10 a2 93 c5 1f 08 21 8a a1 c0 44 35 14 98 a8 86 02 13 d5 50 60 a2 1a 0a 4c 54 43 81 89 6a 28 30 51 0d 05 26 aa a1 c0 44 Data Ascii: PNGIHDR^pHYs%%IR$sRGBgAMAaIDATxMlTTQe""W+l,;!]\|,b",cQ!*%].RGmXBMELTbTTUQv{~3{s'=`s=b!D5P`LTCj(0Q&D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49803	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	397	OUT	GET /static/superman/img/qrcode/qrcode-hover@2x-f9b106a848.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:39 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: image/png Content-Length: 1285 Connection: close Expires: Fri, 11 Oct 2024 17:37:32 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f9b106a84823022dbc97874b6e2a2786" Cache-Control: max-age=31536000 Age: 376850 Accept-Ranges: bytes Content-MD5: +bEGqEgjAi28l4dLbionhg== x-bce-content-crc32: 2367946980 x-bce-debug-id: 4BeEU0t1eC8CXQLpKLJB+RIcKB0p9RUYUCuXYoKORyjguftJMYBFyUUbmVhn9SLnw99QkriXioKRoCgBDx5ulQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b8d42f77-27a4-485b-91f1-46a3ef53b66b x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 17:37:32 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 1285 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:39 UTC	1285	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 01 20 05 c9 11 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 30 a0 03 00 04 00 00 00 01 00 00 00 30 00 00 00 00 db 37 6c 0c 00 00 04 6f 49 44 41 54 68 05 ed 59 3b 53 14 41 10 de d9 5b 02 3d 20 d0 48 4b 43 63 33 53 89 a5 ea 10 33 d1 d4 1f c0 43 52 8e 50 0a ce 3f 21 18 f9 b8 2b 35 c6 d4 cc 98 d0 57 66 e0 81 09 77 37 f6 37 bb 3d d7 37 b3 2f 8f 2d a1 ac dd 2a 6e 7a ba bf 79 74 4f 3f 66 97 20 c8 78 14 f3 97 56 fb df 75 a8 9e 06 a3 d1 8b de f3 79 65 04 86 d9 08 9f 04 c3 e1 3b 30 01 0e f1 63 90 c4 04 dd 5a 3f 7e Data Ascii: PNGIHDR00 sRGBDeXIfMMi007loIDAThY;SA[= HKCc3S3CRP?!+5Wfw77=7/-nzytO?f xVuye;0cZ?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	387	OUT	GET /static/superman/amd_modules/tslib-c95383af0c.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:39 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 15964 Connection: close Expires: Tue, 20 Aug 2024 23:02:07 GMT Last-Modified: Fri, 09 Aug 2024 11:44:01 GMT ETag: "c95383af0ca41acfebc6860e7e7958bc" Cache-Control: max-age=31536000 Age: 877606 Accept-Ranges: bytes Content-MD5: yVODrwykGs/rxoYOfnlYvA== x-bce-content-crc32: 2211686602 x-bce-debug-id: t+N4rGPSg66r61adbAnrSE4gjJr5weYGlasu928ZMhhYxp3uAml2qz0SVOmXZOhMCzxb1gvoU8Yq1Z5Wm//hBg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: dc5ae14c-e7d8-4972-addd-a915ebc3f30e x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 17 Aug 2024 23:02:07 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 15964 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:39 UTC	15477	IN	Data Raw: 64 65 66 69 6e 65 28 27 74 73 6c 69 62 27 2c 20 5b 0a 20 20 20 20 27 72 65 71 75 69 72 65 27 2c 0a 20 20 20 20 27 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 74 73 6c 69 62 2f 74 73 6c 69 62 27 0a 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 6d 6f 64 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6d 6f 64 3b 0a 7d 29 3b 0a 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 3b 0a 76 61 72 20 5f 5f 61 73 73 69 67 6e 3b 0a 76 61 72 20 5f 5f 72 65 73 74 3b 0a 76 61 72 20 5f 5f 64 65 63 6f 72 61 74 65 3b 0a 76 61 72 20 5f 5f 70 61 72 61 6d 3b 0a 76 61 72 20 5f 5f 6d 65 74 61 64 61 74 61 3b 0a 76 61 72 20 5f 5f 61 77 61 69 74 65 72 3b 0a 76 61 72 20 5f 5f 67 65 6e 65 72 61 74 6f 72 3b 0a 76 61 72 20 5f 5f 65 78 70 6f 72 74 53 74 61 72 3b 0a 76 61 72 20 5f 5f 76 Data Ascii: define('tslib', [ 'require', 'amd_modules/tslib/tslib'], function (require, mod) { return mod;});var __extends;var __assign;var __rest;var __decorate;var __param;var __metadata;var __awaiter;var __generator;var __exportStar;var __v
2024-10-25 11:27:39 UTC	487	IN	Data Raw: 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 77 61 69 74 27 2c 20 5f 5f 61 77 61 69 74 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 27 2c 20 5f 5f 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 44 65 6c 65 67 61 74 6f 72 27 2c 20 5f 5f 61 73 79 6e 63 44 65 6c 65 67 61 74 6f 72 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 61 73 79 6e 63 56 61 6c 75 65 73 27 2c 20 5f 5f 61 73 79 6e 63 56 61 6c 75 65 73 29 3b 0a 20 20 20 20 65 78 70 6f 72 74 65 72 28 27 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a 65 63 74 27 2c 20 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a Data Ascii: __spreadArrays); exporter('__await', __await); exporter('__asyncGenerator', __asyncGenerator); exporter('__asyncDelegator', __asyncDelegator); exporter('__asyncValues', __asyncValues); exporter('__makeTemplateObject', __makeTemplateObj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49805	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	390	OUT	GET /static/superman/img/searchbox/nicon-10750f3f7d.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:40 UTC	884	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:39 GMT Content-Type: image/png Content-Length: 2430 Connection: close Expires: Fri, 11 Oct 2024 16:33:55 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "10750f3f7d049ab650fbf9d36b467e44" Cache-Control: max-age=31536000 Age: 376034 Accept-Ranges: bytes Content-MD5: EHUPP30EmrZQ+/nTa0Z+RA== x-bce-content-crc32: 1035437411 x-bce-debug-id: lHXAk1VqZXTxbQE0+zg5+JDzJ9FHSsq8yLFprYxjj+ToYaGHFO3jSQAfwXNQ5wjySvRsirqv+KB9ppsEtwNMrA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: b076b8d8-4213-46f3-b5fc-3ec0a90656f1 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 08 Oct 2024 16:33:55 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache63 [2] Ohc-File-Size: 2430 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:40 UTC	2430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 60 08 06 00 00 00 07 06 b2 54 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 18 a0 03 00 04 00 00 00 01 00 00 00 60 00 00 00 00 2b 97 de a3 00 00 08 e8 49 44 41 54 68 05 ed 59 5b 6c 54 c7 19 9e 39 bb 5e af bd 97 62 63 1b ea d6 8a 15 04 a9 22 45 b2 09 0f 49 50 a4 34 8d c2 1b c4 96 b0 70 6c 87 24 6a ec ae b1 d7 a8 85 24 0d e0 2c e4 82 70 50 14 7c 61 6b 43 9b 12 db 90 52 09 07 94 97 48 40 91 a2 34 3c 10 8c 54 1a 45 a9 52 12 21 dc 72 c9 ae bb 37 df 76 cf f4 fb cf ee 59 ce ee d9 73 bc b6 78 68 54 af 34 9e ff fc d7 99 ff cc fc Data Ascii: PNGIHDR`TsRGBDeXIfMM*i`+IDAThY[lT9^bc"EIP4pl$j$,pP\|akCRH@4<TER!r7vYsxhT4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49807	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	814	OUT	GET /-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=showpv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5068611600931874 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
2024-10-25 11:27:40 UTC	686	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:40 GMT Pragma: no-cache Server: nginx/1.8.0 Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Tracecode: 16600064350595964170102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49808	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:39 UTC	814	OUT	GET /-L-Xsjip0QIZ8tyhnq/v.gif?logactid=1234567890&showTab=10000&opType=nodepv&mod=superman%3Alib&submod=index&superver=supernewplus&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.5895724537290818 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
2024-10-25 11:27:40 UTC	686	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:39 GMT Pragma: no-cache Server: nginx/1.8.0 Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Tracecode: 16599984230443133706102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49809	103.235.47.188	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	1724	OUT	GET /-L-Ysjip0QIZ8tyhnq/v.gif?mod=superman%3Acomponents&submod=hotsearch&utype=undefined&superver=supernewplus&portrait=undefined&logPortrait=undefined&glogid=2156344125&type=2011&pid=315&isLogin=0&version=PCHome&terminal=PC&qid=0xd9c48fd80087333d&sid=&super_frm=&from_login=&from_reg=&query=&curcard=2&curcardtab=&_r=0.8927525686940847&m=superman%3Acomponents_hotsearchShow&showType=hotword&words=%5B%22%E4%B9%A0%E8%BF%91%E5%B9%B3%E6%8F%90%E5%87%BA%E4%B8%AD%E5%9B%BD%E4%B8%BB%E5%BC%A0%22%2C%22%E8%81%9A%E5%85%A8%E7%90%83%E5%8D%97%E6%96%B9%E5%90%88%E5%8A%9B%EF%BC%8C%E8%A1%8C%E5%91%BD%E8%BF%90%E4%B8%8E%E5%85%B1%E5%A4%A7%E9%81%93%22%2C%22%E4%B8%AD%E5%8D%B0%E5%86%9B%E9%98%9F%E5%BC%80%E5%A7%8B%E4%BB%8E%E8%BE%B9%E5%A2%83%E6%92%A4%E9%80%80%EF%BC%9F%E4%B8%AD%E6%96%B9%E5%9B%9E%E5%BA%94%22%2C%22%E4%BA%BA%E8%B4%A9%E5%AD%90%E4%BD%99%E5%8D%8E%E8%8B%B1%E8%A2%AB%E5%88%A4%E6%AD%BB%E5%88%91%20%E5%BD%93%E5%BA%AD%E8%A1%A8%E7%A4%BA%E4%B8%8A%E8%AF%89%22%2C%22%E9%A6%96%E4%BE%8BAI%E6%9C%BA%E5%99%A8%E4%BA%BA%E8%87%B4%E6%AD%BB%E6%A1%88%E9 [TRUNCATED] Host: sp2.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v
2024-10-25 11:27:40 UTC	686	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:40 GMT Pragma: no-cache Server: nginx/1.8.0 Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:27:40 GMT; Max-Age=31536000; Secure; SameSite=None Tracecode: 16604988713726008074102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49811	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	560	OUT	GET /static/superman/js/components/tips-e2ceadd14d.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	902	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 564 Connection: close Expires: Sat, 03 Aug 2024 01:02:27 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "e2ceadd14d8e3fb1106e48ac89843760" Cache-Control: max-age=31536000 Age: 872434 Accept-Ranges: bytes Content-MD5: 4s6t0U2OP7EQbkisiYQ3YA== x-bce-content-crc32: 385949678 x-bce-debug-id: avvlgzDXZvjCad6LBQEA5ewuVSQ88a82bc7nG01THL4PcsI0S+vnwEXHV7050xO+Xs4/mIviqVEJ984WD31KtA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: c39af9c7-fd9c-4012-a765-f814b122ad60 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 01:02:26 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 564 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:41 UTC	564	IN	Data Raw: 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 22 2c 5b 22 74 69 70 73 43 6c 69 63 6b 22 2c 22 61 63 74 69 76 69 74 79 43 6c 69 63 6b 22 5d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 76 61 72 20 24 6c 6d 4c 69 6e 6b 3d 24 28 22 23 6c 6d 2d 6e 65 77 20 61 22 29 3b 76 61 72 20 61 63 74 69 76 69 74 79 3d 24 28 22 23 62 6f 74 74 6f 6d 5f 6c 61 79 65 72 20 2e 61 63 74 69 76 69 74 79 22 29 3b 69 66 28 24 6c 6d 4c 69 6e 6b 2e 73 69 7a 65 28 29 3e 30 29 7b 24 6c 6d 4c 69 6e 6b 2e 6f 6e 28 22 6d 6f 75 73 Data Ascii: F.addLog("superman:components/tips",["tipsClick","activityClick"]);F.module("superman:components/tips",function(require,exports,ctx){function init(){var $lmLink=$("#lm-new a");var activity=$("#bottom_layer .activity");if($lmLink.size()>0){$lmLink.on("mous

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49812	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	555	OUT	GET /static/superman/js/super_load-8301698f5e.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 30752 Connection: close Expires: Tue, 10 Sep 2024 15:34:28 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "8301698f5eb7cde858916fe1847ab70f" Cache-Control: max-age=31536000 Age: 864939 Accept-Ranges: bytes Content-MD5: gwFpj163zehYkW/hhHq3Dw== x-bce-content-crc32: 2388938383 x-bce-debug-id: 4gJ0eBJLpKqJaDdp1AMbE5hXePphSQhMxVue61ayNFUr6sDkf8UN1DCh+AqxI7fx+XCA5dB25to5KX1uiOraQg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 3602be35-f043-4018-9ad6-6b8bfcf25ea7 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 07 Sep 2024 15:34:28 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 30752 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:41 UTC	15477	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 77 65 61 74 68 65 72 2f 77 65 61 74 68 65 72 5f 74 70 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 69 73 4e 65 77 53 74 79 6c 65 3d 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 6e 65 77 54 6f 70 4d 65 6e 75 3d 3d 3d 31 3b 65 78 70 6f 72 74 73 2e 70 6f 6c 6c 75 74 69 6f 6e 4c 65 76 65 6c 3d 7b 30 3a 22 e4 bc 98 22 2c 31 30 3a 22 e8 89 af 22 2c 32 30 3a 22 e8 bd bb e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 33 30 3a 22 e4 b8 ad e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 34 30 3a 22 e9 87 8d e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 35 30 3a 22 e4 b8 a5 e9 87 8d e6 b1 a1 e6 9f 93 22 7d 3b 76 61 72 20 5f 64 6f 6d 3d 24 28 22 23 73 5f 6d 6f 64 5f 77 65 61 Data Ascii: F.module("superman:weather/weather_tpl",function(require,exports,ctx){var isNewStyle=bds.comm&&bds.comm.newTopMenu===1;exports.pollutionLevel={0:"",10:"",20:"",30:"",40:"",50:""};var _dom=$("#s_mod_wea
2024-10-25 11:27:41 UTC	15275	IN	Data Raw: 69 6f 6e 28 29 7b 68 69 64 65 4d 65 6e 75 28 75 73 65 72 4d 65 6e 75 29 7d 29 3b 75 73 65 72 4d 65 6e 75 2e 66 69 6e 64 28 22 2e 73 2d 6d 73 67 22 29 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 74 78 2e 66 69 72 65 28 22 63 61 74 65 67 6f 72 79 43 6c 69 63 6b 22 2c 7b 63 61 74 65 67 6f 72 79 3a 22 6d 73 67 22 2c 68 61 73 4e 65 77 73 3a 75 73 65 72 4d 65 6e 75 2e 66 69 6e 64 28 22 2e 73 2d 6d 73 67 2d 63 6f 75 6e 74 22 29 2e 74 65 78 74 28 29 3d 3d 3d 22 22 3f 30 3a 31 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 62 69 6e 64 45 76 65 6e 74 28 29 7d 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 7d 29 3b 0a 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 6d 6e 67 72 2f 6d 65 6e 75 5f 63 Data Ascii: ion(){hideMenu(userMenu)});userMenu.find(".s-msg").on("mousedown",function(){ctx.fire("categoryClick",{category:"msg",hasNews:userMenu.find(".s-msg-count").text()===""?0:1})})}function init(){bindEvent()}exports.init=init});F.module("superman:mngr/menu_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49814	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	562	OUT	GET /static/superman/js/components/qrcode-0e4b67354f.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2068 Connection: close Expires: Sat, 05 Oct 2024 09:01:44 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "0e4b67354fff9b6d750438c9499673c5" Cache-Control: max-age=31536000 Age: 864939 Accept-Ranges: bytes Content-MD5: DktnNU//m211BDjJSZZzxQ== x-bce-content-crc32: 189293433 x-bce-debug-id: hPnjnJJB/owrKijyGw5scdy++z62nil+xBsTzjncBoyoZZAti9QtMYgdWOBW05Q4vgRuR49AFH+L2LP2UpxXdg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5a259b72-033f-4974-9378-bca824071836 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 02 Oct 2024 09:01:44 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 2068 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:41 UTC	2068	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 71 72 63 6f 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 6c 6f 67 69 6e 31 3b 76 61 72 20 24 71 72 63 6f 64 65 57 72 61 70 70 65 72 3d 24 28 22 23 73 5f 71 72 63 6f 64 65 5f 6e 6f 6c 6f 67 69 6e 22 29 3b 76 61 72 20 24 71 72 54 6f 6f 6c 74 69 70 3d 24 28 22 2e 71 72 63 6f 64 65 2d 74 6f 6f 6c 74 69 70 22 29 3b 76 61 72 20 63 61 6c 6c 65 64 3d 66 61 6c 73 65 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 63 62 29 7b 24 2e 67 65 74 53 63 72 69 70 74 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 70 61 73 73 70 6f 72 74 2e 62 61 69 64 75 2e 63 6f 6d 2f 70 61 73 73 41 Data Ascii: F.module("superman:components/qrcode",function(require,exports,ctx){var login1;var $qrcodeWrapper=$("#s_qrcode_nologin");var $qrTooltip=$(".qrcode-tooltip");var called=false;function loadScript(cb){$.getScript(location.protocol+"//passport.baidu.com/passA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49810	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	562	OUT	GET /static/superman/js/components/advert-064271ed9b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4256 Connection: close Expires: Sat, 03 Aug 2024 00:32:31 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "064271ed9b70cbf13c1e7737b490408e" Cache-Control: max-age=31536000 Age: 262299 Accept-Ranges: bytes Content-MD5: BkJx7Ztwy/E8Hnc3tJBAjg== x-bce-content-crc32: 3716042200 x-bce-debug-id: pFkmOnmDRluyb700pKxcQibnzeLSMXt1oDTlAFjK9g7aFR3+LdbSMRMkejau0KBReT5eMpVmFk1MranlD8QwQw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f130dc9b-c033-47f7-9170-191a48d67a8a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 00:32:30 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [4], zhuzuncache53 [4] Ohc-File-Size: 4256 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:41 UTC	4256	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 61 64 76 65 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 24 64 61 76 65 72 74 57 72 61 70 3d 24 28 22 23 73 5f 70 6f 70 75 70 5f 61 64 76 65 72 74 22 29 3b 76 61 72 20 64 61 74 61 3d 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 70 6f 70 55 70 41 64 76 65 72 74 3b 76 61 72 20 74 69 6d 65 72 3d 6e 75 6c 6c 3b 76 61 72 20 66 61 64 65 54 69 6d 65 3d 36 30 30 3b 76 61 72 20 73 68 6f 77 53 74 79 6c 65 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 22 61 6c 6c 20 30 2e 35 73 22 2c 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 22 3a 22 61 6c 6c 20 30 2e 35 73 22 2c 22 2d 6d 6f 7a 2d 74 72 61 Data Ascii: F.module("superman:components/advert",function(require,exports,ctx){var $davertWrap=$("#s_popup_advert");var data=bds.comm&&bds.comm.popUpAdvert;var timer=null;var fadeTime=600;var showStyle={transition:"all 0.5s","-webkit-transition":"all 0.5s","-moz-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49813	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	567	OUT	GET /static/superman/js/components/login_guide-4fba3971ce.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 8919 Connection: close Expires: Tue, 30 Jul 2024 23:54:14 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "4fba3971ce850c09757774298f8185ed" Cache-Control: max-age=31536000 Age: 864939 Accept-Ranges: bytes Content-MD5: T7o5cc6FDAl1d3Qpj4GF7Q== x-bce-content-crc32: 177843807 x-bce-debug-id: QCSh1xXl1pjM53lmR81RI+yxJappR5bW9f9xcSEkdxY1WCzRpFjZovRkxUUWidn3X5jjMokyI+dT6OoUuuorvg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4d15eb46-b736-4d0a-b538-dfa12e58f223 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 27 Jul 2024 23:54:14 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 8919 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:41 UTC	8919	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 6f 67 69 6e 5f 67 75 69 64 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 76 65 6e 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 46 6f 72 4f 66 49 74 65 72 61 74 6f 72 48 65 6c 70 65 72 28 6f 29 7b 69 66 28 74 79 70 65 6f Data Ascii: define("superman/components/login_guide",["require","exports","superman/lib/event"],function(require,_exports,_event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _createForOfIteratorHelper(o){if(typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49815	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	567	OUT	GET /static/superman/js/components/placeholder-f3bc3565f2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:41 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:40 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 7836 Connection: close Expires: Tue, 20 Aug 2024 18:11:56 GMT Last-Modified: Fri, 09 Aug 2024 11:44:02 GMT ETag: "f3bc3565f275687fd2121e28c4f2ed7e" Cache-Control: max-age=31536000 Age: 864939 Accept-Ranges: bytes Content-MD5: 87w1ZfJ1aH/SEh4oxPLtfg== x-bce-content-crc32: 337320165 x-bce-debug-id: Zxb0SgMpZNvhMKrpeRwqm3PS/rL9czaZayjcVGQKjyXDd9V7QIVQN+MrsCq4M+OUAxnrBRYWntlai3y1iZTnDQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a5daf718-bfca-452d-84bb-d23462319662 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 17 Aug 2024 18:11:56 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache54 [2] Ohc-File-Size: 7836 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:41 UTC	7836	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 76 65 6e 74 2c 5f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 50 6c 61 63 65 48 6f 6c 64 65 72 3d 76 6f 69 64 20 Data Ascii: define("superman/components/placeholder",["require","exports","superman/lib/event","superman/lib/commonUtils"],function(require,_exports,_event,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.PlaceHolder=void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49816	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:40 UTC	1373	OUT	GET /5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif?pid=1_79&lid=0xd9c48fd80087333d&ts=1729855659114&type=et_comm&group=resLoadSlow&info=%7B%22msg%22%3A%22http%3A%2F%2Fpss.bdstatic.com%2Fr%2Fwww%2Fcache%2Fstatic%2Fplugins%2Fswfobject_0178953.js%22%2C%22connectT%22%3A6.2000000000116415%2C%22domainLookupT%22%3A0%2C%22duration%22%3A2344.8000000000175%2C%22requestT%22%3A1022.7000000000116%2C%22responseT%22%3A136.60000000000582%2C%22startT%22%3A5436.099999999977%2C%22waitingT%22%3A1179.1000000000058%2C%22connectEnd%22%3A6621.399999999994%2C%22requestStart%22%3A6621.599999999977%2C%22fetchStart%22%3A5436.099999999977%2C%22slowLen%22%3A12%2C%22xpath%22%3A%22%22%7D&dim=%7B%22host%22%3A%22pss.bdstatic.com%22%2C%22range%22%3A%222_5s%22%2C%22type%22%3A%22js%22%7D HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C
2024-10-25 11:27:41 UTC	134	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:41 GMT Server: nginx Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49798	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:41 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gBUGMw6E97HbD8K&MD=B9VSAU7C HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 11:27:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1818e6e3-847b-449f-83fa-c0a68e70a0ac MS-RequestId: 17da66a2-ff11-4eb7-8976-02788649e9b2 MS-CV: Vt0JJ9lnT0KpGU4S.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 11:27:40 GMT Connection: close Content-Length: 24490
2024-10-25 11:27:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-25 11:27:41 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49817	103.235.47.188	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:41 UTC	642	OUT	GET /favicon.ico HTTP/1.1 Host: www.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C
2024-10-25 11:27:41 UTC	465	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 16958 Content-Type: image/x-icon Date: Fri, 25 Oct 2024 11:27:41 GMT Etag: "423e-5bd257db4e500" Last-Modified: Wed, 10 Mar 2021 02:33:24 GMT P3p: CP=" OTI DSP COR IVA OUR IND COM " Server: Apache Set-Cookie: BAIDUID=3E81446175EF0B4D61DE734C552E079F:FG=1; expires=Sat, 25-Oct-25 11:27:41 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1 Vary: Accept-Encoding,User-Agent Connection: close
2024-10-25 11:27:41 UTC	714	IN	Data Raw: 00 00 01 00 01 00 40 40 00 00 01 00 20 00 28 42 00 00 16 00 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 2a ff ff ff 8f ff ff ff d5 ff ff ff f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: @@ (B(@ @*
2024-10-25 11:27:41 UTC	261	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff bd ff ff ff 06 00 00 00 00 00 00 00 00 ff ff ff 95 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-25 11:27:41 UTC	3537	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 95 00 00 00 00 ff ff ff 2a ff ff ff fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: *
2024-10-25 11:27:41 UTC	4716	IN	Data Raw: 29 ff e7 5f 58 ff ff ff ff ff ff ff ff ff ff ff ff ff f1 a4 a0 ff e1 32 29 ff e1 32 29 ff f1 a1 9d ff ff ff ff ff ff ff ff ff ff ff ff ff e4 48 40 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff fb e6 e4 ff ff ff ff ff ff ff ff ff f8 d5 d3 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff ec 7c 77 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 9e 9a ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e4 4a 43 ff ff ff ff ff ff ff ff ff ff ff ff ff f9 d7 d5 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 Data Ascii: )_X2)2)H@2)2)2)2)2)2)2)2)2)2)2)2)\|w2)2)2)2)2)JC2)2)2)2)
2024-10-25 11:27:41 UTC	5895	IN	Data Raw: 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff ef 8d 87 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e6 4f 48 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff f6 c1 be ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 b1 ad ff e2 38 2f ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e3 3b 33 ff f5 ba b6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 b5 b1 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 Data Ascii: )2)2)2)2)OH2)2)2)2)2)2)2)2)2)2)2)8/2)2)2)2)2)2)2)2)2);32)2)2)2)2)2)
2024-10-25 11:27:41 UTC	1692	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 8f ff ff ff 2a ff ff ff fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: *
2024-10-25 11:27:41 UTC	143	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 c0 00 00 00 00 00 00 03 e0 00 00 00 00 00 00 07 f8 00 00 00 00 00 00 1f Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	39.156.68.81	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:41 UTC	617	OUT	GET /a.js HTTP/1.1 Host: hector.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:42 UTC	227	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 4665 Content-Type: text/javascript; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:42 GMT Etag: 127628988459566463261940641 Keep-Alive: timeout=60 Connection: close
2024-10-25 11:27:42 UTC	2358	IN	Data Raw: 76 61 72 20 5f 30 78 32 34 39 35 3d 5b 27 63 45 64 50 55 55 6b 3d 27 2c 27 57 55 56 54 52 56 41 3d 27 2c 27 65 55 74 36 59 6e 49 3d 27 2c 27 63 33 42 73 61 58 51 3d 27 2c 27 4e 58 77 78 4d 58 77 3d 27 2c 27 54 47 6c 4f 63 6d 34 3d 27 2c 27 64 32 4e 68 57 6d 4d 3d 27 2c 27 54 47 56 32 52 48 45 3d 27 2c 27 63 56 46 50 65 48 51 3d 27 2c 27 55 48 70 6b 54 6d 45 3d 27 2c 27 57 45 70 5a 54 55 67 3d 27 2c 27 66 44 4a 38 4d 54 4d 3d 27 2c 27 4d 58 77 77 66 44 45 3d 27 2c 27 4e 48 77 32 66 44 63 3d 27 2c 27 66 44 52 38 4f 58 77 3d 27 2c 27 56 48 46 43 52 46 6b 3d 27 2c 27 66 44 45 77 66 44 4d 3d 27 2c 27 54 6b 52 6b 62 56 45 3d 27 2c 27 56 48 4a 4f 54 47 30 3d 27 2c 27 4d 54 4a 38 4f 41 3d 3d 27 2c 27 63 57 70 70 59 55 77 3d 27 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: var _0x2495=['cEdPUUk=','WUVTRVA=','eUt6YnI=','c3BsaXQ=','NXwxMXw=','TGlOcm4=','d2NhWmM=','TGV2RHE=','cVFPeHQ=','UHpkTmE=','WEpZTUg=','fDJ8MTM=','MXwwfDE=','NHw2fDc=','fDR8OXw=','VHFCRFk=','fDEwfDM=','TkRkbVE=','VHJOTG0=','MTJ8OA==','cWppYUw='];(function(
2024-10-25 11:27:42 UTC	1506	IN	Data Raw: 28 5f 30 78 33 64 35 33 61 33 2c 5f 30 78 33 35 32 64 39 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 64 35 33 61 33 2b 5f 30 78 33 35 32 64 39 31 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 65 27 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 63 30 37 31 33 65 2c 5f 30 78 31 39 62 38 30 33 29 7b 72 65 74 75 72 6e 20 5f 30 78 63 30 37 31 33 65 2b 5f 30 78 31 39 62 38 30 33 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 63 27 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 61 37 32 62 38 2c 5f 30 78 34 62 64 39 32 37 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 61 37 32 62 38 2b 5f 30 78 34 62 64 39 32 37 3b 7d 3b 5f 30 78 33 66 63 39 38 36 5b 5f 30 78 32 63 66 66 28 27 30 78 32 27 29 5d 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (_0x3d53a3,_0x352d91){return _0x3d53a3+_0x352d91;};_0x3fc986[_0x2cff('0xe')]=function(_0xc0713e,_0x19b803){return _0xc0713e+_0x19b803;};_0x3fc986[_0x2cff('0xc')]=function(_0x1a72b8,_0x4bd927){return _0x1a72b8+_0x4bd927;};_0x3fc986[_0x2cff('0x2')]=function
2024-10-25 11:27:42 UTC	801	IN	Data Raw: 78 34 34 66 32 61 31 5b 30 78 31 5d 2c 5f 30 78 32 37 35 31 34 38 5b 30 78 31 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 31 5d 26 3d 30 78 66 66 66 66 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 33 5d 2b 3d 5f 30 78 35 65 63 36 64 63 5b 5f 30 78 32 63 66 66 28 27 30 78 63 27 29 5d 28 5f 30 78 34 34 66 32 61 31 5b 30 78 33 5d 2c 5f 30 78 32 37 35 31 34 38 5b 30 78 33 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 5f 30 78 33 62 64 31 64 64 5b 30 78 32 5d 2b 3d 5f 30 78 35 65 63 36 64 63 5b 5f 30 78 32 63 66 66 28 27 30 78 32 27 29 5d 28 5f 30 78 33 62 64 31 64 64 5b 30 78 33 5d 2c 30 78 31 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 Data Ascii: x44f2a1[0x1],_0x275148[0x1]);continue;case'5':_0x3bd1dd[0x1]&=0xffff;continue;case'6':_0x3bd1dd[0x3]+=_0x5ec6dc[_0x2cff('0xc')](_0x44f2a1[0x3],_0x275148[0x3]);continue;case'7':_0x3bd1dd[0x2]+=_0x5ec6dc[_0x2cff('0x2')](_0x3bd1dd[0x3],0x10);continue;case'8'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49820	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:41 UTC	566	OUT	GET /static/superman/js/components/video-meet-7833028d86.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	906	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4398 Connection: close Expires: Tue, 10 Sep 2024 13:25:51 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "7833028d860aff115ed44dc3ecf82e92" Cache-Control: max-age=31536000 Age: 2605335 Accept-Ranges: bytes Content-MD5: eDMCjYYK/xFe1E3D7Pgukg== x-bce-content-crc32: 3066766385 x-bce-debug-id: t7zyWNPfKBU1rY+Su+wdtL4Acs08yqWB8PRaCJwW2r5CHdW86f7x312il+vnAmQpEcUsGx/Ez1bP6KsQJYArQQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 6073113b-1018-45c9-976b-7df0483f4625 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 07 Sep 2024 13:25:50 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache65 [4] Ohc-File-Size: 4398 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	4398	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 3d 22 73 79 6d 62 6f 6c 22 29 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 7d 7d 65 6c 73 65 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6f 62 6a 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d Data Ascii: function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	568	OUT	GET /static/superman/js/components/content-info-12dbf9fb6d.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6451 Connection: close Expires: Sat, 03 Aug 2024 16:00:27 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "12dbf9fb6d608609f31753654d61b30a" Cache-Control: max-age=31536000 Age: 864940 Accept-Ranges: bytes Content-MD5: Etv5+21ghgnzF1NlTWGzCg== x-bce-content-crc32: 2370318147 x-bce-debug-id: nWEJTvODj3MEAKaGoDFcDd9l+HJlUs2C+b22X+8Py+44Lc6xlp+l16wBisyaXrEmtl9OgnNpX6jb/MOgn8IPxw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 70904964-c3cc-4209-831c-fe584ff6891f x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 16:00:26 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache54 [2] Ohc-File-Size: 6451 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	6451	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6f 6e 74 65 6e 74 2d 69 6e 66 6f 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 43 6f 6e 74 65 6e 74 49 6e 66 6f 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 43 6f 6e 73 74 72 75 63 74 6f 72 29 7b 69 66 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 Data Ascii: define("superman/components/content-info",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.ContentInfo=void 0;function _classCallCheck(instance,Constructor){if(!(instance inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	567	OUT	GET /static/superman/js/components/csaitab-log-75d5350518.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2776 Connection: close Expires: Thu, 08 Aug 2024 09:32:50 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "75d53505189528b98177f7441ef4ebb4" Cache-Control: max-age=31536000 Age: 864940 Accept-Ranges: bytes Content-MD5: ddU1BRiVKLmBd/dEHvTrtA== x-bce-content-crc32: 3811860496 x-bce-debug-id: 1B4TvA6ZVhWVS3/n+lzQ3xKLJVl2mAOOtt42iVva1WTFtxl3EXYZm1UQTQ9giFA6qGWqvpDRfNGnergxFvSMNg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 6516f055-7cc0-44bb-89f7-95257371b803 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 05 Aug 2024 09:32:49 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2776 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:42 UTC	2776	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 73 61 69 74 61 62 2d 6c 6f 67 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 75 62 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 75 62 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 43 73 61 69 74 61 62 4c 6f 67 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 6f 62 6a 65 63 74 2c 65 6e 75 6d 65 72 61 62 6c 65 4f 6e Data Ascii: define("superman/components/csaitab-log",["require","exports","superman/components/ubc"],function(require,_exports,_ubc){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.CsaitabLog=void 0;function ownKeys(object,enumerableOn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49824	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	581	OUT	GET /static/superman/js/components/top-right-operate/operate-b7693b0cc7.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4477 Connection: close Expires: Fri, 02 Aug 2024 14:11:49 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "b7693b0cc71a26cdd07ba8d3a97e0f36" Cache-Control: max-age=31536000 Age: 864940 Accept-Ranges: bytes Content-MD5: t2k7DMcaJs3Qe6jTqX4PNg== x-bce-content-crc32: 3480945735 x-bce-debug-id: mTUHv14Yn3QTtSEwfh/USGzxoGhIo/ztz4O9WiJHiPnowiu3syC0cs6JCrNdPz7wWybJ74McOCq2x5KKnKriuQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 9395873d-bb91-4ac2-8048-7f171679e8e3 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 30 Jul 2024 14:11:49 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache58 [2] Ohc-File-Size: 4477 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	4477	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 6f 70 2d 72 69 67 68 74 2d 6f 70 65 72 61 74 65 2f 6f 70 65 72 61 74 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 78 74 72 61 63 74 5f 64 61 74 61 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 78 74 72 61 63 74 5f 64 61 74 61 2c 5f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d Data Ascii: define("superman/components/top-right-operate/operate",["require","exports","superman/lib/extract_data","superman/lib/commonUtils"],function(require,_exports,_extract_data,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49826	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	388	OUT	GET /static/superman/js/components/tips-e2ceadd14d.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	902	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 564 Connection: close Expires: Sat, 03 Aug 2024 01:02:27 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "e2ceadd14d8e3fb1106e48ac89843760" Cache-Control: max-age=31536000 Age: 872436 Accept-Ranges: bytes Content-MD5: 4s6t0U2OP7EQbkisiYQ3YA== x-bce-content-crc32: 385949678 x-bce-debug-id: avvlgzDXZvjCad6LBQEA5ewuVSQ88a82bc7nG01THL4PcsI0S+vnwEXHV7050xO+Xs4/mIviqVEJ984WD31KtA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: c39af9c7-fd9c-4012-a765-f814b122ad60 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 01:02:26 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 564 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:42 UTC	564	IN	Data Raw: 46 2e 61 64 64 4c 6f 67 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 22 2c 5b 22 74 69 70 73 43 6c 69 63 6b 22 2c 22 61 63 74 69 76 69 74 79 43 6c 69 63 6b 22 5d 29 3b 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 76 61 72 20 24 6c 6d 4c 69 6e 6b 3d 24 28 22 23 6c 6d 2d 6e 65 77 20 61 22 29 3b 76 61 72 20 61 63 74 69 76 69 74 79 3d 24 28 22 23 62 6f 74 74 6f 6d 5f 6c 61 79 65 72 20 2e 61 63 74 69 76 69 74 79 22 29 3b 69 66 28 24 6c 6d 4c 69 6e 6b 2e 73 69 7a 65 28 29 3e 30 29 7b 24 6c 6d 4c 69 6e 6b 2e 6f 6e 28 22 6d 6f 75 73 Data Ascii: F.addLog("superman:components/tips",["tipsClick","activityClick"]);F.module("superman:components/tips",function(require,exports,ctx){function init(){var $lmLink=$("#lm-new a");var activity=$("#bottom_layer .activity");if($lmLink.size()>0){$lmLink.on("mous

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49829	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	390	OUT	GET /static/superman/js/components/qrcode-0e4b67354f.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2068 Connection: close Expires: Sat, 05 Oct 2024 09:01:44 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "0e4b67354fff9b6d750438c9499673c5" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: DktnNU//m211BDjJSZZzxQ== x-bce-content-crc32: 189293433 x-bce-debug-id: hPnjnJJB/owrKijyGw5scdy++z62nil+xBsTzjncBoyoZZAti9QtMYgdWOBW05Q4vgRuR49AFH+L2LP2UpxXdg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 5a259b72-033f-4974-9378-bca824071836 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 02 Oct 2024 09:01:44 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 2068 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	2068	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 71 72 63 6f 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 6c 6f 67 69 6e 31 3b 76 61 72 20 24 71 72 63 6f 64 65 57 72 61 70 70 65 72 3d 24 28 22 23 73 5f 71 72 63 6f 64 65 5f 6e 6f 6c 6f 67 69 6e 22 29 3b 76 61 72 20 24 71 72 54 6f 6f 6c 74 69 70 3d 24 28 22 2e 71 72 63 6f 64 65 2d 74 6f 6f 6c 74 69 70 22 29 3b 76 61 72 20 63 61 6c 6c 65 64 3d 66 61 6c 73 65 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 63 62 29 7b 24 2e 67 65 74 53 63 72 69 70 74 28 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 70 61 73 73 70 6f 72 74 2e 62 61 69 64 75 2e 63 6f 6d 2f 70 61 73 73 41 Data Ascii: F.module("superman:components/qrcode",function(require,exports,ctx){var login1;var $qrcodeWrapper=$("#s_qrcode_nologin");var $qrTooltip=$(".qrcode-tooltip");var called=false;function loadScript(cb){$.getScript(location.protocol+"//passport.baidu.com/passA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49825	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	390	OUT	GET /static/superman/js/components/advert-064271ed9b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4256 Connection: close Expires: Sat, 03 Aug 2024 00:32:31 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "064271ed9b70cbf13c1e7737b490408e" Cache-Control: max-age=31536000 Age: 354702 Accept-Ranges: bytes Content-MD5: BkJx7Ztwy/E8Hnc3tJBAjg== x-bce-content-crc32: 3716042200 x-bce-debug-id: pFkmOnmDRluyb700pKxcQibnzeLSMXt1oDTlAFjK9g7aFR3+LdbSMRMkejau0KBReT5eMpVmFk1MranlD8QwQw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f130dc9b-c033-47f7-9170-191a48d67a8a x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 00:32:30 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 4256 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	4256	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 61 64 76 65 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 24 64 61 76 65 72 74 57 72 61 70 3d 24 28 22 23 73 5f 70 6f 70 75 70 5f 61 64 76 65 72 74 22 29 3b 76 61 72 20 64 61 74 61 3d 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 70 6f 70 55 70 41 64 76 65 72 74 3b 76 61 72 20 74 69 6d 65 72 3d 6e 75 6c 6c 3b 76 61 72 20 66 61 64 65 54 69 6d 65 3d 36 30 30 3b 76 61 72 20 73 68 6f 77 53 74 79 6c 65 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 22 61 6c 6c 20 30 2e 35 73 22 2c 22 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 22 3a 22 61 6c 6c 20 30 2e 35 73 22 2c 22 2d 6d 6f 7a 2d 74 72 61 Data Ascii: F.module("superman:components/advert",function(require,exports,ctx){var $davertWrap=$("#s_popup_advert");var data=bds.comm&&bds.comm.popUpAdvert;var timer=null;var fadeTime=600;var showStyle={transition:"all 0.5s","-webkit-transition":"all 0.5s","-moz-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	395	OUT	GET /static/superman/js/components/login_guide-4fba3971ce.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 8919 Connection: close Expires: Tue, 30 Jul 2024 23:54:14 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "4fba3971ce850c09757774298f8185ed" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: T7o5cc6FDAl1d3Qpj4GF7Q== x-bce-content-crc32: 177843807 x-bce-debug-id: QCSh1xXl1pjM53lmR81RI+yxJappR5bW9f9xcSEkdxY1WCzRpFjZovRkxUUWidn3X5jjMokyI+dT6OoUuuorvg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4d15eb46-b736-4d0a-b538-dfa12e58f223 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 27 Jul 2024 23:54:14 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 8919 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	8919	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 6f 67 69 6e 5f 67 75 69 64 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 76 65 6e 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 46 6f 72 4f 66 49 74 65 72 61 74 6f 72 48 65 6c 70 65 72 28 6f 29 7b 69 66 28 74 79 70 65 6f Data Ascii: define("superman/components/login_guide",["require","exports","superman/lib/event"],function(require,_exports,_event){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _createForOfIteratorHelper(o){if(typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49827	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	395	OUT	GET /static/superman/js/components/placeholder-f3bc3565f2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 7836 Connection: close Expires: Tue, 20 Aug 2024 18:11:56 GMT Last-Modified: Fri, 09 Aug 2024 11:44:02 GMT ETag: "f3bc3565f275687fd2121e28c4f2ed7e" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: 87w1ZfJ1aH/SEh4oxPLtfg== x-bce-content-crc32: 337320165 x-bce-debug-id: Zxb0SgMpZNvhMKrpeRwqm3PS/rL9czaZayjcVGQKjyXDd9V7QIVQN+MrsCq4M+OUAxnrBRYWntlai3y1iZTnDQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a5daf718-bfca-452d-84bb-d23462319662 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 17 Aug 2024 18:11:56 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache54 [2] Ohc-File-Size: 7836 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	7836	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 76 65 6e 74 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 76 65 6e 74 2c 5f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 50 6c 61 63 65 48 6f 6c 64 65 72 3d 76 6f 69 64 20 Data Ascii: define("superman/components/placeholder",["require","exports","superman/lib/event","superman/lib/commonUtils"],function(require,_exports,_event,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.PlaceHolder=void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49830	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	567	OUT	GET /static/superman/js/components/aging-tools-f4527892f0.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6378 Connection: close Expires: Thu, 10 Oct 2024 14:14:37 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f4527892f08ab76ffa73294fae10d6cd" Cache-Control: max-age=31536000 Age: 354702 Accept-Ranges: bytes Content-MD5: 9FJ4kvCKt2/6cylPrhDWzQ== x-bce-content-crc32: 1702576278 x-bce-debug-id: PqowyJt14glmZPpiDj+qma8yFrj4pwl3JTWXkD6uQGe6n/NCDPrB/K33rFotyL7udB6hmCtnMxgPqgJhXMPx3A== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a6ef7f79-b658-4944-b3c9-ec8422fa9c77 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 07 Oct 2024 14:14:37 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 6378 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:42 UTC	6378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 3d 22 73 79 6d 62 6f 6c 22 29 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 7d 7d 65 6c 73 65 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6f 62 6a 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d Data Ascii: function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49831	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	1352	OUT	GET /5b1ZeDe5KgQFm2e88IuM_a/mwb2.gif?pid=1_79&lid=0xd9c48fd80087333d&ts=1729855659114&type=et_comm&group=resLoadSlow&info=%7B%22msg%22%3A%22http%3A%2F%2Fpss.bdstatic.com%2Fr%2Fwww%2Fcache%2Fstatic%2Fplugins%2Fswfobject_0178953.js%22%2C%22connectT%22%3A6.2000000000116415%2C%22domainLookupT%22%3A0%2C%22duration%22%3A2344.8000000000175%2C%22requestT%22%3A1022.7000000000116%2C%22responseT%22%3A136.60000000000582%2C%22startT%22%3A5436.099999999977%2C%22waitingT%22%3A1179.1000000000058%2C%22connectEnd%22%3A6621.399999999994%2C%22requestStart%22%3A6621.599999999977%2C%22fetchStart%22%3A5436.099999999977%2C%22slowLen%22%3A12%2C%22xpath%22%3A%22%22%7D&dim=%7B%22host%22%3A%22pss.bdstatic.com%22%2C%22range%22%3A%222_5s%22%2C%22type%22%3A%22js%22%7D HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:42 UTC	134	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 25 Oct 2024 11:27:42 GMT Server: nginx Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49833	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	383	OUT	GET /static/superman/js/super_load-8301698f5e.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:42 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 30752 Connection: close Expires: Tue, 10 Sep 2024 15:34:28 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "8301698f5eb7cde858916fe1847ab70f" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: gwFpj163zehYkW/hhHq3Dw== x-bce-content-crc32: 2388938383 x-bce-debug-id: 4gJ0eBJLpKqJaDdp1AMbE5hXePphSQhMxVue61ayNFUr6sDkf8UN1DCh+AqxI7fx+XCA5dB25to5KX1uiOraQg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 3602be35-f043-4018-9ad6-6b8bfcf25ea7 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 07 Sep 2024 15:34:28 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 30752 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:42 UTC	15477	IN	Data Raw: 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 77 65 61 74 68 65 72 2f 77 65 61 74 68 65 72 5f 74 70 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 63 74 78 29 7b 76 61 72 20 69 73 4e 65 77 53 74 79 6c 65 3d 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 6e 65 77 54 6f 70 4d 65 6e 75 3d 3d 3d 31 3b 65 78 70 6f 72 74 73 2e 70 6f 6c 6c 75 74 69 6f 6e 4c 65 76 65 6c 3d 7b 30 3a 22 e4 bc 98 22 2c 31 30 3a 22 e8 89 af 22 2c 32 30 3a 22 e8 bd bb e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 33 30 3a 22 e4 b8 ad e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 34 30 3a 22 e9 87 8d e5 ba a6 e6 b1 a1 e6 9f 93 22 2c 35 30 3a 22 e4 b8 a5 e9 87 8d e6 b1 a1 e6 9f 93 22 7d 3b 76 61 72 20 5f 64 6f 6d 3d 24 28 22 23 73 5f 6d 6f 64 5f 77 65 61 Data Ascii: F.module("superman:weather/weather_tpl",function(require,exports,ctx){var isNewStyle=bds.comm&&bds.comm.newTopMenu===1;exports.pollutionLevel={0:"",10:"",20:"",30:"",40:"",50:""};var _dom=$("#s_mod_wea
2024-10-25 11:27:43 UTC	15275	IN	Data Raw: 69 6f 6e 28 29 7b 68 69 64 65 4d 65 6e 75 28 75 73 65 72 4d 65 6e 75 29 7d 29 3b 75 73 65 72 4d 65 6e 75 2e 66 69 6e 64 28 22 2e 73 2d 6d 73 67 22 29 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 74 78 2e 66 69 72 65 28 22 63 61 74 65 67 6f 72 79 43 6c 69 63 6b 22 2c 7b 63 61 74 65 67 6f 72 79 3a 22 6d 73 67 22 2c 68 61 73 4e 65 77 73 3a 75 73 65 72 4d 65 6e 75 2e 66 69 6e 64 28 22 2e 73 2d 6d 73 67 2d 63 6f 75 6e 74 22 29 2e 74 65 78 74 28 29 3d 3d 3d 22 22 3f 30 3a 31 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 62 69 6e 64 45 76 65 6e 74 28 29 7d 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 7d 29 3b 0a 46 2e 6d 6f 64 75 6c 65 28 22 73 75 70 65 72 6d 61 6e 3a 6d 6e 67 72 2f 6d 65 6e 75 5f 63 Data Ascii: ion(){hideMenu(userMenu)});userMenu.find(".s-msg").on("mousedown",function(){ctx.fire("categoryClick",{category:"msg",hasNews:userMenu.find(".s-msg-count").text()===""?0:1})})}function init(){bindEvent()}exports.init=init});F.module("superman:mngr/menu_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49834	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:42 UTC	562	OUT	GET /static/superman/js/components/invoke-97e9694cb9.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 3567 Connection: close Expires: Thu, 01 Aug 2024 08:05:20 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "97e9694cb9c9ff941d905a4d765f6937" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: l+lpTLnJ/5QdkFpNdl9pNw== x-bce-content-crc32: 3832170308 x-bce-debug-id: C/viDE2XqHYoAfvgjQzlAzm3Lgrs78y3ZropDCMQ7nhbWi+dM8UVOMm5trX1mPV/KBDSeB83IlnPzduy020g8w== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 988f8be5-cfa5-4842-986d-0675faa5e3ba x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 29 Jul 2024 08:05:20 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 3567 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:43 UTC	3567	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 6e 76 6f 6b 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 43 6f 6e 73 74 72 75 63 74 6f 72 29 7b 69 66 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6e 73 74 72 75 63 Data Ascii: define("superman/components/invoke",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _classCallCheck(instance,Constructor){if(!(instance instanceof Construc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49838	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	556	OUT	GET /static/superman/js/ubase-dddde7cd4e.js?v=md5 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 52422 Connection: close Expires: Sat, 03 Aug 2024 00:40:41 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "dddde7cd4e229228869fe227b2a42929" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: 3d3nzU4ikiiGn+InsqQpKQ== x-bce-content-crc32: 2882194801 x-bce-debug-id: H6a/UwX2VDaK/hvgDZhShPXWDXx529dhbsItWeMpY5oNTUu2Bi/HrTicjdTucoRPaQblvbf38FkB45jc4uo43g== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 045ec94a-ec4d-4d45-a993-dc14ae5a970d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 00:40:41 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache53 [4] Ohc-File-Size: 52422 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:43 UTC	15477	IN	Data Raw: 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 46 2c 7b 75 6e 69 71 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 6e 69 71 3d 2b 6e 65 77 20 44 61 74 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 70 72 65 66 69 78 29 7b 72 65 74 75 72 6e 28 70 72 65 66 69 78 7c 7c 22 22 29 2b 20 2b 2b 75 6e 69 71 7d 7d 28 29 2c 6d 69 78 3a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 2c 69 6e 68 65 72 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 72 67 73 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 73 75 62 63 6c 61 73 73 3d 61 72 67 73 5b 30 5d 2c 73 75 62 70 72 6f 3d 73 75 62 63 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 69 6e 69 74 69 61 6c 69 7a 65 3d 73 75 62 70 72 6f 2e Data Ascii: jQuery.extend(F,{unique:function(){var uniq=+new Date;return function(prefix){return(prefix\|\|"")+ ++uniq}}(),mix:jQuery.extend,inherit:function(){var args=Array.prototype.slice.call(arguments),subclass=args[0],subpro=subclass.prototype,oinitialize=subpro.
2024-10-25 11:27:43 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 69 66 28 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 29 7b 73 65 6c 66 2e 68 61 6e 64 6c 65 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 29 3b 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 3d 6e 75 6c 6c 7d 7d 29 3b 74 68 69 73 2e 6f 6e 28 22 72 65 66 72 65 73 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 72 65 66 72 65 73 68 43 6f 6e 74 61 69 6e 6d 65 6e 74 28 29 0a 3b 63 61 63 68 65 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3d 73 65 6c 66 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 7d 29 7d 2c 72 65 66 72 65 73 68 43 6f 6e 74 61 69 6e 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 61 63 68 65 3d 74 68 69 73 2e Data Ascii: tion(){if(self.__handlestart){self.handle.off("mousedown",self.__handlestart);self.__handlestart=null}});this.on("refresh",function(){self.refreshContainment();cache.offsetParent=self.offsetParent.offset()})},refreshContainment:function(){var cache=this.
2024-10-25 11:27:43 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 72 65 73 65 74 50 6f 73 69 74 69 6f 6e 28 29 7d 29 2e 6f 6e 28 22 64 65 73 74 72 6f 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 63 6c 6f 73 65 28 29 7d 29 3b 73 65 6c 66 2e 61 63 74 69 6e 67 28 73 65 6c 66 2e 77 69 6e 64 6f 77 29 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 62 75 74 74 6f 6e 73 29 7b 46 2e 65 61 63 68 28 6f 70 74 69 6f 6e 73 2e 62 75 74 74 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 69 74 65 6d 29 7b 69 66 28 46 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 74 65 6d 2e 6c 69 73 74 65 6e 65 72 29 29 7b 73 65 6c 66 2e 6f 6e 28 22 61 63 74 69 6e 67 2d 22 2b 69 74 65 6d 2e 74 79 70 65 2c 69 74 65 6d 2e 6c 69 73 74 65 6e 65 72 29 7d 7d 29 7d 7d 7d 3b 44 69 61 6c 6f 67 2e 61 6c 65 72 74 3d 66 75 6e 63 74 Data Ascii: function(){self.resetPosition()}).on("destroy",function(){self.close()});self.acting(self.window);if(options.buttons){F.each(options.buttons,function(item){if(F.isFunction(item.listener)){self.on("acting-"+item.type,item.listener)}})}}};Dialog.alert=funct
2024-10-25 11:27:43 UTC	4177	IN	Data Raw: 73 2e 75 72 6c 2c 64 61 74 61 54 79 70 65 3a 6f 70 74 69 6f 6e 73 2e 64 61 74 61 54 79 70 65 2c 73 63 72 69 70 74 43 68 61 72 73 65 74 3a 6f 70 74 69 6f 6e 73 2e 63 68 61 72 73 65 74 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 72 65 73 75 6c 74 29 7b 73 65 6c 66 2e 72 65 73 75 6c 74 28 72 65 73 75 6c 74 29 7d 7d 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 64 61 74 61 54 79 70 65 3d 3d 22 6a 73 6f 6e 70 22 29 7b 61 6a 61 78 6f 70 74 69 6f 6e 73 2e 75 72 6c 3d 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 28 6f 70 74 69 6f 6e 73 2e 75 72 6c 2c 76 61 6c 75 65 29 3b 61 6a 61 78 6f 70 74 69 6f 6e 73 2e 6a 73 6f 6e 70 3d 6f 70 74 69 6f 6e 73 2e 6a 73 6f 6e 70 7d 65 6c 73 65 7b 69 66 28 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 6f 70 74 69 6f 6e 73 29 7b 0a 61 6a 61 78 6f Data Ascii: s.url,dataType:options.dataType,scriptCharset:options.charset,success:function(result){self.result(result)}};if(options.dataType=="jsonp"){ajaxoptions.url=options.value(options.url,value);ajaxoptions.jsonp=options.jsonp}else{if(options.ajaxoptions){ajaxo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49840	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	574	OUT	GET /static/superman/amd_modules/@baidu/video-meeting-1be7f62dac.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	891	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 256786 Connection: close Expires: Mon, 03 Jun 2024 13:43:00 GMT Last-Modified: Thu, 30 May 2024 08:22:54 GMT ETag: "1be7f62dac8f0de20d70df0e0539ae24" Cache-Control: max-age=31536000 Age: 12692683 Accept-Ranges: bytes Content-MD5: G+f2LayPDeINcN8OBTmuJA== x-bce-content-crc32: 316237685 x-bce-debug-id: w1DX0UvUZ2wtj3FaA7ghr3H6lty8qkV2QCigbp6MiCI0lp51z+ErkG0eNMZDXckZ106YcpJQcLzRyoHRGv4myQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1b972f66-144b-4ec9-afc5-40b9a91d5a7c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Fri, 31 May 2024 13:43:00 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2] Ohc-File-Size: 256786 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:43 UTC	15493	IN	Data Raw: 64 65 66 69 6e 65 28 27 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 62 61 69 64 75 2f 76 69 64 65 6f 2d 6d 65 65 74 69 6e 67 2f 64 69 73 74 2f 69 6e 64 65 78 27 2c 20 5b 0a 20 20 20 20 27 72 65 71 75 69 72 65 27 2c 0a 20 20 20 20 27 73 61 6e 27 2c 0a 20 20 20 20 27 74 73 6c 69 62 27 0a 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 74 2c 20 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 5b 61 5d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 0a 20 20 Data Ascii: define('amd_modules/@baidu/video-meeting/dist/index', [ 'require', 'san', 'tslib'], function (require, t, e) { return function (t) { var e = {}; function n(a) { if (e[a]) return e[a].exports;
2024-10-25 11:27:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 73 65 61 72 63 68 50 61 72 61 6d 73 3a 20 27 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 27 20 69 6e 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 72 61 62 6c 65 3a 20 27 53 79 6d 62 6f 6c 27 20 69 6e 20 61 20 26 26 20 27 69 74 65 72 61 74 6f 72 27 20 69 6e 20 53 79 6d 62 6f 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6c 6f 62 3a 20 27 46 69 6c 65 52 65 61 64 65 72 27 20 69 6e 20 61 20 26 26 20 27 42 6c 6f 62 27 20 69 6e 20 61 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 Data Ascii: searchParams: 'URLSearchParams' in a, iterable: 'Symbol' in a && 'iterator' in Symbol, blob: 'FileReader' in a && 'Blob' in a && function () { try { return
2024-10-25 11:27:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 20 3d 20 21 30 2c 20 65 2e 67 65 74 42 72 6f 77 73 65 72 20 3d 20 76 6f 69 64 20 30 2c 20 65 2e 67 65 74 42 72 6f 77 73 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 73 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: e.__esModule = !0, e.getBrowser = void 0, e.getBrowser = function () { var t = navigator.userAgent.toLowerCase(), e = { type: '', versions: 0 }, n = {
2024-10-25 11:27:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 75 6c 6c 20 21 3d 3d 20 74 20 26 26 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 74 72 69 6d 57 68 69 74 65 73 70 61 63 65 20 3d 20 27 61 6c 6c 27 2c 20 65 2e 64 69 73 61 70 70 65 61 72 54 69 6d 65 72 20 3d 20 6e 75 6c 6c 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 2e 5f 5f 65 78 74 65 6e 64 73 28 65 Data Ascii: function e() { var e = null !== t && t.apply(this, arguments) \|\| this; return e.trimWhitespace = 'all', e.disappearTimer = null, e; } return a.__extends(e
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 65 63 74 44 61 74 65 27 29 2c 20 70 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 72 65 76 4d 6f 6e 74 68 27 20 3d 3d 3d 20 74 20 3f 20 28 70 20 3d 20 74 68 69 73 2e 67 65 74 4c 61 73 74 44 61 79 28 73 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 20 73 2e 67 65 74 4d 6f 6e 74 68 28 29 20 2b 20 31 29 2c 20 6c 20 3d 20 72 2e 67 65 74 44 61 74 65 28 29 20 3e 3d 20 70 20 3f 20 6e 65 77 20 44 61 74 65 28 73 2e 73 65 74 44 61 74 65 28 70 29 29 20 3a 20 6e 65 77 20 44 61 74 65 28 73 2e 73 65 74 44 61 74 65 28 72 2e 67 65 74 44 61 74 65 28 29 29 29 2c 20 6e 20 26 26 20 73 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 20 3d 3d 3d 20 69 2e 67 65 74 46 75 6c 6c 59 Data Ascii: ectDate'), p = new Date().getDate(); 'prevMonth' === t ? (p = this.getLastDay(s.getFullYear(), s.getMonth() + 1), l = r.getDate() >= p ? new Date(s.setDate(p)) : new Date(s.setDate(r.getDate())), n && s.getFullYear() === i.getFullY
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 6f 69 63 65 53 74 61 74 75 73 3a 20 27 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 3a 20 21 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 73 74 61 72 74 4d 65 65 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 73 73 3a 20 21 31 2c 0a 20 20 20 20 Data Ascii: , voiceStatus: '', info: !0 }, canstartMeet: { name: !0, pass: !1,
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 37 29 29 2c 20 73 20 3d 20 61 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 6e 28 32 36 29 29 2c 20 63 20 3d 20 61 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 6e 28 31 30 31 29 29 2c 20 6c 20 3d 20 6e 28 35 29 2c 20 70 20 3d 20 6e 28 38 29 2c 20 64 20 3d 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e6 97 a5 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 b8 80 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 ba 8c 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 b8 89 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e5 9b 9b 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 ba 94 27 2c 0a 20 Data Ascii: 7)), s = a.__importDefault(n(26)), c = a.__importDefault(n(101)), l = n(5), p = n(8), d = [ '', '', '', '', '', '',
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 20 20 62 6f 64 79 3a 20 6f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 2e 6a 73 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 3d 3d 3d 20 65 2e 65 72 72 6e 6f 20 26 26 20 28 65 2e 64 61 74 61 2e 70 61 73 73 77 64 20 3d 20 74 2e 64 61 74 61 2e 67 65 74 28 27 Data Ascii: body: o }).then(function (t) { return t.json(); }).then(function (e) { 0 === e.errno && (e.data.passwd = t.data.get('
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 20 20 20 20 5d 2c 20 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 75 6c 6c 20 21 3d 3d 20 74 20 26 26 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 74 72 69 6d 57 68 69 74 65 73 70 61 63 65 20 3d 20 27 61 6c 6c 27 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 2e 5f 5f 65 Data Ascii: ], l = function (t) { function e() { var e = null !== t && t.apply(this, arguments) \|\| this; return e.trimWhitespace = 'all', e; } return a.__e
2024-10-25 11:27:44 UTC	16384	IN	Data Raw: 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 74 69 6d 65 20 2b 20 27 2d 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 74 69 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 21 3d 3d 20 74 2e 65 6e 64 54 69 6d 65 2e 64 61 74 65 20 26 26 20 28 72 20 3d 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 74 69 6d 65 20 2b 20 27 2d 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 74 69 6d 65 29 2c 20 28 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 74 65 78 74 Data Ascii: startTime.date + ' ' + t.startTime.time + '-' + t.endTime.time; t.startTime.date !== t.endTime.date && (r = t.startTime.date + ' ' + t.startTime.time + '-' + t.endTime.date + ' ' + t.endTime.time), (a = document.createElement('text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49835	39.156.68.81	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	12128	OUT	GET /static/h.gif?d=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 [TRUNCATED] Host: hector.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:44 UTC	279	IN	HTTP/1.1 200 OK Cache-Control: max-age=315360000 Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:43 GMT Expires: Tue, 29 Oct 2024 03:03:43 GMT Keep-Alive: timeout=60 Last-Modified: Fri, 06 Jan 2023 04:20:04 GMT Connection: close
2024-10-25 11:27:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49839	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	566	OUT	GET /static/superman/js/components/guide_tips-d9e617f782.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4446 Connection: close Expires: Sat, 03 Aug 2024 16:00:28 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "d9e617f782fa4f4fa3596b2c9c9f7ed3" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: 2eYX94L6T0+jWWssnJ9+0w== x-bce-content-crc32: 2779019780 x-bce-debug-id: xQEQoieroqwnDuPzluxPvzPFAxagIg0wm+9CCAoTt8q1GwPzWnX8oV9OqnjbqyLiU5Q1x3UVv6VSRRcv+M9wlQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 099612e5-e2d4-4419-9a19-fb1cc5a56487 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 16:00:28 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache53 [4] Ohc-File-Size: 4446 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:43 UTC	4446	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 67 75 69 64 65 5f 74 69 70 73 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 73 68 6f 77 3d 73 68 6f 77 3b 5f 65 78 70 6f 72 74 73 2e 63 6c 6f 73 65 3d 63 6c 6f 73 65 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 76 61 72 20 61 72 72 6f 77 57 69 64 74 68 3d 31 30 3b 76 61 72 20 74 69 70 73 48 65 69 67 68 74 3d 33 34 3b Data Ascii: define("superman/components/guide_tips",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.show=show;_exports.close=close;_exports.init=init;var arrowWidth=10;var tipsHeight=34;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49841	103.235.47.212	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	1007	OUT	POST /ztbox?action=zpblog&appname=pcsearch&v=2.0&data=%7B%22cateid%22%3A%2299%22%2C%22actiondata%22%3A%7B%22id%22%3A18463%2C%22type%22%3A%220%22%2C%22timestamp%22%3A1729855661553%2C%22content%22%3A%7B%22page%22%3A%22home%22%2C%22source%22%3A%22%22%2C%22from%22%3A%22search%22%2C%22type%22%3A%22show%22%2C%22value%22%3A%22csaitab%22%7D%7D%7D HTTP/1.1 Host: mbd.baidu.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://www.baidu.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:43 UTC	360	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: http://www.baidu.com Content-Length: 44 Content-Type: application/json; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:43 GMT X-Bfe-Svbbrers: MTczLjI1NC4yNTAuODE=,1.0 Connection: close
2024-10-25 11:27:43 UTC	44	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 30 22 2c 22 6c 6f 67 69 64 22 3a 22 31 31 37 32 34 34 37 32 38 34 37 31 37 36 32 35 35 33 30 35 22 7d Data Ascii: {"error":"0","logid":"11724472847176255305"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49837	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	649	OUT	GET /favicon.ico HTTP/1.1 Host: www.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BD_HOME=1; BD_UPN=12314753; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:43 UTC	272	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 16958 Content-Type: image/x-icon Date: Fri, 25 Oct 2024 11:27:43 GMT Etag: "423e-5bd257db4e500" Last-Modified: Wed, 10 Mar 2021 02:33:24 GMT Server: Apache Vary: Accept-Encoding,User-Agent Connection: close
2024-10-25 11:27:43 UTC	907	IN	Data Raw: 00 00 01 00 01 00 40 40 00 00 01 00 20 00 28 42 00 00 16 00 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 2a ff ff ff 8f ff ff ff d5 ff ff ff f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: @@ (B(@ @*
2024-10-25 11:27:43 UTC	261	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 95 00 00 00 00 ff ff ff 2a ff ff ff fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: *
2024-10-25 11:27:43 UTC	3537	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd ff ff ff 2a ff ff ff 8f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd f2 f1 ff f6 bc b9 ff f0 94 8f ff ed 84 7e ff ed 83 7d ff ef Data Ascii: *~}
2024-10-25 11:27:43 UTC	4716	IN	Data Raw: ff f1 9e 9a ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e4 4a 43 ff ff ff ff ff ff ff ff ff ff ff ff ff f9 d7 d5 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e7 5f 58 ff ff ff ff ff ff ff ff ff ff ff ff ff f1 a4 a0 ff e1 32 29 ff e1 32 29 ff f1 a1 9d ff ff ff ff ff ff ff ff ff ff ff ff ff e4 48 40 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff fb e6 e4 ff ff ff ff ff ff ff ff ff f8 d5 d3 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff f3 aa a7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 2)2)2)2)2)JC2)2)2)2)2)_X2)2)H@2)2)2)2)2)2)2)2)2)2)2)2)
2024-10-25 11:27:43 UTC	5895	IN	Data Raw: ff e3 3b 33 ff f5 ba b6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 b5 b1 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e7 5b 54 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 3a 31 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff f6 bd ba ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 d6 d4 ff e9 63 5c ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e1 32 29 ff e9 68 Data Ascii: ;32)2)2)2)2)2)2)2)2)2)2)[T:12)2)2)2)2)2)2)2)2)2)2)c\2)2)2)2)2)2)2)h
2024-10-25 11:27:43 UTC	252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd ff ff ff 2a 00 00 00 00 ff ff ff 95 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: *
2024-10-25 11:27:43 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 95 00 00 00 00 00 00 00 00 ff ff ff 06 ff ff ff bd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49842	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	394	OUT	GET /static/superman/js/components/video-meet-7833028d86.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	906	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4398 Connection: close Expires: Tue, 10 Sep 2024 13:25:51 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "7833028d860aff115ed44dc3ecf82e92" Cache-Control: max-age=31536000 Age: 2605336 Accept-Ranges: bytes Content-MD5: eDMCjYYK/xFe1E3D7Pgukg== x-bce-content-crc32: 3066766385 x-bce-debug-id: t7zyWNPfKBU1rY+Su+wdtL4Acs08yqWB8PRaCJwW2r5CHdW86f7x312il+vnAmQpEcUsGx/Ez1bP6KsQJYArQQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 6073113b-1018-45c9-976b-7df0483f4625 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 07 Sep 2024 13:25:50 GMT Ohc-Cache-HIT: fra01-sys-jomo5.fra01.baidu.com [2], zhuzuncache65 [4] Ohc-File-Size: 4398 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:43 UTC	4398	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 3d 22 73 79 6d 62 6f 6c 22 29 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 7d 7d 65 6c 73 65 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6f 62 6a 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d Data Ascii: function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49845	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	395	OUT	GET /static/superman/js/components/csaitab-log-75d5350518.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2776 Connection: close Expires: Thu, 08 Aug 2024 09:32:50 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "75d53505189528b98177f7441ef4ebb4" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: ddU1BRiVKLmBd/dEHvTrtA== x-bce-content-crc32: 3811860496 x-bce-debug-id: 1B4TvA6ZVhWVS3/n+lzQ3xKLJVl2mAOOtt42iVva1WTFtxl3EXYZm1UQTQ9giFA6qGWqvpDRfNGnergxFvSMNg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 6516f055-7cc0-44bb-89f7-95257371b803 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 05 Aug 2024 09:32:49 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache59 [2] Ohc-File-Size: 2776 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:43 UTC	2776	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 73 61 69 74 61 62 2d 6c 6f 67 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 75 62 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 75 62 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 43 73 61 69 74 61 62 4c 6f 67 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 6f 62 6a 65 63 74 2c 65 6e 75 6d 65 72 61 62 6c 65 4f 6e Data Ascii: define("superman/components/csaitab-log",["require","exports","superman/components/ubc"],function(require,_exports,_ubc){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.CsaitabLog=void 0;function ownKeys(object,enumerableOn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49844	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	396	OUT	GET /static/superman/js/components/content-info-12dbf9fb6d.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6451 Connection: close Expires: Sat, 03 Aug 2024 16:00:27 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "12dbf9fb6d608609f31753654d61b30a" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: Etv5+21ghgnzF1NlTWGzCg== x-bce-content-crc32: 2370318147 x-bce-debug-id: nWEJTvODj3MEAKaGoDFcDd9l+HJlUs2C+b22X+8Py+44Lc6xlp+l16wBisyaXrEmtl9OgnNpX6jb/MOgn8IPxw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 70904964-c3cc-4209-831c-fe584ff6891f x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 16:00:26 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache54 [2] Ohc-File-Size: 6451 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:43 UTC	6451	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 63 6f 6e 74 65 6e 74 2d 69 6e 66 6f 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 43 6f 6e 74 65 6e 74 49 6e 66 6f 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 43 6f 6e 73 74 72 75 63 74 6f 72 29 7b 69 66 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 Data Ascii: define("superman/components/content-info",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.ContentInfo=void 0;function _classCallCheck(instance,Constructor){if(!(instance inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49846	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	409	OUT	GET /static/superman/js/components/top-right-operate/operate-b7693b0cc7.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4477 Connection: close Expires: Fri, 02 Aug 2024 14:11:49 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "b7693b0cc71a26cdd07ba8d3a97e0f36" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: t2k7DMcaJs3Qe6jTqX4PNg== x-bce-content-crc32: 3480945735 x-bce-debug-id: mTUHv14Yn3QTtSEwfh/USGzxoGhIo/ztz4O9WiJHiPnowiu3syC0cs6JCrNdPz7wWybJ74McOCq2x5KKnKriuQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 9395873d-bb91-4ac2-8048-7f171679e8e3 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Tue, 30 Jul 2024 14:11:49 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache58 [2] Ohc-File-Size: 4477 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:43 UTC	4477	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 6f 70 2d 72 69 67 68 74 2d 6f 70 65 72 61 74 65 2f 6f 70 65 72 61 74 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 65 78 74 72 61 63 74 5f 64 61 74 61 22 2c 22 73 75 70 65 72 6d 61 6e 2f 6c 69 62 2f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 2c 5f 65 78 74 72 61 63 74 5f 64 61 74 61 2c 5f 63 6f 6d 6d 6f 6e 55 74 69 6c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d Data Ascii: define("superman/components/top-right-operate/operate",["require","exports","superman/lib/extract_data","superman/lib/commonUtils"],function(require,_exports,_extract_data,_commonUtils){"use strict";Object.defineProperty(_exports,"__esModule",{value:true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49843	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:43 UTC	395	OUT	GET /static/superman/js/components/aging-tools-f4527892f0.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:43 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 6378 Connection: close Expires: Thu, 10 Oct 2024 14:14:37 GMT Last-Modified: Fri, 06 Sep 2024 06:38:08 GMT ETag: "f4527892f08ab76ffa73294fae10d6cd" Cache-Control: max-age=31536000 Age: 354703 Accept-Ranges: bytes Content-MD5: 9FJ4kvCKt2/6cylPrhDWzQ== x-bce-content-crc32: 1702576278 x-bce-debug-id: PqowyJt14glmZPpiDj+qma8yFrj4pwl3JTWXkD6uQGe6n/NCDPrB/K33rFotyL7udB6hmCtnMxgPqgJhXMPx3A== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a6ef7f79-b658-4944-b3c9-ec8422fa9c77 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 07 Oct 2024 14:14:37 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 6378 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:43 UTC	6378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 69 66 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 3d 22 73 79 6d 62 6f 6c 22 29 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 7d 7d 65 6c 73 65 7b 5f 74 79 70 65 6f 66 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 6f 62 6a 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d Data Ascii: function _typeof(obj){"@babel/helpers - typeof";if(typeof Symbol==="function"&&typeof Symbol.iterator==="symbol"){_typeof=function _typeof(obj){return typeof obj}}else{_typeof=function _typeof(obj){return obj&&typeof Symbol==="function"&&obj.constructor==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49849	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:44 UTC	390	OUT	GET /static/superman/js/components/invoke-97e9694cb9.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:44 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:44 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 3567 Connection: close Expires: Thu, 01 Aug 2024 08:05:20 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "97e9694cb9c9ff941d905a4d765f6937" Cache-Control: max-age=31536000 Age: 864942 Accept-Ranges: bytes Content-MD5: l+lpTLnJ/5QdkFpNdl9pNw== x-bce-content-crc32: 3832170308 x-bce-debug-id: C/viDE2XqHYoAfvgjQzlAzm3Lgrs78y3ZropDCMQ7nhbWi+dM8UVOMm5trX1mPV/KBDSeB83IlnPzduy020g8w== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 988f8be5-cfa5-4842-986d-0675faa5e3ba x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 29 Jul 2024 08:05:20 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 3567 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:44 UTC	3567	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 6e 76 6f 6b 65 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 69 6e 73 74 61 6e 63 65 2c 43 6f 6e 73 74 72 75 63 74 6f 72 29 7b 69 66 28 21 28 69 6e 73 74 61 6e 63 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6e 73 74 72 75 63 Data Ascii: define("superman/components/invoke",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.init=init;function _classCallCheck(instance,Constructor){if(!(instance instanceof Construc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49850	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:44 UTC	572	OUT	GET /static/superman/css/ubase-89d6b96e41.css?v=md5 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:44 UTC	898	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:44 GMT Content-Type: text/css; charset=utf-8 Content-Length: 7242 Connection: close Expires: Sat, 27 Jul 2024 04:16:44 GMT Last-Modified: Fri, 12 Jul 2024 14:19:25 GMT ETag: "89d6b96e41c39c1873ae7e3af642d33c" Cache-Control: max-age=31536000 Age: 864941 Accept-Ranges: bytes Content-MD5: ida5bkHDnBhzrn469kLTPA== x-bce-content-crc32: 3249112469 x-bce-debug-id: IKTuIc9c8lC1T+aS0RDe/SboeHVYg5FRSKpU1EeMgf14tsrdGt97hMi09Gh9esS/FhP3nc7tV0Ovt7Qswx5ylQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: ddbbe89a-aa52-4d81-9ceb-ede60646d038 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 24 Jul 2024 04:16:44 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache57 [4] Ohc-File-Size: 7242 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:44 UTC	7242	IN	Data Raw: 2e 73 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 6d 61 73 6b 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 5f 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 30 30 30 30 30 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 0a 2e 73 75 69 2d 64 72 61 67 67 61 62 6c 65 2c 2e 73 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 77 72 61 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 39 39 39 39 39 7d 0a 2e 73 75 69 2d 63 6f 6d 70 6f 6e 65 6e 74 57 72 61 70 7b 2a 7a 6f 6f 6d 3a 31 7d 0a Data Ascii: .sui-draggable-mask{position:fixed;_position:absolute;width:100%;height:100%;z-index:200000;left:0;top:0;-moz-user-select:none;-webkit-user-select:none;-ms-user-select:none}.sui-draggable,.sui-draggable-wraper{z-index:199999}.sui-componentWrap{*zoom:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	54642	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:44 UTC	394	OUT	GET /static/superman/js/components/guide_tips-d9e617f782.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:44 UTC	905	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:44 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 4446 Connection: close Expires: Sat, 03 Aug 2024 16:00:28 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "d9e617f782fa4f4fa3596b2c9c9f7ed3" Cache-Control: max-age=31536000 Age: 864942 Accept-Ranges: bytes Content-MD5: 2eYX94L6T0+jWWssnJ9+0w== x-bce-content-crc32: 2779019780 x-bce-debug-id: xQEQoieroqwnDuPzluxPvzPFAxagIg0wm+9CCAoTt8q1GwPzWnX8oV9OqnjbqyLiU5Q1x3UVv6VSRRcv+M9wlQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 099612e5-e2d4-4419-9a19-fb1cc5a56487 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 16:00:28 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache53 [4] Ohc-File-Size: 4446 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:27:44 UTC	4446	IN	Data Raw: 64 65 66 69 6e 65 28 22 73 75 70 65 72 6d 61 6e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 67 75 69 64 65 5f 74 69 70 73 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 2c 5f 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 3b 5f 65 78 70 6f 72 74 73 2e 73 68 6f 77 3d 73 68 6f 77 3b 5f 65 78 70 6f 72 74 73 2e 63 6c 6f 73 65 3d 63 6c 6f 73 65 3b 5f 65 78 70 6f 72 74 73 2e 69 6e 69 74 3d 69 6e 69 74 3b 76 61 72 20 61 72 72 6f 77 57 69 64 74 68 3d 31 30 3b 76 61 72 20 74 69 70 73 48 65 69 67 68 74 3d 33 34 3b Data Ascii: define("superman/components/guide_tips",["require","exports"],function(require,_exports){"use strict";Object.defineProperty(_exports,"__esModule",{value:true});_exports.show=show;_exports.close=close;_exports.init=init;var arrowWidth=10;var tipsHeight=34;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	54641	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:44 UTC	384	OUT	GET /static/superman/js/ubase-dddde7cd4e.js?v=md5 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:45 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:44 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 52422 Connection: close Expires: Sat, 03 Aug 2024 00:40:41 GMT Last-Modified: Wed, 24 Jul 2024 08:51:58 GMT ETag: "dddde7cd4e229228869fe227b2a42929" Cache-Control: max-age=31536000 Age: 864942 Accept-Ranges: bytes Content-MD5: 3d3nzU4ikiiGn+InsqQpKQ== x-bce-content-crc32: 2882194801 x-bce-debug-id: H6a/UwX2VDaK/hvgDZhShPXWDXx529dhbsItWeMpY5oNTUu2Bi/HrTicjdTucoRPaQblvbf38FkB45jc4uo43g== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 045ec94a-ec4d-4d45-a993-dc14ae5a970d x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 31 Jul 2024 00:40:41 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache53 [4] Ohc-File-Size: 52422 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:45 UTC	15477	IN	Data Raw: 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 46 2c 7b 75 6e 69 71 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 6e 69 71 3d 2b 6e 65 77 20 44 61 74 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 70 72 65 66 69 78 29 7b 72 65 74 75 72 6e 28 70 72 65 66 69 78 7c 7c 22 22 29 2b 20 2b 2b 75 6e 69 71 7d 7d 28 29 2c 6d 69 78 3a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 2c 69 6e 68 65 72 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 72 67 73 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 73 75 62 63 6c 61 73 73 3d 61 72 67 73 5b 30 5d 2c 73 75 62 70 72 6f 3d 73 75 62 63 6c 61 73 73 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 69 6e 69 74 69 61 6c 69 7a 65 3d 73 75 62 70 72 6f 2e Data Ascii: jQuery.extend(F,{unique:function(){var uniq=+new Date;return function(prefix){return(prefix\|\|"")+ ++uniq}}(),mix:jQuery.extend,inherit:function(){var args=Array.prototype.slice.call(arguments),subclass=args[0],subpro=subclass.prototype,oinitialize=subpro.
2024-10-25 11:27:45 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 69 66 28 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 29 7b 73 65 6c 66 2e 68 61 6e 64 6c 65 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 29 3b 73 65 6c 66 2e 5f 5f 68 61 6e 64 6c 65 73 74 61 72 74 3d 6e 75 6c 6c 7d 7d 29 3b 74 68 69 73 2e 6f 6e 28 22 72 65 66 72 65 73 68 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 72 65 66 72 65 73 68 43 6f 6e 74 61 69 6e 6d 65 6e 74 28 29 0a 3b 63 61 63 68 65 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3d 73 65 6c 66 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 6f 66 66 73 65 74 28 29 7d 29 7d 2c 72 65 66 72 65 73 68 43 6f 6e 74 61 69 6e 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 61 63 68 65 3d 74 68 69 73 2e Data Ascii: tion(){if(self.__handlestart){self.handle.off("mousedown",self.__handlestart);self.__handlestart=null}});this.on("refresh",function(){self.refreshContainment();cache.offsetParent=self.offsetParent.offset()})},refreshContainment:function(){var cache=this.
2024-10-25 11:27:45 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 72 65 73 65 74 50 6f 73 69 74 69 6f 6e 28 29 7d 29 2e 6f 6e 28 22 64 65 73 74 72 6f 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 6c 66 2e 63 6c 6f 73 65 28 29 7d 29 3b 73 65 6c 66 2e 61 63 74 69 6e 67 28 73 65 6c 66 2e 77 69 6e 64 6f 77 29 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 62 75 74 74 6f 6e 73 29 7b 46 2e 65 61 63 68 28 6f 70 74 69 6f 6e 73 2e 62 75 74 74 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 69 74 65 6d 29 7b 69 66 28 46 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 74 65 6d 2e 6c 69 73 74 65 6e 65 72 29 29 7b 73 65 6c 66 2e 6f 6e 28 22 61 63 74 69 6e 67 2d 22 2b 69 74 65 6d 2e 74 79 70 65 2c 69 74 65 6d 2e 6c 69 73 74 65 6e 65 72 29 7d 7d 29 7d 7d 7d 3b 44 69 61 6c 6f 67 2e 61 6c 65 72 74 3d 66 75 6e 63 74 Data Ascii: function(){self.resetPosition()}).on("destroy",function(){self.close()});self.acting(self.window);if(options.buttons){F.each(options.buttons,function(item){if(F.isFunction(item.listener)){self.on("acting-"+item.type,item.listener)}})}}};Dialog.alert=funct
2024-10-25 11:27:45 UTC	4177	IN	Data Raw: 73 2e 75 72 6c 2c 64 61 74 61 54 79 70 65 3a 6f 70 74 69 6f 6e 73 2e 64 61 74 61 54 79 70 65 2c 73 63 72 69 70 74 43 68 61 72 73 65 74 3a 6f 70 74 69 6f 6e 73 2e 63 68 61 72 73 65 74 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 72 65 73 75 6c 74 29 7b 73 65 6c 66 2e 72 65 73 75 6c 74 28 72 65 73 75 6c 74 29 7d 7d 3b 69 66 28 6f 70 74 69 6f 6e 73 2e 64 61 74 61 54 79 70 65 3d 3d 22 6a 73 6f 6e 70 22 29 7b 61 6a 61 78 6f 70 74 69 6f 6e 73 2e 75 72 6c 3d 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 28 6f 70 74 69 6f 6e 73 2e 75 72 6c 2c 76 61 6c 75 65 29 3b 61 6a 61 78 6f 70 74 69 6f 6e 73 2e 6a 73 6f 6e 70 3d 6f 70 74 69 6f 6e 73 2e 6a 73 6f 6e 70 7d 65 6c 73 65 7b 69 66 28 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 6f 70 74 69 6f 6e 73 29 7b 0a 61 6a 61 78 6f Data Ascii: s.url,dataType:options.dataType,scriptCharset:options.charset,success:function(result){self.result(result)}};if(options.dataType=="jsonp"){ajaxoptions.url=options.value(options.url,value);ajaxoptions.jsonp=options.jsonp}else{if(options.ajaxoptions){ajaxo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	54643	39.156.68.81	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:45 UTC	12054	OUT	GET /static/h.gif?d=3c4e75773d6c6e646a53592637607219200d76773c66233f6a1d70712a7561141315727b202a2d312107666121646034054e2e3c206d726021066c572d6e76112009203271646e702905517036736517224e2e3c3c6663762e067061217377152b09616a7124237c260b676236736119291c776a7124237c260a6d6a2d647c042b030a6a7124237c260a6d6a2d647c043509716a3c7a64776a45206b37726113321e6b6a2a786e7f210a7b72306e681133056d707124237c261a6e6b2d626c11290b673c7f2a6e7d38066b6a2d647602261b776e376975766a45206b37757611291f6b6a3a676f613d0720287b6e6a04350d6c6d3a7c687c261a76652b75265c65036c6a21696f60211d6b6b3762651e24096e3c7f2a6261271a714b2b686319292571713f6975762c4b2e262a626c1523196e7b212a2d312e006c607b2d2602221c6d6c274d7361271b20287b727002320f766b216d655024066c617b2d26132f1e6d73362a2d312e0c6c673c2328522b0d7770306050662d1c672675236b1e25096471216d6c723c0a6a2675236b1e25096471216d757c2f0e6e617b2d261f37096c5a327c6071291a672675236b022e0b6b70126f647d3c2a6e712a7561026540207d216d6576261d6b65356d6103344e2e3c3c66627c261d676a2d776d032e0e6b723a7c78723d1d6d772d60701524046370346d [TRUNCATED] Host: hector.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:27:45 UTC	279	IN	HTTP/1.1 200 OK Cache-Control: max-age=315360000 Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Fri, 25 Oct 2024 11:27:45 GMT Expires: Tue, 29 Oct 2024 03:03:45 GMT Keep-Alive: timeout=60 Last-Modified: Fri, 17 Sep 2021 05:38:25 GMT Connection: close
2024-10-25 11:27:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	54645	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:27:45 UTC	402	OUT	GET /static/superman/amd_modules/@baidu/video-meeting-1be7f62dac.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:27:46 UTC	891	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:27:46 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 256786 Connection: close Expires: Sat, 01 Jun 2024 10:07:56 GMT Last-Modified: Thu, 22 Feb 2024 09:32:30 GMT ETag: "1be7f62dac8f0de20d70df0e0539ae24" Cache-Control: max-age=31536000 Age: 12878390 Accept-Ranges: bytes Content-MD5: G+f2LayPDeINcN8OBTmuJA== x-bce-content-crc32: 316237685 x-bce-debug-id: xMVZHd1a+BlBbvnxbwaww38/jRp4XHofNSDHKwtKlcCWfyXgl0rmVgVVCvM2HBauXVe8YvLhv6Nf6xWstwzwDQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: f1755cf1-a8ea-4165-83e1-9336773df7e5 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 29 May 2024 10:07:56 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2] Ohc-File-Size: 256786 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:27:46 UTC	15493	IN	Data Raw: 64 65 66 69 6e 65 28 27 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 62 61 69 64 75 2f 76 69 64 65 6f 2d 6d 65 65 74 69 6e 67 2f 64 69 73 74 2f 69 6e 64 65 78 27 2c 20 5b 0a 20 20 20 20 27 72 65 71 75 69 72 65 27 2c 0a 20 20 20 20 27 73 61 6e 27 2c 0a 20 20 20 20 27 74 73 6c 69 62 27 0a 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 74 2c 20 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 5b 61 5d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 0a 20 20 Data Ascii: define('amd_modules/@baidu/video-meeting/dist/index', [ 'require', 'san', 'tslib'], function (require, t, e) { return function (t) { var e = {}; function n(a) { if (e[a]) return e[a].exports;
2024-10-25 11:27:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 73 65 61 72 63 68 50 61 72 61 6d 73 3a 20 27 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 27 20 69 6e 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 72 61 62 6c 65 3a 20 27 53 79 6d 62 6f 6c 27 20 69 6e 20 61 20 26 26 20 27 69 74 65 72 61 74 6f 72 27 20 69 6e 20 53 79 6d 62 6f 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6c 6f 62 3a 20 27 46 69 6c 65 52 65 61 64 65 72 27 20 69 6e 20 61 20 26 26 20 27 42 6c 6f 62 27 20 69 6e 20 61 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 Data Ascii: searchParams: 'URLSearchParams' in a, iterable: 'Symbol' in a && 'iterator' in Symbol, blob: 'FileReader' in a && 'Blob' in a && function () { try { return
2024-10-25 11:27:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 20 3d 20 21 30 2c 20 65 2e 67 65 74 42 72 6f 77 73 65 72 20 3d 20 76 6f 69 64 20 30 2c 20 65 2e 67 65 74 42 72 6f 77 73 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 73 3a 20 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: e.__esModule = !0, e.getBrowser = void 0, e.getBrowser = function () { var t = navigator.userAgent.toLowerCase(), e = { type: '', versions: 0 }, n = {
2024-10-25 11:27:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 75 6c 6c 20 21 3d 3d 20 74 20 26 26 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 74 72 69 6d 57 68 69 74 65 73 70 61 63 65 20 3d 20 27 61 6c 6c 27 2c 20 65 2e 64 69 73 61 70 70 65 61 72 54 69 6d 65 72 20 3d 20 6e 75 6c 6c 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 2e 5f 5f 65 78 74 65 6e 64 73 28 65 Data Ascii: function e() { var e = null !== t && t.apply(this, arguments) \|\| this; return e.trimWhitespace = 'all', e.disappearTimer = null, e; } return a.__extends(e
2024-10-25 11:27:46 UTC	16384	IN	Data Raw: 65 63 74 44 61 74 65 27 29 2c 20 70 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 70 72 65 76 4d 6f 6e 74 68 27 20 3d 3d 3d 20 74 20 3f 20 28 70 20 3d 20 74 68 69 73 2e 67 65 74 4c 61 73 74 44 61 79 28 73 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 20 73 2e 67 65 74 4d 6f 6e 74 68 28 29 20 2b 20 31 29 2c 20 6c 20 3d 20 72 2e 67 65 74 44 61 74 65 28 29 20 3e 3d 20 70 20 3f 20 6e 65 77 20 44 61 74 65 28 73 2e 73 65 74 44 61 74 65 28 70 29 29 20 3a 20 6e 65 77 20 44 61 74 65 28 73 2e 73 65 74 44 61 74 65 28 72 2e 67 65 74 44 61 74 65 28 29 29 29 2c 20 6e 20 26 26 20 73 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 20 3d 3d 3d 20 69 2e 67 65 74 46 75 6c 6c 59 Data Ascii: ectDate'), p = new Date().getDate(); 'prevMonth' === t ? (p = this.getLastDay(s.getFullYear(), s.getMonth() + 1), l = r.getDate() >= p ? new Date(s.setDate(p)) : new Date(s.setDate(r.getDate())), n && s.getFullYear() === i.getFullY
2024-10-25 11:27:46 UTC	16384	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 6f 69 63 65 53 74 61 74 75 73 3a 20 27 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 66 6f 3a 20 21 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 73 74 61 72 74 4d 65 65 74 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 73 73 3a 20 21 31 2c 0a 20 20 20 20 Data Ascii: , voiceStatus: '', info: !0 }, canstartMeet: { name: !0, pass: !1,
2024-10-25 11:27:47 UTC	16384	IN	Data Raw: 37 29 29 2c 20 73 20 3d 20 61 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 6e 28 32 36 29 29 2c 20 63 20 3d 20 61 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 6e 28 31 30 31 29 29 2c 20 6c 20 3d 20 6e 28 35 29 2c 20 70 20 3d 20 6e 28 38 29 2c 20 64 20 3d 20 5b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e6 97 a5 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 b8 80 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 ba 8c 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 b8 89 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e5 9b 9b 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 e4 ba 94 27 2c 0a 20 Data Ascii: 7)), s = a.__importDefault(n(26)), c = a.__importDefault(n(101)), l = n(5), p = n(8), d = [ '', '', '', '', '', '',
2024-10-25 11:27:47 UTC	16384	IN	Data Raw: 20 20 62 6f 64 79 3a 20 6f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 2e 6a 73 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 3d 3d 3d 20 65 2e 65 72 72 6e 6f 20 26 26 20 28 65 2e 64 61 74 61 2e 70 61 73 73 77 64 20 3d 20 74 2e 64 61 74 61 2e 67 65 74 28 27 Data Ascii: body: o }).then(function (t) { return t.json(); }).then(function (e) { 0 === e.errno && (e.data.passwd = t.data.get('
2024-10-25 11:27:47 UTC	16384	IN	Data Raw: 20 20 20 20 5d 2c 20 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 75 6c 6c 20 21 3d 3d 20 74 20 26 26 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 74 72 69 6d 57 68 69 74 65 73 70 61 63 65 20 3d 20 27 61 6c 6c 27 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 2e 5f 5f 65 Data Ascii: ], l = function (t) { function e() { var e = null !== t && t.apply(this, arguments) \|\| this; return e.trimWhitespace = 'all', e; } return a.__e
2024-10-25 11:27:47 UTC	16384	IN	Data Raw: 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 74 69 6d 65 20 2b 20 27 2d 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 74 69 6d 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 21 3d 3d 20 74 2e 65 6e 64 54 69 6d 65 2e 64 61 74 65 20 26 26 20 28 72 20 3d 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 73 74 61 72 74 54 69 6d 65 2e 74 69 6d 65 20 2b 20 27 2d 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 64 61 74 65 20 2b 20 27 20 27 20 2b 20 74 2e 65 6e 64 54 69 6d 65 2e 74 69 6d 65 29 2c 20 28 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 74 65 78 74 Data Ascii: startTime.date + ' ' + t.startTime.time + '-' + t.endTime.time; t.startTime.date !== t.endTime.date && (r = t.startTime.date + ' ' + t.startTime.time + '-' + t.endTime.date + ' ' + t.endTime.time), (a = document.createElement('text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	54646	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:10 UTC	872	OUT	GET /8qUJcD3n0sgCo2Kml5_Y_D3/v.gif?pid=201&pj=www&fm=tab&tab=felogo&rsv_platform=wwwhome&path=http%3A%2F%2Fwww.baidu.com%2F&wd=&rsv_sid=&rsv_did=47200e910a06291732d8b447bd3407e1&t=1729855688348 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:10 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:28:10 GMT Pragma: no-cache Server: nginx/1.8.0 Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:28:10 GMT; Max-Age=31536000; Secure; SameSite=None Tracecode: 16903536603658899210102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	54648	103.235.46.96	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:11 UTC	847	OUT	GET /8qUJcD3n0sgCo2Kml5_Y_D3/v.gif?pid=201&pj=www&fm=tab&tab=felogo&rsv_platform=wwwhome&path=http%3A%2F%2Fwww.baidu.com%2F&wd=&rsv_sid=&rsv_did=47200e910a06291732d8b447bd3407e1&t=1729855688348 HTTP/1.1 Host: sp1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:12 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache Content-Length: 0 Content-Type: image/gif Date: Fri, 25 Oct 2024 11:28:11 GMT Pragma: no-cache Server: nginx/1.8.0 Set-Cookie: BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; Path=/; Domain=baidu.com; Expires=Sat, 25 Oct 2025 11:28:11 GMT; Max-Age=31536000; Secure; SameSite=None Tracecode: 16917684763658899210102519 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	54650	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:11 UTC	619	OUT	GET /r/www/cache/static/global/img/icons_441e82f.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:12 UTC	886	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:11 GMT Content-Type: image/png Content-Length: 17545 Connection: close Expires: Thu, 24 Oct 2024 02:46:55 GMT Last-Modified: Wed, 09 Oct 2024 08:25:15 GMT ETag: "441e82fb1178a614395c404c341bf82b" Cache-Control: max-age=31536000 Age: 376045 Accept-Ranges: bytes Content-MD5: RB6C+xF4phQ5XEBMNBv4Kw== x-bce-content-crc32: 1679328473 x-bce-debug-id: 9eTNIsbogeC8L92OGvp1lvVoolPRuSwtzN1HB1LM/GpEQAXoZcd0jnMeWaFZGT2uW+VjqSkdOaCVKrQYBYn+dg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 39b98ce0-8048-45d2-b788-a4df4b1fbe1c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 21 Oct 2024 02:46:55 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 17545 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:12 UTC	15498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 08 08 03 00 00 00 43 e3 dc e1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRCtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-25 11:28:12 UTC	2047	IN	Data Raw: 43 22 91 21 d5 55 25 fe d6 cf e8 f6 01 00 92 b8 8b d1 72 71 71 a1 ae b8 d8 d7 28 39 db d6 07 00 48 e2 0e 00 20 ee 00 00 e2 0e 00 20 ee 00 00 e2 0e 00 20 ee 00 40 dc 01 00 c4 1d 00 40 dc 01 00 c4 1d 00 40 dc 01 80 b8 03 00 3a 6d dc 13 e7 eb 6a e3 19 bb 3a eb 76 00 20 f7 e2 1e 2e 2e 1c 3b 75 56 6d 17 ed d4 bc 5d 6a 67 4d 1d 5b d8 ba 0e 6a db 29 b9 b1 66 81 76 ca de 05 35 37 96 b4 65 3b d9 74 7f 00 20 07 e3 1e 2e 1c 5b d1 45 b1 e8 52 31 36 fd 8f c9 10 db 29 59 60 dd ce 82 92 8a 56 6d 27 ab ee 0f 00 e4 60 dc c3 85 8b 37 27 e2 17 89 24 2e 6e 5e 9c 5e 06 c5 76 aa 64 db a9 4a 7f 3b 59 75 7f 00 20 17 e3 5e 3c d3 48 69 79 d5 88 7b f5 cf b2 ee 7a ef 88 aa 72 23 a7 33 d3 f8 20 a4 e2 99 46 4a 87 cc 99 70 8f fe 19 d7 13 ef 99 30 67 88 91 d3 f4 b6 93 5d f7 07 00 72 30 Data Ascii: C"!U%rqq(9H @@@:mj:v ..;uVm]jgM[j)fv57e;t .[ER16)Y`Vm'`7'$.n^^vdJ;Yu ^<Hiy{zr#3 FJp0g]r0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	54649	220.169.152.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:11 UTC	615	OUT	GET /basics/chat/peakAi_1721633550000.svg HTTP/1.1 Host: psstatic.cdn.bcebos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	857	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/svg+xml Content-Length: 1428 Connection: close Expires: Sat, 26 Oct 2024 07:33:26 GMT Last-Modified: Mon, 22 Jul 2024 07:32:30 GMT ETag: "173b723968988f1ab2a9d932b9280274" Age: 31172 Accept-Ranges: bytes Content-MD5: FztyOWiYjxqyqdkyuSgCdA== x-bce-content-crc32: 4291291162 x-bce-debug-id: 0/8DR/HCSvHBeIUAmV+gXkWu/VJgYqaj8/3M7CJPLWNXonfaQY38PKyhxL8VBo0kLWytOMixN4t5SPKWq+rAnQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 52818f29-5643-4b6c-be06-e4dc300c1d0b x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 07:33:26 GMT Ohc-Cache-HIT: yy2ct70 [4], bdix247 [2] Ohc-File-Size: 1428 X-Cache-Status: HIT Timing-Allow-Origin: * Cache-Control: max-age=31536000 Access-Control-Allow-Origin: *
2024-10-25 11:28:14 UTC	1428	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 32 2e 36 30 35 34 20 34 2e 39 34 33 33 36 43 31 33 2e 30 31 35 32 20 34 2e 39 34 33 33 36 20 31 33 2e 32 32 30 31 20 34 2e 39 34 33 33 36 20 31 33 2e 33 37 34 35 20 35 2e 30 32 37 37 39 43 31 33 2e 34 39 20 35 2e 30 39 30 39 39 20 31 33 2e 35 38 35 31 20 35 2e 31 38 36 30 31 20 31 33 2e 36 34 38 33 20 35 2e 33 30 31 35 38 Data Ascii: <svg width="14" height="12" viewBox="0 0 14 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M12.6054 4.94336C13.0152 4.94336 13.2201 4.94336 13.3745 5.02779C13.49 5.09099 13.5851 5.18601 13.6483 5.30158

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	54653	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:12 UTC	652	OUT	GET /r/www/cache/static/jquery/jquery-1.10.2.min_65682a2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:12 UTC	887	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:12 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 93750 Connection: close Expires: Tue, 15 Oct 2024 06:09:59 GMT Last-Modified: Mon, 28 Aug 2023 03:19:58 GMT ETag: "65682a21b58654d8eda27f85d0f57255" Cache-Control: max-age=31536000 Age: 375057 Accept-Ranges: bytes Content-MD5: ZWgqIbWGVNjton+F0PVyVQ== x-bce-content-crc32: 929847287 x-bce-debug-id: IAktCAdYghJp36NRAjpJ/v9SmPnD/XGMv45R3WCsR5KtIrFbeEiZ9poGEggizKaWVXuUjNgVhBkLyGEUbQKcNQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 3d295876-db55-4ada-808e-4f6cb6978cad x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:59 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2] Ohc-File-Size: 93750 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:12 UTC	15497	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 63 74 2e 74 79 70 65 28 65 29 3b 72 65 74 75 72 6e 20 63 74 2e 69 73 57 69 6e 64 6f 77 28 65 29 3f 21 31 3a 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 28 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 30 26 26 74 2d 31 20 69 6e 20 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 6b 74 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 63 74 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 70 74 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 Data Ascii: !function(e,t){function n(e){var t=e.length,n=ct.type(e);return ct.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=kt[e]={};return ct.each(e.match(pt)\|\|[],function(e,n){t[n]=!
2024-10-25 11:28:12 UTC	16384	IN	Data Raw: 22 29 29 3a 28 72 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 44 4f 4d 22 29 2c 72 2e 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 2c 72 2e 6c 6f 61 64 58 4d 4c 28 6e 29 29 7d 63 61 74 63 68 28 6f 29 7b 72 3d 74 7d 72 65 74 75 72 6e 20 72 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 7c 7c 63 74 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 6e 29 2c 72 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 63 74 2e 74 72 69 6d 28 74 29 26 26 28 65 2e 65 Data Ascii: ")):(r=new ActiveXObject("Microsoft.XMLDOM"),r.async="false",r.loadXML(n))}catch(o){r=t}return r&&r.documentElement&&!r.getElementsByTagName("parsererror").length\|\|ct.error("Invalid XML: "+n),r},noop:function(){},globalEval:function(t){t&&ct.trim(t)&&(e.e
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6f 3d 22 6e 74 68 22 21 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 33 29 2c 61 3d 22 6c 61 73 74 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 34 29 2c 73 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 72 26 26 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 75 29 7b 76 61 72 20 6c 2c 63 2c 66 2c 70 2c 64 2c 68 2c 67 3d 6f 21 3d 3d 61 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6d 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 79 3d 73 26 26 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 76 3d 21 75 26 26 21 73 3b 0a 69 66 28 6d 29 7b 69 Data Ascii: {var o="nth"!==e.slice(0,3),a="last"!==e.slice(-4),s="of-type"===t;return 1===r&&0===i?function(e){return!!e.parentNode}:function(t,n,u){var l,c,f,p,d,h,g=o!==a?"nextSibling":"previousSibling",m=t.parentNode,y=s&&t.nodeName.toLowerCase(),v=!u&&!s;if(m){i
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 72 3d 69 5b 61 5d 2c 28 72 2e 73 65 6c 65 63 74 65 64 3d 63 74 2e 69 6e 41 72 72 61 79 28 63 74 28 72 29 2e 76 61 6c 28 29 2c 6f 29 3e 3d 30 29 26 26 28 6e 3d 21 30 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 2d 31 29 2c 6f 7d 7d 7d 2c 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 20 65 26 26 33 21 3d 3d 61 26 26 38 21 3d 3d 61 26 26 32 21 3d 3d 61 3f 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3d 3d 3d 59 3f 63 74 2e 70 72 6f 70 28 65 2c 6e 2c 72 29 3a 28 31 3d 3d 3d 61 26 26 63 74 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 6e 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 3d 63 74 2e 61 Data Ascii: r=i[a],(r.selected=ct.inArray(ct(r).val(),o)>=0)&&(n=!0);return n\|\|(e.selectedIndex=-1),o}}},attr:function(e,n,r){var i,o,a=e.nodeType;return e&&3!==a&&8!==a&&2!==a?typeof e.getAttribute===Y?ct.prop(e,n,r):(1===a&&ct.isXMLDoc(e)\|\|(n=n.toLowerCase(),i=ct.a
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 63 74 2e 6d 61 70 28 74 68 69 73 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 22 55 6e 74 69 6c 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 35 29 26 26 28 72 3d 6e 29 2c 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 69 3d 63 74 2e 66 69 6c 74 65 72 28 72 2c 69 29 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 31 26 26 28 58 74 5b 65 5d 7c 7c 28 69 3d 63 74 2e 75 6e 69 71 75 65 28 69 29 29 2c 49 74 2e 74 65 73 74 28 65 29 26 26 28 69 3d 69 2e 72 65 76 65 72 73 65 28 29 29 29 2c 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 69 29 7d 7d 29 2c 63 74 2e 65 78 74 65 6e 64 28 7b 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 Data Ascii: =function(n,r){var i=ct.map(this,t,n);return"Until"!==e.slice(-5)&&(r=n),r&&"string"==typeof r&&(i=ct.filter(r,i)),this.length>1&&(Xt[e]\|\|(i=ct.unique(i)),It.test(e)&&(i=i.reverse())),this.pushStack(i)}}),ct.extend({filter:function(e,t,n){var r=t[0];retur
2024-10-25 11:28:13 UTC	12717	IN	Data Raw: 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 79 3d 70 2e 73 74 61 74 75 73 43 6f 64 65 7c 7c 7b 7d 2c 76 3d 7b 7d 2c 62 3d 7b 7d 2c 78 3d 30 2c 54 3d 22 63 61 6e 63 65 6c 65 64 22 2c 77 3d 7b 72 65 61 64 79 53 74 61 74 65 3a 30 2c 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 32 3d 3d 3d 78 29 7b 69 66 28 21 66 29 66 6f 72 28 66 3d 7b 7d 3b 74 3d 46 6e 2e 65 78 65 63 28 73 29 3b 29 66 5b 74 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 5b 32 5d 3b 74 3d 66 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 6e 75 6c 6c 3a 74 7d 2c 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 3a 66 75 6e 63 Data Ascii: backs("once memory"),y=p.statusCode\|\|{},v={},b={},x=0,T="canceled",w={readyState:0,getResponseHeader:function(e){var t;if(2===x){if(!f)for(f={};t=Fn.exec(s);)f[t[1].toLowerCase()]=t[2];t=f[e.toLowerCase()]}return null==t?null:t},getAllResponseHeaders:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	54652	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:12 UTC	635	OUT	GET /r/www/cache/static/lib/esl_5fec89f.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:12 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:12 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 8178 Connection: close Expires: Tue, 15 Oct 2024 06:09:59 GMT Last-Modified: Wed, 09 Oct 2024 08:25:16 GMT ETag: "5fec89f47d0662bf5f9e4e17eefb99dc" Cache-Control: max-age=31536000 Age: 873432 Accept-Ranges: bytes Content-MD5: X+yJ9H0GYr9fnk4X7vuZ3A== x-bce-content-crc32: 716823903 x-bce-debug-id: 7ntfoet2pq48K8CHC18kpiJY+2VHfQBp9E+kdLAtUkWBV+L5n8U2xqWT07I/G+2VcSrvgaJB/4BP5YHa5mDeQg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: e07a0d9e-ae63-4c9b-accf-f009aafdab6b x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:59 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 8178 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:12 UTC	8178	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 65 73 6c 7c 7c 21 6e 2e 72 65 71 75 69 72 65 7c 7c 6e 2e 65 73 6c 2e 76 65 72 73 69 6f 6e 21 3d 3d 6e 2e 72 65 71 75 69 72 65 2e 76 65 72 73 69 6f 6e 29 7b 76 61 72 20 65 2c 74 2c 72 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 68 28 6e 2c 48 29 7c 7c 28 50 5b 6e 5d 3d 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 26 26 72 2e 70 75 73 68 28 6e 29 7d 76 61 72 20 72 3d 5b 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 74 28 6e 29 3a 44 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 7d 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 29 Data Ascii: !function(n){if(!n.esl\|\|!n.require\|\|n.esl.version!==n.require.version){var e,t,r;!function(n){function i(n){h(n,H)\|\|(P[n]=1)}function o(n,e){function t(n){0===n.indexOf(".")&&r.push(n)}var r=[];if("string"==typeof n?t(n):D(n,function(n){t(n)}),r.length>0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	54654	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:12 UTC	648	OUT	GET /r/www/cache/static/bundles/es6-polyfill_388d059.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:12 UTC	889	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:12 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 74476 Connection: close Expires: Sun, 16 Jun 2024 05:20:21 GMT Last-Modified: Wed, 12 Jun 2024 05:25:17 GMT ETag: "388d059dffa87621761c31ced2935ca4" Cache-Control: max-age=31536000 Age: 11599671 Accept-Ranges: bytes Content-MD5: OI0Fnf+odiF2HDHO0pNcpA== x-bce-content-crc32: 578717120 x-bce-debug-id: JiGUcKnPd3SeEM7cZlcuKiW7Z2A7vzavS2yUAJurWP7sZlk7Zvn8dkB8olRolRNVhyKLp27XcMcMaE8R0aPdXA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4857bcfb-814b-4407-adf0-1e5573cf08db x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 13 Jun 2024 05:20:21 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 74476 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:12 UTC	15495	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6e 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6e 29 3a 6e 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 Data Ascii: !function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n():"function"==typeof define&&define.amd?define(n):n()}(this,function(){"use strict";function e(){}function n(e,n){return function(){e.apply(n,arguments)}}function t(e){if(!(this instanc
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 72 6f 70 65 72 74 79 2c 75 3d 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 69 28 75 2c 74 29 29 72 65 74 75 72 6e 20 75 5b 74 5d 3b 65 7c 7c 28 65 3d 7b 7d 29 3b 76 61 72 20 72 3d 5b 5d 5b 74 5d 2c 63 3d 21 21 69 28 65 2c 22 41 43 43 45 53 53 4f 52 53 22 29 26 26 65 2e 41 43 43 45 53 53 4f 52 53 2c 66 3d 69 28 65 2c 30 29 3f 65 5b 30 5d 3a 61 2c 6c 3d 69 28 65 2c 31 29 3f 65 5b 31 5d 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 75 5b 74 5d 3d 21 21 72 26 26 21 6f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 26 26 21 6e 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 74 3d 7b 6c 65 6e 67 74 68 3a 2d 31 7d 3b 63 3f 73 28 74 2c 31 2c 7b 65 6e 75 6d Data Ascii: roperty,u={},a=function(t){throw t};t.exports=function(t,e){if(i(u,t))return u[t];e\|\|(e={});var r=[][t],c=!!i(e,"ACCESSORS")&&e.ACCESSORS,f=i(e,0)?e[0]:a,l=i(e,1)?e[1]:void 0;return u[t]=!!r&&!o(function(){if(c&&!n)return!0;var t={length:-1};c?s(t,1,{enum
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 3f 28 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 6f 28 74 29 2c 72 3d 6e 65 77 20 6c 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 72 5b 66 5d 3d 74 29 3a 72 3d 70 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 72 3a 69 28 72 2c 65 29 0a 7d 7d 2c 36 30 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 37 38 31 29 2c 6f 3d 72 28 33 30 37 30 29 2c 69 3d 72 28 39 36 37 30 29 2c 73 3d 72 28 31 39 35 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 73 28 65 29 2c 75 3d 6e 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 75 3e 61 3b 29 6f 2e 66 28 74 Data Ascii: urn null!==t?(l.prototype=o(t),r=new l,l.prototype=null,r[f]=t):r=p(),void 0===e?r:i(r,e)}},6048:function(t,e,r){var n=r(9781),o=r(3070),i=r(9670),s=r(1956);t.exports=n?Object.defineProperties:function(t,e){i(t);for(var r,n=s(e),u=n.length,a=0;u>a;)o.f(t
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 72 2d 2d 29 2c 55 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 42 3d 2f 5b 21 27 28 29 7e 5d 7c 25 32 30 2f 67 2c 44 3d 7b 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 38 22 2c 22 29 22 3a 22 25 32 39 22 2c 22 7e 22 3a 22 25 37 45 22 2c 22 25 32 30 22 3a 22 2b 22 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 44 5b 74 5d 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2e 72 65 70 6c 61 63 65 28 42 2c 43 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 29 66 6f 72 28 76 61 72 20 72 2c 6e 2c 6f 3d 65 2e 73 70 6c 69 74 28 22 26 22 29 2c 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 29 28 72 3d 6f 5b 69 2b Data Ascii: r--),U);return e}},B=/[!'()~]\|%20/g,D={"!":"%21","'":"%27","(":"%28",")":"%29","~":"%7E","%20":"+"},C=function(t){return D[t]},F=function(t){return encodeURIComponent(t).replace(B,C)},M=function(t,e){if(e)for(var r,n,o=e.split("&"),i=0;i<o.length;)(r=o[i+
2024-10-25 11:28:13 UTC	9829	IN	Data Raw: 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 3d 74 2c 74 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 3a 67 26 26 42 6c 6f 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 42 6c 6f 62 3d 74 3a 6d 26 26 46 6f 72 6d 44 61 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 46 6f 72 6d 44 61 74 61 3d 74 3a 76 26 26 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 62 26 26 67 26 26 28 65 3d 74 29 26 26 44 Data Ascii: this._bodyInit=t,t?"string"==typeof t?this._bodyText=t:g&&Blob.prototype.isPrototypeOf(t)?this._bodyBlob=t:m&&FormData.prototype.isPrototypeOf(t)?this._bodyFormData=t:v&&URLSearchParams.prototype.isPrototypeOf(t)?this._bodyText=t.toString():b&&g&&(e=t)&&D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	54655	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:12 UTC	644	OUT	GET /r/www/cache/static/bundles/polyfill_9354efa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:12 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:12 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 41984 Connection: close Expires: Wed, 25 Sep 2024 21:40:49 GMT Last-Modified: Thu, 12 Sep 2024 08:43:02 GMT ETag: "9354efad5c9f5519f606c3c39434b9ec" Cache-Control: max-age=31536000 Age: 374093 Accept-Ranges: bytes Content-MD5: k1TvrVyfVRn2BsPDlDS57A== x-bce-content-crc32: 3721482874 x-bce-debug-id: aAEMKkwDIHO6HkrsofrfU2YpvpbfGB/2fmftPJ4aOnEccFM+Jq1XRIIgO7IC+2ED/huHYkx2FKVDggnawvvVuw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 79d186c1-a2db-4a95-bc31-4a5d9e04bb54 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 22 Sep 2024 21:40:49 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 41984 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:12 UTC	15477	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 72 3d 41 72 72 61 79 2c 6e 3d 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 3d 4f 62 6a 65 63 74 2c 69 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 46 75 6e 63 74 69 6f 6e 2c 75 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2c 73 3d 53 74 72 69 6e 67 2c 66 3d 73 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 4e 75 6d 62 65 72 2c 6c 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2c 68 3d 6e 2e 73 6c 69 63 65 2c 70 3d 6e 2e 73 70 6c 69 63 65 2c 67 3d 6e 2e 70 75 73 68 2c 64 3d 6e 2e 75 6e 73 68 69 66 74 2c 79 3d 6e 2e 63 6f 6e 63 61 74 2c 76 3d 6e 2e 6a 6f 69 6e 2c 62 3d 75 2e 63 61 6c 6c 2c 6d 3d 75 2e 61 70 70 6c 79 2c 77 3d 4d 61 74 68 2e 6d 61 78 2c 54 3d 4d 61 74 68 2e 6d 69 6e 2c 6a 3d 69 2e 74 6f 53 74 72 69 6e 67 2c 44 3d 22 Data Ascii: !function(){var t,e,r=Array,n=r.prototype,o=Object,i=o.prototype,a=Function,u=a.prototype,s=String,f=s.prototype,c=Number,l=c.prototype,h=n.slice,p=n.splice,g=n.push,d=n.unshift,y=n.concat,v=n.join,b=u.call,m=u.apply,w=Math.max,T=Math.min,j=i.toString,D="
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 3d 69 73 4e 61 4e 28 44 61 74 65 2e 70 61 72 73 65 28 22 32 30 30 30 2d 30 31 2d 30 31 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 29 29 3b 69 66 28 67 72 7c 7c 70 72 7c 7c 21 68 72 29 7b 76 61 72 20 64 72 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 33 31 29 2d 31 2c 79 72 3d 7a 28 6e 65 77 20 44 61 74 65 28 31 39 37 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 64 72 2b 31 29 2e 67 65 74 54 69 6d 65 28 29 29 3b 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 6f 2c 69 2c 61 2c 75 2c 66 29 7b 76 61 72 20 63 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 0a 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 7b 76 61 72 20 68 3d 75 2c 70 3d 66 3b 69 66 28 79 72 26 26 6c 3e 3d 37 26 26 66 3e Data Ascii: =isNaN(Date.parse("2000-01-01T00:00:00.000Z"));if(gr\|\|pr\|\|!hr){var dr=Math.pow(2,31)-1,yr=z(new Date(1970,0,1,0,0,0,dr+1).getTime());Date=function(t){var e=function(r,n,o,i,a,u,f){var c,l=arguments.length;if(this instanceof t){var h=u,p=f;if(yr&&l>=7&&f>
2024-10-25 11:28:13 UTC	10123	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 5b 72 5d 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 2c 65 26 26 65 28 72 2c 6e 29 7d 7d 76 61 72 20 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 3f 74 68 69 73 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 3b 22 29 28 29 2c 6f 3d 72 28 74 29 3b 22 75 6e 64 65 66 Data Ascii: ){return function(r,n){"function"!=typeof t[r]&&Object.defineProperty(t,r,{configurable:!0,writable:!0,value:n}),e&&e(r,n)}}var n="object"==typeof global?global:"object"==typeof self?self:"object"==typeof this?this:Function("return this;")(),o=r(t);"undef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	54651	119.167.229.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	850	OUT	GET /it/u=2219169068,4009499954&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2000_474 HTTP/1.1 Host: gips1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	497	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 5226 Connection: close Expires: Sun, 24 Nov 2024 07:30:21 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 8ac0d36dc0b139b0f3118a42cd9d4c2b Age: 14267 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:30:21 GMT Ohc-Cache-HIT: qd5ie54 [2], czix174 [2] Ohc-File-Size: 5226 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:13 UTC	5226	IN	Data Raw: 52 49 46 46 62 14 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 cf 07 00 d9 01 00 41 4c 50 48 73 00 00 00 01 17 d0 ff 88 08 28 68 23 45 42 1a 26 90 86 70 b8 a7 11 fd 9f 80 98 f8 e4 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe e3 3f fe fb 18 e2 bf 9a f8 06 00 56 50 38 20 c8 13 00 00 f0 41 01 9d 01 2a d0 07 da 01 3e ed 76 b4 56 a9 a7 30 29 20 73 b8 22 00 1d 89 69 6e e1 6e 50 5c 46 55 fe 74 2f 1e 0d 45 86 eb 41 7f fa af bd 87 7e fe 9a 7d 67 b7 fb ea 3e 78 2f 7c fb 30 11 19 40 3d d4 ff 46 d4 55 7c b0 0f 75 3f d1 b5 15 5f 2c 03 dd 4f f4 6d 51 1b c5 7d 7b 91 ff Data Ascii: RIFFbWEBPVP8XALPHs(h#EB&p????????????????????????????VP8 A*>vV0) s"innP\FUt/EA~}g>x/\|0@=FU\|u?_,OmQ}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	54657	60.188.66.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	850	OUT	GET /it/u=2001002732,2616629427&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108 HTTP/1.1 Host: gips0.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	497	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 3476 Connection: close Expires: Sun, 24 Nov 2024 07:38:11 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 2068f68c3467ce4dcfde2f171d2defa1 Age: 13796 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:38:11 GMT Ohc-Cache-HIT: jh2ct81 [2], cdix110 [2] Ohc-File-Size: 3476 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:13 UTC	3476	IN	Data Raw: 52 49 46 46 8c 0d 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6b 00 00 6b 00 00 41 4c 50 48 16 08 00 00 01 a0 43 6b db 22 49 69 dc a1 70 87 5a 9c d5 11 9c 95 c2 dd 5d 07 77 a8 3d bb a1 f5 0a 64 d2 83 87 b5 29 ee 2e 85 86 6c 67 38 53 10 6a 17 12 ca f7 1f ea ff de f7 fb aa 67 32 92 88 70 20 49 52 14 0d 2b e2 08 6c f5 80 78 3c a1 f3 ff 7b 4a 46 6e c8 d7 14 4d ea ad c9 2f cc 92 19 6c 59 fe 62 15 82 34 47 da df e4 53 2f e6 d9 4c 8c e3 0d 2f d6 4d 5d 48 a2 11 44 f9 07 c5 85 33 ac fd 24 7a f8 29 96 ea 62 64 e6 94 4a 15 40 11 1a 44 47 d3 72 62 86 94 54 7f ca a1 fa c0 76 b6 e2 2a 9b 76 4b 4b c1 c8 89 11 45 11 24 61 85 22 9d 5e eb 62 0c 89 18 92 e9 a3 60 21 75 a7 d3 db 0f a8 05 6a 45 61 7c 07 35 18 ce d4 b4 39 f3 5a b1 93 f3 fc 07 fd a1 36 c6 50 4f d3 7f Data Ascii: RIFFWEBPVP8XkkALPHCk"IipZ]w=d).lg8Sjg2p IR+lx<{JFnM/lYb4GS/L/M]HD3$z)bdJ@DGrbTv*vKKE$a"^b`!ujEa\|59Z6PO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	54656	60.188.66.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	850	OUT	GET /it/u=1516704641,3495705331&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108 HTTP/1.1 Host: gips0.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	498	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 4162 Connection: close Expires: Sun, 24 Nov 2024 07:38:05 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 6c254ea59251eb387b0198a9257fe14d Age: 13796 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:38:05 GMT Ohc-Cache-HIT: jh2ct62 [2], suzix125 [2] Ohc-File-Size: 4162 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:13 UTC	4162	IN	Data Raw: 52 49 46 46 3a 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6b 00 00 6b 00 00 41 4c 50 48 f9 09 00 00 01 19 b2 49 db 14 49 ba 35 a2 ff 01 4c a7 26 07 8e 40 20 69 7f f0 15 22 22 75 70 6b db 56 ad ec ef b8 bb 87 ee 92 ba 86 9a 69 ae b9 d3 01 64 84 ee e5 50 c2 a7 02 77 38 63 dc b3 cf 7d af 84 88 09 60 e0 b6 6d a3 ee eb 94 9d 7b 85 25 d8 b6 55 c9 71 ee b1 47 5c 29 c3 88 94 32 33 33 09 cc 2c 8d ec 91 c8 cc 0d d3 8e a8 4c 33 33 33 33 33 57 69 6c 50 e3 d0 5d bf cc ac 94 19 75 22 f2 9e 73 df ff cf ec 51 44 38 90 24 29 68 0e a3 88 40 66 f7 88 9a 2f 20 84 cb 51 51 11 11 02 c4 1f 01 dd 0b ae 9a c0 71 ee 5c 3f e2 a4 6c 51 22 02 c0 61 fe 78 f7 f7 ce 71 b5 ab ad 6b 48 e8 bf f4 22 2e 50 40 a8 33 c4 f0 e7 17 7f ea 1a d7 bd a6 b6 e4 a5 bf ff f4 6f 3d a2 5c 19 Data Ascii: RIFF:WEBPVP8XkkALPHII5L&@ i""upkVidPw8c}`m{%UqG\)233,L33333WilP]u"sQD8$)h@f/ QQq\?lQ"axqkH".P@3o=\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	54658	60.188.66.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	850	OUT	GET /it/u=3009418490,2083960104&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f110_108 HTTP/1.1 Host: gips2.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	498	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 4124 Connection: close Expires: Sun, 24 Nov 2024 07:29:58 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 043a050f7462e81da57db6eedc9a134a Age: 14282 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:29:58 GMT Ohc-Cache-HIT: jh2ct83 [2], suzix230 [2] Ohc-File-Size: 4124 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:13 UTC	4124	IN	Data Raw: 52 49 46 46 14 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6d 00 00 6b 00 00 41 4c 50 48 7f 08 00 00 01 19 33 6d db a6 e4 ee cc 22 fa 1f 8f 51 c9 c1 11 08 24 ed 0f be 42 44 a4 8e 55 64 bb 55 6e a2 04 67 8d 13 ea 00 09 48 40 62 5e 37 35 c0 4f c4 04 28 70 db 46 19 d3 31 3c c2 d2 b6 6d cb 1b b7 93 bb 9f 30 39 d6 74 c5 f5 e7 32 37 cc 89 a5 29 a3 35 29 a3 35 29 6c e5 29 b3 a5 32 4b 53 5a 1a 96 45 6b 7a 74 3d 52 ca 6c b9 cc fe 5c 66 7f 61 ce 73 1c 7a ef e7 79 3f bd 9f 22 c2 a1 24 49 55 73 46 41 38 2e b3 07 92 c7 27 20 fc 95 98 d5 b3 85 29 ec a6 bd dd 71 31 43 56 6f ae d4 a0 82 49 bb 42 26 a6 e2 18 53 a8 8c 37 4f e4 33 52 5b ab 93 10 50 bb 6d e0 71 06 88 2a d8 ec ce 40 e5 a9 fd ba 93 3a b5 1e ca ba 8c bf 07 d9 ef 56 1d ba dd 87 3b 63 11 49 26 cb 91 Data Ascii: RIFFWEBPVP8XmkALPH3m"Q$BDUdUngH@b^75O(pF1<m09t27)5)5)l)2KSZEkzt=Rl\faszy?"$IUsFA8.' )q1CVoIB&S7O3R[Pmq*@:V;cI&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	54663	104.193.90.87	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	881	OUT	GET /6ONXsjip0QIZ8tyhnq/it/u=423474926,1801248814&fm=179&app=35&f=PNG?w=518&h=136&s=ADFEEB16D210A1925C7BF2EA0300E03E HTTP/1.1 Host: ss1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	517	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/png Content-Length: 43887 Connection: close Expires: Sat, 23 Nov 2024 08:59:29 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: c14acf8c77081b8c05958805fb4ff6f8 Age: 95324 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:59:29 GMT Ohc-Cache-HIT: iad01-sys-jomo7.iad01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:13 UTC	15867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 88 08 06 00 00 00 9c 1a 23 21 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 7b 9c 24 db 51 1f 88 7f e3 9c cc ca ac 47 77 4d f5 ed 52 a9 9b 99 a5 85 87 de 65 c6 06 d6 03 02 f1 d9 35 b3 7e b1 60 6c c0 06 f1 da 9f cd c3 fe 99 97 2d 64 16 0c bf 05 ae 2e 16 6f 6b 41 20 8c 04 16 2f e1 bd 46 a0 c5 80 2d 5e 6b 33 2c c6 f6 35 1a de 3d c0 78 6c 5a 74 ab 87 52 4f 4f 4d 75 d7 23 b3 32 4f c4 ef 8f cc ac ce aa ca 7a 57 cf 9d b9 f7 c6 e7 d3 93 Data Ascii: PNGIHDR#!gAMAasRGB cHRMz&u0`:pQ<bKGDIDATx{$QGwMRe5~`l-d.okA /F-^k3,5=xlZtROOMu#2OzW
2024-10-25 11:28:13 UTC	16384	IN	Data Raw: 06 ae cb b9 7c 9e 7b b6 2d 95 4e 47 f5 72 39 6c 86 21 21 08 28 e8 f5 74 c0 ac ec 20 d0 a1 e7 45 fe be 39 f9 3f 40 ff e7 7f fe e5 9c eb 86 81 6d 1b 47 29 b6 73 39 03 db 96 9e 65 49 a5 d7 43 af 50 e0 cd 20 a0 5e b7 ab 10 57 9b 0d 7a 3d 8d 30 cc 65 fa 12 2e 50 fe 2f 10 7c 98 26 3c e9 a8 94 86 8b 21 8d 65 cc fd 49 04 75 5b c4 b8 d1 8e 87 c5 71 22 73 6f e6 24 7a e9 00 15 0a 84 30 24 f2 3c e5 58 96 1a a8 69 3e d5 f4 99 be 0e 7d 9e 96 db 7d 55 d0 97 53 8b f1 bf 60 59 c2 49 86 33 63 10 c6 c1 3f a8 54 e4 6a a5 12 55 73 7b e6 19 6c 9e 9c e0 a1 ef 93 8a a3 73 5d d7 e5 73 bf ec 0c f4 cb f9 77 f9 2f f9 92 7f 9f dc 66 e3 c5 07 7b e8 8a 76 67 46 d3 f7 20 cd ae 6d 33 7b 1e 33 91 e1 30 e4 4d cb 1a 54 0a f6 f6 a4 ef 3e 18 52 0a 26 25 b3 49 c3 1d 00 d7 8a 45 11 40 24 08 a4 Data Ascii: \|{-NGr9l!!(t E9?@mG)s9eICP ^Wz=0e.P/\|&<!eIu[q"so$z0$<Xi>}}US`YI3c?TjUs{ls]sw/f{vgF m3{30MT>R&%IE@$
2024-10-25 11:28:13 UTC	11636	IN	Data Raw: 54 02 ca 65 da 00 08 3f f2 a3 bf 84 42 fe 63 10 86 d1 b1 af 81 7c 0c 43 3e d1 30 8c fe ba dd 48 41 28 16 08 a5 d2 67 e1 47 7f 6c c7 fe 9c cf fe 4b 5b 6b 6b d8 3f 3e 46 67 6f 0f d7 92 a3 81 89 95 e0 e6 4d dc d9 db 53 d7 5a ad 68 51 b2 ac 22 2c 7c 34 9c dc 47 a3 54 7a 43 f5 5f fe cb 00 41 f8 01 04 bd df 30 8f ce 7e b6 fd a6 6f 78 ef fa e9 a9 69 00 d8 6c b5 e4 61 aa b7 8f cb 65 70 b3 89 2d c7 91 fb 9e 47 97 01 a0 56 c3 55 00 fb 31 23 0a 88 ab fa e1 5c 11 82 65 51 3e 97 a3 e3 76 9b c8 f7 a9 f8 d9 9f 5d ce ff b5 bf f6 46 e4 f3 7f 1d b9 dc 87 81 68 b0 74 a1 31 11 bd 86 01 13 5f 99 07 95 c4 69 f3 5b a9 73 a5 2a f9 b3 34 a0 35 41 eb 22 0a f9 8f 54 85 fc 47 aa 4a e5 4b d7 ff cd bf 09 11 9a 43 f4 fc f7 a1 71 fa 73 cd af fb 9a 9f e3 56 4b ea be 4f 41 bb 4d 97 5b 2d Data Ascii: Te?Bc\|C>0HA(gGlK[kk?>FgoMSZhQ",\|4GTzC_A0~oxilaep-GVU1#\eQ>v]Fht1_i[s*45A"TGJKCqsVKOAM[-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	54662	104.193.90.87	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	882	OUT	GET /6ONXsjip0QIZ8tyhnq/it/u=3779990328,1416553241&fm=179&app=35&f=PNG?w=108&h=108&s=E7951B62A4639D153293A4E90300401B HTTP/1.1 Host: ss1.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	516	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/png Content-Length: 2459 Connection: close Expires: Sat, 23 Nov 2024 08:53:06 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: be99bba9643c1ff5d281120dc3d9f952 Age: 95707 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:53:06 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:13 UTC	2459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 6c 08 03 00 00 00 b8 b8 a7 ff 00 00 02 43 50 4c 54 45 00 00 00 ff b8 56 ff 66 00 ff 73 12 ff a2 55 ff 74 14 ff 68 03 ff 72 0f ff 86 30 ff 67 01 ff 66 00 ff 67 01 ff 6e 0c ff 68 00 ff 6a 03 ff 85 33 ff 67 00 ff 67 01 ff 67 00 ff 67 00 ff 68 03 ff 69 02 ff 6f 0d ff 68 02 ff 67 00 ff 8a 3a ff 67 00 ff 68 02 ff 8c 3f ff 87 36 ff 8b 3d ff 67 00 ff 6a 06 ff 69 04 ff 67 00 ff 69 02 ff 8a 39 ff 71 11 ff 6c 05 ff 92 49 ff 7a 20 ff 69 04 ff 8e 43 ff 68 03 ff 73 15 ff 68 03 ff 6e 0e ff 67 00 ff 97 51 ff 7e 27 ff 66 00 ff 98 52 ff 67 00 ff 94 4c ff 67 00 ff 68 04 ff 68 02 ff 76 1a ff 84 30 ff 66 00 ff 69 06 ff 8f 44 ff 89 39 ff 67 01 ff 73 15 ff 8f 44 ff 96 4f ff 8c 3d ff 6b 08 ff 99 52 ff 8f 42 ff Data Ascii: PNGIHDRllCPLTEVfsUthr0gfgnhj3gggghiohg:gh?6=gjigi9qlIz iChshngQ~'fRgLghhv0fiD9gsDO=kRB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	54660	185.10.104.109	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	882	OUT	GET /6ONYsjip0QIZ8tyhnq/it/u=2761266866,1242382534&fm=179&app=35&f=PNG?w=120&h=170&s=1785D84E93E1895B4AFABBAF0300F008 HTTP/1.1 Host: ss2.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	518	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/png Content-Length: 20028 Connection: close Expires: Wed, 20 Nov 2024 03:00:32 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: 226ac51819632bfa698c4c56e87de059 Age: 376061 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:00:32 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:13 UTC	15866	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 aa 08 06 00 00 00 66 92 8b f6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4d 5e 49 44 41 54 78 da ed bd 79 9c 5c 55 99 ff ff 7e ce b9 55 d5 5b 56 b2 76 12 92 f4 16 30 08 c8 4e d2 e9 10 50 71 10 be e0 28 51 c1 dd 51 70 46 81 19 75 70 19 b5 5d 40 d0 19 57 66 94 af 8a a0 b8 05 19 51 dc 50 42 92 ee 4e 00 d9 91 00 49 ba 93 40 16 12 12 b2 76 a7 bb aa ee 3d cf ef 8f 7b ab ba ba ba b6 ee 04 f1 f7 7d e5 79 bd 1a 52 f7 9e 7b b6 e7 de 73 9e f3 2c 9f 07 8e d2 51 3a 4a Data Ascii: PNGIHDRxfgAMAasRGB cHRMz&u0`:pQ<bKGDM^IDATxy\U~U[Vv0NPq(QQpFup]@WfQPBNI@v={}yR{s,Q:J
2024-10-25 11:28:13 UTC	4162	IN	Data Raw: 17 5f 1a 38 77 b3 88 3c 17 33 f6 4d 67 ae 1b 18 a2 0b 1e 38 f0 d7 8b 50 26 21 d2 59 4c cb 75 e6 ba 81 4d 9d cd b1 0e 54 17 ef 49 ee 5b 0a dc f2 f2 8d ed 95 21 55 16 20 1c 57 b4 80 33 0f 21 3a 46 54 5f 5e 06 6f 68 6a 4a ec 64 f3 62 44 ef cb bd 7e da 23 8f a4 f5 d2 4b 2f 5b fd f8 5d df 57 75 77 76 36 c5 be 26 c2 31 1a b8 77 23 f2 f3 aa b1 93 df 7f da 23 db 0b e8 ad 5d c6 82 f2 d3 52 ed 1a b8 cd c1 62 e0 7d fc 3f c8 e0 45 dd fe 9b ca 95 e9 6a 8a 5d 0b 64 f1 48 0a 08 59 1c df d9 12 fb 60 b9 8a 32 a4 aa af ce bf b6 c3 3c 7f 01 8e 71 a2 66 d8 5e 2e 77 dc 11 ac 3e ce fb bf 1a 70 3e aa ff a6 0a 88 3c 63 95 af 14 62 ee c3 c7 d7 4c ef 4f a7 de 20 42 ba 4a aa 7e 59 0a 78 6f 7c 7c fc 1d 7b 52 7b bf 8d ea c2 07 8f 4b b4 9c f9 6c f2 f0 52 c8 8e 84 84 52 f2 ff 88 49 d1 Data Ascii: _8w<3Mg8P&!YLuMTI[!U W3!:FT_^ohjJdbD~#K/[]Wuwv6&1w##]Rb}?Ej]dHY`2<qf^.w>p><cbLO BJ~Yxo\|\|{R{KlRRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	54665	185.10.104.109	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	846	OUT	GET /6ONYsjip0QIZ8tyhnq/it/u=4173936571,4084506864&fm=179&app=35&f=PNG?w=514&h=32 HTTP/1.1 Host: ss2.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	517	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/png Content-Length: 8224 Connection: close Expires: Wed, 20 Nov 2024 03:17:43 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: cca2581758917f68ea9ff318be855b8e Age: 375030 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:17:43 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:13 UTC	8224	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 02 00 00 00 20 08 06 00 00 00 60 be 10 d8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1f 42 49 44 41 54 78 da ed 9d 7b bc 5e d3 99 c7 bf eb 9c 93 8b dc 23 42 6e 4d 88 c6 bd 71 2d 86 a2 32 61 ea 96 96 d2 99 aa 5e 44 75 d0 71 a7 28 6d a9 4e b5 3a 1d 5a aa 74 dc 8a 96 b6 11 14 ad 5e 18 6d 50 82 94 06 11 c2 24 11 92 48 44 e4 9e 9c cb 6f fe 78 9e 9d bd ce 3e fb bd 9c 23 c9 bb 4f e4 f7 f9 bc 9f f3 9e bd d6 de ef 5a 6b af f5 ac e7 be 02 65 20 a9 0e 18 0e bc 19 42 68 8c ae d7 Data Ascii: PNGIHDR `gAMAasRGB cHRMz&u0`:pQ<bKGDBIDATx{^#BnMq-2a^Duq(mN:Zt^mP$HDox>#OZke Bh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	54667	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:13 UTC	929	OUT	GET /it/u=881387800,3041446615&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=68F2A1460DB389ED50A97019030010D0&sec=1729962000&t=81d0471c8d3585fd8fa1377e8fc7911e HTTP/1.1 Host: t15.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:13 UTC	541	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:13 GMT Content-Type: image/webp Content-Length: 9642 Connection: close Expires: Sun, 10 Nov 2024 13:31:17 GMT Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT ETag: 90f89f88e7fe129570db512f04ced773 Age: 375089 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 11 Oct 2024 13:31:17 GMT Ohc-Cache-HIT: iad01-sys-jomo7.iad01.baidu.com [2], zhuzuncache57 [2], xaix237 [2] Ohc-File-Size: 9642 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:13 UTC	9642	IN	Data Raw: 52 49 46 46 a2 25 00 00 57 45 42 50 56 50 38 20 96 25 00 00 30 71 00 9d 01 2a 00 01 aa 00 3e 91 3c 96 48 25 a3 a2 25 ad 5b 2a f0 b0 12 09 40 e3 ab 2a 08 4d 09 fd 1f 8f ba d7 1f 09 c9 df e3 3c 23 7a 15 ff 51 e9 ff e9 ab d0 97 3e 37 a2 1f f6 bb e6 7d 15 df fc bd 98 3f c7 f4 80 7f ff f6 da df 55 eb 0f e0 af 87 9f 45 fe e5 fb 47 f9 63 f0 db 9b 3e 9b 75 11 f9 4f db 3f cd ff 75 fd bf f5 47 fc f7 f6 9f a3 3f 67 fe 11 7f 61 f9 71 f0 0b f9 1f f3 bf f0 3f dd 7f 74 bf c4 7a a6 ff 7d da c5 b3 7f b1 f4 02 f5 af e8 7f eb ff ba fe f5 7f b1 f4 82 ff 0b d0 2f ae 9f ef fd c0 bf a3 7f 55 ff 71 e5 3f e0 df f7 ef f7 1e c0 3f ce 3f b7 7f de ff 27 ee df fd 17 fe cf f4 df ee 3d 32 fd 25 ff a7 fc bf fa af 90 df e6 7f da ff ea ff 87 f6 e1 ff ff ee 4f f7 7b ff ff bb 9f ee 7f ff f4 Data Ascii: RIFF%WEBPVP8 %0q><H%%[@*M<#zQ>7}?UEGc>uO?uG?gaq?tz}/Uq???'=2%O{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	54679	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	387	OUT	GET /r/www/cache/static/global/img/icons_441e82f.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	886	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/png Content-Length: 17545 Connection: close Expires: Thu, 24 Oct 2024 02:46:55 GMT Last-Modified: Wed, 09 Oct 2024 08:25:15 GMT ETag: "441e82fb1178a614395c404c341bf82b" Cache-Control: max-age=31536000 Age: 376048 Accept-Ranges: bytes Content-MD5: RB6C+xF4phQ5XEBMNBv4Kw== x-bce-content-crc32: 1679328473 x-bce-debug-id: 9eTNIsbogeC8L92OGvp1lvVoolPRuSwtzN1HB1LM/GpEQAXoZcd0jnMeWaFZGT2uW+VjqSkdOaCVKrQYBYn+dg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 39b98ce0-8048-45d2-b788-a4df4b1fbe1c x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 21 Oct 2024 02:46:55 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache52 [4] Ohc-File-Size: 17545 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	15498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 08 08 03 00 00 00 43 e3 dc e1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRCtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-25 11:28:14 UTC	2047	IN	Data Raw: 43 22 91 21 d5 55 25 fe d6 cf e8 f6 01 00 92 b8 8b d1 72 71 71 a1 ae b8 d8 d7 28 39 db d6 07 00 48 e2 0e 00 20 ee 00 00 e2 0e 00 20 ee 00 00 e2 0e 00 20 ee 00 40 dc 01 00 c4 1d 00 40 dc 01 00 c4 1d 00 40 dc 01 80 b8 03 00 3a 6d dc 13 e7 eb 6a e3 19 bb 3a eb 76 00 20 f7 e2 1e 2e 2e 1c 3b 75 56 6d 17 ed d4 bc 5d 6a 67 4d 1d 5b d8 ba 0e 6a db 29 b9 b1 66 81 76 ca de 05 35 37 96 b4 65 3b d9 74 7f 00 20 07 e3 1e 2e 1c 5b d1 45 b1 e8 52 31 36 fd 8f c9 10 db 29 59 60 dd ce 82 92 8a 56 6d 27 ab ee 0f 00 e4 60 dc c3 85 8b 37 27 e2 17 89 24 2e 6e 5e 9c 5e 06 c5 76 aa 64 db a9 4a 7f 3b 59 75 7f 00 20 17 e3 5e 3c d3 48 69 79 d5 88 7b f5 cf b2 ee 7a ef 88 aa 72 23 a7 33 d3 f8 20 a4 e2 99 46 4a 87 cc 99 70 8f fe 19 d7 13 ef 99 30 67 88 91 d3 f4 b6 93 5d f7 07 00 72 30 Data Ascii: C"!U%rqq(9H @@@:mj:v ..;uVm]jgM[j)fv57e;t .[ER16)Y`Vm'`7'$.n^^vdJ;Yu ^<Hiy{zr#3 FJp0g]r0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	54678	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	377	OUT	GET /r/www/cache/static/lib/esl_5fec89f.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	904	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 8178 Connection: close Expires: Tue, 15 Oct 2024 06:09:59 GMT Last-Modified: Wed, 09 Oct 2024 08:25:16 GMT ETag: "5fec89f47d0662bf5f9e4e17eefb99dc" Cache-Control: max-age=31536000 Age: 873434 Accept-Ranges: bytes Content-MD5: X+yJ9H0GYr9fnk4X7vuZ3A== x-bce-content-crc32: 716823903 x-bce-debug-id: 7ntfoet2pq48K8CHC18kpiJY+2VHfQBp9E+kdLAtUkWBV+L5n8U2xqWT07I/G+2VcSrvgaJB/4BP5YHa5mDeQg== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: e07a0d9e-ae63-4c9b-accf-f009aafdab6b x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:59 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2], zhuzuncache53 [2] Ohc-File-Size: 8178 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:14 UTC	8178	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 65 73 6c 7c 7c 21 6e 2e 72 65 71 75 69 72 65 7c 7c 6e 2e 65 73 6c 2e 76 65 72 73 69 6f 6e 21 3d 3d 6e 2e 72 65 71 75 69 72 65 2e 76 65 72 73 69 6f 6e 29 7b 76 61 72 20 65 2c 74 2c 72 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 68 28 6e 2c 48 29 7c 7c 28 50 5b 6e 5d 3d 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 30 3d 3d 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 26 26 72 2e 70 75 73 68 28 6e 29 7d 76 61 72 20 72 3d 5b 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 74 28 6e 29 3a 44 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 7d 29 2c 72 2e 6c 65 6e 67 74 68 3e 30 29 Data Ascii: !function(n){if(!n.esl\|\|!n.require\|\|n.esl.version!==n.require.version){var e,t,r;!function(n){function i(n){h(n,H)\|\|(P[n]=1)}function o(n,e){function t(n){0===n.indexOf(".")&&r.push(n)}var r=[];if("string"==typeof n?t(n):D(n,function(n){t(n)}),r.length>0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	54680	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	386	OUT	GET /r/www/cache/static/bundles/polyfill_9354efa.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	907	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 41984 Connection: close Expires: Wed, 25 Sep 2024 21:40:50 GMT Last-Modified: Thu, 12 Sep 2024 08:43:02 GMT ETag: "9354efad5c9f5519f606c3c39434b9ec" Cache-Control: max-age=31536000 Age: 879200 Accept-Ranges: bytes Content-MD5: k1TvrVyfVRn2BsPDlDS57A== x-bce-content-crc32: 3721482874 x-bce-debug-id: aAEMKkwDIHO6HkrsofrfU2YpvpbfGB/2fmftPJ4aOnEccFM+Jq1XRIIgO7IC+2ED/huHYkx2FKVDggnawvvVuw== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 79d186c1-a2db-4a95-bc31-4a5d9e04bb54 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 22 Sep 2024 21:40:49 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache57 [2] Ohc-File-Size: 41984 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:14 UTC	15477	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 72 3d 41 72 72 61 79 2c 6e 3d 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 3d 4f 62 6a 65 63 74 2c 69 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 46 75 6e 63 74 69 6f 6e 2c 75 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2c 73 3d 53 74 72 69 6e 67 2c 66 3d 73 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 4e 75 6d 62 65 72 2c 6c 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2c 68 3d 6e 2e 73 6c 69 63 65 2c 70 3d 6e 2e 73 70 6c 69 63 65 2c 67 3d 6e 2e 70 75 73 68 2c 64 3d 6e 2e 75 6e 73 68 69 66 74 2c 79 3d 6e 2e 63 6f 6e 63 61 74 2c 76 3d 6e 2e 6a 6f 69 6e 2c 62 3d 75 2e 63 61 6c 6c 2c 6d 3d 75 2e 61 70 70 6c 79 2c 77 3d 4d 61 74 68 2e 6d 61 78 2c 54 3d 4d 61 74 68 2e 6d 69 6e 2c 6a 3d 69 2e 74 6f 53 74 72 69 6e 67 2c 44 3d 22 Data Ascii: !function(){var t,e,r=Array,n=r.prototype,o=Object,i=o.prototype,a=Function,u=a.prototype,s=String,f=s.prototype,c=Number,l=c.prototype,h=n.slice,p=n.splice,g=n.push,d=n.unshift,y=n.concat,v=n.join,b=u.call,m=u.apply,w=Math.max,T=Math.min,j=i.toString,D="
2024-10-25 11:28:14 UTC	16384	IN	Data Raw: 3d 69 73 4e 61 4e 28 44 61 74 65 2e 70 61 72 73 65 28 22 32 30 30 30 2d 30 31 2d 30 31 54 30 30 3a 30 30 3a 30 30 2e 30 30 30 5a 22 29 29 3b 69 66 28 67 72 7c 7c 70 72 7c 7c 21 68 72 29 7b 76 61 72 20 64 72 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 33 31 29 2d 31 2c 79 72 3d 7a 28 6e 65 77 20 44 61 74 65 28 31 39 37 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 64 72 2b 31 29 2e 67 65 74 54 69 6d 65 28 29 29 3b 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 6f 2c 69 2c 61 2c 75 2c 66 29 7b 76 61 72 20 63 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 0a 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 7b 76 61 72 20 68 3d 75 2c 70 3d 66 3b 69 66 28 79 72 26 26 6c 3e 3d 37 26 26 66 3e Data Ascii: =isNaN(Date.parse("2000-01-01T00:00:00.000Z"));if(gr\|\|pr\|\|!hr){var dr=Math.pow(2,31)-1,yr=z(new Date(1970,0,1,0,0,0,dr+1).getTime());Date=function(t){var e=function(r,n,o,i,a,u,f){var c,l=arguments.length;if(this instanceof t){var h=u,p=f;if(yr&&l>=7&&f>
2024-10-25 11:28:14 UTC	10123	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 5b 72 5d 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 2c 65 26 26 65 28 72 2c 6e 29 7d 7d 76 61 72 20 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 3f 74 68 69 73 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 3b 22 29 28 29 2c 6f 3d 72 28 74 29 3b 22 75 6e 64 65 66 Data Ascii: ){return function(r,n){"function"!=typeof t[r]&&Object.defineProperty(t,r,{configurable:!0,writable:!0,value:n}),e&&e(r,n)}}var n="object"==typeof global?global:"object"==typeof self?self:"object"==typeof this?this:Function("return this;")(),o=r(t);"undef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	54681	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	390	OUT	GET /r/www/cache/static/bundles/es6-polyfill_388d059.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	889	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 74476 Connection: close Expires: Sun, 16 Jun 2024 05:20:21 GMT Last-Modified: Wed, 12 Jun 2024 05:25:17 GMT ETag: "388d059dffa87621761c31ced2935ca4" Cache-Control: max-age=31536000 Age: 11599673 Accept-Ranges: bytes Content-MD5: OI0Fnf+odiF2HDHO0pNcpA== x-bce-content-crc32: 578717120 x-bce-debug-id: JiGUcKnPd3SeEM7cZlcuKiW7Z2A7vzavS2yUAJurWP7sZlk7Zvn8dkB8olRolRNVhyKLp27XcMcMaE8R0aPdXA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 4857bcfb-814b-4407-adf0-1e5573cf08db x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Thu, 13 Jun 2024 05:20:21 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-File-Size: 74476 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	15495	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6e 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6e 29 3a 6e 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 Data Ascii: !function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n():"function"==typeof define&&define.amd?define(n):n()}(this,function(){"use strict";function e(){}function n(e,n){return function(){e.apply(n,arguments)}}function t(e){if(!(this instanc
2024-10-25 11:28:14 UTC	16384	IN	Data Raw: 72 6f 70 65 72 74 79 2c 75 3d 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 69 28 75 2c 74 29 29 72 65 74 75 72 6e 20 75 5b 74 5d 3b 65 7c 7c 28 65 3d 7b 7d 29 3b 76 61 72 20 72 3d 5b 5d 5b 74 5d 2c 63 3d 21 21 69 28 65 2c 22 41 43 43 45 53 53 4f 52 53 22 29 26 26 65 2e 41 43 43 45 53 53 4f 52 53 2c 66 3d 69 28 65 2c 30 29 3f 65 5b 30 5d 3a 61 2c 6c 3d 69 28 65 2c 31 29 3f 65 5b 31 5d 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 75 5b 74 5d 3d 21 21 72 26 26 21 6f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 26 26 21 6e 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 74 3d 7b 6c 65 6e 67 74 68 3a 2d 31 7d 3b 63 3f 73 28 74 2c 31 2c 7b 65 6e 75 6d Data Ascii: roperty,u={},a=function(t){throw t};t.exports=function(t,e){if(i(u,t))return u[t];e\|\|(e={});var r=[][t],c=!!i(e,"ACCESSORS")&&e.ACCESSORS,f=i(e,0)?e[0]:a,l=i(e,1)?e[1]:void 0;return u[t]=!!r&&!o(function(){if(c&&!n)return!0;var t={length:-1};c?s(t,1,{enum
2024-10-25 11:28:14 UTC	16384	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 3f 28 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 6f 28 74 29 2c 72 3d 6e 65 77 20 6c 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 2c 72 5b 66 5d 3d 74 29 3a 72 3d 70 28 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 72 3a 69 28 72 2c 65 29 0a 7d 7d 2c 36 30 34 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 39 37 38 31 29 2c 6f 3d 72 28 33 30 37 30 29 2c 69 3d 72 28 39 36 37 30 29 2c 73 3d 72 28 31 39 35 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 73 28 65 29 2c 75 3d 6e 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 75 3e 61 3b 29 6f 2e 66 28 74 Data Ascii: urn null!==t?(l.prototype=o(t),r=new l,l.prototype=null,r[f]=t):r=p(),void 0===e?r:i(r,e)}},6048:function(t,e,r){var n=r(9781),o=r(3070),i=r(9670),s=r(1956);t.exports=n?Object.defineProperties:function(t,e){i(t);for(var r,n=s(e),u=n.length,a=0;u>a;)o.f(t
2024-10-25 11:28:14 UTC	16384	IN	Data Raw: 72 2d 2d 29 2c 55 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 42 3d 2f 5b 21 27 28 29 7e 5d 7c 25 32 30 2f 67 2c 44 3d 7b 22 21 22 3a 22 25 32 31 22 2c 22 27 22 3a 22 25 32 37 22 2c 22 28 22 3a 22 25 32 38 22 2c 22 29 22 3a 22 25 32 39 22 2c 22 7e 22 3a 22 25 37 45 22 2c 22 25 32 30 22 3a 22 2b 22 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 44 5b 74 5d 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2e 72 65 70 6c 61 63 65 28 42 2c 43 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 29 66 6f 72 28 76 61 72 20 72 2c 6e 2c 6f 3d 65 2e 73 70 6c 69 74 28 22 26 22 29 2c 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 29 28 72 3d 6f 5b 69 2b Data Ascii: r--),U);return e}},B=/[!'()~]\|%20/g,D={"!":"%21","'":"%27","(":"%28",")":"%29","~":"%7E","%20":"+"},C=function(t){return D[t]},F=function(t){return encodeURIComponent(t).replace(B,C)},M=function(t,e){if(e)for(var r,n,o=e.split("&"),i=0;i<o.length;)(r=o[i+
2024-10-25 11:28:14 UTC	9829	IN	Data Raw: 74 68 69 73 2e 5f 62 6f 64 79 49 6e 69 74 3d 74 2c 74 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 3a 67 26 26 42 6c 6f 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 42 6c 6f 62 3d 74 3a 6d 26 26 46 6f 72 6d 44 61 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 46 6f 72 6d 44 61 74 61 3d 74 3a 76 26 26 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 62 26 26 67 26 26 28 65 3d 74 29 26 26 44 Data Ascii: this._bodyInit=t,t?"string"==typeof t?this._bodyText=t:g&&Blob.prototype.isPrototypeOf(t)?this._bodyBlob=t:m&&FormData.prototype.isPrototypeOf(t)?this._bodyFormData=t:v&&URLSearchParams.prototype.isPrototypeOf(t)?this._bodyText=t.toString():b&&g&&(e=t)&&D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	54682	185.10.104.124	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	930	OUT	GET /it/u=1103051124,4207593305&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=2A31E60607A7ECE84C225A560200D0F9&sec=1729962000&t=3337204794c24425e7243dc722bc7cd0 HTTP/1.1 Host: t13.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:14 UTC	558	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/webp Content-Length: 4474 Connection: close Expires: Wed, 20 Nov 2024 12:15:48 GMT Last-Modified: Sun, 18 Jan 1970 00:00:00 GMT ETag: 61108ffa2cac4126635b1291cc6f62ab Age: 280365 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache50 [4], xiangyix230 [2], fzix158 [2] Ohc-File-Size: 4474 Ohc-Global-Saved-Time: Mon, 21 Oct 2024 12:15:48 GMT X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	4474	IN	Data Raw: 52 49 46 46 72 11 00 00 57 45 42 50 56 50 38 20 66 11 00 00 d0 4b 00 9d 01 2a 00 01 aa 00 3e 91 3c 9c 4a a5 a3 23 21 a7 d7 d9 d8 b0 12 09 4d dc 2e 10 1e 0c 0f fc 76 b4 6f 97 f3 a3 cd 58 fa f6 ed 9d 4f 44 3e 60 1c f0 3c c0 79 c2 ff aa f5 29 e8 01 fe 77 d2 3b d5 0b d0 03 cb a7 d9 7b fc 87 9d 8e ac 43 30 ff 35 e1 2f 84 8f 5c 7e cb fb 8f fd 57 d9 e7 35 f6 95 fc 8f ee 8f e9 bf b8 79 f7 de bf be cf ea 7d 40 bf 29 fe 83 fe 9f 7b e7 58 ff 2d fa 8b ec 05 ec af d1 bf dc f8 3b 7f 87 e8 37 e6 3f dc 7f e1 7b 80 7f 27 fe 83 fe ff d5 9f f1 9e 04 5f 5a ff 2d ec 05 fc 93 fa f7 fd 3f ef 3f 99 1f 4a ff cb ff ec ff 4b e7 5b f3 ff f3 3f f9 3f d1 7c 02 ff 33 fe d3 ff 63 fc 57 f9 2f 7d 4f 61 3f b8 df ff fd d9 7f 6d 7f ff 96 0f 2a e4 df b1 90 ec b9 91 88 8d 0f 55 e3 9b ee d7 eb Data Ascii: RIFFrWEBPVP8 fK><J#!M.voXOD>`<y)w;{C05/\~W5y}@){X-;7?{'_Z-??JK[??\|3cW/}Oa?mU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	54685	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	930	OUT	GET /it/u=3066869826,1019512012&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=F1ECB7461C404AC8D9A3EB7C0300D07F&sec=1729962000&t=de44f08b6e18b2860c9a7d4b35dfb3c0 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:14 UTC	540	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/webp Content-Length: 7142 Connection: close Expires: Sat, 23 Nov 2024 08:52:57 GMT Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT ETag: a89afa9581ed0d48b6f09ab32b0c0cf3 Age: 95513 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:52:57 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [2], zhuzuncache61 [2], wzix115 [2] Ohc-File-Size: 7142 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	7142	IN	Data Raw: 52 49 46 46 de 1b 00 00 57 45 42 50 56 50 38 20 d2 1b 00 00 d0 71 00 9d 01 2a 00 01 aa 00 3e a1 46 9c 4a a6 23 a2 a9 a9 16 bb d9 30 14 09 64 00 c0 d9 20 3a d7 65 ff 95 67 57 d8 6e 8b 7d c7 a6 ce 13 7d ad fc bf 39 e7 f0 f4 99 fd bb d4 13 cc 7f fd 5f 5d df dc 7d 04 7e d0 fe d8 7b c3 fe 46 7b ca fe fb ea 01 fd 73 fd cf 5b 3f a0 57 97 47 b3 17 f7 6f fc 7e 9a f8 3d 3c c1 c6 ff 51 bf 4b f7 33 e3 7f f2 ac c7 fc 6f 82 5f 70 9f 6b eb 77 fb ff 0f fe 5f 6a 1d eb 4f f3 dc 23 fa e7 98 8f b7 ff 73 fd 7e f6 4c 9c df d6 bf 90 f6 03 fd 65 e4 3d a0 17 f4 8f f2 7e b1 9f ec 79 5a fa ff d8 43 f9 ff 53 c3 c6 10 ab d6 5c e3 3f 13 77 3e 17 86 f5 87 b2 fd 67 20 b8 88 dc 7d 3a 56 49 80 ee b1 ed ad 7b f3 a1 bb e5 9d f1 a0 4f e8 74 03 a5 f1 02 19 cc 20 6b 30 57 85 e8 ed 3e 9b 6b 69 Data Ascii: RIFFWEBPVP8 q*>FJ#0d :egWn}}9_]}~{F{s[?WGo~=<QK3o_pkw_jO#s~Le=~yZCS\?w>g }:VI{Ot k0W>ki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	54684	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	930	OUT	GET /it/u=4174420314,1164160395&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=0560FB06458199ED03C0A51B010080C1&sec=1729962000&t=e6a0802a3221db2d575c5edcda43432e HTTP/1.1 Host: t14.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:14 UTC	539	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/webp Content-Length: 6030 Connection: close Expires: Fri, 22 Nov 2024 12:25:56 GMT Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT ETag: 6b0d763e13bee9e22bed0618684d7b24 Age: 95513 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Wed, 23 Oct 2024 12:25:56 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache59 [2], cdix67 [2] Ohc-File-Size: 6030 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	6030	IN	Data Raw: 52 49 46 46 86 17 00 00 57 45 42 50 56 50 38 20 7a 17 00 00 f0 5c 00 9d 01 2a 00 01 aa 00 3e a1 48 9d 4b 26 24 22 a1 a8 36 6b d8 c0 14 09 63 00 d3 22 88 43 0e e0 2d ea 8e 2d b4 bd 06 ed b3 e7 9f f4 fb fe 77 7d 7b 7a 03 fd 25 83 57 ec 3c 4b fc 77 e8 3f be 7f 66 fd aa e6 b9 d4 de 66 ff 2c fb a9 fa 8f 99 5f 8e ff dd f8 3f f1 c3 e7 3f 60 2f c8 3f 94 ff a4 f4 98 7e 57 2d fb 91 ea 11 ec 1f d4 bf e6 ff 8d f5 ca f9 9f f8 3e 87 fd 85 f6 00 fd 57 ff a9 c6 d1 f7 3f f7 9e c0 1f d0 ff be fe d0 fb 07 ff d7 fe a7 f2 ef dc 07 e8 1f e8 ff f9 7f ab f8 09 fe 6f fd cf fe f7 ae 47 ff ff 74 9f bc 1e ce 3f bb 87 88 c8 36 e0 20 d6 ba 7b 33 6c b7 95 43 fd 3d d2 46 cd 7f ab 6b ec 31 75 d6 ff 99 07 67 83 d6 c3 c3 e7 f5 bc e9 db ae e1 3f ce 29 f4 6d 6a 82 12 85 fb 54 b9 aa 70 95 04 Data Ascii: RIFFWEBPVP8 z\*>HK&$"6kc"C--w}{z%W<Kw?ff,_??`/?~W->W?oGt?6 {3lC=Fk1ug?)mjTp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	54683	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	930	OUT	GET /it/u=2780622065,3836084479&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=FF94EB021598E5C85871CE7903000077&sec=1729962000&t=a5390f4c6979745c00ab9954ede8e262 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:14 UTC	540	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/webp Content-Length: 3560 Connection: close Expires: Sat, 23 Nov 2024 08:55:51 GMT Last-Modified: Tue, 06 Jan 1970 00:00:00 GMT ETag: 0b97d640707b97b74776bdd82620bfc8 Age: 95513 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:55:51 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [2], zhuzuncache51 [1], bdix225 [2] Ohc-File-Size: 3560 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	3560	IN	Data Raw: 52 49 46 46 e0 0d 00 00 57 45 42 50 56 50 38 20 d4 0d 00 00 30 3f 00 9d 01 2a 00 01 aa 00 3e a1 4a 9e 4c 26 24 23 22 26 f3 6a a8 c0 14 09 4d d7 a7 7b b0 31 99 a6 69 3e 5c 7f dd fa b4 db b5 d9 b9 7f f4 bd 93 8f fa be ce 76 ec ff 65 f4 15 fb 29 fb 4d ef 3f fe ef f6 03 dd 07 a0 07 f3 2f f2 5d 66 be 81 3f b5 de 9c 3f b9 1f 0d 3f dc ff ed fe e3 7b 5b 53 3d fc e7 e5 97 37 0e 90 ed a8 fb cf 33 7f df 78 4b f0 f7 fa cf 50 8f 63 6f 0b 80 0f cb 3f a0 7f c6 fe d7 e3 05 a9 1f 80 35 9a 28 01 fc f3 fc 9f a1 3e 7d fe aa f6 14 fd 79 eb 39 e9 0c 5e d1 40 7d 11 45 43 af 00 65 f3 f4 45 05 74 bb f5 dc 58 e7 cb ec d7 23 a7 c6 9b 74 e5 a6 05 70 4c 15 ca 3f 17 12 29 5e d6 83 db 04 ef e7 5b b2 2f e4 ba 23 9a b4 8f ba 53 93 5c 20 fb c1 25 56 02 9a 9f 7f dc cc 85 cb c3 cc dc d6 4b Data Ascii: RIFFWEBPVP8 0?*>JL&$#"&jM{1i>\ve)M?/]f???{[S=73xKPco?5(>}y9^@}ECeEtX#tpL?)^[/#S\ %VK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	54686	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	895	OUT	GET /it/u=4204299204,1324854634&fm=220&app=103&size=f256,170&n=0&f=JPEG&fmt=auto?sec=1729962000&t=232185e2f47c7a5103ff669a514092e4 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:14 UTC	541	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: image/webp Content-Length: 3808 Connection: close Expires: Thu, 14 Nov 2024 08:40:03 GMT Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT ETag: 2ff540572dc684553cffa8508e9d99be Age: 453677 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Tue, 15 Oct 2024 08:40:03 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache56 [2], qdix181 [2] Ohc-File-Size: 3808 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	3808	IN	Data Raw: 52 49 46 46 d8 0e 00 00 57 45 42 50 56 50 38 20 cc 0e 00 00 30 41 00 9d 01 2a 00 01 aa 00 3e 31 18 8a 44 22 21 a1 11 1a 05 00 20 03 04 b1 b7 7e 33 fc d5 f1 9b 00 fd 73 b0 8b 1d f5 1f c9 cf ea bf b1 dd 5b 7c 2d de 4f c7 2e af 23 97 d6 5f de ff 2f 7f a9 f6 b0 f3 03 fd 0f ff 27 fc f7 fb af 64 6f 30 1f b3 1e 95 1e a9 3d 00 3f 90 7f 48 eb 5e f4 10 fd d2 f4 b0 ff c9 fe 2b e1 4b f6 cf ff 0f fa 5f 72 9f f3 3f fa b5 92 59 2f f7 6f 0a 7c 27 f9 cf d8 ae 5c 9d 3d e6 47 f1 bf b5 bf 91 fe bf fb 8b eb 4f f9 1f 05 78 01 7a df fb 87 e4 ff 03 10 00 fc db f9 e7 f9 0f b8 5f 40 1f f5 7d 16 f1 00 fe 51 fd 3f fe 97 ac 7d f5 d4 00 fe 83 fd 97 f6 5f d8 93 fe bf f4 be 82 7e 9d ff c1 ee 17 fc e3 fb 17 fc ee c7 9e 8a bf b3 22 cc 14 20 56 d9 4d 9f f7 63 41 2b 8a 28 90 9c 04 97 25 36 Data Ascii: RIFFWEBPVP8 0A*>1D"! ~3s[\|-O.#_/'do0=?H^+K_r?Y/o\|'\=GOxz_@}Q?}_~" VMcA+(%6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	54687	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:14 UTC	654	OUT	GET /r/www/cache/static/global/js/all_async_search_a7be81b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:14 UTC	909	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:14 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 689041 Connection: close Expires: Sat, 26 Oct 2024 11:53:40 GMT Last-Modified: Wed, 23 Oct 2024 09:10:59 GMT ETag: "a7be81bd3f3171c9624b479e2898f34c" Cache-Control: max-age=31536000 Age: 166960 Accept-Ranges: bytes Content-MD5: p76BvT8xccliS0eeKJjzTA== x-bce-content-crc32: 1149662581 x-bce-debug-id: 4+Mor96zMHp91fyCzT1URsrquznSnlmxIRSHSvXULzyRoQ9dxvIwhRD/rrDW5l82hQX5BVG2MztWfwf04godZQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a21ff519-06ba-4d19-a210-b0ff2f81d2fd x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:53:40 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 689041 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:14 UTC	15475	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 41 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 74 2e 6d 61 63 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 4d 41 43 22 29 3e 3d 30 2c 28 65 3d 72 2e 6d 61 74 63 68 28 2f 72 76 3a 28 5b 5c 64 2e 5d 2b 29 5c 29 20 6c 69 6b 65 20 67 65 63 6b 6f 2f 29 29 3f 74 2e 69 65 3d 65 5b 31 5d 3a 28 65 3d 72 2e 6d 61 74 63 68 28 2f 28 6d 73 69 65 5c 73 7c 74 72 69 64 65 6e 74 2e 2a 72 76 3a 29 28 5b 5c 77 2e 5d 2b 29 2f 29 29 3f 74 2e 69 65 3d 65 5b 32 5d 3a 28 65 3d 72 2e 6d 61 74 63 68 Data Ascii: !function(){function getUA(){var e,t={},r=navigator.userAgent.toLowerCase();return t.mac=navigator.platform.toUpperCase().indexOf("MAC")>=0,(e=r.match(/rv:([\d.]+)\) like gecko/))?t.ie=e[1]:(e=r.match(/(msie\s\|trident.*rv:)([\w.]+)/))?t.ie=e[2]:(e=r.match
2024-10-25 11:28:14 UTC	16384	IN	Data Raw: 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 70 72 6f 6d 69 73 65 2f 73 72 63 2f 73 65 74 2d 69 6d 6d 65 64 69 61 74 65 5f 30 39 39 63 39 31 36 22 2c 22 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 22 3a 64 6f 6d 61 69 6e 2b 22 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 5f 2f 73 74 61 74 69 63 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 2e 6a 73 22 2c 22 70 72 6f 6d 69 73 65 2d 70 6f 6c 79 66 69 6c 6c 22 3a 64 6f 6d 61 69 6e 2b 22 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 70 72 6f 6d 69 73 65 2d 70 6f 6c 79 66 69 6c 6c 2f 64 69 73 74 2f 70 72 6f 6d Data Ascii: les/@searchfe/promise/src/set-immediate_099c916","@searchfe/user-agent/src/index":domain+"/amd_modules/@searchfe/user-agent/src/index_/static/amd_modules/@searchfe/user-agent/src/index.js","promise-polyfill":domain+"/amd_modules/promise-polyfill/dist/prom
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 20 2f 67 2c 22 26 6e 62 73 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 23 33 34 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 33 39 3b 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 50 72 65 6c 6f 61 64 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 43 6f 6f 6b 69 65 2e 73 65 74 28 22 49 53 53 57 22 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 65 77 20 44 61 74 65 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 65 35 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 33 2c 43 6f 6f 6b 69 65 2e 73 65 74 28 22 49 Data Ascii: p;").replace(/</g,"<").replace(/>/g,">").replace(/ /g," ").replace(/"/g,""").replace(/'/g,"'")}function initPreload(e){function t(){Cookie.set("ISSW","1",null,null,new Date((new Date).getTime()+3e5))}function n(e,t){t=t\|\|3,Cookie.set("I
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 66 6f 72 22 29 2e 61 70 70 65 6e 64 54 6f 28 22 68 65 61 64 22 29 7d 29 2c 6d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 72 2e 66 69 6e 64 28 22 23 68 65 61 64 5f 73 63 72 69 70 74 22 29 2e 68 74 6d 6c 28 29 29 7d 29 2c 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 6a 73 76 65 72 73 69 6f 6e 26 26 22 30 30 36 22 21 3d 62 64 73 2e 63 6f 6d 6d 2e 6a 73 76 65 72 73 69 6f 6e 29 7b 76 61 72 20 6f 3d 58 74 2e 62 75 69 6c 64 53 79 6e 63 53 65 61 72 63 68 55 72 6c 28 7b 6a 6d 70 3a 22 6a 73 76 65 72 22 2c 5f 76 72 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 66 74 2e 72 65 70 6c 61 63 65 28 6f 29 0a 7d 62 64 73 2e 63 6f 6d 6d 2e Data Ascii: removeAttr("data-for").appendTo("head")}),m(function(){$.globalEval(r.find("#head_script").html())}),bds.comm&&bds.comm.jsversion&&"006"!=bds.comm.jsversion){var o=Xt.buildSyncSearchUrl({jmp:"jsver",_vr:Math.random()});return void ft.replace(o)}bds.comm.
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 6e 29 2e 68 65 69 67 68 74 28 29 29 7d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 5f 22 29 2b 22 7c 22 2b 74 2e 6a 6f 69 6e 28 22 5f 22 29 7d 2c 77 69 6e 64 6f 77 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 26 26 21 74 26 26 58 74 3f 58 74 2e 70 28 65 29 3a 76 6f 69 64 28 65 26 26 74 26 26 58 74 26 26 28 58 74 2e 70 28 65 2c 74 29 2c 66 74 2e 68 72 65 66 3d 58 74 2e 62 75 69 6c 64 53 65 61 72 63 68 55 72 6c 28 29 29 29 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 4b 2c 46 2c 47 2c 56 2c 58 2c 5a 2c 65 74 3d 21 31 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 3b 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: n).height())})}catch(n){}return e.join("_")+"\|"+t.join("_")},window.hash=function(e,t){return e?e&&!t&&Xt?Xt.p(e):void(e&&t&&Xt&&(Xt.p(e,t),ft.href=Xt.buildSearchUrl())):void 0};var K,F,G,V,X,Z,et=!1;!function(){var e=$.globalEval;$.globalEval=function(){
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 3b 76 61 72 20 67 6e 2c 76 6e 2c 5f 6e 3b 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 73 77 61 70 5f 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 68 28 72 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 64 73 26 26 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 70 6c 65 76 61 6c 3b 65 2e 73 65 74 43 75 72 72 65 6e 74 53 75 67 53 61 6d 70 6c 65 28 74 29 7d 29 2c 74 7c 7c 28 62 64 73 2e 63 6f 6d 6d 2e 63 6f 6e 66 69 72 6d 51 75 65 72 79 3d 62 64 73 2e 63 6f 6d 6d 2e 71 75 65 72 79 2c 62 64 73 2e 63 6f 6d 6d 2e 63 6f 6e 66 69 72 6d 51 69 64 3d 62 64 73 2e 63 6f 6d 6d 2e 71 69 64 2c 79 28 29 29 2c 5f 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 30 3d 3d 24 28 22 23 63 6f 6e 74 65 6e 74 5f Data Ascii: ;var gn,vn,_n;$(window).on("swap_end",function(e,t){h(rt,function(e){var t=bds&&bds.comm&&bds.comm.sampleval;e.setCurrentSugSample(t)}),t\|\|(bds.comm.confirmQuery=bds.comm.query,bds.comm.confirmQid=bds.comm.qid,y()),_n=setTimeout(function(){0==$("#content_
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 70 6f 72 74 73 22 2c 22 74 73 6c 69 62 22 2c 22 40 73 65 61 72 63 68 66 65 2f 69 6e 6a 65 63 74 2d 6a 73 22 2c 22 73 70 79 2d 63 6c 69 65 6e 74 2f 64 69 73 74 2f 73 70 79 2d 6c 6f 63 61 6c 2d 63 61 63 68 65 22 2c 22 40 62 61 69 64 75 2f 73 65 61 72 63 68 2d 61 70 69 22 2c 22 6d 6f 64 75 6c 65 73 2f 6d 6f 6e 69 74 6f 72 2f 6c 6f 67 2d 73 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 2c 61 2c 63 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6f 2e 53 70 79 43 61 63 68 65 53 65 72 76 69 63 65 3d 76 6f 69 64 20 30 2c 63 3d 74 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 63 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 Data Ascii: ports","tslib","@searchfe/inject-js","spy-client/dist/spy-local-cache","@baidu/search-api","modules/monitor/log-send"],function(e,o,t,a,c,i,s){"use strict";o.__esModule=!0,o.SpyCacheService=void 0,c=t.__importDefault(c);var n=function(){function e(e){var
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 4c 6f 61 64 53 6c 6f 77 22 7d 3b 0a 72 2e 73 65 6e 64 28 75 2c 22 65 74 5f 63 6f 6d 6d 22 29 2c 6f 2e 73 6c 6f 77 52 65 73 44 61 74 61 2e 70 75 73 68 28 7b 69 6e 66 6f 3a 75 2e 69 6e 66 6f 2c 74 79 70 65 3a 74 2c 74 69 6d 65 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 65 4f 72 69 67 69 6e 2b 69 2e 73 74 61 72 74 54 69 6d 65 7d 29 7d 29 7d 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 6e 28 61 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 49 6d 67 48 6f 73 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 69 6d 67 48 6f 73 74 49 6e 66 6f 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 6f 3d 65 2e 69 6d 67 48 6f 73 74 49 Data Ascii: LoadSlow"};r.send(u,"et_comm"),o.slowResData.push({info:u.info,type:t,time:performance.timeOrigin+i.startTime})})}};for(var a in i)n(a)},t.prototype.sendImgHostInfo=function(t){var e=this;Object.keys(this.imgHostInfo).forEach(function(s){var o=e.imgHostI
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 70 62 6f 78 3f 5b 32 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 5d 3a 5b 32 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 2e 72 65 71 75 69 72 65 28 5b 22 74 69 70 62 6f 78 2f 6a 73 2f 74 69 70 62 6f 78 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 74 69 70 62 6f 78 3d 74 2c 69 28 22 22 29 7d 29 7d 29 5d 7d 29 7d 29 7d 3b 76 61 72 20 69 2c 72 2c 73 2c 63 3b 72 65 74 75 72 6e 20 65 3d 74 2e 5f 5f 64 65 63 6f 72 61 74 65 28 5b 6e 2e 69 6e 6a 65 63 74 61 62 6c 65 2c 74 2e 5f 5f 70 61 72 61 6d 28 33 2c 6e 2e 69 6e 6a 65 63 74 28 6f 2e 52 45 51 55 49 52 45 5f 54 4f 4b 45 4e 29 29 2c 74 2e 5f 5f 6d 65 74 61 64 61 74 61 28 22 64 65 73 69 Data Ascii: ,function(){return this.tipbox?[2,Promise.resolve()]:[2,new Promise(function(i){e.require(["tipbox/js/tipbox"],function(t){e.tipbox=t,i("")})})]})})};var i,r,s,c;return e=t.__decorate([n.injectable,t.__param(3,n.inject(o.REQUIRE_TOKEN)),t.__metadata("desi
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 66 28 6e 75 6c 6c 21 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 6c 6f 67 22 29 29 72 65 74 75 72 6e 3b 69 66 28 76 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 69 63 6b 22 29 7c 7c 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 69 63 6b 2d 69 6e 66 6f 22 29 29 74 72 79 7b 76 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 22 2b 76 29 28 29 3b 66 6f 72 28 53 20 69 6e 20 76 29 22 66 6d 22 3d 3d 53 26 26 6e 75 6c 6c 3d 3d 3d 76 2e 66 6d 26 26 28 77 3d 21 30 29 2c 76 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 53 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 62 5b 53 5d 7c 7c 4c 5b 53 5d 29 26 26 28 62 5b 53 5d 3d 76 5b 53 5d 29 7d 63 Data Ascii: f(null!=f.getAttribute("data-nolog"))return;if(v=f.getAttribute("data-click")\|\|f.getAttribute("data-click-info"))try{v=new Function("return "+v)();for(S in v)"fm"==S&&null===v.fm&&(w=!0),v.hasOwnProperty(S)&&("undefined"==typeof b[S]\|\|L[S])&&(b[S]=v[S])}c

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	54688	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:15 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112815Z-16849878b785g992cz2s9gk35c000000091g00000000egec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:15 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-25 11:28:15 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	54689	60.188.66.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:15 UTC	850	OUT	GET /it/u=2270825998,2079407586&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2520_474 HTTP/1.1 Host: gips2.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/s?wd=%E7%99%BE%E5%BA%A6%E7%83%AD%E6%90%9C&sa=ire_dl_gh_logo_texing&rsv_dl=igh_logo_pcs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1
2024-10-25 11:28:16 UTC	498	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:16 GMT Content-Type: image/webp Content-Length: 5914 Connection: close Expires: Sun, 24 Nov 2024 07:37:39 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 717dd539645e8869ba55b703c107ee7a Age: 13819 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:37:39 GMT Ohc-Cache-HIT: jh2ct50 [2], suzix188 [2] Ohc-File-Size: 5914 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:16 UTC	5914	IN	Data Raw: 52 49 46 46 12 17 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 d7 09 00 d9 01 00 41 4c 50 48 4a 00 00 00 01 0f d0 ff 88 08 28 68 db 46 1a 7f d2 a3 f0 de 39 a2 ff 19 fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 cf 7f fe f3 9f ff fc e7 3f ff f9 ff 4a 64 e5 00 56 50 38 20 a2 16 00 00 f0 96 01 9d 01 2a d8 09 da 01 3e dd 6e b1 54 a8 a6 aa 28 a0 54 a8 11 40 1b 89 69 6e fc 7c 98 a1 e4 79 f3 f3 4e ef 52 e6 30 7e 13 ff bc ac e0 9f f6 e9 f7 bd aa eb 76 ef 42 17 d0 7d 98 05 de cb 36 d8 87 c4 15 1c f7 cb 36 d8 87 c4 15 58 6b cf 6c 43 e2 a5 97 97 e7 b6 33 5a 0f 10 58 11 f5 50 0e b6 b1 de 87 a2 73 0e a4 02 73 10 89 29 1c 0a 9a 2a 31 70 45 37 41 8b 15 32 22 f1 6e aa 33 40 54 f7 d5 26 cb 04 3d Data Ascii: RIFFWEBPVP8XALPHJ(hF9?????JdVP8 >nT(T@in\|yNR0~vB}66XklC3ZXPss)1pE7A2"n3@T&=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	54690	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:16 UTC	394	OUT	GET /r/www/cache/static/jquery/jquery-1.10.2.min_65682a2.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:16 UTC	887	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:16 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 93750 Connection: close Expires: Tue, 15 Oct 2024 06:09:59 GMT Last-Modified: Mon, 28 Aug 2023 03:19:58 GMT ETag: "65682a21b58654d8eda27f85d0f57255" Cache-Control: max-age=31536000 Age: 375061 Accept-Ranges: bytes Content-MD5: ZWgqIbWGVNjton+F0PVyVQ== x-bce-content-crc32: 929847287 x-bce-debug-id: IAktCAdYghJp36NRAjpJ/v9SmPnD/XGMv45R3WCsR5KtIrFbeEiZ9poGEggizKaWVXuUjNgVhBkLyGEUbQKcNQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 3d295876-db55-4ada-808e-4f6cb6978cad x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sat, 12 Oct 2024 06:09:59 GMT Ohc-Cache-HIT: fra01-sys-jomo6.fra01.baidu.com [2] Ohc-File-Size: 93750 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:16 UTC	15497	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 63 74 2e 74 79 70 65 28 65 29 3b 72 65 74 75 72 6e 20 63 74 2e 69 73 57 69 6e 64 6f 77 28 65 29 3f 21 31 3a 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 28 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 30 26 26 74 2d 31 20 69 6e 20 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 6b 74 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 63 74 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 70 74 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 Data Ascii: !function(e,t){function n(e){var t=e.length,n=ct.type(e);return ct.isWindow(e)?!1:1===e.nodeType&&t?!0:"array"===n\|\|"function"!==n&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}function r(e){var t=kt[e]={};return ct.each(e.match(pt)\|\|[],function(e,n){t[n]=!
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 22 29 29 3a 28 72 3d 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 44 4f 4d 22 29 2c 72 2e 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 2c 72 2e 6c 6f 61 64 58 4d 4c 28 6e 29 29 7d 63 61 74 63 68 28 6f 29 7b 72 3d 74 7d 72 65 74 75 72 6e 20 72 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 70 61 72 73 65 72 65 72 72 6f 72 22 29 2e 6c 65 6e 67 74 68 7c 7c 63 74 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 58 4d 4c 3a 20 22 2b 6e 29 2c 72 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 63 74 2e 74 72 69 6d 28 74 29 26 26 28 65 2e 65 Data Ascii: ")):(r=new ActiveXObject("Microsoft.XMLDOM"),r.async="false",r.loadXML(n))}catch(o){r=t}return r&&r.documentElement&&!r.getElementsByTagName("parsererror").length\|\|ct.error("Invalid XML: "+n),r},noop:function(){},globalEval:function(t){t&&ct.trim(t)&&(e.e
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6f 3d 22 6e 74 68 22 21 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 33 29 2c 61 3d 22 6c 61 73 74 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 34 29 2c 73 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 72 26 26 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 75 29 7b 76 61 72 20 6c 2c 63 2c 66 2c 70 2c 64 2c 68 2c 67 3d 6f 21 3d 3d 61 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6d 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 79 3d 73 26 26 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 76 3d 21 75 26 26 21 73 3b 0a 69 66 28 6d 29 7b 69 Data Ascii: {var o="nth"!==e.slice(0,3),a="last"!==e.slice(-4),s="of-type"===t;return 1===r&&0===i?function(e){return!!e.parentNode}:function(t,n,u){var l,c,f,p,d,h,g=o!==a?"nextSibling":"previousSibling",m=t.parentNode,y=s&&t.nodeName.toLowerCase(),v=!u&&!s;if(m){i
2024-10-25 11:28:16 UTC	16384	IN	Data Raw: 72 3d 69 5b 61 5d 2c 28 72 2e 73 65 6c 65 63 74 65 64 3d 63 74 2e 69 6e 41 72 72 61 79 28 63 74 28 72 29 2e 76 61 6c 28 29 2c 6f 29 3e 3d 30 29 26 26 28 6e 3d 21 30 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 2d 31 29 2c 6f 7d 7d 7d 2c 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 20 65 26 26 33 21 3d 3d 61 26 26 38 21 3d 3d 61 26 26 32 21 3d 3d 61 3f 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3d 3d 3d 59 3f 63 74 2e 70 72 6f 70 28 65 2c 6e 2c 72 29 3a 28 31 3d 3d 3d 61 26 26 63 74 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 6e 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 69 3d 63 74 2e 61 Data Ascii: r=i[a],(r.selected=ct.inArray(ct(r).val(),o)>=0)&&(n=!0);return n\|\|(e.selectedIndex=-1),o}}},attr:function(e,n,r){var i,o,a=e.nodeType;return e&&3!==a&&8!==a&&2!==a?typeof e.getAttribute===Y?ct.prop(e,n,r):(1===a&&ct.isXMLDoc(e)\|\|(n=n.toLowerCase(),i=ct.a
2024-10-25 11:28:17 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 63 74 2e 6d 61 70 28 74 68 69 73 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 22 55 6e 74 69 6c 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 35 29 26 26 28 72 3d 6e 29 2c 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 69 3d 63 74 2e 66 69 6c 74 65 72 28 72 2c 69 29 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 31 26 26 28 58 74 5b 65 5d 7c 7c 28 69 3d 63 74 2e 75 6e 69 71 75 65 28 69 29 29 2c 49 74 2e 74 65 73 74 28 65 29 26 26 28 69 3d 69 2e 72 65 76 65 72 73 65 28 29 29 29 2c 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 69 29 7d 7d 29 2c 63 74 2e 65 78 74 65 6e 64 28 7b 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 Data Ascii: =function(n,r){var i=ct.map(this,t,n);return"Until"!==e.slice(-5)&&(r=n),r&&"string"==typeof r&&(i=ct.filter(r,i)),this.length>1&&(Xt[e]\|\|(i=ct.unique(i)),It.test(e)&&(i=i.reverse())),this.pushStack(i)}}),ct.extend({filter:function(e,t,n){var r=t[0];retur
2024-10-25 11:28:17 UTC	12717	IN	Data Raw: 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 79 3d 70 2e 73 74 61 74 75 73 43 6f 64 65 7c 7c 7b 7d 2c 76 3d 7b 7d 2c 62 3d 7b 7d 2c 78 3d 30 2c 54 3d 22 63 61 6e 63 65 6c 65 64 22 2c 77 3d 7b 72 65 61 64 79 53 74 61 74 65 3a 30 2c 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 32 3d 3d 3d 78 29 7b 69 66 28 21 66 29 66 6f 72 28 66 3d 7b 7d 3b 74 3d 46 6e 2e 65 78 65 63 28 73 29 3b 29 66 5b 74 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 5b 32 5d 3b 74 3d 66 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 6e 75 6c 6c 3a 74 7d 2c 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 3a 66 75 6e 63 Data Ascii: backs("once memory"),y=p.statusCode\|\|{},v={},b={},x=0,T="canceled",w={readyState:0,getResponseHeader:function(e){var t;if(2===x){if(!f)for(f={};t=Fn.exec(s);)f[t[1].toLowerCase()]=t[2];t=f[e.toLowerCase()]}return null==t?null:t},getAllResponseHeaders:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	54691	182.140.225.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:16 UTC	739	OUT	GET /it/u=2001002732,2616629427&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108 HTTP/1.1 Host: gips0.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:16 UTC	495	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:16 GMT Content-Type: image/png Content-Length: 8123 Connection: close Expires: Sun, 24 Nov 2024 07:38:14 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 424bbd998ca9316a90d7f306229e4be7 Age: 8327 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:38:14 GMT Ohc-Cache-HIT: cd5ct81 [2], bdix110 [2] Ohc-File-Size: 8123 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:16 UTC	8123	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 6c 08 06 00 00 00 8f 66 57 cd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 1f 12 49 44 41 54 78 da ed 7d cf 93 5c d7 75 de f7 dd ee 81 88 d0 2c 36 54 f1 42 f1 c2 83 8d b7 00 ec ca 26 49 99 03 2f b2 71 95 05 79 95 a4 28 b3 c1 58 2a da 71 05 03 39 2a c4 2e 8b 33 a4 2c d1 34 05 0e 40 d2 16 4d 52 c2 90 61 52 a9 6c 04 fc 05 1c ac 5d 32 81 ad ab 12 00 95 54 69 15 71 28 99 18 0a d3 ef 7e 59 bc fb e3 9c Data Ascii: PNGIHDRllfWgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATx}\u,6TB&I/qy(Xq9.3,4@MRaRl]2Tiq(~Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	54697	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112817Z-r197bdfb6b47gqdjqh2kwsuz8c00000000x00000000051vw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	54696	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cddcf92d-501e-008f-6a41-269054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112817Z-17c5cb586f6hhlf5mrwgq3erx800000001fg0000000062m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:17 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	54694	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112817Z-16849878b78z5q7jpbgf6e9mcw0000000980000000006xfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	54693	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:17 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112817Z-16849878b78fmrkt2ukpvh9wh4000000096g000000000fcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 11:28:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	54695	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112817Z-16849878b78wv88bk51myq5vxc00000000p000000000cb9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 11:28:17 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	54704	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	819	OUT	GET /it/u=3066869826,1019512012&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=F1ECB7461C404AC8D9A3EB7C0300D07F&sec=1729962000&t=de44f08b6e18b2860c9a7d4b35dfb3c0 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:17 UTC	545	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 9704 Connection: close Expires: Wed, 20 Nov 2024 05:24:01 GMT Last-Modified: Sat, 10 Jan 1970 00:00:00 GMT ETag: 83eea5ca4716a8a7049e16565511b8e7 Age: 366751 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 05:24:01 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [2], zhuzuncache61 [4], xiangyix182 [2] Ohc-File-Size: 9704 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:17 UTC	9704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 aa 01 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 ff c4 00 48 10 00 02 01 03 02 04 03 04 07 05 04 09 02 07 00 00 01 02 03 00 04 11 05 21 06 12 31 41 13 51 71 14 22 61 81 07 32 42 91 a1 b1 c1 23 Data Ascii: JFIFHHC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"H!1AQq"a2B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	54703	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	819	OUT	GET /it/u=1103051124,4207593305&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=2A31E60607A7ECE84C225A560200D0F9&sec=1729962000&t=3337204794c24425e7243dc722bc7cd0 HTTP/1.1 Host: t13.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:17 UTC	542	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 6444 Connection: close Expires: Wed, 06 Nov 2024 16:25:40 GMT Last-Modified: Wed, 07 Jan 1970 00:00:00 GMT ETag: 4746f3f220c04503106c8c9a74c6c558 Age: 1329761 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 07 Oct 2024 16:25:40 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache50 [4], cdix158 [4] Ohc-File-Size: 6444 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:17 UTC	6444	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 aa 01 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 01 02 ff c4 00 40 10 00 01 04 01 03 02 04 03 03 09 06 06 03 00 00 00 01 00 02 03 04 11 05 12 21 06 31 13 14 41 51 22 61 91 32 71 a1 07 15 16 52 72 81 82 Data Ascii: JFIFHHC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"@!1AQ"a2qRr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	54706	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	819	OUT	GET /it/u=4174420314,1164160395&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=0560FB06458199ED03C0A51B010080C1&sec=1729962000&t=e6a0802a3221db2d575c5edcda43432e HTTP/1.1 Host: t14.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:17 UTC	552	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 9066 Connection: close Expires: Wed, 13 Nov 2024 07:52:07 GMT Last-Modified: Wed, 14 Jan 1970 00:00:00 GMT ETag: 652fa32515740d86e554d5c2bccc78ac Age: 731442 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 14 Oct 2024 07:52:07 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache59 [4], czix67 [2], wzix67 [2] Ohc-File-Size: 9066 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:17 UTC	9066	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 aa 01 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 04 05 06 07 03 08 ff c4 00 4d 10 00 01 03 03 03 01 05 04 06 06 05 08 0a 03 00 00 01 02 03 04 00 05 11 06 12 21 31 07 13 41 51 61 14 22 71 91 15 32 33 42 81 a1 23 Data Ascii: JFIFHHC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"M!1AQa"q23B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	54707	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	819	OUT	GET /it/u=2780622065,3836084479&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=FF94EB021598E5C85871CE7903000077&sec=1729962000&t=a5390f4c6979745c00ab9954ede8e262 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:17 UTC	510	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 6100 Connection: close Expires: Sat, 26 Oct 2024 19:11:23 GMT Last-Modified: Sun, 04 Jan 1970 00:00:00 GMT ETag: 4d83e2c8d0c842244b150368413c2951 Age: 1199478 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 26 Sep 2024 19:11:23 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [4] Ohc-File-Size: 6100 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:17 UTC	6100	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 aa 01 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 06 07 08 ff c4 00 4f 10 00 01 04 01 01 04 04 08 09 08 07 06 07 00 00 00 01 00 02 03 11 04 05 06 12 21 31 13 14 41 51 07 22 54 61 71 91 92 d1 15 23 32 62 Data Ascii: JFIFHHC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"O!1AQ"Taq#2b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	54705	104.193.90.94	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	784	OUT	GET /it/u=4204299204,1324854634&fm=220&app=103&size=f256,170&n=0&f=JPEG&fmt=auto?sec=1729962000&t=232185e2f47c7a5103ff669a514092e4 HTTP/1.1 Host: t14.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:17 UTC	541	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/jpeg Content-Length: 6793 Connection: close Expires: Wed, 13 Nov 2024 00:20:18 GMT Last-Modified: Thu, 08 Jan 1970 00:00:00 GMT ETag: d0be9dee548ad1f0cc0c0be4ebfe93ab Age: 985948 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 14 Oct 2024 00:20:18 GMT Ohc-Cache-HIT: iad01-sys-jomo2.iad01.baidu.com [2], zhuzuncache56 [4], csix103 [4] Ohc-File-Size: 6793 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:17 UTC	6793	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 aa 01 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 01 07 05 06 02 03 04 08 09 ff c4 00 3c 10 00 01 03 03 02 04 03 05 07 02 04 07 00 00 00 00 01 00 02 03 04 05 11 06 21 07 12 31 41 13 22 51 14 42 61 71 81 15 23 32 52 91 Data Ascii: JFIFHHCC<!1A"QBaq#2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	54712	104.193.90.87	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	735	OUT	GET /6ONYsjip0QIZ8tyhnq/it/u=4173936571,4084506864&fm=179&app=35&f=PNG?w=514&h=32 HTTP/1.1 Host: ss2.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:18 UTC	516	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:17 GMT Content-Type: image/png Content-Length: 8224 Connection: close Expires: Sat, 23 Nov 2024 08:59:29 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: cca2581758917f68ea9ff318be855b8e Age: 95328 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:59:29 GMT Ohc-Cache-HIT: iad01-sys-jomo7.iad01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:18 UTC	8224	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 02 00 00 00 20 08 06 00 00 00 60 be 10 d8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 1f 42 49 44 41 54 78 da ed 9d 7b bc 5e d3 99 c7 bf eb 9c 93 8b dc 23 42 6e 4d 88 c6 bd 71 2d 86 a2 32 61 ea 96 96 d2 99 aa 5e 44 75 d0 71 a7 28 6d a9 4e b5 3a 1d 5a aa 74 dc 8a 96 b6 11 14 ad 5e 18 6d 50 82 94 06 11 c2 24 11 92 48 44 e4 9e 9c cb 6f fe 78 9e 9d bd ce 3e fb bd 9c 23 c9 bb 4f e4 f7 f9 bc 9f f3 9e bd d6 de ef 5a 6b af f5 ac e7 be 02 65 20 a9 0e 18 0e bc 19 42 68 8c ae d7 Data Ascii: PNGIHDR `gAMAasRGB cHRMz&u0`:pQ<bKGDBIDATx{^#BnMq-2a^Duq(mN:Zt^mP$HDox>#OZke Bh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	54713	104.193.90.87	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	771	OUT	GET /6ONYsjip0QIZ8tyhnq/it/u=2761266866,1242382534&fm=179&app=35&f=PNG?w=120&h=170&s=1785D84E93E1895B4AFABBAF0300F008 HTTP/1.1 Host: ss2.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:18 UTC	517	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 20028 Connection: close Expires: Sat, 23 Nov 2024 08:52:56 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: 226ac51819632bfa698c4c56e87de059 Age: 95722 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Thu, 24 Oct 2024 08:52:56 GMT Ohc-Cache-HIT: iad01-sys-jomo4.iad01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:18 UTC	15867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 aa 08 06 00 00 00 66 92 8b f6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4d 5e 49 44 41 54 78 da ed bd 79 9c 5c 55 99 ff ff 7e ce b9 55 d5 5b 56 b2 76 12 92 f4 16 30 08 c8 4e d2 e9 10 50 71 10 be e0 28 51 c1 dd 51 70 46 81 19 75 70 19 b5 5d 40 d0 19 57 66 94 af 8a a0 b8 05 19 51 dc 50 42 92 ee 4e 00 d9 91 00 49 ba 93 40 16 12 12 b2 76 a7 bb aa ee 3d cf ef 8f 7b ab ba ba ba b6 ee 04 f1 f7 7d e5 79 bd 1a 52 f7 9e 7b b6 e7 de 73 9e f3 2c 9f 07 8e d2 51 3a 4a Data Ascii: PNGIHDRxfgAMAasRGB cHRMz&u0`:pQ<bKGDM^IDATxy\U~U[Vv0NPq(QQpFup]@WfQPBNI@v={}yR{s,Q:J
2024-10-25 11:28:18 UTC	4161	IN	Data Raw: 5f 1a 38 77 b3 88 3c 17 33 f6 4d 67 ae 1b 18 a2 0b 1e 38 f0 d7 8b 50 26 21 d2 59 4c cb 75 e6 ba 81 4d 9d cd b1 0e 54 17 ef 49 ee 5b 0a dc f2 f2 8d ed 95 21 55 16 20 1c 57 b4 80 33 0f 21 3a 46 54 5f 5e 06 6f 68 6a 4a ec 64 f3 62 44 ef cb bd 7e da 23 8f a4 f5 d2 4b 2f 5b fd f8 5d df 57 75 77 76 36 c5 be 26 c2 31 1a b8 77 23 f2 f3 aa b1 93 df 7f da 23 db 0b e8 ad 5d c6 82 f2 d3 52 ed 1a b8 cd c1 62 e0 7d fc 3f c8 e0 45 dd fe 9b ca 95 e9 6a 8a 5d 0b 64 f1 48 0a 08 59 1c df d9 12 fb 60 b9 8a 32 a4 aa af ce bf b6 c3 3c 7f 01 8e 71 a2 66 d8 5e 2e 77 dc 11 ac 3e ce fb bf 1a 70 3e aa ff a6 0a 88 3c 63 95 af 14 62 ee c3 c7 d7 4c ef 4f a7 de 20 42 ba 4a aa 7e 59 0a 78 6f 7c 7c fc 1d 7b 52 7b bf 8d ea c2 07 8f 4b b4 9c f9 6c f2 f0 52 c8 8e 84 84 52 f2 ff 88 49 d1 b7 Data Ascii: _8w<3Mg8P&!YLuMTI[!U W3!:FT_^ohjJdbD~#K/[]Wuwv6&1w##]Rb}?Ej]dHY`2<qf^.w>p><cbLO BJ~Yxo\|\|{R{KlRRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	54698	182.140.225.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:17 UTC	739	OUT	GET /it/u=1516704641,3495705331&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f108_108 HTTP/1.1 Host: gips0.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:18 UTC	499	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 9130 Connection: close Expires: Sun, 24 Nov 2024 07:38:13 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: f40cdc7c4c29a256b28efec86f182172 Age: 8329 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:38:13 GMT Ohc-Cache-HIT: cd5ct62 [2], xiangyix125 [2] Ohc-File-Size: 9130 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:18 UTC	9130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 6c 08 06 00 00 00 8f 66 57 cd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 23 01 49 44 41 54 78 da ed 7d 6d ac 66 d7 75 d6 f3 ec 33 33 fe 8a ed eb a2 42 03 a4 9e 54 20 55 15 52 a6 89 1a 8a 84 f0 4c 14 04 94 d0 4c 8a 62 47 95 88 3d 89 2b 04 4d e3 71 a3 da 25 10 e6 3a a5 8d e2 50 cf d8 6e 89 a1 89 67 ec 38 fc 48 05 9e 88 0f 01 7f 32 fe 87 d4 20 3b 48 fd 03 22 9e b4 52 62 61 c0 13 d2 e2 f1 cc 3d fb Data Ascii: PNGIHDRllfWgAMAasRGB cHRMz&u0`:pQ<bKGDpHYs#IDATx}mfu33BT URLLbG=+Mq%:Png8H2 ;H"Rba=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	54717	185.10.104.109	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	771	OUT	GET /6ONXsjip0QIZ8tyhnq/it/u=3779990328,1416553241&fm=179&app=35&f=PNG?w=108&h=108&s=E7951B62A4639D153293A4E90300401B HTTP/1.1 Host: ss1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:18 UTC	517	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 2459 Connection: close Expires: Wed, 20 Nov 2024 03:17:38 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: be99bba9643c1ff5d281120dc3d9f952 Age: 375040 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:17:38 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:18 UTC	2459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 6c 08 03 00 00 00 b8 b8 a7 ff 00 00 02 43 50 4c 54 45 00 00 00 ff b8 56 ff 66 00 ff 73 12 ff a2 55 ff 74 14 ff 68 03 ff 72 0f ff 86 30 ff 67 01 ff 66 00 ff 67 01 ff 6e 0c ff 68 00 ff 6a 03 ff 85 33 ff 67 00 ff 67 01 ff 67 00 ff 67 00 ff 68 03 ff 69 02 ff 6f 0d ff 68 02 ff 67 00 ff 8a 3a ff 67 00 ff 68 02 ff 8c 3f ff 87 36 ff 8b 3d ff 67 00 ff 6a 06 ff 69 04 ff 67 00 ff 69 02 ff 8a 39 ff 71 11 ff 6c 05 ff 92 49 ff 7a 20 ff 69 04 ff 8e 43 ff 68 03 ff 73 15 ff 68 03 ff 6e 0e ff 67 00 ff 97 51 ff 7e 27 ff 66 00 ff 98 52 ff 67 00 ff 94 4c ff 67 00 ff 68 04 ff 68 02 ff 76 1a ff 84 30 ff 66 00 ff 69 06 ff 8f 44 ff 89 39 ff 67 01 ff 73 15 ff 8f 44 ff 96 4f ff 8c 3d ff 6b 08 ff 99 52 ff 8f 42 ff Data Ascii: PNGIHDRllCPLTEVfsUthr0gfgnhj3gggghiohg:gh?6=gjigi9qlIz iChshngQ~'fRgLghhv0fiD9gsDO=kRB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	54716	185.10.104.109	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	770	OUT	GET /6ONXsjip0QIZ8tyhnq/it/u=423474926,1801248814&fm=179&app=35&f=PNG?w=518&h=136&s=ADFEEB16D210A1925C7BF2EA0300E03E HTTP/1.1 Host: ss1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:18 UTC	518	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 43887 Connection: close Expires: Wed, 20 Nov 2024 03:17:37 GMT Last-Modified: Sat, 03 Jan 1970 00:00:00 GMT ETag: c14acf8c77081b8c05958805fb4ff6f8 Age: 375041 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Mon, 21 Oct 2024 03:17:37 GMT Ohc-Cache-HIT: fra01-sys-jomo7.fra01.baidu.com [2] Ohc-Response-Time: 1 0 0 0 0 0 Timing-Allow-Origin: http://www.baidu.com
2024-10-25 11:28:18 UTC	15866	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 88 08 06 00 00 00 9c 1a 23 21 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 7b 9c 24 db 51 1f 88 7f e3 9c cc ca ac 47 77 4d f5 ed 52 a9 9b 99 a5 85 87 de 65 c6 06 d6 03 02 f1 d9 35 b3 7e b1 60 6c c0 06 f1 da 9f cd c3 fe 99 97 2d 64 16 0c bf 05 ae 2e 16 6f 6b 41 20 8c 04 16 2f e1 bd 46 a0 c5 80 2d 5e 6b 33 2c c6 f6 35 1a de 3d c0 78 6c 5a 74 ab 87 52 4f 4f 4d 75 d7 23 b3 32 4f c4 ef 8f cc ac ce aa ca 7a 57 cf 9d b9 f7 c6 e7 d3 93 Data Ascii: PNGIHDR#!gAMAasRGB cHRMz&u0`:pQ<bKGDIDATx{$QGwMRe5~`l-d.okA /F-^k3,5=xlZtROOMu#2OzW
2024-10-25 11:28:18 UTC	16384	IN	Data Raw: 72 06 ae cb b9 7c 9e 7b b6 2d 95 4e 47 f5 72 39 6c 86 21 21 08 28 e8 f5 74 c0 ac ec 20 d0 a1 e7 45 fe be 39 f9 3f 40 ff e7 7f fe e5 9c eb 86 81 6d 1b 47 29 b6 73 39 03 db 96 9e 65 49 a5 d7 43 af 50 e0 cd 20 a0 5e b7 ab 10 57 9b 0d 7a 3d 8d 30 cc 65 fa 12 2e 50 fe 2f 10 7c 98 26 3c e9 a8 94 86 8b 21 8d 65 cc fd 49 04 75 5b c4 b8 d1 8e 87 c5 71 22 73 6f e6 24 7a e9 00 15 0a 84 30 24 f2 3c e5 58 96 1a a8 69 3e d5 f4 99 be 0e 7d 9e 96 db 7d 55 d0 97 53 8b f1 bf 60 59 c2 49 86 33 63 10 c6 c1 3f a8 54 e4 6a a5 12 55 73 7b e6 19 6c 9e 9c e0 a1 ef 93 8a a3 73 5d d7 e5 73 bf ec 0c f4 cb f9 77 f9 2f f9 92 7f 9f dc 66 e3 c5 07 7b e8 8a 76 67 46 d3 f7 20 cd ae 6d 33 7b 1e 33 91 e1 30 e4 4d cb 1a 54 0a f6 f6 a4 ef 3e 18 52 0a 26 25 b3 49 c3 1d 00 d7 8a 45 11 40 24 08 Data Ascii: r\|{-NGr9l!!(t E9?@mG)s9eICP ^Wz=0e.P/\|&<!eIu[q"so$z0$<Xi>}}US`YI3c?TjUs{ls]sw/f{vgF m3{30MT>R&%IE@$
2024-10-25 11:28:18 UTC	11637	IN	Data Raw: b9 54 02 ca 65 da 00 08 3f f2 a3 bf 84 42 fe 63 10 86 d1 b1 af 81 7c 0c 43 3e d1 30 8c fe ba dd 48 41 28 16 08 a5 d2 67 e1 47 7f 6c c7 fe 9c cf fe 4b 5b 6b 6b d8 3f 3e 46 67 6f 0f d7 92 a3 81 89 95 e0 e6 4d dc d9 db 53 d7 5a ad 68 51 b2 ac 22 2c 7c 34 9c dc 47 a3 54 7a 43 f5 5f fe cb 00 41 f8 01 04 bd df 30 8f ce 7e b6 fd a6 6f 78 ef fa e9 a9 69 00 d8 6c b5 e4 61 aa b7 8f cb 65 70 b3 89 2d c7 91 fb 9e 47 97 01 a0 56 c3 55 00 fb 31 23 0a 88 ab fa e1 5c 11 82 65 51 3e 97 a3 e3 76 9b c8 f7 a9 f8 d9 9f 5d ce ff b5 bf f6 46 e4 f3 7f 1d b9 dc 87 81 68 b0 74 a1 31 11 bd 86 01 13 5f 99 07 95 c4 69 f3 5b a9 73 a5 2a f9 b3 34 a0 35 41 eb 22 0a f9 8f 54 85 fc 47 aa 4a e5 4b d7 ff cd bf 09 11 9a 43 f4 fc f7 a1 71 fa 73 cd af fb 9a 9f e3 56 4b ea be 4f 41 bb 4d 97 5b Data Ascii: Te?Bc\|C>0HA(gGlK[kk?>FgoMSZhQ",\|4GTzC_A0~oxilaep-GVU1#\eQ>v]Fht1_i[s*45A"TGJKCqsVKOAM[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	54718	222.216.122.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	739	OUT	GET /it/u=3009418490,2083960104&fm=3028&app=3028&f=PNG&fmt=auto&q=100&size=f110_108 HTTP/1.1 Host: gips2.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:19 UTC	485	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 9122 Connection: close Expires: Sun, 24 Nov 2024 07:29:57 GMT Last-Modified: Sun, 04 Jan 1970 00:00:00 GMT ETag: 168e80f200824fe8edc80ffc7db7b0ce Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:29:57 GMT Ohc-Cache-HIT: nn7ct60 [1], xaix230 [2] Ohc-File-Size: 9122 X-Cache-Status: MISS Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	9122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 6c 08 06 00 00 00 8b 93 87 f0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 22 f9 49 44 41 54 78 da ed 7d 6b 8c 5d d7 75 de f7 ed 73 87 22 25 2b 1a 45 68 e1 a0 b1 35 8a 65 c3 b5 9c 8a 6a d4 c4 8a 6d 88 74 d3 06 71 5a 98 42 db 1f 41 5b 93 ca 0f a3 40 81 8a 72 2a bb 28 8a 90 fa d3 a0 36 1c d1 7d fd f0 0f 93 42 d0 04 4d d2 ca 36 0a a3 6d ac 0c 65 f9 21 a7 49 4c a6 76 81 18 42 39 6a dd c4 b5 a2 72 f4 Data Ascii: PNGIHDRnlgAMAasRGB cHRMz&u0`:pQ<bKGDpHYs"IDATx}k]us"%+Eh5ejmtqZBA[@r*(6}BM6me!ILvB9jr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	54719	222.216.122.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	739	OUT	GET /it/u=2270825998,2079407586&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2520_474 HTTP/1.1 Host: gips2.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:19 UTC	488	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 625636 Connection: close Expires: Sun, 24 Nov 2024 07:37:57 GMT Last-Modified: Sun, 04 Jan 1970 00:00:00 GMT ETag: 276b90ee4fd8076e921e0600bc128a6c Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:37:57 GMT Ohc-Cache-HIT: nn7ct50 [1], csix94 [2] Ohc-File-Size: 625636 X-Cache-Status: MISS Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	15896	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 d8 00 00 01 da 08 06 00 00 00 19 d2 b9 d7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 80 00 49 44 41 54 78 da cc fd eb b6 ed c8 8e 1e 06 02 9c 73 ad 9d 99 e7 9c ba 58 96 4a b2 7c 19 2d 5f da 63 b4 fd d3 7e 96 7e 87 7e 06 f5 d0 fb da 5d 72 a9 ea 9c cc dc 7b 4d a2 7f 30 80 f8 f0 01 41 72 ed 4c 55 37 73 ec 5c 9c 64 5c 10 08 dc 03 8c d0 5f ff 5f ff 4f 93 ef bd 54 45 ec ba ba aa 8a dd 28 f7 fd 60 7c b2 7d 15 91 Data Ascii: PNGIHDRgAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATxsXJ\|-_c~~~]r{M0ArLU7s\d\__OTE(`\|}
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: f1 bc aa a0 5b b5 a3 72 dd c7 aa cd d2 ce e2 59 3e 4a 4f a6 df 06 36 ca 64 7f 97 57 a3 1c 7c b1 af 20 2b 7d f1 c2 b3 bc 75 34 e8 8b 0e b1 d5 3f 8e df 90 f7 26 8c 93 f6 2a 70 6e a0 ba c1 9a 47 47 b2 89 17 f1 ae 94 5d 29 df 94 69 db c1 67 67 3c 7e 97 ff 9b b2 da bd a7 b2 18 8c 46 a4 fa 90 8a 4e 91 9e ff b1 fe 5d fb 60 cd 80 bf dd 70 bb 7a 76 c9 2f 57 06 0d bf bf 19 be 6b 8c c0 f6 2b dd 14 38 06 ef 0a cb 24 75 08 86 46 72 74 55 c8 73 cb c8 08 f9 7c a5 ff 5b 24 ce b2 c9 fe 60 a1 d0 e9 ff d4 f9 a2 ed 6e 02 7b e5 93 82 b5 da b5 7b c2 43 da fc 58 7c 91 c2 f8 4d 5f 0f 36 66 d1 e5 d0 bb 39 fa 67 be 56 6b a2 f3 77 c7 0b 37 23 7e c5 00 c8 6f 12 c2 86 bc 29 ad 52 30 be 2c 9a 29 3d 2b ab 1d 60 3f 8e b2 69 11 99 02 a4 ac eb 02 be 02 db 9a 1e f1 d9 d9 47 0f 01 d7 0d 19 Data Ascii: [rY>JO6dW\| +}u4?&*pnGG])igg<~FN]`pzv/Wk+8$uFrtUs\|[$`n{{CX\|M_6f9gVkw7#~o)R0,)=+`?iG
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 7a 27 bc 5b 92 3d d0 a3 9c db fc 27 79 a9 22 62 17 30 b1 e1 de 39 21 8b df 5c 7e f5 b5 db 59 7b 88 ee 94 e7 70 aa d7 57 f2 70 74 da 88 ad 6a 1f a3 98 4a da e2 1a 5f 4d e6 55 b6 4a 2b af 4d 91 ca 8e 37 3b cb c3 b1 29 03 48 51 2f b0 ff 33 6e eb 22 cd 02 4f 43 3e b7 3b 15 73 d1 d2 ce 9a a6 14 fe 9b a5 d1 ae 95 74 5f 12 f4 2a fb e7 b6 48 ff a3 7f cd 65 02 9e 26 20 87 43 c9 8b 29 b8 3b 4e 9e 21 be c7 67 e8 05 f1 a1 ce 4a ff 12 0a c1 cf 5f f1 2a 7b 3d 19 87 64 73 43 a9 de 7e 99 85 f3 17 78 64 93 94 45 55 03 9a f1 89 21 39 55 b3 65 1a cc 25 07 20 4f 66 16 00 34 ea ce 3f 6c fa ec 66 a7 5b 40 28 98 b5 8b b6 4e e4 68 22 40 ad 32 38 e9 18 91 46 f4 93 1e 6c 8c e4 12 73 6a 74 35 e3 c6 4a 01 f8 d5 d9 72 8b 71 7f c6 76 39 47 52 1d 5b 29 c6 63 a0 8f c6 40 9a f8 fb f4 b7 Data Ascii: z'[='y"b09!\~Y{pWptjJ_MUJ+M7;)HQ/3n"OC>;st_He& C);N!gJ_{=dsC~xdEU!9Ue% Of4?lf[@(Nh"@28Flsjt5Jrqv9GR[)c@
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 8a cc 85 f0 62 43 67 59 8a be 59 81 2b 21 68 d0 fa ca fe bf 1d dc ea f4 ff 09 de 97 3a 52 9b a7 0b 7d 4b 2e 14 2f ee f3 0e a5 2b fb 5f 43 ff b3 ff 6f 33 41 4c 33 44 69 de 58 5e 9f f2 76 a7 37 d9 c6 20 fd 6f b9 6c cf 0e a4 ff 65 a1 ff 05 92 cc 86 6c b4 c7 76 24 7e 18 1c 61 99 ec 5a 42 5c f9 98 25 43 e1 b6 b0 ef c6 a6 29 21 c3 c4 77 89 aa 89 8e ee 73 a3 8c a1 d8 9e 42 87 c3 d9 d7 e7 f3 48 aa da f3 ee 7b 11 7f f0 44 04 b3 23 31 ce 63 55 34 7d 1a 7a 00 79 dd f9 66 d6 9b f1 c2 4d 9c e6 9d 1d d5 ed d5 6d f8 3f 98 e4 c7 6e ab 8f e1 ed ed 88 7c be 5e c5 8e 49 27 3b 04 18 d3 df 8d f8 98 ef 32 67 36 77 20 2b 3e 05 cb 25 ff bd 93 ec 21 1a 0c 5b 93 68 c1 f5 6c ec 5e 27 62 af 97 d8 ff ed 7f 3c 8a 7c fd 59 e4 f5 55 e4 db 9f 45 c7 0e 7d fa 7c 1b c9 75 6f a2 8f 2d 90 66 Data Ascii: bCgYY+!h:R}K./+_Co3AL3DiX^v7 olelv$~aZB\%C)!wsBH{D#1cU4}zyfMm?n\|^I';2g6w +>%![hl^'b<\|YUE}\|uo-f
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: b9 07 2d 2c f0 27 c5 3a 99 3f ef 38 1a 83 38 17 62 00 8d ef 79 e5 5a ef 14 0b d2 c1 64 62 c4 a9 ac e4 94 1c 36 d7 d3 22 fa 2c 49 78 7a af 52 45 c3 ca 36 c2 76 a9 4e e9 ea 5e e7 e6 72 11 57 aa 9b 57 dc df f8 9a c4 60 ff 67 a0 c1 06 24 d5 ed be b8 1e cd 3d 81 32 e4 fe 3d 0c 2a bc 75 8b 8b 48 4a c3 f3 68 d8 6c 27 b4 31 2c b8 97 ed c0 3e 69 0e e5 16 81 4e f6 76 6c 87 5b d9 6d 24 83 7d 6e c1 a7 74 4c 90 9b 48 b7 1b d1 cb 0b f1 f3 11 e7 97 29 b6 65 cf 54 ff 6d 60 8a b1 d9 70 d6 51 e2 e9 ec b2 10 b6 a7 8b 28 cc 66 9f 05 bc d8 ec 0a f9 6e 7c 33 52 b3 f1 d8 a5 6a 7f c2 d4 27 be 42 59 b1 47 e2 e3 02 9c 34 f4 8e 7e d5 bc 19 16 99 1b 9d aa 8c 66 9b 1c 4c 1b 51 8d 00 a6 91 5c 67 cd 0b d1 f3 41 f2 0f ff 48 fc 72 27 fe f3 1f 89 75 f7 ba 4d 88 5e 3f 11 7d 7a 1b 3b 5a dd Data Ascii: -,':?88byZdb6",IxzRE6vN^rWW`g$=2=*uHJhl'1,>iNvl[m$}ntLH)eTm`pQ(fn\|3Rj'BYG4~fLQ\gAHr'uM^?}z;Z
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 23 c1 6a 8f 70 72 21 32 58 17 ef 17 4a 35 a1 4d f1 cb d6 59 92 7f 59 4e a8 8d 12 e2 4d 33 19 53 f6 72 12 23 11 8f e4 29 62 e2 cf 9f 88 9e ef 60 c7 c2 ee 58 00 3b 91 cc e3 58 89 f0 ed 82 6c a1 e1 58 62 f0 bf f1 43 89 28 ec c6 25 78 af b3 94 e6 f0 99 49 6c 47 c0 e9 57 ee 4f 92 bf fd fb 79 34 ec bf 12 ff f2 97 b1 2b 18 cb d8 b5 ee d3 dc bd ee f6 32 12 14 b7 86 46 f5 18 57 66 0a 47 52 68 b2 d4 0e f0 3f 84 84 9e 8e 4f 12 1a 49 66 da c6 4e 2c 20 00 f6 b9 f3 dc 6d ce ad 26 2e 6d 32 92 de 9e 3c 8f 63 dd 88 b6 3b d1 db dd ef 6d b7 d1 c5 6d 26 3b ee 9b 1d ad 4a cf 7d 24 a7 31 5b db 76 64 ec 9d c6 0e 76 db e6 3b db 3d 79 26 d7 c9 4c b8 bb f9 b8 6f f3 4f b6 31 9e e7 6c df 8e 89 a5 79 9c 2c 8f b1 92 8c b2 8f 39 3f 42 33 69 70 26 fa 3d 27 7d ec 44 42 1b 09 8d 5d ec 58 Data Ascii: #jpr!2XJ5MYYNM3Sr#)b`X;XlXbC(%xIlGWOy4+2FWfGRh?OIfN, m&.m2<c;mm&;J}$1[vdv;=y&LoO1ly,9?B3ip&='}DB]X
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: ca f3 b1 b0 fe e3 82 3c 46 d0 3a d8 8b 58 ec ec 38 02 fd af 45 94 64 e7 3f 36 77 e8 a7 a1 1d a9 36 c3 fd 36 74 fb be c3 bc b1 c9 01 d4 ff ee 83 b0 cb a5 16 e8 c6 9f d3 44 37 34 9c 4c 96 4b 55 35 22 be 83 9a d1 30 1e 99 38 f1 f0 e9 d3 78 fe 7c 52 32 46 29 24 ff 68 9b ab 17 de d0 78 c2 85 8b ce ef 16 f2 f1 1c c5 b5 18 f0 1d c6 36 e2 07 c8 3d 22 3b ed f7 3b f1 3f fe 33 6d 3f fc 89 f8 cb 5f c6 ee 75 b4 93 bc be 90 bc bd 8e 04 98 fb 0b f1 36 8f 59 dd 36 2a 88 63 98 6b 85 67 9f 70 6a 32 9b fe 7e ca fc 3d ea b1 3e 93 27 85 44 9e 4d 68 24 99 8d 0f ba c9 d8 99 8d 06 8a c7 7d 1e 09 67 78 0c 30 43 fd ed 41 63 d7 39 45 db 6d d4 b9 c9 c0 87 11 f4 4c ec da e7 ef 7d 9f 47 c6 6e be 23 1d 4f 58 f4 88 db e7 36 c6 bb cf 79 91 27 8d 64 c1 89 ff 8d 7c fc 34 cb 3c d9 e1 79 0a Data Ascii: <F:X8Ed?6w66tD74LKU5"08x\|R2F)$hx6=";;?3m?_u6Y6*ckgpj2~=>'DMh$}gx0CAc9EmL}Gn#OX6y'd\|4<y
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: be ff 9e 68 1e 7b 5b 74 7f 51 89 ea 74 a2 af e5 5b 3d da ce 2f 00 9e 1d b5 ce f3 38 61 9e b2 11 6d 13 49 40 86 84 5d 86 e7 ee 9f 0d b4 f1 3c 6a 57 c6 ce 94 41 d6 e9 8e 6d 28 fb 36 c0 17 c7 be 45 e1 cc fa 53 a0 89 41 90 e3 a7 eb 8f 22 5f 51 57 33 d0 80 e1 c6 f5 a0 3c 1e c4 f7 1b d1 fd 6e c9 26 61 77 a1 69 3b e8 3d 5b 80 9f 38 d2 9d fd 82 f5 31 e7 c1 51 c8 a6 c7 f1 37 33 0f 99 94 c8 43 c7 ee d8 6e ec ce ee 17 f8 b0 92 70 d9 5d dc de e1 a6 dd 06 04 34 b9 8c 0f 93 fe 94 d4 36 da 9a 3a 45 ab fe 3a b8 74 be b9 2d 14 db 30 be 58 19 d1 19 c0 6c 58 e7 f2 d9 07 ca 3e 94 0d a8 ca 81 40 9f d9 fe 4f 74 8b 63 3b 4b 7e 6c e2 10 d5 6c 91 d4 07 2d 7c b3 0f 5c bf e1 82 f1 e1 42 7a f7 0c 71 97 e5 2e a7 67 d9 ff 37 db 8a c0 04 04 fd 21 e2 b6 a9 23 ab c4 04 30 66 c9 1d 9d 5b Data Ascii: h{[tQt[=/8amI@]<jWAm(6ESA"_QW3<n&awi;=[81Q73Cnp]46:E:t-0XlX>@Otc;K~ll-\|\Bzq.g7!#0f[
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 85 81 e2 7a 9d 6d 80 45 5b 84 b7 b8 2b 5b 2a 9f 7f 66 fb b3 70 e1 43 fb c1 e0 13 04 bb 21 cf dd 99 af 75 29 fe 7f f6 48 8e 4a 8f 17 59 96 05 38 90 e2 3e 54 c7 c7 9b fc f4 40 5b 83 2e b9 a8 c3 c4 3e 7e 32 62 57 0b e4 ca 36 1a 33 b3 b5 da 19 38 f8 ff 87 f8 cc 34 11 1c a2 88 41 96 61 1e 5c 49 03 03 cb 2e f6 95 1a 1c 4a f0 84 64 e3 6c ff 17 f1 00 4f 6a 0c b8 3d a1 ad e2 83 a3 f8 7a f8 68 5f 72 85 0f 9e 12 56 59 52 86 0f 97 42 f2 e9 d5 8e 10 ec 7a 43 7f f8 fe 86 a7 ce d1 c3 fe bf 1c f2 0b e3 05 c8 3b 21 c6 86 3d 41 12 cc 1a 42 d3 a1 ae 7f f2 71 e3 23 76 3f 76 3d 1c 76 4c d4 27 91 ea a2 7c f6 53 60 24 b5 dd f5 62 dc 3d 6a 58 0b 9c 70 ce a4 13 73 42 93 4f 36 10 54 86 5c dd ff 67 f2 e5 84 63 ae 7f 30 cd 39 86 40 8d e1 f4 fa 9c f5 ff 3c 10 91 59 34 a0 18 f0 6a 14 Data Ascii: zmE[+[*fpC!u)HJY8>T@[.>~2bW6384Aa\I.JdlOj=zh_rVYRBzC;!=ABq#v?v=vL'\|S`$b=jXpsBO6T\gc09@<Y4j
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 92 40 6f a1 7f e0 25 5d 3e b8 5e be bf b7 9d 3e 03 78 84 9f e5 47 f1 63 1c 42 cf 72 58 53 b6 8d 12 12 ac f9 71 5a 81 58 6c ab 27 49 f3 6e 78 86 4b 13 33 42 f5 fd d7 be 03 af 2f 4e 06 88 3d d1 4f 1d 3a 9a 70 1f 16 f0 ad 6c de f9 ce 7d 0c 0d 38 05 e3 78 f2 0f c9 2e 5a e9 81 d2 27 48 be 82 c3 5e f9 74 82 49 3f 2b b7 a7 45 fb 45 1f cb 67 98 db 2f 23 41 5d 86 b9 5c 31 5e d0 58 94 9f 4d 3e b7 e9 56 9a 9f e0 a3 11 01 64 9f 3b af 33 85 24 f3 c2 ff 7b d0 01 38 5c 94 af fc ff 9f e3 3a e8 32 4e 6b 15 b3 91 79 9a 82 4d 3b 12 7a 66 db 6d 05 c8 82 66 b3 dd 5f d9 8b 4b 07 92 8d ed 79 c0 ec 1d 54 b4 2c c1 b8 cf b4 4f ef 98 2f a7 c5 fc 28 b0 a6 23 4e ad 6b f3 ff 03 9e 12 7d eb fc a1 e1 f8 b0 eb 68 42 0b d4 e6 57 ab 04 86 44 77 67 47 c3 5e ea 92 86 7e 64 cf f2 d4 7a 32 23 Data Ascii: @o%]>^>xGcBrXSqZXl'InxK3B/N=O:pl}8x.Z'H^tI?+EEg/#A]\1^XM>Vd;3${8\:2NkyM;zfmf_KyT,O/(#Nk}hBWDwgG^~dz2#

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	54728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112818Z-15b8d89586f5s5nz3ffrgxn5ac00000000zg000000009f6z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	54729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112818Z-17c5cb586f6tq56f8fz96wddtg00000002fg000000009hbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	54732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112818Z-16849878b78s2lqfdex4tmpp78000000095g000000007d72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 11:28:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	54730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112818Z-16849878b78k8q5pxkgux3mbgg0000000950000000003zve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	54731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 11:28:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fef44d2e-901e-007b-639e-26ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T112818Z-16849878b78s2lqfdex4tmpp78000000092g00000000dwns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 11:28:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	54726	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	640	OUT	GET /r/www/cache/static/aladdin-san/app/news-common/img/vip-3_69137a0.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:18 UTC	882	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 524 Connection: close Expires: Wed, 16 Oct 2024 04:08:05 GMT Last-Modified: Fri, 11 Oct 2024 03:35:09 GMT ETag: "9abe25229c3806267ceeaeea75bde1c3" Cache-Control: max-age=31536000 Age: 376860 Accept-Ranges: bytes Content-MD5: mr4lIpw4BiZ87q7qdb3hww== x-bce-content-crc32: 3637588546 x-bce-debug-id: RY6jEG66/JqFDfDs31wRPwiK9ml02XHopvinf73deH25k9uU/2Nxz6iT65HXpQJAygno5ooOZs1Ir/OIdptziQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: efb78e8e-9139-4f9e-bc81-af92987152c4 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 13 Oct 2024 04:08:05 GMT Ohc-Cache-HIT: fra01-sys-jomo0.fra01.baidu.com [2], zhuzuncache62 [4] Ohc-File-Size: 524 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:18 UTC	524	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 03 00 00 00 0c ee 5e 90 00 00 00 7e 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b8 20 ff ff ff ff bb 2a ff e1 a0 ff cc 5f ff d3 77 ff f7 e6 ff e9 ba ff ca 58 ff c2 40 ff f7 e8 ff b9 24 ff c0 37 ff fa f1 ff e4 ab ff f9 ee ff e3 a6 ff c7 50 ff fc f8 ff f8 eb ff f3 db ff d8 86 ff f6 e5 ff ed c7 ff de 98 ff dc 92 ff d0 6c ff c3 45 ff c3 44 4c e7 ec 76 00 00 00 0d 74 52 4e 53 00 f3 e9 e2 d9 bf 8c 85 76 53 3c 08 a8 95 02 3a 43 00 00 01 30 49 44 41 54 28 cf 85 53 d9 92 83 30 0c 0b e5 28 47 a3 00 2d 14 28 a5 c7 de ff ff 83 ab 25 21 81 ed 0c e8 05 1c 8d 15 5b 76 84 43 1a 85 81 e7 05 61 94 8a 17 64 f1 0e Data Ascii: PNGIHDR^~PLTE *_wX@$7PlEDLvtRNSvS<:C0IDAT(S0(G-(%![vCad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	54724	58.42.14.38	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	739	OUT	GET /it/u=2219169068,4009499954&fm=3028&app=3028&f=PNG&fmt=auto&q=75&size=f2000_474 HTTP/1.1 Host: gips1.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:19 UTC	498	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/png Content-Length: 516024 Connection: close Expires: Sun, 24 Nov 2024 07:30:32 GMT Last-Modified: Mon, 05 Jan 1970 00:00:00 GMT ETag: 79dfbee399a50c4da5100a9bb1dbea0b Age: 2683 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 25 Oct 2024 07:30:32 GMT Ohc-Cache-HIT: gyct54 [2], wzix102 [2] Ohc-File-Size: 516024 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	15886	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 01 da 08 06 00 00 00 58 73 d2 25 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 80 00 49 44 41 54 78 da d4 fd e9 92 24 cb 92 1e 88 7d ea 91 99 55 75 ee d2 0d 80 40 a3 81 01 04 c3 c1 0c 87 c2 f9 3b 7c 16 be 03 9f 61 44 e6 75 09 72 1a dd 7d 97 53 4b 86 2b 7f 98 a9 ea a7 6a 6a 1e 91 75 2f 28 c2 38 52 27 23 dc 6d d5 7d b1 45 be fd 3f ff 1f 8a 9f fc 88 08 54 1f 57 7f b6 5c 7c 14 80 fc 75 c6 a1 0a 88 b5 f5 Data Ascii: PNGIHDRXs%gAMAasRGB cHRMz&u0`:pQ<bKGDpHYsIDATx$}Uu@;\|aDur}SK+jju/(8R'#m}E?TW\\|u
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: de b0 b6 e6 31 ea e0 85 53 66 e3 0a 20 47 7c 37 79 4f b0 71 3d c3 fd 27 fb 62 cc 2f 9d ba c2 70 30 08 b5 0b fa aa 0d c0 ba 8c ff 5e e9 ff c6 66 68 f5 7f e1 13 d7 ff 65 61 54 5b 67 43 ef 5a 86 e0 75 36 b6 9a b7 95 e5 44 2e c7 fc af b9 ef e4 61 11 ff d7 31 9f 3b 98 14 18 a7 4f f5 bf 7b 2f 2e e1 d5 d9 ab c0 23 e1 99 fa 63 3d e8 62 82 e4 22 eb 51 f6 a5 85 78 a2 f9 f4 71 64 e2 e3 25 ce c8 36 4d 25 38 c1 0a b4 78 bc c6 30 a6 ad 68 2d 93 49 e0 f6 a3 94 e6 d9 26 ae 5d fa 30 d7 18 c3 7e fe fa 74 d9 0a a1 1c 77 36 7b 6f f5 e5 d7 f8 ca 28 ef 54 d2 2c f2 f3 dc 91 e1 87 7e 6b d3 a4 e1 a7 c6 d2 56 b7 d1 72 13 a3 4e 94 0e f9 c5 df 03 43 e3 af df 89 8e f5 74 3b 86 9f dd 75 ce 78 76 f8 70 be 8e 90 58 d7 b8 04 7b 44 0c c0 6c fb 8a 8b a8 18 93 16 b9 28 7b 89 5c e9 bf 77 b8 Data Ascii: 1Sf G\|7yOq='b/p0^fheaT[gCZu6D.a1;O{/.#c=b"Qxqd%6M%8x0h-I&]0~tw6{o(T,~kVrNCt;uxvpX{Dl({\w
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 96 23 fd 58 ae c6 b0 0c ff a9 3c cd 28 73 04 31 f0 bf aa 18 78 7a 9d 51 11 02 66 29 9f 04 99 9b aa 58 43 d8 35 58 c4 f5 34 ca 4c 60 ec 76 68 b9 e1 4d c9 cb 1e 68 9a 8d 74 b5 31 94 3a 1b 42 cd 3b b8 aa 39 a9 85 21 a2 ef 35 78 5c ca d1 6e 8a 7a 2f 39 2f 18 a8 2b 96 16 8c b0 d1 cd ab b6 3e f8 49 f7 7d 93 5c 68 37 47 74 f5 37 6d 56 8a db b7 26 db 76 8a 78 f3 a7 ab c2 22 18 51 30 3f e1 83 c7 97 9c 86 6e a2 e2 c6 4c ba ab 84 92 3e e2 e5 e6 73 c6 b3 d3 5e d0 7c ac a4 24 43 73 36 c4 0e af b7 eb 9d 94 e3 c8 6b c0 8a fc 94 70 a6 8a 91 ef bc d6 f1 7f 9a 11 7a fe cf 7c 9a cb 97 41 c8 45 1b 2d ff 63 6d 53 eb d8 18 b6 f3 0b 0f c7 bf 13 30 97 00 1f c1 b5 3a 90 ad 1f 55 15 fe e6 1d 4a db 8f 92 9b 5d 39 a1 77 6c 74 b4 5e e4 d2 20 3e fc d9 39 33 d5 39 73 47 ae c0 b5 53 fe Data Ascii: #X<(s1xzQf)XC5X4L`vhMht1:B;9!5x\nz/9/+>I}\h7Gt7mV&vx"Q0?nL>s^\|$Cs6kpz\|AE-cmS0:UJ]9wlt^ >939sGS
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 7b ed 73 ca f9 6a 52 b3 48 37 fc d6 fc 74 0c 89 70 9a ba b6 0e 53 88 d2 69 21 21 68 fb d1 06 67 53 ff 3f b3 18 d3 13 ff 99 cf dd 0e 4a fa 3f 45 39 3e a0 ff 97 4e 0b 92 6a b9 aa ff 05 bd 40 e9 da d4 b5 0b 94 aa 0b 8f 98 d1 26 a5 99 8d 33 52 75 f4 95 23 c7 cd b0 4d 4f 7d 25 7e ec 92 d6 fc e3 92 c5 3a 67 a7 08 ee 2a 33 fc 35 71 e2 b2 48 27 ca a4 bf 06 0f 0e 16 30 63 ac 13 28 e5 51 18 18 b8 d2 eb eb ab e7 3d 00 b3 94 a5 e1 c2 f8 b3 d2 4e 92 51 c9 44 09 7b df 5b 27 dd b7 2c b2 66 bd e7 df d7 63 71 bd b5 46 ff 4b d7 3f 97 5a 6c db 90 f7 11 44 5b e7 ce fe 4f 4c 60 fa 12 27 f3 3f c8 6e a5 fb 84 ab ff 9a 78 4c f3 3f 34 ef 6a ff 5a 65 5a 76 d6 ab fe 1a 65 4c ee 5d e9 e1 ec b7 7b 5d db 39 58 12 e2 5c cb 25 df 4c c8 d8 98 58 77 34 26 d2 a8 7f e6 76 53 80 5b 31 93 77 Data Ascii: {sjRH7tpSi!!hgS?J?E9>Nj@&3Ru#MO}%~:g*35qH'0c(Q=NQD{[',fcqFK?ZlD[OL`'?nxL?4jZeZveL]{]9X\%LXw4&vS[1w
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 0e 89 8c f6 3d 27 ce f3 6e 19 83 6c dc b3 78 40 6b 58 c9 78 29 25 f0 78 d7 df 6e ed 68 68 dd 1f c9 ce 1c d8 ab d4 75 3c 3d 06 41 9e 04 f1 11 62 55 03 af 4a 0d fa c2 4b 56 64 d9 3f d9 32 af 74 1c 5e 2e c0 f5 d2 92 6a 39 d0 9a 57 b4 5b 92 bd e2 7f 87 c7 fa 49 f7 30 7b e2 5b 82 bd e3 03 b5 63 c1 83 0a 94 96 9c 73 99 1b ef 0a 87 6c fd e8 76 8c 5d d6 53 02 3b fb ad 32 e6 c9 65 70 d6 a5 4a 6d 55 c1 c1 41 39 23 79 43 72 d6 8f c7 46 fc 9b 12 61 ed 2a ba 0e f7 be 37 3a fa c3 ff 05 f2 c3 5f 20 9f 7f 04 de 3e b5 79 b9 bd 40 5f 2d 79 fe 32 76 9e fb a5 7f 12 09 0d 0a df 69 2a f6 5d 06 6e 0c 3c c3 b7 57 a3 63 bd 77 40 b1 43 b7 ce 93 b6 83 5c 1f 7e 5f 7a 4b 2c 5f 06 0e ee d7 d6 8f 5c da df 7b 6f f7 a2 68 67 c3 f7 64 f0 8e 7e ec 3a e0 bb d8 05 2d 31 ad 8a b6 cb 7c 6b 7d Data Ascii: ='nlx@kXx)%xnhhu<=AbUJKVd?2t^.j9W[I0{[cslv]S;2epJmUA9#yCrFa7:_ >y@_-y2vi]n<Wcw@C\~_zK,_\{ohgd~:-1\|k}
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: be 6f fd b8 78 a0 fd df bd c9 13 05 f4 a1 50 3b 2a 1d 1b 64 db da b1 e7 46 77 2a 3d 11 dd 77 93 db 9c 50 42 5d 1f 96 38 47 1f bb d1 a7 0e fa 7c 5c d1 ce 88 bf 00 f7 4f c0 5f ff 08 c8 27 c8 77 ff 84 cb eb 6f 00 b9 c0 17 5c 5c 36 c8 77 5f b7 29 94 11 0e 54 b1 0b 1c fb 51 e3 e8 bc b3 ef 90 5d fd e4 09 d5 1d 90 ad e7 00 c4 f9 46 38 1e 64 89 ef e0 6b 26 3b d5 93 b8 7b 20 6f e7 2d 17 23 39 fe a4 63 21 0d cb c8 fb 67 e0 c3 87 76 0d 43 e0 ff 28 23 9c 5b e8 9d 1f b7 2e 74 a2 06 86 2d ef bc 51 2c ec 1a ea 2d ee 8c 34 d0 26 33 d7 54 a0 3d d0 01 ab 02 90 fd 01 f9 f0 61 f0 a4 f9 99 59 6f fb 82 0b 7e ce ba 36 8a 8d 81 4b 89 f3 c2 f6 be fb b4 24 77 f8 ce f5 69 13 15 c9 45 18 7f ec c0 87 17 1a ec 42 49 05 9f d8 00 4c 72 35 cc 1d c3 3d 4d 28 55 4f 32 5e a9 bc 16 5d 1d f9 Data Ascii: oxP;dFw=wPB]8G\|\O_'wo\\6w_)TQ]F8dk&;{ o-#9c!gvC(#[.t-Q,-4&3T=aYo~6K$wiEBILr5=M(UO2^]
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 4a b5 c2 7d ff e2 dc 4a 9b 2f fe 96 32 44 e7 32 99 ff 83 e7 6b 53 51 d0 14 0f 2d f4 15 ef 97 2c ef 27 7f e6 73 24 ce 96 ed d4 f3 73 76 af 47 9e 87 e3 00 bd b5 43 bb 1f 8a 3e cb 16 d8 29 58 8d c0 8d 1b b2 f4 39 19 69 2d 14 09 76 0e ea a9 07 43 c8 28 b1 ba 14 04 0c 6b ac 9c 7f 2b 9a d2 f4 dd 0c 79 52 d4 5a 11 46 4c 76 4b aa 3f 0c fb 7a a2 f3 73 3b 8a 56 72 bd 89 44 b5 7c ee e8 4b 30 f1 bd b1 52 94 0f 22 43 e7 b9 f6 58 07 39 62 fe 6e a9 fe 23 3d 64 2c e7 99 28 a6 30 00 30 b1 8c 05 a4 30 b3 ac bd 89 bb 2a 9f 35 06 57 7a 34 79 9e 9e 20 a7 c1 3f b5 f0 83 e8 3a d8 36 d4 4f 66 3e 1c 30 71 b9 50 8c 64 42 58 39 91 91 9b 31 27 f1 37 57 5d f2 ff ca c0 3b c0 61 50 3b ec e5 6a 6c 32 a8 96 c2 2e 99 f4 80 c6 3a 87 60 09 0e 61 45 55 ff 88 82 f4 a0 f2 81 01 5c 7b eb f5 cf Data Ascii: J}J/2D2kSQ-,'s$svGC>)X9i-vC(k+yRZFLvK?zs;VrD\|K0R"CX9bn#=d,(000*5Wz4y ?:6Of>0qPdBX91'7W];aP;jl2.:`aEU\{
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 47 62 70 c7 ce a2 4d 12 75 ae 10 2c 8a 44 a2 01 97 09 10 6d 75 cc af 9a 4f a9 59 c8 1b d9 a0 2f 2f 71 67 65 a8 a5 45 7d fb 6d 0e 40 41 b3 43 4e 57 06 85 cc 7d 65 e3 22 d8 ff 32 55 0f 76 e6 f3 b3 1f dd be 9a ff 29 91 9e 29 39 f9 19 a5 6f be 7b 5b 21 b9 cf 32 3b c1 30 92 5f d2 76 79 ee 29 19 b6 6d ed 0e e3 d7 4f a9 63 82 09 88 47 c1 33 be 0d 67 9b 0c 3a 08 7e 38 db 23 d6 46 80 c1 70 cb fc db 7f ee 3c 9e e8 bb 29 2f b4 92 ad 25 11 3f 7c 00 fe c1 3f 82 fc ed af 81 b7 ef db 8e 52 f4 bb 81 5f 3e 00 2f 2f 90 a7 67 e8 6d 83 6e 7e ef 74 d6 71 9a 16 7c 79 e2 54 7c 27 f0 58 cd d9 61 b3 84 b9 d1 f1 06 b4 a4 ea 83 c6 ba f5 23 ce 3b de 6f 5b 3b ce fd 21 2d 5f 8c 1b 64 7b a0 dd 33 fe 68 3b a3 df 0c 34 69 cf f5 de ca 6b 9f 9b ad df 19 2e b7 06 8b d1 c4 38 e1 5a c7 dc b7 Data Ascii: GbpMu,DmuOY//qgeE}m@ACNW}e"2Uv))9o{[!2;0_vy)mOcG3g:~8#Fp<)/%?\|?R_>//gmn~tq\|yT\|'Xa#;o[;!-_d{3h;4ik.8Z
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 6c c4 b6 57 30 e9 4c d7 28 e4 94 02 ed d8 de b7 d7 d8 6e ec 68 5e 68 77 e4 ff 07 7d d0 79 6f b7 dd ed d4 f3 e4 5b 91 6e 11 f4 dc 30 e3 f2 36 eb d2 6d 03 3e 7c 68 47 b7 4f 3e 24 cd c7 b0 e7 a8 df 71 e7 77 c2 c8 c6 89 d2 58 5f 42 02 91 fe 96 6e f3 6c 5f 19 1f ef 22 2d 99 7c 6b bb d0 71 bf 03 7f ef 1f 00 ff ed df 07 fe e2 bf 00 3f 7c 0b bc fe d8 aa 3e dd fb bf 0f 90 a7 e7 56 4f a4 1f a1 ad c0 58 04 6d 63 ca f3 b0 a0 6d 85 ef 02 97 fe c3 e8 74 23 2b 57 d0 12 5d b7 8e 83 4d 5a e2 79 ec 1e df 7a de 6e f7 44 f7 b8 b7 fb 86 91 18 bf d9 fd e0 7d 72 b5 ef 42 d7 47 3f ba bc cd bb 0a 20 fb 9d fc 77 e3 8b 0e d7 b6 b5 ab 06 60 f7 be 1b 3d ee 7e 8f 38 b4 25 ed ef 37 a7 a5 bd d3 e1 9b b6 b1 d8 b1 f1 3f 02 e3 f4 81 37 6d c7 59 df b4 27 dd 93 5d 79 eb fd ec 84 77 d5 b6 cb Data Ascii: lW0L(nh^hw}yo[n06m>\|hGO>$qwX_Bnl_"-\|kq?\|>VOXmcmt#+W]MZyznD}rBG? w`=~8%7?7mY']yw
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 1f e3 b7 be 87 db 16 52 b0 bf de ef 2e 17 9b 33 05 44 c5 c9 ac b7 a7 d8 a0 83 3f fb a2 f9 4d fb 1d ee 0d 66 ed 0b 25 c4 16 06 88 25 d0 db 3f fd 8b 5f 03 7f f5 27 c0 1f fc 11 e4 f9 09 db c7 9f 45 79 f2 c5 0b f0 7c eb c7 b5 9b 7e 94 4e af 5d f3 bc bd b5 05 1a b6 e0 41 c5 c7 a6 63 09 57 ab df 13 ed c3 47 1e 73 94 fc 59 56 84 43 66 f8 7d eb 63 de 99 c7 86 9c 20 de e3 b6 b4 b7 f1 fa 3d f0 f5 d7 18 d7 16 8c 05 39 7c 55 84 fa 5c ef bc 12 86 fb d3 58 76 98 57 fc 3b fa ff 51 e1 93 6e 64 df 24 24 a4 bd ad 10 ff 7b 7b 6b fd da 7d e2 20 b0 c4 62 15 e8 3b b6 da 8b b0 18 4f b6 41 67 7e 8c 82 38 9f 04 df 82 71 cb f6 3f 01 ce be 73 36 1d 82 ac ef 3f 1e 8f b6 a0 e9 e9 be 56 af e2 bc e0 aa 8c 6d 82 aa bc 8f bf 8a d3 5e 72 00 d8 e0 25 3b 2e 98 49 a5 9f 0c b0 be 12 96 97 21 Data Ascii: R.3D?Mf%%?_'Ey\|~N]AcWGsYVCf}c =9\|U\XvW;Qnd$${{k} b;OAg~8q?s6?Vm^r%;.I!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	54727	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	396	OUT	GET /r/www/cache/static/global/js/all_async_search_a7be81b.js HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:19 UTC	909	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 689041 Connection: close Expires: Sat, 26 Oct 2024 11:53:41 GMT Last-Modified: Wed, 23 Oct 2024 09:10:59 GMT ETag: "a7be81bd3f3171c9624b479e2898f34c" Cache-Control: max-age=31536000 Age: 166985 Accept-Ranges: bytes Content-MD5: p76BvT8xccliS0eeKJjzTA== x-bce-content-crc32: 1149662581 x-bce-debug-id: 4+Mor96zMHp91fyCzT1URsrquznSnlmxIRSHSvXULzyRoQ9dxvIwhRD/rrDW5l82hQX5BVG2MztWfwf04godZQ== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: a21ff519-06ba-4d19-a210-b0ff2f81d2fd x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Wed, 23 Oct 2024 11:53:40 GMT Ohc-Cache-HIT: fra01-sys-jomo4.fra01.baidu.com [2], zhuzuncache55 [2] Ohc-File-Size: 689041 X-Cache-Status: HIT Access-Control-Allow-Origin: * Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	15475	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 41 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 74 2e 6d 61 63 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 4d 41 43 22 29 3e 3d 30 2c 28 65 3d 72 2e 6d 61 74 63 68 28 2f 72 76 3a 28 5b 5c 64 2e 5d 2b 29 5c 29 20 6c 69 6b 65 20 67 65 63 6b 6f 2f 29 29 3f 74 2e 69 65 3d 65 5b 31 5d 3a 28 65 3d 72 2e 6d 61 74 63 68 28 2f 28 6d 73 69 65 5c 73 7c 74 72 69 64 65 6e 74 2e 2a 72 76 3a 29 28 5b 5c 77 2e 5d 2b 29 2f 29 29 3f 74 2e 69 65 3d 65 5b 32 5d 3a 28 65 3d 72 2e 6d 61 74 63 68 Data Ascii: !function(){function getUA(){var e,t={},r=navigator.userAgent.toLowerCase();return t.mac=navigator.platform.toUpperCase().indexOf("MAC")>=0,(e=r.match(/rv:([\d.]+)\) like gecko/))?t.ie=e[1]:(e=r.match(/(msie\s\|trident.*rv:)([\w.]+)/))?t.ie=e[2]:(e=r.match
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 70 72 6f 6d 69 73 65 2f 73 72 63 2f 73 65 74 2d 69 6d 6d 65 64 69 61 74 65 5f 30 39 39 63 39 31 36 22 2c 22 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 22 3a 64 6f 6d 61 69 6e 2b 22 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 5f 2f 73 74 61 74 69 63 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 61 72 63 68 66 65 2f 75 73 65 72 2d 61 67 65 6e 74 2f 73 72 63 2f 69 6e 64 65 78 2e 6a 73 22 2c 22 70 72 6f 6d 69 73 65 2d 70 6f 6c 79 66 69 6c 6c 22 3a 64 6f 6d 61 69 6e 2b 22 2f 61 6d 64 5f 6d 6f 64 75 6c 65 73 2f 70 72 6f 6d 69 73 65 2d 70 6f 6c 79 66 69 6c 6c 2f 64 69 73 74 2f 70 72 6f 6d Data Ascii: les/@searchfe/promise/src/set-immediate_099c916","@searchfe/user-agent/src/index":domain+"/amd_modules/@searchfe/user-agent/src/index_/static/amd_modules/@searchfe/user-agent/src/index.js","promise-polyfill":domain+"/amd_modules/promise-polyfill/dist/prom
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 20 2f 67 2c 22 26 6e 62 73 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 23 33 34 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 33 39 3b 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 50 72 65 6c 6f 61 64 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 43 6f 6f 6b 69 65 2e 73 65 74 28 22 49 53 53 57 22 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 65 77 20 44 61 74 65 28 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 33 65 35 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 33 2c 43 6f 6f 6b 69 65 2e 73 65 74 28 22 49 Data Ascii: p;").replace(/</g,"<").replace(/>/g,">").replace(/ /g," ").replace(/"/g,""").replace(/'/g,"'")}function initPreload(e){function t(){Cookie.set("ISSW","1",null,null,new Date((new Date).getTime()+3e5))}function n(e,t){t=t\|\|3,Cookie.set("I
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 66 6f 72 22 29 2e 61 70 70 65 6e 64 54 6f 28 22 68 65 61 64 22 29 7d 29 2c 6d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 72 2e 66 69 6e 64 28 22 23 68 65 61 64 5f 73 63 72 69 70 74 22 29 2e 68 74 6d 6c 28 29 29 7d 29 2c 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 6a 73 76 65 72 73 69 6f 6e 26 26 22 30 30 36 22 21 3d 62 64 73 2e 63 6f 6d 6d 2e 6a 73 76 65 72 73 69 6f 6e 29 7b 76 61 72 20 6f 3d 58 74 2e 62 75 69 6c 64 53 79 6e 63 53 65 61 72 63 68 55 72 6c 28 7b 6a 6d 70 3a 22 6a 73 76 65 72 22 2c 5f 76 72 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 66 74 2e 72 65 70 6c 61 63 65 28 6f 29 0a 7d 62 64 73 2e 63 6f 6d 6d 2e Data Ascii: removeAttr("data-for").appendTo("head")}),m(function(){$.globalEval(r.find("#head_script").html())}),bds.comm&&bds.comm.jsversion&&"006"!=bds.comm.jsversion){var o=Xt.buildSyncSearchUrl({jmp:"jsver",_vr:Math.random()});return void ft.replace(o)}bds.comm.
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 6e 29 2e 68 65 69 67 68 74 28 29 29 7d 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 5f 22 29 2b 22 7c 22 2b 74 2e 6a 6f 69 6e 28 22 5f 22 29 7d 2c 77 69 6e 64 6f 77 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 26 26 21 74 26 26 58 74 3f 58 74 2e 70 28 65 29 3a 76 6f 69 64 28 65 26 26 74 26 26 58 74 26 26 28 58 74 2e 70 28 65 2c 74 29 2c 66 74 2e 68 72 65 66 3d 58 74 2e 62 75 69 6c 64 53 65 61 72 63 68 55 72 6c 28 29 29 29 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 4b 2c 46 2c 47 2c 56 2c 58 2c 5a 2c 65 74 3d 21 31 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 3b 24 2e 67 6c 6f 62 61 6c 45 76 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: n).height())})}catch(n){}return e.join("_")+"\|"+t.join("_")},window.hash=function(e,t){return e?e&&!t&&Xt?Xt.p(e):void(e&&t&&Xt&&(Xt.p(e,t),ft.href=Xt.buildSearchUrl())):void 0};var K,F,G,V,X,Z,et=!1;!function(){var e=$.globalEval;$.globalEval=function(){
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 3b 76 61 72 20 67 6e 2c 76 6e 2c 5f 6e 3b 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 73 77 61 70 5f 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 68 28 72 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 62 64 73 26 26 62 64 73 2e 63 6f 6d 6d 26 26 62 64 73 2e 63 6f 6d 6d 2e 73 61 6d 70 6c 65 76 61 6c 3b 65 2e 73 65 74 43 75 72 72 65 6e 74 53 75 67 53 61 6d 70 6c 65 28 74 29 7d 29 2c 74 7c 7c 28 62 64 73 2e 63 6f 6d 6d 2e 63 6f 6e 66 69 72 6d 51 75 65 72 79 3d 62 64 73 2e 63 6f 6d 6d 2e 71 75 65 72 79 2c 62 64 73 2e 63 6f 6d 6d 2e 63 6f 6e 66 69 72 6d 51 69 64 3d 62 64 73 2e 63 6f 6d 6d 2e 71 69 64 2c 79 28 29 29 2c 5f 6e 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 30 3d 3d 24 28 22 23 63 6f 6e 74 65 6e 74 5f Data Ascii: ;var gn,vn,_n;$(window).on("swap_end",function(e,t){h(rt,function(e){var t=bds&&bds.comm&&bds.comm.sampleval;e.setCurrentSugSample(t)}),t\|\|(bds.comm.confirmQuery=bds.comm.query,bds.comm.confirmQid=bds.comm.qid,y()),_n=setTimeout(function(){0==$("#content_
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 70 6f 72 74 73 22 2c 22 74 73 6c 69 62 22 2c 22 40 73 65 61 72 63 68 66 65 2f 69 6e 6a 65 63 74 2d 6a 73 22 2c 22 73 70 79 2d 63 6c 69 65 6e 74 2f 64 69 73 74 2f 73 70 79 2d 6c 6f 63 61 6c 2d 63 61 63 68 65 22 2c 22 40 62 61 69 64 75 2f 73 65 61 72 63 68 2d 61 70 69 22 2c 22 6d 6f 64 75 6c 65 73 2f 6d 6f 6e 69 74 6f 72 2f 6c 6f 67 2d 73 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 2c 61 2c 63 2c 69 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6f 2e 53 70 79 43 61 63 68 65 53 65 72 76 69 63 65 3d 76 6f 69 64 20 30 2c 63 3d 74 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 28 63 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 Data Ascii: ports","tslib","@searchfe/inject-js","spy-client/dist/spy-local-cache","@baidu/search-api","modules/monitor/log-send"],function(e,o,t,a,c,i,s){"use strict";o.__esModule=!0,o.SpyCacheService=void 0,c=t.__importDefault(c);var n=function(){function e(e){var
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 4c 6f 61 64 53 6c 6f 77 22 7d 3b 0a 72 2e 73 65 6e 64 28 75 2c 22 65 74 5f 63 6f 6d 6d 22 29 2c 6f 2e 73 6c 6f 77 52 65 73 44 61 74 61 2e 70 75 73 68 28 7b 69 6e 66 6f 3a 75 2e 69 6e 66 6f 2c 74 79 70 65 3a 74 2c 74 69 6d 65 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 65 4f 72 69 67 69 6e 2b 69 2e 73 74 61 72 74 54 69 6d 65 7d 29 7d 29 7d 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 6e 28 61 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 49 6d 67 48 6f 73 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 69 6d 67 48 6f 73 74 49 6e 66 6f 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 6f 3d 65 2e 69 6d 67 48 6f 73 74 49 Data Ascii: LoadSlow"};r.send(u,"et_comm"),o.slowResData.push({info:u.info,type:t,time:performance.timeOrigin+i.startTime})})}};for(var a in i)n(a)},t.prototype.sendImgHostInfo=function(t){var e=this;Object.keys(this.imgHostInfo).forEach(function(s){var o=e.imgHostI
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 70 62 6f 78 3f 5b 32 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 5d 3a 5b 32 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 65 2e 72 65 71 75 69 72 65 28 5b 22 74 69 70 62 6f 78 2f 6a 73 2f 74 69 70 62 6f 78 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 74 69 70 62 6f 78 3d 74 2c 69 28 22 22 29 7d 29 7d 29 5d 7d 29 7d 29 7d 3b 76 61 72 20 69 2c 72 2c 73 2c 63 3b 72 65 74 75 72 6e 20 65 3d 74 2e 5f 5f 64 65 63 6f 72 61 74 65 28 5b 6e 2e 69 6e 6a 65 63 74 61 62 6c 65 2c 74 2e 5f 5f 70 61 72 61 6d 28 33 2c 6e 2e 69 6e 6a 65 63 74 28 6f 2e 52 45 51 55 49 52 45 5f 54 4f 4b 45 4e 29 29 2c 74 2e 5f 5f 6d 65 74 61 64 61 74 61 28 22 64 65 73 69 Data Ascii: ,function(){return this.tipbox?[2,Promise.resolve()]:[2,new Promise(function(i){e.require(["tipbox/js/tipbox"],function(t){e.tipbox=t,i("")})})]})})};var i,r,s,c;return e=t.__decorate([n.injectable,t.__param(3,n.inject(o.REQUIRE_TOKEN)),t.__metadata("desi
2024-10-25 11:28:19 UTC	16384	IN	Data Raw: 66 28 6e 75 6c 6c 21 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 6c 6f 67 22 29 29 72 65 74 75 72 6e 3b 69 66 28 76 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 69 63 6b 22 29 7c 7c 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 69 63 6b 2d 69 6e 66 6f 22 29 29 74 72 79 7b 76 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 22 2b 76 29 28 29 3b 66 6f 72 28 53 20 69 6e 20 76 29 22 66 6d 22 3d 3d 53 26 26 6e 75 6c 6c 3d 3d 3d 76 2e 66 6d 26 26 28 77 3d 21 30 29 2c 76 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 53 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 62 5b 53 5d 7c 7c 4c 5b 53 5d 29 26 26 28 62 5b 53 5d 3d 76 5b 53 5d 29 7d 63 Data Ascii: f(null!=f.getAttribute("data-nolog"))return;if(v=f.getAttribute("data-click")\|\|f.getAttribute("data-click-info"))try{v=new Function("return "+v)();for(S in v)"fm"==S&&null===v.fm&&(w=!0),v.hasOwnProperty(S)&&("undefined"==typeof b[S]\|\|L[S])&&(b[S]=v[S])}c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	54733	185.10.104.124	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:18 UTC	818	OUT	GET /it/u=881387800,3041446615&fm=225&app=113&size=f256,170&n=0&f=JPEG&fmt=auto?s=68F2A1460DB389ED50A97019030010D0&sec=1729962000&t=81d0471c8d3585fd8fa1377e8fc7911e HTTP/1.1 Host: t15.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIDUPSID=7A022EDDDFEE74DAB4211D7DFC7B91EB; PSTM=1729855650; BAIDUID=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; BA_HECTOR=alala1a50la5252ha02181053apmbj1jhn0591v; ZFY=Jh9uJXKbLSxpbLnwLJumYH9fBJYM4:BW3h0:B3F:BqLRxQ:C; BAIDUID_BFESS=7A022EDDDFEE74DA48B25BE7CEDFF824:FG=1; H_PS_PSSID=60271_60852_60875; delPer=0; PSINO=7
2024-10-25 11:28:19 UTC	544	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:18 GMT Content-Type: image/jpeg Content-Length: 11650 Connection: close Expires: Sun, 10 Nov 2024 18:45:49 GMT Last-Modified: Sun, 11 Jan 1970 00:00:00 GMT ETag: e7b2a59acad40ad516b9940ee670080a Age: 1181613 Accept-Ranges: bytes Access-Control-Allow-Origin: * Ohc-Global-Saved-Time: Fri, 11 Oct 2024 18:45:49 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache57 [4], czix237 [2] Ohc-File-Size: 11650 X-Cache-Status: HIT Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	11650	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 aa 01 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 4e 10 00 01 03 03 03 01 05 04 06 04 0c 03 05 09 00 00 01 02 03 04 00 05 11 06 12 21 31 07 13 22 41 51 14 61 71 91 15 23 32 52 81 a1 16 Data Ascii: JFIFHHC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"N!1"AQaq#2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	54734	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:19 UTC	640	OUT	GET /r/www/cache/static/aladdin-san/app/news-common/img/vip-2_1cbeb77.png HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:19 UTC	882	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:19 GMT Content-Type: image/png Content-Length: 511 Connection: close Expires: Wed, 23 Oct 2024 00:57:28 GMT Last-Modified: Mon, 14 Oct 2024 02:57:29 GMT ETag: "50d31cda90034febfaab92f9a7578e56" Cache-Control: max-age=31536000 Age: 376068 Accept-Ranges: bytes Content-MD5: UNMc2pADT+v6q5L5p1eOVg== x-bce-content-crc32: 1027863625 x-bce-debug-id: m1fDTb23JARU5uyj3vjgDIFIxL0A0cgbCkv2HYZD4+dLtmK2z2eqit0shLRkgjhjlDkBBWb25hxxJrc5/q2hBA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1d029405-7faa-4d24-9e4f-b35fa564dbca x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Sun, 20 Oct 2024 00:57:28 GMT Ohc-Cache-HIT: fra01-sys-jomo1.fra01.baidu.com [2], zhuzuncache62 [2] Ohc-File-Size: 511 X-Cache-Status: HIT Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2024-10-25 11:28:19 UTC	511	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 03 00 00 00 0c ee 5e 90 00 00 00 75 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 38 97 f0 ff ff ff ea f4 fd 41 9c f0 3b 99 f0 70 b4 f4 56 a7 f2 f0 f7 fe c2 df fa ab d3 f8 86 bf f5 69 b1 f3 a9 d2 f8 4e a3 f2 f5 fa fe b4 d8 f9 62 ad f3 b0 d5 f9 a1 ce f8 93 c6 f6 7f bc f5 47 9e f1 e2 ef fc db ec fc cd e4 fb b6 d9 f9 e1 bb 0e 9f 00 00 00 0d 74 52 4e 53 00 f3 e9 e2 d9 bf 8c 85 76 53 3c 08 a8 95 02 3a 43 00 00 01 2c 49 44 41 54 28 cf 85 53 d7 82 83 30 0c 0b b3 d0 d6 6a 02 94 59 ba 6e fc ff 27 9e c9 02 ae 0f d1 13 41 91 e2 c8 8e 58 71 cc b3 34 8a d2 2c 3f 8a 0f 9c 8a 18 1e 71 71 da b3 65 82 1d 92 72 cb 1e Data Ascii: PNGIHDR^uPLTE8A;pViNbGtRNSvS<:C,IDAT(S0jYn'AXq4,?qqer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	54737	185.10.104.115	443	5004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 11:28:19 UTC	590	OUT	GET /r/www/cache/static/global/font/iconfont_13bc846.woff2 HTTP/1.1 Host: pss.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.baidu.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: http://www.baidu.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 11:28:19 UTC	941	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Fri, 25 Oct 2024 11:28:19 GMT Content-Type: application/octet-stream Content-Length: 21352 Connection: close Expires: Thu, 17 Oct 2024 00:21:32 GMT Last-Modified: Wed, 09 Oct 2024 08:25:15 GMT ETag: "13bc846d57fd07bb530283645888718d" Cache-Control: max-age=31536000 Age: 376066 Accept-Ranges: bytes Content-MD5: E7yEbVf9B7tTAoNkWIhxjQ== x-bce-content-crc32: 4203243100 x-bce-debug-id: B7BsbdQdap1WcFf2T3n+fLOLTCZvs8aZglWIhuNhsZ8NoOBW5KDvQlrm3HSY9K0p28oJ6HdlxIxwMsNqXTnxQA== x-bce-flow-control-type: -1 x-bce-is-transition: false x-bce-request-id: 1b7a3fff-f8bc-4e01-86b4-9ec96ac81560 x-bce-storage-class: STANDARD Ohc-Global-Saved-Time: Mon, 14 Oct 2024 00:21:32 GMT Ohc-Cache-HIT: fra01-sys-jomo2.fra01.baidu.com [2], zhuzuncache61 [2] Ohc-File-Size: 21352 X-Cache-Status: HIT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Timing-Allow-Origin: *
2024-10-25 11:28:19 UTC	15443	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 53 68 00 0b 00 00 00 00 ab d8 00 00 53 15 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 95 74 0a 82 9b 28 81 e3 3b 01 36 02 24 03 85 3c 0b 82 60 00 04 20 05 84 67 07 95 4b 1b ca 8d 75 84 c7 01 00 f9 ae 4c 11 15 ac a6 28 4a fa 58 39 fb ff 4f 48 1a c7 68 3b d9 38 48 f5 0f 19 0d 1d 46 52 d2 98 e1 58 c8 60 6e d1 0d b5 e4 11 b4 12 93 0a ce 05 cf a9 25 f9 0d 14 ba c5 56 d1 47 9f 7d d5 0e ad 50 ba bc db 41 76 4b dc 75 20 61 93 c3 7e 1f 28 98 a6 85 b9 77 67 41 47 6c 88 9e 40 37 6d f1 c9 8c 0c 8d e0 85 23 fd 5c cb 2c d8 d9 5b f0 2f 5e 59 c3 7a b9 61 d5 7a 48 52 34 21 80 3a 6d 76 53 01 a9 94 f2 00 3c e0 9e 80 1e 88 ef 6f 88 ff d6 bd d5 af 62 88 d3 11 01 70 8c bc 8f aa 5c 51 26 45 82 8f 06 38 82 Data Ascii: wOF2ShST`t(;6$<` gKuL(JX9OHh;8HFRX`n%VG}PAvKu a~(wgAGl@7m#\,[/^YzazHR4!:mvS<obp\Q&E8
2024-10-25 11:28:19 UTC	5909	IN	Data Raw: 7d 3b 66 9e f8 c3 77 27 d3 91 f9 fe 12 f6 e8 ec 89 13 41 63 9d 5e b9 e5 8c 02 7c bc e0 fd 60 76 d0 c9 20 94 1f 6f 84 f7 6e 55 fb c4 da 0b 1e 09 57 19 d2 65 e9 47 da 0b 3d 0a db 2f df 32 69 b7 4e f0 b8 b0 76 62 55 fb 3b 1e 6f c4 0f 85 3c f5 06 b3 9d 08 54 4c a5 d5 14 27 81 9d 00 8f 03 1d e8 51 0c 16 73 0f 03 5e da d9 1e 6e b5 7b 0e 30 a3 18 1c fa 5d e7 4a 80 c3 36 d1 70 ad 71 3f f1 58 d0 81 2a c0 25 d8 e7 b1 f2 12 e0 db 6d ff 6f 85 15 16 bb 9a ce a1 35 f5 a6 82 97 b7 5d 11 d8 d6 cb 18 d0 81 c7 99 e1 b0 c3 f2 d8 7c 2c 76 25 68 fd 1f 83 45 8f a2 9f 03 fb d6 c3 b6 81 84 ad b9 cf 41 e3 d0 97 30 2f 81 1d b7 b3 a9 c1 3d b2 ad c1 63 13 e1 f0 41 b9 3c 1f 4c d4 75 98 fd 82 47 f8 0e 3c 30 e6 17 5c 12 74 08 86 b7 f5 18 b2 1c 6c 83 92 77 f5 0d 67 4f a7 97 0a 8b 12 f1 Data Ascii: };fw'Ac^\|`v onUWeG=/2iNvbU;o<TL'Qs^n{0]J6pq?X*%mo5]\|,v%hEA0/=cA<LuG<0\tlwgO

Target ID:	0
Start time:	07:27:21
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:27:22
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2320,i,5622916104224757679,5366668800316480785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:27:28
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.baidu.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	07:28:14
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://top.baidu.com/board
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:28:15
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1992,i,17552832433797890608,5227720117257469316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Fri, 25 Oct 2024 11:27:36 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 26073Connection: keep-aliveExpires: Fri, 25 Oct 2024 10:19:12 GMTLast-Modified: Fri, 25 Oct 2024 09:04:30 GMTCache-Control: max-age=3600Content-Encoding: gzipAge: 7703Accept-Ranges: bytesOhc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMTOhc-Cache-HIT: xiangy2ct52 [2], cdix84 [2]Ohc-File-Size: 26073X-Cache-Status: HITData Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 77 db 38 b2 28 fa 57 66 d6 ba 7b 64 4f bc ef 10 0f be da ed d9 ab 9d 58 7e 74 ac 8e f5 b4 94 9b b5 17 09 90 b6 63 49 f6 c4 76 6c a7 a7 cf 6f bf 60 15 08 91 00 a9 c8 49 fa ec 73 f2 25 86 0a 2c 00 85 42 a1 5e 00 b6 f2 87 a5 b8 bf ba 59 6e 6d ff fe 97 cf c9 a7 bf fc b7 f7 c4 44 cc f6 de 77 06 8b f9 a7 e1 e1 74 af b3 d3 99 79 4f 87 a3 f3 b3 e2 cf f4 68 3c 17 5e 04 7f 2e c6 ec b8 7b 5a fc 39 1a f5 3f f7 bb 50 57 2c 7c de f7 1e 8b 3f f3 37 dd e8 f4 71 0f ea 32 f9 65 76 7e 0c c8 3e 1e 3f ab ff 4e 8f 1e 69 fe 46 14 bf 0c 0f e7 5f e4 01 7c 7d fc fa 20 7e 37 f8 05 ea 9d 9f 78 aa 08 15 3e 1e 5c 9c 2d 47 f0 eb 28 be 12 14 fe 4c 27 27 c9 e4 80 c3 af 93 9e d7 c7 0a 82 f5 6e 53 0a bf ca 85 3f 99 9e df 40 85 c3 71 d1 68 c6 bc db e2 4b ea cf c5 12 7a 23 bb bd fb e9 e4 51 77 ec b1 68 6c 72 ff 9c 4e 04 f6 ba f7 51 1c 01 da e9 f3 c5 55 f6 1a 07 40 c7 5e 7f 81 bf 9e cf 6e 67 14 fa 38 a5 f1 c3 14 ff 4c d9 d8 53 ff 25 f3 fd a3 33 ef 1a 5a 19 cd ce 47 13 a0 5a 72 d4 f7 c4 d1 29 f6 ba fb 69 84 88 4e 07 d7 0f f2 30 42 44 97 cf 29 f5 60 dc 0b ff 8d 5c dc c1 b0 96 72 31 9d 4f b1 d1 fd c7 d9 44 8f db 5f ca c3 0b 68 f4 bc 77 2e 16 d0 da 74 32 fe 32 3b 04 bc 93 ee ec f3 70 3e c2 3e 90 f3 81 9e b9 f9 fe 73 ca 80 ca 67 cb f9 c9 ec 17 98 a3 5f df 1c 3f 9e 0e 01 83 38 b8 1f 9e 79 30 da 33 1a 93 74 09 73 ff 76 d9 bf 11 0b ec e4 a4 5f 7e 36 65 dd 23 39 81 cf 92 09 bf 18 74 a1 ee e0 c0 27 7d a4 7d 36 ea 1e a5 d8 c9 c1 a1 ff 2c 19 fc 29 8f c6 cf e9 15 f4 41 aa 01 a5 ec 18 c7 76 76 f3 eb d9 1e 56 98 3f ce 86 77 c8 0a fd 39 b4 d4 2f a7 56 cd e7 42 f3 53 ca 2e ae f4 27 e9 72 7c 7f ce 80 b6 09 1d fb a7 f3 5f 34 91 6e e5 04 09 aa 66 66 44 cf f4 6c 93 a2 95 c3 db 5f c5 35 52 85 fa e7 09 b2 d6 ec e3 c8 87 2e 9c 90 29 83 ea c9 6b 7f 39 c3 25 30 5d 74 f3 04 c9 9b 30 e9 27 63 98 f4 f1 62 7c 37 1c 21 0b 3e fb f3 74 71 aa 71 be 9b 2e e1 cf ec b0 ff 24 46 a7 25 af cc 90 99 86 f3 fd d3 ec da c3 0a b7 5f 86 14 7e 9d 4c 6e 3f 8f 26 c8 4c 93 f1 83 44 2e 4f cf e7 93 64 72 a6 67 e5 4e 93 2c 5b 9e 90 3e 8e 69 b4 98 d3 09 12 5d 1e 74 0f c7 c8 50 f9 9b 7e 74 8a 73 05 c8 5e e3 e2 78 ed 7f 14 c8 7c c2 1b 1f 67 7a 39 3c ef 1f 4c 71 98 b3 2b ff 5f 02 57 ef 64 3e 9f 25 d7 b0 48 c6 07 fe 49 42 61 b6 07 cb db a7 ec d0 d3 03 ba 17 87 8f d8 9d fe c1 Data Ascii: kw8(Wf{dOX~tcIvlo`Is%,B^YnmDwtyOh<^.{Z9?PW,\|?7q2ev~>?NiF_\|} ~7x>\-G(L''n
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Fri, 25 Oct 2024 11:27:39 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 26073Connection: keep-aliveExpires: Fri, 25 Oct 2024 10:19:12 GMTLast-Modified: Fri, 25 Oct 2024 09:04:30 GMTCache-Control: max-age=3600Content-Encoding: gzipAge: 7707Accept-Ranges: bytesOhc-Global-Saved-Time: Fri, 25 Oct 2024 09:19:12 GMTOhc-Cache-HIT: cyct52 [2], cdix84 [1]Ohc-File-Size: 26073X-Cache-Status: HITData Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 77 db 38 b2 28 fa 57 66 d6 ba 7b 64 4f bc ef 10 0f be da ed d9 ab 9d 58 7e 74 ac 8e f5 b4 94 9b b5 17 09 90 b6 63 49 f6 c4 76 6c a7 a7 cf 6f bf 60 15 08 91 00 a9 c8 49 fa ec 73 f2 25 86 0a 2c 00 85 42 a1 5e 00 b6 f2 87 a5 b8 bf ba 59 6e 6d ff fe 97 cf c9 a7 bf fc b7 f7 c4 44 cc f6 de 77 06 8b f9 a7 e1 e1 74 af b3 d3 99 79 4f 87 a3 f3 b3 e2 cf f4 68 3c 17 5e 04 7f 2e c6 ec b8 7b 5a fc 39 1a f5 3f f7 bb 50 57 2c 7c de f7 1e 8b 3f f3 37 dd e8 f4 71 0f ea 32 f9 65 76 7e 0c c8 3e 1e 3f ab ff 4e 8f 1e 69 fe 46 14 bf 0c 0f e7 5f e4 01 7c 7d fc fa 20 7e 37 f8 05 ea 9d 9f 78 aa 08 15 3e 1e 5c 9c 2d 47 f0 eb 28 be 12 14 fe 4c 27 27 c9 e4 80 c3 af 93 9e d7 c7 0a 82 f5 6e 53 0a bf ca 85 3f 99 9e df 40 85 c3 71 d1 68 c6 bc db e2 4b ea cf c5 12 7a 23 bb bd fb e9 e4 51 77 ec b1 68 6c 72 ff 9c 4e 04 f6 ba f7 51 1c 01 da e9 f3 c5 55 f6 1a 07 40 c7 5e 7f 81 bf 9e cf 6e 67 14 fa 38 a5 f1 c3 14 ff 4c d9 d8 53 ff 25 f3 fd a3 33 ef 1a 5a 19 cd ce 47 13 a0 5a 72 d4 f7 c4 d1 29 f6 ba fb 69 84 88 4e 07 d7 0f f2 30 42 44 97 cf 29 f5 60 dc 0b ff 8d 5c dc c1 b0 96 72 31 9d 4f b1 d1 fd c7 d9 44 8f db 5f ca c3 0b 68 f4 bc 77 2e 16 d0 da 74 32 fe 32 3b 04 bc 93 ee ec f3 70 3e c2 3e 90 f3 81 9e b9 f9 fe 73 ca 80 ca 67 cb f9 c9 ec 17 98 a3 5f df 1c 3f 9e 0e 01 83 38 b8 1f 9e 79 30 da 33 1a 93 74 09 73 ff 76 d9 bf 11 0b ec e4 a4 5f 7e 36 65 dd 23 39 81 cf 92 09 bf 18 74 a1 ee e0 c0 27 7d a4 7d 36 ea 1e a5 d8 c9 c1 a1 ff 2c 19 fc 29 8f c6 cf e9 15 f4 41 aa 01 a5 ec 18 c7 76 76 f3 eb d9 1e 56 98 3f ce 86 77 c8 0a fd 39 b4 d4 2f a7 56 cd e7 42 f3 53 ca 2e ae f4 27 e9 72 7c 7f ce 80 b6 09 1d fb a7 f3 5f 34 91 6e e5 04 09 aa 66 66 44 cf f4 6c 93 a2 95 c3 db 5f c5 35 52 85 fa e7 09 b2 d6 ec e3 c8 87 2e 9c 90 29 83 ea c9 6b 7f 39 c3 25 30 5d 74 f3 04 c9 9b 30 e9 27 63 98 f4 f1 62 7c 37 1c 21 0b 3e fb f3 74 71 aa 71 be 9b 2e e1 cf ec b0 ff 24 46 a7 25 af cc 90 99 86 f3 fd d3 ec da c3 0a b7 5f 86 14 7e 9d 4c 6e 3f 8f 26 c8 4c 93 f1 83 44 2e 4f cf e7 93 64 72 a6 67 e5 4e 93 2c 5b 9e 90 3e 8e 69 b4 98 d3 09 12 5d 1e 74 0f c7 c8 50 f9 9b 7e 74 8a 73 05 c8 5e e3 e2 78 ed 7f 14 c8 7c c2 1b 1f 67 7a 39 3c ef 1f 4c 71 98 b3 2b ff 5f 02 57 ef 64 3e 9f 25 d7 b0 48 c6 07 fe 49 42 61 b6 07 cb db a7 ec d0 d3 03 ba 17 87 8f d8 9d fe c1 94 c0 14 ff c6 Data Ascii: kw8(Wf{dOX~tcIvlo`Is%,B^YnmDwtyOh<^.{Z9?PW,\|?7q2ev~>?NiF_\|} ~7x>\-G(L''
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKAccept-Ranges: bytesCache-Control: private, no-cache, no-store, proxy-revalidate, no-transformContent-Encoding: gzipContent-Length: 220Content-Type: application/xmlDate: Fri, 25 Oct 2024 11:27:40 GMTEtag: "ff-51bee881817c0"Expires: Fri, 25 Oct 2024 11:37:40 GMTLast-Modified: Tue, 28 Jul 2015 12:23:03 GMTP3p: CP=" OTI DSP COR IVA OUR IND COM "Pragma: no-cacheServer: ApacheSet-Cookie: BAIDUID=54667400AD8E82C3918EB2FC152A9E79:FG=1; expires=Sat, 25-Oct-25 11:27:40 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1Vary: Accept-Encoding,User-AgentData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 8e 3d 6e c2 40 10 85 7b 9f 62 35 3d 1e dc 91 c8 6b 37 28 65 52 00 07 58 d6 23 6c c9 fb a3 dd 09 26 42 dc 21 6d a4 54 14 39 41 aa 14 b9 4d c2 35 58 70 41 c3 2b 9f de a7 ef 95 f5 ce f4 62 4b 21 76 ce 4a 28 f2 29 08 b2 da 35 9d dd 48 58 2d 9f 26 33 a8 2b 91 95 2f 9e ec 82 54 d0 ed 9c a2 0e 9d e7 04 88 04 db 28 a1 65 f6 8f 88 ea 21 d7 ce e0 04 a3 27 8d 2e 11 f1 4a 60 91 17 08 55 26 52 ca 45 eb 02 3f 2b 43 d5 e9 e3 f7 ef e7 eb ff fd f3 f4 7d 2c f1 d6 8f bb 55 e8 05 bf 79 92 c0 b4 63 6c d9 f4 20 98 8c ef 15 d3 a8 8c c9 39 0c 43 be 56 5d f3 7a 55 c7 7a 68 e4 7e b4 2e 29 98 78 00 bc bc c7 bb f7 ab ec 0c 5b 99 1e 23 ff 00 00 00 Data Ascii: m=n@{b5=k7(eRX#l&B!mT9AM5XpA+bK!vJ()5HX-&3+/T(e!'.J`U&RE?+C},Uycl 9CV]zUzh~.)x[#
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Fri, 25 Oct 2024 11:27:40 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 26904Connection: keep-aliveExpires: Fri, 25 Oct 2024 08:45:51 GMTLast-Modified: Fri, 25 Oct 2024 07:09:31 GMTCache-Control: max-age=3600Content-Encoding: gzipAge: 13307Accept-Ranges: bytesOhc-Global-Saved-Time: Fri, 25 Oct 2024 07:45:51 GMTOhc-Cache-HIT: xiangy2ct51 [2], bdix189 [2]Ohc-File-Size: 26904X-Cache-Status: HITData Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 77 db 38 f2 28 f8 ff 7e 8a cc b9 3b 91 d4 56 d2 04 f8 8e a3 be 27 4e fc 4c ec c4 b2 25 d9 f2 75 cf e1 03 b4 14 eb e1 b1 e4 d8 ee 24 fb d9 17 40 81 20 09 10 b2 9c ee df 9e 9d e9 24 22 0b 28 14 0a 85 7a 01 04 9a d9 dd 2c 59 8e e7 b3 66 eb fb 8b 66 f9 e1 5b 74 fb e2 3f d6 83 93 c5 4e e7 a2 71 8e 47 93 e1 5e af d3 68 37 d2 dd f0 6e 7f 7c cd 7e 7e fc b0 7f 7f 78 ca 7f 0e 07 ae 45 ff f9 f4 7e 0b c5 53 fe e6 c4 ea 4f 92 eb 39 fb d9 c5 e1 b7 21 be 67 3f 0f 67 f7 4e f6 21 61 3f e3 f1 bb d1 fe e0 98 fd dc ff 60 5d 9d e1 80 fd 3c c3 47 59 3a e1 3f a3 de b0 db ef 9f f3 b2 b4 d1 e1 e9 02 da 7f 48 d9 9b 69 32 df 9f 02 45 18 7d 8e a6 57 bc a5 1e 72 23 cb 61 3f b3 0f 3b c1 91 cd 1b 3d b7 8f af 8e cf f6 39 a2 c1 e4 af e1 09 2f d0 b3 96 83 d4 e2 e8 f7 77 0f dc 74 97 23 4b fa 5b f3 3e 60 38 ef 1f 59 09 34 71 32 3d 38 8c 7b fc e7 c7 93 eb bb 21 74 71 80 2c fa 93 37 71 8c 43 14 cf 78 67 d2 b3 ad fb d8 e6 ad 9d 4f 77 b2 08 f0 7e b6 87 a3 64 fc 8e 97 1d 8c d0 f1 ec 9d e4 c1 09 27 3d 9d f6 07 e7 03 8e 2c 3a 9b 7c 88 77 b6 39 39 d7 ee 39 7d 0f 05 76 1e f7 f7 38 de 13 ca ed 21 74 a8 b7 bd dc 3d d9 e1 18 12 bc 33 3d 87 b7 27 fd a3 de 60 c2 31 90 d9 d6 fd 60 87 73 fc f0 fa 78 fe 11 b8 18 db 5d 37 01 ca ba b3 c9 e7 7e 7f 0e a3 98 ee 90 3d 4e 19 e9 f7 bf f5 30 f0 c1 ee 2f 87 03 fe 33 d9 3d 3a 1d 0e 38 de b3 13 77 94 be e7 65 87 d7 3b e7 a4 0f 6f 1f df 85 fb 7b bc 89 68 90 8e d2 5d 3e 92 f1 7b f7 30 3a 3b e4 65 4f e7 57 fb 33 21 49 fd bf 18 f3 af b7 af 92 33 fe 86 ec 06 57 5f 4e 38 ce 73 6b e7 31 9a f0 b7 fb a7 16 c5 c9 7f 9e f7 96 13 02 88 ce 07 47 b7 fb c0 d0 18 a3 f9 f1 35 e7 c1 70 ef 7a fc b1 cf db ef e3 83 8f fd 6d 90 a4 bd ae 95 ec 1d 02 55 54 7c bf 0a 49 ea 5f f7 a7 9c ec e1 6e ff 6b 32 e3 83 7a 7e d6 9d 74 c5 38 4c 76 ae bb 98 33 74 b0 33 39 3a dd e1 e3 db 9b dd 9c 26 db 30 66 7b fd c7 f8 aa c3 ab e1 f0 7a 08 d2 4c 27 cb 5e 02 78 d3 c9 70 96 4e 13 c0 3b bc 19 62 fe f6 74 ba f3 39 1f 07 8c 26 29 0c 2a 6d 78 fe 71 8f 63 38 b1 bb b3 1e 48 fe c7 dd 9d bf 08 30 3f dd de 41 64 1b c4 b8 87 7a 62 cc be 9c 5a 57 fb 53 47 32 ff 3d f0 01 3f 7c 3b 07 1a ce 07 9c cd fd e9 84 12 18 00 d9 d7 57 94 a9 7c 40 a7 1c 18 9d 6d 59 11 00 7b 93 ee 87 1e 48 c6 39 93 e4 3d ce 95 a4 37 b4 fa 3d 60 d0 20 fd 7c 3e b0 44 a7 ef Data Ascii: {w8(~;V'NL%u$@ $"(z,Yff[t?NqG^h7n\|~~xE~SO9!g?gN!a?`]<GY:?Hi2E}Wr#a?;=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Fri, 25 Oct 2024 11:27:41 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 26904Connection: keep-aliveExpires: Fri, 25 Oct 2024 08:45:51 GMTLast-Modified: Fri, 25 Oct 2024 07:09:31 GMTCache-Control: max-age=3600Content-Encoding: gzipAge: 13308Accept-Ranges: bytesOhc-Global-Saved-Time: Fri, 25 Oct 2024 07:45:51 GMTOhc-Cache-HIT: cyct51 [2], bdix189 [2]Ohc-File-Size: 26904X-Cache-Status: HITData Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 7b 77 db 38 f2 28 f8 ff 7e 8a cc b9 3b 91 d4 56 d2 04 f8 8e a3 be 27 4e fc 4c ec c4 b2 25 d9 f2 75 cf e1 03 b4 14 eb e1 b1 e4 d8 ee 24 fb d9 17 40 81 20 09 10 b2 9c ee df 9e 9d e9 24 22 0b 28 14 0a 85 7a 01 04 9a d9 dd 2c 59 8e e7 b3 66 eb fb 8b 66 f9 e1 5b 74 fb e2 3f d6 83 93 c5 4e e7 a2 71 8e 47 93 e1 5e af d3 68 37 d2 dd f0 6e 7f 7c cd 7e 7e fc b0 7f 7f 78 ca 7f 0e 07 ae 45 ff f9 f4 7e 0b c5 53 fe e6 c4 ea 4f 92 eb 39 fb d9 c5 e1 b7 21 be 67 3f 0f 67 f7 4e f6 21 61 3f e3 f1 bb d1 fe e0 98 fd dc ff 60 5d 9d e1 80 fd 3c c3 47 59 3a e1 3f a3 de b0 db ef 9f f3 b2 b4 d1 e1 e9 02 da 7f 48 d9 9b 69 32 df 9f 02 45 18 7d 8e a6 57 bc a5 1e 72 23 cb 61 3f b3 0f 3b c1 91 cd 1b 3d b7 8f af 8e cf f6 39 a2 c1 e4 af e1 09 2f d0 b3 96 83 d4 e2 e8 f7 77 0f dc 74 97 23 4b fa 5b f3 3e 60 38 ef 1f 59 09 34 71 32 3d 38 8c 7b fc e7 c7 93 eb bb 21 74 71 80 2c fa 93 37 71 8c 43 14 cf 78 67 d2 b3 ad fb d8 e6 ad 9d 4f 77 b2 08 f0 7e b6 87 a3 64 fc 8e 97 1d 8c d0 f1 ec 9d e4 c1 09 27 3d 9d f6 07 e7 03 8e 2c 3a 9b 7c 88 77 b6 39 39 d7 ee 39 7d 0f 05 76 1e f7 f7 38 de 13 ca ed 21 74 a8 b7 bd dc 3d d9 e1 18 12 bc 33 3d 87 b7 27 fd a3 de 60 c2 31 90 d9 d6 fd 60 87 73 fc f0 fa 78 fe 11 b8 18 db 5d 37 01 ca ba b3 c9 e7 7e 7f 0e a3 98 ee 90 3d 4e 19 e9 f7 bf f5 30 f0 c1 ee 2f 87 03 fe 33 d9 3d 3a 1d 0e 38 de b3 13 77 94 be e7 65 87 d7 3b e7 a4 0f 6f 1f df 85 fb 7b bc 89 68 90 8e d2 5d 3e 92 f1 7b f7 30 3a 3b e4 65 4f e7 57 fb 33 21 49 fd bf 18 f3 af b7 af 92 33 fe 86 ec 06 57 5f 4e 38 ce 73 6b e7 31 9a f0 b7 fb a7 16 c5 c9 7f 9e f7 96 13 02 88 ce 07 47 b7 fb c0 d0 18 a3 f9 f1 35 e7 c1 70 ef 7a fc b1 cf db ef e3 83 8f fd 6d 90 a4 bd ae 95 ec 1d 02 55 54 7c bf 0a 49 ea 5f f7 a7 9c ec e1 6e ff 6b 32 e3 83 7a 7e d6 9d 74 c5 38 4c 76 ae bb 98 33 74 b0 33 39 3a dd e1 e3 db 9b dd 9c 26 db 30 66 7b fd c7 f8 aa c3 ab e1 f0 7a 08 d2 4c 27 cb 5e 02 78 d3 c9 70 96 4e 13 c0 3b bc 19 62 fe f6 74 ba f3 39 1f 07 8c 26 29 0c 2a 6d 78 fe 71 8f 63 38 b1 bb b3 1e 48 fe c7 dd 9d bf 08 30 3f dd de 41 64 1b c4 b8 87 7a 62 cc be 9c 5a 57 fb 53 47 32 ff 3d f0 01 3f 7c 3b 07 1a ce 07 9c cd fd e9 84 12 18 00 d9 d7 57 94 a9 7c 40 a7 1c 18 9d 6d 59 11 00 7b 93 ee 87 1e 48 c6 39 93 e4 3d ce 95 a4 37 b4 fa 3d 60 d0 20 fd 7c 3e b0 44 a7 ef 86 ef 39 45 9f Data Ascii: {w8(~;V'NL%u$@ $"(z,Yff[t?NqG^h7n\|~~xE~SO9!g?gN!a?`]<GY:?Hi2E}Wr#a

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.baidu.com
Source: global traffic	DNS traffic detected: DNS query: pss.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: dss0.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: dss1.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: ss1.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: sp2.baidu.com
Source: global traffic	DNS traffic detected: DNS query: sp1.baidu.com
Source: global traffic	DNS traffic detected: DNS query: sp0.baidu.com
Source: global traffic	DNS traffic detected: DNS query: hectorstatic.baidu.com
Source: global traffic	DNS traffic detected: DNS query: mbd.baidu.com
Source: global traffic	DNS traffic detected: DNS query: hector.baidu.com
Source: global traffic	DNS traffic detected: DNS query: passport.baidu.com
Source: global traffic	DNS traffic detected: DNS query: psstatic.cdn.bcebos.com
Source: global traffic	DNS traffic detected: DNS query: gips1.baidu.com
Source: global traffic	DNS traffic detected: DNS query: ss1.baidu.com
Source: global traffic	DNS traffic detected: DNS query: ss2.baidu.com
Source: global traffic	DNS traffic detected: DNS query: gips3.baidu.com
Source: global traffic	DNS traffic detected: DNS query: gips0.baidu.com
Source: global traffic	DNS traffic detected: DNS query: gips2.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t14.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t13.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t11.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t15.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t10.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t12.baidu.com
Source: global traffic	DNS traffic detected: DNS query: gimg4.baidu.com
Source: global traffic	DNS traffic detected: DNS query: t7.baidu.com
Source: global traffic	DNS traffic detected: DNS query: top.baidu.com
Source: global traffic	DNS traffic detected: DNS query: gimg3.baidu.com
Source: global traffic	DNS traffic detected: DNS query: lingjing-online.cdn.bcebos.com
Source: global traffic	DNS traffic detected: DNS query: sestat.baidu.com
Source: global traffic	DNS traffic detected: DNS query: sclick.baidu.com
Source: global traffic	DNS traffic detected: DNS query: b.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: ug.baidu.com
Source: global traffic	DNS traffic detected: DNS query: hpd.baidu.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.baidu.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Windows Analysis Report
http://www.baidu.com