Edit tour

Windows Analysis Report
http://sumbangan.com

Overview

General Information

Sample URL:	http://sumbangan.com
Analysis ID:	1561843
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2024,i,2013743561821100083,1166226205460231320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sumbangan.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fsumbangan.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1188460676.1732450767&auid=82930210.1732450767&npa=0&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&tft=1732450766510&tfd=11685&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://sumbangan.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://sumbangan.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_196.2.dr	String found in binary or memory: http://browserhacks.com/#hack-e71d8692f65334173fee715c222cb805
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components).
Source: chromecache_196.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: chromecache_196.2.dr	String found in binary or memory: http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).
Source: chromecache_196.2.dr	String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/)
Source: chromecache_196.2.dr	String found in binary or memory: http://peter.michaux.ca/articles/lazy-function-definition-pattern)
Source: chromecache_196.2.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#mismatch
Source: chromecache_196.2.dr	String found in binary or memory: http://stackoverflow.com/a/26603875
Source: chromecache_196.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_196.2.dr	String found in binary or memory: http://url.spec.whatwg.org/#urlutils
Source: chromecache_196.2.dr	String found in binary or memory: http://wonko.com/post/html-escaping)
Source: chromecache_196.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_196.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).
Source: chromecache_196.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
Source: chromecache_196.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
Source: chromecache_196.2.dr	String found in binary or memory: http://www.google.com)
Source: chromecache_196.2.dr	String found in binary or memory: http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
Source: chromecache_265.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_196.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_279.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_196.2.dr	String found in binary or memory: https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity
Source: chromecache_196.2.dr	String found in binary or memory: https://atomiks.github.io/tippyjs/v6/all-props/
Source: chromecache_196.2.dr	String found in binary or memory: https://atomiks.github.io/tippyjs/v6/plugins/
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=2070)
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=90
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=156034
Source: chromecache_196.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_196.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_269.2.dr, chromecache_279.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_315.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_315.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_196.2.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_196.2.dr	String found in binary or memory: https://developer.chrome.com/extensions/sandboxingEval).
Source: chromecache_196.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_196.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block
Source: chromecache_196.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Proxy/handler/getOw
Source: chromecache_196.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_196.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_196.2.dr	String found in binary or memory: https://es5.github.io/#x13.2.2
Source: chromecache_196.2.dr	String found in binary or memory: https://es5.github.io/#x15.1.2.2)
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/alpinejs/alpine#$
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/atomiks/tippy.js-react/issues/106
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/atomiks/tippyjs-react/issues/177
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/fabiospampinato/cash
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/1414
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/pull/1247
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/olado/doT).
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/1078
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/1223
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/837
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/stimulusjs/stimulus/blob/master/packages/%40stimulus/core/src/application.ts
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/vuejs/vue/blob/4de4649d9637262a9b007720b59f80ac72a5620c/src/shared/util.js
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/webpack-contrib/style-loader#insertat)
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/webpack-contrib/style-loader/issues/177
Source: chromecache_196.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_269.2.dr	String found in binary or memory: https://google.com
Source: chromecache_269.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/indices.html#attributes-3:boolean-attribute
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_196.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_196.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_185.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_196.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_196.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_196.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_196.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_196.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_196.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_196.2.dr	String found in binary or memory: https://lodash.com/)
Source: chromecache_196.2.dr	String found in binary or memory: https://lodash.com/custom-builds).
Source: chromecache_196.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_196.2.dr	String found in binary or memory: https://material.io/design/motion/speed.html#duration
Source: chromecache_196.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: chromecache_196.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-unicode).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Array/reverse).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Array/slice)
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Number/isFinite).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Number/isInteger).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Number/isNaN)
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Number/isSafeInteger).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Object/assign).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/String/replace).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/String/split).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/Structured_clone_algorithm)
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/clearTimeout).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/isNaN)
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/iteration_protocols#iterator).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/rest_parameters).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/round#Examples)
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/setTimeout).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/spread_operator).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/toLowerCase).
Source: chromecache_196.2.dr	String found in binary or memory: https://mdn.io/toUpperCase).
Source: chromecache_196.2.dr	String found in binary or memory: https://mths.be/he).
Source: chromecache_196.2.dr	String found in binary or memory: https://nodejs.org/api/http.html#http_message_headers
Source: chromecache_196.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_196.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_279.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_269.2.dr, chromecache_279.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_185.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_196.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_196.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_196.2.dr	String found in binary or memory: https://stackoverflow.com/questions/49875255
Source: chromecache_279.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_269.2.dr, chromecache_279.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_196.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_196.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_279.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_140.2.dr, chromecache_130.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/10947617392/?random
Source: chromecache_269.2.dr, chromecache_279.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_279.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_269.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_269.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_185.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_279.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_196.2.dr	String found in binary or memory: https://www.npmjs.com/package/babel-polyfill)
Source: chromecache_279.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49973 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/296@34/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2024,i,2013743561821100083,1166226205460231320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sumbangan.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2024,i,2013743561821100083,1166226205460231320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://sumbangan.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity	0%	Avira URL Cloud	safe
https://atomiks.github.io/tippyjs/v6/all-props/	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e4845500_Sumbangan_New_Slider-04.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593b4023f088_OKU_Nur_-_Kemudhan.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/516/logo/62c769bd806b9_Vector_NGO_PKPR_Batu_Pahat_(Circle-Black).png	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e2d24ea7_Sumbangan_New_Slider-03.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/525/logo/6352445c5003b_LPQ_AL_HUDA_LOGOW.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/668e257b9598f_Sumbangan_Slider_Doa_Harian.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/64e85386ea881_Sumbangan_Cover_Kempen-02.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/6684a59f3ef85_Sumbangan_New_Slider-02.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/499/logo/65ad34a8ab77a_1.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/56/logo/WhatsAppImage2021-08-27at2.13.51PM.jpeg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/67402909e2117_1000263127.jpg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/1/logo/ppim.jpeg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/62de3b34d4674_WhatsApp_Image_2022-07-25_at_2.34.32_PM.jpeg	0%	Avira URL Cloud	safe
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/258/logo/logo(1).png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.195.35	true	false	high
scontent.xx.fbcdn.net	157.240.196.15	true	false	high
app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	47.254.218.46	true	false	unknown
googleads.g.doubleclick.net	172.217.17.34	true	false	high
sumbangan.com	47.254.245.190	true	false	high
www.google.com	142.250.181.100	true	false	high
td.doubleclick.net	172.217.17.34	true	false	high
www.facebook.com	unknown	unknown	false	high
analytics.tiktok.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sumbangan.com/mobile/img/logo-small.svg	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e2d24ea7_Sumbangan_New_Slider-03.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/mobile/css/app.min.css	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e4845500_Sumbangan_New_Slider-04.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/favicons/favicon-32x32.png	false		high
https://sumbangan.com/mobile/img/logo/7.png	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/668e257b9598f_Sumbangan_Slider_Doa_Harian.jpg	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593b4023f088_OKU_Nur_-_Kemudhan.jpg	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/516/logo/62c769bd806b9_Vector_NGO_PKPR_Batu_Pahat_(Circle-Black).png	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/525/logo/6352445c5003b_LPQ_AL_HUDA_LOGOW.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/mobile/img/home/lain-lain.svg	false		high
https://sumbangan.com/mobile/img/home/2024/Sedekah.svg	false		high
https://sumbangan.com/mobile/img/home/2024/Wakaf-01.svg	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/64e85386ea881_Sumbangan_Cover_Kempen-02.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/mobile/img/home/2024/Korban-01.svg	false		high
https://sumbangan.com/mobile/img/category/ngo.svg	false		high
https://sumbangan.com/mobile/img/whatsapp.svg	false		high
https://sumbangan.com/mobile/img/logo/4.png	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/6684a59f3ef85_Sumbangan_New_Slider-02.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/api/mobile/doa/liked/visitor/769243	false		high
https://sumbangan.com/mobile/img/menu/inbox.svg	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/499/logo/65ad34a8ab77a_1.jpg	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/56/logo/WhatsAppImage2021-08-27at2.13.51PM.jpeg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/mobile/img/logo/1.png	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769240	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769242	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/67402909e2117_1000263127.jpg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/landing/popup-korban-2024.jpg	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769241	false		high
https://sumbangan.com/mobile/img/home/notifikasi.png	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769237	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769236	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769239	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769238	false		high
https://www.facebook.com/tr/?id=1055981978343897&ev=PageView&dl=https%3A%2F%2Fsumbangan.com%2F&rl=&if=false&ts=1732450794085&sw=1280&sh=1024&v=2.9.176&r=stable&ec=0&o=4126&fbp=fb.1.1732450794083.49795458467351180&ler=empty&cdl=API_unavailable&it=1732450777007&coo=false&rqm=GET	false		high
https://sumbangan.com/api/mobile/doa/liked/visitor/769235	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/62de3b34d4674_WhatsApp_Image_2022-07-25_at_2.34.32_PM.jpeg	false	Avira URL Cloud: safe	unknown
https://sumbangan.com/api/mobile/doa/liked/visitor/769234	false		high
https://sumbangan.com/mobile/img/twitter.svg	false		high
https://sumbangan.com/whatsapp.svg	false		high
https://sumbangan.com/mobile/img/home/aplikasi-telefon-pintar.png	false		high
https://sumbangan.com/mobile/img/flags/english-flag.png	false		high
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/1/logo/ppim.jpeg	false	Avira URL Cloud: safe	unknown
https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/258/logo/logo(1).png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity	chromecache_196.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_279.2.dr	false		high
http://wonko.com/post/html-escaping)	chromecache_196.2.dr	false		high
http://ejohn.org/blog/javascript-micro-templating/)	chromecache_196.2.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_196.2.dr	false		high
https://atomiks.github.io/tippyjs/v6/all-props/	chromecache_196.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/facebook/flow/issues/1414	chromecache_196.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_196.2.dr	false		high
https://stackoverflow.com/questions/49875255	chromecache_196.2.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_196.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_185.2.dr	false		high
https://lodash.com/)	chromecache_196.2.dr	false		high
http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).	chromecache_196.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_196.2.dr	false		high
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_185.2.dr	false		high
https://github.com/popperjs/popper-core/issues/837	chromecache_196.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_196.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_196.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_196.2.dr	false		high
https://mdn.io/clearTimeout).	chromecache_196.2.dr	false		high
https://openjsf.org/	chromecache_196.2.dr	false		high
http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).	chromecache_196.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=90	chromecache_196.2.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_196.2.dr	false		high
https://mdn.io/toUpperCase).	chromecache_196.2.dr	false		high
https://github.com/jashkenas/underscore/pull/1247	chromecache_196.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)	chromecache_196.2.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_196.2.dr	false		high
https://mathiasbynens.be/notes/ambiguous-ampersands)	chromecache_196.2.dr	false		high
https://mdn.io/Number/isInteger).	chromecache_196.2.dr	false		high
https://github.com/webpack-contrib/style-loader#insertat)	chromecache_196.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_196.2.dr	false		high
https://connect.facebook.net/	chromecache_315.2.dr	false		high
https://github.com/fabiospampinato/cash	chromecache_196.2.dr	false		high
https://github.com/popperjs/popper-core/issues/1223	chromecache_196.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume	chromecache_196.2.dr	false		high
https://jquery.com/	chromecache_196.2.dr	false		high
https://github.com/vuejs/vue/blob/4de4649d9637262a9b007720b59f80ac72a5620c/src/shared/util.js	chromecache_196.2.dr	false		high
https://bugs.jquery.com/ticket/4833	chromecache_196.2.dr	false		high
https://mathiasbynens.be/notes/javascript-unicode).	chromecache_196.2.dr	false		high
https://sizzlejs.com/	chromecache_196.2.dr	false		high
http://browserhacks.com/#hack-e71d8692f65334173fee715c222cb805	chromecache_196.2.dr	false		high
http://www.imagemagick.org	chromecache_265.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=2070)	chromecache_196.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_196.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_196.2.dr	false		high
http://stackoverflow.com/a/26603875	chromecache_196.2.dr	false		high
http://peter.michaux.ca/articles/lazy-function-definition-pattern)	chromecache_196.2.dr	false		high
http://url.spec.whatwg.org/#urlutils	chromecache_196.2.dr	false		high
http://ecma-international.org/ecma-262/7.0/#sec-tolength).	chromecache_196.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_196.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_196.2.dr	false		high
https://mdn.io/Number/isFinite).	chromecache_196.2.dr	false		high
https://lodash.com/custom-builds).	chromecache_196.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block	chromecache_196.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
47.254.218.46	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
172.217.17.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
47.254.245.190	sumbangan.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.19.194	unknown	United States	15169	GOOGLEUS	false
157.240.196.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.217.21.36	unknown	United States	15169	GOOGLEUS	false
157.240.195.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
157.240.196.35	unknown	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561843
Start date and time:	2024-11-24 13:18:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://sumbangan.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@19/296@34/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 142.250.181.136, 172.217.17.72, 142.250.181.78, 2.20.68.210, 192.229.221.95, 2.20.68.88, 2.20.68.77, 2.20.68.81, 2.20.68.72, 2.20.68.92, 2.20.68.99, 2.20.68.80, 2.20.68.85, 2.20.68.84, 172.217.17.42, 172.217.17.74, 172.217.19.202, 216.58.208.234, 172.217.19.10, 142.250.181.106, 142.250.181.42, 142.250.181.138, 172.217.19.234, 142.250.181.74, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, e35058.a.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, analytics.tiktok.com.edgekey.net, clients.l.google.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://sumbangan.com

Input	Output
URL: http://sumbangan.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://sumbangan.com
URL: https://sumbangan.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://sumbangan.com/ Model: Joe Sandbox AI	{ "brands": [ "Sumbangan" ] }

URL: https://sumbangan.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "JOM #BuatBaik Lakukanlah kebaikan Hari Ini Melalui sumbangan.com", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://sumbangan.com/ Model: Joe Sandbox AI	{ "brands": [ "Sumbangan" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	dropped
Size (bytes):	938807
Entropy (8bit):	7.982320517321568
Encrypted:	false
SSDEEP:	24576:vu0EglQ7huoXpul3EIVJw79GQzJxZK02/bJLHg/aTeAZ/:FFlQ7h/XyxVIQQdT29HcmN
MD5:	7DDBA00979C735263BCFA18CCC486610
SHA1:	A249048A0738420E71CB110BE1AA9FF3C45A6503
SHA-256:	A2FD127FD9A54C988C0B0691FF91B6F49489FF28B045F3960BE534ACE43E37D6
SHA-512:	B0C389D67759CDE83F1D9E6100AED838412B7977D50BE189C35D1D462D786D9AB323C153972912825BD1D4C60B583AF17C48BA9A1DF5C67EC5FEA11F5382C34D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".................................................................................qk.%..R)...JQ.Fp..7.K..!(H...,.%...Y....n..+S&.C....u.;.\|.1j...!...F.c...1.b.=f....N....K$... .Z.-$....&..\6..S(.....=........p.Y..k3._V._..2t.me.;&."I..(.I.(.Q.E..;.9Y...D!.(J...,\|..n3.5....i..U}.o.<..r..K.^L.1k..;XK.60k.eS7].X.xT.g..U..S.R.%P..b.j.t...\z..M...r'8........-..1.x...l.]u..\B.d..&......J3.h..e@M.0hB-,a(.B.+...j..-g...2.$.'....g\x[T.MvW..Wes.F...`.h..M..a(..@b.;...7]M..m..xYd'yJq....g..'..U.N.Su3.l&.mV3d.+..i..;.1.V 4.R.iP.&,S.....[-.4.......4...p..-...vB.`....1...X."J"RK..,@..:..+..!.)%..a.Y8.$.1!..B.I...........e !.Z.Y.-*...RjT.U...'\.1...Zq...+.3..k......NE9.<v5-sCvF.Ej.....[g.k.....%^w^=..Ll..iP.%(..E...i&.1IFI9..H....'..p.A...,bVBz.9FW.....@.4.&...L....(...T...+.(....w.N......F..@.Z0h....O.......+

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11093
Entropy (8bit):	4.799829792061138
Encrypted:	false
SSDEEP:	192:5CEP7Z4j6TfphBOA/ALZSf5B9STxFvmjHqrSzwGKzmeH:5t7Z4cBt/ANSwfGHkwnKzmeH
MD5:	430201450584F1CBA0C572A13B565C1B
SHA1:	2491B24218CFF7A6DBD4D3F2DB72776D60239059
SHA-256:	F4CA8BE95534D257C0A0564DA2AC6FE27C0743106F39A9D1C340E40BD9502279
SHA-512:	1D9B38FFEF80424E2CB58EE933680FAAC24A13AA138FB2817E3018D93A3B2AE25282CDD63AD9A826B1F03BA762377C074BB9C7D17264AC01792C137BA5511B66
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Korban-01.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{fill:#255D7C;}...st4{clip-path:url(#SVGID_00000065781924655894618190000015008716004237979558_);}...st5{fill-rule:evenodd;clip-rule:evenodd;fill:#AFB0B0;}...st6{fill-rule:evenodd;clip-rule:evenodd;fill:#FFEFE9;}...st7{fill-rule:evenodd;clip-rule:evenodd;fill:#748988;}...st8{fill-rule:evenodd;clip-rule:evenodd;fill:#255D7C;}...st9{fill-rule:evenodd;clip-rule:evenodd;fill:#EEEAE0;}...st10{fill-rule:evenodd;clip-rule:evenodd;fill:#9B693E;}...st11{fill:#0

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769241
Preview:	false

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	downloaded
Size (bytes):	729008
Entropy (8bit):	7.972838994858523
Encrypted:	false
SSDEEP:	12288:Cb734Wa2nmHNjtGI/sCU4IS5Yyw8xA/cCRbIo0QlFEmVE+zdoZQTRplIPWfcxM:SLs2nSNxGI/RySo89joxFEmUCTlgWfcW
MD5:	FD4DEAE8FE77AB95B83828B21A8FD163
SHA1:	9642B90AF22576E6AB548628EE7E62384C3CFAB7
SHA-256:	45BE1DAAD3EDB757C6D417E070C97A682A0E442ABB2C0814AEE1353BBC98029A
SHA-512:	A4D9CDE37748A1D35C7C99966F201106192C29E06668013829CE5D7AD6EE3394FF095C9FD3D82519543092AF8E86565D1646584DBF7ACFFA2787DC060FD587B8
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7d7ce283f_Sumbangan_New_Slider-05.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".....................................................................................b`......."..`.Q$....P....L..$LI(..+5PX."eP.$,!".!0&..ID..I.&.q.....Zg7Y'DL.I........... H.0.J.....DE.PM..e!.LB.)....!....,..A2.....Sx...........1b.M.d...m[..Z.ef".r/>?#k.n..JQ5....c.YyU..e.6Ns..:.Z.Wa...u..q.xm..H.CUH..T.0..j.s{N......<...........D...@......(......D..}....\|.-....1.;rk.u.W..^Fu.s1.:.;...!y...Mrt.,R/.ym....[.u...2...a..i5..<..&.n..f.v!..+.m)[Dm].^...{k6..P..L.':i..y.Jk._...c.......+7X.J.[.....U.rp..Ne3......+.?...n._...I1....@.L.H..DJ.QA..&......$...`.."B`....&...L..&..........!1..bbm...?..10....P.."...@.. ..".BbP..M...." "&...H."B...(.. .....zJh.sj.@......P......0.....R^..E..I....%...Q.*b@.0%..$...A%...1$....J.n......J+K.fbI.e-j..x..nN.q.:..r.j.aI.Mx.k....z.4.x....-hK_.N].7...fy.....oqN/>..q.a;..

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	downloaded
Size (bytes):	168602
Entropy (8bit):	7.97935016428716
Encrypted:	false
SSDEEP:	3072:NfKS7C2A538pcjpoUSc5D92m9YkATC1x+WSi9WXJkK352TAOmId8VaV:NfD7Y5sOVoG5D9z9YkBPyi9GJkKJeA6h
MD5:	E77E1C6962BF4F6CEECC21E09515A0CE
SHA1:	2CD4DAE7C7E3E69A39D44C86D12ABD21F69F25A9
SHA-256:	4E6AB7658D0BAA04A90A38A114DE94ACAA559A03D84305B7AB1279217B951102
SHA-512:	EA67A07AA9A3853DF3EA9919F8AB41D5108C894B42B4916BE81D08FC523607EEC2F05D260DE9E8BA1EEBDC00A9DEF98B75A5F5619A0AC03E9A167F9189D63189
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/64585d4447fbf_MASJID_AL_KARIIM.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................n............................."2.!#B.13ACR.$QSabqr...4cs.......%7DV........5Tdtu....&6U....'8EFev....(Gf.....................................J..........................!."12AQ..Baq..#3R...4....$Sbr....C...5Dc...%sT............?... .(.... . .... .... .... . .... .... .... . .... .... .... . .... .... .... . ....

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1885 x 1812, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	339749
Entropy (8bit):	7.97799123213152
Encrypted:	false
SSDEEP:	6144:qX5GwgSZcwZ4l2NoPl4ZzirhAFLcjSDM4Y3iYB8kG9+FJuki+HBV1WdMWLfwdfVN:W8UbNGeZzirhwYh4YSo8+FsNhPfefX
MD5:	B0E8A1B16519301EC51E92710422D239
SHA1:	75923AE720D7B91CFAA630D85C821A4F31E29CCF
SHA-256:	62904750698D5005F09B53E5F396247B91DA1F974507089353580D7FD9CB06AD
SHA-512:	67B7A007B0EDD8A8B203D9F4065AB16B6435DCE1AE811B2578F73BEBA94E6CF05BF555730D5CC87178CAD7C1CCD7CFB449E2BAA6436E96B540AFE018781269C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...]............j....pHYs............... .IDATx...w\|dW}...^i.+i{..ms......15..$..Ah.....1`.lcL....(t....K .PB.%!.BB..Vo......Y.,i.F:3..~>.Xu..}.3.....$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$.'s..$Ic.......n.V.w".$I.........V?u".$.,...$Ic.....W..9..?...V..$I.T........;.......$IR.3.J.$.B^.....<l.7.!...:1I.$5......z.0o......91I.....$I#.......x..$>..c'(I..&[.?..[.0.w.vm}..NP.$5...$I.0...[.1...}.K..D%I.....G.c....a.U[...J..fat.$I.D^...c.&..~....8aI.$5...............V.r.$...]%I.N........u.4.i%I..FY.?..>~h.>E..N.....%IR.2.J.$.yQ..d..O..6.._x.H.$)...k..?..O....wT+..x.H..Fct.$I....E.'..;.7.[...o.#.$I.....k..?.....~b\|....$Ij.FWI.TJyQ\@\|2....o...{.I.$i..........M.._#......$I.3.J..R....U...^..?....c.$I.....bl..Dob.....j..;.1I....$I..(...... k....1.z..$I.&z}\|?bl}L....%b\|....$IJ..U.$5..(.#...]...../

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1140
Entropy (8bit):	5.361788016251627
Encrypted:	false
SSDEEP:	24:2dtwxCt6/LIxUvU7bTVXp+rhZWmJqr4VP5TXEHTsSgjPT:cyk0T5vcSqUVFXXZDT
MD5:	1300EED8D4DA349D8B8753D846D6951C
SHA1:	9C8CBC86341850F5D165F6668019F0AD847B9592
SHA-256:	F6642930B9AAF3A5C11F9E6626D1AEED77AC8A7A900351000D5FF931A34464B8
SHA-512:	95837743EB6A9DB7975A0B01EA006613BF228962CAB457293A5B48B9676B0AB42E82E581E9A14095668C6714AAAD02B5622DBD4BE9AB513E1860235A2AE8396D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/facebook.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,75.4167,0.0458333)">. <path d="M0,36.178C-9.99,36.178 -18.089,28.079 -18.089,18.089C-18.089,8.098 -9.99,0 0,0C9.99,0 18.089,8.098 18.089,18.089C18.089,28.079 9.99,36.178 0,36.178" style="fill:rgb(62,92,154);fill-rule:nonzero;"/>. </g>. <g transform="matrix(4.16667,0,0,4.16667,63.9317,29.8571)">. <path d="M0,21.868L4.403,21.868L4.403,10.841L7.476,10.841L7.803,7.149L4.403,7.149L4.403,5.046C4.403,4.176 4.578,3.832 5.42,3.832L7.803,3.832L7.803,0L4.754,0C1.478,0

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24467), with no line terminators
Category:	downloaded
Size (bytes):	24467
Entropy (8bit):	5.015718533666719
Encrypted:	false
SSDEEP:	192:Nh0dfIzIDUFaKNzS/gkKAyrs8HgoByeBepLwJGgsHYU/C4:NGfIzIAwAWo7AyrsXeBMLzgsHYU/C4
MD5:	035B876DA332CC81D4AC2CA1FF3A4F83
SHA1:	2372968029594991D58EDC58F5A5FC036795EDC8
SHA-256:	20E2BE978653BF782C817441F31EF65E17D43DFE528C2CEDB6EE810DDC7EDAF5
SHA-512:	817E8AF5EFF87B05E3B67F10FE878FCE0231B3628FAE4B11E12D8D34C60BC5E9EF17B9FB78DA27F576EA4316FEE6372A601542727708C6A17A7D7258810B6802
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/css/sweetalert2.min.css
Preview:	.swal2-popup.swal2-toast{flex-direction:row;align-items:center;width:auto;padding:.625em;overflow-y:hidden;background:#fff;box-shadow:0 0 .625em #d9d9d9}.swal2-popup.swal2-toast .swal2-header{flex-direction:row;padding:0}.swal2-popup.swal2-toast .swal2-title{flex-grow:1;justify-content:flex-start;margin:0 .6em;font-size:1em}.swal2-popup.swal2-toast .swal2-footer{margin:.5em 0 0;padding:.5em 0 0;font-size:.8em}.swal2-popup.swal2-toast .swal2-close{position:static;width:.8em;height:.8em;line-height:.8}.swal2-popup.swal2-toast .swal2-content{justify-content:flex-start;padding:0;font-size:1em}.swal2-popup.swal2-toast .swal2-icon{width:2em;min-width:2em;height:2em;margin:0}.swal2-popup.swal2-toast .swal2-icon .swal2-icon-content{display:flex;align-items:center;font-size:1.8em;font-weight:700}@media all and (-ms-high-contrast:none),(-ms-high-contrast:active){.swal2-popup.swal2-toast .swal2-icon .swal2-icon-content{font-size:.25em}}.swal2-popup.swal2-toast .swal2-icon.swal2-success .swal2-suc

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4760), with no line terminators
Category:	dropped
Size (bytes):	4760
Entropy (8bit):	5.790754467681375
Encrypted:	false
SSDEEP:	96:1gv6vV0qSkxO9D06lUUTz9NnSzZhFt8vf1dtzlTadV6q:1dCqSF9Q6RX9hq0zYV6q
MD5:	EBF6AA2DAE24E07EE53743B3A1339D11
SHA1:	3DEF7C92892658D29D01C296DAB6D2D82B612720
SHA-256:	8F950E623FE8D2282972D7D7A1DE540B52E7AEB275AE1E200AB962EB1C79B8C8
SHA-512:	9B73BEEB74A1A849E1A406E93B394F684D9D23148490E3AAFDF6186C8F0841036D9E69200CD68DDD43E1D93A9F557A9C0B4405016756F1BCBCAEDC952231BB52
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(b,a,c){if(b==Array.prototype\|\|b==Object.prototype)return b;b[a]=c.value;return b};function k(b){b=["object"==typeof globalThis&&globalThis,b,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var a=0;a<b.length;++a){var c=b[a];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(b,a,c){if(!c\|\|b!=null){c=t[a];if(c==null)return b[a];c=b[c];return c!==void 0?c:b[a]}} function v(b,a,c){if(a)a:{var d=b.split(".");b=d.length===1;var e=d[0],g;!b&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;a=a(c);a!=null&&(b?h(q,d,{configurable:!0,writable:!0,value:a}):a!==c&&(t[d]===void 0&&(b=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+b+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1559
Entropy (8bit):	5.189696262169936
Encrypted:	false
SSDEEP:	24:2dtwxCt6GRLIxUvTO7eqrpApPbt0nvcqu5PG58q1/rJWt7cfdVO2xGNygk8FdKCn:cyk065vTOqCpqPbivNDpVOtyg9dZ
MD5:	8D13BB8EFCEAC558EAA96CBC7ADAA0D1
SHA1:	4C8F8085A0AFA5D24F156E44ED8CB4FF3433941D
SHA-256:	FFFB8451F1D8FF3F987350A4E461BADF326CA5DA2D3BF1C63B36F088F43D47B6
SHA-512:	518DD5CB5E76E2DD742DC85F62FB5BFC9958030FA853F97F15703E126DBBA12B48EFC91E821619D2A3FA342D71307ACA97C0C703EBACDEEFD0C731C39A571752
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/menu/akaun.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 39 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-365.761,-172.835)">. <g transform="matrix(1,0,0,1,330.462,-203.997)">. <path d="M54.809,403.237C54.809,401.631 55.3,400.152 56.118,398.961L43.132,398.961C38.806,398.961 35.299,402.468 35.299,406.794L35.299,410.271C35.299,410.914 35.821,411.436 36.465,411.436L59.268,411.436C56.368,408.967 54.809,406.141 54.809,403.237ZM52.701,376.832C47.396,376.832 43.094,381.134 43.094,386.44C43.094,391.746 47.396,396.048 52.701,396.048C58.008,396.048 62.309,391.746 62.309,386.44C62.309,381.134 58.008,376.832 52.701,

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2794
Entropy (8bit):	4.2317550267156445
Encrypted:	false
SSDEEP:	48:QiP4wh0har+Y7SljHapIu7cBMinRNjYCzjtTSBxU+VB:xeharZ7yjHaB4yiRNjltTno
MD5:	03CE470EE0154522418F97A9E025C62E
SHA1:	5CC531377623412C36F60B18C803174FC0AB0898
SHA-256:	4F76117F9866E6CF62912F883509DD8DFC8F4DA6E9DA26B1466459032A1F4FEC
SHA-512:	BB4937859CFC5758B5CF3D395EE6C069524A8F2120F31CA991B6023D8497EB34E9873A25D3B8F6F8E30EC317784AA15BA3F5C0068C3A608962436247C18B8C41
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/whatsapp.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48" width="96px" height="96px"><path fill="#fff" d="M4.868,43.303l2.694-9.835C5.9,30.59,5.026,27.324,5.027,23.979C5.032,13.514,13.548,5,24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558,8.356,5.556,13.428c-0.004,10.465-8.522,18.98-18.986,18.98c-0.001,0,0,0,0,0h-0.008c-3.177-0.001-6.3-0.798-9.073-2.311L4.868,43.303z"/><path fill="#fff" d="M4.868,43.803c-0.132,0-0.26-0.052-0.355-0.148c-0.125-0.127-0.174-0.312-0.127-0.483l2.639-9.636c-1.636-2.906-2.499-6.206-2.497-9.556C4.532,13.238,13.273,4.5,24.014,4.5c5.21,0.002,10.105,2.031,13.784,5.713c3.679,3.683,5.704,8.577,5.702,13.781c-0.004,10.741-8.746,19.48-19.486,19.48c-3.189-0.001-6.344-0.788-9.144-2.277l-9.875,2.589C4.953,43.798,4.911,43.803,4.868,43.803z"/><path fill="#cfd8dc" d="M24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558,8.356,5.556,13.428c-0.004,10.465-8.522,18.98-18.986,18.98h-0.008c-3.177-0.001-6.3-0.798-9.073-2.311L4.868,43.303l2.694-9.835C5.9,3

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	247274
Entropy (8bit):	7.988330237935222
Encrypted:	false
SSDEEP:	6144:4D3xaTKX6S5ZqIUlsbs+f8oaGg57KUmoPCVRnDR3cETR:+wOKS5ZvnpdaHWo+Rtz
MD5:	2A07DA8DC842138CA32553A6A95BA22D
SHA1:	B2FE9D42EA76311E2F9BE6946E8B69E0C4195959
SHA-256:	9F0B3093FFEB11DAAC34BC9E97B9907514D36EC5AE893D5EEA1745373178776A
SHA-512:	6091EA17DBA48DA9CB5A50C3F04D7F67A48C11A676A77D560B0A7E83161440BE20855E617794CA341692EAEF80940B69F79413854979266031F15A5AFC724434
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx...y...}'....w..[.^.7.o..$.f...d..$Mg..&.3=.d.t.{..s....wz:6.c&qH...7...$@B ..(.IHI..w..g....T...ll..st$T.n...R.\|.y~..@DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD..$x.....n.M.i.Q.0.4.BT.U..B..1!.) t.!T!.)...A(...)..A0... .A..R?..O\|.Y"..""".........j..ah.b.A.....p..(..E.-.....).!...!!..H).. .Y@.....@..B@...$ ...@.H).K).I....S..VT.v]...y....)...1.......z.....D"i.F.P.z..r....`.$..Y!.T. D.....a. .C.RB../..Y...,.........P....P..EQ.jTE..*P..B .0.!..0.D..!.Q..Og..>.H=..3.."1.....}.m.9..zG4.].`..fI)gJ)..aX.....!\|.G....... .J..b..e...b.(...

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	69230
Entropy (8bit):	5.324626435250233
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPV:RIT7Vs9ZVKBYj8wKcHPV
MD5:	CD3303AAF68FB781429F62F4EC7430D0
SHA1:	2DCB9B42BCC0C97F9D815A760342EBAFA4F15C35
SHA-256:	5B8D2EA4EFE95E37267FE2360E642B762BA85CAA9D3CF2799A2DFAAB34994C7A
SHA-512:	5B818B6C63FC89837262817170C4317FE936CE5C44CAF81BC35E333CF4AEBA0178CE62DB83091E0DBAFEE605BCEF1A0C867808C8423EAC6D389D21B4DA5D465A
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2131
Entropy (8bit):	4.959730254268249
Encrypted:	false
SSDEEP:	48:cyk0I5vTHR/MoEMjUykE7Z1UptdgQqAG9APXR:1kDBROMx6tUAG4
MD5:	B8B2A69B41CC5CAE3E9F602F725EDF66
SHA1:	C77A9FF96C54353820FCCD3EA9A2A4327C235739
SHA-256:	D8660CE3B8FE25B1CF329B64A037ED73A5A362248D24A378325BD53F68696B33
SHA-512:	A4511874EAB8769DF73AFB1A1338787BF9D4BED7B31F0121C51228F88B7C3D15C9531DA9E09666040943FAEE719A8D77AC43ACE9631C5F83017E99A1DBEFBAC3
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/menu/inbox.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 37 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-492.829,-172.853)">. <g>. <g transform="matrix(1,0,0,1.02954,320.809,-145.641)">. <path d="M207.206,319.034L192.678,309.98C191.345,309.149 189.656,309.149 188.323,309.98L173.795,319.034C172.69,319.723 172.02,320.914 172.02,322.192L172.02,339.894C172.02,341.965 173.744,343.644 175.871,343.644L205.13,343.644C207.257,343.644 208.98,341.965 208.98,339.894L208.98,322.192C208.98,320.914 208.312,319.723 207.206,319.034ZM185.768,333.987L176.768,340.987C176.54,341.165 176.269,341.25 176.001,341

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9459 x 5387, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	505762
Entropy (8bit):	6.419145339547663
Encrypted:	false
SSDEEP:	6144:1OeFL0IOkNbtTid5HHhotlnszV5MJObuhKdzteS3jXbqT75uiIKj+F:1bFtxbZ8V5sObuhKFXgBCF
MD5:	03DBB20031EBE1ABC0DA7441BD97911E
SHA1:	EE547868CB6ED49DD94F43667BF99DD10D9E002B
SHA-256:	9AD6CEB8FEE59CA1B04952BE6DC7B3C186A0055C04D431CC65168733DDCB7AA6
SHA-512:	0EA2D93C38B29CD3CCE792660D9D838F4F3981958884B0D4FCC87CE19EB1D76AE44F54CC4AE40CC45DD0CD8F3BA6FC50F5C1A5063D804789C9BFB488094C88D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..$.............w....pHYs...#...#.x.?v.. .IDATx....m...6.s..K.HcN,0..`....C0...........(%@.&..2(.9....[.Z.v.......S*.rio...#"...............1...........UJ..7.4......SJi...c...c9..jX..............%r........................F...................}y.R.......>.s../lr.<L...\|..3.-w~v]T..a..........\|..w.....2.......1.........e})....................0\..............~....?.zrm..K.)...?.-.^n............o 7.eJ.r..z......}....n.7...v3.u......................0&..................f...B....kS.<..o../.J.WE5.,......85..s..9+......yHx.Os......o.m-...............8.9"................H.}.]..]...z........"...^..6:.....`....8Ws&..ZN.1{.....o...h................0.:...............2...\..v.v7..Jw.}....j>i..^O............"7.eJ.r...e..k.....s.v..h...................V......................n..\|....\..]....eQ...........;O)]...sY.......;OS.7..M..zo.m-...............xe9"..................}y5..nJx..y.....-.....{YT.._......c..n.O'.....\.7g..h.g.................0>..........

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 769, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	136790
Entropy (8bit):	7.983614336948269
Encrypted:	false
SSDEEP:	3072:r1MR8m3x+uK+AuJcGSOmZoQFA81pF4SNkLy+HTPz1XbxIuXXst:r1MmmBV1JcGSlZoc76LflX38t
MD5:	E0F9CDCDDD1C3F8FF99ADB0307BF92F3
SHA1:	4790F6862615D298BE37D55D83CC43EE62CDDE71
SHA-256:	EA27AA74560CA291FAA26C6390DE687C34A357A59BB3C77730FAF1656B144C8B
SHA-512:	2A82AAE273AA8D4308475F4E83373F702449626C8D3C3DD7DCC7D6C37F67CE1DADC7B091729F8AB97070B442FB3D0BA16B3D1748EFA5797D8094B8F37AD610A9
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/tiada-pecah-amanah.png
Preview:	.PNG........IHDR... .................pHYs............... .IDATx..y..e.......3!7.$@...C....."...Aa]ew.....FY.]].\.....A0."BT....YD9.#...9......[oWuO.d&...>..0........z.{).A....g.6`..gA...@.H...w..@.X.......c...B>.U..A..Q... .SN4...F?.&dc.6...q....c...B.O.%A....A..ar......p.....W....b!.Z.IA....A..ab.G.8.x.p....xX..d.N..b!..<. ." . .....9....h..../.r..b!..... ." . ...K.^..".xm.._....X^,._.#C..A.D..A.;.....>...+R..h]...X..%..A....A..L<....C.tY....W......d9.A.D@.A....#..;..#eE.._._.n+..Z.C..A.D..A...6.....f.......?...UY.A....A..V..,.Q..\Y.q..HD....eY.A....A..V..4p&.9`'Y.m..g..%5K..A.D.......N.>.,...n..\|.X../K!.. ."..0U....R`.Y....~.\|Nf... .... L%..\|.8KVcB..\|..j....r.. .... LV.P.{.o"........A....A...(.....N..T.1...,..,. .... ..D...\|..r..+2i...p...N.B..A.D..a..G7......S...?.WK.^A....A...&.......jL9..>R,..e).A...G.@..a..q&.{..)...;{...'K!..0~H.D..ad.h....!...<...X.? K!.. .".....c7.....-E...b!..Y.A....A..m%.....f.j.$..4..)N..A.;\Y.A.....F..`.Y..E.o...8.._.}....".. ."..0...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4760), with no line terminators
Category:	downloaded
Size (bytes):	4760
Entropy (8bit):	5.789436003278229
Encrypted:	false
SSDEEP:	96:1gv6vV0qSkxO9D06lUUTz9NnSzZhFt8vf1dtzlTadV6cSF:1dCqSF9Q6RX9hq0zYV6c4
MD5:	D68227AE8B9C34C0ED4AA0F052401C7C
SHA1:	220FFDA581F2C05C53C08176E1062C50B02DD146
SHA-256:	BB1FA929FF4BB5563D0803CC0ECF01A2E5D4B2A8CCA13A2B7756AF67E950ADEC
SHA-512:	68332E017A9C5540D016254E105C1B11E8B60F28833DEC7A96CEC5331E6805F371B9F6C74F4A104F4F4F8C6320547AE56AD7444CD9221167D3C024774BEE386D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10947617392/?random=1732450766497&cv=11&fst=1732450766497&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(b,a,c){if(b==Array.prototype\|\|b==Object.prototype)return b;b[a]=c.value;return b};function k(b){b=["object"==typeof globalThis&&globalThis,b,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var a=0;a<b.length;++a){var c=b[a];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(b,a,c){if(!c\|\|b!=null){c=t[a];if(c==null)return b[a];c=b[c];return c!==void 0?c:b[a]}} function v(b,a,c){if(a)a:{var d=b.split(".");b=d.length===1;var e=d[0],g;!b&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;a=a(c);a!=null&&(b?h(q,d,{configurable:!0,writable:!0,value:a}):a!==c&&(t[d]===void 0&&(b=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+b+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	dropped
Size (bytes):	253502
Entropy (8bit):	5.552930065627674
Encrypted:	false
SSDEEP:	3072:LpgYpTAX/D+Of07t0tBgDwPAjIJ8UUlPM22KiDUG7Z0DmoMfgQJv53H6D:1MX/iOf02PmPx276DmoMfgQJvW
MD5:	24BEBDD946C34C3EECD5F04B50795D27
SHA1:	EE0F0D31ED029B4E2AD09DD96C7D63A74AD277F6
SHA-256:	5D5EC715AC33557C4C6F435F75C9F835820B5F62594D5E742AFA64732B1E6C15
SHA-512:	F3F564467B9F92F4B629957324B6ECF638A0E85FA5415A4FB1C5B502C8DABD0E5EE14EC80BFB39B96BB66D3E2C552B8D7FED3DF8D5A2DC609F5884E83B1D95F9
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 833x625, components 3
Category:	dropped
Size (bytes):	220946
Entropy (8bit):	7.977120943519483
Encrypted:	false
SSDEEP:	6144:8Hk6alv+m9GE5T6GamYa5/sWwwL5RJmqwPUy:waV+loZ5vmFUy
MD5:	E41A6F275175561A5CE1B9FFFEE199C0
SHA1:	DCD45F140F131039FF8C728490A1220EBD2CB146
SHA-256:	E533618864D5206A03F62D2502CF84862B5EE597661A353F118207E222F1B554
SHA-512:	B6117EC5D02CF0C17CE3522F959A7E168F0D7DDD152452484F7C9F01F12C6A9D7C5EDC4C461D96542131C946FD3A91F35DEBF586D024D79383FB8444A99C0BE7
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................q.A.."..........................................u................#..........!.1.."AQa.#2q...B....$RT..367Vbu........%8CUWrtv.......45S....&DFGcs....9X....Hdf.......................................D.........................!1.AQ."a...2Sq......#3BR.5r.b..$4C...c...............?.g..........N.z.$;m.T.."..._[..y.\|._A'...*..z..s..a.....jW..`.}...~$u..m......

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2823
Entropy (8bit):	4.937917546576145
Encrypted:	false
SSDEEP:	48:cyk0D5vcKK1R9/ij3NM59A/C9vmH1U7f3gOcuB1GX4VOJIxk:1koaR9/iZM5WWvn7f39cAswxk
MD5:	5743D74E4E303766A25304743C5D5242
SHA1:	7FEAC01E1667B292EAB7FB4A9B645C736F091DA4
SHA-256:	497D5DEC3F5660D160E49DF49C96A03F05515CBF436F3FCC97655054732DD94B
SHA-512:	9F7B6AB765912AE7928E8ECA4496101C3C3652317F2E52E81F4FF3DEDE1E71C2BBB2CC0A88D3B62F79F9DBD4079F2128C8BAD5228ACDC07EB379CCD93EA295FC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,74.4504,167.188)">. <path d="M0,-10.155C-0.395,-10.033 -0.663,-9.668 -0.663,-9.255L-0.663,-0.82C-0.663,-0.299 -0.241,0.123 0.28,0.123C0.801,0.123 1.223,-0.299 1.223,-0.82L1.223,-6.227L5.206,-0.455C5.488,-0.05 5.956,0.123 6.397,-0.015C6.848,-0.157 7.14,-0.585 7.14,-1.114L7.061,-9.282C7.056,-9.8 6.635,-10.216 6.118,-10.216L6.109,-10.216C5.588,-10.211 5.17,-9.785 5.175,-9.263L5.228,-3.744L1.057,-9.791C0.822,-10.131 0.394,-10.278 0,-10.155" style="fill:rgb(0,163,172);fill-rule:nonzero;"

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2001
Entropy (8bit):	4.925276573121252
Encrypted:	false
SSDEEP:	48:cyk0p5vTEmEWYyBZKAZXVtsbGam6bj4M/+jtfH+SsyFsiOU0:1kqKmEzv6XVtqEMKtfH+MVOU0
MD5:	CA625BDF28E4AD57D503D4ABAD353A0B
SHA1:	C0FA612367512C9EDBB3BBEC3991306294060C3D
SHA-256:	CE16263DEC2ABCA0826D9F1B5ABFD328628183F21F03D93D56B4D2643AAD0A27
SHA-512:	3988B3186D0CACC3B66852B5C6C847F28D3DD63185900071B0DDCC29D48B454E1182E04AF9E414EFF2564C8304D4C566B19C425A26F6456119B99846202FBE96
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/menu/derma2.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-308.871,-172.825)">. <g>. <path d="M343.589,193.471C342.734,192.39 341.165,192.203 340.079,193.053L333.001,198.599C332.65,198.874 332.216,199.024 331.77,199.025L326.698,199.03C326.008,199.03 325.447,198.471 325.447,197.781C325.446,197.091 326.005,196.531 326.695,196.53L330.945,196.526C332.326,196.524 333.444,195.404 333.443,194.023C333.442,192.642 332.321,191.524 330.941,191.526L321.21,191.535L320.553,191.536C319.209,191.537 317.906,191.989 316.849,192.818L313.377,195.544C313.16,195.715 313.122,196.0

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47949), with no line terminators
Category:	dropped
Size (bytes):	47949
Entropy (8bit):	5.183554091666455
Encrypted:	false
SSDEEP:	768:fBDhCFRo1B9F1QTGuaJu5JZaXoY5+7qvqARu1GMJ5348UuGuqUjllneygPVnKhc1:fbCTK9F1Id52X6qyF1GMJ5oQbKEO
MD5:	FED05BC651BC21E4115875C3184293C3
SHA1:	241DC94EEFBA1DCE3721947878AF4084997B5B5C
SHA-256:	846127CB95C010739158FD625BA92E6CF615F93763275C7C3920BD851BE9C168
SHA-512:	FAE18776909A132983E84AAF511E07FCF06EC2A9B7253666461DE04F42EAE765460C0972C1D5CF04488B899520E83D5588BA27B8D49415D6CBDAD1FD76300FF2
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function a(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(t,e){for(var n=0;n<e.length;n++){var o=e[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,o.key,o)}}function s(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function u(){return(u=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,o=arguments[e];for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n])}return t}).apply(this,arguments)}function c(t){return(c=Object.setPrototypeOf?Object.getP

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3
Category:	dropped
Size (bytes):	11090
Entropy (8bit):	7.956585373243805
Encrypted:	false
SSDEEP:	192:GBTCzDwWrwlet6Dq6E3eYtWUimkHzlg6odCmeGzBc57COc2NRBQP+:sT8OC6DAJimW26nTeBO7CfaRBQP+
MD5:	A72E4A24EBFC2667DCC9269D19232648
SHA1:	88D37EF6DF1B6071A14E1827AE9AD01934050D26
SHA-256:	A6793B86EDFFDC8001C8242B0B56F72D3C2C65CBAF6BBF5A380D567C56B2E930
SHA-512:	6EB94C31A699FB9DB48633353ABFBD381FCEC6019DC403B5EA07DB01BFD7EBCF58350060DC2C39CB0F718F62F62636321EA8D56DFF5649353DB754B9BE55674A
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................( ..%...!1!&)+.... 383,7)-.+...........-% &---/5---/+--------------/+-----++-----------------..........."........................................F........................!.1A.."Qa..2q.#B...3Rr..Cbc......$4S...Ds..................................4......................!..1AQaq.........".B..R2Cbr.............?..(....(..".(....(B(..<..........K../{aj.&.....o..R.v.S...=X......J..;,].......9..,..J..........3%...=s8....c.....Y..R7.......-..v.H..W.5.....?v...I.7..pv..W...D...$)....+..0A........cuc.........[.$H..8 ....2...V.}...[.'.....\b.x-...w[4s....QEF..1O..C.,....$...tM..$....(R.(..".(....(B(....(..".(........on.5.....>.9..U7h;Q..c..K..P.....Y.kyo..ME.....a#..^C.k...9[r....wwLfw....B..=.v:,.....?$.?:.....\.{."8tf=...Cn[r......#pV.2.K.8d9db:y.LUdz..23..k.2..AV..to..Y...B.]R.b]'@D.y..;.......6T..N.L..!......L..2../(P...`..._>b.%..:f(#...e.,..V...\...HVx.RI...vG.m.'W<..T..z......w.......a.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 355x345, components 3
Category:	downloaded
Size (bytes):	16546
Entropy (8bit):	7.8821895976006715
Encrypted:	false
SSDEEP:	384:9SSrgED4+QKHw4a/V8jgQS4yYquGpuSJXxZy1oXw3nmn:VrZD4cnEVmgQ1elUoX+mn
MD5:	BE1942B1DB05D27DCD911E3DDC716FA1
SHA1:	EE02627B27E231637DFFC2D4946705AD8AD27028
SHA-256:	22E834C0288B262880C171E846A1023E98FD8CABDDBD95C656A31043D3A65D9A
SHA-512:	5B9BAA927B346DD3377CA361CAEB6C1203813C336B87310575AE296FD96BCA91E382E58A256A4B88F0C52853F70DDA9480F22E23085C4A3FE3C65FB4DE8E732A
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/56/logo/WhatsAppImage2021-08-27at2.13.51PM.jpeg
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................Y.c..".........................................J............................!1.AQ."aq...2W...#$B.R...%Cbr.3u...'7SU......................................,.........................!..1A"Q2.a#3BRq..............?..o..~.c?.....0.O..g....dAl..i...3.M?.O..4.<..I....D....~.c?.....0.O..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 375, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	425399
Entropy (8bit):	7.996315198039264
Encrypted:	true
SSDEEP:	6144:CBFf9OtowPn4CwhC9I3RgpU+dukSsW7H6VTTc6IOCrDZKRKPjRgW89QgI7eBjmIy:EwPchCKypUdkSmTGfrDZCK7iPmYY
MD5:	F5FA2479EDA8DD60934B60F19C503D16
SHA1:	C12E35AD98D628751314293F5F45CBC27EBFFEAE
SHA-256:	09447C2FE7B87C4B10CEB83D61CD44D81F1948ECB31FF645F0191C22DD05FF80
SHA-512:	A4382DDCBB8AAAAA08A223C8FC3C23980B5C1FC65F430590E77C2F9EAB63933CA7A4210D508D7811DBD6A6D352DE6A2EBF02F017781297034B77179E50F65C41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......w.....S......sRGB....... .IDATx^...e.U........r.+3k..[.J........X......c..v.x.f.1&<6....,.1...XB..-.^.]..UY.U...o..~..9...&.........\|..w.....\|.;.Jq.......Qx..D1TIE&..m..b....um..TC.n.......L..YI..4f..1..A&.a.@.z...--F.......IBRR.QuX....`.\E.u1yx.....4.."#T....LMM........$... ....:;.G...Q.A.yC........z.6..%.[.....w...xE...'.)..G..X.$..(.....1]SU.,..x;:..a..d.$..%.C~...HB?..=.z.>..^.?.{.>..Y.=...Q...e...u..#I....W.._....#.?..k->....t^A..K"......!._\.......7....u.ma@c..z...a..1.7.#M.(.k:FE....=Q.A.t......BR.!....41.i.^.q....D.D:m...;.....1.=Y...9t.t,.<'B..C.... ..........M8-..d.i:.........._.\.n..(.)...K.........]...m..........S..).....M....7?.....{..=i.J..[....b...4......wn...k.".._G.8.yT.H$S(..`y...I.....G.....B......uH.49@.1::..."....+.....$l.....G..f......N...IQ.z.b.6.....@.C.v.......x..O......D.X@.wQ.6.K:...l..T..dX....Ulom#..b`x..v..[..R.(.......#./. ..H.)...(f{.....n^Y..r..S.P..I&..L..I.=.;..6J%.rY\|..oaiu.."A...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	downloaded
Size (bytes):	152626
Entropy (8bit):	7.972827496379464
Encrypted:	false
SSDEEP:	3072:uE4bsl+2s6ulZ2RyNNrpa1LcpiQfS8RaImrp/rEQuecL0WzulSxQHE6csUxkOKh:uTQl+7r2RyNRsL8iEzaIGp/r+ecnhQHX
MD5:	536C23DD65CF7E975DBC524408EF85D1
SHA1:	B531443C0E20EA1D0CF6A2C7C2042B4804015A03
SHA-256:	42385739ED64EFFBA91484C84D8C1EB3F83A32FC9AD4B123785794099F8EE79B
SHA-512:	5D1C6F1EA697459945A88284E054AA9F14ECBFC9B8B738070B681FCA9EF68B9B5C2736BD151B358D7956FE576EF3932BE30EB8E676EBDC6737031707E6383868
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/642e39dfa8ebf_MAKANAN_BERKHASIAT12.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................t............................"#2...3B.!$CRSbr14AQacs...%5Dqt.......67TUu.......&d........EVW....'Fefg.........(8v...................................H...........................!"12A.#BQaq..3R.....b..$T....4Cr..S...6D..5............?...A.~.5...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	146846
Entropy (8bit):	7.978923604653462
Encrypted:	false
SSDEEP:	3072:wMHGWmG64Esqv53ylbZ8zrjy4WELR2Hx8PFBCDApJItHOIJhzk:wMHGlG64RCylMrmHELR2R8qemk
MD5:	9E40DE124E9B6F206FB91FBCA5A29804
SHA1:	F2ED47555FAB48792F139977991959BF55EECD7C
SHA-256:	69C9061A09A2000BECCD6EC410C6A9AF86E11E5FA1F94CA94AC64A5DBDC12C29
SHA-512:	C49B81F0C0C9D6046705CCA8F3B4A1646B0C602BFB7CE473029142761C0E46635B59D3F82273B5DD99A745D33F7C3EF0FC15FE46DBEC6933EDA3379ED42D9206
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................v.............................."#2!13BR.ACQSabqr.$4cs............%5DTt........&'678UVduv...Ee...(Ff.........9IX...W...................................K...........................!"12.AQaq.#3BR....4....$Cbr...5ST......%6Ds..c............?..:CEG.0..(..p.4X...,HN..}b....rY=6.'N...Q.G"/He.~-..C.Y).......8'[G7

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1080x810, components 3
Category:	dropped
Size (bytes):	212968
Entropy (8bit):	7.977981770879927
Encrypted:	false
SSDEEP:	3072:LOSeO2Hfza8Kgq5ZON8BZxuLfAWHNkO5iw8x7lbqvQvBN9hSzAifbCEZgvbIn8gv:LOS+fW2qLZxC4WqO5i5lmv8UCbT5Vg
MD5:	759A23C1FEA5599EFC5B48FFA67CD800
SHA1:	1E15D1A8948957502157A0AF7082FAEF26BA09A2
SHA-256:	E836280847D7A8A3F4A524C3648A93B6E21D68B7D427B3549C6E7965402F0325
SHA-512:	A1386D96365D84A617EF4E776C32F60056ACBFF05C5D0E9AB75A60375AF16401E47B1F0C752078B97C937AC19A6CBED4E95121D00DDA4CA2D6F6BC07C3584EEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................8......................8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................D............?...J.:.u..S..3^..X..oJ.4s..,r.5.m...@...1..{U....S.q.8.J....L..u!...H...o4...0p.s2...8.260..pOn.y.........5;%E....IP.$.P..8e........V.6.{P..8...i..'.s..2d.j.......a..../..S.V.,..4.)..V.+q.tV.q.sV.#9.[.....F.s..E..x.@...6.j.x....d..l.YXC....<....qW.Z..m.+>..&.=.'5....g..y..U.c.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	566498
Entropy (8bit):	7.970677652962003
Encrypted:	false
SSDEEP:	12288:MI+UH5XKo4wp4RjJKwmuqK68+RZkAqmPXMIPxagtCZ/N+:v+UsH4UjJ9q78OZk5m/bt2/N+
MD5:	70AEAF46A8F5CE64FDA5CC11B63BF15D
SHA1:	F241BB1F48FF6AF7EE3F76FBFAD2AB1FA90E81CA
SHA-256:	21543DD4446AF56A13210BE633E6A3D0CA6D1CAB2A0EAD03F0DF3E3F5BD6CD13
SHA-512:	94E650BDA88C8112FA79E2E833E99A86E584B1EEC35DD11452240A9C878FCFFAB61421602332AE499C8B0C55DDFEF4AB8C660824087BA29FBB62D800419D3F5A
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/3.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....wIDATx...Y.%.u..n3w?..FDFf...s..AR.Y...........W?u..~..j--....X.J.I.#....<.\|.gv7+37s....."#......>....1..I...............................a8...............................0p.............................L..w..............................0p.............................L..w..............................0p.............................L..w..............................0p.............................L..w..............................%.........X$3jJ.4"..jd..ea,y....&Vk.x(.,.......R.IRM..@.D.......('K...V....lM.$eK.U.9O..K.t`l.M..\...d..t.....L(m?..o..l.-..eR.....=1..G..Zv-.,.&f.XFo`...'.M&.4."....!...-;N.bV..e..L.r..._B.....\......2z<.;......@.U..k<...WA..Z.............x.....g....\f.D.]?.%.B.}....l.=]yI6....f...G....JfQ.^..td,.3.....g.....3...d..._R.~-y...>kK(]Yd.wa\.....................................-.......E.KNF....W.v.r..&.F...zyXf.,..W^..o.....I\|o..{...[.h..}.\..5.........

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1037
Entropy (8bit):	5.41342675572482
Encrypted:	false
SSDEEP:	24:2dYATLf30xxQw9fNQM2pC24b9Bb4bj7FKUM:cYAvf30xB2q92H7vM
MD5:	60550FAED7AADB857BED164C5702C8B9
SHA1:	A24D081A208BA9C72433374BD7E8DC78976EDFF5
SHA-256:	B8A7F836BCFAFFE82FC48424C40C5752BEC3805BE552B64C1CE11BE5D5D2EFE6
SHA-512:	C516B024A191F5FE39130CDF08986BD62E7A69350454C25B4B696178940B15B4CF8BC77D7FECF5C458D7BA5701F4B0C829A8206E741BD62C8CC305DFFC4FBF92
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo-small.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 54.21 54.21" style="enable-background:new 0 0 54.21 54.21;" xml:space="preserve">.<style type="text/css">...st0{fill:#22B7B8;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_4340_">..<path id="XMLID_4343_" class="st0" d="M54.21,0H21.64C9.69,0,0,9.69,0,21.64v32.57h32.57c11.95,0,21.64-9.69,21.64-21.64V0z"/>..<path id="XMLID_4342_" class="st1" d="M24.26,21.85c0-1.4,1.27-1.99,3.05-1.99c1.95,0,4.45,0.76,6.66,2.08l1.99-3.99...c-2.25-1.53-5.34-2.42-8.31-2.42c-4.58,0-8.56,2.16-8.56,6.83c-0.04,8.06,11.79,5.77,11.79,9.96c0,1.48-1.44,2.12-3.35,2.12...c-2.46,0-5.6-1.02-7.67-2.8l-1.91,3.86c2.37,2.08,5.94,3.18,9.37,3.18c4.83,0,8.95-2.25,8.95-6.87...C36.26,23.67,24.26,25.66,24.26,21.85"/>..<circle id="XMLID_4341_" class="st1" cx="40.6

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769236
Preview:	false

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	11298
Entropy (8bit):	7.8508326262345545
Encrypted:	false
SSDEEP:	192:30UAamqxgvcDw8Ukk9Yu2BrmL/P0/MKmjIZ7fnrH8VbGWnVCZNnVHwY1Z3n77W8U:1AUxdVI52BrmL/P0vZjrcJqnVHwY11C5
MD5:	6538EBC50C9D478C481AD03D9BE41A91
SHA1:	B09257A90D1A9EF0F06AB83B00D555D75E6A0B0F
SHA-256:	4B4CE4DA69558436C81E8754EEDAA193A993D6514644FAA2E596ABA03F546A11
SHA-512:	B9495A4062A8CB4420C0D6276DC5F95CE59D5EA1F3ADC9C685C7CA475ECCDCFCFEF30F88F0A9D2E066DF756980472499709BBB8EAEFF165EE34F76914CE22A7D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................O..........................!.1..A."Qaq#2..6b....3Btu....58CRcrsv....$7ESVe.....................................;.........................!1.AQ.aq..."....2B.....Rr.#345b.............?..M................pH.rv...WZ..E@...o...u..3..Sm...

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8864
Entropy (8bit):	4.772871890935299
Encrypted:	false
SSDEEP:	192:1k579JCqWuhF1CQo3coSmlIwlsn/pcq2l0/lo3cB/AAw+wTJchI9R0jmdeId:1A79JBKQo+mlXsna0/lo+UTXB
MD5:	FD705945951569EBB54D7CAF35CE3F8C
SHA1:	40E1F1419C19EF341909CF67074666294E09BFA4
SHA-256:	25B1D56982104F84ADBDD74C54F4CA72E980C12892668A10B8C7D3B1B5F61E26
SHA-512:	C8FAF1C170DE5FFBE18094D4DAD2928C783EFD9261419CA67C19337C3436F1780206B4A04059521B5B4CEACD44CEB8FD0AE83F099320B294057A1F2F77AD5D8B
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo-sumbangan.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 1775 420" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-153.523,-83.3375)">. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,211.239,10.0005)">. <path d="M0,50.355L-192.816,50.355L-192.816,20.098C-192.816,8.998 -183.818,0 -172.718,0L20.099,0L20.099,30.256C20.099,41.356 11.1,50.355 0,50.355" style="fill:rgb(0,163,172);fill-rule:nonzero;"/>. </g>. </g>. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,112.443,19.2552)">. <path d="M

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	335309
Entropy (8bit):	7.993440582297459
Encrypted:	true
SSDEEP:	6144:6pwRNUuFRpdhC6OTLJa9MSMKccLYzBFccLzyryHoCVdPuSmCoob2w:wwLUWbC6koqSSBBFcsz8qVdPBoobN
MD5:	7B23A4753A8F68586B3A4B34F98C856E
SHA1:	E43BAE08EFB6FDFD7EE4999603621AB984D1E674
SHA-256:	6D9466E74E62C6AB41CC69322F6DEB7291A885E6D27F9B58D8A15C6C19E3FCAE
SHA-512:	B0C64740D65FD6582C8077431ED609EA45FDA838C04886B4D4E577D7D41A489E16FD90B6CDDD17857E8AEC37AFD930E4CD2788FBCDAC6A19BF8ECD70927CAC7D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/vanity-url.png
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..i.%.u.....o_..u7........ H..i...#Q.@Q..Q.....D....K.D.e..1..[.1.c;.......ZH. .b#.4....u....VU.?.r..f.{_..........VeefU...9'.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..A.U.A..G&.K.o..x.1<.W$.s.Q.wM..c...^..=YP~.w.....TO\.Wh.z?I.`.w..z<W.5....._[...f.....,..H.;9./.m4.=..O..%.:.lL......\i.Dc........k..2.....bB].gC...~]T~.Y...W.2.yt.c.....2q.3#..M......O...h).c...=...w.....3..=C{.q..%...X

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3742 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	451121
Entropy (8bit):	7.960773945319856
Encrypted:	false
SSDEEP:	12288:4j40K88vIZrRDu/EyJBHFsgM0yNErkttToyVJTnOcyzta:4j40KwZFDsRlsDlNqEVSBa
MD5:	228F2445DBC6ECE4D7A9A3FE672F2B77
SHA1:	183A9025F90B6C4E1B9D07DC20E046F60D025A55
SHA-256:	C0C1A9F17006D1864DCC5221188CEDA9F39110EBDAF2E91AD3F33CCB0D1A49C0
SHA-512:	95A906D23FC0AE13031F226F8FFF2EC599BA339272035D043C84078E8B5869D15EC571035C243EF5B21507ABDC44392F72C92DE53FDF211B9D69088AF900BFC0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4........h....pHYs.................sRGB.........gAMA......a.....IDATx.....$.~..eV....=...{qq.\....A.d..."lZ..-....._.....~.)..a...).t.R.$.AY6..@.O>....{p..=.g....JU..vef.Tm.....\|>...9...U....U..:...............k....................................S................................&................5..................<..............`M.)..............k.O..............X..W(........x5....>. p5......j.^..p..M..d.>.w..>::.........~..X,.2'E...g...e.:..LU..o...)..Noy..=.}.{...jn.4.X........o......r..n..........~.Sz._^....Mm.....y.."........e..].u..].%..."..e.....m......e..Wy\|;.......^7..>..D.Z}W.../v./\....g^..w....H..Wwo....7..u.^.....c..Y..y...u....o....sn...A...~.....n.mm..../..x.................S.......................x..-..~.......~..n.''......7.......Mz.X...<.W..>>..6...M:u.r)..8.-..].Y~[.w6...cVC\|.WZ%.t,.c....T<...<...}.6........}j....t.\|.w.....q...*c..~.X....#.D.X}g.;.8g...^..oj....S./..]..N...}.F..+pN...

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	323396
Entropy (8bit):	5.589106394177643
Encrypted:	false
SSDEEP:	6144:P4FAMX/iOG9iQPmPzI7BJDMfgQJNCOu6x0/aJw:AFN64QPmc7su
MD5:	F8D59080A9575C08DCE45AA9AFD21FAA
SHA1:	0EE37B11FAB56AA096F55C2C8B3C3312F1C6D897
SHA-256:	4AB08021AD032660150808D258FF35E44388B5F1DAFFF3F0208A8F4C469E12A4
SHA-512:	68B5D65210DF167C8EF81E1CB597B35DB57746DA0E1C178B5243EEC384EEE3E49A8FDA9A3A86C622297A4E6938B95778407D40F0CF8B567E98D6BF6563A47F67
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	335309
Entropy (8bit):	7.993440582297459
Encrypted:	true
SSDEEP:	6144:6pwRNUuFRpdhC6OTLJa9MSMKccLYzBFccLzyryHoCVdPuSmCoob2w:wwLUWbC6koqSSBBFcsz8qVdPBoobN
MD5:	7B23A4753A8F68586B3A4B34F98C856E
SHA1:	E43BAE08EFB6FDFD7EE4999603621AB984D1E674
SHA-256:	6D9466E74E62C6AB41CC69322F6DEB7291A885E6D27F9B58D8A15C6C19E3FCAE
SHA-512:	B0C64740D65FD6582C8077431ED609EA45FDA838C04886B4D4E577D7D41A489E16FD90B6CDDD17857E8AEC37AFD930E4CD2788FBCDAC6A19BF8ECD70927CAC7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..i.%.u.....o_..u7........ H..i...#Q.@Q..Q.....D....K.D.e..1..[.1.c;.......ZH. .b#.4....u....VU.?.r..f.{_..........VeefU...9'.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..A.U.A..G&.K.o..x.1<.W$.s.Q.wM..c...^..=YP~.w.....TO\.Wh.z?I.`.w..z<W.5....._[...f.....,..H.;9./.m4.=..O..%.:.lL......\i.Dc........k..2.....bB].gC...~]T~.Y...W.2.yt.c.....2q.3#..M......O...h).c...=...w.....3..=C{.q..%...X

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	179371
Entropy (8bit):	7.993928534377782
Encrypted:	true
SSDEEP:	3072:Z+ICHMG0UuhkADvRf8p69NpT6KRTJfBp+Z67k3HrvKf0DV2AEVTHiGFcWtxSiG:QVHMIuhbDvp8IzF6StfaZ643Le0DV2jI
MD5:	BB21A26EBE8391B4E5A4CFA0AA68517A
SHA1:	59D841DF8AD8691BDD76E90B42694D49018AD503
SHA-256:	14C5A166A302F1AEF6759621B614798404D5A344F0239CDA13541C15B0E7F0E4
SHA-512:	6A3DD68266627EAF9C698E5132A1C1D0A73CB24106D4EB6E2C2D5CE158D4065AA44A627B66F20B7A35A8E4791765695FBD17E9CF3BD667F8849DB27E10CE5515
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/laporan-harian.png
Preview:	.PNG........IHDR... ...[.............pHYs...#...#.x.?v.. .IDATx...w._W}...9..o.>..2..+.....@..@6.G.#.5).d...,.)l.YRI........B .B1....`.&......o......wfd..$[...x.#i..~.....s...................................................................................................................................................................................................................................................................................................................................................................T.W...Q.\..8.9m...yE.vGG...._...u...(E.\...X.DDD^.....Xm.....c..hC...(...\..............y:....(...\$.'DDDD.DD.b...............B..DDD.@DD...%""..""rq.n.J,........F.b...(...\..J.DDD.@DD.f.Q)........E.!:...(...\$Z.PDDD.DD....T.%""..""rqC..y""". ""..J.DDD^~.....>C.y1!..p........B= "r....""". ""...R,.........@.........+..z.`..8#....T./W.1.3D..y.......`(.>#.;&&803M5.5...0......X..B`-a.h....B.XG.......$.y.V..g.sx..8...9....Z.k{....+.9b.........$..EDD.@.C...a

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149829
Entropy (8bit):	5.600609063029094
Encrypted:	false
SSDEEP:	1536:Cnxj42ndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj4y9OU03o4PwjhIBVT39ROyuvb
MD5:	DAF17286036BD518A93431BAE557255C
SHA1:	8391CECF7FF61062E9DBFD88CC825FEECEAE9D73
SHA-256:	2ADCF9FD70C1C834F4B13D732B66F4900CEC9A6BBDC587B85DBC68CDD9A34BE4
SHA-512:	0DB754DA88122CBCE3558CBF5A61062C3AEBAF03F8A8F7D23E96B384993C179668D8930FBE38553D3AC190AABA3063442F7A0469F3A18DB77DF8713F853BA97C
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_45dd5971.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6024
Entropy (8bit):	4.259894438574401
Encrypted:	false
SSDEEP:	96:1koNxASJac3xC8Jwq5VdTRCpGfwQ3Qhe7abGgwMVWcvRy9r87mFujM0VsX5MbAkd:1kMJaXqdTRrfwu5ModomFujM0VvEm
MD5:	A584C59FDA4695FBEB75C67CF03B8D31
SHA1:	D6E8176A288787B2937E2A82E357E6F3CBE326F2
SHA-256:	869D3D0456579F46B91E71ECF6141D7DCF90952000FF278D96035EE399AA09F5
SHA-512:	0FE6463D6C4CAFBC1492CD247B47C1E6B129DD4713A936AEE859B415FFB70CF0A73D0B405B646D76A763443B9DCD4869C604B76F10F2807AEF35603DF22FDD5D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-1112.22,-2256.09)">. <path d="M283.828,596.396L318.238,596.396L318.238,596.448L283.828,596.448L283.828,596.396ZM292.242,583.6L294.397,583.6L294.397,594.345L289.437,594.345L289.437,586.404L291.742,586.404C292.018,586.404 292.242,586.181 292.242,585.904L292.242,583.6ZM299.253,583.6L302.811,583.6L302.811,594.345L299.253,594.345L299.253,583.6ZM307.668,583.6L309.823,583.6L309.823,585.904C309.823,586.181 310.047,586.404 310.323,586.404L312.628,586.404L312.628,594.345L307.668,594.345L307.668,583.6ZM286.6

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1885 x 1812, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	339749
Entropy (8bit):	7.97799123213152
Encrypted:	false
SSDEEP:	6144:qX5GwgSZcwZ4l2NoPl4ZzirhAFLcjSDM4Y3iYB8kG9+FJuki+HBV1WdMWLfwdfVN:W8UbNGeZzirhwYh4YSo8+FsNhPfefX
MD5:	B0E8A1B16519301EC51E92710422D239
SHA1:	75923AE720D7B91CFAA630D85C821A4F31E29CCF
SHA-256:	62904750698D5005F09B53E5F396247B91DA1F974507089353580D7FD9CB06AD
SHA-512:	67B7A007B0EDD8A8B203D9F4065AB16B6435DCE1AE811B2578F73BEBA94E6CF05BF555730D5CC87178CAD7C1CCD7CFB449E2BAA6436E96B540AFE018781269C5
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/tiada-manipulasi.png
Preview:	.PNG........IHDR...]............j....pHYs............... .IDATx...w\|dW}...^i.+i{..ms......15..$..Ah.....1`.lcL....(t....K .PB.%!.BB..Vo......Y.,i.F:3..~>.Xu..}.3.....$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$.'s..$Ic.......n.V.w".$I.........V?u".$.,...$Ic.....W..9..?...V..$I.T........;.......$IR.3.J.$.B^.....<l.7.!...:1I.$5......z.0o......91I.....$I#.......x..$>..c'(I..&[.?..[.0.w.vm}..NP.$5...$I.0...[.1...}.K..D%I.....G.c....a.U[...J..fat.$I.D^...c.&..~....8aI.$5...............V.r.$...]%I.N........u.4.i%I..FY.?..>~h.>E..N.....%IR.2.J.$.yQ..d..O..6.._x.H.$)...k..?..O....wT+..x.H..Fct.$I....E.'..;.7.[...o.#.$I.....k..?.....~b\|....$Ij.FWI.TJyQ\@\|2....o...{.I.$i..........M.._#......$I.3.J..R....U...^..?....c.$I.....bl..Dob.....j..;.1I....$I..(...... k....1.z..$I.&z}\|?bl}L....%b\|....$IJ..U.$5..(.#...]...../

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11525
Entropy (8bit):	4.548388601983784
Encrypted:	false
SSDEEP:	192:5CdP7KTTM9+QWpIPsp9433Dhg3gAmGi9ovS+ueO05o83qHo5rL5:5w7Kd4sDc1omTCvS+uebqHaf5
MD5:	E9CB7F065BBD7E3AB899BDA87DF45683
SHA1:	8CDF9C8EF5C637951953362785C85C9A94EC5FD7
SHA-256:	580B1D9A3DF674479D932BDCA96896534992A4111F20EB3EDBEFB6784983C090
SHA-512:	00BA438EBD5933479E8F33A10E038122358BB1E668F0A6986BD82D831E577A72DEF2B18CB9A6AAA42E7922F7C63A3B46E925E22000633B13E77FDC204B851E5F
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Peduli-01.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000116198597079705612100000018436256062163351224_);}...st4{fill:#255D7C;}...st5{fill:#FFFFFF;}...st6{fill:#15465B;}...st7{fill:#FFEFE9;}...st8{fill:#0F7F7F;}...st9{fill:#C2E4EC;}...st10{fill:#00A2AB;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,187.43-133.1,208.16c-52.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	33136
Entropy (8bit):	7.986277879626224
Encrypted:	false
SSDEEP:	768:/6/t2z9JXJZR+41VN0oIF/kPo04JjwzTFOpEyPabqWeXlWcfx:/ZTDVY/kwD0TSEUabjslWEx
MD5:	642A3640CEA4C0FA9ECEEAC12E705251
SHA1:	8B333D04B7C47A378D88FF9A8C1D016D79528F16
SHA-256:	5CC3D44F54DB15E743739FB610093026490C2A31FD0196E98F96B5661B1A51E3
SHA-512:	C54985A310913D4EA31D0E10314580C3293F08E27C364EF0944ADB5AA8B69F0C1392065BF3D893D921FECCF59F32F582CD284EE56C76CCA97DFB306823A292DD
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/516/logo/62c769bd806b9_Vector_NGO_PKPR_Batu_Pahat_(Circle-Black).png
Preview:	.PNG........IHDR.............>U.....sRGB....... .IDATx^....dgY(.S..L.t..d.&.Y....."`\.. . ....\D.. ....n ...E../.F@.1.`.IH.d.d2kO...Zu..$_......\|.3..T...\|.....p...E..................n....[....U.f.g.....Z..r.<.U....Ri`!....LO.>t.....Xu.s...z..UW...Q...'..\|.zg.....;?...n..h.:}R.....gg..U...R....CgV+...3..f.J.5....Js.(..R...J....P..>X..?88<z.....Y_.r.t}yh.....u..1y...W.{..;......;\....\|....].~hl..3........=4q........Yu..T.W...S..k.........o3..\|i\|.I..N:.../^9}..W..V....7c....[..F..Y..^<...........T.......t......g..O..y.....'....q....VK.>.)'...9x..s..fYu8............d.6l.N8..N....5k.{....\E^XX...<....e........{............L....ryfp.]k..w....M.......]b...........O..u.K.....e...J.........y.y.eO\|...O;.(.]..........`..? .N.Y._..w.R....gff.......l.........w.......7...;'.f...?..J{.F...G........ ..C.w.8..p3..+.Z.o..G.._......)...V.NDG.....<...1.yL...>6......o.9....l-b\n.v}......r...o~3...ks...W....#g..B.T-...-..]3.i..G..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	323396
Entropy (8bit):	5.589106394177643
Encrypted:	false
SSDEEP:	6144:P4FAMX/iOG9iQPmPzI7BJDMfgQJNCOu6x0/aJw:AFN64QPmc7su
MD5:	F8D59080A9575C08DCE45AA9AFD21FAA
SHA1:	0EE37B11FAB56AA096F55C2C8B3C3312F1C6D897
SHA-256:	4AB08021AD032660150808D258FF35E44388B5F1DAFFF3F0208A8F4C469E12A4
SHA-512:	68B5D65210DF167C8EF81E1CB597B35DB57746DA0E1C178B5243EEC384EEE3E49A8FDA9A3A86C622297A4E6938B95778407D40F0CF8B567E98D6BF6563A47F67
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-RN6CJEGFTM
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.160351533241436
Encrypted:	false
SSDEEP:	24:2dtwxCt6/LIxUvU7bTVXp+rhZ1AhtxrApmMXygfOHn1JlS2DtZfCj78gIT:cyk0T5vcMCtxEIg2HkkvfCnbIT
MD5:	BDE58581F2C5439D3B4F4445A671E502
SHA1:	EFEFEFFB4752CE50111AE84FC64687D2B8F01E1B
SHA-256:	B6F2050FF25FFE6254DAD52B7DF5CA0D949F90A7AC9C0668DD67371720356580
SHA-512:	4CC11E68555939BA2D8487060EC31567E9FBF6C687D45AAE069862934B4430FD8FDA4EE55E11FBB9AA1C5A1E305A4592912E0C1C24E5FAF0084050A603629A77
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,75.4167,0.0458333)">. <path d="M0,36.178C-9.99,36.178 -18.089,28.079 -18.089,18.089C-18.089,8.098 -9.99,0 0,0C9.99,0 18.089,8.098 18.089,18.089C18.089,28.079 9.99,36.178 0,36.178" style="fill:rgb(41,169,225);fill-rule:nonzero;"/>. </g>. <g transform="matrix(4.16667,0,0,4.16667,35.2596,50.1846)">. <path d="M0,12.111C1.75,13.233 3.829,13.888 6.062,13.888C13.404,13.888 17.552,7.687 17.302,2.124C18.075,1.567 18.746,0.871 19.275,0.077C18.566,0.391 17.804,0.604 17

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769238
Preview:	false

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1606
Entropy (8bit):	7.227607188951285
Encrypted:	false
SSDEEP:	48:hdJYnc1IViLdr14p/6ZxSrg/KOiVB6xIEF7D4FNAnKlC/:Cca2x4pSZh/gVB6n7km/
MD5:	3DB414D893CABB44303E258B2AAAD786
SHA1:	4BACD56A554E4084819FA6F407504EF3B6D7B279
SHA-256:	F330C251D37F306E3BD3E000626B504DFC33C277B06FE2CDC64DF342A064DEA4
SHA-512:	3BAAE1313A4DE1036963D1A9D4AC96BFF71FA0777E748F6F65B07F056F4145C390AF6DBB342FFD49380521DEE28935ADF362FC73553D85E03D78618AD287CF98
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/favicons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE...".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..!..#..*../..&.....d............c..3....................;..p......................5..(...........6..3..D..l....,.......A..%..... ..)..$................j..:..............~..?.................-.. .....<..g..........U..B..@.....\........q..1........{..K..Y.....W...................=..9.....7.................].._.....+..R..~......}..8....#....,tRNS....].....`.....-..<....a.^.....R...W...'3..^!.....bKGD>Id......pHYs.................IDAT8.}..W.@.........nw.....`.{....P...._e....o}.%......]\..=.}X...../....2?...(... 9r.h./.AR.3X...,$.I..P.o...0.qV....ET.................8C[...]Q.^.A...JJ.PV^Q.U.".w.\S.u...M.-..!(.Ak...;.Nc..........!.&..1..02:6.H\|....S.#.3.s..Lfv~a......VV..z}.6..-.wv...3.88.2...+..0....wz.......L.......2"<<

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8216
Entropy (8bit):	4.857182514481804
Encrypted:	false
SSDEEP:	192:5CsP7aT0CvjQ42J8tcEJb3oqINKOscgL6zdkeqG:5/76vjZmEcEJ1IccgL8dqG
MD5:	B99E1FFB568E2647A7F678B7A27D71AE
SHA1:	58E75DCF6921FF2EA13222FF71CD35363D4B6AE7
SHA-256:	74352B609CE1176F170DA2AD9BBB61F70FD48865C1E5EF61E1536791143D5E64
SHA-512:	29F2E652DFF9DB36C4910872957A53A5B513C581C3A269A4EE9F39520B3FB75251E3575C19FE75205C0DF38D3842A328E6FE7D7BC5F8E790584D430085B0CC7A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#F9ED32;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#EFD906;enable-background:new ;}...st3{fill:#00706D;}...st4{fill:#015B59;}...st5{clip-path:url(#SVGID_00000137131974565740865830000013300416992083191733_);}...st6{fill:#009393;}...st7{fill:#026666;}...st8{fill:#15465B;}...st9{fill:#255D7C;}...st10{fill:#00A3AB;}...st11{fill:#FFFFFF;}...st12{fill:#FFEFE9;}...st13{fill:#FFD7C5;}...st14{opacity:0.22;fill:#EC8C65;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.8

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769240
Preview:	false

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	977088
Entropy (8bit):	7.989140475217757
Encrypted:	false
SSDEEP:	24576:yuYxRqbwrmCxEMV6Bl83FOcD6Pf2AYjDvw8MImWizh8u:ydxRq+DmlaFOcDW2Aq8ImW2L
MD5:	5EA8D9A5B7CB6DB692F74F2316AAD1DA
SHA1:	0597AD65871CF30F949D338CD2ABC1898FCC7781
SHA-256:	E93D9BDF53E1812C06D39E75DC388613342D6F137FAB69C681F1E79955001908
SHA-512:	31D9A996BEC45DECB65E232923F10A61856F790C7F43D2894B06367B43CC73FCBFF5FC35B450D77F24BDFC1B9829FB8D7EA2E6EBA036BC3C79582B0296105F99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....UIDATx........:@2..e.R..}U..jj...1.....k.....Z..]I.......cq2..'7)..~....Al...................\|..H....WXs..R..Q.c...y....Ut,/.s)....Q.W.`.....[)......W.:Y..t...l-.).C.i.L9..7Q.w.6...%..@..J.!.......g......z..0.#.wP>+......J.s..{igm..X.$.v.E.>...m.D..}..U.S.y...;=\|@\|..<..xGW.>..4....Tz..Q..............\|^.R...............................................................j..........R...X)E.......4}..'5.&l..aL;...D..i.~V........i..J<;.%#...M..r..O...1...e".+.\..8.rN6....Q...9;.m.`E.jt...9Z.;^"c...:.#.F.oj..H".....X...{IQ.q...G...F\|;V.KG..x.3.....y.................................3.J..Ggc.........n...O-B.......u.-..&.c....h..I.0..&.>'.m9;8.w..u.=.O.+u.w...h#..............&..........................................)...M.*......~#...V......"K.....s&..k....T.8.~W....W.+..5Q...X;..>....)C5l'+K.E.....-..6.M...L@.=...;a.~T..Q.Q=.........A9....&.;..M..................w.............

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (54451)
Category:	downloaded
Size (bytes):	159822
Entropy (8bit):	5.263287936341609
Encrypted:	false
SSDEEP:	1536:bpWbBE025VQpXtIfUoeR9g6qpMWuPkbEfVnBqlsEGuIHIY9x0suDbk/5aK0t6f8v:tKWLotuU4DpMVZm2uIHIYKvt64EOjuA
MD5:	8C23E181DFF12E4702CC10F7236D6363
SHA1:	6140A46955CD16A2CF8D7422DE2BC181FE67D107
SHA-256:	DB7FC4A5FE60FB79B594DDD13B6839A6C688B65FBE73421698194F67841FCE2B
SHA-512:	014A68D75BCDE02315230DC953F1D886F5C1ADE8E4D5A063C2A23A91E4E9FFB8AE54E45B9E70E38E8313E231BD2BF15DE17F76F40E864DD8586BBB8368B1E6B1
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/vendor/livewire/livewire.js?id=de3fca26689cb5a39af4
Preview:	!function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(function(){"use strict";function ownKeys$1(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){var symbols=Object.getOwnPropertySymbols(object);enumerableOnly&&(symbols=symbols.filter((function(sym){return Object.getOwnPropertyDescriptor(object,sym).enumerable}))),keys.push.apply(keys,symbols)}return keys}function _objectSpread2(target){for(var i=1;i<arguments.length;i++){var source=null!=arguments[i]?arguments[i]:{};i%2?ownKeys$1(Object(source),!0).forEach((function(key){_defineProperty(target,key,source[key])})):Object.getOwnPropertyDescriptors?Object.defineProperties(target,Object.getOwnPropertyDescriptors(source)):ownKeys$1(Object(source)).forEach((function(key){Object.defineProperty(target,key,Object.getO

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51616
Entropy (8bit):	7.81060476562535
Encrypted:	false
SSDEEP:	1536:k3PdY9OZjlMgcA/6cPMBSgW8giKeIt88LWoIsh:cdYg/cAipSgQiKWrsh
MD5:	F5D6A4508F62DBFE329F75E7A72BA7F4
SHA1:	521A43FF7639DB89D6FAA466A120C7D5C83D2114
SHA-256:	271E947556DD6BDBAC9AC2D37161593972B10BE187293ED666C208F2764B45B3
SHA-512:	4D825B1A75C1F4C2D55389B16B09C71B72DB1B2AEBBEF15C705FC05B1E62CFA6166AA68837A1F33F03DB102935DEF16CE363E7648DE2B8B5FF09842160AA0B02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...w.\e.....f......W.....^/....r.z...QcC.i..........B(IHH.$...Rwgv7..-s~..RCv...=....z.2..9.}....9g...P&V.s.>...4.#io.-mi...w.ko...F.....!.M7.....N...epZ...66.J.rUiG..y@.!.-.U..#.B.i}cUH..?Q.$..nn.i..dk....&....D...%IHF...!.PUUL....!.d....jO;....!...bk2tpK.K.....$..nJBhJ..mL:.....z..d....j].$..&.+..x.r...(.....Y.....z....t.....B......]........#...is..y`.isu...m..k...{#...!......A..!......A..A.......s..I..Z......O....kM.........Pjs...W..c..$..6n.7mk.;...44.Tlj.!m.4.X[?......m.....C..;r;.n..m...\..^...^..V.Jv.."7h....v...w?.T.$EC..JE....[.B../..b{....C..1I..:.7.Z...!....v......A..U;..F.hJF....>l]:t..d.E........q..g%!t....=.,...-.l.AM.......X.................6./>..:m.$...a...l..Cm.....F=]5z.....im.x..?..`J....X.P..4.\[[{@UU.a!..;.i.?....}k.Pte.} ..;.zIC...].Bx:..t..s.$.)...v.q.!.@..`..P....!..C.cB.......$9 .0.P(.R

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	11538
Entropy (8bit):	7.876910100503498
Encrypted:	false
SSDEEP:	192:9wAZyp+MnV1K61VGMF+CU5MLZstdMyh0bB+00IoawswkpyDz67o:9wV+Mj1nFY5YoWycBel4EDp
MD5:	D311320E72DC1E077D16311DB959A344
SHA1:	94BE90349C097C33B571217DE62EBA617BA20DBA
SHA-256:	2C38F3BF6AB17584ABA0B4C1C67D508F93590C7D5EFDFC14A835FB77F825B041
SHA-512:	16F45184BAA57211FEC1C881A3AE53D9311ECE1C0C9A046DE1A845B202A56D4A9CE42EC88F95233E0E98E17368A06A8CA2FBAA6CC97B8F0BEF17FBFB9C1F3372
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/812/logo/65a72ced9eb29_Logo_Endatoe_Foundation.jpeg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................T...........................!..1."AQ.aq.2BRb...#3Wsv.......$6GSUVcr......&fu.......................................8........................!..1A.Qq."a.......2BR..#3br...............?..)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)V.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	downloaded
Size (bytes):	186471
Entropy (8bit):	7.979903804452917
Encrypted:	false
SSDEEP:	3072:tLLlgIC/YWsfOB3vs2Cp1zjeLdBz/67V2G4wwBxNsdfk7IKRLVvv5HslS:H1CgWsfOB3a1OniR26wjNsYIKRdhHOS
MD5:	A8C6CEBB088AC7D08ADAE9CFFD1E009E
SHA1:	B81AA083BF2A53FD13BF68A1A31CA9F29BE1FCF3
SHA-256:	CF47523D88EC7E5DFBCF4C2D489E9660D86C4C647790EFF2FCA55241B39C38A3
SHA-512:	8844C0E22FDCE32D5DB1D076F1291323E28A558027E8DB48A34B9960C162A17C310346C1BCEFBCAADEB467CD3D08EA6D8A2C40FAD36222033AADDCE05320E7FA
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................}............................"#...23B!$CRSb..1AQacr..%4qs......DTW..........&5EUdtu......67VX.....'(8efv...FG.....H.9Yw.......................................L..........................!1."AQ.2BRaq.#......3b...$4r..CSc....5...%DTs..&............?.. @......@.... .64.. @..Gq...;...(.A.T.....;......... @..Gp @. .*..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6228
Entropy (8bit):	7.872822945470078
Encrypted:	false
SSDEEP:	96:0aNzwUHQUeQ7yN6P9tS27I2L438z4qBMjsaJurgPJ3iCoFBBS8yVEp94OtFACQcV:lNztBbp6d33qBo9Rfo7BSLVEpHtN0KZ
MD5:	DF70BA5FCC3010DFD5E41AEC9F2AC20D
SHA1:	3D14F9E84B4735A5D90177B17148C9987E021D18
SHA-256:	BA960F5B1615E121D0818568CAC571C919A2667F645FEB54C60BD6012CE81321
SHA-512:	64AB1A5B2B66D0E23DFF65CC1BB5F9AAEBB52FE42EA38F1424DCE5C40527C861FC788DE0AE80CDE3B7C5B63CDD79F6FC65804A118779556AA828236931740E91
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/flags/malay-flag.png
Preview:	.PNG........IHDR..............2......PLTE...........f..............f..f..e..f........f.....f..f..f..f.............................f..f..f.........................................f..e.....f..f.................e.........................................e...........f........f......................................f...........f.......................f.....i.gO.......LL..GH........................../........f.{{....ee..f..............LM..h..i..l.....\.....k.........................._..........#................./.....c...a..eA3L..` .Z..[.G9JTBE..^.g2....]8,P.........!V...$.X4)R]JA.."..........pq=0N.j1..........gR=...............0&TkV;x`6..dt\8.m/.q-.. ..pY9.t,......'.WL<HbN?.z.{(..&..#.....q-#TO?FXFC\|c4.u+.............%..........................z...Xz.Jm..A../........tRNS..........4.....I.M4.....f..........iL.....kSEE6...\|xQEA2..z)...eO....SB1!.......hX.......{wmA(&&.....ZT+.........tEYvc.....IDATx..Wl3E........{..7!.h...W.y.7zY8..}.=]..?.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HrPyY:zyY
MD5:	6CEA4FAAAFA38FD40BB35DE6589E85F6
SHA1:	8105D649FBDC85604236E65C53E97BCF0CBF5A36
SHA-256:	FC11A6B80A3B077C6ABCF624E3331E30045DEA7896F6539A7CB263E74964F5C0
SHA-512:	7DB4FBAAE22AA961987C0750E13E1B7A3CDEE6C0502A7C5093D4FAAE84454EF6709F8690278FF2AF9ED984601FDD8FFC59E887A34AE723C5BCAAE54125F4FCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlqVm62564nhxIFDVKKSaM=?alt=proto
Preview:	CgkKBw1SikmjGgA=

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9459 x 5387, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	505762
Entropy (8bit):	6.419145339547663
Encrypted:	false
SSDEEP:	6144:1OeFL0IOkNbtTid5HHhotlnszV5MJObuhKdzteS3jXbqT75uiIKj+F:1bFtxbZ8V5sObuhKFXgBCF
MD5:	03DBB20031EBE1ABC0DA7441BD97911E
SHA1:	EE547868CB6ED49DD94F43667BF99DD10D9E002B
SHA-256:	9AD6CEB8FEE59CA1B04952BE6DC7B3C186A0055C04D431CC65168733DDCB7AA6
SHA-512:	0EA2D93C38B29CD3CCE792660D9D838F4F3981958884B0D4FCC87CE19EB1D76AE44F54CC4AE40CC45DD0CD8F3BA6FC50F5C1A5063D804789C9BFB488094C88D0
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/258/logo/logo(1).png
Preview:	.PNG........IHDR..$.............w....pHYs...#...#.x.?v.. .IDATx....m...6.s..K.HcN,0..`....C0...........(%@.&..2(.9....[.Z.v.......S*.rio...#"...............1...........UJ..7.4......SJi...c...c9..jX..............%r........................F...................}y.R.......>.s../lr.<L...\|..3.-w~v]T..a..........\|..w.....2.......1.........e})....................0\..............~....?.zrm..K.)...?.-.^n............o 7.eJ.r..z......}....n.7...v3.u......................0&..................f...B....kS.<..o../.J.WE5.,......85..s..9+......yHx.Os......o.m-...............8.9"................H.}.]..]...z........"...^..6:.....`....8Ws&..ZN.1{.....o...h................0.:...............2...\..v.v7..Jw.}....j>i..^O............"7.eJ.r...e..k.....s.v..h...................V......................n..\|....\..]....eQ...........;O)]...sY.......;OS.7..M..zo.m-...............xe9"..................}y5..nJx..y.....-.....{YT.._......c..n.O'.....\.7g..h.g.................0>..........

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	692
Entropy (8bit):	5.358159993045465
Encrypted:	false
SSDEEP:	12:TMHdPXi/nzVJ/KYf3nW/1HA47xRgFOVXp9NJCXNNOwj0krFKxO:2dfATLf3Kg4dRgFOP0OY0kV
MD5:	95DEFF39F674237429F1AF22C9E813B3
SHA1:	1D15B1A80ECAC37D1DAAE2E4DC5C9F02B4CDA5BC
SHA-256:	C1BB838424BA34288F0F6F136C766B0A6B386EDCCABA071448A355E8D039C942
SHA-512:	77714DD605E8BA5A64A2F5233E7F82C0B65BFECE3DDE82BC2E88C44F558944E7AF1EB58123CD98CD56B702B94D216AE9352BE086D968B967ADF648692EE841A4
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/menu/home.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M31.07,17.91L19.01,6.34c-0.31-0.3-0.81-0.3-1.13,0L5.81,17.92c-0.26,0.26-0.4,0.61-0.4,0.97..c0,0.75,0.61,1.36,1.36,1.36h1.9v9.78c0,1.2,0.97,2.17,2.17,2.17h15.21c1.2,0,2.17-0.97,2.17-2.17v-9.78h1.9..c0.75,0,1.36-0.61,1.36-1.36C31.48,18.53,31.34,18.17,31.07,17.91z"/>.</svg>.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (54451)
Category:	dropped
Size (bytes):	159822
Entropy (8bit):	5.263287936341609
Encrypted:	false
SSDEEP:	1536:bpWbBE025VQpXtIfUoeR9g6qpMWuPkbEfVnBqlsEGuIHIY9x0suDbk/5aK0t6f8v:tKWLotuU4DpMVZm2uIHIYKvt64EOjuA
MD5:	8C23E181DFF12E4702CC10F7236D6363
SHA1:	6140A46955CD16A2CF8D7422DE2BC181FE67D107
SHA-256:	DB7FC4A5FE60FB79B594DDD13B6839A6C688B65FBE73421698194F67841FCE2B
SHA-512:	014A68D75BCDE02315230DC953F1D886F5C1ADE8E4D5A063C2A23A91E4E9FFB8AE54E45B9E70E38E8313E231BD2BF15DE17F76F40E864DD8586BBB8368B1E6B1
Malicious:	false
Reputation:	low
Preview:	!function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(function(){"use strict";function ownKeys$1(object,enumerableOnly){var keys=Object.keys(object);if(Object.getOwnPropertySymbols){var symbols=Object.getOwnPropertySymbols(object);enumerableOnly&&(symbols=symbols.filter((function(sym){return Object.getOwnPropertyDescriptor(object,sym).enumerable}))),keys.push.apply(keys,symbols)}return keys}function _objectSpread2(target){for(var i=1;i<arguments.length;i++){var source=null!=arguments[i]?arguments[i]:{};i%2?ownKeys$1(Object(source),!0).forEach((function(key){_defineProperty(target,key,source[key])})):Object.getOwnPropertyDescriptors?Object.defineProperties(target,Object.getOwnPropertyDescriptors(source)):ownKeys$1(Object(source)).forEach((function(key){Object.defineProperty(target,key,Object.getO

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	323422
Entropy (8bit):	5.589142204547686
Encrypted:	false
SSDEEP:	6144:P4FAMX/iOG9iLPmPzI7BJDMfgQJICOu6x0/aJI:AFN64LPmcGs2
MD5:	7E93884C507E45D9D14D4D043168A83B
SHA1:	934D524ED472F2D60FA832819E7163BDB020170A
SHA-256:	ABF1773D78B017D61EA99BE7362308C27F37089C78986F7BFD14C4F92AF2AADC
SHA-512:	D6EF0DE13A430358106A4283C43EF2DE11BE5D9344BF7EA108CC9061D0FA79B1A9014761B61BB9AC9D52D3455A000C8233133E3C21DBDC5A818A3E9F7B92473C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-RN6CJEGFTM&l=dataLayer&cx=c&gtm=45be4bk0za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9845)
Category:	dropped
Size (bytes):	254327
Entropy (8bit):	5.460111103610495
Encrypted:	false
SSDEEP:	3072:WohVPCQYGPQbolpc0QMp8A/yBNtaOR4JXc4AgD:/VPCQYGPhpcwj/yBNtFR4JXc4AgD
MD5:	6203F8A2347F4464338A841B0E724C50
SHA1:	70435F79EBE28D5D7DD0F17EFF7B2A915D35B64D
SHA-256:	1CEF7AEDB81DA6CBCEF30DA95AD337CEA8F109EC027EBE7F68247E4EB0C7AB48
SHA-512:	BBA0E9F8206C8DDAF6E3792BD82681DA8D32C6007D69440AF243CAF602191DD4B662AAB41961F734CBB6480697F5415CFD1BEBDC5BB45E70AEFA939A16035EB6
Malicious:	false
Reputation:	low
Preview:	/1732444459,,JIT Construction: v1018453286,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9785
Entropy (8bit):	7.9292085837608175
Encrypted:	false
SSDEEP:	192:+ukz1qwP6iGyz0SoyNc3mZJ6jHYxo3h3/mYyikHf4YM3kxnBHVSBGnhOV7:+uk576yz0Pyu37jH75Wf/4xUxnVVSmh0
MD5:	D43667C19B2871DDC79E1AEF783DBB33
SHA1:	7E587DCE958126E934B0C0C88A279836D222288F
SHA-256:	A79E45DBAD4C542A6AC5B6B278DEC476D46951B0F96B5FCDE5B47EA2F0B3F16A
SHA-512:	F16887491F2667E8434AD59903C825CDEAB02DD48EC24044CC6A96138FC9A29FCA7926FE57A47C481E53CADF1679B1FF32FFB8219215F84A60F5F0FE7DECF010
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....sRGB....... .IDATx^...TE.......4JTD.... .....T.D...YED......$I...WT..?W\FQpM.(2...1 .....3......u.jx._.s<..TW...U.U.....+`X.L.-9...`...s#`.....l`.q.Y.....+``..`......0...X..+....x\tV...6...X.......&t.\.e`.X.c`r...3f...+..s.`.....l`.q.Y.....+``..`......0...X..+....x\tV...6...X........0..V......V.=.$..t...qI....1a.t.T.TE:Q..)w(7...#.....{...U\....9..1.)v.UY...B7..K........^"....P........e.......^.....E..Q....r...).E:..^.S..a?q}.....,q.;.K....(....Z.+..,i/.......SrF.....G...3.B.t...K._R.......G`..a4.XRLO)p...W-.X.1i............5.:..,.(.,....k.u..XRQ.X,..,.H........X(.X...1.`IE.`.P..X#.c..\|...\|...\....e..VI......k.P...'.'.z..O...3.&.p.U..H...T...}9._.....b..(.6.......Z7...t.....;.nP.........8.>.Nq....."...q...j..b..>.`.8n.e.O.n..a..W......uZ..9vD.7."L.{"._.=fQ.`.8#...+..]&d..S....8t..0n:DX.o.z....GS.........8n..k`.x...4...3.Q.0....f..`.X<.Hq.^........N1..g..3.Q..s`.BKN...Ypd.y....P...I!.K..<...,.Lt.........w.T.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3
Category:	dropped
Size (bytes):	363050
Entropy (8bit):	7.980618266105002
Encrypted:	false
SSDEEP:	6144:Bri8FOpk6hQZnajngo03JAK+jXvb6pcbcCRzrTwBklRJdp5akc86ZDGrvE/:hohQZnajgo+JRCDOQtwYRJdp5jc86ZM2
MD5:	47DFF1385F8462974389CD76E655C7DC
SHA1:	2F5D837F0BA04EC21705957237AAB808857A3E51
SHA-256:	D21AF4276D4C33B03E6118255FCD5286A2D4902E42A1399EBE04FE274FAFADDF
SHA-512:	6A14F059A6B19A04E85EEB0A8A395C4941FCF5972F8DB0BE5DA82E849E7F4E6D8A476F13E0FE75EB20A1904E094D32E686BB4F607961CB935D4A5E0AA47F2210
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................\..........................!.1.AQ.."aq.#2..3B....$Rb..Cr..4Sc...%s...DT.....&5.'Et...du.e....................................C........................!.1..AQ."a.2q...#B...3R..STb....$r.4..%C.............?.t.o\.....b....e....;...C...};.w.~!h...M...D.A"G.4.C..F..3.r.JV.k.....nyw..x..+kN..N.{.4 4..&..Z..v&..P..H...

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11093
Entropy (8bit):	4.799829792061138
Encrypted:	false
SSDEEP:	192:5CEP7Z4j6TfphBOA/ALZSf5B9STxFvmjHqrSzwGKzmeH:5t7Z4cBt/ANSwfGHkwnKzmeH
MD5:	430201450584F1CBA0C572A13B565C1B
SHA1:	2491B24218CFF7A6DBD4D3F2DB72776D60239059
SHA-256:	F4CA8BE95534D257C0A0564DA2AC6FE27C0743106F39A9D1C340E40BD9502279
SHA-512:	1D9B38FFEF80424E2CB58EE933680FAAC24A13AA138FB2817E3018D93A3B2AE25282CDD63AD9A826B1F03BA762377C074BB9C7D17264AC01792C137BA5511B66
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{fill:#255D7C;}...st4{clip-path:url(#SVGID_00000065781924655894618190000015008716004237979558_);}...st5{fill-rule:evenodd;clip-rule:evenodd;fill:#AFB0B0;}...st6{fill-rule:evenodd;clip-rule:evenodd;fill:#FFEFE9;}...st7{fill-rule:evenodd;clip-rule:evenodd;fill:#748988;}...st8{fill-rule:evenodd;clip-rule:evenodd;fill:#255D7C;}...st9{fill-rule:evenodd;clip-rule:evenodd;fill:#EEEAE0;}...st10{fill-rule:evenodd;clip-rule:evenodd;fill:#9B693E;}...st11{fill:#0

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9845)
Category:	downloaded
Size (bytes):	254327
Entropy (8bit):	5.460111103610495
Encrypted:	false
SSDEEP:	3072:WohVPCQYGPQbolpc0QMp8A/yBNtaOR4JXc4AgD:/VPCQYGPhpcwj/yBNtFR4JXc4AgD
MD5:	6203F8A2347F4464338A841B0E724C50
SHA1:	70435F79EBE28D5D7DD0F17EFF7B2A915D35B64D
SHA-256:	1CEF7AEDB81DA6CBCEF30DA95AD337CEA8F109EC027EBE7F68247E4EB0C7AB48
SHA-512:	BBA0E9F8206C8DDAF6E3792BD82681DA8D32C6007D69440AF243CAF602191DD4B662AAB41961F734CBB6480697F5415CFD1BEBDC5BB45E70AEFA939A16035EB6
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=14c3e620b38618c43ae37684c9f8e04c
Preview:	/1732444459,,JIT Construction: v1018453286,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 769, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	76420
Entropy (8bit):	7.962709475932589
Encrypted:	false
SSDEEP:	1536:AnjXiC9VVYqaCVf7z8F9HS7r0CXO33Z+lUpvmMhedOJxHdSkeS0d03:kjXiWTfX8F9O0CX0olIxhedOJRdSkW+3
MD5:	CEABF3D53F7C2FBD22B84F4B51771F51
SHA1:	B64F7F92CA86AFFCF96AB590C39A9E5413E25718
SHA-256:	51D3D4B927CB7D46348D646AD3CF0217453C54311616D2EC70EEABF7C24404A6
SHA-512:	39008439F4B570011F673A5FD2D51C1EE9C5E8230880FB8F23F6FBDEC5A398A8F8DD9A19C2D1BFADFAA4F3B25A648C82864151CC56B60F2044B58AB37066BBEB
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/tiada-eksploitasi.png
Preview:	.PNG........IHDR... .................pHYs............... .IDATx..w.$Wy...:..;.sRX..B.....-&z...;.!-...6..,c.l.p1..]zW..`ch,s1.-.F.B ....V.J.Q;y:....nOu...y...U..N.......B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.#X......y&+.......;%k..B....BH.X.M[m)......\|.B....B.%.z.a%...P:.!.P@.!..$C.os...Wx(...(...B( ......K.R#..8.....V..B.!..B.....5....Z..t4.`....t.B....BH...F4.d...z=..B....B.S8..~.t8..fN.....\|.B....BH....p.I.G=.!....!.,....p..<H.)W.%..A.!..B.!.-.....p?u..S.8..B....B:X8...t.4..X8..F^K.h1.].. .......04.......S.f......01.{..I...t:.Z%.P@.!.7.ca.#..HG..Ny-*...x4U2B.6.8s.g+.M.V.X1.Ny...O.x..~../....8?.B....B:W8D.p.a.,......W......\|./....E...:5....p..{..~...'...B(

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.589983496653089
Encrypted:	false
SSDEEP:	48:S+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwbXDuExjGx:S+5AQHAray48f5JMYHIqjDu9
MD5:	65296F14D7BFD924180365B65E88670D
SHA1:	E737977B197D348CC6C983E8DD98BEEAAA3474A5
SHA-256:	6D9BCF293CBD2B3D7D67D99A76180A1799814586BC6BAC1DBC6D979128980C80
SHA-512:	A9F9D6BD39862DE661298BF888A18A669852992790D08515D96E04199F4D3FFC9A2B8CCD9956BF5CC7D88BA86EB170006547D9EBB70D44956F989B3FAECB3DAC
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1732449579,,JIT Construction: v1018453286,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	13373
Entropy (8bit):	7.874874808243353
Encrypted:	false
SSDEEP:	384:Fqmu3oIE/2/h7Pj8FhE4lxCtnxZjfpnP5de:FLu3OyhCEiCtnxLP58
MD5:	8B70FA176DEF518B1B3BA73777348D14
SHA1:	342278F0230D071E0F8D8A358C566EAE1D613AAD
SHA-256:	45639A46D089A3BF5F2F27A81690C7E0ACBC3E2A295FCF7E65EE3732A941F3E8
SHA-512:	8894619857A961DE822D8546FE9399BD6C057D127B5C0716648BF2B3D32C13EE77426C6CFF90DA7D9FFDF4CCB01A017E7E9656A5F46D53E54C96794D43FBDD0E
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/490/logo/629e49f8a7b44_9E920131-5FAB-4983-9055-B8B4DD61A8FB.jpeg
Preview:	......JFIF.....H.H.....LExif..MM........i.................................................................."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.......(...(...(...(...(...(...FeQ. .z.Z.^Z/...*.Z7....d.,QH..2...KL..(...(...(...(...(...(........(...(...(...(....v8..M\|w....'4....&...Q...h_....X..N3.z.........+/..#...S.4..v.....v.j...:}.C-$..G.z.@95.'.?m...RIi..>mrU$,

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6339
Entropy (8bit):	4.973244706596205
Encrypted:	false
SSDEEP:	96:JvfCvqr29iHvAgHDd9qTdZspkKcNhT1rUCjAwDJUCMpOCanyZVXY4HUrCRMn/mtb:5CIP7yTdf5TjKKmUC+/ErY9y
MD5:	24995AD44693321EBCAB26463174C472
SHA1:	4C0C27EC969F5586147E7412E27D8BD3D430C5D3
SHA-256:	FE78598CDA6B8DEBD9DD14E5DD070772D1BDEAF4600BDBB6AD64EAA88B0835B3
SHA-512:	1F3CB890B3E9EC0F4B5184B246259584D56883CAF99AE27DC80D5C58E7885537DF4A9E24A8357A4F02F281F4C8D0BD2799BD2F29063E42F1BB18A3F86FA6156B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000172412145221650414680000009216949963355932833_);}...st4{fill:#026666;}...st5{fill:#FFEFE9;}...st6{fill:#00706D;}...st7{fill:#15465B;}...st8{fill:#23728E;}...st9{fill:#255D7C;}...st10{fill:#009393;}...st11{fill:#00A2AB;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,18

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	152626
Entropy (8bit):	7.972827496379464
Encrypted:	false
SSDEEP:	3072:uE4bsl+2s6ulZ2RyNNrpa1LcpiQfS8RaImrp/rEQuecL0WzulSxQHE6csUxkOKh:uTQl+7r2RyNRsL8iEzaIGp/r+ecnhQHX
MD5:	536C23DD65CF7E975DBC524408EF85D1
SHA1:	B531443C0E20EA1D0CF6A2C7C2042B4804015A03
SHA-256:	42385739ED64EFFBA91484C84D8C1EB3F83A32FC9AD4B123785794099F8EE79B
SHA-512:	5D1C6F1EA697459945A88284E054AA9F14ECBFC9B8B738070B681FCA9EF68B9B5C2736BD151B358D7956FE576EF3932BE30EB8E676EBDC6737031707E6383868
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................t............................"#2...3B.!$CRSbr14AQacs...%5Dqt.......67TUu.......&d........EVW....'Fefg.........(8v...................................H...........................!"12A.#BQaq..3R.....b..$T....4Cr..S...6D..5............?...A.~.5...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2494
Entropy (8bit):	4.917210708222879
Encrypted:	false
SSDEEP:	48:cyk0T5v1KQ/6krtFmJBKjsu5owU+3Pg1owdOulAK6YF3E:1kYWt87sBKjsyh1Iz4uW6E
MD5:	446531D24A01E098D6E7F00153DAD46A
SHA1:	C6444F2AFEAE093F5222E562F98093BB8EE0F37F
SHA-256:	02FACAA6BBC6B8E4B67C64F1B031EFE3ED1C1D3E5AA02B83824B0C7CC7529CCE
SHA-512:	CA04A7978C056262F72BD952516185DF271D5F1F0111FDBAF8CFBCF064588287FF33FDC3D2316EA4D33F15DE6E865FEBC7D73E581A4070A4672C32034647B893
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-1459.96,-3303.75)">. <g transform="matrix(1,0,0,1,368.49,793)">. <path d="M0,36C-9.941,36 -18,27.941 -18,18C-18,8.059 -9.941,0 0,0C9.941,0 18,8.059 18,18C18,27.941 9.941,36 0,36" style="fill:rgb(87,246,118);fill-rule:nonzero;"/>. </g>. <g transform="matrix(1,0,0,1,368.669,803.167)">. <path d="M0,15.666C-1.656,15.666 -3.195,15.176 -4.484,14.327L-7.615,15.326L-6.599,12.321C-7.574,10.987 -8.151,9.349 -8.151,7.579C-8.151,7.315 -8.137,7.052 -8.11,6.794C-7.71,2.7 -4.2

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (595)
Category:	downloaded
Size (bytes):	1423581
Entropy (8bit):	5.021483390594705
Encrypted:	false
SSDEEP:	24576:gjBHWAIochfYYmD43APx+WI+Y7cFyMyDTPfCAIdYH0O2ZV2si3KAL5rPzy9mvM/f:gjBHWAIochfYYmD43APx+W/Y7cFyMyDi
MD5:	C254CAC9FC985F4B0CFA8F5788056C0F
SHA1:	266418D680DEC91086E67A37CD6EF00FF3AC0588
SHA-256:	0126FACEF928D2F0957A358A7A0990FAC894616DE2BBE13E237771220781BD1F
SHA-512:	F9F3E55159297B3BD4FAFAD00183729BE7D1D7CADD823F661BE2897153FE17E563ECC9B07E66AC61120CF5311AB6FD34D5159FB1B322579EA6207E4BB8655A41
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/js/app.min.js
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2346
Entropy (8bit):	5.120861627861045
Encrypted:	false
SSDEEP:	24:2dtwxCt6vLIxUvTUny5XWGFYWrArD3TMlunVdeVIr:cyk0D5vTmyRdYVrD3TMlumqr
MD5:	5ADFE137C8014FC2FDF65E0155A9A2F9
SHA1:	264C7CDE9EBC772B1D5DD5D907F9B55FFEFC95AD
SHA-256:	5C6ADAD633FFD53D7228D4E40300EF32100F071307DAF1B6BACDFDF3B3D567E1
SHA-512:	9EED43651B9586A259360A4D22CAD5D442E653968481652CDEEEA04F540C00C28857CCC9FAF2CAC1672EA5D848C67BC279A26C3C8B84D4CD9A89D7484F13D22D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/lain-lain.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 602 602" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-3089.91,-13457.5)">. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,406.89,1687.1)">. <path d="M0,-72.201C-19.906,-72.201 -36.101,-56.007 -36.101,-36.1C-36.101,-16.194 -19.906,0 0,0C19.906,0 36.101,-16.194 36.101,-36.1C36.101,-56.007 19.906,-72.201 0,-72.201M0,-70.201C18.833,-70.201 34.101,-54.933 34.101,-36.1C34.101,-17.267 18.833,-2 0,-2C-18.833,-2 -34.101,-17.267 -34.101,-36.1C-34.101,-54.933 -18.833,-70.201 0,-70.201" style="fill:rgb(0,163,172);fill

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1065670
Entropy (8bit):	7.992601329497327
Encrypted:	true
SSDEEP:	24576:Z21RaEmtjbkpNWdXKNAdVfh3xVgzfo9XXS/NfDGpHyoBhaOh1/g5q:wRKa+Vdg7o9yJmHyeA8
MD5:	A8E04DDD0113C78026B90103B5204B83
SHA1:	5F43B6DF58713057E0FA5E991736ACF4382AD6C0
SHA-256:	D1BF2F1894C4D2E20AA63EE50DDE77939DF7405574088D5C5305B701A920B068
SHA-512:	BB369704590FE733BE58AFE219BA04E37C2897D2FD62EE3A5783170552734179B6CA2889E4D51D4C55E15D55B97C52C5B204A8C8F8FFAAB7A8E0E5A374F55445
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...B[IDATx...W.%I...msu..EfdV...U...F.`.0.......kH...?.../...._..2.5k..H...A7.@....J."2t\}....mo.~..{#RTEV..+s3ss;n...m..@ .....@ .....@ .....@ .....@ .....@ .....3......@ .....@ .....@ .....@ .....@ ......9......@ .....@ .....@ .....@ .....@ .....@.\@....@ .....@ .....@ .....@ .....@ .....@ x. .w.@ .....@ .....@ .....@ .....@ .....@ .<....@ .....@ .....@ .....@ .....@ .....@ ......] .....@ .....@ .....@ .....@ .....@ .............@ .....@ .....@ .....@ .....@ ......Bp.....@ .....@ .....@ .....@ .....@ .....s.!.....@ .....@ .....@ .....@ .....@ ......@...@ ...d..t....-]Zkh.......l6.c.....7)gp8.....!.,f.>9..W.5<.......M...a2........=_...`QR...T&/.pc..R...N.t.,I...'EZV.j:w..(...Ue.5..%P:.. ...\..OM^W7...>l..lz..A/+l.......%I..[t.?....6.9.a....=/Q...6Bys.+7..=.~E%..."Bl......@ ..._-.[9....F...?/.......U..o..<...}n...x...>w.MCt......w.V....jJ.>..`.z<..0.V.I.5._..q6..,.....^...<.w.-.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	114078
Entropy (8bit):	7.979902727843319
Encrypted:	false
SSDEEP:	3072:NfKS7C2A538pcjpoUSc5D92m9YkATC1x+WSi9WXJz:NfD7Y5sOVoG5D9z9YkBPyi9GJz
MD5:	1AB8D726C15C97D820C886154B5C794C
SHA1:	43DBC173A633A5DDE18C4FC72A94910455071E5D
SHA-256:	DA48272FF2F5BBCBD5FE32B9AA81F7DD7A9E2DE8B87512015AD825736DE741ED
SHA-512:	3787F45D545C77DD83D639E14F082DE436E5896997A0BAD6C88F18466B457B97AC77F7C693C84A77ADE54702F137C1B8BC3C618545C8B03D99183F81972FC8A3
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................n............................."2.!#B.13ACR.$QSabqr...4cs.......%7DV........5Tdtu....&6U....'8EFev....(Gf.....................................J..........................!."12AQ..Baq..#3R...4....$Sbr....C...5Dc...%sT............?... .(.... . .... .... .... . .... .... .... . .... .... .... . .... .... .... . ....

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2480x1395, components 3
Category:	dropped
Size (bytes):	472176
Entropy (8bit):	7.987142090719835
Encrypted:	false
SSDEEP:	12288:WElcC7pF5/ZRa5I6IpSURaF9l+OTsLzHoslU6p3BlXm7Baw:rXdugk4jLrXlbRBlXmlf
MD5:	AECD95211DAAD969B2E94BF1E4FC42DF
SHA1:	28AB26C94B4E698F04FEF43B87B0116C546BE165
SHA-256:	D2B336EAD15D5157F76B426DE10A5FA26C8261F72E11AC8A1451BC29FB8E3569
SHA-512:	61A759BE5D9094A38A0B3C54BD76A0B8826C065290EEAA95A53AEFF8002A89DCE32940F1C3B65545F8942AD717936D3F2CC67A3E3A88067740CF3AC27E67D2DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s...."...................................................................................~.h..............&............... .........`.C...............`..........b`..!.@0.b.....&..........60...L.4.........bh.pTA.U.h.:..&.D6.m.hI.vN.8.Q..U...S..@VY..\|iE],{E}..X.*.YI....nu.v.\...J..uF.7.)......6Ai.$.R..hq.C..pl..).nX.b....0L..b`....VUc..I..N..."..E. M..n#S".S.....Cq.cR.Y..rN.DD........".)A.c.U3u.lu..6.BNf.&.A,..`.D...`..L....!..&...............4.C@....C.L.......M.b......h...L............. ......)..&..1.b`4... `.. .`....h....61.......&......!.I.8+U..US.w.Y:"@FD.d.(....8.#p ..Bv+ii.aQ`(.pU+i.Y6.]\...Y41AX..T.).^H`..B!.S.&..L#dGUw.:.X........8+.+&..h....1.!.0.i.h..I..h%(I..........S...qa'..d.r.q$.i.$.sSq)FU....AR...![@.hjN,Rpnd!.q....9W'68J.N-....@0.@6.H...b....@1.`.&....&..........C.)......C....!...`.`..`..@.10bm..@.0C

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3
Category:	downloaded
Size (bytes):	11090
Entropy (8bit):	7.956585373243805
Encrypted:	false
SSDEEP:	192:GBTCzDwWrwlet6Dq6E3eYtWUimkHzlg6odCmeGzBc57COc2NRBQP+:sT8OC6DAJimW26nTeBO7CfaRBQP+
MD5:	A72E4A24EBFC2667DCC9269D19232648
SHA1:	88D37EF6DF1B6071A14E1827AE9AD01934050D26
SHA-256:	A6793B86EDFFDC8001C8242B0B56F72D3C2C65CBAF6BBF5A380D567C56B2E930
SHA-512:	6EB94C31A699FB9DB48633353ABFBD381FCEC6019DC403B5EA07DB01BFD7EBCF58350060DC2C39CB0F718F62F62636321EA8D56DFF5649353DB754B9BE55674A
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/1/logo/ppim.jpeg
Preview:	......JFIF...................................................( ..%...!1!&)+.... 383,7)-.+...........-% &---/5---/+--------------/+-----++-----------------..........."........................................F........................!.1A.."Qa..2q.#B...3Rr..Cbc......$4S...Ds..................................4......................!..1AQaq.........".B..R2Cbr.............?..(....(..".(....(B(..<..........K../{aj.&.....o..R.v.S...=X......J..;,].......9..,..J..........3%...=s8....c.....Y..R7.......-..v.H..W.5.....?v...I.7..pv..W...D...$)....+..0A........cuc.........[.$H..8 ....2...V.}...[.'.....\b.x-...w[4s....QEF..1O..C.,....$...tM..$....(R.(..".(....(B(....(..".(........on.5.....>.9..U7h;Q..c..K..P.....Y.kyo..ME.....a#..^C.k...9[r....wwLfw....B..=.v:,.....?$.?:.....\.{."8tf=...Cn[r......#pV.2.K.8d9db:y.LUdz..23..k.2..AV..to..Y...B.]R.b]'@D.y..;.......6T..N.L..!......L..2../(P...`..._>b.%..:f(#...e.,..V...\...HVx.RI...vG.m.'W<..T..z......w.......a.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.160351533241436
Encrypted:	false
SSDEEP:	24:2dtwxCt6/LIxUvU7bTVXp+rhZ1AhtxrApmMXygfOHn1JlS2DtZfCj78gIT:cyk0T5vcMCtxEIg2HkkvfCnbIT
MD5:	BDE58581F2C5439D3B4F4445A671E502
SHA1:	EFEFEFFB4752CE50111AE84FC64687D2B8F01E1B
SHA-256:	B6F2050FF25FFE6254DAD52B7DF5CA0D949F90A7AC9C0668DD67371720356580
SHA-512:	4CC11E68555939BA2D8487060EC31567E9FBF6C687D45AAE069862934B4430FD8FDA4EE55E11FBB9AA1C5A1E305A4592912E0C1C24E5FAF0084050A603629A77
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/twitter.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,75.4167,0.0458333)">. <path d="M0,36.178C-9.99,36.178 -18.089,28.079 -18.089,18.089C-18.089,8.098 -9.99,0 0,0C9.99,0 18.089,8.098 18.089,18.089C18.089,28.079 9.99,36.178 0,36.178" style="fill:rgb(41,169,225);fill-rule:nonzero;"/>. </g>. <g transform="matrix(4.16667,0,0,4.16667,35.2596,50.1846)">. <path d="M0,12.111C1.75,13.233 3.829,13.888 6.062,13.888C13.404,13.888 17.552,7.687 17.302,2.124C18.075,1.567 18.746,0.871 19.275,0.077C18.566,0.391 17.804,0.604 17

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1223)
Category:	downloaded
Size (bytes):	19485
Entropy (8bit):	5.498123677217319
Encrypted:	false
SSDEEP:	384:LC/TzpZmdYHPu1cnq9W3eVqIudA7ItW09ROE1WWkK1z0Ika7YyifuxNrx5FejxO9:LCbNZmd6Pu1ct3yqZDtWcUE1WWr1qaV3
MD5:	ACFAAF3B7DA03D515C434409A8CEDFE3
SHA1:	4E2FE4950FCED5DF7A649497A093614E0A7D778F
SHA-256:	A192CC8B869A545B6910C7CB5C96612499A856C49585A67D1629CEC7EBB83DA0
SHA-512:	8F6D029D18C0AEFECC9F864A9DAA33E19D6F7B73E9CE6D4FABEEB7DABACE55764A7DE6771604B2E2CF59BCC5E3E12D076D508D9773EA14E6E1B2188F25184AE0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4bj0/sw.js?origin=https%3A%2F%2Fsumbangan.com
Preview:	'use strict';var aa=function(a){function c(d){return a.next(d)}function b(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(c,b).then(f,e)}f(a.next())})},h=function(a){return aa(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;var r,u;a:{for(var ba=["CLOSURE_FLAGS"],z=n,A=0;A<ba.length;A++)if(z=z[ba[A]],z==null){u=null;break a}u=z}var ca=u&&u[610401301];r=ca!=null?ca:!1;var D;const da=n.navigator;D=da?da.userAgentData\|\|null:null;function F(a){return r?D?D.brands.some(({brand:c})=>c&&c.indexOf(a)!=-1):!1:!1}function G(a){var c;a:{const b=n.navigator;if(b){const d=b.userAgent;if(d){c=d;break a}}c=""}return c.indexOf(a)!=-1};function H(){return r?!!D&&D.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8216
Entropy (8bit):	4.857182514481804
Encrypted:	false
SSDEEP:	192:5CsP7aT0CvjQ42J8tcEJb3oqINKOscgL6zdkeqG:5/76vjZmEcEJ1IccgL8dqG
MD5:	B99E1FFB568E2647A7F678B7A27D71AE
SHA1:	58E75DCF6921FF2EA13222FF71CD35363D4B6AE7
SHA-256:	74352B609CE1176F170DA2AD9BBB61F70FD48865C1E5EF61E1536791143D5E64
SHA-512:	29F2E652DFF9DB36C4910872957A53A5B513C581C3A269A4EE9F39520B3FB75251E3575C19FE75205C0DF38D3842A328E6FE7D7BC5F8E790584D430085B0CC7A
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Sedekah.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#F9ED32;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#EFD906;enable-background:new ;}...st3{fill:#00706D;}...st4{fill:#015B59;}...st5{clip-path:url(#SVGID_00000137131974565740865830000013300416992083191733_);}...st6{fill:#009393;}...st7{fill:#026666;}...st8{fill:#15465B;}...st9{fill:#255D7C;}...st10{fill:#00A3AB;}...st11{fill:#FFFFFF;}...st12{fill:#FFEFE9;}...st13{fill:#FFD7C5;}...st14{opacity:0.22;fill:#EC8C65;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.8

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 375, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	425399
Entropy (8bit):	7.996315198039264
Encrypted:	true
SSDEEP:	6144:CBFf9OtowPn4CwhC9I3RgpU+dukSsW7H6VTTc6IOCrDZKRKPjRgW89QgI7eBjmIy:EwPchCKypUdkSmTGfrDZCK7iPmYY
MD5:	F5FA2479EDA8DD60934B60F19C503D16
SHA1:	C12E35AD98D628751314293F5F45CBC27EBFFEAE
SHA-256:	09447C2FE7B87C4B10CEB83D61CD44D81F1948ECB31FF645F0191C22DD05FF80
SHA-512:	A4382DDCBB8AAAAA08A223C8FC3C23980B5C1FC65F430590E77C2F9EAB63933CA7A4210D508D7811DBD6A6D352DE6A2EBF02F017781297034B77179E50F65C41
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/62cd1b8fed963_62a6920f30171_TABUNG_BENCANA_KEPERLUAN_ASAS_FASA_1_(30).png
Preview:	.PNG........IHDR.......w.....S......sRGB....... .IDATx^...e.U........r.+3k..[.J........X......c..v.x.f.1&<6....,.1...XB..-.^.]..UY.U...o..~..9...&.........\|..w.....\|.;.Jq.......Qx..D1TIE&..m..b....um..TC.n.......L..YI..4f..1..A&.a.@.z...--F.......IBRR.QuX....`.\E.u1yx.....4.."#T....LMM........$... ....:;.G...Q.A.yC........z.6..%.[.....w...xE...'.)..G..X.$..(.....1]SU.,..x;:..a..d.$..%.C~...HB?..=.z.>..^.?.{.>..Y.=...Q...e...u..#I....W.._....#.?..k->....t^A..K"......!._\.......7....u.ma@c..z...a..1.7.#M.(.k:FE....=Q.A.t......BR.!....41.i.^.q....D.D:m...;.....1.=Y...9t.t,.<'B..C.... ..........M8-..d.i:.........._.\.n..(.)...K.........]...m..........S..).....M....7?.....{..=i.J..[....b...4......wn...k.".._G.8.yT.H$S(..`y...I.....G.....B......uH.49@.1::..."....+.....$l.....G..f......N...IQ.z.b.6.....@.C.v.......x..O......D.X@.wQ.6.K:...l..T..dX....Ulom#..b`x..v..[..R.(.......#./. ..H.)...(f{.....n^Y..r..S.P..I&..L..I.=.;..6J%.rY\|..oaiu.."A...

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	11298
Entropy (8bit):	7.8508326262345545
Encrypted:	false
SSDEEP:	192:30UAamqxgvcDw8Ukk9Yu2BrmL/P0/MKmjIZ7fnrH8VbGWnVCZNnVHwY1Z3n77W8U:1AUxdVI52BrmL/P0vZjrcJqnVHwY11C5
MD5:	6538EBC50C9D478C481AD03D9BE41A91
SHA1:	B09257A90D1A9EF0F06AB83B00D555D75E6A0B0F
SHA-256:	4B4CE4DA69558436C81E8754EEDAA193A993D6514644FAA2E596ABA03F546A11
SHA-512:	B9495A4062A8CB4420C0D6276DC5F95CE59D5EA1F3ADC9C685C7CA475ECCDCFCFEF30F88F0A9D2E066DF756980472499709BBB8EAEFF165EE34F76914CE22A7D
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/525/logo/6352445c5003b_LPQ_AL_HUDA_LOGOW.jpg
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................O..........................!.1..A."Qaq#2..6b....3Btu....58CRcrsv....$7ESVe.....................................;.........................!1.AQ.aq..."....2B.....Rr.#345b.............?..M................pH.rv...WZ..E@...o...u..3..Sm...

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1065670
Entropy (8bit):	7.992601329497327
Encrypted:	true
SSDEEP:	24576:Z21RaEmtjbkpNWdXKNAdVfh3xVgzfo9XXS/NfDGpHyoBhaOh1/g5q:wRKa+Vdg7o9yJmHyeA8
MD5:	A8E04DDD0113C78026B90103B5204B83
SHA1:	5F43B6DF58713057E0FA5E991736ACF4382AD6C0
SHA-256:	D1BF2F1894C4D2E20AA63EE50DDE77939DF7405574088D5C5305B701A920B068
SHA-512:	BB369704590FE733BE58AFE219BA04E37C2897D2FD62EE3A5783170552734179B6CA2889E4D51D4C55E15D55B97C52C5B204A8C8F8FFAAB7A8E0E5A374F55445
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/1-1.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...B[IDATx...W.%I...msu..EfdV...U...F.`.0.......kH...?.../...._..2.5k..H...A7.@....J."2t\}....mo.~..{#RTEV..+s3ss;n...m..@ .....@ .....@ .....@ .....@ .....@ .....3......@ .....@ .....@ .....@ .....@ ......9......@ .....@ .....@ .....@ .....@ .....@.\@....@ .....@ .....@ .....@ .....@ .....@ x. .w.@ .....@ .....@ .....@ .....@ .....@ .<....@ .....@ .....@ .....@ .....@ .....@ ......] .....@ .....@ .....@ .....@ .....@ .............@ .....@ .....@ .....@ .....@ ......Bp.....@ .....@ .....@ .....@ .....@ .....s.!.....@ .....@ .....@ .....@ .....@ ......@...@ ...d..t....-]Zkh.......l6.c.....7)gp8.....!.,f.>9..W.5<.......M...a2........=_...`QR...T&/.pc..R...N.t.,I...'EZV.j:w..(...Ue.5..%P:.. ...\..OM^W7...>l..lz..A/+l.......%I..[t.?....6.9.a....=/Q...6Bys.+7..=.~E%..."Bl......@ ..._-.[9....F...?/.......U..o..<...}n...x...>w.MCt......w.V....jJ.>..`.z<..0.V.I.5._..q6..,.....^...<.w.-.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161973
Entropy (8bit):	7.990453546151409
Encrypted:	true
SSDEEP:	3072:+ApT2zHIcUl4JQQjn2/NNBgoaftQ27jYEOmfHQN4zuIjvoZ+4M:WjIZG+/N/alQi0LxZI
MD5:	76B0EE4035D5E02B114A2BE724870575
SHA1:	A9D27BF945946C41921FA0004EE768329FD081B0
SHA-256:	9172A8E1E4792E41A5DE63B293553D0D90AAD72EF37715A267CAA9213CE95286
SHA-512:	AD5D80F963EDDFEF767ADF9D168B9101D4133D2827914063833A30F9309AD9349459680E9032D2306CCAA7D29DDFAFA71AAF66EA183D7D1F51EBB1C989A4BA22
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/kongsi-sosial.png
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..w.....}..s@HBd...BV .d..^....`l..Y.u.qm...8...i..{.. ..".!!!..f43........A`..t...z...U...w..s/@.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!........R. ...L <...B.....c...3M...2.........H..0..(..j.$.-..Q#..B.B.!d....7$...=..i'..3...'&......#...j.....G........&!....B.!.D.@@...\#r...n~...f.-......[\|l..B$.".,.?.....x..!.P..B.~...a....r.....Vct...s..]GxA..^\|H....X..-.8)....&y..?..'..B.B.!......`.@...K.L5"P...$..W..........EF(lp_(<.8Q)>I.X.'.....6.+A.!....B.Y.....g....cD...@ ....{.e........B8X....IIP...,R4.(Q. H....W....!..B.B.!............tdr....': ....<..6...=....D..x........)Y.9....?.x....n.R..B(@.!d/.c^?..........H...._F..?}.mS.....!.l.N..4A..0. ..b._../V.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	5.361788016251627
Encrypted:	false
SSDEEP:	24:2dtwxCt6/LIxUvU7bTVXp+rhZWmJqr4VP5TXEHTsSgjPT:cyk0T5vcSqUVFXXZDT
MD5:	1300EED8D4DA349D8B8753D846D6951C
SHA1:	9C8CBC86341850F5D165F6668019F0AD847B9592
SHA-256:	F6642930B9AAF3A5C11F9E6626D1AEED77AC8A7A900351000D5FF931A34464B8
SHA-512:	95837743EB6A9DB7975A0B01EA006613BF228962CAB457293A5B48B9676B0AB42E82E581E9A14095668C6714AAAD02B5622DBD4BE9AB513E1860235A2AE8396D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,75.4167,0.0458333)">. <path d="M0,36.178C-9.99,36.178 -18.089,28.079 -18.089,18.089C-18.089,8.098 -9.99,0 0,0C9.99,0 18.089,8.098 18.089,18.089C18.089,28.079 9.99,36.178 0,36.178" style="fill:rgb(62,92,154);fill-rule:nonzero;"/>. </g>. <g transform="matrix(4.16667,0,0,4.16667,63.9317,29.8571)">. <path d="M0,21.868L4.403,21.868L4.403,10.841L7.476,10.841L7.803,7.149L4.403,7.149L4.403,5.046C4.403,4.176 4.578,3.832 5.42,3.832L7.803,3.832L7.803,0L4.754,0C1.478,0

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	765346
Entropy (8bit):	7.988503936035899
Encrypted:	false
SSDEEP:	12288:aXbDgT51jZZ009RtFPrZFGWaNyYHi97aubtvfh1/DGqHULQysoTfF4/I0qT2kmH5:avY1jfRzFTjGjyZj3nyqHUh7FB9Skme8
MD5:	03D307147D18D295CF044B83C93F43E3
SHA1:	DFB953FFA6709FC8394D54A4C22987B84994F4AE
SHA-256:	E92827F9316D2112E77DE6522630665946FDD946AAF5B3605DF87AA08F27D651
SHA-512:	D6F31CCD653801A41ECC9E4A4C4533B446527DFC2BEAEF45D86B7DCF1D1AF5FBEF7DDE616C52B16C0A1E54991871FAA61CCCA6E115F260FF06A640DAB0E4C839
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....7IDATx.....-Iz.}YUg...o.{.g...g.2.1.A..h....i.$..(..;(.........JV.(."(..Q...$....X8.....z0...........2.YK~_.s...u....>.VVf.^yNf~.}.X.............................x...................................;.............................................................+..;.............................................................+..;.............................................................+..;.............................................................+H......T.......1..\.Z.4S7....Ke.>....&..Y.X..B....._)...4J.{>.6/...g...........^_G.....Rma.......%_.+......vr.O...n.Jw.....M.U...tG......Y.fy...T..}..L[."..\|.-Od.....i.lGFe.L>.8.sn9.i..R....E....6n..xvn.hf....A..1'/...m..9..$.@.o...a...g:'6..f!t.......p..p5...-..Q.inU..o.~...N...kQ...1.~.M).....0.rdQ..%._Qc.j...p..X5...{..O=.m,..8..q.............p...w............}.:..N.......~(.\|....q.............5..u.O.....7k.=...L....4#

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	7777
Entropy (8bit):	7.7803823716694485
Encrypted:	false
SSDEEP:	192:Yw2EoK7LCh/lOhSLX3pjsn6OKAzl7BZF4UFjPQJgbEK1OL9P:Yw2EollOgKKsl7BZ+UFj4GbEK1OL9
MD5:	C9070F08121F64E22BAD30CE0A872DBD
SHA1:	3A0008615A2EE13AC620AEE9A26C540C0F4D5AF2
SHA-256:	FC672E51760CB23E42727FA53DE173E712B934E06C59E42977DC3C1E895E9EBC
SHA-512:	F12B1C319C9B8FF85AAEBEA0ADF5D943FC14EC5B6A08C2B117D24935195D5C1D53A37686EDE43358E50097B3DC659B0564CA2769A1397B45CF4A15652E5E589B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"........................................M...........................!..1."AQ.#2aq..BU..$4Eu......%37Rfr..5Cs.........................................6........................!..1AQaq.."....BS.#2....R...............?..M...D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	186471
Entropy (8bit):	7.979903804452917
Encrypted:	false
SSDEEP:	3072:tLLlgIC/YWsfOB3vs2Cp1zjeLdBz/67V2G4wwBxNsdfk7IKRLVvv5HslS:H1CgWsfOB3a1OniR26wjNsYIKRdhHOS
MD5:	A8C6CEBB088AC7D08ADAE9CFFD1E009E
SHA1:	B81AA083BF2A53FD13BF68A1A31CA9F29BE1FCF3
SHA-256:	CF47523D88EC7E5DFBCF4C2D489E9660D86C4C647790EFF2FCA55241B39C38A3
SHA-512:	8844C0E22FDCE32D5DB1D076F1291323E28A558027E8DB48A34B9960C162A17C310346C1BCEFBCAADEB467CD3D08EA6D8A2C40FAD36222033AADDCE05320E7FA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................}............................"#...23B!$CRSb..1AQacr..%4qs......DTW..........&5EUdtu......67VX.....'(8efv...FG.....H.9Yw.......................................L..........................!1."AQ.2BRaq.#......3b...$4r..CSc....5...%DTs..&............?.. @......@.... .64.. @..Gq...;...(.A.T.....;......... @..Gp @. .*..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	149829
Entropy (8bit):	5.600609063029094
Encrypted:	false
SSDEEP:	1536:Cnxj42ndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj4y9OU03o4PwjhIBVT39ROyuvb
MD5:	DAF17286036BD518A93431BAE557255C
SHA1:	8391CECF7FF61062E9DBFD88CC825FEECEAE9D73
SHA-256:	2ADCF9FD70C1C834F4B13D732B66F4900CEC9A6BBDC587B85DBC68CDD9A34BE4
SHA-512:	0DB754DA88122CBCE3558CBF5A61062C3AEBAF03F8A8F7D23E96B384993C179668D8930FBE38553D3AC190AABA3063442F7A0469F3A18DB77DF8713F853BA97C
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, components 3
Category:	downloaded
Size (bytes):	61679
Entropy (8bit):	7.966398695945542
Encrypted:	false
SSDEEP:	1536:hgu77uipZ0vyMP5As8s7CBa+EwwQeItVD8:hh7eSwwwdKp8
MD5:	8E80B6E3876015CD318D332F2CFDA826
SHA1:	6F44A2EF24AEA9DF646AA1A844C79D472626ECE0
SHA-256:	CECC830FBC426CF927C64D203FF22F03DB862226B57AC79DE75311C61BA658BF
SHA-512:	A3011B3929D135629A1FBDC46B9149B9EA186192483884C9E13E5776A73B770C86FBF0151CC3ECEC7DA1497404785F027408900A3FD948071F46003122384687
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/62de3b34d4674_WhatsApp_Image_2022-07-25_at_2.34.32_PM.jpeg
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................w...."..........................................c...........................!1..AQa."q..2B...#R...$3b.....4CWr...d.....%&Tct....'DESUVes..5FGu.....................................8........................!1.A..."Qa..2q.#3BR....CS....$............?.4..G*J..e}......).i.o0.h.......{

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	271565
Entropy (8bit):	7.9163217852776615
Encrypted:	false
SSDEEP:	6144:sPPU8R9CcFYK7TntKGZ134VE1pQ7ud1fqRfdH:snzRQKztI97Cfmfh
MD5:	91255ED4C132B8B5D1F1971ED4C0DC72
SHA1:	AC5279FF4735F0EDF1C3ADC056E061F23B6C62AD
SHA-256:	F8124C6D4887B326B52F70D51187A8BD04BF5B1E25E73A46EAB1B34E686A243C
SHA-512:	B0F21B336C5D08D9B6F967CE278F97E3F42769BF69469A093D88D433CD7E2C9C2BFA9AEBA1934AC1A8B2799681AA3253328DB9238A7309A84A8E0A16558765E3
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/2.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...$bIDATx...[.$Iv.y3s.....t..LK.V".....]=H.....'...... ... @.!`!p%........Lwuu.....nk.......Q....._3..Vf..vs......................7,........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8...............................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	11538
Entropy (8bit):	7.876910100503498
Encrypted:	false
SSDEEP:	192:9wAZyp+MnV1K61VGMF+CU5MLZstdMyh0bB+00IoawswkpyDz67o:9wV+Mj1nFY5YoWycBel4EDp
MD5:	D311320E72DC1E077D16311DB959A344
SHA1:	94BE90349C097C33B571217DE62EBA617BA20DBA
SHA-256:	2C38F3BF6AB17584ABA0B4C1C67D508F93590C7D5EFDFC14A835FB77F825B041
SHA-512:	16F45184BAA57211FEC1C881A3AE53D9311ECE1C0C9A046DE1A845B202A56D4A9CE42EC88F95233E0E98E17368A06A8CA2FBAA6CC97B8F0BEF17FBFB9C1F3372
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................T...........................!..1."AQ.aq.2BRb...#3Wsv.......$6GSUVcr......&fu.......................................8........................!..1A.Qq."a.......2BR..#3br...............?..)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)J"R..%)V.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6024
Entropy (8bit):	4.259894438574401
Encrypted:	false
SSDEEP:	96:1koNxASJac3xC8Jwq5VdTRCpGfwQ3Qhe7abGgwMVWcvRy9r87mFujM0VsX5MbAkd:1kMJaXqdTRrfwu5ModomFujM0VvEm
MD5:	A584C59FDA4695FBEB75C67CF03B8D31
SHA1:	D6E8176A288787B2937E2A82E357E6F3CBE326F2
SHA-256:	869D3D0456579F46B91E71ECF6141D7DCF90952000FF278D96035EE399AA09F5
SHA-512:	0FE6463D6C4CAFBC1492CD247B47C1E6B129DD4713A936AEE859B415FFB70CF0A73D0B405B646D76A763443B9DCD4869C604B76F10F2807AEF35603DF22FDD5D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/category/rumah-ibadah.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-1112.22,-2256.09)">. <path d="M283.828,596.396L318.238,596.396L318.238,596.448L283.828,596.448L283.828,596.396ZM292.242,583.6L294.397,583.6L294.397,594.345L289.437,594.345L289.437,586.404L291.742,586.404C292.018,586.404 292.242,586.181 292.242,585.904L292.242,583.6ZM299.253,583.6L302.811,583.6L302.811,594.345L299.253,594.345L299.253,583.6ZM307.668,583.6L309.823,583.6L309.823,585.904C309.823,586.181 310.047,586.404 310.323,586.404L312.628,586.404L312.628,594.345L307.668,594.345L307.668,583.6ZM286.6

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2494
Entropy (8bit):	4.917210708222879
Encrypted:	false
SSDEEP:	48:cyk0T5v1KQ/6krtFmJBKjsu5owU+3Pg1owdOulAK6YF3E:1kYWt87sBKjsyh1Iz4uW6E
MD5:	446531D24A01E098D6E7F00153DAD46A
SHA1:	C6444F2AFEAE093F5222E562F98093BB8EE0F37F
SHA-256:	02FACAA6BBC6B8E4B67C64F1B031EFE3ED1C1D3E5AA02B83824B0C7CC7529CCE
SHA-512:	CA04A7978C056262F72BD952516185DF271D5F1F0111FDBAF8CFBCF064588287FF33FDC3D2316EA4D33F15DE6E865FEBC7D73E581A4070A4672C32034647B893
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/whatsapp.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-1459.96,-3303.75)">. <g transform="matrix(1,0,0,1,368.49,793)">. <path d="M0,36C-9.941,36 -18,27.941 -18,18C-18,8.059 -9.941,0 0,0C9.941,0 18,8.059 18,18C18,27.941 9.941,36 0,36" style="fill:rgb(87,246,118);fill-rule:nonzero;"/>. </g>. <g transform="matrix(1,0,0,1,368.669,803.167)">. <path d="M0,15.666C-1.656,15.666 -3.195,15.176 -4.484,14.327L-7.615,15.326L-6.599,12.321C-7.574,10.987 -8.151,9.349 -8.151,7.579C-8.151,7.315 -8.137,7.052 -8.11,6.794C-7.71,2.7 -4.2

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 3334x3700, components 3
Category:	downloaded
Size (bytes):	146547
Entropy (8bit):	6.533856913522254
Encrypted:	false
SSDEEP:	3072:xcrK7tykaax2CqAi47QtPLUqgxaFv61DUnoQWnH7aNMnPnM8:mrK7xxWmktPLUbDUiH7aNMnPn5
MD5:	674782918A294729BC6776ED002D0220
SHA1:	BAD2B4227DAB6AEDA564257EA77FC449CDA9F6CE
SHA-256:	A2FD50A073882F106E58B77393D97BC9B8F71D442E87CE1E0624F416ED97DACE
SHA-512:	A4D155C523CD8BED76220FA2A505F8E6F0733DF4A4116CEE9DC93909BAA5DEB58EF088C628A241AE3F31759FC1F1B72022B05A214CBE5FE32EF93A65F284E20D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/landing/popup-korban-2024.jpg
Preview:	......JFIF.....v.v.....C..nx.xd.............................................................C.......................................................................t...."....................................3.......................1Q.!2Aqa.R..."3Bb......#.C...................................................1!QAa............?...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 833x625, components 3
Category:	dropped
Size (bytes):	169380
Entropy (8bit):	7.967977421750739
Encrypted:	false
SSDEEP:	3072:d/YoW4p39+c7tt1BAhkYBNKCI688mOH//Ip76jTTLXMaYI0E5CroH+xVI+C:dgofBAhkqKIu+vB0E5CrZIj
MD5:	231208D141FE2ADFB753D4F0C1DD08ED
SHA1:	2CDA2F5E4D626F38F903303E8115A56D2EFF464E
SHA-256:	2981039814772523FC49636C09777A2AD6142DC97D893B31AD7181896ECB7826
SHA-512:	93E5043EA3625BBA64A5B471EA65B785F720D0107BBCAF7780B5B69491E4995C71AC4028755C30655B52CD1E71825EBD4333CA5FABDFC81BF98029D4677A137E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................q.A.."..........................................o..........................!.1..AQ"a.2q...#B....RTb....$367ru.........8CUVWv...%DSc......4Gst....&5E..'..(FXe..................................H.........................!1.AQ."aq...2...S...#BR.3br.5.....$4T..D..%6C............?........QKh..mf.../o>..._)..x...*#....B.P.al.h.)j.}@.'..;..c..[.Q......c.......{h

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	271565
Entropy (8bit):	7.9163217852776615
Encrypted:	false
SSDEEP:	6144:sPPU8R9CcFYK7TntKGZ134VE1pQ7ud1fqRfdH:snzRQKztI97Cfmfh
MD5:	91255ED4C132B8B5D1F1971ED4C0DC72
SHA1:	AC5279FF4735F0EDF1C3ADC056E061F23B6C62AD
SHA-256:	F8124C6D4887B326B52F70D51187A8BD04BF5B1E25E73A46EAB1B34E686A243C
SHA-512:	B0F21B336C5D08D9B6F967CE278F97E3F42769BF69469A093D88D433CD7E2C9C2BFA9AEBA1934AC1A8B2799681AA3253328DB9238A7309A84A8E0A16558765E3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...$bIDATx...[.$Iv.y3s.....t..LK.V".....]=H.....'...... ... @.!`!p%........Lwuu.....nk.......Q....._3..Vf..vs......................7,........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8..........................................@.;.................(...................8...............................

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33136
Entropy (8bit):	7.986277879626224
Encrypted:	false
SSDEEP:	768:/6/t2z9JXJZR+41VN0oIF/kPo04JjwzTFOpEyPabqWeXlWcfx:/ZTDVY/kwD0TSEUabjslWEx
MD5:	642A3640CEA4C0FA9ECEEAC12E705251
SHA1:	8B333D04B7C47A378D88FF9A8C1D016D79528F16
SHA-256:	5CC3D44F54DB15E743739FB610093026490C2A31FD0196E98F96B5661B1A51E3
SHA-512:	C54985A310913D4EA31D0E10314580C3293F08E27C364EF0944ADB5AA8B69F0C1392065BF3D893D921FECCF59F32F582CD284EE56C76CCA97DFB306823A292DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U.....sRGB....... .IDATx^....dgY(.S..L.t..d.&.Y....."`\.. . ....\D.. ....n ...E../.F@.1.`.IH.d.d2kO...Zu..$_......\|.3..T...\|.....p...E..................n....[....U.f.g.....Z..r.<.U....Ri`!....LO.>t.....Xu.s...z..UW...Q...'..\|.zg.....;?...n..h.:}R.....gg..U...R....CgV+...3..f.J.5....Js.(..R...J....P..>X..?88<z.....Y_.r.t}yh.....u..1y...W.{..;......;\....\|....].~hl..3........=4q........Yu..T.W...S..k.........o3..\|i\|.I..N:.../^9}..W..V....7c....[..F..Y..^<...........T.......t......g..O..y.....'....q....VK.>.)'...9x..s..fYu8............d.6l.N8..N....5k.{....\E^XX...<....e........{............L....ryfp.]k..w....M.......]b...........O..u.K.....e...J.........y.y.eO\|...O;.(.]..........`..? .N.Y._..w.R....gff.......l.........w.......7...;'.f...?..J{.F...G........ ..C.w.8..p3..+.Z.o..G.._......)...V.NDG.....<...1.yL...>6......o.9....l-b\n.v}......r...o~3...ks...W....#g..B.T-...-..]3.i..G..

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52336)
Category:	downloaded
Size (bytes):	358243
Entropy (8bit):	5.416073856608302
Encrypted:	false
SSDEEP:	6144:8JVbbyPY0Kxw+QASOYZzaBrREtetDeGGtm:xreQAtYZgwC
MD5:	780E59FF236B8B50DCC18357CDE3ADA6
SHA1:	7F1A82ADEC0B46856063CCEAA3B86EF9C3F7E44B
SHA-256:	0CCF8087035715F328A898CBDDE68FEB8767287A798C46990644128436B7A26B
SHA-512:	7B80A7E01F4A0DBB5BEBBBBB110D1E32F3F06AC284698068E1AFD4910DC1F821F6F55A6FA623D15C8303BCAB303364DAE0F29FA525118D90D3CAE5F357D4EFD8
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MWQ3ODVjY2ZhMQ.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	69230
Entropy (8bit):	5.324626435250233
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPV:RIT7Vs9ZVKBYj8wKcHPV
MD5:	CD3303AAF68FB781429F62F4EC7430D0
SHA1:	2DCB9B42BCC0C97F9D815A760342EBAFA4F15C35
SHA-256:	5B8D2EA4EFE95E37267FE2360E642B762BA85CAA9D3CF2799A2DFAAB34994C7A
SHA-512:	5B818B6C63FC89837262817170C4317FE936CE5C44CAF81BC35E333CF4AEBA0178CE62DB83091E0DBAFEE605BCEF1A0C867808C8423EAC6D389D21B4DA5D465A
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1055981978343897?v=2.9.176&r=stable&domain=sumbangan.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3822x2866, components 3
Category:	downloaded
Size (bytes):	1413263
Entropy (8bit):	7.980005140198344
Encrypted:	false
SSDEEP:	24576:sKAwjgXOajMGHjWyLYoYlm+fWo/p/fZhDFLuOSenUY+trT:sK3ajMCWyLY5TfWahRienU7tH
MD5:	B56D51B9CF4FBB1972EE8016AE11AB28
SHA1:	071AEAC543919F217D61DE4884D71BF4BC2CA01E
SHA-256:	A2D35FA03A815AFEF2EC5749A8F2B727B4CDDD7B8690F4571503465C14DD6943
SHA-512:	D71FEEDF38AFF9EF7E6F95F1EF759FCC1A85C298BF19F0F4C60AFCFDDF272370F6E685BB4D12958A3CAFEEBC0AC3A19FE48E3AA37E6CB32C1B6C3624D19CE607
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/64e85386ea881_Sumbangan_Cover_Kempen-02.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................2...."..........................................q.........................!..1A.Qa.."q2....#BR...3bru......$478CSWtv......%56DTVs...&'GUce......(EFdf.......Xg.................................O.........................!1..AQ."2aq........#3BRr.45S....$Cb....s6T.%Dc..&E..............?..e.CW.U.....9..(.<.n._....Dm.wR..-....8....k...3..O.P..tV.[l....>.V`.I#.G

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1667x1250, components 3
Category:	downloaded
Size (bytes):	341950
Entropy (8bit):	7.973215271145178
Encrypted:	false
SSDEEP:	6144:KHTSDKIN4kmiGlSHQiqauEhnUUE+1GQrGGzCbqPMTyk1SmYKsl5X/MBj:8SDioFwhadnU3+1GyGGzCbq9k18lhM9
MD5:	BB66E7A3EE1D46BF1B039BB354D6DBAA
SHA1:	69B01EB12D65E39D9622D40DBEE561601C088131
SHA-256:	5C72C61A0F35F0F11EAFD6194703204AF4362F1672B02DDB1294EABF36322CA6
SHA-512:	4D1E862FB6049135668E9EF1785C0AAEE2B5D136A24AAA8AAEF3C051F51528AC1F50128ED54513C66F9F4F44E25D8C54352FA0315E1B4E1CBD9C35AC372C6B6E
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593b4023f088_OKU_Nur_-_Kemudhan.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................t...........................!1."AQ..2aq#BR..br.......$37tu......456CSTVWs........%8Ucg.......&Ddv....'EF.Gef.......................................P.........................!1..AQ."aq..2R......#35Tr.4Bbs.......$...6d..%CDSEc.............?...)B\|...z...!..,.M`c.x....h....o..(w.qI.iN..<.{g...q.l.!..&..2w..e.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	downloaded
Size (bytes):	938807
Entropy (8bit):	7.982320517321568
Encrypted:	false
SSDEEP:	24576:vu0EglQ7huoXpul3EIVJw79GQzJxZK02/bJLHg/aTeAZ/:FFlQ7h/XyxVIQQdT29HcmN
MD5:	7DDBA00979C735263BCFA18CCC486610
SHA1:	A249048A0738420E71CB110BE1AA9FF3C45A6503
SHA-256:	A2FD127FD9A54C988C0B0691FF91B6F49489FF28B045F3960BE534ACE43E37D6
SHA-512:	B0C389D67759CDE83F1D9E6100AED838412B7977D50BE189C35D1D462D786D9AB323C153972912825BD1D4C60B583AF17C48BA9A1DF5C67EC5FEA11F5382C34D
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e4845500_Sumbangan_New_Slider-04.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".................................................................................qk.%..R)...JQ.Fp..7.K..!(H...,.%...Y....n..+S&.C....u.;.\|.1j...!...F.c...1.b.=f....N....K$... .Z.-$....&..\6..S(.....=........p.Y..k3._V._..2t.me.;&."I..(.I.(.Q.E..;.9Y...D!.(J...,\|..n3.5....i..U}.o.<..r..K.^L.1k..;XK.60k.eS7].X.xT.g..U..S.R.%P..b.j.t...\z..M...r'8........-..1.x...l.]u..\B.d..&......J3.h..e@M.0hB-,a(.B.+...j..-g...2.$.'....g\x[T.MvW..Wes.F...`.h..M..a(..@b.;...7]M..m..xYd'yJq....g..'..U.N.Su3.l&.mV3d.+..i..;.1.V 4.R.iP.&,S.....[-.4.......4...p..-...vB.`....1...X."J"RK..,@..:..+..!.)%..a.Y8.$.1!..B.I...........e !.Z.Y.-*...RjT.U...'\.1...Zq...+.3..k......NE9.<v5-sCvF.Ej.....[g.k.....%^w^=..Ll..iP.%(..E...i&.1IFI9..H....'..p.A...,bVBz.9FW.....@.4.&...L....(...T...+.(....w.N......F..@.Z0h....O.......+

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9785
Entropy (8bit):	7.9292085837608175
Encrypted:	false
SSDEEP:	192:+ukz1qwP6iGyz0SoyNc3mZJ6jHYxo3h3/mYyikHf4YM3kxnBHVSBGnhOV7:+uk576yz0Pyu37jH75Wf/4xUxnVVSmh0
MD5:	D43667C19B2871DDC79E1AEF783DBB33
SHA1:	7E587DCE958126E934B0C0C88A279836D222288F
SHA-256:	A79E45DBAD4C542A6AC5B6B278DEC476D46951B0F96B5FCDE5B47EA2F0B3F16A
SHA-512:	F16887491F2667E8434AD59903C825CDEAB02DD48EC24044CC6A96138FC9A29FCA7926FE57A47C481E53CADF1679B1FF32FFB8219215F84A60F5F0FE7DECF010
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/732/logo/64826dc450b7d_LOGO_NEW_SM.png
Preview:	.PNG........IHDR.............>U.....sRGB....... .IDATx^...TE.......4JTD.... .....T.D...YED......$I...WT..?W\FQpM.(2...1 .....3......u.jx._.s<..TW...U.U.....+`X.L.-9...`...s#`.....l`.q.Y.....+``..`......0...X..+....x\tV...6...X.......&t.\.e`.X.c`r...3f...+..s.`.....l`.q.Y.....+``..`......0...X..+....x\tV...6...X........0..V......V.=.$..t...qI....1a.t.T.TE:Q..)w(7...#.....{...U\....9..1.)v.UY...B7..K........^"....P........e.......^.....E..Q....r...).E:..^.S..a?q}.....,q.;.K....(....Z.+..,i/.......SrF.....G...3.B.t...K._R.......G`..a4.XRLO)p...W-.X.1i............5.:..,.(.,....k.u..XRQ.X,..,.H........X(.X...1.`IE.`.P..X#.c..\|...\|...\....e..VI......k.P...'.'.z..O...3.&.p.U..H...T...}9._.....b..(.6.......Z7...t.....;.nP.........8.>.Nq....."...q...j..b..>.`.8n.e.O.n..a..W......uZ..9vD.7."L.{"._.=fQ.`.8#...+..]&d..S....8t..0n:DX.o.z....GS.........8n..k`.x...4...3.Q.0....f..`.X<.Hq.^........N1..g..3.Q..s`.BKN...Ypd.y....P...I!.K..<...,.Lt.........w.T.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	179371
Entropy (8bit):	7.993928534377782
Encrypted:	true
SSDEEP:	3072:Z+ICHMG0UuhkADvRf8p69NpT6KRTJfBp+Z67k3HrvKf0DV2AEVTHiGFcWtxSiG:QVHMIuhbDvp8IzF6StfaZ643Le0DV2jI
MD5:	BB21A26EBE8391B4E5A4CFA0AA68517A
SHA1:	59D841DF8AD8691BDD76E90B42694D49018AD503
SHA-256:	14C5A166A302F1AEF6759621B614798404D5A344F0239CDA13541C15B0E7F0E4
SHA-512:	6A3DD68266627EAF9C698E5132A1C1D0A73CB24106D4EB6E2C2D5CE158D4065AA44A627B66F20B7A35A8E4791765695FBD17E9CF3BD667F8849DB27E10CE5515
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...[.............pHYs...#...#.x.?v.. .IDATx...w._W}...9..o.>..2..+.....@..@6.G.#.5).d...,.)l.YRI........B .B1....`.&......o......wfd..$[...x.#i..~.....s...................................................................................................................................................................................................................................................................................................................................................................T.W...Q.\..8.9m...yE.vGG...._...u...(E.\...X.DDD^.....Xm.....c..hC...(...\..............y:....(...\$.'DDDD.DD.b...............B..DDD.@DD...%""..""rq.n.J,........F.b...(...\..J.DDD.@DD.f.Q)........E.!:...(...\$Z.PDDD.DD....T.%""..""rqC..y""". ""..J.DDD^~.....>C.y1!..p........B= "r....""". ""...R,.........@.........+..z.`..8#....T./W.1.3D..y.......`(.>#.;&&803M5.5...0......X..B`-a.h....B.XG.......$.y.V..g.sx..8...9....Z.k{....+.9b.........$..EDD.@.C...a

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1080x810, components 3
Category:	downloaded
Size (bytes):	212968
Entropy (8bit):	7.977981770879927
Encrypted:	false
SSDEEP:	3072:LOSeO2Hfza8Kgq5ZON8BZxuLfAWHNkO5iw8x7lbqvQvBN9hSzAifbCEZgvbIn8gv:LOS+fW2qLZxC4WqO5i5lmv8UCbT5Vg
MD5:	759A23C1FEA5599EFC5B48FFA67CD800
SHA1:	1E15D1A8948957502157A0AF7082FAEF26BA09A2
SHA-256:	E836280847D7A8A3F4A524C3648A93B6E21D68B7D427B3549C6E7965402F0325
SHA-512:	A1386D96365D84A617EF4E776C32F60056ACBFF05C5D0E9AB75A60375AF16401E47B1F0C752078B97C937AC19A6CBED4E95121D00DDA4CA2D6F6BC07C3584EEB
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/61cc0879319af_TELAGA_UNTUK_RUMDENG.jpeg
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................8......................8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................D............?...J.:.u..S..3^..X..oJ.4s..,r.5.m...@...1..{U....S.q.8.J....L..u!...H...o4...0p.s2...8.260..pOn.y.........5;%E....IP.$.P..8e........V.6.{P..8...i..'.s..2d.j.......a..../..S.V.,..4.)..V.+q.tV.q.sV.#9.[.....F.s..E..x.@...6.j.x....d..l.YXC....<....qW.Z..m.+>..&.=.'5....g..y..U.c.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5802
Entropy (8bit):	5.047431601907535
Encrypted:	false
SSDEEP:	96:JvfCvf3pr29iHvAgHDd95HKkQUH5aXlxVbiVjYY2yVJiVV/8f7SEGZqbhie:5C33NP7xHvQuUPVWVUjyV4VVSSEuM
MD5:	96D34EAD10CCBB355E70DB5A707917DE
SHA1:	352C93555F01D76D7D3BA7ACB0FFD74B500C15B9
SHA-256:	14B120AE964299522A7E9364B2B968185A04884609CC01E84DBF5FC5A749CA96
SHA-512:	A172D2CE1F85CA98D5DDFAE651E3949A909F4C5282ED72DDB3CDF81F71B303F8261DA2CA6A5CA7F30B4B3399F6A9B8E4D6D8DD0B4EBD5876027E1686C968298E
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Zakat.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000170992014233376411830000001812647548496074422_);fill:#E6E7E8;}...st4{clip-path:url(#SVGID_00000170992014233376411830000001812647548496074422_);}...st5{fill:#0F7F7F;}...st6{fill:#00A2AB;}...st7{fill:#026666;}...st8{fill:#FFFFFF;}...st9{fill:#255D7C;}...st10{fill:#15465B;}...st11{fill:#093747;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769243
Preview:	false

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (595)
Category:	dropped
Size (bytes):	1423581
Entropy (8bit):	5.021483390594705
Encrypted:	false
SSDEEP:	24576:gjBHWAIochfYYmD43APx+WI+Y7cFyMyDTPfCAIdYH0O2ZV2si3KAL5rPzy9mvM/f:gjBHWAIochfYYmD43APx+W/Y7cFyMyDi
MD5:	C254CAC9FC985F4B0CFA8F5788056C0F
SHA1:	266418D680DEC91086E67A37CD6EF00FF3AC0588
SHA-256:	0126FACEF928D2F0957A358A7A0990FAC894616DE2BBE13E237771220781BD1F
SHA-512:	F9F3E55159297B3BD4FAFAD00183729BE7D1D7CADD823F661BE2897153FE17E563ECC9B07E66AC61120CF5311AB6FD34D5159FB1B322579EA6207E4BB8655A41
Malicious:	false
Reputation:	low
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	dropped
Size (bytes):	729008
Entropy (8bit):	7.972838994858523
Encrypted:	false
SSDEEP:	12288:Cb734Wa2nmHNjtGI/sCU4IS5Yyw8xA/cCRbIo0QlFEmVE+zdoZQTRplIPWfcxM:SLs2nSNxGI/RySo89joxFEmUCTlgWfcW
MD5:	FD4DEAE8FE77AB95B83828B21A8FD163
SHA1:	9642B90AF22576E6AB548628EE7E62384C3CFAB7
SHA-256:	45BE1DAAD3EDB757C6D417E070C97A682A0E442ABB2C0814AEE1353BBC98029A
SHA-512:	A4D9CDE37748A1D35C7C99966F201106192C29E06668013829CE5D7AD6EE3394FF095C9FD3D82519543092AF8E86565D1646584DBF7ACFFA2787DC060FD587B8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".....................................................................................b`......."..`.Q$....P....L..$LI(..+5PX."eP.$,!".!0&..ID..I.&.q.....Zg7Y'DL.I........... H.0.J.....DE.PM..e!.LB.)....!....,..A2.....Sx...........1b.M.d...m[..Z.ef".r/>?#k.n..JQ5....c.YyU..e.6Ns..:.Z.Wa...u..q.xm..H.CUH..T.0..j.s{N......<...........D...@......(......D..}....\|.-....1.;rk.u.W..^Fu.s1.:.;...!y...Mrt.,R/.ym....[.u...2...a..i5..<..&.n..f.v!..+.m)[Dm].^...{k6..P..L.':i..y.Jk._...c.......+7X.J.[.....U.rp..Ne3......+.?...n._...I1....@.L.H..DJ.QA..&......$...`.."B`....&...L..&..........!1..bbm...?..10....P.."...@.. ..".BbP..M...." "&...H."B...(.. .....zJh.sj.@......P......0.....R^..E..I....%...Q.*b@.0%..$...A%...1$....J.n......J+K.fbI.e-j..x..nN.q.:..r.j.aI.Mx.k....z.4.x....-hK_.N].7...fy.....oqN/>..q.a;..

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2794
Entropy (8bit):	4.2317550267156445
Encrypted:	false
SSDEEP:	48:QiP4wh0har+Y7SljHapIu7cBMinRNjYCzjtTSBxU+VB:xeharZ7yjHaB4yiRNjltTno
MD5:	03CE470EE0154522418F97A9E025C62E
SHA1:	5CC531377623412C36F60B18C803174FC0AB0898
SHA-256:	4F76117F9866E6CF62912F883509DD8DFC8F4DA6E9DA26B1466459032A1F4FEC
SHA-512:	BB4937859CFC5758B5CF3D395EE6C069524A8F2120F31CA991B6023D8497EB34E9873A25D3B8F6F8E30EC317784AA15BA3F5C0068C3A608962436247C18B8C41
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48" width="96px" height="96px"><path fill="#fff" d="M4.868,43.303l2.694-9.835C5.9,30.59,5.026,27.324,5.027,23.979C5.032,13.514,13.548,5,24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558,8.356,5.556,13.428c-0.004,10.465-8.522,18.98-18.986,18.98c-0.001,0,0,0,0,0h-0.008c-3.177-0.001-6.3-0.798-9.073-2.311L4.868,43.303z"/><path fill="#fff" d="M4.868,43.803c-0.132,0-0.26-0.052-0.355-0.148c-0.125-0.127-0.174-0.312-0.127-0.483l2.639-9.636c-1.636-2.906-2.499-6.206-2.497-9.556C4.532,13.238,13.273,4.5,24.014,4.5c5.21,0.002,10.105,2.031,13.784,5.713c3.679,3.683,5.704,8.577,5.702,13.781c-0.004,10.741-8.746,19.48-19.486,19.48c-3.189-0.001-6.344-0.788-9.144-2.277l-9.875,2.589C4.953,43.798,4.911,43.803,4.868,43.803z"/><path fill="#cfd8dc" d="M24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558,8.356,5.556,13.428c-0.004,10.465-8.522,18.98-18.986,18.98h-0.008c-3.177-0.001-6.3-0.798-9.073-2.311L4.868,43.303l2.694-9.835C5.9,3

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2480x1395, components 3
Category:	dropped
Size (bytes):	316513
Entropy (8bit):	7.98738979865252
Encrypted:	false
SSDEEP:	6144:BoICGppTm+kKqvS9TjfOYXldCXnhNmO3AIoeHA5XJ:Bo4iXKqGTaYXlEnDt3AILaZ
MD5:	2CFA8B18E533D5677479028C0CBB2530
SHA1:	4D3862694F38138FB440163FB111ED2BEEC4871F
SHA-256:	9518D059407D9EC4CFC05286D4FB9DC8EFE1151942BA1EE2569613DE4C35709D
SHA-512:	489ABBD3F9966285E744AD210C14D062192510F014F0284EE5C33471EBC4C11F616D5B9E1236645C28321C1F7A791F599194A0385F67B3C7B012CB140BEA80B6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s....".................................................................................A....&%........H.(...J.H......"`..LL..B`.........."...ULJ.."abB..3.Y.+...a."aS.B&.... ....0....Eh.+...h...t.5..^.{...z_..o.rS.1.J.x...:........JRr..0g..u..2vg.........W.......o........{]<..r67.~uoq.qZ..... .K3Q .n..d.../8....frMf.%k.....s\|...7..^.....gS.K.......,=+..p0...}..}=..F..i..;9...G>...ww.W?_/....}.?nq.\&k6LL..P$....H.LL.)lk..o.N.H..... P...D.....P..@.1I..0"`D..<>......3Y%.`...B$@......0..L.B`&....H..............[....P.0.Ae..zA....v.a.V@.E....LH....X...........R.l.-.E..55.sV.)...Z.sX..LM%t..l.n.._?//R.8s..ro.s/.:as5...=.kCW..=xZ..A.....o_.~vL.....Dk=...._K..s.v.\|...i..X.e.@.E.$..",Z/.`M...p..\Mnkiic..:...6.kR..1.8...........~.2..H.-....y?U....N..f.............\|.A<....`.Y"..H..D.....pf.t.....\..,....

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	154885
Entropy (8bit):	7.990580437392415
Encrypted:	true
SSDEEP:	3072:UAntjwqWzCswhcPjT+QQKByIuuQoj1BwcDeThtT6fb0ym3/VOxlu1pJQZ:UWWycrVcDPmucDeufwyudOriDK
MD5:	FB8DDC0AEE20D340D256B3B6A35E1EE4
SHA1:	FC261569310F46082F812A0BBBDB26E4D5F4FB98
SHA-256:	C0F14101418C7D14E4CC63CA8D8316FC836881B3D57B37449974058452C870ED
SHA-512:	99CFC5275CB4338D848FD8642E1CF2FC0177E8BEE1E9B3EF725E166FCB7A28F7AFD8F4E1116551942A1FC650368D9BCC7B05069CEF948AE6B423C66882C0B46F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..y...Y..;...U-.Z.%...c'$$!.$.B&d..!3......y.....$..m... !..f..@.'...-.m.Z[K.Z.h..n....o..VW.:u.e+....?..S..y..<.@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A4..& .y8...l.'.....Pk.y?,....g....1....^;.V.[...}...c.T..j....k.......c.v..9..S.}.9.j`...Kp.Q"...9g.1.9Wj.@h.q.v~.x...].......+_....v^.:..............%.............. y.w.s.=g...C..c..Z........A.\...z....^_.=.U.^c`[7b[.....

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769237
Preview:	false

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	downloaded
Size (bytes):	212267
Entropy (8bit):	7.9800043143668065
Encrypted:	false
SSDEEP:	6144:wMHGlG64RCylMrmHELR2R8qemL5IYItyLptZtjlQ:9HGl7ylMCHEL48qj5/pNK
MD5:	A4B9D9A1ADBB751972FF62D950D0EC8C
SHA1:	3BF3C5A1B077574AFB14D0C11080422A4B6C03FF
SHA-256:	DD73F690513380ADC0376C928D2D5A9128AB70A1141786C411AAE4C17E753DB1
SHA-512:	83CC3289806D2F7CDE5349D5C215F065414FDEE06439DA0DBE862B21C5E24FD5D0EE2D323D4A023426F58E16D40A03A42E364B2C1B1A80A468A29B471D773CD0
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/64ba022587497_KOS_RTQ.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................v.............................."#2!13BR.ACQSabqr.$4cs............%5DTt........&'678UVduv...Ee...(Ff.........9IX...W...................................K...........................!"12.AQaq.#3BR....4....$Cbr...5ST......%6Ds..c............?..:CEG.0..(..p.4X...,HN..}b....rY=6.'N...Q.G"/He.~-..C.Y).......8'[G7

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	downloaded
Size (bytes):	155871
Entropy (8bit):	7.971613283644211
Encrypted:	false
SSDEEP:	3072:RYY6PLDIK6Xd3Ky1bLlD+tq8biD4EokL17Pl9mavJFkTrirlxN/OGNqFD8/:t6T8K6d3ZqbiDl3XvbdlX/7X/
MD5:	14297B05F1FBE0455504F7E2F9CE06E4
SHA1:	A8D9E723AD463E8AE4D62F643D88CAFD54786056
SHA-256:	60927E444F63E6587AF9EFCC44C703271A54F0C140DB00C5BE5B1DCEF8E7CAC6
SHA-512:	305AE4A5CE8585257D3AB046A7FA02DDA9C3E41C4B039BBE20AF0461446C4553800C165C1C458A46AEAAB7922CD918C801252A61F071C2D5617B2A411B72CE8D
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/640ea938a18a8_MOBIL.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................u............................"#2...3B.!$CRSbr14Aacs.....%DQTq.....5Udt........&67E.....'8uv......GWe......(FVf...9...................................L...........................!"1.2AQaq.#BR....3.....$br..CS..4....56s.D.%7T.............?...A.~.5...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 3334x3700, components 3
Category:	dropped
Size (bytes):	146547
Entropy (8bit):	6.533856913522254
Encrypted:	false
SSDEEP:	3072:xcrK7tykaax2CqAi47QtPLUqgxaFv61DUnoQWnH7aNMnPnM8:mrK7xxWmktPLUbDUiH7aNMnPn5
MD5:	674782918A294729BC6776ED002D0220
SHA1:	BAD2B4227DAB6AEDA564257EA77FC449CDA9F6CE
SHA-256:	A2FD50A073882F106E58B77393D97BC9B8F71D442E87CE1E0624F416ED97DACE
SHA-512:	A4D155C523CD8BED76220FA2A505F8E6F0733DF4A4116CEE9DC93909BAA5DEB58EF088C628A241AE3F31759FC1F1B72022B05A214CBE5FE32EF93A65F284E20D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C..nx.xd.............................................................C.......................................................................t...."....................................3.......................1Q.!2Aqa.R..."3Bb......#.C...................................................1!QAa............?...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3
Category:	downloaded
Size (bytes):	363050
Entropy (8bit):	7.980618266105002
Encrypted:	false
SSDEEP:	6144:Bri8FOpk6hQZnajngo03JAK+jXvb6pcbcCRzrTwBklRJdp5akc86ZDGrvE/:hohQZnajgo+JRCDOQtwYRJdp5jc86ZM2
MD5:	47DFF1385F8462974389CD76E655C7DC
SHA1:	2F5D837F0BA04EC21705957237AAB808857A3E51
SHA-256:	D21AF4276D4C33B03E6118255FCD5286A2D4902E42A1399EBE04FE274FAFADDF
SHA-512:	6A14F059A6B19A04E85EEB0A8A395C4941FCF5972F8DB0BE5DA82E849E7F4E6D8A476F13E0FE75EB20A1904E094D32E686BB4F607961CB935D4A5E0AA47F2210
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6736c2af60561_3.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................\..........................!.1.AQ.."aq.#2..3B....$Rb..Cr..4Sc...%s...DT.....&5.'Et...du.e....................................C........................!.1..AQ."a.2q...#B...3R..STb....$r.4..%C.............?.t.o\.....b....e....;...C...};.w.~!h...M...D.A"G.4.C..F..3.r.JV.k.....nyw..x..+kN..N.{.4 4..&..Z..v&..P..H...

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47949), with no line terminators
Category:	downloaded
Size (bytes):	47949
Entropy (8bit):	5.183554091666455
Encrypted:	false
SSDEEP:	768:fBDhCFRo1B9F1QTGuaJu5JZaXoY5+7qvqARu1GMJ5348UuGuqUjllneygPVnKhc1:fbCTK9F1Id52X6qyF1GMJ5oQbKEO
MD5:	FED05BC651BC21E4115875C3184293C3
SHA1:	241DC94EEFBA1DCE3721947878AF4084997B5B5C
SHA-256:	846127CB95C010739158FD625BA92E6CF615F93763275C7C3920BD851BE9C168
SHA-512:	FAE18776909A132983E84AAF511E07FCF06EC2A9B7253666461DE04F42EAE765460C0972C1D5CF04488B899520E83D5588BA27B8D49415D6CBDAD1FD76300FF2
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/js/sweetalert2.min.js
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function a(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(t,e){for(var n=0;n<e.length;n++){var o=e[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,o.key,o)}}function s(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function u(){return(u=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,o=arguments[e];for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n])}return t}).apply(this,arguments)}function c(t){return(c=Object.setPrototypeOf?Object.getP

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 833x625, components 3
Category:	downloaded
Size (bytes):	220946
Entropy (8bit):	7.977120943519483
Encrypted:	false
SSDEEP:	6144:8Hk6alv+m9GE5T6GamYa5/sWwwL5RJmqwPUy:waV+loZ5vmFUy
MD5:	E41A6F275175561A5CE1B9FFFEE199C0
SHA1:	DCD45F140F131039FF8C728490A1220EBD2CB146
SHA-256:	E533618864D5206A03F62D2502CF84862B5EE597661A353F118207E222F1B554
SHA-512:	B6117EC5D02CF0C17CE3522F959A7E168F0D7DDD152452484F7C9F01F12C6A9D7C5EDC4C461D96542131C946FD3A91F35DEBF586D024D79383FB8444A99C0BE7
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/66b1d8d8b73fa_CF_Cover_Kempen_New-02.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................q.A.."..........................................u................#..........!.1.."AQa.#2q...B....$RT..367Vbu........%8CUWrtv.......45S....&DFGcs....9X....Hdf.......................................D.........................!1.AQ."a...2Sq......#3BR.5r.b..$4C...c...............?.g..........N.z.$;m.T.."..._[..y.\|._A'...*..z..s..a.....jW..`.}...~$u..m......

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 355x345, components 3
Category:	dropped
Size (bytes):	16546
Entropy (8bit):	7.8821895976006715
Encrypted:	false
SSDEEP:	384:9SSrgED4+QKHw4a/V8jgQS4yYquGpuSJXxZy1oXw3nmn:VrZD4cnEVmgQ1elUoX+mn
MD5:	BE1942B1DB05D27DCD911E3DDC716FA1
SHA1:	EE02627B27E231637DFFC2D4946705AD8AD27028
SHA-256:	22E834C0288B262880C171E846A1023E98FD8CABDDBD95C656A31043D3A65D9A
SHA-512:	5B9BAA927B346DD3377CA361CAEB6C1203813C336B87310575AE296FD96BCA91E382E58A256A4B88F0C52853F70DDA9480F22E23085C4A3FE3C65FB4DE8E732A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE...............mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................Y.c..".........................................J............................!1.AQ."aq...2W...#$B.R...%Cbr.3u...'7SU......................................,.........................!..1A"Q2.a#3BRq..............?..o..~.c?.....0.O..g....dAl..i...3.M?.O..4.<..I....D....~.c?.....0.O..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2346
Entropy (8bit):	5.120861627861045
Encrypted:	false
SSDEEP:	24:2dtwxCt6vLIxUvTUny5XWGFYWrArD3TMlunVdeVIr:cyk0D5vTmyRdYVrD3TMlumqr
MD5:	5ADFE137C8014FC2FDF65E0155A9A2F9
SHA1:	264C7CDE9EBC772B1D5DD5D907F9B55FFEFC95AD
SHA-256:	5C6ADAD633FFD53D7228D4E40300EF32100F071307DAF1B6BACDFDF3B3D567E1
SHA-512:	9EED43651B9586A259360A4D22CAD5D442E653968481652CDEEEA04F540C00C28857CCC9FAF2CAC1672EA5D848C67BC279A26C3C8B84D4CD9A89D7484F13D22D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 602 602" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-3089.91,-13457.5)">. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,406.89,1687.1)">. <path d="M0,-72.201C-19.906,-72.201 -36.101,-56.007 -36.101,-36.1C-36.101,-16.194 -19.906,0 0,0C19.906,0 36.101,-16.194 36.101,-36.1C36.101,-56.007 19.906,-72.201 0,-72.201M0,-70.201C18.833,-70.201 34.101,-54.933 34.101,-36.1C34.101,-17.267 18.833,-2 0,-2C-18.833,-2 -34.101,-17.267 -34.101,-36.1C-34.101,-54.933 -18.833,-70.201 0,-70.201" style="fill:rgb(0,163,172);fill

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 833x625, components 3
Category:	downloaded
Size (bytes):	169380
Entropy (8bit):	7.967977421750739
Encrypted:	false
SSDEEP:	3072:d/YoW4p39+c7tt1BAhkYBNKCI688mOH//Ip76jTTLXMaYI0E5CroH+xVI+C:dgofBAhkqKIu+vB0E5CrZIj
MD5:	231208D141FE2ADFB753D4F0C1DD08ED
SHA1:	2CDA2F5E4D626F38F903303E8115A56D2EFF464E
SHA-256:	2981039814772523FC49636C09777A2AD6142DC97D893B31AD7181896ECB7826
SHA-512:	93E5043EA3625BBA64A5B471EA65B785F720D0107BBCAF7780B5B69491E4995C71AC4028755C30655B52CD1E71825EBD4333CA5FABDFC81BF98029D4677A137E
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/66b1d6c790192_CF_Cover_Kempen_New-01.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................q.A.."..........................................o..........................!.1..AQ"a.2q...#B....RTb....$367ru.........8CUVWv...%DSc......4Gst....&5E..'..(FXe..................................H.........................!1.AQ."aq...2...S...#BR.3br.5.....$4T..D..%6C............?........QKh..mf.../o>..._)..x...*#....B.P.al.h.)j.}@.'..;..c..[.Q......c.......{h

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	247274
Entropy (8bit):	7.988330237935222
Encrypted:	false
SSDEEP:	6144:4D3xaTKX6S5ZqIUlsbs+f8oaGg57KUmoPCVRnDR3cETR:+wOKS5ZvnpdaHWo+Rtz
MD5:	2A07DA8DC842138CA32553A6A95BA22D
SHA1:	B2FE9D42EA76311E2F9BE6946E8B69E0C4195959
SHA-256:	9F0B3093FFEB11DAAC34BC9E97B9907514D36EC5AE893D5EEA1745373178776A
SHA-512:	6091EA17DBA48DA9CB5A50C3F04D7F67A48C11A676A77D560B0A7E83161440BE20855E617794CA341692EAEF80940B69F79413854979266031F15A5AFC724434
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/aplikasi-telefon-pintar.png
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx...y...}'....w..[.^.7.o..$.f...d..$Mg..&.3=.d.t.{..s....wz:6.c&qH...7...$@B ..(.IHI..w..g....T...ll..st$T.n...R.\|.y~..@DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD..$x.....n.M.i.Q.0.4.BT.U..B..1!.) t.!T!.)...A(...)..A0... .A..R?..O\|.Y"..""".........j..ah.b.A.....p..(..E.-.....).!...!!..H).. .Y@.....@..B@...$ ...@.H).K).I....S..VT.v]...y....)...1.......z.....D"i.F.P.z..r....`.$..Y!.T. D.....a. .C.RB../..Y...,.........P....P..EQ.jTE..*P..B .0.!..0.D..!.Q..Og..>.H=..3.."1.....}.m.9..zG4.].`..fI)gJ)..aX.....!\|.G....... .J..b..e...b.(...

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x750, components 3
Category:	dropped
Size (bytes):	155871
Entropy (8bit):	7.971613283644211
Encrypted:	false
SSDEEP:	3072:RYY6PLDIK6Xd3Ky1bLlD+tq8biD4EokL17Pl9mavJFkTrirlxN/OGNqFD8/:t6T8K6d3ZqbiDl3XvbdlX/7X/
MD5:	14297B05F1FBE0455504F7E2F9CE06E4
SHA1:	A8D9E723AD463E8AE4D62F643D88CAFD54786056
SHA-256:	60927E444F63E6587AF9EFCC44C703271A54F0C140DB00C5BE5B1DCEF8E7CAC6
SHA-512:	305AE4A5CE8585257D3AB046A7FA02DDA9C3E41C4B039BBE20AF0461446C4553800C165C1C458A46AEAAB7922CD918C801252A61F071C2D5617B2A411B72CE8D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................u............................"#2...3B.!$CRSbr14Aacs.....%DQTq.....5Udt........&67E.....'8uv......GWe......(FVf...9...................................L...........................!"1.2AQaq.#BR....3.....$br..CS..4....56s.D.%7T.............?...A.~.5...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 769, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	136790
Entropy (8bit):	7.983614336948269
Encrypted:	false
SSDEEP:	3072:r1MR8m3x+uK+AuJcGSOmZoQFA81pF4SNkLy+HTPz1XbxIuXXst:r1MmmBV1JcGSlZoc76LflX38t
MD5:	E0F9CDCDDD1C3F8FF99ADB0307BF92F3
SHA1:	4790F6862615D298BE37D55D83CC43EE62CDDE71
SHA-256:	EA27AA74560CA291FAA26C6390DE687C34A357A59BB3C77730FAF1656B144C8B
SHA-512:	2A82AAE273AA8D4308475F4E83373F702449626C8D3C3DD7DCC7D6C37F67CE1DADC7B091729F8AB97070B442FB3D0BA16B3D1748EFA5797D8094B8F37AD610A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .................pHYs............... .IDATx..y..e.......3!7.$@...C....."...Aa]ew.....FY.]].\.....A0."BT....YD9.#...9......[oWuO.d&...>..0........z.{).A....g.6`..gA...@.H...w..@.X.......c...B>.U..A..Q... .SN4...F?.&dc.6...q....c...B.O.%A....A..ar......p.....W....b!.Z.IA....A..ab.G.8.x.p....xX..d.N..b!..<. ." . .....9....h..../.r..b!..... ." . ...K.^..".xm.._....X^,._.#C..A.D..A.;.....>...+R..h]...X..%..A....A..L<....C.tY....W......d9.A.D@.A....#..;..#eE.._._.n+..Z.C..A.D..A...6.....f.......?...UY.A....A..V..,.Q..\Y.q..HD....eY.A....A..V..4p&.9`'Y.m..g..%5K..A.D.......N.>.,...n..\|.X../K!.. ."..0U....R`.Y....~.\|Nf... .... L%..\|.8KVcB..\|..j....r.. .... LV.P.{.o"........A....A...(.....N..T.1...,..,. .... ..D...\|..r..+2i...p...N.B..A.D..a..G7......S...?.WK.^A....A...&.......jL9..>R,..e).A...G.@..a..q&.{..)...;{...'K!..0~H.D..ad.h....!...<...X.? K!.. .".....c7.....-E...b!..Y.A....A..m%.....f.j.$..4..)N..A.;\Y.A.....F..`.Y..E.o...8.._.}....".. ."..0...

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3742 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	451121
Entropy (8bit):	7.960773945319856
Encrypted:	false
SSDEEP:	12288:4j40K88vIZrRDu/EyJBHFsgM0yNErkttToyVJTnOcyzta:4j40KwZFDsRlsDlNqEVSBa
MD5:	228F2445DBC6ECE4D7A9A3FE672F2B77
SHA1:	183A9025F90B6C4E1B9D07DC20E046F60D025A55
SHA-256:	C0C1A9F17006D1864DCC5221188CEDA9F39110EBDAF2E91AD3F33CCB0D1A49C0
SHA-512:	95A906D23FC0AE13031F226F8FFF2EC599BA339272035D043C84078E8B5869D15EC571035C243EF5B21507ABDC44392F72C92DE53FDF211B9D69088AF900BFC0
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/1.png
Preview:	.PNG........IHDR.......4........h....pHYs.................sRGB.........gAMA......a.....IDATx.....$.~..eV....=...{qq.\....A.d..."lZ..-....._.....~.)..a...).t.R.$.AY6..@.O>....{p..=.g....JU..vef.Tm.....\|>...9...U....U..:...............k....................................S................................&................5..................<..............`M.)..............k.O..............X..W(........x5....>. p5......j.^..p..M..d.>.w..>::.........~..X,.2'E...g...e.:..LU..o...)..Noy..=.}.{...jn.4.X........o......r..n..........~.Sz._^....Mm.....y.."........e..].u..].%..."..e.....m......e..Wy\|;.......^7..>..D.Z}W.../v./\....g^..w....H..Wwo....7..u.^.....c..Y..y...u....o....sn...A...~.....n.mm..../..x.................S.......................x..-..~.......~..n.''......7.......Mz.X...<.W..>>..6...M:u.r)..8.-..].Y~[.w6...cVC\|.WZ%.t,.c....T<...<...}.6........}j....t.\|.w.....q...*c..~.X....#.D.X}g.;.8g...^..oj....S./..]..N...}.F..+pN...

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	765346
Entropy (8bit):	7.988503936035899
Encrypted:	false
SSDEEP:	12288:aXbDgT51jZZ009RtFPrZFGWaNyYHi97aubtvfh1/DGqHULQysoTfF4/I0qT2kmH5:avY1jfRzFTjGjyZj3nyqHUh7FB9Skme8
MD5:	03D307147D18D295CF044B83C93F43E3
SHA1:	DFB953FFA6709FC8394D54A4C22987B84994F4AE
SHA-256:	E92827F9316D2112E77DE6522630665946FDD946AAF5B3605DF87AA08F27D651
SHA-512:	D6F31CCD653801A41ECC9E4A4C4533B446527DFC2BEAEF45D86B7DCF1D1AF5FBEF7DDE616C52B16C0A1E54991871FAA61CCCA6E115F260FF06A640DAB0E4C839
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/7.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....7IDATx.....-Iz.}YUg...o.{.g...g.2.1.A..h....i.$..(..;(.........JV.(."(..Q...$....X8.....z0...........2.YK~_.s...u....>.VVf.^yNf~.}.X.............................x...................................;.............................................................+..;.............................................................+..;.............................................................+..;.............................................................+H......T.......1..\.Z.4S7....Ke.>....&..Y.X..B....._)...4J.{>.6/...g...........^_G.....Rma.......%_.+......vr.O...n.Jw.....M.U...tG......Y.fy...T..}..L[."..\|.-Od.....i.lGFe.L>.8.sn9.i..R....E....6n..xvn.hf....A..1'/...m..9..$.@.o...a...g:'6..f!t.......p..p5...-..Q.inU..o.~...N...kQ...1.~.M).....0.rdQ..%._Qc.j...p..X5...{..O=.m,..8..q.............p...w............}.:..N.......~(.\|....q.............5..u.O.....7k.=...L....4#

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (318)
Category:	downloaded
Size (bytes):	4694613
Entropy (8bit):	4.994740454750477
Encrypted:	false
SSDEEP:	12288:+8bkT6Zux6hCT0U+WZYhI5uXCL2r+VU0Ukl+eGm4wEskMkQUgHHliWq+cwIcAwg7:E0U+WhU0UkHUgHHXU0n/tUY0sxUY9Fa
MD5:	46F078FC61A5D2B8FBEE3671FDAF31AC
SHA1:	2DFE3C10684849343057AD89D9901CD1A70955ED
SHA-256:	2379ECC21EC8EEDC1C7A4E35CFBD4C01C3A2C5338C1BC0EE70B1B8D70BC85C12
SHA-512:	AB7D00C2E7D99F3789D0C2108706CFC3D5C84C3968F08B4E13FF37DEDA06FDAF052E3D14FB128C5EC701360440D289BEA28FAA469DA47563C7A597672F31CC77
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/css/app.min.css
Preview:	/! tailwindcss v2.2.17 \| MIT License \| https://tailwindcss.com /../! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize /../.Document.========./../*.Use a better box model (opinionated)../..,.::before,.::after {. box-sizing: border-box;.}../.Use a more readable tab size (opinionated)../..html {. -moz-tab-size: 4;. -o-tab-size: 4;. tab-size: 4;.}../*.1. Correct the line height in all browsers..2. Prevent adjustments of font size after orientation changes in iOS../..html {. line-height: 1.15; /* 1 /. -webkit-text-size-adjust: 100%; / 2 /.}../.Sections.========./../.Remove the margin in all browsers../..body {. margin: 0;.}../*.Improve consistency of default fonts in all browsers. (https://github.com/sindresorhus/modern-normalize/issues/3)./..body {. font-family:...system-ui,...-apple-system, /* Firefox supports this but not yet `system-ui` */...'Segoe UI',...Roboto,...Helvetica,...Arial,...sans-serif,...'Apple Color

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	dropped
Size (bytes):	811772
Entropy (8bit):	7.983172973518003
Encrypted:	false
SSDEEP:	12288:CuFFSnyg9VZJm7CEuBvChb8o4PsTOQzJ3u2ve46PbRtUhSAzrsXVkwMpw3KEcrVy:7FFAyg+MCz7Ohi6dtUhSagFUEQVy
MD5:	5A46424B8F069AAA8C32F94F3C892359
SHA1:	C3BC0FD55FBD1421B2DCD976F41D56E8C3602306
SHA-256:	9A4F6FB1CA97E3E5A9D80CA5D88A4F4E33EC4A4799765D4EE804F7C7EDA90B6C
SHA-512:	0F6409799B7823797A3FC64F440485B5AACD724060B7FD83D3346018BC9631B9BF6A9EAAFC6E9CBD6FA8EF029434B84A1A3C4D66B0C68AE324FF6A84EFFE2240
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"...................................................................................o.....blHH...D..H..H........1 T..&....@.E...H........................1 D.)0$......LH.&$.."B$.0.......Rb@....b@........b`.B.......B.......bU.......L P@..`.............L..........@............... ............&&............ ...."`....Bb. .(..0.......L...LI...............@.K.....D... .J..$.......Bb..b@..R.DH...I.....@..H............................P.&$.$....0H.0.......Rb@.........................B.......bDL(.......P.......( .......P.0........LI...I......... .LL............&&.....@...........&......bHL......L......."...!.......H....91 .l."$.@LJ...@%....$.......( .$X.J....!"......... ...LH..$............@.....@.@........0H.0.......Rb@...I......`$.......... (...............(....D..$D......."D....D....0........LH.K0..\|..zvGW.g.p..y{tu+Wl...

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, components 3
Category:	dropped
Size (bytes):	61679
Entropy (8bit):	7.966398695945542
Encrypted:	false
SSDEEP:	1536:hgu77uipZ0vyMP5As8s7CBa+EwwQeItVD8:hh7eSwwwdKp8
MD5:	8E80B6E3876015CD318D332F2CFDA826
SHA1:	6F44A2EF24AEA9DF646AA1A844C79D472626ECE0
SHA-256:	CECC830FBC426CF927C64D203FF22F03DB862226B57AC79DE75311C61BA658BF
SHA-512:	A3011B3929D135629A1FBDC46B9149B9EA186192483884C9E13E5776A73B770C86FBF0151CC3ECEC7DA1497404785F027408900A3FD948071F46003122384687
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................w...."..........................................c...........................!1..AQa."q..2B...#R...$3b.....4CWr...d.....%&Tct....'DESUVes..5FGu.....................................8........................!1.A..."Qa..2q.#3BR....CS....$............?.4..G*J..e}......).i.o0.h.......{

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10947617392?random=1732450766497&cv=11&fst=1732450766497&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1182
Entropy (8bit):	5.248838028214113
Encrypted:	false
SSDEEP:	24:2dtwxCt6lVLIxUv1D5WE2c1/GWpnCnSXFp0gg45aF8V:cyk0j5v1sEzpntFg48A
MD5:	E6776C8C27DD8EE360FD979236A9CEAA
SHA1:	F10F2D80B8D264FAC9937D46C9FFC21E38942FDA
SHA-256:	B086F493E151E68488674ED565BA372C9CA07E03BEFC79607F74722C2DC27781
SHA-512:	9FD9199BD8277C84CADCA62646F7F40F137C1169375C76C4F493EB33C055618FCF80F8D6E2EEC2FF591246A56164E1CDC1C4F33B4CD4CED6A6B4833B2033CB51
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/avatar.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 134 134" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,66.6542,17.4333)">. <path d="M0,23.632C-2.917,23.632 -5.587,22.57 -7.647,20.813C-8.149,20.385 -8.438,19.757 -8.438,19.099C-8.438,16.135 -6.04,13.763 -3.075,13.763L3.083,13.763C6.048,13.763 8.438,16.135 8.438,19.099C8.438,19.758 8.15,20.384 7.647,20.812C5.588,22.57 2.917,23.632 0,23.632M0.003,0.6C2.927,0.6 5.296,2.97 5.296,5.892C5.296,8.816 2.927,11.185 0.003,11.185C-2.919,11.185 -5.289,8.816 -5.289,5.892C-5.289,2.97 -2.919,0.6 0.003,0.6M0.003,-4.184C-8.833,-4.184 -15.998,2.979 -15.998,11.816C-15.99

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1559
Entropy (8bit):	5.189696262169936
Encrypted:	false
SSDEEP:	24:2dtwxCt6GRLIxUvTO7eqrpApPbt0nvcqu5PG58q1/rJWt7cfdVO2xGNygk8FdKCn:cyk065vTOqCpqPbivNDpVOtyg9dZ
MD5:	8D13BB8EFCEAC558EAA96CBC7ADAA0D1
SHA1:	4C8F8085A0AFA5D24F156E44ED8CB4FF3433941D
SHA-256:	FFFB8451F1D8FF3F987350A4E461BADF326CA5DA2D3BF1C63B36F088F43D47B6
SHA-512:	518DD5CB5E76E2DD742DC85F62FB5BFC9958030FA853F97F15703E126DBBA12B48EFC91E821619D2A3FA342D71307ACA97C0C703EBACDEEFD0C731C39A571752
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 39 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-365.761,-172.835)">. <g transform="matrix(1,0,0,1,330.462,-203.997)">. <path d="M54.809,403.237C54.809,401.631 55.3,400.152 56.118,398.961L43.132,398.961C38.806,398.961 35.299,402.468 35.299,406.794L35.299,410.271C35.299,410.914 35.821,411.436 36.465,411.436L59.268,411.436C56.368,408.967 54.809,406.141 54.809,403.237ZM52.701,376.832C47.396,376.832 43.094,381.134 43.094,386.44C43.094,391.746 47.396,396.048 52.701,396.048C58.008,396.048 62.309,391.746 62.309,386.44C62.309,381.134 58.008,376.832 52.701,

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6228
Entropy (8bit):	7.872822945470078
Encrypted:	false
SSDEEP:	96:0aNzwUHQUeQ7yN6P9tS27I2L438z4qBMjsaJurgPJ3iCoFBBS8yVEp94OtFACQcV:lNztBbp6d33qBo9Rfo7BSLVEpHtN0KZ
MD5:	DF70BA5FCC3010DFD5E41AEC9F2AC20D
SHA1:	3D14F9E84B4735A5D90177B17148C9987E021D18
SHA-256:	BA960F5B1615E121D0818568CAC571C919A2667F645FEB54C60BD6012CE81321
SHA-512:	64AB1A5B2B66D0E23DFF65CC1BB5F9AAEBB52FE42EA38F1424DCE5C40527C861FC788DE0AE80CDE3B7C5B63CDD79F6FC65804A118779556AA828236931740E91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2......PLTE...........f..............f..f..e..f........f.....f..f..f..f.............................f..f..f.........................................f..e.....f..f.................e.........................................e...........f........f......................................f...........f.......................f.....i.gO.......LL..GH........................../........f.{{....ee..f..............LM..h..i..l.....\.....k.........................._..........#................./.....c...a..eA3L..` .Z..[.G9JTBE..^.g2....]8,P.........!V...$.X4)R]JA.."..........pq=0N.j1..........gR=...............0&TkV;x`6..dt\8.m/.q-.. ..pY9.t,......'.WL<HbN?.z.{(..&..#.....q-#TO?FXFC\|c4.u+.............%..........................z...Xz.Jm..A../........tRNS..........4.....I.M4.....f..........iL.....kSEE6...\|xQEA2..z)...eO....SB1!.......hX.......{wmA(&&.....ZT+.........tEYvc.....IDATx..Wl3E........{..7!.h...W.y.7zY8..}.=]..?.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1182
Entropy (8bit):	5.248838028214113
Encrypted:	false
SSDEEP:	24:2dtwxCt6lVLIxUv1D5WE2c1/GWpnCnSXFp0gg45aF8V:cyk0j5v1sEzpntFg48A
MD5:	E6776C8C27DD8EE360FD979236A9CEAA
SHA1:	F10F2D80B8D264FAC9937D46C9FFC21E38942FDA
SHA-256:	B086F493E151E68488674ED565BA372C9CA07E03BEFC79607F74722C2DC27781
SHA-512:	9FD9199BD8277C84CADCA62646F7F40F137C1169375C76C4F493EB33C055618FCF80F8D6E2EEC2FF591246A56164E1CDC1C4F33B4CD4CED6A6B4833B2033CB51
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 134 134" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,66.6542,17.4333)">. <path d="M0,23.632C-2.917,23.632 -5.587,22.57 -7.647,20.813C-8.149,20.385 -8.438,19.757 -8.438,19.099C-8.438,16.135 -6.04,13.763 -3.075,13.763L3.083,13.763C6.048,13.763 8.438,16.135 8.438,19.099C8.438,19.758 8.15,20.384 7.647,20.812C5.588,22.57 2.917,23.632 0,23.632M0.003,0.6C2.927,0.6 5.296,2.97 5.296,5.892C5.296,8.816 2.927,11.185 0.003,11.185C-2.919,11.185 -5.289,8.816 -5.289,5.892C-5.289,2.97 -2.919,0.6 0.003,0.6M0.003,-4.184C-8.833,-4.184 -15.998,2.979 -15.998,11.816C-15.99

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2116 x 1586, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1142680
Entropy (8bit):	7.9785389928104955
Encrypted:	false
SSDEEP:	24576:rULV7z40wgGqCifFm6BNBxF/z+iM6ABJcr1EejW:rUNz40pGqCsZ/r1KiSJcr/q
MD5:	47A36FD00B69FC9CA16175D419638919
SHA1:	5FD7AA4D5D94680DD5C9FAC526CD83E82329563F
SHA-256:	7C1CC735C47F4F2133407A1B4C858A578FF8A4062D8F8DF748453CE637A2C0CD
SHA-512:	6EAD85168F1A7FE13A78814A1CE696F220955FFCA569B9D05DD2FD65697D4755D7B1D57113CCFA023E901CB6C2BA10F156A8FC472FA6978A07850223D3B00D02
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D...2.....<{......sRGB....... .IDATx^.....U........$.......b.....:H/JQ....Pz.RT.T..`.I5`.....~......fv....n......x.....9;.g.c....bA....@....@....@....@....@....@....@....H." ..j.. .... .... .... .... .... .... .... .@ @@......@....@....@....@....@....@....@....N.....R..... .... .... .... .... .... .... ....D...@....@....@....@....@....@....@....@.....h..@. .... .... .... .... .... .... .... @@.m....@....@....@....@....@....@....@....N...D.ae.~.....$..... .... .... .... .... .... .... .......@..I..W...?.r..(...... .... .... .... .... .... .... ....-P...&..+... <I....#....h.VI..@....@....@....@....@....@....@.....R.......X4.....9.. .... .... .... .... .... .... ....,s....0Y......?.. Lp.... .... .... .... .... .... .... .... P.@...~....$..`~..3.E.U... .... .... .... .... .... .... .... ..@...&....."/.. .... .... .... .... .... .... .... ...1....Q..a..0..L..S..[..@....@....@....@....@....@....@....XT ... ..L.Q.. .......@....@....@....@....@....@....@....... .

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1606
Entropy (8bit):	7.227607188951285
Encrypted:	false
SSDEEP:	48:hdJYnc1IViLdr14p/6ZxSrg/KOiVB6xIEF7D4FNAnKlC/:Cca2x4pSZh/gVB6n7km/
MD5:	3DB414D893CABB44303E258B2AAAD786
SHA1:	4BACD56A554E4084819FA6F407504EF3B6D7B279
SHA-256:	F330C251D37F306E3BD3E000626B504DFC33C277B06FE2CDC64DF342A064DEA4
SHA-512:	3BAAE1313A4DE1036963D1A9D4AC96BFF71FA0777E748F6F65B07F056F4145C390AF6DBB342FFD49380521DEE28935ADF362FC73553D85E03D78618AD287CF98
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE...".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..".."..!..#..*../..&.....d............c..3....................;..p......................5..(...........6..3..D..l....,.......A..%..... ..)..$................j..:..............~..?.................-.. .....<..g..........U..B..@.....\........q..1........{..K..Y.....W...................=..9.....7.................].._.....+..R..~......}..8....#....,tRNS....].....`.....-..<....a.^.....R...W...'3..^!.....bKGD>Id......pHYs.................IDAT8.}..W.@.........nw.....`.{....P...._e....o}.%......]\..=.}X...../....2?...(... 9r.h./.AR.3X...,$.I..P.o...0.qV....ET.................8C[...]Q.^.A...JJ.PV^Q.U.".w.\S.u...M.-..!(.Ak...;.Nc..........!.&..1..02:6.H\|....S.#.3.s..Lfv~a......VV..z}.6..-.wv...3.88.2...+..0....wz.......L.......2"<<

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	977088
Entropy (8bit):	7.989140475217757
Encrypted:	false
SSDEEP:	24576:yuYxRqbwrmCxEMV6Bl83FOcD6Pf2AYjDvw8MImWizh8u:ydxRq+DmlaFOcDW2Aq8ImW2L
MD5:	5EA8D9A5B7CB6DB692F74F2316AAD1DA
SHA1:	0597AD65871CF30F949D338CD2ABC1898FCC7781
SHA-256:	E93D9BDF53E1812C06D39E75DC388613342D6F137FAB69C681F1E79955001908
SHA-512:	31D9A996BEC45DECB65E232923F10A61856F790C7F43D2894B06367B43CC73FCBFF5FC35B450D77F24BDFC1B9829FB8D7EA2E6EBA036BC3C79582B0296105F99
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/4.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....UIDATx........:@2..e.R..}U..jj...1.....k.....Z..]I.......cq2..'7)..~....Al...................\|..H....WXs..R..Q.c...y....Ut,/.s)....Q.W.`.....[)......W.:Y..t...l-.).C.i.L9..7Q.w.6...%..@..J.!.......g......z..0.#.wP>+......J.s..{igm..X.$.v.E.>...m.D..}..U.S.y...;=\|@\|..<..xGW.>..4....Tz..Q..............\|^.R...............................................................j..........R...X)E.......4}..'5.&l..aL;...D..i.~V........i..J<;.%#...M..r..O...1...e".+.\..8.rN6....Q...9;.m.`E.jt...9Z.;^"c...:.#.F.oj..H".....X...{IQ.q...G...F\|;V.KG..x.3.....y.................................3.J..Ggc.........n...O-B.......u.-..&.c....h..I.0..&.>'.m9;8.w..u.=.O.+u.w...h#..............&..........................................)...M.*......~#...V......"K.....s&..k....T.8.~W....W.+..5Q...X;..>....)C5l'+K.E.....-..6.M...L@.=...;a.~T..Q.Q=.........A9....&.;..M..................w.............

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2116 x 1586, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1142680
Entropy (8bit):	7.9785389928104955
Encrypted:	false
SSDEEP:	24576:rULV7z40wgGqCifFm6BNBxF/z+iM6ABJcr1EejW:rUNz40pGqCsZ/r1KiSJcr/q
MD5:	47A36FD00B69FC9CA16175D419638919
SHA1:	5FD7AA4D5D94680DD5C9FAC526CD83E82329563F
SHA-256:	7C1CC735C47F4F2133407A1B4C858A578FF8A4062D8F8DF748453CE637A2C0CD
SHA-512:	6EAD85168F1A7FE13A78814A1CE696F220955FFCA569B9D05DD2FD65697D4755D7B1D57113CCFA023E901CB6C2BA10F156A8FC472FA6978A07850223D3B00D02
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6711a3da1b761_van.png
Preview:	.PNG........IHDR...D...2.....<{......sRGB....... .IDATx^.....U........$.......b.....:H/JQ....Pz.RT.T..`.I5`.....~......fv....n......x.....9;.g.c....bA....@....@....@....@....@....@....@....H." ..j.. .... .... .... .... .... .... .... .@ @@......@....@....@....@....@....@....@....N.....R..... .... .... .... .... .... .... ....D...@....@....@....@....@....@....@....@.....h..@. .... .... .... .... .... .... .... @@.m....@....@....@....@....@....@....@....N...D.ae.~.....$..... .... .... .... .... .... .... .......@..I..W...?.r..(...... .... .... .... .... .... .... ....-P...&..+... <I....#....h.VI..@....@....@....@....@....@....@.....R.......X4.....9.. .... .... .... .... .... .... ....,s....0Y......?.. Lp.... .... .... .... .... .... .... .... P.@...~....$..`~..3.E.U... .... .... .... .... .... .... .... ..@...&....."/.. .... .... .... .... .... .... .... ...1....Q..a..0..L..S..[..@....@....@....@....@....@....@....XT ... ..L.Q.. .......@....@....@....@....@....@....@....... .

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	865554
Entropy (8bit):	7.989284506849334
Encrypted:	false
SSDEEP:	24576:8Y0bjOD1CkK2GE92PyAbzROo+WKAUNP6fVWz08:8ExZh2P5boo2SNWz08
MD5:	FE6808E2A637C80A122D19C8AFCBFC86
SHA1:	86434FE5ED54B13E324E197AE838025FDD1D6A00
SHA-256:	1E68C81C9AD266C15BE324D08462F8C649809FA2E1C116BAB69F20AE3D1D5AE9
SHA-512:	2B462469D9E2BDBA4999A2C7806D3B2F2AB44B52056CBB2C3A8B383A3D5A625C66F4B8312DB264131346276F6056E8BCEC871A0185FF05EF2338A71CC845AA5E
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/logo/5.png
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...4.IDATx...i.mIv........c.XY..X..l.DJ...F...l...m....l.m....b....r..7.CB7.V...ER.X.b....yx.p....."..\|Y.^..2s..7O.)v..;...k.....A..A..A..A..A..A..A..A..A..A..A..A.... .. .. .. .. .. .. .. .. .. .. .. <.... .. .. .. .. .. .. .. .. .. .. ...X .. .. .. .. .. .. .. .. .. .. .. ..c.8... .. .. .. .. .. .. .. .. .. .. ........ .. .. .. .. .. .. .. .. .. .. <.... .. .. .. .. .. .. .. .. .. .. ...X .. .. .. .. .. .. .. .. .. .. .. ..c.8... .. .. .. .. .. .. .. .. .. .. ........ .. .. .. .. .. .. .. .. .. .. <.$ .. ..s....I7.[.E.(.@.>..U.u].e...Ij..A..A..A.>..>.C...>h..B..N...7M..\|..M0......WAz...,....o...S..Q....\...pe..y9....PX~.W6.6TP/q...>U......('.&....=.A.Ms....t.....t_..Kc;p.8...#./.....Q.8..9T.pZ.{x..-..}.0..GA.a.L.}.G...A..A..Ax..}.&....%....S....9....b.e]...\|.....7......Nq..W.....m......J..V.....(..}.C..C..O......^..#..4......Mr...}q}7..r'.V.......Nge.N...z..+C?...V

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2310)
Category:	downloaded
Size (bytes):	253502
Entropy (8bit):	5.552930065627674
Encrypted:	false
SSDEEP:	3072:LpgYpTAX/D+Of07t0tBgDwPAjIJ8UUlPM22KiDUG7Z0DmoMfgQJv53H6D:1MX/iOf02PmPx276DmoMfgQJvW
MD5:	24BEBDD946C34C3EECD5F04B50795D27
SHA1:	EE0F0D31ED029B4E2AD09DD96C7D63A74AD277F6
SHA-256:	5D5EC715AC33557C4C6F435F75C9F835820B5F62594D5E742AFA64732B1E6C15
SHA-512:	F3F564467B9F92F4B629957324B6ECF638A0E85FA5415A4FB1C5B502C8DABD0E5EE14EC80BFB39B96BB66D3E2C552B8D7FED3DF8D5A2DC609F5884E83B1D95F9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-10947617392
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769234
Preview:	false

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3
Category:	downloaded
Size (bytes):	7777
Entropy (8bit):	7.7803823716694485
Encrypted:	false
SSDEEP:	192:Yw2EoK7LCh/lOhSLX3pjsn6OKAzl7BZF4UFjPQJgbEK1OL9P:Yw2EollOgKKsl7BZ+UFj4GbEK1OL9
MD5:	C9070F08121F64E22BAD30CE0A872DBD
SHA1:	3A0008615A2EE13AC620AEE9A26C540C0F4D5AF2
SHA-256:	FC672E51760CB23E42727FA53DE173E712B934E06C59E42977DC3C1E895E9EBC
SHA-512:	F12B1C319C9B8FF85AAEBEA0ADF5D943FC14EC5B6A08C2B117D24935195D5C1D53A37686EDE43358E50097B3DC659B0564CA2769A1397B45CF4A15652E5E589B
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/organization/499/logo/65ad34a8ab77a_1.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"........................................M...........................!..1."AQ.#2aq..BU..$4Eu......%37Rfr..5Cs.........................................6........................!..1AQaq.."....BS.#2....R...............?..M...D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3822x2866, components 3
Category:	dropped
Size (bytes):	1413263
Entropy (8bit):	7.980005140198344
Encrypted:	false
SSDEEP:	24576:sKAwjgXOajMGHjWyLYoYlm+fWo/p/fZhDFLuOSenUY+trT:sK3ajMCWyLY5TfWahRienU7tH
MD5:	B56D51B9CF4FBB1972EE8016AE11AB28
SHA1:	071AEAC543919F217D61DE4884D71BF4BC2CA01E
SHA-256:	A2D35FA03A815AFEF2EC5749A8F2B727B4CDDD7B8690F4571503465C14DD6943
SHA-512:	D71FEEDF38AFF9EF7E6F95F1EF759FCC1A85C298BF19F0F4C60AFCFDDF272370F6E685BB4D12958A3CAFEEBC0AC3A19FE48E3AA37E6CB32C1B6C3624D19CE607
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................2...."..........................................q.........................!..1A.Qa.."q2....#BR...3bru......$478CSWtv......%56DTVs...&'GUce......(EFdf.......Xg.................................O.........................!1..AQ."2aq........#3BRr.45S....$Cb....s6T.%Dc..&E..............?..e.CW.U.....9..(.<.n._....Dm.wR..-....8....k...3..O.P..tV.[l....>.V`.I#.G

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2001
Entropy (8bit):	4.925276573121252
Encrypted:	false
SSDEEP:	48:cyk0p5vTEmEWYyBZKAZXVtsbGam6bj4M/+jtfH+SsyFsiOU0:1kqKmEzv6XVtqEMKtfH+MVOU0
MD5:	CA625BDF28E4AD57D503D4ABAD353A0B
SHA1:	C0FA612367512C9EDBB3BBEC3991306294060C3D
SHA-256:	CE16263DEC2ABCA0826D9F1B5ABFD328628183F21F03D93D56B4D2643AAD0A27
SHA-512:	3988B3186D0CACC3B66852B5C6C847F28D3DD63185900071B0DDCC29D48B454E1182E04AF9E414EFF2564C8304D4C566B19C425A26F6456119B99846202FBE96
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-308.871,-172.825)">. <g>. <path d="M343.589,193.471C342.734,192.39 341.165,192.203 340.079,193.053L333.001,198.599C332.65,198.874 332.216,199.024 331.77,199.025L326.698,199.03C326.008,199.03 325.447,198.471 325.447,197.781C325.446,197.091 326.005,196.531 326.695,196.53L330.945,196.526C332.326,196.524 333.444,195.404 333.443,194.023C333.442,192.642 332.321,191.524 330.941,191.526L321.21,191.535L320.553,191.536C319.209,191.537 317.906,191.989 316.849,192.818L313.377,195.544C313.16,195.715 313.122,196.0

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3816
Entropy (8bit):	4.597346472141002
Encrypted:	false
SSDEEP:	96:1ko5y2S/U9FJMGh+ryy+BAWtjI1ALMFUun9kshKvU:1kcy2So3qyy+BAWt81K1F8
MD5:	11E1DF3B7B628DC787F6D211A24CD844
SHA1:	1126EC67FF9C692600E066D6DAA9508CE9FA737E
SHA-256:	158895532354AA54FD74E622964F158BE15036FC3FAE73EBC8F5EB272A093099
SHA-512:	CA0A3A5F05E3E152151D76A0576E9B19CBB0F59C467EBC169DA6C8A1B2C4E00390051F623DCE45F165D00BCB3BDE4A84EE9826B3400A04D5E81F20C5EB8993D4
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/category/bencana-alam.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-659.104,-1345.81)">. <g transform="matrix(1,0,0,1,178.068,353.923)">. <path d="M0,0.063L14.217,-12.123L28.434,0.063L27.426,0.063C26.997,0.063 26.649,0.411 26.649,0.84L26.649,12.461C26.479,12.475 26.323,12.496 26.124,12.496C24.824,12.496 24.21,12.176 23.501,11.806C22.771,11.426 21.923,11.011 20.433,10.96L20.433,3.949C20.433,3.519 20.085,3.171 19.656,3.171L8.778,3.171C8.349,3.171 8.001,3.519 8.001,3.949L8.001,10.959C6.499,11.006 5.65,11.424 4.917,11.806C4.208,12.176 3.598,12.496 2.3,12.49

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51616
Entropy (8bit):	7.81060476562535
Encrypted:	false
SSDEEP:	1536:k3PdY9OZjlMgcA/6cPMBSgW8giKeIt88LWoIsh:cdYg/cAipSgQiKWrsh
MD5:	F5D6A4508F62DBFE329F75E7A72BA7F4
SHA1:	521A43FF7639DB89D6FAA466A120C7D5C83D2114
SHA-256:	271E947556DD6BDBAC9AC2D37161593972B10BE187293ED666C208F2764B45B3
SHA-512:	4D825B1A75C1F4C2D55389B16B09C71B72DB1B2AEBBEF15C705FC05B1E62CFA6166AA68837A1F33F03DB102935DEF16CE363E7648DE2B8B5FF09842160AA0B02
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/flags/english-flag.png
Preview:	.PNG........IHDR..............!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...w.\e.....f......W.....^/....r.z...QcC.i..........B(IHH.$...Rwgv7..-s~..RCv...=....z.2..9.}....9g...P&V.s.>...4.#io.-mi...w.ko...F.....!.M7.....N...epZ...66.J.rUiG..y@.!.-.U..#.B.i}cUH..?Q.$..nn.i..dk....&....D...%IHF...!.PUUL....!.d....jO;....!...bk2tpK.K.....$..nJBhJ..mL:.....z..d....j].$..&.+..x.r...(.....Y.....z....t.....B......]........#...is..y`.isu...m..k...{#...!......A..!......A..A.......s..I..Z......O....kM.........Pjs...W..c..$..6n.7mk.;...44.Tlj.!m.4.X[?......m.....C..;r;.n..m...\..^...^..V.Jv.."7h....v...w?.T.$EC..JE....[.B../..b{....C..1I..:.7.Z...!....v......A..U;..F.hJF....>l]:t..d.E........q..g%!t....=.,...-.l.AM.......X.................6./>..:m.$...a...l..Cm.....F=]5z.....im.x..?..`J....X.P..4.\[[{@UU.a!..;.i.?....}k.Pte.} ..;.zIC...].Bx:..t..s.$.)...v.q.!.@..`..P....!..C.cB.......$9 .0.P(.R

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161973
Entropy (8bit):	7.990453546151409
Encrypted:	true
SSDEEP:	3072:+ApT2zHIcUl4JQQjn2/NNBgoaftQ27jYEOmfHQN4zuIjvoZ+4M:WjIZG+/N/alQi0LxZI
MD5:	76B0EE4035D5E02B114A2BE724870575
SHA1:	A9D27BF945946C41921FA0004EE768329FD081B0
SHA-256:	9172A8E1E4792E41A5DE63B293553D0D90AAD72EF37715A267CAA9213CE95286
SHA-512:	AD5D80F963EDDFEF767ADF9D168B9101D4133D2827914063833A30F9309AD9349459680E9032D2306CCAA7D29DDFAFA71AAF66EA183D7D1F51EBB1C989A4BA22
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..w.....}..s@HBd...BV .d..^....`l..Y.u.qm...8...i..{.. ..".!!!..f43........A`..t...z...U...w..s/@.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!........R. ...L <...B.....c...3M...2.........H..0..(..j.$.-..Q#..B.B.!d....7$...=..i'..3...'&......#...j.....G........&!....B.!.D.@@...\#r...n~...f.-......[\|l..B$.".,.?.....x..!.P..B.~...a....r.....Vct...s..]GxA..^\|H....X..-.8)....&y..?..'..B.B.!......`.@...K.L5"P...$..W..........EF(lp_(<.8Q)>I.X.'.....6.+A.!....B.Y.....g....cD...@ ....{.e........B8X....IIP...,R4.(Q. H....W....!..B.B.!............tdr....': ....<..6...=....D..x........)Y.9....?.x....n.R..B(@.!d/.c^?..........H...._F..?}.mS.....!.l.N..4A..0. ..b._../V.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769242
Preview:	false

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	323422
Entropy (8bit):	5.589142204547686
Encrypted:	false
SSDEEP:	6144:P4FAMX/iOG9iLPmPzI7BJDMfgQJICOu6x0/aJI:AFN64LPmcGs2
MD5:	7E93884C507E45D9D14D4D043168A83B
SHA1:	934D524ED472F2D60FA832819E7163BDB020170A
SHA-256:	ABF1773D78B017D61EA99BE7362308C27F37089C78986F7BFD14C4F92AF2AADC
SHA-512:	D6EF0DE13A430358106A4283C43EF2DE11BE5D9344BF7EA108CC9061D0FA79B1A9014761B61BB9AC9D52D3455A000C8233133E3C21DBDC5A818A3E9F7B92473C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	dropped
Size (bytes):	818173
Entropy (8bit):	7.975719026223785
Encrypted:	false
SSDEEP:	12288:TvW2RmI3Y3Vw3XF0LA5kneSsC21AXVTrOadY4o5j8+MXkMiMsifycfhOPLmiLYtG:TeAYlw05nZs1uXVWyQjqXPs+OS37C
MD5:	A05D9947E535563185BC4F54C4E83C35
SHA1:	FC63B29912A569AC5FF7BD0CDF933B8D950FCAC7
SHA-256:	6DECAFFC198D84F3E1B7A92260975F5C6D6D2A1DB99C656271A1D1C444AB4BFD
SHA-512:	2D4DF5F9295D4D9FABE4A13028B512EB56F97F533AD0BC2CA3642F1597AC3C831CE5F795CB0B32782C05D6A7AB70C9CE1A233DF61529348D9198DED4CE97321A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"....................................................................................z.2.K..L...4..i......0..... ..L...`...L........`....4.... .......L........`..0..........0.............!..4...$i.........i..............L........N...4.........0 ....Hi..................& .4......k.5V.^.#.!.6.m..'9.Na.$.(E.M..LH.z2..am....Nj.A.F&0.b.)..X..b..)..r....i....(.B .Qd.L4....]v.......8.V...0.!......8E.e...2.BSF....Z.]Li....lg%;d..V.&$..8.B...VE+..*.......&.SH..)G\....1a.....-.nT.1,..j......D.%...`.19. .%.9..C....AN.`.......'>...;o.5.+.q...`.A)....,...i......i......L..$.....h.C...@.=..>{...)`.i.......4. ..........T.........i...@......C.....0........... 0@....L.......L....I......... i.......`. ..`... .............0 ..H.&...$..0..p.......`....&....0$4......0@.@.....i.....i1...Sm5...+.A.....j...N.....A.DP.+j..5.#ew....d

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 603, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	154885
Entropy (8bit):	7.990580437392415
Encrypted:	true
SSDEEP:	3072:UAntjwqWzCswhcPjT+QQKByIuuQoj1BwcDeThtT6fb0ym3/VOxlu1pJQZ:UWWycrVcDPmucDeufwyudOriDK
MD5:	FB8DDC0AEE20D340D256B3B6A35E1EE4
SHA1:	FC261569310F46082F812A0BBBDB26E4D5F4FB98
SHA-256:	C0F14101418C7D14E4CC63CA8D8316FC836881B3D57B37449974058452C870ED
SHA-512:	99CFC5275CB4338D848FD8642E1CF2FC0177E8BEE1E9B3EF725E166FCB7A28F7AFD8F4E1116551942A1FC650368D9BCC7B05069CEF948AE6B423C66882C0B46F
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/notifikasi.png
Preview:	.PNG........IHDR... ...[.............pHYs............... .IDATx..y...Y..;...U-.Z.%...c'$$!.$.B&d..!3......y.....$..m... !..f..@.'...-.m.Z[K.Z.h..n....o..VW.:u.e+....?..S..y..<.@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A4..& .y8...l.'.....Pk.y?,....g....1....^;.V.[...}...c.T..j....k.......c.v..9..S.}.9.j`...Kp.Q"...9g.1.9Wj.@h.q.v~.x...].......+_....v^.:..............%.............. y.w.s.=g...C..c..Z........A.\...z....^_.=.U.^c`[7b[.....

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52336)
Category:	dropped
Size (bytes):	358243
Entropy (8bit):	5.416073856608302
Encrypted:	false
SSDEEP:	6144:8JVbbyPY0Kxw+QASOYZzaBrREtetDeGGtm:xreQAtYZgwC
MD5:	780E59FF236B8B50DCC18357CDE3ADA6
SHA1:	7F1A82ADEC0B46856063CCEAA3B86EF9C3F7E44B
SHA-256:	0CCF8087035715F328A898CBDDE68FEB8767287A798C46990644128436B7A26B
SHA-512:	7B80A7E01F4A0DBB5BEBBBBB110D1E32F3F06AC284698068E1AFD4910DC1F821F6F55A6FA623D15C8303BCAB303364DAE0F29FA525118D90D3CAE5F357D4EFD8
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	downloaded
Size (bytes):	818173
Entropy (8bit):	7.975719026223785
Encrypted:	false
SSDEEP:	12288:TvW2RmI3Y3Vw3XF0LA5kneSsC21AXVTrOadY4o5j8+MXkMiMsifycfhOPLmiLYtG:TeAYlw05nZs1uXVWyQjqXPs+OS37C
MD5:	A05D9947E535563185BC4F54C4E83C35
SHA1:	FC63B29912A569AC5FF7BD0CDF933B8D950FCAC7
SHA-256:	6DECAFFC198D84F3E1B7A92260975F5C6D6D2A1DB99C656271A1D1C444AB4BFD
SHA-512:	2D4DF5F9295D4D9FABE4A13028B512EB56F97F533AD0BC2CA3642F1597AC3C831CE5F795CB0B32782C05D6A7AB70C9CE1A233DF61529348D9198DED4CE97321A
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/6684a59f3ef85_Sumbangan_New_Slider-02.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"....................................................................................z.2.K..L...4..i......0..... ..L...`...L........`....4.... .......L........`..0..........0.............!..4...$i.........i..............L........N...4.........0 ....Hi..................& .4......k.5V.^.#.!.6.m..'9.Na.$.(E.M..LH.z2..am....Nj.A.F&0.b.)..X..b..)..r....i....(.B .Qd.L4....]v.......8.V...0.!......8E.e...2.BSF....Z.]Li....lg%;d..V.&$..8.B...VE+..*.......&.SH..)G\....1a.....-.nT.1,..j......D.%...`.19. .%.9..C....AN.`.......'>...;o.5.+.q...`.A)....,...i......i......L..$.....h.C...@.=..>{...)`.i.......4. ..........T.........i...@......C.....0........... 0@....L.......L....I......... i.......`. ..`... .............0 ..H.&...$..0..p.......`....&....0$4......0@.@.....i.....i1...Sm5...+.A.....j...N.....A.DP.+j..5.#ew....d

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769235
Preview:	false

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5802
Entropy (8bit):	5.047431601907535
Encrypted:	false
SSDEEP:	96:JvfCvf3pr29iHvAgHDd95HKkQUH5aXlxVbiVjYY2yVJiVV/8f7SEGZqbhie:5C33NP7xHvQuUPVWVUjyV4VVSSEuM
MD5:	96D34EAD10CCBB355E70DB5A707917DE
SHA1:	352C93555F01D76D7D3BA7ACB0FFD74B500C15B9
SHA-256:	14B120AE964299522A7E9364B2B968185A04884609CC01E84DBF5FC5A749CA96
SHA-512:	A172D2CE1F85CA98D5DDFAE651E3949A909F4C5282ED72DDB3CDF81F71B303F8261DA2CA6A5CA7F30B4B3399F6A9B8E4D6D8DD0B4EBD5876027E1686C968298E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000170992014233376411830000001812647548496074422_);fill:#E6E7E8;}...st4{clip-path:url(#SVGID_00000170992014233376411830000001812647548496074422_);}...st5{fill:#0F7F7F;}...st6{fill:#00A2AB;}...st7{fill:#026666;}...st8{fill:#FFFFFF;}...st9{fill:#255D7C;}...st10{fill:#15465B;}...st11{fill:#093747;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	865554
Entropy (8bit):	7.989284506849334
Encrypted:	false
SSDEEP:	24576:8Y0bjOD1CkK2GE92PyAbzROo+WKAUNP6fVWz08:8ExZh2P5boo2SNWz08
MD5:	FE6808E2A637C80A122D19C8AFCBFC86
SHA1:	86434FE5ED54B13E324E197AE838025FDD1D6A00
SHA-256:	1E68C81C9AD266C15BE324D08462F8C649809FA2E1C116BAB69F20AE3D1D5AE9
SHA-512:	2B462469D9E2BDBA4999A2C7806D3B2F2AB44B52056CBB2C3A8B383A3D5A625C66F4B8312DB264131346276F6056E8BCEC871A0185FF05EF2338A71CC845AA5E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a...4.IDATx...i.mIv........c.XY..X..l.DJ...F...l...m....l.m....b....r..7.CB7.V...ER.X.b....yx.p....."..\|Y.^..2s..7O.)v..;...k.....A..A..A..A..A..A..A..A..A..A..A..A.... .. .. .. .. .. .. .. .. .. .. .. <.... .. .. .. .. .. .. .. .. .. .. ...X .. .. .. .. .. .. .. .. .. .. .. ..c.8... .. .. .. .. .. .. .. .. .. .. ........ .. .. .. .. .. .. .. .. .. .. <.... .. .. .. .. .. .. .. .. .. .. ...X .. .. .. .. .. .. .. .. .. .. .. ..c.8... .. .. .. .. .. .. .. .. .. .. ........ .. .. .. .. .. .. .. .. .. .. <.$ .. ..s....I7.[.E.(.@.>..U.u].e...Ij..A..A..A.>..>.C...>h..B..N...7M..\|..M0......WAz...,....o...S..Q....\...pe..y9....PX~.W6.6TP/q...>U......('.&....=.A.Ms....t.....t_..Kc;p.8...#./.....Q.8..9T.pZ.{x..-..}.0..GA.a.L.}.G...A..A..Ax..}.&....%....S....9....b.e]...\|.....7......Nq..W.....m......J..V.....(..}.C..C..O......^..#..4......Mr...}q}7..r'.V.......Nge.N...z..+C?...V

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.569092186365795
Encrypted:	false
SSDEEP:	12:Kt80BxG0LtWtM0BxGRdgtLtWcM0BxGIxLtWk0BxGGd1LtWO0BxGxe3RLtWF0BxGe:zOkutdg5kcMcNkkCbkOI3tkFleRk8
MD5:	B58FCFA7628C9205CB11A1B2C3E8F99A
SHA1:	D11FEBF9E708A9E11BAEE37ED7DC5E99902580BE
SHA-256:	27ECA3E8297EB7FF340DEB3849B210185A459B3845456AA4D0036F6D966B3518
SHA-512:	66ED2703C1AE9A94DE01DD47707F9ED6CF3E2A035A3359793A06AFAE682A7DD4ABF06FF05109905841FE85747802C94708CE4A9EE56C7FBB8CC578EC556BF6D3
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/favicons/manifest.json
Preview:	{. "name": "App",. "icons": [. {. "src": "\/android-icon-36x36.png",. "sizes": "36x36",. "type": "image\/png",. "density": "0.75". },. {. "src": "\/android-icon-48x48.png",. "sizes": "48x48",. "type": "image\/png",. "density": "1.0". },. {. "src": "\/android-icon-72x72.png",. "sizes": "72x72",. "type": "image\/png",. "density": "1.5". },. {. "src": "\/android-icon-96x96.png",. "sizes": "96x96",. "type": "image\/png",. "density": "2.0". },. {. "src": "\/android-icon-144x144.png",. "sizes": "144x144",. "type": "image\/png",. "density": "3.0". },. {. "src": "\/android-icon-192x192.png",. "sizes": "192x192",. "type": "image\/png",. "density": "4.0". }. ].}

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 897x673, components 3
Category:	dropped
Size (bytes):	84470
Entropy (8bit):	7.949224373478067
Encrypted:	false
SSDEEP:	1536:gNvb6ADYQZ6/MuH72EI28ULmCbVi5KUUqUG/z71av3L4LFFF:gNz6/Pb2e8UViAe/Ev3kd
MD5:	B063A1194F8CF4D2A3DE6D071AFDFAA5
SHA1:	EBC98341691E4EE4F7F0797ED375AC26E834F195
SHA-256:	30FBAB72023CBEFF1A5714FF04DCB12F09214EBC3EFA39D826324B329CEA5E05
SHA-512:	A81774D33752D96FDC5128B086094781672BAB97B79DA03D408DFA456207856D6D4168CAD038113F1632C368A344DAEEBBDFD05A26497CD5846BCE76A040628C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................i...........................!..1A"7Qaq.......2UVsu........46BRWrt.....#5Tb...$3S...8C.%&Dcd.F....'Ee...................................9.........................!1.23Q.."ARqa.4.#B.S...$D..5..............?...Gt""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ..."".

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1667x1250, components 3
Category:	dropped
Size (bytes):	341950
Entropy (8bit):	7.973215271145178
Encrypted:	false
SSDEEP:	6144:KHTSDKIN4kmiGlSHQiqauEhnUUE+1GQrGGzCbqPMTyk1SmYKsl5X/MBj:8SDioFwhadnU3+1GyGGzCbq9k18lhM9
MD5:	BB66E7A3EE1D46BF1B039BB354D6DBAA
SHA1:	69B01EB12D65E39D9622D40DBEE561601C088131
SHA-256:	5C72C61A0F35F0F11EAFD6194703204AF4362F1672B02DDB1294EABF36322CA6
SHA-512:	4D1E862FB6049135668E9EF1785C0AAEE2B5D136A24AAA8AAEF3C051F51528AC1F50128ED54513C66F9F4F44E25D8C54352FA0315E1B4E1CBD9C35AC372C6B6E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................t...........................!1."AQ..2aq#BR..br.......$37tu......456CSTVWs........%8Ucg.......&Ddv....'EF.Gef.......................................P.........................!1..AQ."aq..2R......#35Tr.4Bbs.......$...6d..%CDSEc.............?...)B\|...z...!..,.M`c.x....h....o..(w.qI.iN..<.{g...q.l.!..&..2w..e.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11525
Entropy (8bit):	4.548388601983784
Encrypted:	false
SSDEEP:	192:5CdP7KTTM9+QWpIPsp9433Dhg3gAmGi9ovS+ueO05o83qHo5rL5:5w7Kd4sDc1omTCvS+uebqHaf5
MD5:	E9CB7F065BBD7E3AB899BDA87DF45683
SHA1:	8CDF9C8EF5C637951953362785C85C9A94EC5FD7
SHA-256:	580B1D9A3DF674479D932BDCA96896534992A4111F20EB3EDBEFB6784983C090
SHA-512:	00BA438EBD5933479E8F33A10E038122358BB1E668F0A6986BD82D831E577A72DEF2B18CB9A6AAA42E7922F7C63A3B46E925E22000633B13E77FDC204B851E5F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000116198597079705612100000018436256062163351224_);}...st4{fill:#255D7C;}...st5{fill:#FFFFFF;}...st6{fill:#15465B;}...st7{fill:#FFEFE9;}...st8{fill:#0F7F7F;}...st9{fill:#C2E4EC;}...st10{fill:#00A2AB;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,187.43-133.1,208.16c-52.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/api/mobile/doa/liked/visitor/769239
Preview:	false

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	566498
Entropy (8bit):	7.970677652962003
Encrypted:	false
SSDEEP:	12288:MI+UH5XKo4wp4RjJKwmuqK68+RZkAqmPXMIPxagtCZ/N+:v+UsH4UjJ9q78OZk5m/bt2/N+
MD5:	70AEAF46A8F5CE64FDA5CC11B63BF15D
SHA1:	F241BB1F48FF6AF7EE3F76FBFAD2AB1FA90E81CA
SHA-256:	21543DD4446AF56A13210BE633E6A3D0CA6D1CAB2A0EAD03F0DF3E3F5BD6CD13
SHA-512:	94E650BDA88C8112FA79E2E833E99A86E584B1EEC35DD11452240A9C878FCFFAB61421602332AE499C8B0C55DDFEF4AB8C660824087BA29FBB62D800419D3F5A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....+.o.....pHYs.................sRGB.........gAMA......a....wIDATx...Y.%.u..n3w?..FDFf...s..AR.Y...........W?u..~..j--....X.J.I.#....<.\|.gv7+37s....."#......>....1..I...............................a8...............................0p.............................L..w..............................0p.............................L..w..............................0p.............................L..w..............................0p.............................L..w..............................%.........X$3jJ.4"..jd..ea,y....&Vk.x(.,.......R.IRM..@.D.......('K...V....lM.$eK.U.9O..K.t`l.M..\...d..t.....L(m?..o..l.-..eR.....=1..G..Zv-.,.&f.XFo`...'.M&.4."....!...-;N.bV..e..L.r..._B.....\......2z<.;......@.U..k<...WA..Z.............x.....g....\f.D.]?.%.B.}....l.=]yI6....f...G....JfQ.^..td,.3.....g.....3...d..._R.~-y...>kK(]Yd.wa\.....................................-.......E.KNF....W.v.r..&.F...zyXf.,..W^..o.....I\|o..{...[.h..}.\..5.........

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2131
Entropy (8bit):	4.959730254268249
Encrypted:	false
SSDEEP:	48:cyk0I5vTHR/MoEMjUykE7Z1UptdgQqAG9APXR:1kDBROMx6tUAG4
MD5:	B8B2A69B41CC5CAE3E9F602F725EDF66
SHA1:	C77A9FF96C54353820FCCD3EA9A2A4327C235739
SHA-256:	D8660CE3B8FE25B1CF329B64A037ED73A5A362248D24A378325BD53F68696B33
SHA-512:	A4511874EAB8769DF73AFB1A1338787BF9D4BED7B31F0121C51228F88B7C3D15C9531DA9E09666040943FAEE719A8D77AC43ACE9631C5F83017E99A1DBEFBAC3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 37 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-492.829,-172.853)">. <g>. <g transform="matrix(1,0,0,1.02954,320.809,-145.641)">. <path d="M207.206,319.034L192.678,309.98C191.345,309.149 189.656,309.149 188.323,309.98L173.795,319.034C172.69,319.723 172.02,320.914 172.02,322.192L172.02,339.894C172.02,341.965 173.744,343.644 175.871,343.644L205.13,343.644C207.257,343.644 208.98,341.965 208.98,339.894L208.98,322.192C208.98,320.914 208.312,319.723 207.206,319.034ZM185.768,333.987L176.768,340.987C176.54,341.165 176.269,341.25 176.001,341

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	downloaded
Size (bytes):	811343
Entropy (8bit):	7.979058996905515
Encrypted:	false
SSDEEP:	24576:LrTb6HPlGOWpuYfxEmdxCcyBSP8u/0PzIQ:Lr/5D088T
MD5:	C488260D3DC35794826B310CBF06C546
SHA1:	58E94BD0CB1A122A551A3358B7975BFAFD504C37
SHA-256:	1C00607E89076265B88F357DFE431E77A91255C60097F4DDAB3F74F207669A5A
SHA-512:	4EF31D509763F33153AB104BD1E44709838D7AD7EE8A8A80094883A982B3487962AB1D9EEF0F9939C3D6329A3232199D5EA3943D2827279C603F3878A9C866E4
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7e2d24ea7_Sumbangan_New_Slider-03.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"..................................................................................z~z.P..@@..@...(....h..0..`....B0..m.....:..`...........CN...4....P..p.. ...E0`.10.........L......4........A..4..4..`.F..F..m4m;..6..Lb`.4#......@..@....P........h.@.Q.0...)....H.A.L.i...0`.@.m;.......L..N..`.10....4C...`..#......4..i.M............$..`.....@.Q. ....(. .5.........B.T.FQ..5*..J.14m2B...L...L.....L.t.X..N2...N2..6........`..10h........................`X0.10.................0..@.T.?......@P......b..!...0.F..L.`.........:........L.................i.h.!....LLbh4..... ..@.....0...4.(.........$....;.Qci.hF.M......4X........B1....b)....Q..........@..T..F..).@...i..&. ...@.h.F.......A..R..h..M@(.".@..........C.4...J.......@...`.....`.....@.... ....&.2.L...N..&..T..j.i..a.P.0..6...N...0......)...i.....h4...ec........4.0

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	downloaded
Size (bytes):	811772
Entropy (8bit):	7.983172973518003
Encrypted:	false
SSDEEP:	12288:CuFFSnyg9VZJm7CEuBvChb8o4PsTOQzJ3u2ve46PbRtUhSAzrsXVkwMpw3KEcrVy:7FFAyg+MCz7Ohi6dtUhSagFUEQVy
MD5:	5A46424B8F069AAA8C32F94F3C892359
SHA1:	C3BC0FD55FBD1421B2DCD976F41D56E8C3602306
SHA-256:	9A4F6FB1CA97E3E5A9D80CA5D88A4F4E33EC4A4799765D4EE804F7C7EDA90B6C
SHA-512:	0F6409799B7823797A3FC64F440485B5AACD724060B7FD83D3346018BC9631B9BF6A9EAAFC6E9CBD6FA8EF029434B84A1A3C4D66B0C68AE324FF6A84EFFE2240
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/661c7dc1cc458_Sumbangan_New_Slider-01.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"...................................................................................o.....blHH...D..H..H........1 T..&....@.E...H........................1 D.)0$......LH.&$.."B$.0.......Rb@....b@........b`.B.......B.......bU.......L P@..`.............L..........@............... ............&&............ ...."`....Bb. .(..0.......L...LI...............@.K.....D... .J..$.......Bb..b@..R.DH...I.....@..H............................P.&$.$....0H.0.......Rb@.........................B.......bDL(.......P.......( .......P.0........LI...I......... .LL............&&.....@...........&......bHL......L......."...!.......H....91 .l."$.@LJ...@%....$.......( .$X.J....!"......... ...LH..$............@.....@.@........0H.0.......Rb@...I......`$.......... (...............(....D..$D......."D....D....0........LH.K0..\|..zvGW.g.p..y{tu+Wl...

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2480x1395, components 3
Category:	downloaded
Size (bytes):	316513
Entropy (8bit):	7.98738979865252
Encrypted:	false
SSDEEP:	6144:BoICGppTm+kKqvS9TjfOYXldCXnhNmO3AIoeHA5XJ:Bo4iXKqGTaYXlEnDt3AILaZ
MD5:	2CFA8B18E533D5677479028C0CBB2530
SHA1:	4D3862694F38138FB440163FB111ED2BEEC4871F
SHA-256:	9518D059407D9EC4CFC05286D4FB9DC8EFE1151942BA1EE2569613DE4C35709D
SHA-512:	489ABBD3F9966285E744AD210C14D062192510F014F0284EE5C33471EBC4C11F616D5B9E1236645C28321C1F7A791F599194A0385F67B3C7B012CB140BEA80B6
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/6684cada3ae36_Sumbangan_Slider_Cukai.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s....".................................................................................A....&%........H.(...J.H......"`..LL..B`.........."...ULJ.."abB..3.Y.+...a."aS.B&.... ....0....Eh.+...h...t.5..^.{...z_..o.rS.1.J.x...:........JRr..0g..u..2vg.........W.......o........{]<..r67.~uoq.qZ..... .K3Q .n..d.../8....frMf.%k.....s\|...7..^.....gS.K.......,=+..p0...}..}=..F..i..;9...G>...ww.W?_/....}.?nq.\&k6LL..P$....H.LL.)lk..o.N.H..... P...D.....P..@.1I..0"`D..<>......3Y%.`...B$@......0..L.B`&....H..............[....P.0.Ae..zA....v.a.V@.E....LH....X...........R.l.-.E..55.sV.)...Z.sX..LM%t..l.n.._?//R.8s..ro.s/.:as5...=.kCW..=xZ..A.....o_.~vL.....Dk=...._K..s.v.\|...i..X.e.@.E.$..",Z/.`M...p..\Mnkiic..:...6.kR..1.8...........~.2..H.-....y?U....N..f.............\|.A<....`.Y"..H..D.....pf.t.....\..,....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 897x673, components 3
Category:	downloaded
Size (bytes):	84470
Entropy (8bit):	7.949224373478067
Encrypted:	false
SSDEEP:	1536:gNvb6ADYQZ6/MuH72EI28ULmCbVi5KUUqUG/z71av3L4LFFF:gNz6/Pb2e8UViAe/Ev3kd
MD5:	B063A1194F8CF4D2A3DE6D071AFDFAA5
SHA1:	EBC98341691E4EE4F7F0797ED375AC26E834F195
SHA-256:	30FBAB72023CBEFF1A5714FF04DCB12F09214EBC3EFA39D826324B329CEA5E05
SHA-512:	A81774D33752D96FDC5128B086094781672BAB97B79DA03D408DFA456207856D6D4168CAD038113F1632C368A344DAEEBBDFD05A26497CD5846BCE76A040628C
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/67402909e2117_1000263127.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................".........................................i...........................!..1A"7Qaq.......2UVsu........46BRWrt.....#5Tb...$3S...8C.%&Dcd.F....'Ee...................................9.........................!1.23Q.."ARqa.4.#B.S...$D..5..............?...Gt""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ..."".

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1037
Entropy (8bit):	5.41342675572482
Encrypted:	false
SSDEEP:	24:2dYATLf30xxQw9fNQM2pC24b9Bb4bj7FKUM:cYAvf30xB2q92H7vM
MD5:	60550FAED7AADB857BED164C5702C8B9
SHA1:	A24D081A208BA9C72433374BD7E8DC78976EDFF5
SHA-256:	B8A7F836BCFAFFE82FC48424C40C5752BEC3805BE552B64C1CE11BE5D5D2EFE6
SHA-512:	C516B024A191F5FE39130CDF08986BD62E7A69350454C25B4B696178940B15B4CF8BC77D7FECF5C458D7BA5701F4B0C829A8206E741BD62C8CC305DFFC4FBF92
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 54.21 54.21" style="enable-background:new 0 0 54.21 54.21;" xml:space="preserve">.<style type="text/css">...st0{fill:#22B7B8;}...st1{fill:#FFFFFF;}.</style>.<g id="XMLID_4340_">..<path id="XMLID_4343_" class="st0" d="M54.21,0H21.64C9.69,0,0,9.69,0,21.64v32.57h32.57c11.95,0,21.64-9.69,21.64-21.64V0z"/>..<path id="XMLID_4342_" class="st1" d="M24.26,21.85c0-1.4,1.27-1.99,3.05-1.99c1.95,0,4.45,0.76,6.66,2.08l1.99-3.99...c-2.25-1.53-5.34-2.42-8.31-2.42c-4.58,0-8.56,2.16-8.56,6.83c-0.04,8.06,11.79,5.77,11.79,9.96c0,1.48-1.44,2.12-3.35,2.12...c-2.46,0-5.6-1.02-7.67-2.8l-1.91,3.86c2.37,2.08,5.94,3.18,9.37,3.18c4.83,0,8.95-2.25,8.95-6.87...C36.26,23.67,24.26,25.66,24.26,21.85"/>..<circle id="XMLID_4341_" class="st1" cx="40.6

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4bj0/sw_iframe.html?origin=https%3A%2F%2Fsumbangan.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6339
Entropy (8bit):	4.973244706596205
Encrypted:	false
SSDEEP:	96:JvfCvqr29iHvAgHDd9qTdZspkKcNhT1rUCjAwDJUCMpOCanyZVXY4HUrCRMn/mtb:5CIP7yTdf5TjKKmUC+/ErY9y
MD5:	24995AD44693321EBCAB26463174C472
SHA1:	4C0C27EC969F5586147E7412E27D8BD3D430C5D3
SHA-256:	FE78598CDA6B8DEBD9DD14E5DD070772D1BDEAF4600BDBB6AD64EAA88B0835B3
SHA-512:	1F3CB890B3E9EC0F4B5184B246259584D56883CAF99AE27DC80D5C58E7885537DF4A9E24A8357A4F02F281F4C8D0BD2799BD2F29063E42F1BB18A3F86FA6156B
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Wakaf-01.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#CFFFFF;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#8BE8E3;enable-background:new ;}...st3{clip-path:url(#SVGID_00000172412145221650414680000009216949963355932833_);}...st4{fill:#026666;}...st5{fill:#FFEFE9;}...st6{fill:#00706D;}...st7{fill:#15465B;}...st8{fill:#23728E;}...st9{fill:#255D7C;}...st10{fill:#009393;}...st11{fill:#00A2AB;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,18

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4094x2302, components 3
Category:	dropped
Size (bytes):	811343
Entropy (8bit):	7.979058996905515
Encrypted:	false
SSDEEP:	24576:LrTb6HPlGOWpuYfxEmdxCcyBSP8u/0PzIQ:Lr/5D088T
MD5:	C488260D3DC35794826B310CBF06C546
SHA1:	58E94BD0CB1A122A551A3358B7975BFAFD504C37
SHA-256:	1C00607E89076265B88F357DFE431E77A91255C60097F4DDAB3F74F207669A5A
SHA-512:	4EF31D509763F33153AB104BD1E44709838D7AD7EE8A8A80094883A982B3487962AB1D9EEF0F9939C3D6329A3232199D5EA3943D2827279C603F3878A9C866E4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"..................................................................................z~z.P..@@..@...(....h..0..`....B0..m.....:..`...........CN...4....P..p.. ...E0`.10.........L......4........A..4..4..`.F..F..m4m;..6..Lb`.4#......@..@....P........h.@.Q.0...)....H.A.L.i...0`.@.m;.......L..N..`.10....4C...`..#......4..i.M............$..`.....@.Q. ....(. .5.........B.T.FQ..5*..J.14m2B...L...L.....L.t.X..N2...N2..6........`..10h........................`X0.10.................0..@.T.?......@P......b..!...0.F..L.`.........:........L.................i.h.!....LLbh4..... ..@.....0...4.(.........$....;.Qci.hF.M......4X........B1....b)....Q..........@..T..F..).@...i..&. ...@.h.F.......A..R..h..M@(.".@..........C.4...J.......@...`.....`.....@.... ....&.2.L...N..&..T..j.i..a.P.0..6...N...0......)...i.....h4...ec........4.0

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 769, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	76420
Entropy (8bit):	7.962709475932589
Encrypted:	false
SSDEEP:	1536:AnjXiC9VVYqaCVf7z8F9HS7r0CXO33Z+lUpvmMhedOJxHdSkeS0d03:kjXiWTfX8F9O0CX0olIxhedOJRdSkW+3
MD5:	CEABF3D53F7C2FBD22B84F4B51771F51
SHA1:	B64F7F92CA86AFFCF96AB590C39A9E5413E25718
SHA-256:	51D3D4B927CB7D46348D646AD3CF0217453C54311616D2EC70EEABF7C24404A6
SHA-512:	39008439F4B570011F673A5FD2D51C1EE9C5E8230880FB8F23F6FBDEC5A398A8F8DD9A19C2D1BFADFAA4F3B25A648C82864151CC56B60F2044B58AB37066BBEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .................pHYs............... .IDATx..w.$Wy...:..;.sRX..B.....-&z...;.!-...6..,c.l.p1..]zW..`ch,s1.-.F.B ....V.J.Q;y:....nOu...y...U..N.......B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.#X......y&+.......;%k..B....BH.X.M[m)......\|.B....B.%.z.a%...P:.!.P@.!..$C.os...Wx(...(...B( ......K.R#..8.....V..B.!..B.....5....Z..t4.`....t.B....BH...F4.d...z=..B....B.S8..~.t8..fN.....\|.B....BH....p.I.G=.!....!.,....p..<H.)W.%..A.!..B.!.-.....p?u..S.8..B....B:X8...t.4..X8..F^K.h1.].. .......04.......S.f......01.{..I...t:.Z%.P@.!.7.ca.#..HG..Ny-*...x4U2B.6.8s.g+.M.V.X1.Ny...O.x..~../....8?.B....B:W8D.p.a.,......W......\|./....E...:5....p..{..~...'...B(

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10050
Entropy (8bit):	4.51837644984393
Encrypted:	false
SSDEEP:	192:5C4P7xTrCiZFj+HQJ9hvVSg3whYQpm1e7k1eNMOGqdGvSC:557Nv+wJX/2pmh1idGvSC
MD5:	FFDF2C3AEFBECEA4161AAE04F4615031
SHA1:	7A5ED2F515C03FAE52C940FCCD97DDC884B41CFA
SHA-256:	CF6BDEB8E42CDA7EA90C3918161089102C3C4E1D0B0D7AB820986DDF13C58A0C
SHA-512:	009B699AC78325166664BDD6AB2F0DD58BDBC87B5C9546AE397C5A81A8D0211BE42520B3336D44D969DD9CD2D72093630D6BE85DFD34BCDF81A233930C10D403
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#F9ED32;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#EFD906;enable-background:new ;}...st3{clip-path:url(#SVGID_00000043432382477683988400000009230095119682631056_);}...st4{fill:#009393;}...st5{fill:#026666;}...st6{fill:#FFE3D4;}...st7{fill:#00A2AB;}...st8{fill:#FFD7C5;}...st9{fill:#FFEFE9;}...st10{fill:#255D7C;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,187.43-133.1,208.16c-52.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	244375
Entropy (8bit):	5.4541358501238815
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713EN:pfLeYc+PJxH8NNfFcrHurPK713C
MD5:	98A1AA6D0155EA8597C93CD050CE5808
SHA1:	C844C1CBAA79A4F09F50E2DF3F648B8B5AA6CB5E
SHA-256:	527BF3DACC5EB62211130FE4BF315C682861320AB25B4AA2EFE6EA87A760DB8C
SHA-512:	BB01621E0CBE1185D2167CEDB9517A29FE6537AE0E23254243DF90F36A66A0E1D91034E9A772E76C94FC1E1E969DB9082177777EC6085A752B3BCB9BC8B98BC2
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	dropped
Size (bytes):	3093
Entropy (8bit):	5.581288841545279
Encrypted:	false
SSDEEP:	48:0+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwbwQDuExjGx:0+5AQHAray48f5JMYHIqcQDu9
MD5:	40D0F07DE7EFF907B6DD367C65D36886
SHA1:	2F5968AF7EB0117A25049D837BABBAF854A8FDF6
SHA-256:	6B7895DEE547A7B5C6C85C7ED463E72F9E350FEB08146D3F9FA9D167B950E84C
SHA-512:	FA7727E5DC0B191C473A9FAE6B89D8161F1C1591CFAE294311FC4A6E7248A74581290EB83EAD428193759ECAED24558411262AF27186068DE1997678E45EA8A6
Malicious:	false
Reputation:	low
Preview:	/1732450780,,JIT Construction: v1018453738,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3816
Entropy (8bit):	4.597346472141002
Encrypted:	false
SSDEEP:	96:1ko5y2S/U9FJMGh+ryy+BAWtjI1ALMFUun9kshKvU:1kcy2So3qyy+BAWt81K1F8
MD5:	11E1DF3B7B628DC787F6D211A24CD844
SHA1:	1126EC67FF9C692600E066D6DAA9508CE9FA737E
SHA-256:	158895532354AA54FD74E622964F158BE15036FC3FAE73EBC8F5EB272A093099
SHA-512:	CA0A3A5F05E3E152151D76A0576E9B19CBB0F59C467EBC169DA6C8A1B2C4E00390051F623DCE45F165D00BCB3BDE4A84EE9826B3400A04D5E81F20C5EB8993D4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(4.16667,0,0,4.16667,-659.104,-1345.81)">. <g transform="matrix(1,0,0,1,178.068,353.923)">. <path d="M0,0.063L14.217,-12.123L28.434,0.063L27.426,0.063C26.997,0.063 26.649,0.411 26.649,0.84L26.649,12.461C26.479,12.475 26.323,12.496 26.124,12.496C24.824,12.496 24.21,12.176 23.501,11.806C22.771,11.426 21.923,11.011 20.433,10.96L20.433,3.949C20.433,3.519 20.085,3.171 19.656,3.171L8.778,3.171C8.349,3.171 8.001,3.519 8.001,3.949L8.001,10.959C6.499,11.006 5.65,11.424 4.917,11.806C4.208,12.176 3.598,12.496 2.3,12.49

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10050
Entropy (8bit):	4.51837644984393
Encrypted:	false
SSDEEP:	192:5C4P7xTrCiZFj+HQJ9hvVSg3whYQpm1e7k1eNMOGqdGvSC:557Nv+wJX/2pmh1idGvSC
MD5:	FFDF2C3AEFBECEA4161AAE04F4615031
SHA1:	7A5ED2F515C03FAE52C940FCCD97DDC884B41CFA
SHA-256:	CF6BDEB8E42CDA7EA90C3918161089102C3C4E1D0B0D7AB820986DDF13C58A0C
SHA-512:	009B699AC78325166664BDD6AB2F0DD58BDBC87B5C9546AE397C5A81A8D0211BE42520B3336D44D969DD9CD2D72093630D6BE85DFD34BCDF81A233930C10D403
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/home/2024/Akikah-01.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 500 500" style="enable-background:new 0 0 500 500;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.92;fill:#F9ED32;enable-background:new ;}...st1{opacity:0.92;enable-background:new ;}...st2{opacity:0.92;fill:#EFD906;enable-background:new ;}...st3{clip-path:url(#SVGID_00000043432382477683988400000009230095119682631056_);}...st4{fill:#009393;}...st5{fill:#026666;}...st6{fill:#FFE3D4;}...st7{fill:#00A2AB;}...st8{fill:#FFD7C5;}...st9{fill:#FFEFE9;}...st10{fill:#255D7C;}.</style>.<circle class="st0" cx="250" cy="250" r="174.71"/>.<g class="st1">..<path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83...c20.73,94.24-38.86,187.43-133.1,208.16c-52.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	692
Entropy (8bit):	5.358159993045465
Encrypted:	false
SSDEEP:	12:TMHdPXi/nzVJ/KYf3nW/1HA47xRgFOVXp9NJCXNNOwj0krFKxO:2dfATLf3Kg4dRgFOP0OY0kV
MD5:	95DEFF39F674237429F1AF22C9E813B3
SHA1:	1D15B1A80ECAC37D1DAAE2E4DC5C9F02B4CDA5BC
SHA-256:	C1BB838424BA34288F0F6F136C766B0A6B386EDCCABA071448A355E8D039C942
SHA-512:	77714DD605E8BA5A64A2F5233E7F82C0B65BFECE3DDE82BC2E88C44F558944E7AF1EB58123CD98CD56B702B94D216AE9352BE086D968B967ADF648692EE841A4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M31.07,17.91L19.01,6.34c-0.31-0.3-0.81-0.3-1.13,0L5.81,17.92c-0.26,0.26-0.4,0.61-0.4,0.97..c0,0.75,0.61,1.36,1.36,1.36h1.9v9.78c0,1.2,0.97,2.17,2.17,2.17h15.21c1.2,0,2.17-0.97,2.17-2.17v-9.78h1.9..c0.75,0,1.36-0.61,1.36-1.36C31.48,18.53,31.34,18.17,31.07,17.91z"/>.</svg>.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2823
Entropy (8bit):	4.937917546576145
Encrypted:	false
SSDEEP:	48:cyk0D5vcKK1R9/ij3NM59A/C9vmH1U7f3gOcuB1GX4VOJIxk:1koaR9/iZM5WWvn7f39cAswxk
MD5:	5743D74E4E303766A25304743C5D5242
SHA1:	7FEAC01E1667B292EAB7FB4A9B645C736F091DA4
SHA-256:	497D5DEC3F5660D160E49DF49C96A03F05515CBF436F3FCC97655054732DD94B
SHA-512:	9F7B6AB765912AE7928E8ECA4496101C3C3652317F2E52E81F4FF3DEDE1E71C2BBB2CC0A88D3B62F79F9DBD4079F2128C8BAD5228ACDC07EB379CCD93EA295FC
Malicious:	false
Reputation:	low
URL:	https://sumbangan.com/mobile/img/category/ngo.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g>. <g transform="matrix(4.16667,0,0,4.16667,74.4504,167.188)">. <path d="M0,-10.155C-0.395,-10.033 -0.663,-9.668 -0.663,-9.255L-0.663,-0.82C-0.663,-0.299 -0.241,0.123 0.28,0.123C0.801,0.123 1.223,-0.299 1.223,-0.82L1.223,-6.227L5.206,-0.455C5.488,-0.05 5.956,0.123 6.397,-0.015C6.848,-0.157 7.14,-0.585 7.14,-1.114L7.061,-9.282C7.056,-9.8 6.635,-10.216 6.118,-10.216L6.109,-10.216C5.588,-10.211 5.17,-9.785 5.175,-9.263L5.228,-3.744L1.057,-9.791C0.822,-10.131 0.394,-10.278 0,-10.155" style="fill:rgb(0,163,172);fill-rule:nonzero;"

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8864
Entropy (8bit):	4.772871890935299
Encrypted:	false
SSDEEP:	192:1k579JCqWuhF1CQo3coSmlIwlsn/pcq2l0/lo3cB/AAw+wTJchI9R0jmdeId:1A79JBKQo+mlXsna0/lo+UTXB
MD5:	FD705945951569EBB54D7CAF35CE3F8C
SHA1:	40E1F1419C19EF341909CF67074666294E09BFA4
SHA-256:	25B1D56982104F84ADBDD74C54F4CA72E980C12892668A10B8C7D3B1B5F61E26
SHA-512:	C8FAF1C170DE5FFBE18094D4DAD2928C783EFD9261419CA67C19337C3436F1780206B4A04059521B5B4CEACD44CEB8FD0AE83F099320B294057A1F2F77AD5D8B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg width="100%" height="100%" viewBox="0 0 1775 420" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:2;">. <g transform="matrix(1,0,0,1,-153.523,-83.3375)">. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,211.239,10.0005)">. <path d="M0,50.355L-192.816,50.355L-192.816,20.098C-192.816,8.998 -183.818,0 -172.718,0L20.099,0L20.099,30.256C20.099,41.356 11.1,50.355 0,50.355" style="fill:rgb(0,163,172);fill-rule:nonzero;"/>. </g>. </g>. <g transform="matrix(8.33333,0,0,8.33333,0,0)">. <g transform="matrix(1,0,0,1,112.443,19.2552)">. <path d="M

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:on:on
MD5:	68934A3E9455FA72420237EB05902327
SHA1:	7CB6EFB98BA5972A9B5090DC2E517FE14D12CB04
SHA-256:	FCBCF165908DD18A9E49F7FF27810176DB8E9F63B4352213741664245224F8AA
SHA-512:	719FA67EEF49C4B2A2B83F0C62BDDD88C106AAADB7E21AE057C8802B700E36F81FE3F144812D8B05D66DC663D908B25645E153262CF6D457AA34E684AF9E328D
Malicious:	false
Reputation:	low
Preview:	false

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 240x240, components 3
Category:	dropped
Size (bytes):	13373
Entropy (8bit):	7.874874808243353
Encrypted:	false
SSDEEP:	384:Fqmu3oIE/2/h7Pj8FhE4lxCtnxZjfpnP5de:FLu3OyhCEiCtnxLP58
MD5:	8B70FA176DEF518B1B3BA73777348D14
SHA1:	342278F0230D071E0F8D8A358C566EAE1D613AAD
SHA-256:	45639A46D089A3BF5F2F27A81690C7E0ACBC3E2A295FCF7E65EE3732A941F3E8
SHA-512:	8894619857A961DE822D8546FE9399BD6C057D127B5C0716648BF2B3D32C13EE77426C6CFF90DA7D9FFDF4CCB01A017E7E9656A5F46D53E54C96794D43FBDD0E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i.................................................................."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.......(...(...(...(...(...(...FeQ. .z.Z.^Z/...*.Z7....d.,QH..2...KL..(...(...(...(...(...(........(...(...(...(....v8..M\|w....'4....&...Q...h_....X..N3.z.........+/..#...S.4..v.....v.j...:}.C-$..G.z.@95.'.?m...RIi..>mrU$,

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	244375
Entropy (8bit):	5.4541358501238815
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713EN:pfLeYc+PJxH8NNfFcrHurPK713C
MD5:	98A1AA6D0155EA8597C93CD050CE5808
SHA1:	C844C1CBAA79A4F09F50E2DF3F648B8B5AA6CB5E
SHA-256:	527BF3DACC5EB62211130FE4BF315C682861320AB25B4AA2EFE6EA87A760DB8C
SHA-512:	BB01621E0CBE1185D2167CEDB9517A29FE6537AE0E23254243DF90F36A66A0E1D91034E9A772E76C94FC1E1E969DB9082177777EC6085A752B3BCB9BC8B98BC2
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2480x1395, components 3
Category:	downloaded
Size (bytes):	472176
Entropy (8bit):	7.987142090719835
Encrypted:	false
SSDEEP:	12288:WElcC7pF5/ZRa5I6IpSURaF9l+OTsLzHoslU6p3BlXm7Baw:rXdugk4jLrXlbRBlXmlf
MD5:	AECD95211DAAD969B2E94BF1E4FC42DF
SHA1:	28AB26C94B4E698F04FEF43B87B0116C546BE165
SHA-256:	D2B336EAD15D5157F76B426DE10A5FA26C8261F72E11AC8A1451BC29FB8E3569
SHA-512:	61A759BE5D9094A38A0B3C54BD76A0B8826C065290EEAA95A53AEFF8002A89DCE32940F1C3B65545F8942AD717936D3F2CC67A3E3A88067740CF3AC27E67D2DC
Malicious:	false
Reputation:	low
URL:	https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/sliders/668e257b9598f_Sumbangan_Slider_Doa_Harian.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s...."...................................................................................~.h..............&............... .........`.C...............`..........b`..!.@0.b.....&..........60...L.4.........bh.pTA.U.h.:..&.D6.m.hI.vN.8.Q..U...S..@VY..\|iE],{E}..X.*.YI....nu.v.\...J..uF.7.)......6Ai.$.R..hq.C..pl..).nX.b....0L..b`....VUc..I..N..."..E. M..n#S".S.....Cq.cR.Y..rN.DD........".)A.c.U3u.lu..6.BNf.&.A,..`.D...`..L....!..&...............4.C@....C.L.......M.b......h...L............. ......)..&..1.b`4... `.. .`....h....61.......&......!.I.8+U..US.w.Y:"@FD.d.(....8.#p ..Bv+ii.aQ`(.pU+i.Y6.]\...Y41AX..T.).^H`..B!.S.&..L#dGUw.:.X........8+.+&..h....1.!.0.i.h..I..h%(I..........S...qa'..d.r.q$.i.$.sSq)FU....AR...![@.hjN,Rpnd!.q....9W'68J.N-....@0.@6.H...b....@1.`.&....&..........C.)......C....!...`.`..`..@.10bm..@.0C

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 24, 2024 13:19:16.169943094 CET	192.168.2.4	1.1.1.1	0xfab9	Standard query (0)	sumbangan.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:16.170288086 CET	192.168.2.4	1.1.1.1	0xd1d3	Standard query (0)	sumbangan.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:18.180393934 CET	192.168.2.4	1.1.1.1	0x6536	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:18.180721045 CET	192.168.2.4	1.1.1.1	0x48a8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:18.193923950 CET	192.168.2.4	1.1.1.1	0xc5a	Standard query (0)	sumbangan.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:18.194267988 CET	192.168.2.4	1.1.1.1	0xab74	Standard query (0)	sumbangan.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:26.949179888 CET	192.168.2.4	1.1.1.1	0x3937	Standard query (0)	sumbangan.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:26.949316978 CET	192.168.2.4	1.1.1.1	0xd296	Standard query (0)	sumbangan.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:27.840706110 CET	192.168.2.4	1.1.1.1	0x88b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:27.840881109 CET	192.168.2.4	1.1.1.1	0x2cac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:27.868277073 CET	192.168.2.4	1.1.1.1	0xd107	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 24, 2024 13:19:27.868277073 CET	192.168.2.4	1.1.1.1	0xb72e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.045108080 CET	192.168.2.4	1.1.1.1	0x908a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.045238018 CET	192.168.2.4	1.1.1.1	0xea13	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 24, 2024 13:19:35.045665026 CET	192.168.2.4	1.1.1.1	0x932f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.045820951 CET	192.168.2.4	1.1.1.1	0x73b3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 24, 2024 13:19:35.046225071 CET	192.168.2.4	1.1.1.1	0x7586	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.046376944 CET	192.168.2.4	1.1.1.1	0x3f30	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:35.472775936 CET	192.168.2.4	1.1.1.1	0xeb8e	Standard query (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.473048925 CET	192.168.2.4	1.1.1.1	0xecab	Standard query (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:37.501482964 CET	192.168.2.4	1.1.1.1	0xa6e3	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:37.501619101 CET	192.168.2.4	1.1.1.1	0x9c64	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 24, 2024 13:19:37.537560940 CET	192.168.2.4	1.1.1.1	0xc72a	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:37.537780046 CET	192.168.2.4	1.1.1.1	0x5f79	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:38.266833067 CET	192.168.2.4	1.1.1.1	0xe8b5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:38.267133951 CET	192.168.2.4	1.1.1.1	0x380f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 24, 2024 13:19:39.648147106 CET	192.168.2.4	1.1.1.1	0x1f51	Standard query (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:39.648279905 CET	192.168.2.4	1.1.1.1	0x3dab	Standard query (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com	65	IN (0x0001)	false
Nov 24, 2024 13:19:56.654186010 CET	192.168.2.4	1.1.1.1	0xf87c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:56.654340029 CET	192.168.2.4	1.1.1.1	0x4774	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 24, 2024 13:20:00.626324892 CET	192.168.2.4	1.1.1.1	0xf66	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:20:00.626456976 CET	192.168.2.4	1.1.1.1	0xf2f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 24, 2024 13:20:02.933176041 CET	192.168.2.4	1.1.1.1	0xf0ba	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:20:02.933305025 CET	192.168.2.4	1.1.1.1	0xe3e3	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 24, 2024 13:19:16.466264963 CET	1.1.1.1	192.168.2.4	0xfab9	No error (0)	sumbangan.com		47.254.245.190	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:18.317785025 CET	1.1.1.1	192.168.2.4	0x6536	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:18.318202972 CET	1.1.1.1	192.168.2.4	0x48a8	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 13:19:18.334223032 CET	1.1.1.1	192.168.2.4	0xc5a	No error (0)	sumbangan.com		47.254.245.190	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:27.087059975 CET	1.1.1.1	192.168.2.4	0x3937	No error (0)	sumbangan.com		47.254.245.190	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:27.977766037 CET	1.1.1.1	192.168.2.4	0x88b	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:27.982610941 CET	1.1.1.1	192.168.2.4	0x2cac	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 13:19:28.005209923 CET	1.1.1.1	192.168.2.4	0xb72e	No error (0)	td.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.184539080 CET	1.1.1.1	192.168.2.4	0xea13	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:35.184773922 CET	1.1.1.1	192.168.2.4	0x73b3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.184773922 CET	1.1.1.1	192.168.2.4	0x73b3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:35.184773922 CET	1.1.1.1	192.168.2.4	0x73b3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:35.184818983 CET	1.1.1.1	192.168.2.4	0x932f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.184818983 CET	1.1.1.1	192.168.2.4	0x932f	No error (0)	scontent.xx.fbcdn.net		157.240.196.15	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.184942007 CET	1.1.1.1	192.168.2.4	0x908a	No error (0)	googleads.g.doubleclick.net		172.217.17.34	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:35.185703039 CET	1.1.1.1	192.168.2.4	0x3f30	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.185703039 CET	1.1.1.1	192.168.2.4	0x3f30	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.185846090 CET	1.1.1.1	192.168.2.4	0x7586	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.185846090 CET	1.1.1.1	192.168.2.4	0x7586	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:35.795691967 CET	1.1.1.1	192.168.2.4	0xeb8e	No error (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com		47.254.218.46	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:37.646457911 CET	1.1.1.1	192.168.2.4	0x9c64	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:37.646457911 CET	1.1.1.1	192.168.2.4	0x9c64	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:37.646457911 CET	1.1.1.1	192.168.2.4	0x9c64	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:37.646624088 CET	1.1.1.1	192.168.2.4	0xa6e3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:37.646624088 CET	1.1.1.1	192.168.2.4	0xa6e3	No error (0)	scontent.xx.fbcdn.net		157.240.196.15	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:37.682684898 CET	1.1.1.1	192.168.2.4	0xc72a	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:37.682684898 CET	1.1.1.1	192.168.2.4	0xc72a	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:37.683003902 CET	1.1.1.1	192.168.2.4	0x5f79	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:37.683003902 CET	1.1.1.1	192.168.2.4	0x5f79	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:19:38.404062986 CET	1.1.1.1	192.168.2.4	0x380f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 24, 2024 13:19:38.414683104 CET	1.1.1.1	192.168.2.4	0xe8b5	No error (0)	googleads.g.doubleclick.net		172.217.19.194	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:39.793092012 CET	1.1.1.1	192.168.2.4	0x1f51	No error (0)	app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com		47.254.218.46	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:19:56.791058064 CET	1.1.1.1	192.168.2.4	0x4774	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 24, 2024 13:19:56.791111946 CET	1.1.1.1	192.168.2.4	0xf87c	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:20:00.763675928 CET	1.1.1.1	192.168.2.4	0xf2f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:20:00.763675928 CET	1.1.1.1	192.168.2.4	0xf2f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 24, 2024 13:20:00.763675928 CET	1.1.1.1	192.168.2.4	0xf2f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 24, 2024 13:20:00.763712883 CET	1.1.1.1	192.168.2.4	0xf66	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:20:00.763712883 CET	1.1.1.1	192.168.2.4	0xf66	No error (0)	star-mini.c10r.facebook.com		157.240.195.35	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:20:03.070935011 CET	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:20:03.070935011 CET	1.1.1.1	192.168.2.4	0xf0ba	No error (0)	star-mini.c10r.facebook.com		157.240.196.35	A (IP address)	IN (0x0001)	false
Nov 24, 2024 13:20:03.070965052 CET	1.1.1.1	192.168.2.4	0xe3e3	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 13:20:03.070965052 CET	1.1.1.1	192.168.2.4	0xe3e3	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 24, 2024 13:20:03.070965052 CET	1.1.1.1	192.168.2.4	0xe3e3	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	47.254.245.190	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 13:19:16.586697102 CET	428	OUT	GET / HTTP/1.1 Host: sumbangan.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 24, 2024 13:19:18.191248894 CET	339	IN	HTTP/1.1 302 Found Date: Sun, 24 Nov 2024 12:19:17 GMT Content-Type: text/html Content-Length: 154 Connection: keep-alive Location: https://sumbangan.com/ Via: HTTP/1.1 SLB.14 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	47.254.245.190	80	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 24, 2024 13:20:01.589590073 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 12:19:20 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=162851 Date: Sun, 24 Nov 2024 12:19:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:20 UTC	656	OUT	GET / HTTP/1.1 Host: sumbangan.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:24 UTC	1378	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; expires=Sun, 24-Nov-2024 14:19:23 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; expires=Sun, 24-Nov-2024 14:19:23 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450761\|1732450761;Path=/
2024-11-24 12:19:24 UTC	4364	IN	Data Raw: 31 31 30 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 4b 33 74 39 67 78 6e 73 76 6f 36 76 6a 70 53 66 6f 6a 58 74 77 39 59 6b 64 52 76 42 55 49 78 39 30 4a 5a 75 6f 52 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f Data Ascii: 1104<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="csrf-token" content="lK3t9gxnsvo6vjpSfojXtw9YkdRvBUIx90JZuoRs"> <meta name="descriptio
2024-11-24 12:19:24 UTC	8480	IN	Data Raw: 32 31 31 38 0d 0a 6f 6d 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 53 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 22 20 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 2f 6d 6f 62 69 6c 65 2f 69 6d 67 2f 73 6f 63 69 61 6c 2d 73 68 61 72 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6a 70 67 22 20 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 70 Data Ascii: 2118om" /> <meta property="og:site_name" content="Sumbangan.com" /> <meta property="og:url" content="https://sumbangan.com" /> <meta property="og:image" content="https://sumbangan.com/mobile/img/social-share-placeholder.jpg" /> <meta p
2024-11-24 12:19:24 UTC	14120	IN	Data Raw: 33 37 32 30 0d 0a 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 2f 73 65 74 6c 6f 63 61 6c 65 2f 6d 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 70 78 2d 34 20 70 79 2d 32 20 74 65 78 74 2d 73 6d 20 74 65 78 74 2d 67 72 61 79 2d 37 30 30 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 75 73 65 72 2d 6d 65 6e 75 2d 69 74 65 6d 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 3720span> </a> <a href="https://sumbangan.com/setlocale/ms" class="flex items-center px-4 py-2 text-sm text-gray-700" role="menuitem" tabindex="-1" id="user-menu-item-0">
2024-11-24 12:19:24 UTC	5656	IN	Data Raw: 31 36 31 30 0d 0a 75 6c 6c 20 72 6f 75 6e 64 65 64 2d 6d 64 20 73 68 61 64 6f 77 2d 6c 67 20 6f 62 6a 65 63 74 2d 63 6f 6e 74 61 69 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 65 72 72 6f 72 3d 22 74 68 69 73 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 2f 6d 6f 62 69 6c 65 2f 69 6d 67 2f 63 61 6d 70 61 69 67 6e 2f 63 61 6d 70 61 69 67 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 34 30 30 2e 70 6e 67 27 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 1610ull rounded-md shadow-lg object-contain" onerror="this.onerror=null;this.src='https://sumbangan.com/mobile/img/campaign/campaign-placeholder-400.png';"> </a> </li>
2024-11-24 12:19:24 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 6d 6f 64 61 6c 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 76 69 65 77 2d 6d 6f 64 61 6c 22 20 69 64 3d 22 61 64 64 43 61 6d 70 61 69 67 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 2f 6b 65 6d 70 65 6e 2f 64 79 6e 61 6d 69 63 2d 6d 6f 64 61 6c 2f 33 38 39 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 78 73 20 70 78 2d 32 20 70 79 2d 31 20 74 72 61 6e 73 69 74 69 6f 6e 20 65 61 73 65 2d 69 6e 20 64 75 72 61 74 69 6f 6e 2d 32 30 30 Data Ascii: 4000 <button data-toggle="modal" data-target="#view-modal" id="addCampaign" data-url="https://sumbangan.com/kempen/dynamic-modal/3890" class="text-xs px-2 py-1 transition ease-in duration-200
2024-11-24 12:19:24 UTC	8	IN	Data Raw: 22 3e 0a 20 20 20 0d 0a Data Ascii: ">
2024-11-24 12:19:24 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 6c 61 74 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 68 2d 32 20 6d 62 2d 32 20 74 65 78 74 2d 78 73 20 66 6c 65 78 20 72 6f 75 6e 64 65 64 20 62 67 2d 67 72 61 79 2d 32 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 31 37 2e 30 37 25 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 68 61 64 6f 77 2d 6e 6f 6e 65 20 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 74 65 78 74 2d 63 65 6e 74 65 Data Ascii: 3ff8 <div class="relative"> <div class="overflow-hidden h-2 mb-2 text-xs flex rounded bg-gray-200"> <div style="width:17.07%" class="shadow-none flex flex-col text-cente
2024-11-24 12:19:24 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 20 72 6f 75 6e 64 65 64 2d 6c 67 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 6c 61 74 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 69 6e 73 65 74 2d 30 20 68 2d 66 75 6c 6c 20 77 2d 66 75 6c 6c 20 6f 62 6a 65 63 74 2d 63 6f 6e 74 61 69 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 73 75 6d 62 61 6e 67 61 6e 2d 6f 73 73 31 2e 6f 73 73 2d 61 70 2d 73 6f 75 74 68 65 61 73 74 2d 33 2e 61 6c Data Ascii: 4000 rounded-lg overflow-hidden"> <div class="relative"> <img class="inset-0 h-full w-full object-contain" src="https://app-production-sumbangan-oss1.oss-ap-southeast-3.al
2024-11-24 12:19:24 UTC	8	IN	Data Raw: 69 6d 67 20 63 6c 0d 0a Data Ascii: img cl
2024-11-24 12:19:24 UTC	16383	IN	Data Raw: 33 66 66 37 0d 0a 61 73 73 3d 22 69 6e 73 65 74 2d 30 20 68 2d 66 75 6c 6c 20 77 2d 66 75 6c 6c 20 6f 62 6a 65 63 74 2d 63 6f 6e 74 61 69 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 73 75 6d 62 61 6e 67 61 6e 2d 6f 73 73 31 2e 6f 73 73 2d 61 70 2d 73 6f 75 74 68 65 61 73 74 2d 33 2e 61 6c 69 79 75 6e 63 73 2e 63 6f 6d 2f 73 75 6d 62 61 6e 67 61 6e 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 61 6d 70 61 69 67 6e 73 2f 6c 61 72 67 65 2f 36 35 39 33 61 31 64 32 63 61 37 30 34 5f 42 41 4e 54 55 41 4e 5f 4b 45 4d 41 4e 55 53 49 41 41 4e 2e 6a 70 67 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3ff7ass="inset-0 h-full w-full object-contain" src="https://app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com/sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg" alt="" loading="lazy"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-24 12:19:22 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=162827 Date: Sun, 24 Nov 2024 12:19:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-24 12:19:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:25 UTC	1316	OUT	GET /mobile/css/app.min.css HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450761\|1732450761
2024-11-24 12:19:26 UTC	442	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:26 GMT Content-Type: text/css Content-Length: 4694613 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-47a255" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450766\|1732450761;Path=/
2024-11-24 12:19:26 UTC	2474	IN	Data Raw: 2f 2a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 32 2e 32 2e 31 37 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 20 2a 2f 0a 0a 2f 2a 21 20 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 76 31 2e 31 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6e 64 72 65 73 6f 72 68 75 73 2f 6d 6f 64 65 72 6e 2d 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 0a 2f 2a 0a 44 6f 63 75 6d 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 0a 2a 2f 0a 0a 2f 2a 2a 0a 55 73 65 20 61 20 62 65 74 74 65 72 20 62 6f 78 20 6d 6f 64 65 6c 20 28 6f 70 69 6e 69 6f 6e 61 74 65 64 29 2e 0a 2a 2f 0a 0a 2a 2c 0a 3a 3a 62 65 66 6f 72 65 2c 0a 3a 3a 61 66 74 65 Data Ascii: /! tailwindcss v2.2.17 \| MIT License \| https://tailwindcss.com //! modern-normalize v1.1.0 \| MIT License \| https://github.com/sindresorhus/modern-normalize //Document========//*Use a better box model (opinionated)./*,::before,::afte
2024-11-24 12:19:26 UTC	11296	IN	Data Raw: 32 30 31 32 39 37 29 0a 32 2e 20 43 6f 72 72 65 63 74 20 74 61 62 6c 65 20 62 6f 72 64 65 72 20 63 6f 6c 6f 72 20 69 6e 68 65 72 69 74 61 6e 63 65 20 69 6e 20 61 6c 6c 20 43 68 72 6f 6d 65 20 61 6e 64 20 53 61 66 61 72 69 2e 20 28 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 63 68 72 6f 6d 69 75 6d 2e 6f 72 67 2f 70 2f 63 68 72 6f 6d 69 75 6d 2f 69 73 73 75 65 73 2f 64 65 74 61 69 6c 3f 69 64 3d 39 33 35 37 32 39 2c 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 77 65 62 6b 69 74 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 31 39 35 30 31 36 29 0a 2a 2f 0a 0a 74 61 62 6c 65 20 7b 0a 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 30 3b 20 2f 2a 20 31 20 2a 2f 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 20 2f 2a 20 32 20 Data Ascii: 201297)2. Correct table border color inheritance in all Chrome and Safari. (https://bugs.chromium.org/p/chromium/issues/detail?id=935729, https://bugs.webkit.org/show_bug.cgi?id=195016)/table { text-indent: 0; / 1 / border-color: inherit; / 2
2024-11-24 12:19:26 UTC	2824	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 72 65 6d 3b 0a 20 20 77 69 64 74 68 3a 20 31 72 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 35 36 33 65 62 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 62 37 32 38 30 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 Data Ascii: der-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; flex-shrink: 0; height: 1rem; width: 1rem; color: #2563eb; background-color: #fff; border-color: #6b7280; border-wid
2024-11-24 12:19:26 UTC	2824	IN	Data Raw: 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 20 7b 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 20 7b 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 6d 61 78 Data Ascii: h: 768px) { .container { max-width: 768px; }}@media (min-width: 1024px) { .container { max-width: 1024px; }}@media (min-width: 1280px) { .container { max-width: 1280px; }}@media (min-width: 1536px) { .container { max
2024-11-24 12:19:27 UTC	16384	IN	Data Raw: 6f 6d 3a 20 33 2e 35 72 65 6d 3b 0a 20 20 6c 65 66 74 3a 20 33 2e 35 72 65 6d 3b 0a 7d 0a 0a 2e 69 6e 73 65 74 2d 31 36 20 7b 0a 20 20 74 6f 70 3a 20 34 72 65 6d 3b 0a 20 20 72 69 67 68 74 3a 20 34 72 65 6d 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 34 72 65 6d 3b 0a 20 20 6c 65 66 74 3a 20 34 72 65 6d 3b 0a 7d 0a 0a 2e 69 6e 73 65 74 2d 32 30 20 7b 0a 20 20 74 6f 70 3a 20 35 72 65 6d 3b 0a 20 20 72 69 67 68 74 3a 20 35 72 65 6d 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 35 72 65 6d 3b 0a 20 20 6c 65 66 74 3a 20 35 72 65 6d 3b 0a 7d 0a 0a 2e 69 6e 73 65 74 2d 32 34 20 7b 0a 20 20 74 6f 70 3a 20 36 72 65 6d 3b 0a 20 20 72 69 67 68 74 3a 20 36 72 65 6d 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 36 72 65 6d 3b 0a 20 20 6c 65 66 74 3a 20 36 72 65 6d 3b 0a 7d 0a 0a 2e 69 6e 73 65 Data Ascii: om: 3.5rem; left: 3.5rem;}.inset-16 { top: 4rem; right: 4rem; bottom: 4rem; left: 4rem;}.inset-20 { top: 5rem; right: 5rem; bottom: 5rem; left: 5rem;}.inset-24 { top: 6rem; right: 6rem; bottom: 6rem; left: 6rem;}.inse
2024-11-24 12:19:27 UTC	6208	IN	Data Raw: 2d 74 6f 70 2d 33 5c 2e 35 20 7b 0a 20 20 74 6f 70 3a 20 2d 30 2e 38 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 74 6f 70 2d 31 5c 2f 32 20 7b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 31 5c 2f 33 20 7b 0a 20 20 74 6f 70 3a 20 33 33 2e 33 33 33 33 33 33 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 32 5c 2f 33 20 7b 0a 20 20 74 6f 70 3a 20 36 36 2e 36 36 36 36 36 37 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 31 5c 2f 34 20 7b 0a 20 20 74 6f 70 3a 20 32 35 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 32 5c 2f 34 20 7b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 33 5c 2f 34 20 7b 0a 20 20 74 6f 70 3a 20 37 35 25 3b 0a 7d 0a 0a 2e 74 6f 70 2d 66 75 6c 6c 20 7b 0a 20 20 74 6f 70 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 2d 74 6f 70 2d 31 5c 2f 32 20 7b 0a 20 20 74 6f 70 Data Ascii: -top-3\.5 { top: -0.875rem;}.top-1\/2 { top: 50%;}.top-1\/3 { top: 33.333333%;}.top-2\/3 { top: 66.666667%;}.top-1\/4 { top: 25%;}.top-2\/4 { top: 50%;}.top-3\/4 { top: 75%;}.top-full { top: 100%;}.-top-1\/2 { top
2024-11-24 12:19:27 UTC	2824	IN	Data Raw: 20 7b 0a 20 20 6c 65 66 74 3a 20 30 2e 32 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 32 20 7b 0a 20 20 6c 65 66 74 3a 20 30 2e 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 33 20 7b 0a 20 20 6c 65 66 74 3a 20 30 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 34 20 7b 0a 20 20 6c 65 66 74 3a 20 31 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 35 20 7b 0a 20 20 6c 65 66 74 3a 20 31 2e 32 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 36 20 7b 0a 20 20 6c 65 66 74 3a 20 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 37 20 7b 0a 20 20 6c 65 66 74 3a 20 31 2e 37 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 38 20 7b 0a 20 20 6c 65 66 74 3a 20 32 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 66 74 2d 39 20 7b 0a 20 20 6c 65 66 74 3a 20 32 2e 32 35 72 65 6d 3b 0a 7d 0a 0a Data Ascii: { left: 0.25rem;}.left-2 { left: 0.5rem;}.left-3 { left: 0.75rem;}.left-4 { left: 1rem;}.left-5 { left: 1.25rem;}.left-6 { left: 1.5rem;}.left-7 { left: 1.75rem;}.left-8 { left: 2rem;}.left-9 { left: 2.25rem;}
2024-11-24 12:19:27 UTC	13560	IN	Data Raw: 75 74 6f 3b 0a 7d 0a 0a 2e 66 6f 63 75 73 2d 77 69 74 68 69 6e 5c 3a 7a 2d 30 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 0a 2e 66 6f 63 75 73 2d 77 69 74 68 69 6e 5c 3a 7a 2d 31 30 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0a 7d 0a 0a 2e 66 6f 63 75 73 2d 77 69 74 68 69 6e 5c 3a 7a 2d 32 30 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0a 7d 0a 0a 2e 66 6f 63 75 73 2d 77 69 74 68 69 6e 5c 3a 7a 2d 33 30 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 33 30 3b 0a 7d 0a 0a 2e 66 6f 63 75 73 2d 77 69 74 68 69 6e 5c 3a 7a 2d 34 30 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 7b 0a 20 20 Data Ascii: uto;}.focus-within\:z-0:focus-within { z-index: 0;}.focus-within\:z-10:focus-within { z-index: 10;}.focus-within\:z-20:focus-within { z-index: 20;}.focus-within\:z-30:focus-within { z-index: 30;}.focus-within\:z-40:focus-within {
2024-11-24 12:19:27 UTC	2824	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 38 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 79 2d 33 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 39 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 39 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 79 2d 34 30 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 30 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 30 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 79 2d 34 34 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 31 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 31 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 79 2d 34 38 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 32 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 32 72 Data Ascii: argin-bottom: -8rem;}.-my-36 { margin-top: -9rem; margin-bottom: -9rem;}.-my-40 { margin-top: -10rem; margin-bottom: -10rem;}.-my-44 { margin-top: -11rem; margin-bottom: -11rem;}.-my-48 { margin-top: -12rem; margin-bottom: -12r
2024-11-24 12:19:27 UTC	16384	IN	Data Raw: 6f 70 3a 20 2d 37 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 33 32 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 38 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 33 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 39 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 34 30 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 30 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 34 34 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 31 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 34 38 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 32 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 35 32 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 33 72 65 6d 3b 0a 7d 0a 0a 2e 2d 6d 74 2d 35 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 34 72 65 6d 3b 0a 7d Data Ascii: op: -7rem;}.-mt-32 { margin-top: -8rem;}.-mt-36 { margin-top: -9rem;}.-mt-40 { margin-top: -10rem;}.-mt-44 { margin-top: -11rem;}.-mt-48 { margin-top: -12rem;}.-mt-52 { margin-top: -13rem;}.-mt-56 { margin-top: -14rem;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:26 UTC	1369	OUT	GET /mobile/img/logo-sumbangan.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450761\|1732450761
2024-11-24 12:19:26 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:26 GMT Content-Type: image/svg+xml Content-Length: 8864 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-22a0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450766\|1732450761;Path=/
2024-11-24 12:19:26 UTC	2474	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 37 35 20 34 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 1775 420" version="1.1" xmlns="http://www.w3.org/2000/sv
2024-11-24 12:19:26 UTC	6390	IN	Data Raw: 38 2e 33 37 43 32 32 2e 37 31 39 2c 2d 38 2e 33 37 20 32 34 2e 34 39 31 2c 2d 36 2e 35 35 39 20 32 34 2e 34 39 31 2c 2d 33 2e 35 36 34 4c 32 34 2e 34 39 31 2c 38 2e 30 39 34 4c 32 39 2e 36 35 31 2c 38 2e 30 39 34 4c 32 39 2e 36 35 31 2c 2d 35 2e 30 36 31 43 32 39 2e 36 35 31 2c 2d 31 30 2e 30 36 33 20 32 36 2e 37 33 36 2c 2d 31 33 2e 31 37 35 20 32 31 2e 39 37 2c 2d 31 33 2e 31 37 35 43 31 38 2e 32 36 38 2c 2d 31 33 2e 31 33 35 20 31 35 2e 35 31 31 2c 2d 31 31 2e 35 36 20 31 34 2e 31 33 32 2c 2d 38 2e 31 33 34 43 31 33 2e 31 34 37 2c 2d 31 31 2e 33 32 34 20 31 30 2e 35 38 37 2c 2d 31 33 2e 31 37 35 20 36 2e 38 38 35 2c 2d 31 33 2e 31 37 35 43 33 2e 39 30 32 2c 2d 31 33 2e 31 34 20 31 2e 35 31 36 2c 2d 31 32 2e 31 33 32 20 30 2c 2d 39 2e 39 33 36 4c 30 2c Data Ascii: 8.37C22.719,-8.37 24.491,-6.559 24.491,-3.564L24.491,8.094L29.651,8.094L29.651,-5.061C29.651,-10.063 26.736,-13.175 21.97,-13.175C18.268,-13.135 15.511,-11.56 14.132,-8.134C13.147,-11.324 10.587,-13.175 6.885,-13.175C3.902,-13.14 1.516,-12.132 0,-9.936L0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:26 UTC	1371	OUT	GET /mobile/img/flags/malay-flag.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450761\|1732450761
2024-11-24 12:19:27 UTC	392	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:27 GMT Content-Type: image/png Content-Length: 6228 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-1854" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450767\|1732450761;Path=/
2024-11-24 12:19:27 UTC	1089	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 02 fa 50 4c 54 45 00 00 00 cc 00 00 ff ff ff 01 00 66 ff ff ff ce 0d 0e cc 00 01 ff ff ff 01 00 66 00 00 66 03 02 65 01 00 66 ff ff ff ff ff ff 00 00 66 ff ff ff 01 00 66 00 00 66 01 00 66 00 00 66 ff ff ff cc 00 00 ff ff ff cc 00 00 cc 00 00 ff ff ff cc 00 00 ff ff ff ff ff ff 01 00 66 01 00 66 00 00 66 cd 0a 0a ff cc 00 ff ff ff ff ff ff ff ff ff ff ff ff cc 00 00 cd 00 00 cc 00 01 cb 00 00 f4 f4 f9 cc 00 01 ff cc 00 01 00 66 00 00 65 cc 00 01 01 00 66 00 00 66 ff ff ff ff cc 00 ff ff ff fd f6 f6 ff cc 00 04 00 65 ff ff ff ff ff ff ff ff ff ff ff ff cc 00 00 ff ff ff ff ff ff ff ff ff cc 00 01 ff ff ff cc 00 00 cc 00 01 cc 00 01 00 00 65 ff cc 00 cb Data Ascii: PNGIHDR2PLTEfffeffffffffffeffee
2024-11-24 12:19:27 UTC	2824	IN	Data Raw: 8f 43 76 39 ad a4 f4 9c b2 6b c1 df 72 6d d9 39 a5 25 a7 ed 72 88 ef 7f c2 21 bb 9c 5a be c7 ce c0 02 3b ef 51 7e ea 7f 5e ff e5 7b 96 18 54 9b d6 5f b2 e7 e5 be ff 26 87 ee 72 ea 1e 27 01 47 9c b4 c7 a9 bb fc e7 dc ff 90 3d cb 4f 06 ae 70 72 f9 9e ff a1 b5 7f c8 69 a5 3b 03 17 d9 b9 f4 b4 ff 86 fa 47 ca cb 80 eb 94 95 3f e2 fb 97 73 f0 43 15 c0 23 2a 1e 3a d8 f7 ef 65 cf d2 9d 80 87 ec 54 ba a7 ef 5f c9 21 57 55 00 cf a9 b8 ea df e7 f5 97 3f 54 06 8a 42 59 c9 bf 6b dd 1f 5c b2 33 28 1a 27 dd fe ef 11 7f f0 ed 3b 81 a2 b2 d3 bf 44 fc e5 25 27 81 a2 73 52 c9 e6 27 b9 87 9e 5a 06 36 85 b2 53 37 39 c5 3d ad 82 06 9b 45 c5 69 be cd e3 d1 d2 aa 78 24 30 06 19 84 20 0d 8a cf 0b 9b e5 f2 37 df 71 e2 87 1f 36 7c 54 d7 9d 6c eb 6c 4d 44 e0 26 c8 df a9 64 53 56 fd Data Ascii: Cv9krm9%r!Z;Q~^{T_&r'G=Opri;G?sC#*:eT_!WU?TBYk\3(';D%'sR'Z6S79=Eix$0 7q6\|TllMD&dSV
2024-11-24 12:19:27 UTC	2315	IN	Data Raw: 79 8b da 3e 26 e2 1a e4 5d 45 56 e7 bc 8c f4 3d 34 e9 61 5e 34 fa 62 90 b6 ae 3c f6 be 44 84 cf ce 37 22 98 99 77 21 70 0d 89 74 f2 c0 d6 26 ea 14 f7 cf 0c 02 40 a4 35 0d b2 fe 5e 54 04 e9 e7 fa d2 5c be 13 d0 e8 f7 bb 61 76 d4 31 c3 89 c2 e0 c2 30 03 f5 86 78 02 cb 2f 2d f6 69 bf 81 5b 4f 37 c3 a7 c7 3f f4 56 51 e9 fd 39 e4 bd f4 1d b7 d3 b7 36 15 b4 24 1b 43 f0 c7 56 bd 9d 69 ac e5 65 76 2a 91 c9 bf d1 24 d6 82 d8 0a 42 d3 99 76 68 54 93 7e f9 8d de 19 9d 68 63 65 be 61 2b e3 b5 74 bd 93 ae 04 a4 09 75 f3 46 b3 4f 58 b3 02 ac fa ba 87 fb b6 03 c2 ac e1 17 82 dc 1f a2 d5 a9 1f 02 1e 45 ca e0 4b 6e 03 03 84 1d a4 1f 9e 34 91 79 2e fd 40 dd d5 35 98 98 d1 ec ec ec 30 b4 a2 3c b8 de d3 17 85 cc c6 66 a2 21 56 75 f4 4f 21 80 09 ad 4b 96 9f 63 d4 71 27 6d 18 Data Ascii: y>&]EV=4a^4b<D7"w!pt&@5^T\av10x/-i[O7?VQ96$CViev*$BvhT~hcea+tuFOXEKn4y.@50<f!VuO!Kcq'm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:28 UTC	1373	OUT	GET /mobile/img/flags/english-flag.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450766\|1732450761
2024-11-24 12:19:29 UTC	393	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:29 GMT Content-Type: image/png Content-Length: 51616 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-c9a0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761;Path=/
2024-11-24 12:19:29 UTC	2500	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec dd 77 9c 5c 65 bd f8 f1 e7 cc 66 d3 1b 1d a9 02 a1 57 05 01 1b ca bd d7 5e 2f 16 bc ea cf 72 ed 7a ad 80 05 51 63 43 10 69 8a 0a 8a a0 08 0a a1 83 f4 12 42 28 49 48 48 dd 24 a4 90 1e 52 77 67 76 37 bb 9b 2d 73 7e 7f c8 52 43 76 93 dd d9 3d cf cc fb fd 7a f1 32 bb d9 9d 39 f3 7d 1e 12 f6 e3 39 67 92 00 00 50 26 56 7f 73 ec 3e ad e9 80 bd 92 34 dd 23 69 6f db 2d 6d 69 1d 99 b6 77 ec 94 6b 6f 1f 92 Data Ascii: PNGIHDR!gAMAa cHRMz&u0`:pQ<bKGDIDATxw\efW^/rzQcCiB(IHH$Rwgv7-s~RCv=z29}9gP&Vs>4#io-miwko
2024-11-24 12:19:29 UTC	11296	IN	Data Raw: 08 58 00 f4 b9 d3 ff 3c 73 bf fa cd ed a7 2d 59 df f2 81 f3 6f 59 be 57 43 4b 87 a1 00 64 4c 6d 63 5b 72 df ec ba bd ee 9b 1d be 35 64 e0 da 6f 9d f8 bd 09 1b 0e da 7d c8 83 bb 8c 1a f6 d3 f3 ff f7 f0 b9 26 04 40 5f 12 b0 00 e8 13 67 5d 33 f7 c0 45 cf 34 7c 7f c1 ea 96 f7 5d 74 ef ca 5d dc cf 0a 20 1e cd ad c5 30 69 61 c3 ce 93 16 36 7c b4 ba 2a f9 e8 f1 67 4c c8 1f b1 cf b0 bb 0e de 73 e4 cf bf 77 ca 41 f3 4c 08 80 52 13 b0 00 28 99 4b 6e ab 39 fc c9 65 2d a7 d5 ac 6c 7c f7 af 6f 5d ba 5b 6b 7b d1 50 00 22 d7 d6 91 86 29 8b 1b 46 4f 59 dc f0 3f 55 b9 b5 ff 73 e4 b7 1e aa 3f 72 9f a1 13 5e 7f c0 c8 9f 7d fd 03 87 4c 35 21 00 4a 41 c0 02 a0 57 dd fa c8 d3 07 4f 98 5f 7f d6 94 a7 eb df fb 9d ab 97 8d 16 ad 00 ca 57 47 31 0d b3 97 37 8e 9c bd bc f1 7d 37 4e Data Ascii: X<s-YoYWCKdLmc[r5do}&@_g]3E4\|]t] 0ia6\|*gLswALR(Kn9e-l\|o][k{P")FOY?Us?r^}L5!JAWO_WG17}7N
2024-11-24 12:19:29 UTC	2824	IN	Data Raw: 21 14 d3 34 dc 38 79 c3 39 e7 8e 9b 7f b0 89 c7 4d c0 8a 58 9a a6 b9 bb 67 d5 3e bc ba ae b5 e4 7f c3 8a 58 f1 12 b1 e2 24 62 01 40 df 12 af e2 25 5e c5 a9 2f e2 55 a7 67 ea 36 57 dd 35 7b c3 43 69 9a 26 26 1f 2f 01 2b 62 5f b9 74 fa 75 0f ce c9 ef de 57 cf 27 62 c5 4b c4 8a 93 88 05 00 7d 43 bc 8a 97 78 15 a7 be 8c 57 9d 1e aa c9 ef fe 7f 97 4e bf da f4 e3 25 60 45 ea 37 37 cd 3b e5 9a 89 6b 3f dc d7 cf 2b 62 c5 4b c4 8a 93 88 05 00 a5 25 5e c5 4b bc 8a 53 7f c4 ab 4e 7f 7d 78 ed c7 7f 31 6e f6 7f 5b 85 38 09 58 11 ba fa ce 85 23 ff fe c8 da 6b 1a 5a fa 27 22 89 58 f1 12 b1 e2 24 62 01 40 69 88 57 f1 12 af e2 d4 9f f1 2a 84 10 36 6d ee 08 37 4e da 78 cd d5 77 2e 1c 69 35 e2 23 60 45 e8 b6 9a da 07 67 2e 6d 1c dc 9f c7 20 62 c5 4b c4 8a 93 88 05 00 bd 4b Data Ascii: !48y9MXg>X$b@%^/Ug6W5{Ci&&/+b_tuW'bK}CxWN%`E77;k?+bK%^KSN}x1n[8X#kZ'"X$b@iW*6m7Nxw.i5#`Eg.m bKK
2024-11-24 12:19:29 UTC	7060	IN	Data Raw: 0d c7 ff fc ba 59 ff 65 12 db 47 c0 da 4e 77 4c af bd aa b9 b5 68 10 11 13 b1 e2 25 62 c5 49 c4 02 28 1f e2 55 bc c4 ab 38 89 57 e5 a1 a5 ad 18 26 d4 34 fc d5 24 b6 8f 80 b5 1d be 7f d5 ec d3 1e 9a 9b df dd 24 e2 27 62 c5 4b c4 8a 93 88 05 10 3f f1 2a 5e e2 55 9c c4 ab f2 f2 40 4d dd 9e df be 7c c6 b7 4d 62 db 09 58 db e8 b2 a9 53 ab 6f 9f ba e1 e7 69 6a 16 e5 42 c4 8a 97 88 15 27 11 0b 20 5e e2 55 bc c4 ab 38 89 57 e5 27 4d 43 b8 6b 66 ed 2f 2f 9b 3a b5 da 34 b6 8d 80 b5 8d 1e 7d 34 fd 4b cd ca 4d 43 4c a2 bc 88 58 f1 12 b1 e2 24 62 01 c4 47 bc 8a 97 78 15 27 f1 aa 7c cd 5f d5 34 e4 b1 47 c3 1f 4c 62 db 08 58 db e0 9b 7f 9e b4 db 9d 4f 6e fc 84 49 94 a7 29 8b ea c3 87 2f ac 09 8d 2d 22 56 6c 44 ac 38 89 58 00 f1 10 af e2 25 5e c5 a9 b1 a5 23 9c 72 fe 1c Data Ascii: YeGNwLh%bI(U8W&4$$'bK?*^U@M\|MbXSoijB' ^U8W'MCkf//:4}4KMCLX$bGx'\|_4GLbXOnI)/-"VlD8X%^#r
2024-11-24 12:19:29 UTC	2824	IN	Data Raw: bf 7e 44 08 e1 30 f3 06 00 00 00 60 1b 1d b5 6e dd ba e1 db fa 4d db 1c b0 aa ab ab 5f 17 42 a8 32 6f 00 00 00 00 b6 51 55 75 75 f5 6b b7 f5 9b b6 e7 12 42 f7 bf 02 00 00 00 60 bb 24 49 b2 cd 97 11 e6 b6 e3 49 04 2c 00 00 00 00 b6 d7 36 b7 a5 6d 0e 58 69 9a 1e 67 ce 00 00 00 00 6c a7 d7 6d eb 37 6c 53 c0 6a 68 68 d8 35 84 b0 a7 39 03 00 00 00 b0 9d f6 ae af af df 79 5b be 61 9b 02 56 b1 58 7c ad 19 03 00 00 00 d0 13 c5 62 f1 98 6d f9 fa 6d 0a 58 69 9a be c6 88 01 00 00 00 e8 a1 6d 6a 4c b9 52 3e 38 00 00 00 00 6c 81 80 05 00 00 00 40 a6 95 26 60 6d dc b8 71 64 08 61 7f f3 05 00 00 00 a0 87 0e 5a b7 6e dd f0 ee 7e 71 b7 03 56 2e 97 3b 26 6c fb 19 5b 00 00 00 00 f0 52 b9 c1 83 07 1f d9 ed 2f de 86 07 76 f9 20 00 00 00 00 bd 62 5b de 2c 70 5b ce c0 12 b0 00 Data Ascii: ~D0`nM_B2oQUuukB`$II,6mXiglm7lSjhh59y[aVX\|bmmXimjLR>8l@&`mqdaZn~qV.;&l[R/v b[,p[
2024-11-24 12:19:29 UTC	9884	IN	Data Raw: 21 84 64 f8 b0 0e 23 01 00 00 00 20 4b 72 c3 87 b4 87 10 42 2e 84 10 72 43 07 b5 19 09 00 00 00 00 59 92 0c 19 d2 16 c2 b3 01 2b 0c 1d dc 6a 24 00 00 00 00 64 ca 90 41 ad 21 3c 1b b0 92 21 43 9a 4d 04 00 00 00 80 2c 49 06 0f 6a 0e a1 33 60 0d 1d dc 68 24 00 00 00 00 64 49 32 74 48 43 08 cf 9d 81 35 a8 de 48 00 00 00 00 c8 92 64 e8 e0 42 08 cf 07 ac bc 91 00 00 00 00 90 29 83 07 d6 85 f0 5c c0 1a bc d1 44 00 00 00 00 c8 92 aa 67 9b 55 2e 84 10 72 43 06 af 33 12 00 00 00 00 b2 24 19 3c 70 5d 08 cf bf 0b e1 1a 23 01 00 00 00 20 53 06 0f 7c 26 84 67 03 56 71 e0 80 55 26 02 00 00 00 40 a6 0c 19 b4 2a 84 67 03 56 c8 e5 16 9b 08 00 00 00 00 59 92 84 74 51 08 cf 06 ac f6 42 fd 53 46 02 00 00 00 40 96 34 6c ce 2d 0c 21 84 a4 f3 13 f3 07 1e 91 86 d6 36 93 01 00 00 Data Ascii: !d# KrB.rCY+j$dA!<!CM,Ij3`h$dI2tHC5HdB)\DgU.rC3$<p]# S\|&gVqU&@*gVYtQBSF@4l-!6
2024-11-24 12:19:29 UTC	2824	IN	Data Raw: 98 0c 2f 28 a8 9e d8 ab cd 02 b7 8b 27 ba 87 13 f1 4a 5f c4 2b 73 c4 2b 00 80 1d 11 b1 f4 45 c4 32 47 c4 72 2e 97 52 32 ba d0 7f 51 69 1a 0f 6e 0f db c6 4c 10 3e 15 27 e7 dc 3a a2 30 69 13 4b 84 07 f1 4a 5f c4 2b 73 c4 2b 00 80 9d 11 b1 f4 45 c4 32 47 c4 72 a6 51 45 49 eb ae 3d bd f0 56 96 08 1f 02 56 98 1d 97 dd 66 74 72 02 0f 74 0f 35 e2 95 be 88 57 e6 88 57 00 00 27 20 62 e9 8b 88 65 8e 88 e5 2c 29 9e c8 e0 31 59 de 71 2c 11 5e 04 ac 30 bb 70 62 b7 0d e3 4a 53 fe cc 12 a1 43 bc d2 17 f1 ca 1c f1 0a 00 e0 24 44 2c 7d 11 b1 cc 11 b1 9c 63 6c 71 f2 bd 17 4f ca de c8 12 e1 45 c0 6a 01 23 db 95 9c 5e d4 25 81 ef fc 42 80 78 a5 2f e2 95 39 e2 15 00 c0 89 88 58 fa 22 62 99 23 62 d9 5f 41 e7 84 3d 9d 77 96 cc 62 89 f0 23 60 b5 80 f2 72 15 e8 d7 c3 7b 5a a4 9b Data Ascii: /('J_+s+E2Gr.R2QinL>':0iKJ_+s+E2GrQEI=VVftrt5WW' be,)1Yq,^0pbJSC$D,}clqOEj#^%Bx/9X"b#b_A=wb#`r{Z
2024-11-24 12:19:29 UTC	2824	IN	Data Raw: e6 65 bf 43 bc d2 0f f1 ca 1c f1 0a 00 00 b4 16 22 96 be 88 58 e6 ac 1a b1 1e 3c 2f eb bd b2 1e 9e 63 39 42 ce 41 c0 72 90 eb a7 17 54 27 46 ab c9 22 b2 83 35 f4 41 bc 32 47 bc 02 00 00 ad 8d 88 a5 2f 22 96 39 0b 46 ac 9d be f8 88 c9 15 e5 39 55 1c 1d e7 20 60 39 4c 72 72 f2 17 22 72 92 88 f0 99 55 03 c4 2b 73 c4 2b 00 00 60 15 44 2c 7d 11 b1 cc 59 28 62 05 95 52 53 fd 7e ff 67 1c 15 67 21 60 39 90 cf e7 7b c9 30 8c ab 58 c2 da 88 57 e6 88 57 00 00 c0 6a 88 58 fa 22 62 99 b3 42 c4 52 4a 55 78 bd de e7 39 1a ce 43 c0 72 28 9f cf 57 21 22 2f b0 84 35 11 af 1a f0 89 8b 78 05 00 00 2c 8a 88 a5 2f 22 96 b9 56 8e 58 ff f6 78 3c 5c 8c e1 50 04 2c a7 7e f3 af 54 d0 ed 76 9f 22 22 5f b0 86 b5 10 af 1a 70 fe 12 af 00 00 80 c5 11 b1 f4 45 c4 32 d7 4a 11 eb 33 97 cb Data Ascii: eC"X</c9BArT'F"5A2G/"9F9U `9Lrr"rU+s+`D,}Y(bRS~gg!`9{0XWWjX"bBRJUx9Cr(W!"/5x,/"VXx<\P,~Tv""_pE2J3
2024-11-24 12:19:30 UTC	2824	IN	Data Raw: 00 00 a0 29 22 96 96 3e 13 91 e3 d2 66 9d c8 6d 83 d0 16 01 0b 5a eb 78 e3 25 6f c7 4e 1c 3c c0 dd 89 88 f5 63 56 bd 6d 90 78 05 00 00 60 0f 44 2c ad 6c 0c 04 02 fd 7d 3e df 16 a6 80 ce 08 58 d0 5e fa cd 97 bf 13 53 3e a6 d4 7d 54 7a 1d 6b 10 af 00 00 00 d0 32 88 58 5a 58 7f e0 c0 81 41 c9 c9 c9 5f 32 05 74 47 c0 82 2d a4 5f 7f d1 87 51 e3 87 94 44 74 4b df e7 e4 1d 88 57 00 00 00 68 49 44 2c 4b 5b 1b 19 19 39 28 25 25 e5 2b a6 80 1d 10 b0 60 1b 9d 97 2e 5c 13 73 5c af 02 77 b7 f4 5a 27 be 7e e2 15 00 00 00 5a 03 11 cb 92 56 ba 5c ae 63 e2 e3 e3 bf 61 0a d8 05 01 0b b6 d2 f1 ee ab 37 44 8c 1d 9c ed ee 79 54 b5 93 5e 37 f1 0a 00 00 00 ad 89 88 65 29 ef bb 5c ae 21 1e 8f 67 07 53 c0 4e 08 58 b0 9d ae 37 2d fa 34 7e 58 59 76 44 76 46 95 13 5e 2f f1 0a 00 00 Data Ascii: )">fmZx%oN<cVmx`D,l}>X^S>}Tzk2XZXA_2tG-_QDtKWhID,K[9(%%+`.\s\wZ'~ZV\ca7DyT^7e)\!gSNX7-4~XYvDvF^/
2024-11-24 12:19:30 UTC	6756	IN	Data Raw: 4d 59 39 ac 38 65 e0 ac a1 dd f6 b0 08 e0 a0 8f 7f 26 00 9c 65 78 41 bb 6a 11 19 78 f1 bd 2b 67 3f fc f6 8e a5 9f ef e0 01 ef 00 00 00 b0 be 0e 49 51 81 93 fb b5 5d 74 ed 8c 82 eb fe ce 1c 80 e3 70 0b 21 e0 50 d7 9e 5e 78 eb 29 fd 52 ba 0c 2f 48 da c8 1a 00 00 00 b0 b2 fe 3d 3c 5f ce 38 a6 6d e6 b5 33 0a ae 63 0d c0 99 b8 f2 02 70 b0 2b 4f 2d fc 4a 44 ba 9f 7a f3 8a 1b 9f 5c fe ed bc 5d d5 07 14 ab 00 00 00 c0 2a 92 13 22 8d 89 bd 93 6f bd 7b 76 e9 dc d7 99 03 70 34 ae c0 02 20 0f 9c 5f 32 ff 9c a1 9d f2 fb f7 f0 6e 65 0d 00 00 00 58 41 59 86 67 c7 29 fd 92 4b ef 9e 5d 3a 97 35 00 70 05 16 00 11 11 b9 6a 7a f6 47 86 61 a4 cd be 73 e5 1f fe f2 fa b6 33 77 d7 70 35 16 00 00 00 5a 9e 27 36 c2 98 dc 27 f5 f1 3f ce 2e 9e cc 4f 18 04 70 08 57 60 01 f8 81 52 ca Data Ascii: MY98e&exAjx+g?IQ]tp!P^x)R/H=<_8m3cp+O-JDz\]*"o{vp4 _2neXAYg)K]:5pjzGas3wp5Z'6'?.OpW`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:28 UTC	1135	OUT	GET /mobile/img/logo-sumbangan.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450766\|1732450761
2024-11-24 12:19:29 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:29 GMT Content-Type: image/svg+xml Content-Length: 8864 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-22a0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761;Path=/
2024-11-24 12:19:29 UTC	5298	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 37 35 20 34 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 1775 420" version="1.1" xmlns="http://www.w3.org/2000/sv
2024-11-24 12:19:29 UTC	3566	IN	Data Raw: 2d 35 2e 33 31 37 2c 32 2e 36 4c 30 2c 32 2e 36 5a 4d 30 2e 30 33 39 2c 39 2e 32 35 36 4c 30 2e 30 33 39 2c 31 31 2e 38 31 37 4c 35 2e 30 38 31 2c 31 31 2e 38 31 37 4c 35 2e 30 34 31 2c 2d 31 2e 39 36 39 43 35 2e 30 30 32 2c 2d 36 2e 36 35 37 20 31 2e 38 39 31 2c 2d 39 2e 34 35 33 20 2d 33 2e 36 32 34 2c 2d 39 2e 34 35 33 43 2d 37 2e 34 38 34 2c 2d 39 2e 34 35 33 20 2d 39 2e 38 34 37 2c 2d 38 2e 35 34 37 20 2d 31 32 2e 38 38 2c 2d 36 2e 38 35 34 4c 2d 31 31 2e 30 32 39 2c 2d 33 2e 33 30 38 43 2d 38 2e 38 36 33 2c 2d 34 2e 36 30 38 20 2d 36 2e 37 33 35 2c 2d 35 2e 32 37 38 20 2d 34 2e 37 36 36 2c 2d 35 2e 32 37 38 43 2d 31 2e 36 31 35 2c 2d 35 2e 32 37 38 20 30 2c 2d 33 2e 38 32 31 20 30 2c 2d 31 2e 33 37 39 4c 30 2c 2d 30 2e 38 32 37 4c 2d 36 2e 31 34 35 Data Ascii: -5.317,2.6L0,2.6ZM0.039,9.256L0.039,11.817L5.081,11.817L5.041,-1.969C5.002,-6.657 1.891,-9.453 -3.624,-9.453C-7.484,-9.453 -9.847,-8.547 -12.88,-6.854L-11.029,-3.308C-8.863,-4.608 -6.735,-5.278 -4.766,-5.278C-1.615,-5.278 0,-3.821 0,-1.379L0,-0.827L-6.145

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:29 UTC	1365	OUT	GET /mobile/img/logo-small.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450767\|1732450761
2024-11-24 12:19:29 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:29 GMT Content-Type: image/svg+xml Content-Length: 1037 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-40d" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761;Path=/
2024-11-24 12:19:29 UTC	1037	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:29 UTC	1137	OUT	GET /mobile/img/flags/malay-flag.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450767\|1732450761
2024-11-24 12:19:29 UTC	392	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:29 GMT Content-Type: image/png Content-Length: 6228 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-1854" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761;Path=/
2024-11-24 12:19:29 UTC	2501	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 03 00 00 00 bf 32 aa 0f 00 00 02 fa 50 4c 54 45 00 00 00 cc 00 00 ff ff ff 01 00 66 ff ff ff ce 0d 0e cc 00 01 ff ff ff 01 00 66 00 00 66 03 02 65 01 00 66 ff ff ff ff ff ff 00 00 66 ff ff ff 01 00 66 00 00 66 01 00 66 00 00 66 ff ff ff cc 00 00 ff ff ff cc 00 00 cc 00 00 ff ff ff cc 00 00 ff ff ff ff ff ff 01 00 66 01 00 66 00 00 66 cd 0a 0a ff cc 00 ff ff ff ff ff ff ff ff ff ff ff ff cc 00 00 cd 00 00 cc 00 01 cb 00 00 f4 f4 f9 cc 00 01 ff cc 00 01 00 66 00 00 65 cc 00 01 01 00 66 00 00 66 ff ff ff ff cc 00 ff ff ff fd f6 f6 ff cc 00 04 00 65 ff ff ff ff ff ff ff ff ff ff ff ff cc 00 00 ff ff ff ff ff ff ff ff ff cc 00 01 ff ff ff cc 00 00 cc 00 01 cc 00 01 00 00 65 ff cc 00 cb Data Ascii: PNGIHDR2PLTEfffeffffffffffeffee
2024-11-24 12:19:29 UTC	2824	IN	Data Raw: 83 02 ab 9e 92 10 70 59 fa 0e 7b 5b cc 65 0e 4f 5f 2b f1 74 1b a0 e8 a0 2a cd ef 4f 46 21 83 62 7e 4a 83 15 a9 34 6c fa 5f 3c 8d 20 fa f4 f3 59 cc aa ef 3e 87 c0 19 e8 fb 37 5e cb 61 3f 6b 99 8d fa 14 59 cb 38 6d 81 3e e3 55 2d a2 cc 7d 1b 46 91 0f 59 aa 00 7c 78 b1 72 7a 46 13 4e ad 7e 11 a2 81 43 7e ff c0 c0 8b 96 0e aa 94 8a c8 75 d8 8d b6 68 54 10 b5 9f 21 48 53 c3 ed 3c 95 1f a9 be b1 33 45 84 ab e0 64 10 3a 2e 50 fd f8 aa 11 0b 85 ca 9b ae f8 cb 11 c7 ec 3b dd 0a a6 34 58 a1 e9 e3 42 56 67 1b 3e c6 12 a5 21 74 45 a0 0b 15 d9 3c d2 2f dc d6 b4 74 d2 27 a3 ef 6c 76 a1 db 70 46 20 4b 15 82 95 a8 34 fe af 49 5c f1 42 3a 61 7f 8b cb 9d e4 b0 2d d0 81 f4 40 12 53 e6 e1 6b b7 32 c0 1b e9 84 f3 ad a4 71 04 ee ab 31 e0 00 58 bd 2e 53 66 e1 66 c3 08 78 27 fd Data Ascii: pY{[eO_+t*OF!b~J4l_< Y>7^a?kY8m>U-}FY\|xrzFN~C~uhT!HS<3Ed:.P;4XBVg>!tE</t'lvpF K4I\B:a-@Sk2q1X.Sffx'
2024-11-24 12:19:29 UTC	903	IN	Data Raw: f5 e8 69 8c 37 49 51 8f 1e c7 68 93 14 f5 e8 f3 1a 4d 66 4a 94 a3 47 3a ac d1 82 7d 94 58 7f 00 51 13 0d 02 73 0e 91 f2 f9 ac 9a e5 00 ba 0f 93 b2 f6 bc 9a 6e 00 b9 83 a4 08 45 39 00 db 05 4b db 01 24 04 4b 09 00 46 40 30 14 28 c2 d2 29 18 5a 85 86 94 60 68 06 1a f2 82 a1 3c c0 b5 ce 25 00 a6 75 2e 60 00 4c eb 5c 27 9a 72 82 9d 1c 9a 6a 82 9d 1a 9a 8a ec 36 7b a0 08 30 dd ec 9d b0 f0 3c d9 17 e1 bb 44 3f 33 09 7c 97 d9 ba 97 95 ad 19 fc 90 94 ac 24 f1 53 5c b2 12 c7 4f c1 a9 92 91 a9 41 fc 62 a1 64 64 21 c0 f5 89 8f 03 4c 9f f8 e6 f3 ce b2 c6 27 f1 bb ba 64 a3 8e df 95 a6 49 26 a6 95 f0 87 8a 64 a2 82 3f 75 0c 97 2c 44 7a 31 40 8f 64 a1 07 03 75 49 16 ea 18 a8 14 93 0c c4 4a 68 21 2d 19 48 a3 95 60 54 92 17 0d a2 a5 b2 24 af 8c d6 76 6d f9 b8 87 b4 8f 5b Data Ascii: i7IQhMfJG:}XQsnE9K$KF@0()Z`h<%u.`L\'rj6{0<D?3\|$S\OAbdd!L'dI&d?u,Dz1@duIJh!-H`T$vm[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49756	172.217.21.36	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:29 UTC	945	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fsumbangan.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=1188460676.1732450767&auid=82930210.1732450767&npa=0&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&tft=1732450766510&tfd=11685&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sumbangan.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:30 UTC	577	IN	HTTP/1.1 200 OK Content-Type: text/plain Cache-Control: no-cache, no-store, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Sun, 24 Nov 2024 12:19:30 GMT Pragma: no-cache Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sumbangan.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49757	172.217.17.34	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:29 UTC	1310	OUT	GET /td/rul/10947617392?random=1732450766497&cv=11&fst=1732450766497&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:30 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 24 Nov 2024 12:19:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 24-Nov-2024 12:34:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-24 12:19:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-11-24 12:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49761	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:31 UTC	1451	OUT	GET /vendor/livewire/livewire.js?id=de3fca26689cb5a39af4 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761
2024-11-24 12:19:32 UTC	469	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:32 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 159822 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 09 May 2024 03:58:58 GMT Vary: Accept-Encoding ETag: "663c4a02-2704e" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761;Path=/
2024-11-24 12:19:32 UTC	2447	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 61 63 74 6f 72 79 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 61 63 74 6f 72 79 29 3a 28 67 6c 6f 62 61 6c 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 67 6c 6f 62 61 6c 7c 7c 73 65 6c 66 29 2e 4c 69 76 65 77 69 72 65 3d 66 61 63 74 6f 72 79 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(functio
2024-11-24 12:19:32 UTC	11296	IN	Data Raw: 6f 74 79 70 65 4f 66 28 6f 29 7b 72 65 74 75 72 6e 28 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 29 7d 29 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 2c 70 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 2c 6f 7d 29 28 Data Ascii: otypeOf(o){return(_getPrototypeOf=Object.setPrototypeOf?Object.getPrototypeOf:function(o){return o.__proto__\|\|Object.getPrototypeOf(o)})(o)}function _setPrototypeOf(o,p){return(_setPrototypeOf=Object.setPrototypeOf\|\|function(o,p){return o.__proto__=p,o})(
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 6e 67 20 75 6e 6b 6e 6f 77 6e 20 68 6f 6f 6b 3a 20 5b 22 2e 63 6f 6e 63 61 74 28 6e 61 6d 65 2c 22 5d 22 29 3b 74 68 69 73 2e 62 75 73 2e 72 65 67 69 73 74 65 72 28 6e 61 6d 65 2c 63 61 6c 6c 62 61 63 6b 29 7d 2c 63 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 66 6f 72 28 76 61 72 20 5f 74 68 69 73 24 62 75 73 2c 5f 6c 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 70 61 72 61 6d 73 3d 6e 65 77 20 41 72 72 61 79 28 5f 6c 65 6e 3e 31 3f 5f 6c 65 6e 2d 31 3a 30 29 2c 5f 6b 65 79 3d 31 3b 5f 6b 65 79 3c 5f 6c 65 6e 3b 5f 6b 65 79 2b 2b 29 70 61 72 61 6d 73 5b 5f 6b 65 79 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 5f 6b 65 79 5d 3b 28 5f 74 68 69 73 24 62 75 73 3d 74 68 69 73 2e 62 75 73 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 5f 74 68 Data Ascii: ng unknown hook: [".concat(name,"]");this.bus.register(name,callback)},call:function(name){for(var _this$bus,_len=arguments.length,params=new Array(_len>1?_len-1:0),_key=1;_key<_len;_key++)params[_key-1]=arguments[_key];(_this$bus=this.bus).call.apply(_th
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 26 26 63 6f 6d 70 6f 6e 65 6e 74 2e 61 64 64 41 63 74 69 6f 6e 28 6e 65 77 20 5f 64 65 66 61 75 6c 74 24 35 28 65 76 65 6e 74 2c 70 61 72 61 6d 73 29 29 7d 29 29 7d 2c 63 6f 6d 70 6f 6e 65 6e 74 73 4c 69 73 74 65 6e 69 6e 67 46 6f 72 45 76 65 6e 74 54 68 61 74 41 72 65 54 72 65 65 41 6e 63 65 73 74 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 65 76 65 6e 74 29 7b 66 6f 72 28 76 61 72 20 70 61 72 65 6e 74 49 64 73 3d 5b 5d 2c 70 61 72 65 6e 74 3d 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 6f 73 65 73 74 28 22 5b 77 69 72 65 5c 5c 3a 69 64 5d 22 29 3b 70 61 72 65 6e 74 3b 29 70 61 72 65 6e 74 49 64 73 2e 70 75 73 68 28 70 61 72 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 72 65 3a 69 64 22 29 29 2c 70 61 72 65 6e 74 3d 70 61 Data Ascii: &&component.addAction(new _default$5(event,params))}))},componentsListeningForEventThatAreTreeAncestors:function(el,event){for(var parentIds=[],parent=el.parentElement.closest("[wire\\:id]");parent;)parentIds.push(parent.getAttribute("wire:id")),parent=pa
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 6f 6d 28 6e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 77 69 72 65 5c 5c 3a 69 6e 69 74 69 61 6c 2d 64 61 74 61 5d 22 29 29 2c 6f 6e 6c 79 43 68 69 6c 64 45 6c 73 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 77 69 72 65 5c 5c 3a 69 6e 69 74 69 61 6c 2d 64 61 74 61 5d 20 5b 77 69 72 65 5c 5c 3a 69 6e 69 74 69 61 6c 2d 64 61 74 61 5d 22 29 29 3b 72 65 74 75 72 6e 20 61 6c 6c 45 6c 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 6c 29 7b 72 65 74 75 72 6e 21 6f 6e 6c 79 43 68 69 6c 64 45 6c 73 2e 69 6e 63 6c 75 64 65 73 28 65 6c 29 7d 29 29 7d 2c 61 6c 6c 4d 6f 64 65 6c 45 6c 65 6d 65 6e 74 73 49 6e 73 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 29 7b Data Ascii: om(node.querySelectorAll("[wire\\:initial-data]")),onlyChildEls=Array.from(node.querySelectorAll("[wire\\:initial-data] [wire\\:initial-data]"));return allEls.filter((function(el){return!onlyChildEls.includes(el)}))},allModelElementsInside:function(root){
2024-11-24 12:19:32 UTC	16384	IN	Data Raw: 64 69 6f 22 3d 3d 3d 65 6c 2e 74 79 70 65 29 65 6c 2e 63 68 65 63 6b 65 64 3d 65 6c 2e 76 61 6c 75 65 3d 3d 76 61 6c 75 65 3b 65 6c 73 65 20 69 66 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 65 6c 2e 74 79 70 65 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 76 61 6c 75 65 29 29 7b 76 61 72 20 76 61 6c 75 65 46 6f 75 6e 64 3d 21 31 3b 76 61 6c 75 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 76 61 6c 29 7b 76 61 6c 3d 3d 65 6c 2e 76 61 6c 75 65 26 26 28 76 61 6c 75 65 46 6f 75 6e 64 3d 21 30 29 7d 29 29 2c 65 6c 2e 63 68 65 63 6b 65 64 3d 76 61 6c 75 65 46 6f 75 6e 64 7d 65 6c 73 65 20 65 6c 2e 63 68 65 63 6b 65 64 3d 21 21 76 61 6c 75 65 3b 65 6c 73 65 22 53 45 4c 45 43 54 22 3d 3d 3d 65 6c 2e 74 61 67 4e 61 6d 65 3f 74 68 69 73 2e 75 Data Ascii: dio"===el.type)el.checked=el.value==value;else if("checkbox"===el.type)if(Array.isArray(value)){var valueFound=!1;value.forEach((function(val){val==el.value&&(valueFound=!0)})),el.checked=valueFound}else el.checked=!!value;else"SELECT"===el.tagName?this.u
2024-11-24 12:19:32 UTC	560	IN	Data Raw: 7b 7d 2c 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 24 31 3d 69 74 65 72 61 74 6f 72 73 43 6f 72 65 2e 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 2c 72 65 74 75 72 6e 54 68 69 73 24 31 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 72 65 61 74 65 49 74 65 72 61 74 6f 72 43 6f 6e 73 74 72 75 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 49 74 65 72 61 74 6f 72 43 6f 6e 73 74 72 75 63 74 6f 72 2c 4e 41 4d 45 2c 6e 65 78 74 29 7b 76 61 72 20 54 4f 5f 53 54 52 49 4e 47 5f 54 41 47 3d 4e 41 4d 45 2b 22 20 49 74 65 72 61 74 6f 72 22 3b 72 65 74 75 72 6e 20 49 74 65 72 61 74 6f 72 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3d 6f 62 6a 65 63 74 43 72 65 61 74 65 28 49 74 65 72 61 74 6f 72 50 72 6f 74 Data Ascii: {},IteratorPrototype$1=iteratorsCore.IteratorPrototype,returnThis$1=function(){return this},createIteratorConstructor=function(IteratorConstructor,NAME,next){var TO_STRING_TAG=NAME+" Iterator";return IteratorConstructor.prototype=objectCreate(IteratorProt
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 65 74 74 65 72 2c 43 4f 52 52 45 43 54 5f 53 45 54 54 45 52 3d 21 31 2c 74 65 73 74 3d 7b 7d 3b 74 72 79 7b 28 73 65 74 74 65 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 29 2e 73 65 74 29 2e 63 61 6c 6c 28 74 65 73 74 2c 5b 5d 29 2c 43 4f 52 52 45 43 54 5f 53 45 54 54 45 52 3d 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: typeOf=Object.setPrototypeOf\|\|("__proto__"in{}?function(){var setter,CORRECT_SETTER=!1,test={};try{(setter=Object.getOwnPropertyDescriptor(Object.prototype,"__proto__").set).call(test,[]),CORRECT_SETTER=test instanceof Array}catch(error){}return function(
2024-11-24 12:19:32 UTC	9884	IN	Data Raw: 69 6e 74 65 72 6e 61 6c 53 74 61 74 65 2e 73 65 74 2c 67 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 24 32 3d 69 6e 74 65 72 6e 61 6c 53 74 61 74 65 2e 67 65 74 74 65 72 46 6f 72 28 53 54 52 49 4e 47 5f 49 54 45 52 41 54 4f 52 29 3b 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 28 53 74 72 69 6e 67 2c 22 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 69 74 65 72 61 74 65 64 29 7b 73 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 24 32 28 74 68 69 73 2c 7b 74 79 70 65 3a 53 54 52 49 4e 47 5f 49 54 45 52 41 54 4f 52 2c 73 74 72 69 6e 67 3a 53 74 72 69 6e 67 28 69 74 65 72 61 74 65 64 29 2c 69 6e 64 65 78 3a 30 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 6f 69 6e 74 2c 73 74 61 74 65 3d 67 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 Data Ascii: internalState.set,getInternalState$2=internalState.getterFor(STRING_ITERATOR);defineIterator(String,"String",(function(iterated){setInternalState$2(this,{type:STRING_ITERATOR,string:String(iterated),index:0})}),(function(){var point,state=getInternalState
2024-11-24 12:19:32 UTC	6500	IN	Data Raw: 6f 64 28 69 74 65 72 61 62 6c 65 29 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 61 72 67 65 74 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 22 29 3b 69 66 28 69 73 41 72 72 61 79 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 28 69 74 65 72 46 6e 29 29 7b 66 6f 72 28 69 6e 64 65 78 3d 30 2c 6c 65 6e 67 74 68 3d 74 6f 4c 65 6e 67 74 68 28 69 74 65 72 61 62 6c 65 2e 6c 65 6e 67 74 68 29 3b 6c 65 6e 67 74 68 3e 69 6e 64 65 78 3b 69 6e 64 65 78 2b 2b 29 69 66 28 28 72 65 73 75 6c 74 3d 63 61 6c 6c 46 6e 28 69 74 65 72 61 62 6c 65 5b 69 6e 64 65 78 5d 29 29 26 26 72 65 73 75 6c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 73 75 6c 74 29 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 73 75 6c 74 28 21 31 29 7d 69 Data Ascii: od(iterable)))throw TypeError("Target is not iterable");if(isArrayIteratorMethod(iterFn)){for(index=0,length=toLength(iterable.length);length>index;index++)if((result=callFn(iterable[index]))&&result instanceof Result)return result;return new Result(!1)}i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:31 UTC	1251	OUT	GET /mobile/img/logo-small.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761
2024-11-24 12:19:32 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:32 GMT Content-Type: image/svg+xml Content-Length: 1037 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-40d" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761;Path=/
2024-11-24 12:19:32 UTC	1037	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49764	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:31 UTC	1259	OUT	GET /mobile/img/flags/english-flag.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761
2024-11-24 12:19:32 UTC	393	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:32 GMT Content-Type: image/png Content-Length: 51616 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-c9a0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761;Path=/
2024-11-24 12:19:32 UTC	8148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec dd 77 9c 5c 65 bd f8 f1 e7 cc 66 d3 1b 1d a9 02 a1 57 05 01 1b ca bd d7 5e 2f 16 bc ea cf 72 ed 7a ad 80 05 51 63 43 10 69 8a 0a 8a a0 08 0a a1 83 f4 12 42 28 49 48 48 dd 24 a4 90 1e 52 77 67 76 37 bb 9b 2d 73 7e 7f c8 52 43 76 93 dd d9 3d cf cc fb fd 7a f1 32 bb d9 9d 39 f3 7d 1e 12 f6 e3 39 67 92 00 00 50 26 56 7f 73 ec 3e ad e9 80 bd 92 34 dd 23 69 6f db 2d 6d 69 1d 99 b6 77 ec 94 6b 6f 1f 92 Data Ascii: PNGIHDR!gAMAa cHRMz&u0`:pQ<bKGDIDATxw\efW^/rzQcCiB(IHH$Rwgv7-s~RCv=z29}9gP&Vs>4#io-miwko
2024-11-24 12:19:32 UTC	5648	IN	Data Raw: ff 12 b0 a0 1f d5 d7 d7 ef 5c 28 14 ee 09 21 7c 6f 7b be 5f c4 02 00 80 ad db ce 78 f5 42 5f 2c 14 0a f7 bb 2f 16 f4 2f 01 0b fa 49 5d 5d dd 31 c5 62 f1 89 10 c2 7f f4 e4 71 44 2c 00 00 d8 b2 5e 88 57 9d 4e ea e8 e8 98 9a cf e7 8f 33 55 e8 1f 02 16 f4 83 42 a1 f0 b1 24 49 1e 0d 21 bc ba 37 1e 4f c4 02 00 80 17 eb c5 78 d5 69 ef 10 c2 c4 ba ba ba 4f 99 2e f4 3d 01 0b fa 50 9a a6 55 cf de ef ea 9f 21 84 a1 bd f9 d8 22 16 00 00 fc 5b 09 e2 55 a7 c1 49 92 fc ed d9 fb 62 0d 30 69 e8 3b 02 16 f4 91 42 a1 b0 63 a1 50 b8 2b 6c e7 fd ae ba 43 c4 02 00 a0 d2 95 30 5e bd d0 17 0b 85 c2 bf f2 f9 fc 0e 26 0e 7d 43 c0 82 3e 50 5f 5f 7f 48 9a a6 8f 85 10 de 56 ea e7 12 b1 00 00 a8 54 7d 14 af 3a bd 23 84 f0 44 6d 6d ed 11 26 0f a5 27 60 41 89 15 0a 85 77 16 8b c5 c9 21 Data Ascii: \(!\|o{_xB_,//I]]1bqD,^WN3UB$I!7OxiO.=PU!"[UIb0i;BcP+lC0^&}C>P__HVT}:#Dmm&'`Aw!
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 21 14 d3 34 dc 38 79 c3 39 e7 8e 9b 7f b0 89 c7 4d c0 8a 58 9a a6 b9 bb 67 d5 3e bc ba ae b5 e4 7f c3 8a 58 f1 12 b1 e2 24 62 01 40 df 12 af e2 25 5e c5 a9 2f e2 55 a7 67 ea 36 57 dd 35 7b c3 43 69 9a 26 26 1f 2f 01 2b 62 5f b9 74 fa 75 0f ce c9 ef de 57 cf 27 62 c5 4b c4 8a 93 88 05 00 7d 43 bc 8a 97 78 15 a7 be 8c 57 9d 1e aa c9 ef fe 7f 97 4e bf da f4 e3 25 60 45 ea 37 37 cd 3b e5 9a 89 6b 3f dc d7 cf 2b 62 c5 4b c4 8a 93 88 05 00 a5 25 5e c5 4b bc 8a 53 7f c4 ab 4e 7f 7d 78 ed c7 7f 31 6e f6 7f 5b 85 38 09 58 11 ba fa ce 85 23 ff fe c8 da 6b 1a 5a fa 27 22 89 58 f1 12 b1 e2 24 62 01 40 69 88 57 f1 12 af e2 d4 9f f1 2a 84 10 36 6d ee 08 37 4e da 78 cd d5 77 2e 1c 69 35 e2 23 60 45 e8 b6 9a da 07 67 2e 6d 1c dc 9f c7 20 62 c5 4b c4 8a 93 88 05 00 bd 4b Data Ascii: !48y9MXg>X$b@%^/Ug6W5{Ci&&/+b_tuW'bK}CxWN%`E77;k?+bK%^KSN}x1n[8X#kZ'"X$b@iW*6m7Nxw.i5#`Eg.m bKK
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 0d c7 ff fc ba 59 ff 65 12 db 47 c0 da 4e 77 4c af bd aa b9 b5 68 10 11 13 b1 e2 25 62 c5 49 c4 02 28 1f e2 55 bc c4 ab 38 89 57 e5 a1 a5 ad 18 26 d4 34 fc d5 24 b6 8f 80 b5 1d be 7f d5 ec d3 1e 9a 9b df dd 24 e2 27 62 c5 4b c4 8a 93 88 05 10 3f f1 2a 5e e2 55 9c c4 ab f2 f2 40 4d dd 9e df be 7c c6 b7 4d 62 db 09 58 db e8 b2 a9 53 ab 6f 9f ba e1 e7 69 6a 16 e5 42 c4 8a 97 88 15 27 11 0b 20 5e e2 55 bc c4 ab 38 89 57 e5 27 4d 43 b8 6b 66 ed 2f 2f 9b 3a b5 da 34 b6 8d 80 b5 8d 1e 7d 34 fd 4b cd ca 4d 43 4c a2 bc 88 58 f1 12 b1 e2 24 62 01 c4 47 bc 8a 97 78 15 27 f1 aa 7c cd 5f d5 34 e4 b1 47 c3 1f 4c 62 db 08 58 db e0 9b 7f 9e b4 db 9d 4f 6e fc 84 49 94 a7 29 8b ea c3 87 2f ac 09 8d 2d 22 56 6c 44 ac 38 89 58 00 f1 10 af e2 25 5e c5 a9 b1 a5 23 9c 72 fe 1c Data Ascii: YeGNwLh%bI(U8W&4$$'bK?*^U@M\|MbXSoijB' ^U8W'MCkf//:4}4KMCLX$bGx'\|_4GLbXOnI)/-"VlD8X%^#r
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 78 ec a9 fc 67 ca e5 b5 94 45 c0 fa ca 1f a6 7d 6b c1 33 cd 43 6c 4d 78 b1 c9 8b ea c3 29 17 38 13 2b 46 22 16 00 bd 49 bc ea 1e f1 2a 4e 4d ad c5 70 ea c5 73 c3 a4 85 f5 86 01 2f 31 6f 75 f3 d0 af 5d f6 e4 57 ca e1 b5 94 45 c0 9a b3 b2 f9 0c db 12 b6 cc e5 84 f1 12 b1 00 e8 0d e2 55 f7 88 57 71 72 d9 20 74 ad 66 45 d3 0f ca e1 75 44 1f b0 c6 5e 3d f3 c4 49 0b 0b 7b d8 92 f0 ca 44 ac 78 89 58 00 f4 84 78 d5 3d e2 55 9c c4 2b e8 9e 47 9f 2a ec fd b3 71 f3 5e 1f fb eb 88 3e 60 cd 59 d5 7c 71 5b 47 6a 47 42 17 44 ac 78 89 58 00 6c 0f f1 aa 7b c4 ab 38 89 57 d0 7d 6d 1d 69 98 b3 ac e1 fc d8 5f 47 d4 01 eb 6f f7 cf db e9 a1 b9 85 d7 d9 8e d0 3d 22 56 bc 44 2c 00 b6 85 78 d5 3d e2 55 9c c4 2b d8 76 0f d5 d4 9d 78 d3 e4 95 3b c5 fc 1a a2 0e 58 93 17 b5 5c bc a1 Data Ascii: xgE}k3ClMx)8+F"INMps/1ou]WEUWqr tfEuD^=I{DxXx=U+Gq^>`Y\|q[GjGBDxXl{8W}mi_Go="VD,x=U+vx;X\
2024-11-24 12:19:32 UTC	16384	IN	Data Raw: ac 40 7f 11 b1 e2 25 62 01 f4 0d f1 2a 4e e2 15 90 05 4f 6f 68 f9 72 5f 3c 4f 9f 04 ac b9 ab 9a 4e b4 a4 40 7f 12 b1 e2 25 62 01 94 96 78 15 27 f1 0a c8 8a b9 2b 9b de d8 17 cf 53 f2 80 75 e6 df 66 1f 55 b3 62 d3 70 4b 0a f4 37 11 2b 5e 22 16 40 69 88 57 71 12 af 80 2c 99 bd 7c d3 88 d3 2f 9f 79 44 a9 9f a7 e4 01 6b 79 6d f3 77 8a 69 6a 45 81 4c 98 b2 a8 3e 7c f8 c2 9a d0 d8 22 62 c5 46 c4 02 e8 5d e2 55 9c 1a 5b 3a c2 29 e7 cf 11 af 80 cc 28 a6 69 58 d3 b0 f9 9b a5 7e 9e 92 07 ac 65 eb 37 bf cd 72 02 59 32 79 51 7d 38 e5 02 67 62 c5 48 c4 02 e8 1d e2 55 9c 9a 5a 8b e1 d4 8b e7 86 49 0b eb 0d 03 c8 94 95 1b 5b df 51 ea e7 28 69 c0 ba 7d ea ea a1 b3 97 6f 7a 95 a5 04 b2 c6 e5 84 f1 12 b1 00 7a 46 bc 8a 93 cb 06 81 2c 9b b1 b4 71 af db a7 ae 1e 5a ca e7 28 Data Ascii: @%b*NOohr_<ON@%bx'+SufUbpK7+^"@iWq,\|/yDkymwijEL>\|"bF]U[:)(iX~e7rY2yQ}8gbHUZI[Q(i}ozzF,qZ(
2024-11-24 12:19:32 UTC	3384	IN	Data Raw: 73 c4 2b 00 00 60 86 88 a5 2f 22 96 39 2b 46 ac c4 58 b7 3c be 20 37 64 57 62 79 e3 22 8c c1 79 de d1 f3 cb d3 6b 39 e2 f6 40 c0 b2 91 25 d3 0b 5f 3f f1 e8 d4 6b 55 33 1f 87 c5 6d 83 fa 22 5e 99 23 5e 01 00 80 86 22 62 e9 8b 88 65 ce ce b7 13 2a 25 32 b5 7f 9b a5 37 cf 2c 7e 95 23 6d 1f 04 2c 9b b9 e3 dc e2 85 e3 4a 52 3e 6e ea ef 27 5e e9 8b 78 d5 80 4f 64 c4 2b 00 00 d0 48 44 2c 7d 11 b1 cc d9 35 62 8d 2b 49 59 7d c7 d9 c5 17 72 84 ed 85 80 65 43 c7 1f dd b6 5f 41 e7 84 46 5f 26 49 bc d2 17 f1 ca 1c f1 0a 00 00 34 15 11 4b 5f 44 2c 73 76 8b 58 b9 e9 09 b5 03 7b 46 1f c3 91 b5 1f 02 96 0d cd 18 d4 75 f7 89 7d 93 8f 6f cc f3 b0 88 57 fa 22 5e 99 23 5e 01 00 80 e6 22 62 e9 8b 88 65 ce 2e 11 cb 1b 17 21 53 fa 26 4d ba 60 42 d1 6e 8e aa fd 10 b0 6c 6a d1 e4 Data Ascii: s+`/"9+FX< 7dWby"yk9@%_?kU3m"^#^"be*%27,~#m,JR>n'^xOd+HD,}5b+IY}reC_AF_&I4K_D,svX{Fu}oW"^#^"be.!S&M`Bnlj
2024-11-24 12:19:33 UTC	2824	IN	Data Raw: 00 00 a0 29 22 96 96 3e 13 91 e3 d2 66 9d c8 6d 83 d0 16 01 0b 5a eb 78 e3 25 6f c7 4e 1c 3c c0 dd 89 88 f5 63 56 bd 6d 90 78 05 00 00 60 0f 44 2c ad 6c 0c 04 02 fd 7d 3e df 16 a6 80 ce 08 58 d0 5e fa cd 97 bf 13 53 3e a6 d4 7d 54 7a 1d 6b 10 af 00 00 00 d0 32 88 58 5a 58 7f e0 c0 81 41 c9 c9 c9 5f 32 05 74 47 c0 82 2d a4 5f 7f d1 87 51 e3 87 94 44 74 4b df e7 e4 1d 88 57 00 00 00 68 49 44 2c 4b 5b 1b 19 19 39 28 25 25 e5 2b a6 80 1d 10 b0 60 1b 9d 97 2e 5c 13 73 5c af 02 77 b7 f4 5a 27 be 7e e2 15 00 00 00 5a 03 11 cb 92 56 ba 5c ae 63 e2 e3 e3 bf 61 0a d8 05 01 0b b6 d2 f1 ee ab 37 44 8c 1d 9c ed ee 79 54 b5 93 5e 37 f1 0a 00 00 00 ad 89 88 65 29 ef bb 5c ae 21 1e 8f 67 07 53 c0 4e 08 58 b0 9d ae 37 2d fa 34 7e 58 59 76 44 76 46 95 13 5e 2f f1 0a 00 00 Data Ascii: )">fmZx%oN<cVmx`D,l}>X^S>}Tzk2XZXA_2tG-_QDtKWhID,K[9(%%+`.\s\wZ'~ZV\ca7DyT^7e)\!gSNX7-4~XYvDvF^/
2024-11-24 12:19:33 UTC	6756	IN	Data Raw: 4d 59 39 ac 38 65 e0 ac a1 dd f6 b0 08 e0 a0 8f 7f 26 00 9c 65 78 41 bb 6a 11 19 78 f1 bd 2b 67 3f fc f6 8e a5 9f ef e0 01 ef 00 00 00 b0 be 0e 49 51 81 93 fb b5 5d 74 ed 8c 82 eb fe ce 1c 80 e3 70 0b 21 e0 50 d7 9e 5e 78 eb 29 fd 52 ba 0c 2f 48 da c8 1a 00 00 00 b0 b2 fe 3d 3c 5f ce 38 a6 6d e6 b5 33 0a ae 63 0d c0 99 b8 f2 02 70 b0 2b 4f 2d fc 4a 44 ba 9f 7a f3 8a 1b 9f 5c fe ed bc 5d d5 07 14 ab 00 00 00 c0 2a 92 13 22 8d 89 bd 93 6f bd 7b 76 e9 dc d7 99 03 70 34 ae c0 02 20 0f 9c 5f 32 ff 9c a1 9d f2 fb f7 f0 6e 65 0d 00 00 00 58 41 59 86 67 c7 29 fd 92 4b ef 9e 5d 3a 97 35 00 70 05 16 00 11 11 b9 6a 7a f6 47 86 61 a4 cd be 73 e5 1f fe f2 fa b6 33 77 d7 70 35 16 00 00 00 5a 9e 27 36 c2 98 dc 27 f5 f1 3f ce 2e 9e cc 4f 18 04 70 08 57 60 01 f8 81 52 ca Data Ascii: MY98e&exAjx+g?IQ]tp!P^x)R/H=<_8m3cp+O-JDz\]*"o{vp4 _2neXAYg)K]:5pjzGas3wp5Z'6'?.OpW`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:31 UTC	1420	OUT	GET /mobile/js/app.min.js HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450769\|1732450761
2024-11-24 12:19:32 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:32 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1423581 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-15b8dd" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761;Path=/
2024-11-24 12:19:32 UTC	2445	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e Data Ascii: /****/ (function(modules) { // webpackBootstrap/**/ // The module cache/**/ var installedModules = {};/**//**/ // The require function/**/ function __webpack_require__(moduleId) {/**//****/ // Check if module is in
2024-11-24 12:19:32 UTC	11296	IN	Data Raw: 65 72 61 62 6c 65 3a 20 74 72 75 65 2c 20 76 61 6c 75 65 3a 20 76 61 6c 75 65 20 7d 29 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 69 66 28 6d 6f 64 65 20 26 20 32 20 26 26 20 74 79 70 65 6f 66 20 76 61 6c 75 65 20 21 3d 20 27 73 74 72 69 6e 67 27 29 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 76 61 6c 75 65 29 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 6e 73 2c 20 6b 65 79 2c 20 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 20 72 65 74 75 72 6e 20 76 61 6c 75 65 5b 6b 65 79 5d 3b 20 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 6b 65 79 29 29 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 72 65 74 75 72 6e 20 6e 73 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 67 65 74 44 65 66 61 Data Ascii: erable: true, value: value });/****/ if(mode & 2 && typeof value != 'string') for(var key in value) __webpack_require__.d(ns, key, function(key) { return value[key]; }.bind(null, key));/**/ return ns;/**/ };/**//****/ // getDefa
2024-11-24 12:19:32 UTC	2824	IN	Data Raw: 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 3b 20 2f 2f 20 4f 6e 20 65 61 63 68 20 75 70 64 61 74 65 20 63 79 63 6c 65 2c 20 74 68 65 20 60 6d 6f 64 69 66 69 65 72 73 44 61 74 61 60 20 70 72 6f 70 65 72 74 79 20 66 6f 72 20 65 61 63 68 20 6d 6f 64 69 66 69 65 72 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 73 20 66 69 6c 6c 65 64 20 77 69 74 68 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 61 74 61 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 6d 6f 64 69 66 69 65 72 2e 20 54 68 69 73 20 6d 65 61 6e 73 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 74 20 64 6f 65 73 6e 27 74 20 70 65 72 73 69 73 74 20 61 6e 64 20 69 73 20 66 72 65 73 68 20 6f 6e 20 65 61 63 68 20 75 70 64 61 74 65 2e 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 6f 20 65 6e 73 75 72 65 20 70 65 72 73 69 73 74 Data Ascii: ons.placement; // On each update cycle, the `modifiersData` property for each modifier // is filled with the initial data specified by the modifier. This means // it doesn't persist and is fresh on each update. // To ensure persist
2024-11-24 12:19:32 UTC	16384	IN	Data Raw: 65 66 66 65 63 74 20 3d 20 5f 72 65 66 33 2e 65 66 66 65 63 74 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 65 66 66 65 63 74 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 65 61 6e 75 70 46 6e 20 3d 20 65 66 66 65 63 74 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 65 3a 20 73 74 61 74 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 3a 20 69 6e 73 74 61 6e 63 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 3a 20 6f 70 74 69 6f 6e 73 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 6f 6f 70 46 6e 20 3d 20 66 75 6e Data Ascii: effect = _ref3.effect; if (typeof effect === 'function') { var cleanupFn = effect({ state: state, name: name, instance: instance, options: options }); var noopFn = fun
2024-11-24 12:19:32 UTC	6208	IN	Data Raw: 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 2f 2a 21 20 2e 2f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 2e 6a 73 20 2a 2f 20 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 2e 6a 73 22 29 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 42 61 72 58 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c Data Ascii: import / var _getComputedStyle_js__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(/! ./getComputedStyle.js / "./node_modules/@popperjs/core/lib/dom-utils/getComputedStyle.js");/ harmony import */ var _getWindowScrollBarX_js__WEBPACK_IMPORTED_MODUL
2024-11-24 12:19:33 UTC	2824	IN	Data Raw: 6c 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 33 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 2f 2a 21 20 2e 2f 67 65 74 48 54 4d 4c 45 6c 65 6d 65 6e 74 53 63 72 6f 6c 6c 2e 6a 73 20 2a 2f 20 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 48 54 4d 4c 45 6c 65 6d 65 6e 74 53 63 72 6f 6c 6c 2e 6a 73 22 29 3b 0a 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4e 6f 64 65 53 63 72 6f 6c 6c 28 6e 6f 64 65 29 20 7b 0a 20 20 69 66 20 28 6e 6f 64 65 20 3d 3d 3d 20 4f 62 6a 65 63 74 28 5f 67 65 74 57 69 6e 64 6f 77 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c Data Ascii: l_js__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(/! ./getHTMLElementScroll.js / "./node_modules/@popperjs/core/lib/dom-utils/getHTMLElementScroll.js");function getNodeScroll(node) { if (node === Object(_getWindow_js__WEBPACK_IMPORTED_MODUL
2024-11-24 12:19:33 UTC	9884	IN	Data Raw: 20 20 76 61 72 20 63 75 72 72 65 6e 74 4e 6f 64 65 20 3d 20 4f 62 6a 65 63 74 28 5f 67 65 74 50 61 72 65 6e 74 4e 6f 64 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 35 5f 5f 5b 22 64 65 66 61 75 6c 74 22 5d 29 28 65 6c 65 6d 65 6e 74 29 3b 0a 0a 20 20 77 68 69 6c 65 20 28 4f 62 6a 65 63 74 28 5f 69 6e 73 74 61 6e 63 65 4f 66 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 33 5f 5f 5b 22 69 73 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 5d 29 28 63 75 72 72 65 6e 74 4e 6f 64 65 29 20 26 26 20 5b 27 68 74 6d 6c 27 2c 20 27 62 6f 64 79 27 5d 2e 69 6e 64 65 78 4f 66 28 4f 62 6a 65 63 74 28 5f 67 65 74 4e 6f 64 65 4e 61 6d 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 Data Ascii: var currentNode = Object(_getParentNode_js__WEBPACK_IMPORTED_MODULE_5__["default"])(element); while (Object(_instanceOf_js__WEBPACK_IMPORTED_MODULE_3__["isHTMLElement"])(currentNode) && ['html', 'body'].indexOf(Object(_getNodeName_js__WEBPACK_IMPORTE
2024-11-24 12:19:33 UTC	6500	IN	Data Raw: 20 7b 20 72 65 74 75 72 6e 20 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 3b 20 7d 29 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 67 65 74 57 69 6e 64 6f 77 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 30 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 2f 2a 21 20 2e 2f 67 65 74 57 69 6e 64 6f 77 2e 6a 73 20 2a 2f 20 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 57 69 6e 64 6f 77 2e 6a 73 22 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 28 6e 6f 64 65 29 20 7b 0a 20 20 76 61 72 20 77 69 6e 20 3d 20 4f 62 6a 65 63 Data Ascii: { return getWindowScroll; });/* harmony import / var _getWindow_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(/! ./getWindow.js */ "./node_modules/@popperjs/core/lib/dom-utils/getWindow.js");function getWindowScroll(node) { var win = Objec
2024-11-24 12:19:33 UTC	12708	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 21 20 65 78 70 6f 72 74 73 20 70 72 6f 76 69 64 65 64 3a 20 64 65 66 61 75 6c 74 20 2a 2f 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 28 62 69 6e 64 69 6e 67 29 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 Data Ascii: *************************************************//! exports provided: default //*/ (function(module, __webpack_exports__, __webpack_require__) {"use strict";__webpack_require__.r(__webpack_exports__);/ harmony export (binding) */ __webpack_re
2024-11-24 12:19:33 UTC	3676	IN	Data Raw: 6e 79 20 72 65 65 78 70 6f 72 74 20 28 73 61 66 65 29 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 22 66 6c 69 70 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 5f 6d 6f 64 69 66 69 65 72 73 5f 69 6e 64 65 78 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 5b 22 66 6c 69 70 22 5d 3b 20 7d 29 3b 0a 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 72 65 65 78 70 6f 72 74 20 28 73 61 66 65 29 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 22 68 69 64 65 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 Data Ascii: ny reexport (safe) / __webpack_require__.d(__webpack_exports__, "flip", function() { return _modifiers_index_js__WEBPACK_IMPORTED_MODULE_1__["flip"]; });/ harmony reexport (safe) */ __webpack_require__.d(__webpack_exports__, "hide", function() { retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:32 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mHFrsxmaN9vRMO1&MD=HEywdCSn HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-24 12:19:33 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1bf42845-b8bd-46b8-bd29-d5b95d6cc563 MS-RequestId: 166aea0c-16fd-47fd-9140-225db48fac1a MS-CV: CpSOFKJjLUiBR/0E.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 24 Nov 2024 12:19:31 GMT Connection: close Content-Length: 24490
2024-11-24 12:19:33 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-24 12:19:33 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:34 UTC	1428	OUT	GET /mobile/js/sweetalert2.min.js HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:35 UTC	467	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:35 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 47949 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-bb4d" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450775\|1732450761;Path=/
2024-11-24 12:19:35 UTC	2449	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 53 77 65 65 74 61 6c 65 72 74 32 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==ty
2024-11-24 12:19:35 UTC	11296	IN	Data Raw: 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 6f 50 72 6f 6d 69 73 65 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 72 65 74 75 72 6e 20 62 28 74 29 3f 74 2e 74 6f 50 72 6f 6d 69 73 65 28 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 74 3d 74 29 26 26 74 2e 6a 71 75 65 72 79 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 22 2e 63 Data Ascii: ion"==typeof t.toPromise}function y(t){return b(t)?t.toPromise():Promise.resolve(t)}function w(t){return t&&Promise.resolve(t)===t}function C(t){return t instanceof Element\|\|"object"===r(t=t)&&t.jquery}function k(){return document.body.querySelector(".".c
2024-11-24 12:19:35 UTC	2824	IN	Data Raw: 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 74 65 78 74 61 72 65 61 22 5d 2c 44 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 49 74 5b 74 2e 69 6e 70 75 74 5d 29 72 65 74 75 72 6e 20 4b 28 27 55 6e 65 78 70 65 63 74 65 64 20 74 79 70 65 20 6f 66 20 69 6e 70 75 74 21 20 45 78 70 65 63 74 65 64 20 22 74 65 78 74 22 2c 20 22 65 6d 61 69 6c 22 2c 20 22 70 61 73 73 77 6f 72 64 22 2c 20 22 6e 75 6d 62 65 72 22 2c 20 22 74 65 6c 22 2c 20 22 73 65 6c 65 63 74 22 2c 20 22 72 61 64 69 6f 22 2c 20 22 63 68 65 63 6b 62 6f 78 22 2c 20 22 74 65 78 74 61 72 65 61 22 2c 20 22 66 69 6c 65 22 20 6f 72 20 22 75 72 6c 22 2c 20 67 6f 74 20 22 27 2e 63 6f 6e 63 61 74 28 74 2e 69 6e 70 75 74 2c 27 22 27 29 29 Data Ascii: ange","select","radio","checkbox","textarea"],Dt=function(t){if(!It[t.input])return K('Unexpected type of input! Expected "text", "email", "password", "number", "tel", "select", "radio", "checkbox", "textarea", "file" or "url", got "'.concat(t.input,'"'))
2024-11-24 12:19:35 UTC	2824	IN	Data Raw: 65 73 73 53 74 65 70 20 6c 69 6b 65 20 4a 53 20 61 72 72 61 79 73 20 73 74 61 72 74 73 20 66 72 6f 6d 20 30 29 22 29 2c 6f 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 74 3d 28 6e 3d 74 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 2c 76 74 28 74 2c 24 5b 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 5d 29 2c 55 28 74 2c 6e 29 2c 74 29 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 3d 3d 3d 72 26 26 76 74 28 74 2c 24 5b 22 61 63 74 69 76 65 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 5d 29 2c 65 21 3d 3d 6f 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 6c 65 6e 67 74 68 2d 31 26 26 28 74 3d 6f 2c 65 3d 64 6f 63 75 6d Data Ascii: essStep like JS arrays starts from 0)"),o.progressSteps.forEach(function(t,e){var n,t=(n=t,t=document.createElement("li"),vt(t,$["progress-step"]),U(t,n),t);i.appendChild(t),e===r&&vt(t,$["active-progress-step"]),e!==o.progressSteps.length-1&&(t=o,e=docum
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 69 6e 65 2d 72 69 67 68 74 22 5d 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 73 74 28 74 2c 6f 5b 6e 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 2c 65 2e 69 63 6f 6e 43 6f 6c 6f 72 29 3b 73 74 28 74 2c 22 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 2d 72 69 6e 67 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6f 72 22 2c 65 2e 69 63 6f 6e 43 6f 6c 6f 72 29 7d 7d 2c 59 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2e 63 6f 6e 63 61 74 28 24 5b 22 69 63 6f 6e 2d 63 6f 6e 74 65 6e 74 22 5d 2c 27 22 3e 27 29 2e 63 6f 6e 63 61 74 28 74 2c 22 3c 2f 64 69 76 3e 22 29 7d 2c 5a 74 3d 5b 5d 2c 51 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 22 2e 63 6f 6e 63 61 74 Data Ascii: ine-right"];n<o.length;n++)st(t,o[n],"backgroundColor",e.iconColor);st(t,".swal2-success-ring","borderColor",e.iconColor)}},Yt=function(t){return'<div class="'.concat($["icon-content"],'">').concat(t,"</div>")},Zt=[],Qt=function(t,e){t.className="".concat
2024-11-24 12:19:36 UTC	1972	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 69 64 4f 70 65 6e 28 74 29 7d 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 6e 4f 70 65 6e 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 6f 6e 4f 70 65 6e 28 74 29 7d 29 7d 2c 5a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 42 74 26 26 6c 74 28 65 29 3f 28 74 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 68 69 64 64 65 6e 22 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 42 74 2c 4d 65 29 29 3a 74 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3b 28 2f 69 50 61 64 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 2f 2e 74 65 73 Data Ascii: n(){return e.didOpen(t)}):"function"==typeof e.onOpen&&setTimeout(function(){return e.onOpen(t)})},Ze=function(t,e){Bt&&lt(e)?(t.style.overflowY="hidden",e.addEventListener(Bt,Me)):t.style.overflowY="auto"},Qe=function(t,e,n){var o;(/iPad\|iPhone\|iPod/.tes
2024-11-24 12:19:36 UTC	1412	IN	Data Raw: 72 72 61 79 28 74 29 3f 28 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 67 72 6f 75 70 22 29 29 2e 6c 61 62 65 6c 3d 6e 2c 65 2e 64 69 73 61 62 6c 65 64 3d 21 31 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 65 2c 74 5b 31 5d 2c 74 5b 30 5d 29 7d 29 29 3a 6f 28 72 2c 74 2c 6e 29 7d 29 2c 72 2e 66 6f 63 75 73 28 29 7d 2c 72 61 64 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 72 3d 79 74 28 74 2c 24 2e 72 61 64 69 6f 29 3b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 5b 30 5d 2c 6e 3d 74 5b 31 5d 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 Data Ascii: rray(t)?((e=document.createElement("optgroup")).label=n,e.disabled=!1,r.appendChild(e),t.forEach(function(t){return o(e,t[1],t[0])})):o(r,t,n)}),r.focus()},radio:function(t,e,i){var r=yt(t,$.radio);e.forEach(function(t){var e=t[0],n=t[1],o=document.create
2024-11-24 12:19:36 UTC	8788	IN	Data Raw: 28 74 29 3a 63 6e 28 65 2c 6e 2c 6f 29 7d 29 7d 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 2e 73 68 6f 77 4c 6f 61 64 65 72 4f 6e 44 65 6e 79 26 26 4a 74 28 4c 28 29 29 2c 74 2e 70 72 65 44 65 6e 79 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 28 74 2e 70 72 65 44 65 6e 79 28 6e 2c 74 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 29 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 31 3d 3d 3d 74 3f 65 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3a 65 2e 63 6c 6f 73 65 50 6f 70 75 70 28 7b 69 73 44 65 6e 69 65 64 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 3a 74 7d 29 7d 29 3a 65 2e 63 6c 6f 73 65 50 6f 70 75 Data Ascii: (t):cn(e,n,o)})},un=function(e,t,n){t.showLoaderOnDeny&&Jt(L()),t.preDeny?Promise.resolve().then(function(){return y(t.preDeny(n,t.validationMessage))}).then(function(t){!1===t?e.hideLoading():e.closePopup({isDenied:!0,value:void 0===t?n:t})}):e.closePopu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:34 UTC	1277	OUT	GET /vendor/livewire/livewire.js?id=de3fca26689cb5a39af4 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:35 UTC	469	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:35 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 159822 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 09 May 2024 03:58:58 GMT Vary: Accept-Encoding ETag: "663c4a02-2704e" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450775\|1732450761;Path=/
2024-11-24 12:19:35 UTC	2447	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 61 63 74 6f 72 79 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 61 63 74 6f 72 79 29 3a 28 67 6c 6f 62 61 6c 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 67 6c 6f 62 61 6c 7c 7c 73 65 6c 66 29 2e 4c 69 76 65 77 69 72 65 3d 66 61 63 74 6f 72 79 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(global,factory){"object"==typeof exports&&"undefined"!=typeof module?module.exports=factory():"function"==typeof define&&define.amd?define(factory):(global="undefined"!=typeof globalThis?globalThis:global\|\|self).Livewire=factory()}(this,(functio
2024-11-24 12:19:35 UTC	16384	IN	Data Raw: 6f 74 79 70 65 4f 66 28 6f 29 7b 72 65 74 75 72 6e 28 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 29 7d 29 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6f 2c 70 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 2c 6f 7d 29 28 Data Ascii: otypeOf(o){return(_getPrototypeOf=Object.setPrototypeOf?Object.getPrototypeOf:function(o){return o.__proto__\|\|Object.getPrototypeOf(o)})(o)}function _setPrototypeOf(o,p){return(_setPrototypeOf=Object.setPrototypeOf\|\|function(o,p){return o.__proto__=p,o})(
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 32 5d 3a 31 2c 70 61 72 65 6e 74 43 6f 6d 70 6f 6e 65 6e 74 3d 74 68 69 73 2e 66 69 6e 64 43 6f 6d 70 6f 6e 65 6e 74 28 70 61 72 65 6e 74 49 64 29 3b 69 66 28 70 61 72 65 6e 74 43 6f 6d 70 6f 6e 65 6e 74 29 7b 76 61 72 20 63 68 69 6c 64 49 64 73 3d 70 61 72 65 6e 74 43 6f 6d 70 6f 6e 65 6e 74 2e 63 68 69 6c 64 49 64 73 3b 69 66 28 63 68 69 6c 64 49 64 73 2e 69 6e 63 6c 75 64 65 73 28 63 68 69 6c 64 49 64 29 29 72 65 74 75 72 6e 20 64 69 73 74 61 6e 63 65 4d 65 6d 6f 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 63 68 69 6c 64 49 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 64 69 73 74 61 6e 63 65 3d 74 68 69 73 2e 67 65 74 44 69 73 74 61 6e 63 65 54 6f 43 68 69 6c 64 28 63 68 69 6c 64 49 64 73 5b 69 5d 2c 63 68 69 6c 64 49 64 2c 64 69 73 74 61 Data Ascii: 2]:1,parentComponent=this.findComponent(parentId);if(parentComponent){var childIds=parentComponent.childIds;if(childIds.includes(childId))return distanceMemo;for(var i=0;i<childIds.length;i++){var distance=this.getDistanceToChild(childIds[i],childId,dista
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 57 65 6c 6c 4b 6e 6f 77 6e 53 79 6d 62 6f 6c 73 53 74 6f 72 65 3d 73 68 61 72 65 64 28 22 77 6b 73 22 29 2c 53 79 6d 62 6f 6c 24 31 3d 67 6c 6f 62 61 6c 5f 31 2e 53 79 6d 62 6f 6c 2c 63 72 65 61 74 65 57 65 6c 6c 4b 6e 6f 77 6e 53 79 6d 62 6f 6c 3d 75 73 65 53 79 6d 62 6f 6c 41 73 55 69 64 3f 53 79 6d 62 6f 6c 24 31 3a 53 79 6d 62 6f 6c 24 31 26 26 53 79 6d 62 6f 6c 24 31 2e 77 69 74 68 6f 75 74 53 65 74 74 65 72 7c 7c 75 69 64 2c 77 65 6c 6c 4b 6e 6f 77 6e 53 79 6d 62 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 68 61 73 24 31 28 57 65 6c 6c 4b 6e 6f 77 6e 53 79 6d 62 6f 6c 73 53 74 6f 72 65 2c 6e 61 6d 65 29 26 26 28 6e 61 74 69 76 65 Data Ascii: mbol"==typeof Symbol.iterator,WellKnownSymbolsStore=shared("wks"),Symbol$1=global_1.Symbol,createWellKnownSymbol=useSymbolAsUid?Symbol$1:Symbol$1&&Symbol$1.withoutSetter\|\|uid,wellKnownSymbol=function(name){return has$1(WellKnownSymbolsStore,name)&&(native
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 29 2c 6e 65 77 20 52 65 73 75 6c 74 28 21 30 2c 63 6f 6e 64 69 74 69 6f 6e 29 7d 2c 63 61 6c 6c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 41 53 5f 45 4e 54 52 49 45 53 3f 28 61 6e 4f 62 6a 65 63 74 28 76 61 6c 75 65 29 2c 49 4e 54 45 52 52 55 50 54 45 44 3f 66 6e 28 76 61 6c 75 65 5b 30 5d 2c 76 61 6c 75 65 5b 31 5d 2c 73 74 6f 70 29 3a 66 6e 28 76 61 6c 75 65 5b 30 5d 2c 76 61 6c 75 65 5b 31 5d 29 29 3a 49 4e 54 45 52 52 55 50 54 45 44 3f 66 6e 28 76 61 6c 75 65 2c 73 74 6f 70 29 3a 66 6e 28 76 61 6c 75 65 29 7d 3b 69 66 28 49 53 5f 49 54 45 52 41 54 4f 52 29 69 74 65 72 61 74 6f 72 3d 69 74 65 72 61 62 6c 65 3b 65 6c 73 65 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 69 74 65 72 46 6e 3d 67 65 Data Ascii: ),new Result(!0,condition)},callFn=function(value){return AS_ENTRIES?(anObject(value),INTERRUPTED?fn(value[0],value[1],stop):fn(value[0],value[1])):INTERRUPTED?fn(value,stop):fn(value)};if(IS_ITERATOR)iterator=iterable;else{if("function"!=typeof(iterFn=ge
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 29 7d 3a 6f 6e 46 69 6e 61 6c 6c 79 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 61 74 69 76 65 50 72 6f 6d 69 73 65 43 6f 6e 73 74 72 75 63 74 6f 72 29 7b 76 61 72 20 6d 65 74 68 6f 64 3d 67 65 74 42 75 69 6c 74 49 6e 28 22 50 72 6f 6d 69 73 65 22 29 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 3b 6e 61 74 69 76 65 50 72 6f 6d 69 73 65 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 21 3d 3d 6d 65 74 68 6f 64 26 26 72 65 64 65 66 69 6e 65 28 6e 61 74 69 76 65 50 72 6f 6d 69 73 65 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6e 61 6c 6c 79 22 2c 6d 65 74 68 6f 64 2c 7b 75 6e 73 61 66 65 3a 21 30 7d 29 7d Data Ascii: ion(){throw e}))}:onFinally)}}),"function"==typeof nativePromiseConstructor){var method=getBuiltIn("Promise").prototype.finally;nativePromiseConstructor.prototype.finally!==method&&redefine(nativePromiseConstructor.prototype,"finally",method,{unsafe:!0})}
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 2c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 65 6c 3d 74 68 69 73 3b 64 6f 7b 69 66 28 65 6c 2e 6d 61 74 63 68 65 73 28 73 29 29 72 65 74 75 72 6e 20 65 6c 3b 65 6c 3d 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 65 6c 26 26 31 3d 3d 3d 65 6c 2e 6e 6f 64 65 54 Data Ascii: ches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector),Element.prototype.closest\|\|(Element.prototype.closest=function(s){var el=this;do{if(el.matches(s))return el;el=el.parentElement\|\|el.parentNode}while(null!==el&&1===el.nodeT
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 6f 64 65 43 68 69 6c 64 2e 61 63 74 75 61 6c 69 7a 65 26 26 28 63 75 72 54 6f 4e 6f 64 65 43 68 69 6c 64 3d 63 75 72 54 6f 4e 6f 64 65 43 68 69 6c 64 2e 61 63 74 75 61 6c 69 7a 65 28 66 72 6f 6d 45 6c 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 29 29 2c 66 72 6f 6d 45 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 75 72 54 6f 4e 6f 64 65 43 68 69 6c 64 29 2c 68 61 6e 64 6c 65 4e 6f 64 65 41 64 64 65 64 28 63 75 72 54 6f 4e 6f 64 65 43 68 69 6c 64 29 29 7d 63 75 72 54 6f 4e 6f 64 65 43 68 69 6c 64 3d 74 6f 4e 65 78 74 53 69 62 6c 69 6e 67 2c 63 75 72 46 72 6f 6d 4e 6f 64 65 43 68 69 6c 64 3d 66 72 6f 6d 4e 65 78 74 53 69 62 6c 69 6e 67 7d 21 66 75 6e 63 74 69 6f 6e 28 66 72 6f 6d 45 6c 2c 63 75 72 46 72 6f 6d 4e 6f 64 65 43 68 69 6c 64 2c 63 75 Data Ascii: odeChild.actualize&&(curToNodeChild=curToNodeChild.actualize(fromEl.ownerDocument\|\|doc)),fromEl.appendChild(curToNodeChild),handleNodeAdded(curToNodeChild))}curToNodeChild=toNextSibling,curFromNodeChild=fromNextSibling}!function(fromEl,curFromNodeChild,cu
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 65 64 55 72 6c 28 6e 61 6d 65 2c 70 61 79 6c 6f 61 64 29 7d 29 29 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 6f 6e 28 22 75 70 6c 6f 61 64 3a 66 69 6e 69 73 68 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 2c 74 6d 70 46 69 6c 65 6e 61 6d 65 73 29 7b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 6d 61 72 6b 55 70 6c 6f 61 64 46 69 6e 69 73 68 65 64 28 6e 61 6d 65 2c 74 6d 70 46 69 6c 65 6e 61 6d 65 73 29 7d 29 29 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 6f 6e 28 22 75 70 6c 6f 61 64 3a 65 72 72 6f 72 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 6d 61 72 6b 55 70 6c 6f 61 64 45 72 72 6f 72 65 64 28 6e 61 6d 65 29 7d 29 29 2c 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 6f 6e 28 22 75 70 6c Data Ascii: edUrl(name,payload)})),this.component.on("upload:finished",(function(name,tmpFilenames){return _this.markUploadFinished(name,tmpFilenames)})),this.component.on("upload:errored",(function(name){return _this.markUploadErrored(name)})),this.component.on("upl
2024-11-24 12:19:36 UTC	16384	IN	Data Raw: 65 73 70 6f 6e 73 65 2e 65 66 66 65 63 74 73 2e 72 65 64 69 72 65 63 74 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 64 69 72 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 7b 77 69 6e 64 6f 77 2e 54 75 72 62 6f 6c 69 6e 6b 73 26 26 77 69 6e 64 6f 77 2e 54 75 72 62 6f 6c 69 6e 6b 73 2e 73 75 70 70 6f 72 74 65 64 3f 77 69 6e 64 6f 77 2e 54 75 72 62 6f 6c 69 6e 6b 73 2e 76 69 73 69 74 28 75 72 6c 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 75 72 6c 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 72 63 65 52 65 66 72 65 73 68 44 61 74 61 42 6f 75 6e 64 45 6c 65 6d 65 6e 74 73 4d 61 72 6b 65 64 41 73 44 69 72 74 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 64 69 72 74 79 49 6e 70 75 74 73 29 7b 76 61 72 20 5f 74 68 Data Ascii: esponse.effects.redirect)}))}},{key:"redirect",value:function(url){window.Turbolinks&&window.Turbolinks.supported?window.Turbolinks.visit(url):window.location.href=url}},{key:"forceRefreshDataBoundElementsMarkedAsDirty",value:function(dirtyInputs){var _th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	1492	OUT	GET /mobile/img/home/2024/Sedekah.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:37 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:37 GMT Content-Type: image/svg+xml Content-Length: 8216 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2018" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761;Path=/
2024-11-24 12:19:37 UTC	2474	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:37 UTC	5742	IN	Data Raw: 43 33 33 36 2e 31 39 2c 32 32 39 2e 32 38 2c 33 33 37 2e 37 36 2c 32 34 35 2e 36 37 2c 33 33 32 2e 30 37 2c 32 36 33 2e 30 32 7a 22 2f 3e 0a 09 09 09 09 3c 67 3e 0a 09 09 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 33 32 37 2e 32 36 2c 32 37 34 2e 35 34 63 2d 34 2e 39 33 2c 39 2e 36 37 2d 31 31 2e 39 37 2c 31 38 2e 39 37 2d 32 30 2e 37 33 2c 32 36 2e 31 32 63 2d 32 2e 38 38 2c 32 2e 33 34 2d 35 30 2e 31 36 2d 38 2e 39 38 2d 35 38 2e 33 39 2d 33 33 2e 34 32 0a 09 09 09 09 09 09 63 2d 33 2e 37 38 2d 31 31 2e 32 31 2d 31 2e 34 38 2d 31 38 2e 34 31 2c 33 2e 30 34 2d 32 32 2e 37 35 63 36 2e 34 34 2c 31 33 2e 37 36 2c 32 34 2e 32 37 2c 34 35 2e 38 36 2c 37 31 2e 31 32 2c 33 31 2e 34 33 43 33 32 34 2e 30 35 2c 32 37 35 2e 33 39 2c Data Ascii: C336.19,229.28,337.76,245.67,332.07,263.02z"/><g><path class="st4" d="M327.26,274.54c-4.93,9.67-11.97,18.97-20.73,26.12c-2.88,2.34-50.16-8.98-58.39-33.42c-3.78-11.21-1.48-18.41,3.04-22.75c6.44,13.76,24.27,45.86,71.12,31.43C324.05,275.39,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	1490	OUT	GET /mobile/img/home/2024/Zakat.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:37 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:37 GMT Content-Type: image/svg+xml Content-Length: 5802 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-16aa" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761;Path=/
2024-11-24 12:19:37 UTC	1062	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:37 UTC	4740	IN	Data Raw: 2e 32 34 2d 33 38 2e 38 36 2c 31 38 37 2e 34 33 2d 31 33 33 2e 31 2c 32 30 38 2e 31 36 63 2d 35 32 2e 33 2c 31 31 2e 35 2d 31 30 34 2e 32 37 2d 31 2e 37 34 2d 31 34 33 2e 37 31 2d 33 31 2e 39 63 33 38 2e 33 37 2c 35 39 2e 37 39 2c 31 31 31 2e 31 38 2c 39 32 2e 34 32 2c 31 38 34 2e 36 32 2c 37 36 2e 32 37 0a 09 09 43 33 38 31 2e 37 33 2c 33 39 39 2e 39 2c 34 34 31 2e 33 32 2c 33 30 36 2e 37 31 2c 34 32 30 2e 35 39 2c 32 31 32 2e 34 37 7a 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 64 65 66 73 3e 0a 09 09 3c 63 69 72 63 6c 65 20 69 64 3d 22 53 56 47 49 44 5f 31 5f 22 20 63 78 3d 22 32 35 30 22 20 63 79 3d 22 32 35 30 22 20 72 3d 22 31 37 34 2e 37 31 22 2f 3e 0a 09 3c 2f 64 65 66 73 3e 0a 09 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 53 56 47 49 44 5f 30 30 Data Ascii: .24-38.86,187.43-133.1,208.16c-52.3,11.5-104.27-1.74-143.71-31.9c38.37,59.79,111.18,92.42,184.62,76.27C381.73,399.9,441.32,306.71,420.59,212.47z"/></g><g><defs><circle id="SVGID_1_" cx="250" cy="250" r="174.71"/></defs><clipPath id="SVGID_00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49774	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	532	OUT	GET /favicons/manifest.json HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:37 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:37 GMT Content-Type: application/json Content-Length: 720 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:53 GMT Vary: Accept-Encoding ETag: "658db019-2d0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450777;Path=/
2024-11-24 12:19:37 UTC	720	IN	Data Raw: 7b 0a 20 22 6e 61 6d 65 22 3a 20 22 41 70 70 22 2c 0a 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 30 2e 37 35 22 0a 20 20 7d 2c 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 61 6e 64 72 6f 69 64 2d 69 63 6f 6e 2d 34 38 78 34 38 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 2c 0a 20 20 20 22 64 65 6e 73 69 74 79 22 3a 20 22 31 2e 30 22 0a 20 20 7d Data Ascii: { "name": "App", "icons": [ { "src": "\/android-icon-36x36.png", "sizes": "36x36", "type": "image\/png", "density": "0.75" }, { "src": "\/android-icon-48x48.png", "sizes": "48x48", "type": "image\/png", "density": "1.0" }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49773	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	1494	OUT	GET /mobile/img/home/2024/Peduli-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:37 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:37 GMT Content-Type: image/svg+xml Content-Length: 11525 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2d05" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761;Path=/
2024-11-24 12:19:37 UTC	2473	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:37 UTC	9052	IN	Data Raw: 2e 39 33 63 30 2e 35 37 2d 31 2e 32 38 2c 31 2e 32 32 2d 32 2e 35 32 2c 31 2e 39 35 2d 33 2e 37 31 63 31 2e 30 36 2d 31 2e 33 32 2c 32 2e 32 2d 32 2e 35 37 2c 33 2e 34 39 2d 33 2e 36 39 63 2d 30 2e 38 35 2c 30 2e 37 32 2d 31 2e 37 2c 31 2e 34 34 2d 32 2e 35 36 2c 32 2e 31 36 0a 09 09 09 09 63 31 2e 35 32 2d 31 2e 32 36 2c 32 2e 39 34 2d 32 2e 34 33 2c 34 2e 31 38 2d 33 2e 39 34 63 30 2e 36 2d 30 2e 37 33 2c 31 2e 32 34 2d 31 2e 34 31 2c 31 2e 39 31 2d 32 2e 30 37 43 31 38 32 2e 32 35 2c 32 32 39 2e 37 32 2c 31 38 32 2e 37 32 2c 32 32 32 2e 38 35 2c 31 37 39 2e 38 35 2c 32 31 38 2e 38 31 7a 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 31 38 33 2e 39 35 2c 33 30 37 2e 39 35 63 30 2e 33 32 2d 31 2e 32 34 2c 30 2e 34 Data Ascii: .93c0.57-1.28,1.22-2.52,1.95-3.71c1.06-1.32,2.2-2.57,3.49-3.69c-0.85,0.72-1.7,1.44-2.56,2.16c1.52-1.26,2.94-2.43,4.18-3.94c0.6-0.73,1.24-1.41,1.91-2.07C182.25,229.72,182.72,222.85,179.85,218.81z"/><path class="st5" d="M183.95,307.95c0.32-1.24,0.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49782	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	534	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:37 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-nv9aNLKF' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-24 12:19:37 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-24 12:19:37 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-24 12:19:37 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-11-24 12:19:37 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-11-24 12:19:37 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-11-24 12:19:38 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-11-24 12:19:38 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-11-24 12:19:38 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-11-24 12:19:38 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-11-24 12:19:38 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49778	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:36 UTC	529	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:37 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 65296f14d7bfd924180365b65e88670d ETag: "0bd53d90241e09924ee4fe35199b72f0" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: ZSlvFNe/2SQYA2W2XohnDQ== Expires: Sun, 24 Nov 2024 12:19:39 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-11-24 12:19:37 UTC	876	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-11-24 12:19:37 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-24 12:19:37 UTC	3092	IN	Data Raw: 2a 31 37 33 32 34 34 39 35 37 39 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 38 34 35 33 32 38 36 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1732449579,,JIT Construction: v1018453286,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	172.217.17.34	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:37 UTC	1226	OUT	GET /pagead/viewthroughconversion/10947617392/?random=1732450766497&cv=11&fst=1732450766497&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-11-24 12:19:38 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 24 Nov 2024 12:19:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkvQPM2qNLJmqkFgp-VubWtSXBh0khAjkCo4VGLx_o7vokLCSzGk-pjs11g; expires=Tue, 24-Nov-2026 12:19:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-24 12:19:38 UTC	379	IN	Data Raw: 31 32 39 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 63 29 7b 69 66 28 62 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 62 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 62 3b 62 5b 61 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 62 29 7b 62 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1298(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(b,a,c){if(b==Array.prototype\|\|b==Object.prototype)return b;b[a]=c.value;return b};function k(b){b=["object"==typeof globalThis&&global
2024-11-24 12:19:38 UTC	1390	IN	Data Raw: 2b 61 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 62 2c 61 2c 63 29 7b 69 66 28 21 63 7c 7c 62 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 61 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 62 5b 61 5d 3b 63 3d 62 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +a){var c=b[a];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(b,a,c){if(!c\|\|b!=null){c=t[a];if(c==null)return b[a];c=b[c];return c!==voi
2024-11-24 12:19:38 UTC	1390	IN	Data Raw: 4f 62 6a 65 63 74 2c 7b 7d 2c 44 29 3b 61 26 26 28 61 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 28 63 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 61 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 61 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 63 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 61 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 64 3d 7a 2e 66 65 74 63 68 28 62 2c 63 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 69 66 28 61 26 26 61 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 72 65 Data Ascii: Object,{},D);a&&(a.attributionReporting&&(c.attributionReporting=a.attributionReporting),a.browsingTopics&&(c.browsingTopics=a.browsingTopics));try{var d=z.fetch(b,c);if(d)return d.then(function(){}).catch(function(){}),!0}catch(e){}}if(a&&a.noFallback)re
2024-11-24 12:19:38 UTC	1390	IN	Data Raw: 7d 3b 66 75 6e 63 74 69 6f 6e 20 55 28 62 2c 61 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 2d 2d 67 3b 69 66 28 67 3c 3d 30 29 7b 76 61 72 20 6c 3b 28 6c 3d 62 2e 47 6f 6f 67 6c 65 62 51 68 43 73 4f 29 7c 7c 28 6c 3d 7b 7d 29 3b 76 61 72 20 4f 3d 6c 5b 61 5d 3b 4f 26 26 28 64 65 6c 65 74 65 20 6c 5b 61 5d 2c 28 6c 3d 4f 5b 30 5d 29 26 26 6c 2e 63 61 6c 6c 26 26 6c 28 29 29 7d 7d 64 3d 64 3d 3d 3d 76 6f 69 64 20 30 3f 5b 5d 3a 64 3b 66 6f 72 28 76 61 72 20 67 3d 63 2e 6c 65 6e 67 74 68 2b 31 2c 66 3d 7b 67 3a 30 7d 3b 66 2e 67 3c 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 Data Ascii: };function U(b,a,c,d){function e(){--g;if(g<=0){var l;(l=b.GooglebQhCsO)\|\|(l={});var O=l[a];O&&(delete l[a],(l=O[0])&&l.call&&l())}}d=d===void 0?[]:d;for(var g=c.length+1,f={g:0};f.g<c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!
2024-11-24 12:19:38 UTC	219	IN	Data Raw: 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 64 61 74 61 5c 78 33 64 65 76 65 6e 74 25 33 44 67 74 61 67 2e 63 6f 6e 66 69 67 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 48 66 75 44 50 6e 4a 73 5a 59 38 51 6d 36 34 69 66 65 6e 54 53 62 31 32 6f 59 7a 61 38 4f 50 36 4e 6c 7a 43 50 7a 65 37 76 54 2d 73 45 56 5a 57 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 33 31 38 33 35 30 34 37 30 32 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ledge\x3d1\x26data\x3devent%3Dgtag.config\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7dHfuDPnJsZY8Qm64ifenTSb12oYza8OP6NlzCPze7vT-sEVZW\x26random\x3d3183504702\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-11-24 12:19:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49784	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:37 UTC	1494	OUT	GET /mobile/img/home/2024/Akikah-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:38 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:37 GMT Content-Type: image/svg+xml Content-Length: 10050 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2742" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761;Path=/
2024-11-24 12:19:38 UTC	2473	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:38 UTC	2824	IN	Data Raw: 31 2e 33 37 63 30 2c 30 2d 31 34 2e 30 32 2c 34 34 2e 32 33 2c 32 33 2e 34 37 2c 31 30 30 2e 38 31 63 30 2c 30 2c 33 36 2e 35 39 2c 35 35 2e 36 33 2c 38 38 2e 31 38 2c 35 30 63 30 2c 30 2c 35 35 2e 37 38 2d 35 2e 39 39 2c 38 36 2e 30 34 2d 34 37 2e 34 0a 09 09 09 63 30 2c 30 2c 33 39 2e 31 39 2d 34 36 2e 32 38 2d 31 2e 35 35 2d 36 36 2e 33 33 63 30 2c 30 2d 32 32 2e 33 38 2d 31 33 2e 30 39 2d 34 34 2e 35 32 2d 31 37 2e 33 36 43 33 31 30 2e 38 33 2c 33 33 31 2e 31 2c 32 35 32 2e 32 37 2c 32 35 38 2e 30 34 2c 31 35 39 2e 32 31 2c 33 31 31 2e 33 37 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 33 35 35 2e 33 35 2c 33 34 38 2e 34 37 63 30 2c 30 2d 32 32 2e 33 38 2d 31 33 2e 30 39 2d 34 34 2e 35 32 2d 31 37 2e 33 36 63 Data Ascii: 1.37c0,0-14.02,44.23,23.47,100.81c0,0,36.59,55.63,88.18,50c0,0,55.78-5.99,86.04-47.4c0,0,39.19-46.28-1.55-66.33c0,0-22.38-13.09-44.52-17.36C310.83,331.1,252.27,258.04,159.21,311.37z"/><path class="st4" d="M355.35,348.47c0,0-22.38-13.09-44.52-17.36c
2024-11-24 12:19:38 UTC	4753	IN	Data Raw: 74 68 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 64 3d 22 4d 32 32 35 2e 33 32 2c 33 30 35 2e 34 39 63 30 2e 30 31 2c 30 2c 30 2e 30 38 2c 30 2e 30 31 2c 30 2e 32 34 2c 30 2e 30 33 63 30 2e 31 36 2c 30 2e 30 32 2c 30 2e 34 2c 30 2e 30 36 2c 30 2e 37 2c 30 2e 31 63 30 2e 36 2c 30 2e 30 39 2c 31 2e 34 35 2c 30 2e 32 32 2c 32 2e 34 35 2c 30 2e 33 35 0a 09 09 09 63 30 2e 35 2c 30 2e 30 37 2c 31 2e 30 33 2c 30 2e 31 33 2c 31 2e 35 38 2c 30 2e 31 38 63 30 2e 35 35 2c 30 2e 30 35 2c 31 2e 31 33 2c 30 2e 31 31 2c 31 2e 37 32 2c 30 2e 31 33 63 30 2e 33 2c 30 2e 30 32 2c 30 2e 35 39 2c 30 2e 30 33 2c 30 2e 38 39 2c 30 2e 30 34 63 30 2e 33 2c 30 2e 30 31 2c 30 2e 36 2c 30 2c 30 2e 39 2c 30 2e 30 31 0a 09 09 09 63 30 2e 33 2d 30 2e 30 31 2c 30 2e 36 2c 30 2c 30 2e 39 Data Ascii: th class="st10" d="M225.32,305.49c0.01,0,0.08,0.01,0.24,0.03c0.16,0.02,0.4,0.06,0.7,0.1c0.6,0.09,1.45,0.22,2.45,0.35c0.5,0.07,1.03,0.13,1.58,0.18c0.55,0.05,1.13,0.11,1.72,0.13c0.3,0.02,0.59,0.03,0.89,0.04c0.3,0.01,0.6,0,0.9,0.01c0.3-0.01,0.6,0,0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49786	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:37 UTC	1493	OUT	GET /mobile/img/home/2024/Wakaf-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:38 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/svg+xml Content-Length: 6339 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-18c3" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761;Path=/
2024-11-24 12:19:38 UTC	1062	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:38 UTC	2824	IN	Data Raw: 37 39 2c 31 31 31 2e 31 38 2c 39 32 2e 34 32 2c 31 38 34 2e 36 32 2c 37 36 2e 32 37 0a 09 09 43 33 38 31 2e 37 33 2c 33 39 39 2e 39 2c 34 34 31 2e 33 32 2c 33 30 36 2e 37 31 2c 34 32 30 2e 35 39 2c 32 31 32 2e 34 37 7a 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 64 65 66 73 3e 0a 09 09 3c 63 69 72 63 6c 65 20 69 64 3d 22 53 56 47 49 44 5f 31 5f 22 20 63 78 3d 22 32 35 30 22 20 63 79 3d 22 32 35 30 22 20 72 3d 22 31 37 34 2e 37 31 22 2f 3e 0a 09 3c 2f 64 65 66 73 3e 0a 09 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 53 56 47 49 44 5f 30 30 30 30 30 30 33 31 31 37 35 31 38 32 39 33 31 36 31 32 31 34 30 34 31 30 30 30 30 30 31 36 37 35 35 32 32 31 31 35 37 37 39 32 38 39 31 38 30 36 5f 22 3e 0a 09 09 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 53 56 Data Ascii: 79,111.18,92.42,184.62,76.27C381.73,399.9,441.32,306.71,420.59,212.47z"/></g><g><defs><circle id="SVGID_1_" cx="250" cy="250" r="174.71"/></defs><clipPath id="SVGID_00000031175182931612140410000016755221157792891806_"><use xlink:href="#SV
2024-11-24 12:19:38 UTC	2453	IN	Data Raw: 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 32 37 38 2e 33 37 2c 33 36 32 2e 35 39 63 30 2c 31 38 2e 31 36 2c 32 36 2e 30 32 2c 33 31 2e 32 35 2c 35 38 2e 31 31 2c 33 31 2e 32 35 73 35 38 2e 31 31 2d 31 33 2e 30 39 2c 35 38 2e 31 31 2d 33 31 2e 32 35 76 2d 31 31 2e 31 36 48 32 37 38 2e 33 37 4c 32 37 38 2e 33 37 2c 33 36 32 2e 35 39 7a 22 2f 3e 0a 09 09 09 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 73 74 38 22 20 63 78 3d 22 33 33 36 2e 34 39 22 20 63 79 3d 22 33 35 31 2e 34 33 22 20 72 78 3d 22 35 38 2e 31 31 22 20 72 79 3d 22 33 31 2e 32 35 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 38 22 20 64 3d 22 4d 32 38 37 2e 36 34 2c 33 35 31 2e 34 33 63 30 2d 37 2e 34 35 2c 35 2e 33 36 2d 31 34 2e 32 31 2c 31 35 Data Ascii: <path class="st7" d="M278.37,362.59c0,18.16,26.02,31.25,58.11,31.25s58.11-13.09,58.11-31.25v-11.16H278.37L278.37,362.59z"/><ellipse class="st8" cx="336.49" cy="351.43" rx="58.11" ry="31.25"/><path class="st8" d="M287.64,351.43c0-7.45,5.36-14.21,15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49793	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:37 UTC	1246	OUT	GET /mobile/js/app.min.js HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450775\|1732450761
2024-11-24 12:19:38 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1423581 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-15b8dd" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761;Path=/
2024-11-24 12:19:38 UTC	2445	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e Data Ascii: /****/ (function(modules) { // webpackBootstrap/**/ // The module cache/**/ var installedModules = {};/**//**/ // The require function/**/ function __webpack_require__(moduleId) {/**//****/ // Check if module is in
2024-11-24 12:19:38 UTC	11296	IN	Data Raw: 65 72 61 62 6c 65 3a 20 74 72 75 65 2c 20 76 61 6c 75 65 3a 20 76 61 6c 75 65 20 7d 29 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 69 66 28 6d 6f 64 65 20 26 20 32 20 26 26 20 74 79 70 65 6f 66 20 76 61 6c 75 65 20 21 3d 20 27 73 74 72 69 6e 67 27 29 20 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 76 61 6c 75 65 29 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 6e 73 2c 20 6b 65 79 2c 20 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 20 72 65 74 75 72 6e 20 76 61 6c 75 65 5b 6b 65 79 5d 3b 20 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 6b 65 79 29 29 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 72 65 74 75 72 6e 20 6e 73 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 67 65 74 44 65 66 61 Data Ascii: erable: true, value: value });/****/ if(mode & 2 && typeof value != 'string') for(var key in value) __webpack_require__.d(ns, key, function(key) { return value[key]; }.bind(null, key));/**/ return ns;/**/ };/**//****/ // getDefa
2024-11-24 12:19:38 UTC	16384	IN	Data Raw: 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 3b 20 2f 2f 20 4f 6e 20 65 61 63 68 20 75 70 64 61 74 65 20 63 79 63 6c 65 2c 20 74 68 65 20 60 6d 6f 64 69 66 69 65 72 73 44 61 74 61 60 20 70 72 6f 70 65 72 74 79 20 66 6f 72 20 65 61 63 68 20 6d 6f 64 69 66 69 65 72 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 73 20 66 69 6c 6c 65 64 20 77 69 74 68 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 61 74 61 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 6d 6f 64 69 66 69 65 72 2e 20 54 68 69 73 20 6d 65 61 6e 73 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 74 20 64 6f 65 73 6e 27 74 20 70 65 72 73 69 73 74 20 61 6e 64 20 69 73 20 66 72 65 73 68 20 6f 6e 20 65 61 63 68 20 75 70 64 61 74 65 2e 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 6f 20 65 6e 73 75 72 65 20 70 65 72 73 69 73 74 Data Ascii: ons.placement; // On each update cycle, the `modifiersData` property for each modifier // is filled with the initial data specified by the modifier. This means // it doesn't persist and is fresh on each update. // To ensure persist
2024-11-24 12:19:38 UTC	11856	IN	Data Raw: 2a 2a 2a 2f 20 7d 29 2c 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: */ }),// "./node_modules/@popperjs/core/lib/dom-utils/getComputedStyle.js":/!**********************************************************************!\ !* ./node_modules/@popperjs/core/lib/dom-utils/getComputedStyle.js ! \**************
2024-11-24 12:19:39 UTC	5648	IN	Data Raw: 20 20 76 61 72 20 63 75 72 72 65 6e 74 4e 6f 64 65 20 3d 20 4f 62 6a 65 63 74 28 5f 67 65 74 50 61 72 65 6e 74 4e 6f 64 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 35 5f 5f 5b 22 64 65 66 61 75 6c 74 22 5d 29 28 65 6c 65 6d 65 6e 74 29 3b 0a 0a 20 20 77 68 69 6c 65 20 28 4f 62 6a 65 63 74 28 5f 69 6e 73 74 61 6e 63 65 4f 66 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 33 5f 5f 5b 22 69 73 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 5d 29 28 63 75 72 72 65 6e 74 4e 6f 64 65 29 20 26 26 20 5b 27 68 74 6d 6c 27 2c 20 27 62 6f 64 79 27 5d 2e 69 6e 64 65 78 4f 66 28 4f 62 6a 65 63 74 28 5f 67 65 74 4e 6f 64 65 4e 61 6d 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 Data Ascii: var currentNode = Object(_getParentNode_js__WEBPACK_IMPORTED_MODULE_5__["default"])(element); while (Object(_instanceOf_js__WEBPACK_IMPORTED_MODULE_3__["isHTMLElement"])(currentNode) && ['html', 'body'].indexOf(Object(_getNodeName_js__WEBPACK_IMPORTE
2024-11-24 12:19:39 UTC	10736	IN	Data Raw: 65 74 53 63 72 6f 6c 6c 50 61 72 65 6e 74 28 4f 62 6a 65 63 74 28 5f 67 65 74 50 61 72 65 6e 74 4e 6f 64 65 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 30 5f 5f 5b 22 64 65 66 61 75 6c 74 22 5d 29 28 6e 6f 64 65 29 29 3b 0a 7d 0a 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 0a 2f 2a 2a 2a 2f 20 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 2f 6c 69 62 2f 64 6f 6d 2d 75 74 69 6c 73 2f 67 65 74 56 69 65 77 70 6f 72 74 52 65 63 74 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 Data Ascii: etScrollParent(Object(_getParentNode_js__WEBPACK_IMPORTED_MODULE_0__["default"])(node));}/*/ }),// "./node_modules/@popperjs/core/lib/dom-utils/getViewportRect.js":/!*********************************************************************!\ !
2024-11-24 12:19:39 UTC	5648	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 21 20 65 78 70 6f 72 74 73 20 70 72 6f 76 69 64 65 64 3a 20 64 65 66 61 75 6c 74 20 2a 2f 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 0a 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 28 62 69 6e 64 69 6e 67 29 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 Data Ascii: *************************************************//! exports provided: default //*/ (function(module, __webpack_exports__, __webpack_require__) {"use strict";__webpack_require__.r(__webpack_exports__);/ harmony export (binding) */ __webpack_re
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 28 62 69 6e 64 69 6e 67 29 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 22 6d 6f 64 69 66 69 65 72 50 68 61 73 65 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 6d 6f 64 69 66 69 65 72 50 68 61 73 65 73 3b 20 7d 29 3b 0a 76 61 72 20 74 6f 70 20 3d 20 27 74 6f 70 27 3b 0a 76 61 72 20 62 6f 74 74 6f 6d 20 3d 20 27 62 6f 74 74 6f 6d 27 3b 0a 76 61 72 20 72 69 67 68 74 20 3d 20 27 72 69 67 68 74 27 3b 0a 76 61 72 20 6c 65 66 74 20 3d 20 27 6c 65 66 74 27 3b 0a 76 61 72 20 61 75 74 6f 20 3d 20 27 61 75 74 6f 27 3b 0a 76 61 72 20 62 61 73 65 50 6c 61 63 65 6d 65 6e 74 73 20 3d 20 5b 74 6f 70 Data Ascii: * harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "modifierPhases", function() { return modifierPhases; });var top = 'top';var bottom = 'bottom';var right = 'right';var left = 'left';var auto = 'auto';var basePlacements = [top
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 34 5f 5f 5b 22 64 65 66 61 75 6c 74 22 5d 29 28 62 61 73 65 50 6c 61 63 65 6d 65 6e 74 29 3b 0a 20 20 76 61 72 20 69 73 56 65 72 74 69 63 61 6c 20 3d 20 5b 5f 65 6e 75 6d 73 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 38 5f 5f 5b 22 6c 65 66 74 22 5d 2c 20 5f 65 6e 75 6d 73 5f 6a 73 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 38 5f 5f 5b 22 72 69 67 68 74 22 5d 5d 2e 69 6e 64 65 78 4f 66 28 62 61 73 65 50 6c 61 63 65 6d 65 6e 74 29 20 3e 3d 20 30 3b 0a 20 20 76 61 72 20 6c 65 6e 20 3d 20 69 73 56 65 72 74 69 63 61 6c 20 3f 20 27 68 65 69 67 68 74 27 20 3a 20 27 77 69 64 74 68 27 3b 0a 0a 20 20 69 66 20 28 21 Data Ascii: WEBPACK_IMPORTED_MODULE_4__["default"])(basePlacement); var isVertical = [_enums_js__WEBPACK_IMPORTED_MODULE_8__["left"], _enums_js__WEBPACK_IMPORTED_MODULE_8__["right"]].indexOf(basePlacement) >= 0; var len = isVertical ? 'height' : 'width'; if (!
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 74 41 78 69 73 2c 0a 20 20 20 20 20 20 73 70 65 63 69 66 69 65 64 46 61 6c 6c 62 61 63 6b 50 6c 61 63 65 6d 65 6e 74 73 20 3d 20 6f 70 74 69 6f 6e 73 2e 66 61 6c 6c 62 61 63 6b 50 6c 61 63 65 6d 65 6e 74 73 2c 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 20 3d 20 6f 70 74 69 6f 6e 73 2e 70 61 64 64 69 6e 67 2c 0a 20 20 20 20 20 20 62 6f 75 6e 64 61 72 79 20 3d 20 6f 70 74 69 6f 6e 73 2e 62 6f 75 6e 64 61 72 79 2c 0a 20 20 20 20 20 20 72 6f 6f 74 42 6f 75 6e 64 61 72 79 20 3d 20 6f 70 74 69 6f 6e 73 2e 72 6f 6f 74 42 6f 75 6e 64 61 72 79 2c 0a 20 20 20 20 20 20 61 6c 74 42 6f 75 6e 64 61 72 79 20 3d 20 6f 70 74 69 6f 6e 73 2e 61 6c 74 42 6f 75 6e 64 61 72 79 2c 0a 20 20 20 20 20 20 5f 6f 70 74 69 6f 6e 73 24 66 6c 69 70 56 61 72 69 61 74 69 6f 20 3d 20 6f 70 Data Ascii: tAxis, specifiedFallbackPlacements = options.fallbackPlacements, padding = options.padding, boundary = options.boundary, rootBoundary = options.rootBoundary, altBoundary = options.altBoundary, _options$flipVariatio = op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49795	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	1254	OUT	GET /mobile/js/sweetalert2.min.js HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450775\|1732450761
2024-11-24 12:19:38 UTC	467	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 47949 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-bb4d" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761;Path=/
2024-11-24 12:19:38 UTC	2449	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 53 77 65 65 74 61 6c 65 72 74 32 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==ty
2024-11-24 12:19:39 UTC	11296	IN	Data Raw: 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 6f 50 72 6f 6d 69 73 65 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 72 65 74 75 72 6e 20 62 28 74 29 3f 74 2e 74 6f 50 72 6f 6d 69 73 65 28 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 28 74 3d 74 29 26 26 74 2e 6a 71 75 65 72 79 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 22 2e 63 Data Ascii: ion"==typeof t.toPromise}function y(t){return b(t)?t.toPromise():Promise.resolve(t)}function w(t){return t&&Promise.resolve(t)===t}function C(t){return t instanceof Element\|\|"object"===r(t=t)&&t.jquery}function k(){return document.body.querySelector(".".c
2024-11-24 12:19:39 UTC	2824	IN	Data Raw: 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 74 65 78 74 61 72 65 61 22 5d 2c 44 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 49 74 5b 74 2e 69 6e 70 75 74 5d 29 72 65 74 75 72 6e 20 4b 28 27 55 6e 65 78 70 65 63 74 65 64 20 74 79 70 65 20 6f 66 20 69 6e 70 75 74 21 20 45 78 70 65 63 74 65 64 20 22 74 65 78 74 22 2c 20 22 65 6d 61 69 6c 22 2c 20 22 70 61 73 73 77 6f 72 64 22 2c 20 22 6e 75 6d 62 65 72 22 2c 20 22 74 65 6c 22 2c 20 22 73 65 6c 65 63 74 22 2c 20 22 72 61 64 69 6f 22 2c 20 22 63 68 65 63 6b 62 6f 78 22 2c 20 22 74 65 78 74 61 72 65 61 22 2c 20 22 66 69 6c 65 22 20 6f 72 20 22 75 72 6c 22 2c 20 67 6f 74 20 22 27 2e 63 6f 6e 63 61 74 28 74 2e 69 6e 70 75 74 2c 27 22 27 29 29 Data Ascii: ange","select","radio","checkbox","textarea"],Dt=function(t){if(!It[t.input])return K('Unexpected type of input! Expected "text", "email", "password", "number", "tel", "select", "radio", "checkbox", "textarea", "file" or "url", got "'.concat(t.input,'"'))
2024-11-24 12:19:39 UTC	11296	IN	Data Raw: 65 73 73 53 74 65 70 20 6c 69 6b 65 20 4a 53 20 61 72 72 61 79 73 20 73 74 61 72 74 73 20 66 72 6f 6d 20 30 29 22 29 2c 6f 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 74 3d 28 6e 3d 74 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 2c 76 74 28 74 2c 24 5b 22 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 5d 29 2c 55 28 74 2c 6e 29 2c 74 29 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 3d 3d 3d 72 26 26 76 74 28 74 2c 24 5b 22 61 63 74 69 76 65 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 22 5d 29 2c 65 21 3d 3d 6f 2e 70 72 6f 67 72 65 73 73 53 74 65 70 73 2e 6c 65 6e 67 74 68 2d 31 26 26 28 74 3d 6f 2c 65 3d 64 6f 63 75 6d Data Ascii: essStep like JS arrays starts from 0)"),o.progressSteps.forEach(function(t,e){var n,t=(n=t,t=document.createElement("li"),vt(t,$["progress-step"]),U(t,n),t);i.appendChild(t),e===r&&vt(t,$["active-progress-step"]),e!==o.progressSteps.length-1&&(t=o,e=docum
2024-11-24 12:19:39 UTC	2824	IN	Data Raw: 74 74 6f 6d 3d 22 22 2e 63 6f 6e 63 61 74 28 34 34 2c 22 70 78 22 29 29 7d 2c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 6b 28 29 3b 74 2e 6f 6e 74 6f 75 63 68 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3d 62 65 28 74 29 7d 2c 74 2e 6f 6e 74 6f 75 63 68 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 7d 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 2c 6e 3d 6b 28 29 3b 72 65 74 75 72 6e 21 79 65 28 74 29 26 26 21 77 65 28 74 29 26 26 28 65 3d 3d 3d 6e 7c 7c 21 28 63 74 28 6e 29 7c 7c 22 49 4e 50 55 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c Data Ascii: ttom="".concat(44,"px"))},ve=function(){var e,t=k();t.ontouchstart=function(t){e=be(t)},t.ontouchmove=function(t){e&&(t.preventDefault(),t.stopPropagation())}},be=function(t){var e=t.target,n=k();return!ye(t)&&!we(t)&&(e===n\|\|!(ct(n)\|\|"INPUT"===e.tagName\|
2024-11-24 12:19:39 UTC	1412	IN	Data Raw: 28 74 68 69 73 2e 72 75 6e 6e 69 6e 67 3d 21 30 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 6e 65 77 20 44 61 74 65 2c 74 68 69 73 2e 69 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 29 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 7d 7d 2c 7b 6b 65 79 3a 22 73 74 6f 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 75 6e 6e 69 6e 67 26 26 28 74 68 69 73 2e 72 75 6e 6e 69 6e 67 3d 21 31 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 69 64 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 2d 3d 6e 65 77 20 44 61 74 65 2d 74 68 69 73 2e 73 74 61 72 74 65 64 29 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 7d 7d 2c 7b 6b 65 79 Data Ascii: (this.running=!0,this.started=new Date,this.id=setTimeout(this.callback,this.remaining)),this.remaining}},{key:"stop",value:function(){return this.running&&(this.running=!1,clearTimeout(this.id),this.remaining-=new Date-this.started),this.remaining}},{key
2024-11-24 12:19:39 UTC	7060	IN	Data Raw: 69 73 20 6e 6f 74 20 76 61 6c 69 64 2c 20 64 65 66 61 75 6c 74 69 6e 67 20 74 6f 20 22 62 6f 64 79 22 27 29 2c 6e 2e 74 61 72 67 65 74 3d 22 62 6f 64 79 22 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 69 74 6c 65 26 26 28 74 2e 74 69 74 6c 65 3d 74 2e 74 69 74 6c 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 6a 6f 69 6e 28 22 3c 62 72 20 2f 3e 22 29 29 2c 6b 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 74 29 7b 76 61 72 20 65 3d 6b 28 29 2c 6e 3d 41 28 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 77 69 6c 6c 4f 70 65 6e 3f 74 2e 77 69 6c 6c 4f 70 65 6e 28 6e 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6f 6e 42 65 66 6f 72 65 4f 70 65 6e 26 26 74 2e 6f 6e 42 65 66 6f 72 65 4f 70 65 6e Data Ascii: is not valid, defaulting to "body"'),n.target="body"),"string"==typeof t.title&&(t.title=t.title.split("\n").join("<br />")),kt(t)}function je(t){var e=k(),n=A();"function"==typeof t.willOpen?t.willOpen(n):"function"==typeof t.onBeforeOpen&&t.onBeforeOpen
2024-11-24 12:19:39 UTC	2824	IN	Data Raw: 28 74 29 3a 63 6e 28 65 2c 6e 2c 6f 29 7d 29 7d 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 2e 73 68 6f 77 4c 6f 61 64 65 72 4f 6e 44 65 6e 79 26 26 4a 74 28 4c 28 29 29 2c 74 2e 70 72 65 44 65 6e 79 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 28 74 2e 70 72 65 44 65 6e 79 28 6e 2c 74 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 29 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 31 3d 3d 3d 74 3f 65 2e 68 69 64 65 4c 6f 61 64 69 6e 67 28 29 3a 65 2e 63 6c 6f 73 65 50 6f 70 75 70 28 7b 69 73 44 65 6e 69 65 64 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 6e 3a 74 7d 29 7d 29 3a 65 2e 63 6c 6f 73 65 50 6f 70 75 Data Ascii: (t):cn(e,n,o)})},un=function(e,t,n){t.showLoaderOnDeny&&Jt(L()),t.preDeny?Promise.resolve().then(function(){return y(t.preDeny(n,t.validationMessage))}).then(function(t){!1===t?e.hideLoading():e.closePopup({isDenied:!0,value:void 0===t?n:t})}):e.closePopu
2024-11-24 12:19:39 UTC	2824	IN	Data Raw: 76 61 72 20 74 2c 65 7d 2c 73 2e 64 65 6e 79 42 75 74 74 6f 6e 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 75 2c 28 74 3d 61 29 2e 64 69 73 61 62 6c 65 42 75 74 74 6f 6e 73 28 29 2c 76 6f 69 64 28 65 2e 72 65 74 75 72 6e 49 6e 70 75 74 56 61 6c 75 65 4f 6e 44 65 6e 79 3f 61 6e 28 74 2c 65 2c 22 64 65 6e 79 22 29 3a 75 6e 28 74 2c 65 2c 21 31 29 29 3b 76 61 72 20 74 2c 65 7d 2c 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 65 2c 61 2e 64 69 73 61 62 6c 65 42 75 74 74 6f 6e 73 28 29 2c 76 6f 69 64 20 74 28 51 2e 63 61 6e 63 65 6c 29 3b 76 61 72 20 74 7d 2c 73 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 Data Ascii: var t,e},s.denyButton.onclick=function(){return e=u,(t=a).disableButtons(),void(e.returnInputValueOnDeny?an(t,e,"deny"):un(t,e,!1));var t,e},s.cancelButton.onclick=function(){return t=e,a.disableButtons(),void t(Q.cancel);var t},s.closeButton.onclick=func
2024-11-24 12:19:39 UTC	3140	IN	Data Raw: 6d 73 2e 67 65 74 28 74 68 69 73 29 3b 55 28 65 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 2c 74 29 2c 65 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 24 5b 22 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 22 5d 2c 6e 2e 63 75 73 74 6f 6d 43 6c 61 73 73 26 26 6e 2e 63 75 73 74 6f 6d 43 6c 61 73 73 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 26 26 76 74 28 65 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 2c 6e 2e 63 75 73 74 6f 6d 43 6c 61 73 73 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 29 2c 72 74 28 65 2e 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 29 2c 28 65 3d 74 68 69 73 2e 67 65 74 49 6e 70 75 74 28 29 29 26 26 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: ms.get(this);U(e.validationMessage,t),e.validationMessage.className=$["validation-message"],n.customClass&&n.customClass.validationMessage&&vt(e.validationMessage,n.customClass.validationMessage),rt(e.validationMessage),(e=this.getInput())&&(e.setAttribut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49789	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	688	OUT	GET /sumbangan.com/public/sliders/661c7e2d24ea7_Sumbangan_New_Slider-03.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:38 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 811343 Connection: close x-oss-request-id: 674319DA7BFFD332386A275C Vary: Origin Accept-Ranges: bytes ETag: "C488260D3DC35794826B310CBF06C546" Last-Modified: Mon, 15 Apr 2024 01:09:01 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2755761614406019201 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: xIgmDT3DV5SCazEMvwbFRg== x-oss-server-time: 2
2024-11-24 12:19:38 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e5 e0 7a 7e 7a Data Ascii: JFIFC!"$"$C"z~z
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: d7 29 c6 24 dc dc 19 64 ab 92 4e 55 ca c9 ce b6 cd 92 ad ea 58 ea a6 32 d6 a7 17 3d 37 b8 da 45 9e db 28 60 46 74 db ed 3c bf a7 df 9a c5 23 7e 74 30 00 06 98 03 10 d0 00 36 98 c4 d1 80 00 53 00 1a 72 00 0c 4c 1a 76 21 a5 1a 21 b4 23 02 80 00 00 00 01 c0 05 09 a1 a0 81 a6 00 50 c7 00 08 00 34 14 34 c0 01 88 86 05 0d 30 69 83 4c 60 03 4e c6 20 62 68 c0 18 98 34 0d a1 24 27 40 10 86 00 02 1a 01 a1 80 a0 00 a5 10 69 84 64 88 8d 42 69 ab 00 00 41 30 43 08 b6 02 62 a1 82 18 21 80 00 00 00 28 04 03 08 8c 40 10 da 15 83 00 00 00 00 1a 11 80 00 1c c4 0e 9f 61 80 00 20 00 34 c0 01 80 00 03 4d 00 00 01 80 00 00 08 00 0d 30 00 00 00 20 69 80 00 00 01 40 03 02 00 01 a6 00 23 00 00 00 05 d9 f8 cf be f8 1f 43 a0 81 f8 1f d0 80 00 02 d5 6d 97 4c 7c f3 6e c7 59 fd 4b f2 Data Ascii: )$dNUX2=7E(`Ft<#~t06SrLv!!#P440iL`N bh4$'@idBiA0Cb!(@a 4M0 i@#CmL\|nYK
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 00 13 12 11 b0 9a ac 98 29 37 60 98 90 8d 8a 5a c9 b5 8c c6 83 0b 18 08 86 88 c6 6a 6a b7 32 23 31 d8 da 76 30 01 30 84 6c 52 d4 ad 25 a8 b4 2a 76 05 6e 6c ad cd a2 93 77 28 65 46 16 22 a2 c2 6a b2 c0 ac b4 8a 8b 42 b7 61 4a 43 66 31 b1 15 96 12 c2 6d d8 d8 ee 54 66 8a a3 72 9a c7 86 45 79 d5 44 c9 a8 13 16 2d 88 34 23 71 60 00 a3 31 62 4d a4 66 dd 91 26 ec ac b1 95 3b 19 59 68 95 3b 42 a9 58 25 65 8d 2a 94 dd 29 8e e5 b4 d0 01 12 92 96 b8 da 96 b2 c1 62 e4 24 23 68 53 39 35 26 a4 c3 61 62 8c d1 54 6e 53 54 ce 6c 24 3b 91 a6 80 21 a1 2b 40 00 02 21 2a a2 78 d8 e9 5e b7 23 5d cb db 32 93 3e 8b 21 18 cd 4a 28 68 63 88 92 8d 12 8c a2 76 57 66 b9 ca 4a 6c 29 8e e5 0d a4 21 64 1a 80 13 53 94 67 71 39 46 2c d9 53 c9 ad 6e cf 61 45 e7 2c 09 e9 a6 bd 26 a3 37 09 Data Ascii: )7`Zjj2#1v00lR%vnlw(eF"jBaJCf1mTfrEyD-4#q`1bMf&;Yh;BX%e)b$#hS95&abTnSTl$;!+@!*x^#]2>!J(hcvWfJl)!dSgq9F,SnaE,&7
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: c7 8c b8 bf 57 cb e8 fb 6d fe d3 c3 f6 f9 67 ac d9 e8 ee 33 7c 87 42 d8 4e 9f 3c 7b ef 77 5e f8 6b 4c 3d fe 3b f3 ff 00 07 f4 6f 22 eb e3 f1 e9 65 fa 7e 7f 71 8e d1 fc ef d0 f3 8f 4b 7e 93 a7 0c ff 00 1d d0 76 f2 fc e6 7b df 01 ec f8 f2 d9 5f da 79 f6 f1 7b dd 87 94 e1 f4 37 3e 5f 73 eb cf 9e a1 d5 b9 3f ab e5 4f a6 73 3f a0 39 fa 3c 86 9f a7 d1 c3 dd a1 e7 fd 13 94 f5 f2 e7 74 2d 0f 47 c7 5e 25 e7 b7 1a 7f 4f cd 72 8c f7 ca 4d 3b 90 01 75 de 47 dd fc ff 00 43 2b e7 be d7 c3 f3 d2 5b bd 9f 58 b8 f3 74 ee 79 07 3e f5 c5 f6 de be 5f 1b bf da 79 1e 1f 43 73 e6 76 5e c8 f9 ee 9e c9 c6 bb fc c9 75 de 43 de f3 df 3f e7 6e e5 c1 f3 d1 ee f6 5d 7b 58 f3 30 dd f1 fc 76 a6 33 ed 9d 3c 9e 3b 7f bc f3 1c 7e 8e 47 90 f4 de 9d 9e 67 ea 7d 1e 34 d7 0a c7 52 f5 fc 5e d1 Data Ascii: Wmg3\|BN<{w^kL=;o"e~qK~v{_y{7>_s?Os?9<t-G^%OrM;uGC+[Xty>_yCsv^uC?n]{X0v3<;~Gg}4R^
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 3d 7c 7d f3 80 77 68 f3 f5 7c ef f4 34 65 66 a3 83 77 8e 0d bf 37 7c c9 c4 ca e5 eb f9 f8 1f b3 e4 76 dd fe 87 7d e3 fa ff 00 3a ce 13 f6 fc 5b a7 5d 9a e5 d9 37 3a 6d c7 87 ef 7c f3 19 2f 5f c7 fa 07 0f 37 0b c7 f6 78 48 cf 67 c7 fa 3f ca 7a bf 27 e4 fb 1c 9f e8 5f 9b fd 8f 6f 0f 40 e4 3d e7 2f 97 af e7 cd df 68 d4 dc 7c f9 ed 7c 9f ab ed e3 ec bc 53 b5 f1 3e 3e df 25 d1 f9 c7 48 eb e3 ea 5f 3d 7d 09 f3 e7 2f 5e 9f ac f2 6e b3 d3 cf d0 be 6b fa 53 e6 ae 7d fa 47 4e e6 3d 37 1d b9 b7 37 fa 07 61 73 cd fa 42 f0 d9 eb e2 bd 37 20 b3 a7 97 ea 1e 11 d2 bd 87 3f 5f ca fe c7 bb d7 67 ca f8 3d 23 9a 5c 7d 55 a1 de e8 31 db e7 28 10 b8 fa 3b d8 7c b9 f4 4c e9 c4 75 9f 52 23 41 9d 2e 13 73 e4 3e 8b f9 d7 e8 bb cb 61 f3 5f d2 9f 34 5c 7d 25 77 0a ee d3 af 08 c3 fa Data Ascii: =\|}wh\|4efw7\|v}:[]7:m\|/_7xHg?z'_o@=/h\|\|S>>%H_=}/^nkS}GN=77asB7 ?_g=#\}U1(;\|LuR#A.s>a_4\}%w
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 60 5b 72 cb df 1c 08 ec 20 62 4e 71 95 b8 2a b6 a9 57 04 f1 0c ee fa 93 50 6c 24 03 ba 19 ba e7 29 0b 7c a3 5b 86 6d 78 d6 d1 8e c8 14 dc 51 09 ab 73 30 72 b5 8c b9 46 cd f0 8c 65 42 bc 5b 56 3a 63 19 b0 6b 11 5b 5e 75 1e bf c7 ba 56 3d 9d 33 5d b1 c6 e3 f5 b9 d6 b3 7f a3 f2 fa b1 d5 d4 f3 f4 df 66 26 4e b8 c0 70 cd 9b 85 98 f4 4a 6a 73 a4 af 85 ca ae ae 44 e7 5c ea f9 d7 66 b9 d9 28 cb 58 70 b5 59 4c 6c 8c ae 16 c2 ab 52 84 46 ab 6a 2b c2 cb c5 c6 f5 58 d9 5a c9 36 19 78 59 eb 0c 5d 8e 2e b1 3b f4 f7 62 6c a1 5e 47 2d c6 d8 45 9c a3 02 1d 78 66 e3 e0 60 76 f3 67 e0 61 63 ed 91 9b ab da f3 f4 67 94 3c 6f 2e cc 4b b7 8b a7 0b 06 a4 45 56 16 22 04 31 01 65 41 9d b1 d1 87 a7 cf f1 93 e9 9f 6f 67 86 c9 de 7d a5 7a 0c ed e7 37 1e d9 59 89 8d b8 92 79 aa 7d 65 Data Ascii: `[r bNq*WPl$)\|[mxQs0rFeB[V:ck[^uV=3]f&NpJjsD\f(XpYLlRFj+XZ6xY].;bl^G-Exf`vgacg<o.KEV"1eAog}z7Yy}e
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 87 b2 f3 fc 3e 87 8a ab 2f 1f cb ec a5 4a 32 82 27 46 0a 5a 55 92 88 57 7d 49 5e 2e 6e 0b 78 38 f6 e0 5b e8 b6 de 2b d1 5e 3b 5a ae 8c 55 5d b1 74 c2 79 2a 6e 76 42 6b 3b 6a b2 22 d8 b3 70 69 39 57 22 6e 12 96 4e 0e cb 65 09 92 70 26 ac 9d 56 5a a5 5c e2 e4 d6 b1 11 c5 55 f8 f6 ac 90 5c b1 4e 21 1b 14 4d 5b 5e b9 96 e3 ca cb 2a 92 aa 67 02 6e e8 b4 83 1d 39 41 dc ca 13 25 a9 4e 32 c9 b3 59 ad 36 42 bb eb 13 52 57 19 92 46 53 8d 52 a4 a6 98 49 21 19 c5 2b 84 e1 2c ac ae e9 54 d3 b4 8b 48 93 8b 52 13 c9 42 d8 d2 94 66 62 92 8b 53 94 54 96 d3 76 3b 53 85 90 90 68 a9 4a 16 59 07 27 64 21 74 22 88 5d 54 d5 34 5f 53 58 3a 2f 49 ad b8 f1 74 ec fc ef 5e 7b ac 9d 06 c6 5d de 4e bb 27 3b ca 9e 3d b1 93 7e 35 f9 64 59 44 ea d2 32 50 09 09 45 d5 96 55 2b 2d 51 68 21 Data Ascii: >/J2'FZUW}I^.nx8[+^;ZU]tynvBk;j"pi9W"nNep&VZ\U\N!M[^gn9A%N2Y6BRWFSRI!+,THRBfbSTv;ShJY'd!t"]T4_SX:/It^{]N';=~5dYD2PEU+-Qh!
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: d9 52 30 3d af 69 63 b9 e1 90 38 49 19 61 47 cf f9 dc 9c 2e 30 4f 24 12 71 b5 54 7e e4 2c e2 38 01 c5 05 29 c0 67 9f 24 6d ca 68 e4 2a a1 d9 70 e4 80 65 f2 bb 88 ef e6 a1 6f 0b 7f f6 5c b1 87 89 18 58 ee 78 a4 0f 12 30 b0 9f 2e 49 0f 54 d7 10 81 ce f0 3b 12 13 d2 53 c5 24 2d e1 63 bf 70 a1 e7 39 ea cf 2d d8 dc a6 8e 59 df 81 e6 5c 37 1d 4b ff 00 c6 ce 4a 76 7f ec e9 18 1e d9 18 63 76 d9 58 69 5d 77 8d e2 46 b9 85 bc af f3 d8 1c 20 72 17 91 9a 4f 86 01 99 3f 87 7c c5 79 03 d5 db 81 92 c1 ca e3 81 23 b8 9c ce ae 71 c9 da 21 80 4f 11 dc 0e 22 c1 81 ff 00 b3 a4 60 7b 64 61 8d dc 99 d8 64 18 5c 24 64 8d e0 76 ef f3 e4 69 ca 28 9c aa 7f 9c a2 3a b9 4a 7e 16 79 ef 13 50 e5 9d db 33 cb 68 db c4 e9 4e 4f 25 3b 3f f6 5e 47 34 b1 89 03 d8 58 ee 68 de 58 70 d9 58 e1 Data Ascii: R0=ic8IaG.0O$qT~,8)g$mh*peo\Xx0.IT;S$-cp9-Y\7KJvcvXi]wF rO?\|y#q!O"`{dad\$dvi(:J~yP3hNO%;?^G4XhXpX
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 64 a7 15 2b 93 8f 88 3c 61 b1 ea 2a 8b b8 28 ea e5 79 73 61 90 ba 39 da 1e e7 b4 ce f7 4b 2c 6e 0d 89 ef ff 00 19 f3 2f c2 cf c1 c4 1b 14 cf f8 69 de d6 92 38 9f 16 38 1c 38 90 21 ad 66 38 7c 91 2e 74 aa 57 b5 95 14 e4 16 3c 34 89 58 4b a7 88 b1 fc 7f fc b4 63 85 68 c7 b4 48 9e 3a 55 b1 48 a4 29 a9 a3 7c ac ac ae 25 c4 b8 93 9c a4 72 25 15 22 1e 71 26 26 ac f2 65 67 6c ac ac ac ac ac f2 e5 65 65 65 65 65 65 65 65 65 67 7c ac a2 76 6a 6a ca ca cf 3b 82 95 aa 66 2c e0 b1 c8 14 0a 05 65 02 9a 50 2b 28 1e 41 b6 56 56 79 87 36 77 1c b9 41 01 f6 19 51 4b 85 1c a9 ae d8 8c ab b5 b4 b1 cb 2b 3f f7 59 fe 9a 4a 71 4f 72 79 58 df 0b 0b 1b e1 63 90 78 47 90 6d 28 f8 69 c4 9d ab e4 e1 54 fd a0 4f 99 f8 e3 86 54 e8 58 e1 34 6f 62 61 f8 e7 19 43 aa 77 13 d8 32 a4 72 84 Data Ascii: d+<a*(ysa9K,n/i888!f8\|.tW<4XKchH:UH)\|%r%"q&&egleeeeeeeeeg\|vjj;f,eP+(AVVy6wAQK+?YJqOryXcxGm(iTOTX4obaCw2r
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: de df 57 33 29 e9 ee 15 92 d6 d4 6d a3 aa de 27 2a eb 1f 63 71 a2 8f b6 ab 1e 57 9a d1 43 45 3c b2 4d 2a d3 93 be 1b b2 bb d6 0a 1a 2a 89 e4 9e 55 60 99 d0 dd 56 b5 fa 65 a6 a3 ed 6e eb 52 dd 0d 24 6e 25 c5 41 2b e1 96 d9 53 de e8 ae 51 09 a8 15 82 94 52 db ee 15 2d a4 a5 ab a9 92 a6 7d b4 7d 5b de 1c 03 9b 57 1f 63 55 6a 8f b6 b8 ab bd 6b 68 69 6a ea 66 aa 97 6d 29 1f 05 aa a1 e2 38 5e ee 27 f3 d1 47 da d5 8e 83 57 3c f7 5b 25 88 04 06 05 ea f3 15 10 a9 a8 96 a2 55 a5 e9 05 3d be ae 66 d3 c1 70 ab 96 b6 a3 6d 1d 54 ee dd 5d a3 10 dc a9 19 da d4 b0 61 ba c2 42 28 6c 96 14 00 02 f3 78 8a 89 b5 35 12 d4 ca b4 bd 20 82 81 ee 0c 65 ea e7 25 74 fb 69 5a e7 45 58 b5 4c bd 9d a5 5a 22 ed ee 4b 5a 4b d3 97 4e c7 d9 da 66 91 b1 47 78 b8 cb 5f 3e da 3e b9 ed aa 5a Data Ascii: W3)m'cqWCE<M*U`VenR$n%A+SQR-}}[WcUjkhijfm)8^'GW<[%U=fpmT]aB(lx5 e%tiZEXLZ"KZKNfGx_>>Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49790	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	687	OUT	GET /sumbangan.com/public/sliders/6684cada3ae36_Sumbangan_Slider_Cukai.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:38 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 316513 Connection: close x-oss-request-id: 674319DACE5C5D323692DFE7 Vary: Origin Accept-Ranges: bytes ETag: "2CFA8B18E533D5677479028C0CBB2530" Last-Modified: Wed, 03 Jul 2024 03:51:54 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11941476468529353407 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: LPqLGOUz1Wd0eQKMDLslMA== x-oss-server-time: 2
2024-11-24 12:19:38 UTC	15774	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 05 73 09 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f8 41 eb f8 00 Data Ascii: JFIFC!"$"$Cs"A
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 3e 1d f3 de db e5 fa e5 c2 4c 6f cf 21 11 30 a0 22 60 44 c4 d4 45 a2 2a b5 54 c7 a5 9e bb da fc dc 38 f5 74 70 6a 33 db 61 ac 9b dd c9 cf 33 d7 cf c2 cf be 3d bb 68 ec ef c7 14 9a b5 4c 77 c7 9e b5 ad b1 ce b8 b5 ed 5e 7e 98 0d 00 00 00 01 37 a6 56 6b 9f 0e dd e7 bb 92 27 b7 cf 99 ad 99 66 c2 b3 bf 93 81 d9 ef e4 cf 13 1b e5 f4 7e c7 e7 de 83 e2 fb 98 b0 64 c7 9f 58 94 80 b0 94 b4 ae 54 60 ae cb 37 52 37 22 6b 4a bd 08 cd e7 57 a6 cd e5 d7 ac cd e4 3a e9 79 0e b0 e4 d7 b0 8e 35 7b 6c eb 87 5e eb 37 83 5f a0 62 fc f4 7d 13 37 e6 e3 e9 59 d7 cc d7 ea 18 bf 2d 1f 54 cd f9 48 fa c6 6f c9 47 d7 46 2f c9 3e b6 31 7e 4f 5f ec b9 79 df 33 a9 87 37 ea 7e 54 a1 db 9c a2 49 42 35 b8 7d 09 e8 fa 19 89 f1 6e d3 59 8b 5a b2 68 fc 9f 57 95 f9 6f d2 25 1f 3b db a3 f5 9f Data Ascii: >Lo!0"`DE*T8tpj3a3=hLw^~7Vk'f~dXT`7R7"kJW:y5{l^7_b}7Y-THoGF/>1~O_y37~TIB5}nYZhWo%;
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: ac 7a 3e 47 ec 7e 0b ec 2b c8 b5 a7 5f 7e 6d 9f 7d fc fb ed f8 f4 79 57 33 4e 35 ce df a1 7f 3b fd de 7a 6a df d0 33 67 a7 91 fa d7 94 fa 61 e2 df 61 f2 3f 59 ac 75 fe ab e5 3e 7f 3b f9 6d ef 6b e3 67 7d bf 8b fb 5f 3d df 2f aa f9 bf be e7 26 7e 0f 5f 89 73 c9 f9 df a1 f9 ee 9e 6f 66 f8 0f b5 f8 be 7e 9d fe df 17 9b 71 f2 d9 3d af 95 cb d9 ad 9b 4f 27 5f 2f c3 f1 fa dc 8e be 09 1a c3 d7 bc 87 d5 b9 fa bc eb e5 ba fc 2e 5e cf d0 fe 49 ea 9c 2e 7e 9f b1 f0 cf 75 f0 ae df 3f db 7c 3b da 3c 5f 58 f5 9f 85 fb 3f 3f 9b f6 1f 03 fb ff 00 ab c7 5f 8b b7 d4 7c bf 3f 4f 92 2d 59 b8 cf 87 6e e3 36 5a df af 92 f7 ad f7 c6 d6 8b 5e 76 bd 2d 71 68 95 ce 39 ba 5b 62 5c a4 df 12 da 91 32 e4 cb 5c 9a e4 89 5c 89 48 0a 04 49 00 46 6c 50 d7 57 e8 3e 29 37 ea 9d ef 0c 8c 77 Data Ascii: z>G~+_~m}yW3N5;zj3gaa?Yu>;mkg}_=/&~_sof~q=O'_/.^I.~u?\|;<_X??_\|?O-Yn6Z^v-qh9[b\2\\HIFlPW>)7w
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: d5 ab b7 56 29 24 92 4e 30 dc 6b 62 15 15 b5 53 88 aa 6a 22 0f ac ab 7b 58 e7 31 dd ba b5 4b 2c 92 ba 1a 89 e1 06 b6 b0 85 15 44 f0 8e dd 5a 9e e7 3d d0 5c 2b 21 8d ef 73 dd d7 58 ef 0f 99 21 c2 91 d9 40 65 31 8b 1d 05 15 04 86 32 c7 87 0e 03 c8 2a 42 a4 3e 4d 38 f1 8f d3 e5 61 63 cf d3 14 fc 9b 6a b9 cd cf ad 56 78 f6 c3 fa aa e7 7f 91 5e 24 c4 2b 49 7e 3a d7 4e e6 5e 8b 16 d5 85 8e 39 41 c8 3d 07 a1 22 12 21 22 0f 0b 7a dc b7 2c ac ac fc 49 18 0a 74 68 31 0c 84 1e 9a ef d4 b4 ed 2d 70 70 fd f3 88 68 91 db dd f3 27 f4 03 2a 36 2c 74 94 38 35 e5 86 19 04 88 79 2e 2a 42 9d e4 35 53 04 df 9d 85 85 8f 2a 9a 23 34 f0 30 47 0d 53 83 29 90 19 30 33 97 0f ea aa 5d ba 65 75 93 7d 52 d3 b0 f2 ad e4 e0 5e 67 ed 37 3c 2c 2d ab 6a 2c 5b 56 d5 b5 63 8e 56 e4 1e 84 88 Data Ascii: V)$N0kbSj"{X1K,DZ=\+!sX!@e12B>M8acjVx^$+I~:N^9A="!"z,Ith1-pph'6,t85y.B5S#40GS)03]eu}R^g7<,-j,[VcV
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: e4 62 70 5b 4a f1 e3 95 94 1c b7 a0 f4 1e 83 d0 7a dc b2 b2 89 f1 8f cb 07 f5 5a 5c ff 00 ec fa 2f 0d dd 6c ea 91 a8 7d a8 48 17 30 2e 60 45 e8 b8 a0 d2 4d 2f e3 71 97 fa e4 fe c4 55 2f e4 f4 5c 7f 03 86 97 f6 af 22 a2 66 41 0d ca b1 f5 b5 3d 5e aa 1b 7d 64 c9 96 1a f7 26 69 da 82 a2 d3 91 aa 3b 65 25 29 e9 a9 fc 89 dd 81 a3 3d 93 a3 56 7b e7 49 f8 c0 20 87 11 d4 50 43 ca d3 f6 c7 d7 d5 34 06 b7 c8 c8 f8 95 2e cb e3 19 7c ad dd 1c 6d 95 cd 8a 26 b1 56 3b ee 4d 1b 5a 65 90 11 38 42 46 1e 25 8c 28 c0 d5 c9 70 5f e6 6a e7 94 d3 91 c6 a1 db 63 9c e5 fe 44 43 ed 9b d7 aa e3 26 fa 9f d0 b8 e1 bc 34 84 1c db a2 d5 93 72 ed fd 38 58 45 ab 60 46 26 a7 40 13 a9 d1 a7 72 30 b8 22 d3 d1 95 94 1c b7 ad cb 72 67 8b 9b e9 e5 83 fa 9b 0b f6 5d 7a 2a 19 cc 81 e3 6b ba 8b Data Ascii: bp[JzZ\/l}H0.`EM/qU/\"fA=^}d&i;e%)=V{I PC4.\|m&V;MZe8BF%(p_jcDC&4r8XE`F&@r0"rg]z*k
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 2e 08 8c 26 b9 67 e1 e7 f4 64 22 d4 e8 c2 74 28 c4 e4 5a 47 c4 80 65 c3 a5 fe 8e f5 1d 50 1c 4a 9a fc 2e 6a 0f 59 0b c1 78 2d a1 16 23 1a d8 b0 51 eb 7a 81 0e 97 7a 4d e3 34 5f c7 cd 70 ca e5 f8 8f 28 fa 0f 5f 3a 56 a8 8f 17 14 02 c2 da bd 13 4f 17 0c 16 9c 84 ff 00 46 2f 0e 00 fc 07 84 c3 c1 e9 a8 7f 37 fa 47 e9 e7 c8 13 0f 12 51 76 16 e4 d3 f0 26 67 db 09 fb 48 53 33 c1 44 f2 c3 1c a1 c8 7e 95 c3 2a 58 11 05 aa 29 30 99 26 50 3d 45 14 e4 0f 1c f0 21 39 ab c4 20 f4 0f 4e 7c cc ac ac ac ac ac fe 87 0b 08 b5 16 04 62 0b 92 51 8d c1 10 47 9f 4c 10 e9 97 f8 f5 84 df 16 f0 f1 59 2b 7e 10 95 09 90 7a c8 5e 0b c1 48 3c 7a a5 3e 34 dd 52 fa 7a cc cf e3 f2 4f a3 3c f7 8f 06 fd af 1e 89 c3 c4 39 6e 5b 91 f1 4d 1c 5e 3c 23 3c 0a 2d e2 1d 83 f0 3d 08 e0 5a 83 51 08 Data Ascii: .&gd"t(ZGePJ.jYx-#QzzM4_p(_:VOF/7GQv&gHS3D~*X)0&P=E!9 N\|bQGLY+~z^H<z>4RzO<9n[M^<#<-=ZQ
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: c8 e5 95 8b 23 4a 34 47 e0 d1 1f 83 77 1f 83 77 1f 83 77 1f 83 75 13 75 13 75 13 75 12 54 7e 0e 71 65 2a 9a d7 fa cc 77 e5 f0 61 bc e5 5a db b2 12 de 44 6b ee b2 16 16 44 e9 ca 1d c8 51 94 d5 d1 e1 e5 6b 94 d5 4d 1c 8c 3d 3f f2 31 14 9b e6 88 53 94 fb 1e 1a 43 8b 4e cc a5 e7 45 5a 9a 15 ca 55 77 85 78 a5 3e 44 70 d2 64 e8 ca 05 05 3b 7d a5 2b ef 79 98 af 63 c3 ca d7 30 be e5 7f 3f 06 07 c9 e8 23 3f 9c bb f4 58 de 68 5e 95 bb 2b 9c e6 ca 54 d5 35 62 ae 23 da 23 93 7d f8 6e cc 33 6c 56 2d 12 d1 34 c4 6e c3 ad 26 6f 64 6f 64 6f a4 6f a4 6f a4 6f 99 0a 9a 8a 91 ba 29 4b 4c bd 1d cb fa 8c 77 e5 f0 61 7c e5 59 41 79 85 69 c7 ed 30 f0 b4 9d c9 c6 6d f2 65 45 78 73 30 de 42 a5 79 5d a4 51 fc b4 61 a4 ef 63 13 36 9d 91 41 ce dc 91 4e 33 4f ee 66 2b cc 8a 5e 74 55 Data Ascii: #J4GwwwuuuuT~qe*waZDkDQkM=?1SCNEZUwx>Dpd;}+yc0?#?Xh^+T5b##}n3lV-4n&ododoooo)KLwa\|YAyi0meExs0By]Qac6AN3Of+^tU
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 6a bc 1f ba e5 1c dc e9 37 70 59 af 6d 3a ec 74 27 1f 74 f5 a7 45 20 a3 9a 6f fa 26 2e e0 fe cb 28 ef 9d 01 1c 4d 2f 79 c0 05 9d 95 4f 9b f9 58 b9 d9 bc 51 7e 4b 27 2c 07 ba 71 54 38 a1 37 2f 23 5d 5a 10 13 58 d7 17 31 c2 a0 9b 23 85 b8 bc d1 17 bb 2a 96 80 54 e0 8e 6e 15 b9 67 b7 d1 c5 f3 b9 7a 49 e5 71 ea b9 7a 1c a2 46 9f cd 7a cd 99 b7 1c 1c 30 36 3f be 99 dc b3 96 ca 5e f8 ab b2 02 11 c7 94 3e 49 8e ee 1a 0d ef 95 24 03 6d 94 25 72 cd 1a b2 df f7 b4 e5 0e 1a d2 e1 d8 9e d6 fb 86 85 33 b9 67 a3 19 b1 ef 7b 97 a5 9e 57 1e ab 97 fd 3e 50 f6 9f cd 7a cc 9d 94 e0 77 1b 1d 33 e6 7b 08 75 2e 43 22 c9 49 92 ad ad 5d b9 7a 79 e4 73 bf 2d c1 57 26 9d c1 dc 1e 9d 0c cd cd 70 b0 43 03 33 9c ab 94 e5 0e 2e e0 c5 e8 27 91 ae fc d7 84 e8 66 6d 1c 18 7e eb f5 8b 39 Data Ascii: j7pYm:t'tE o&.(M/yOXQ~K',qT87/#]ZX1#*TngzIqzFz06?^>I$m%r3g{W>Pzw3{u.C"I]zys-W&pC3.'fm~9
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 17 eb 72 97 be 53 7f a6 e5 92 ff 00 4c ff 00 75 c8 ef 6b 88 2a 68 64 14 21 ca 08 58 2b ac 11 1f 9d aa 49 e5 68 77 24 35 41 e2 9d 92 e4 ad 6b 73 31 71 0a 08 dd 94 38 82 fb c3 53 3b eb 29 ee 0f ee a4 ec 0a 1e f8 fe e9 dd f6 a6 f7 1c a1 ee 2c a3 be 16 52 c7 0a 6b d5 64 e5 a3 60 e7 15 93 76 95 94 77 c7 f6 59 4f 7f 46 5e fa ca 7b ea 28 6b 40 f7 80 99 f8 68 47 ca d0 af 9c 30 7e 56 d1 36 49 9c e7 3d cd 26 a5 3b b5 3b fa 42 cc a3 be 16 52 78 48 88 8a f2 e8 81 0a 86 e2 8e 51 4d 48 db 8a c9 3f a6 7f bf c1 ae 91 fe 2b d1 e5 32 0f ba d7 e4 e4 ed 0b d3 e4 c4 77 4a e7 4b 3b c1 7a 39 e3 77 ea d1 bc 2b d8 d3 f6 5b 14 ec 5a 92 10 bd 1c 95 1d ab d2 45 55 af 1b 82 db a7 6a d5 70 3e d6 4a e5 1d bf 05 80 58 2c 4a c4 2d 90 56 b4 5f b2 c0 85 aa f5 71 05 6c ad 63 45 46 aa 3a a3 Data Ascii: rSLuk*hd!X+Ihw$5Aks1q8S;),Rkd`vwYOF^{(k@hG0~V6I=&;;BRxHQMH?+2wJK;z9w+[ZEUjp>JX,J-V_qlcEF:
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 54 a8 3b 8d c5 06 c7 7d 30 3b d6 ee 67 68 aa 7a 49 3e 87 4b 35 0e 6e 16 a3 a8 08 b2 ba f0 e7 fd 67 78 c0 32 d6 4d be d1 28 d1 a7 a8 75 e1 63 3e 9d 9f 39 ce 6a f4 61 f0 fa 61 f3 fc b8 48 ab 9c a9 0d b9 c5 3e 15 41 0c 4e 5b df 02 21 e7 fa c1 cb 62 f5 5c 35 69 30 20 e4 96 6e 43 0f ae cf a4 7d e7 d1 fe d8 7d 6e 7c 37 3c 7a 84 fd 50 82 6c 3c 19 8e d1 07 b9 2b 52 06 8c 82 16 9a 14 62 42 96 c5 ea b8 6a d2 20 41 49 ec dc 86 1f 5f c7 9f 4f 3e 33 9e 3d f1 9c a7 d6 b8 d3 8d 77 ab 4e 3a bd 9a f4 5d 27 d0 7e f3 e8 ff 00 6c 3e bd 3e 33 9e 3f 11 ce 10 4d d9 c3 4f 92 66 95 a3 13 c2 6c 68 73 66 83 c7 8b a0 c6 c5 d5 70 d4 11 c0 cc fc 45 a1 33 72 1e 01 2e 29 78 01 2a 64 9a c2 2e 22 08 12 b1 51 4b 83 16 2c b0 1f 82 ca 9c e1 82 c6 e1 04 39 cd 18 90 f0 81 54 15 e4 4a d0 b9 da Data Ascii: T;}0;ghzI>K5ngx2M(uc>9jaaH>AN[!b\5i0 nC}}n\|7<zPl<+RbBj AI_O>3=wN:]'~l>>3?MOflhsfpE3r.)x*d."QK,9TJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49792	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	688	OUT	GET /sumbangan.com/public/sliders/661c7e4845500_Sumbangan_New_Slider-04.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:38 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 938807 Connection: close x-oss-request-id: 674319DAF5E04B303476C23F Vary: Origin Accept-Ranges: bytes ETag: "7DDBA00979C735263BCFA18CCC486610" Last-Modified: Mon, 15 Apr 2024 01:09:28 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2394118236009863024 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: fdugCXnHNSY7z6GMzEhmEA== x-oss-server-time: 2
2024-11-24 12:19:38 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ea 71 6b af 25 Data Ascii: JFIFC!"$"$C"qk%
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: ad 94 67 79 4a 51 95 c3 13 b3 33 b2 f1 ae cb f9 0f ba c0 fc cf d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a b6 ad e7 86 4a 89 ff 00 50 fc 8d d3 ae 5a e7 26 84 64 44 92 00 10 ac 88 6d ba e7 94 f5 9f 83 fd 28 07 c6 fa 00 00 00 00 18 f9 06 b3 c2 ab f6 1e 27 fa 37 e6 2e 75 3f 67 02 8b a9 9b a2 32 a7 3d ee 9e 35 89 93 76 2d ba e7 94 ea 77 94 e3 18 1e 8f ad f2 0e c1 f8 9f be 01 f0 3e 88 05 00 02 69 38 96 9f 6d a7 fe 97 f9 a9 26 bb f3 48 83 52 75 a9 72 2c c7 be e2 ee 9f 8b ed ff 00 27 f5 18 1f 99 fa a0 0a 00 00 0b 5f 3e 55 f6 7e 7b a2 9b 3f 7b f9 ab a5 09 f4 e4 c0 45 19 42 15 73 ae 6a aa 2f a3 1d 68 ea bc ef b5 fe 63 ed cc 0f c8 fd 90 00 00 00 00 0f 01 e0 fb 77 0e fd b7 c1 75 15 fd ef 0c 29 9d 58 ee a2 42 74 94 54 5a b1 d5 24 ec be cf c6 7b 3f e7 bf 68 03 Data Ascii: gyJQ3*JPZ&dDm('7.u?g2=5v-w>i8m&HRur,'_>U~{?{EBsj/hcwu)XBtTZ${?h
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 11 99 44 04 31 50 00 09 50 25 51 94 26 81 13 52 13 42 32 89 14 d6 b6 84 2b 94 5a 4e 50 73 33 69 b2 91 1b 48 38 b6 a2 e3 ad fd 6c 07 7e 44 5c 68 4e 23 8b 88 93 8d 80 3a 4e 40 31 c2 1a 1c 93 01 a8 02 04 dc 64 b3 94 2c 94 ae c5 15 e8 7d 06 8b 4d de 06 7e 2a 79 ff 00 47 a1 f4 13 5a dc fc 69 5c e4 b7 1a aa d9 63 e5 91 e7 b7 3e 7e 6b d4 e0 5b 0d 66 dc ed 76 c6 23 0b 2a ab 27 09 ca dc 5c 20 44 53 56 45 35 54 b0 b1 26 81 a6 00 84 d4 86 c6 45 80 bc bf a8 f2 dc ba f9 fb 69 b7 c9 f4 2f c8 c7 bd 67 75 56 24 da 90 29 02 08 12 aa c4 27 16 36 34 02 54 29 24 23 25 2c 21 3a c7 10 21 55 91 4f 69 b9 f1 9e ef af 8f 8c 43 77 a3 fa 1f 92 00 b8 13 40 00 d2 a6 1d 4e 53 41 35 4e c8 89 11 83 9c 5d 8c 10 9c 9c 24 d5 00 e0 8c 90 30 10 a5 43 52 41 49 08 68 71 69 46 49 10 99 10 01 b6 Data Ascii: D1PP%Q&RB2+ZNPs3iH8l~D\hN#:N@1d,}M~yGZi\c>~k[fv#'\ DSVE5T&Ei/guV$)'64T)$#%,!:!UOiCw@NSA5N]$0CRAIhqiFI
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 7f 66 e2 3d b7 f3 bf 4b 76 07 e3 fe c8 00 78 cf 67 e1 fe 87 0e 6b 66 b6 ff 00 e8 5f 9c cc ae a1 23 8d 91 4c eb 85 f4 6f ce df 45 fe 67 eb 66 81 f9 4f a0 00 1c f7 a1 73 ef a3 c3 91 55 95 57 ef 7e 56 22 9a 9d 8c 8a f2 6e 25 d0 7c 1f bf f0 4e a8 d3 fc 07 da 00 04 d6 b3 f3 eb 91 fd 3b f2 d3 6e 5d 39 4a 52 9d e7 59 62 20 a7 08 c2 be 8e 87 f3 be 8f bb b1 3f e7 9f a2 00 53 53 b5 e6 1e ee 1e 17 b8 f0 6f 7f fa 8f 9d d4 c0 fc 4f d8 00 17 06 ef 3e 33 eb 79 f8 9d 95 3f dc fc cb 80 60 06 25 93 7d c5 19 cf 23 5e 62 c8 9a e1 91 3c 6b 6f 3b 6b 28 2b c4 ba 9c 7a 76 bd c3 e7 5e 9d f9 af af ef 84 ff 00 25 f5 00 15 60 e7 9b c8 06 34 00 18 36 72 bf ad e1 d7 c6 17 7f 40 fc cd d9 14 dd d3 84 9a 6c 8d 16 21 29 54 48 34 c8 a8 94 a1 31 80 47 16 78 59 b5 57 6c 38 f6 a3 17 33 13 9f Data Ascii: f=Kvxgkf_#LoEgfOsUW~V"n%\|N;n]9JRYb ?SSoO>3y?`%}#^b<ko;k(+zv^%`46r@l!)TH41GxYWl83
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: a5 fa 0f 6d f3 5e cf 5d 7e 93 f9 d7 e8 be 6a 70 1e ff 00 c6 3e b0 1e 8f cb fc fb 27 d6 f9 df 24 fd 4c 6b 7e 5c fa 8f e5 93 e8 2f 65 f2 de 45 7d 0b ea 3e 5e ea 8b ec 7e 64 fa ef e5 ec e3 55 9f a8 da 3c 19 bd 13 9f 74 3e fe 5e b1 09 72 ae 7f 5f a2 e7 fc c7 d3 35 e7 e8 1c 0b e8 ee 10 c4 bb 77 cc fb 2b cb b5 6c f8 3e 66 3d 3d eb 87 77 1e 70 eb ca fe 92 f9 4f ea b7 2b e5 85 f3 a4 ef d2 bd ef cb d9 13 9f d5 d8 f9 1c 7a fa 7a 07 cd ba 71 cb e9 fd 8f cc 79 0e 9f 43 fa 5f 97 7b 44 66 f0 1f aa fe 51 79 ec a9 13 cd 4e 16 7e 2e 7d 18 a0 ba 7a 98 80 00 01 96 6d 35 7b 3c f9 72 22 d6 bc 98 9a fc fd 7e 7d d1 03 5d c0 00 01 e6 62 65 e7 9d f1 23 9f 3d 18 f7 53 af 4a 03 5b 00 06 99 6d b1 9f 3e 35 d3 7d 1a da 11 ad e5 ec 34 b7 cf 3e e1 e0 db 7c 99 31 a1 d9 99 6e 2d dd 38 d8 Data Ascii: m^]~jp>'$Lk~\/eE}>^~dU<t>^r_5w+l>f==wpO+zzqyC_{DfQyN~.}zm5{<r"~}]be#=SJ[m>5}4>\|1n-8
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 4f 9c 86 22 06 21 b0 06 91 6c 01 ab 1a 71 51 43 38 d9 c9 3e 9e 09 38 bb 26 21 08 49 2d 75 dd 0c ea 98 ce 2d 2a 6f a6 6a 9a 2f a7 3d e9 93 ae 74 b2 ec 26 6c 9e 06 45 e5 64 27 2b 9a 23 93 5b 54 ca c7 2c 1c 8b 90 93 44 c0 1a 68 86 03 10 dc 12 5d 3c 69 59 91 2c 69 26 49 42 4b cc 6b 4b 54 63 65 8a a6 4c 8b 89 b5 2b 24 d4 ec 8b 94 ac 83 98 90 27 11 00 28 b8 ca 25 19 66 56 96 dd d6 87 de 7c ef 5e 2f 95 ec 7c 63 c1 ea 72 c7 97 e8 7e 55 c5 42 5a 56 c9 c4 44 63 24 d4 46 e0 92 76 32 01 28 b5 12 dc 6a 37 3b e4 eb b6 bd 72 a9 35 34 ad aa 55 92 e3 2b 84 30 00 23 19 85 30 b9 35 53 b1 c4 64 e5 60 57 87 33 95 87 49 98 00 80 00 00 26 08 60 86 80 00 94 65 9d f4 bc 7c ac 5f c1 fe bf 9c 7a 2f 37 d4 3f 4b f1 3c b7 94 eb fc 8b 1b 82 b1 fd bf 97 09 b9 32 98 5c 80 00 00 00 00 03 Data Ascii: O"!lqQC8>8&!I-u-*oj/=t&lEd'+#[T,Dh]<iY,i&IBKkKTceL+$'(%fV\|^/\|cr~UBZVDc$Fv2(j7;r54U+0#05Sd`W3I&`e\|_z/7?K<2\
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: ea 7c ab d7 cb ae 6f bc df aa fc d7 d6 f9 fa 5e 97 51 fb 5f 83 dc 31 f4 7e 8b f0 bf a1 f3 8b cc eb 7e df 83 dd 63 63 f8 6e dc 6e ed 9c 4b b6 f0 d7 88 e7 fe fb 9f 7d 9f 04 fb bf 07 ef 1f 2b dd e3 f9 c7 46 e6 ff 00 4b c7 d6 b3 f5 7b df ca 7d df 9f ee f4 5a 8f da fc 2e eb 83 ac dd 7e 13 f4 3e 75 79 5c 2f bb f3 fd be b9 73 8d cd e7 69 e2 3d bb 85 e7 dc ef a2 f3 bf b7 e0 97 65 e4 7d e3 e5 fb 31 74 18 bc df cd db b2 6d fc 97 ad f9 3e de 21 be f3 fb ff 00 d7 7c 5e a5 c8 ba ef 1f f8 de cd 2f bf e7 dd 03 ef 7c cf 79 c4 bb 6f 12 f8 fe fc 0e 9b cc 7a 7f d4 f1 fa bf 9f fe 80 f9 f3 e5 fb ba 97 b0 c5 c0 f9 3e cc 5c 8e 3f ef 3e b7 93 a1 f2 5e b5 c9 3c 7d f5 dd b3 88 f6 ee b8 e6 1e 1b db f8 6f d0 7c dd a7 76 e1 3d db e1 7d 0e 73 cf ba 17 3c fb 3e 19 b8 4f ea 78 77 3f 44 Data Ascii: \|o^Q_1~~ccnnK}+FK{}Z.~>uy\/si=e}1tm>!\|^/\|yoz>\?>^<}o\|v=}s<>Oxw?D
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 01 44 d0 4e 13 4a 94 a0 28 b8 91 8b 12 2a 51 45 29 03 9a b2 47 74 2c 92 4c 68 03 40 00 00 00 10 d0 29 20 4c 1a 1d 26 98 42 c4 46 40 89 80 86 86 0c 00 58 b4 48 86 2c 46 84 00 0e 23 8b 64 40 08 30 71 94 41 31 22 a6 88 8c 58 a9 12 40 9a 20 db 23 19 a2 24 92 c4 92 22 49 11 60 22 48 43 42 18 25 20 8a 90 45 c8 20 a4 44 49 95 05 30 8b 01 29 22 24 82 2c 00 12 4e ec 62 b6 b2 d5 5d b9 2d 67 a2 23 c8 af 41 ae e5 d7 0a c2 39 d5 ae 12 b1 cd 34 6e 25 92 43 2b 56 25 ad b0 8b 62 0e 01 73 a5 6a 6d 7d cf 34 92 f7 2c 4e 59 ed f1 7c cf 81 fa 2f 13 3e 3f 9e 5f 44 f0 7a f9 b4 26 dc 62 d8 88 22 ad a4 30 28 04 31 35 8a 92 96 24 c2 a5 6c 66 94 e0 d2 71 0b 23 19 46 6d 45 a9 a9 5d 8c d3 28 c5 77 39 0a 99 59 62 52 44 0c 40 28 a4 15 2b 92 d7 29 04 49 24 43 14 1a 40 49 64 e0 c9 11 76 Data Ascii: DNJ(*QE)Gt,Lh@) L&BF@XH,F#d@0qA1"X@ #$"I`"HCB% E DI0)"$,Nb]-g#A94n%C+V%bsjm}4,NY\|/>?_Dz&b"0(15$lfq#FmE](w9YbRD@(+)I$C@Idv
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: ae 16 d4 53 cb 1b a2 94 72 14 e4 56 99 f3 af 4d 76 a2 65 75 2c f1 be 19 49 59 59 df 2b 2b 2b 3b 65 12 b4 6d 1f 63 43 d0 d4 54 95 55 d4 5f 0a d7 af 85 ab d7 c2 d5 e8 69 7a e4 34 cd 72 1a 6e b5 7c 39 58 99 a7 ab 9a e8 f8 b8 3a 1a 96 9b 0f 6a 1c 85 12 9c 53 b6 ca 32 2e 2c ad 27 e7 7d 1d 5f e7 68 6c 36 ca ca 08 7a c7 bb 08 9e 43 d0 1f ea 03 66 ef 54 3f 8d b9 54 37 2c 78 54 6c e1 86 a7 e6 a3 fa 07 ea 35 54 f8 d3 fd 2a 80 a7 f0 a2 07 82 5f 96 9f ee 36 72 08 72 94 7a 83 a6 ef d4 95 1f c9 a9 7e d7 af 95 94 f7 27 1c ac 2e 15 c2 8b 53 98 9c d3 b3 5c 81 40 a6 94 3a 3c 28 31 06 20 39 c8 44 2c 2c 2c 2c 2c 75 08 dc 74 4a 7a 3c 85 14 51 f5 21 04 10 43 a9 14 6f 96 4b 65 13 28 a0 e8 92 00 d4 97 63 59 2f a2 d2 14 9c 10 7a bd 57 49 c1 50 39 4a 21 69 af 38 f4 fa 96 d9 ed 50 Data Ascii: SrVMveu,IYY+++;emcCTU_iz4rn\|9X:jS2.,'}_hl6zCfT?T7,xTl5T*_6rrz~'.S\@:<(1 9D,,,,,utJz<Q!CoKe(cY/zWIP9J!i8P
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: fa b1 dc f3 8e 89 e5 77 24 ca a7 b9 db 04 10 d8 20 87 31 58 58 dc 9d 8a ce d9 4d 43 94 a2 53 9c 8b 91 3c 81 35 0d 86 ee 45 11 bb 50 51 a1 c9 94 e7 2e 30 8b d7 68 bb 44 1e b8 d7 68 8b 91 72 7b 91 7a e2 59 40 a6 1e 52 8e d8 41 ab 08 85 c2 80 d9 9c 8d 44 27 04 e4 76 78 ef d9 a1 00 b1 b6 16 16 13 5a 80 40 21 c9 85 85 85 85 85 8e a1 e7 28 ac 26 a1 bb 8e 04 d2 65 48 51 e5 6b 72 98 c4 c6 e1 0e 42 9e a4 7e 13 9d 9e 60 9a 76 c6 57 02 2d 4f 09 dd 18 d0 58 d8 a2 14 6c ef 63 70 b0 b0 88 52 27 74 da dc a6 c4 9b 1a e0 4d 1c a5 65 17 04 64 4e 91 19 42 32 95 c5 c8 51 e7 08 6c 06 50 8d 70 23 19 45 85 16 95 85 85 85 8f dc 04 39 26 f9 23 fb 84 13 3c 55 47 cf 6f fa 6e fa b0 aa a1 df 4b f4 88 ca 88 61 49 f2 41 dd 2a 3e 91 ca 7f ab 43 f4 35 0f 97 c6 ee 07 c4 ee 38 b5 5c 68 6c Data Ascii: w$ 1XXMCS<5EPQ.0hDhr{zY@RAD'vxZ@!(&eHQkrB~`vW-OXlcpR'tMedNB2QlPp#E9&#<UGonKaIA*>C58\hl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49794	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	1494	OUT	GET /mobile/img/home/2024/Korban-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:38 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/svg+xml Content-Length: 11093 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2b55" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761;Path=/
2024-11-24 12:19:38 UTC	1061	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:38 UTC	10032	IN	Data Raw: 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 73 74 30 22 20 63 78 3d 22 32 35 30 22 20 63 79 3d 22 32 35 30 22 20 72 3d 22 31 37 34 2e 37 31 22 2f 3e 0a 3c 67 20 63 6c 61 73 73 3d 22 73 74 31 22 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 34 32 30 2e 35 39 2c 32 31 32 2e 34 37 63 2d 39 2e 32 33 2d 34 31 2e 39 34 2d 33 32 2e 38 31 2d 37 37 2e 30 31 2d 36 34 2e 34 35 2d 31 30 31 2e 32 63 31 30 2e 38 36 2c 31 36 2e 39 33 2c 31 38 2e 39 37 2c 33 36 2e 30 33 2c 32 33 2e 35 35 2c 35 36 2e 38 33 0a 09 09 63 32 30 2e 37 33 2c 39 34 2e 32 34 2d 33 38 2e 38 36 2c 31 38 37 2e 34 33 2d 31 33 33 2e 31 2c 32 30 38 2e 31 36 63 2d 35 32 2e 33 2c 31 31 2e 35 2d 31 30 34 2e 32 37 2d 31 2e 37 34 2d 31 34 33 2e 37 31 2d 33 31 2e 39 63 33 38 2e Data Ascii: <circle class="st0" cx="250" cy="250" r="174.71"/><g class="st1"><path class="st2" d="M420.59,212.47c-9.23-41.94-32.81-77.01-64.45-101.2c10.86,16.93,18.97,36.03,23.55,56.83c20.73,94.24-38.86,187.43-133.1,208.16c-52.3,11.5-104.27-1.74-143.71-31.9c38.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49787	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	688	OUT	GET /sumbangan.com/public/sliders/661c7dc1cc458_Sumbangan_New_Slider-01.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:38 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 811772 Connection: close x-oss-request-id: 674319DAF3A695313520A9BD Vary: Origin Accept-Ranges: bytes ETag: "5A46424B8F069AAA8C32F94F3C892359" Last-Modified: Mon, 15 Apr 2024 01:07:14 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3512096760916875875 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: WkZCS48GmqqMMvlPPIkjWQ== x-oss-server-time: 1
2024-11-24 12:19:38 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 88 9f 6f e4 Data Ascii: JFIFC!"$"$C"o
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 95 3c 42 73 b0 ad 93 2e 57 1e ab f4 71 8a 5e 54 cf 4c e7 6e 35 79 34 cf 5e 3e 77 ce 75 e4 72 fe 47 2a e7 ea fd 4f 9b cb eb f3 f9 d3 c3 6f 87 d0 8c 97 1b d7 0d 09 8a 58 b2 b6 12 04 aa 22 2c 67 3a c1 5b 50 69 14 13 31 10 bd 6b 5a c4 c5 92 8a 97 44 a1 12 10 5b e7 7a 21 15 9a a7 d1 f9 fc ab 39 48 9e 9c 40 00 04 4c 00 00 00 00 22 60 00 08 49 60 58 0a 89 82 62 62 00 0a 00 08 4c 00 02 80 08 89 11 12 58 91 04 28 00 40 13 0a 00 00 80 a4 4c 00 00 04 00 2d 44 c2 26 24 44 c1 80 f2 ed 31 24 a2 49 40 94 48 b5 49 64 49 28 55 95 92 ca ca 59 02 ca ca 4a 04 cc 09 40 94 49 28 24 a0 4c c0 90 4a 04 a0 4a 26 a5 13 04 4a 05 4a 04 81 20 00 12 81 28 54 88 00 09 14 00 40 12 07 ad 79 27 ae 71 fa bc cf 2a f5 7f 23 c7 a7 e7 ce 37 f4 fc 2d 66 b3 63 b8 f4 ee 5e 3b fa ed 7a af c8 f3 7d Data Ascii: <Bs.Wq^TLn5y4^>wurGOoX",g:[Pi1kZD[z!9H@L"`I`XbbLX(@L-D&$D1$I@HIdI(UYJ@I($LJJ&JJ (T@y'q#7-fc^;z}
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 01 31 20 10 15 30 40 00 0a 91 2c 26 00 40 a7 2b 8b d9 fe 77 b7 ef 58 fe 69 fb 80 94 00 23 cd bb ef 93 7e a7 e2 c7 7b e8 ff 00 53 ef fc af 4f 98 9f e6 ff 00 ae 05 00 0c 7c b3 d6 3a 47 e8 be 47 5c bf 1a df b7 fc ce d9 67 8c ba e5 9e 79 e9 5e 26 dc 4c fa 22 11 9e cc ed 59 af 7e e5 f1 39 7f cc bf 4a 1c f6 00 08 98 b3 c6 b0 e5 fa 1f ef 7f 37 b7 d9 3f 0d fa 10 e5 d0 00 04 23 cd 79 7e 79 fa af 95 9f 37 87 cd fd 4f c7 d5 a4 6b 8d 67 68 b3 1a 72 33 96 93 78 2f 34 25 a6 ab 3b f7 71 e9 7d d3 f9 ef ea a4 7c bf 60 00 01 d3 3c df d1 fc e3 f7 7f 9e db 4a 5f ed 7c cb ef 4a de 77 fb 5f 07 ed 79 bb 7a 94 c4 ff 00 32 fd 88 28 00 3e 17 dd f8 1e 8c 78 3f 61 e2 fb 9f eb 7e 6e 9c 93 f1 7f 50 25 00 01 8d 99 f8 87 27 ac 7e cf e5 e3 4e 46 1f 6f 86 09 4e 9b 52 25 35 df 87 ad e7 cf Data Ascii: 1 0@,&@+wXi#~{SO\|:GG\gy^&L"Y~9J7?#y~y7Okghr3x/4%;q}\|`<J_\|Jw_yz2(>x?a~nP%'~NFoNR%5
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 43 fe 75 df 86 d3 4b 6b cb a6 99 5a e3 4a d3 33 5f d0 bf 9d 7d f3 1e ce ce 31 ef 79 0f af 79 be bc fe 69 b6 5c 8f 47 c4 da f1 7b cb 2a e9 9c 67 12 9a a7 1b 97 c6 9d 3d 77 bb f9 e7 a1 f0 fb 81 3b 79 c7 8c 7e 80 fc ff 00 bf 16 91 76 bc f9 22 26 f9 10 9b 8f 55 f5 2e 8b de b9 7d 10 6f aa 78 af ae 79 2f 6f 95 f4 bf 40 7e 7f fd 01 9e f2 39 fb fe 27 37 e3 f4 1d 70 f6 41 9e ff 00 3b c3 ff 00 40 f0 75 e6 73 8c fa 1d 57 b2 f8 06 b8 7b 8f d3 f9 7f 53 3d 98 ed 8a fe 6d db 87 cd f4 7c 2e 57 e8 6f cf 1f a1 f9 fb e4 73 f7 91 d5 19 ed 8e 9f 6b 8e dc ea 12 76 ee 8d cc ea fa e3 d2 59 eb df e2 db df fc 17 de b9 fd 0e 48 e3 f5 5e 13 ee de 03 bf 27 c0 cf 3d 77 e0 7c 6f a1 f2 b3 ea 82 33 e9 b4 25 2b 59 a3 52 4a e8 a4 b3 7f 76 f1 9f d4 d3 5b 89 d6 3c 1b dd 7c 32 e3 cf 29 df 6b Data Ascii: CuKkZJ3_}1yyi\G{*g=w;y~v"&U.}oxy/o@~9'7pA;@usW{S=m\|.WoskvYH^'=w\|o3%+YRJv[<\|2)k
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 7e a9 f3 7f 4e 1e 7f a8 eb 1d 9f ac 6f cd e5 c3 eb fe 35 6a da 6b dd 87 c6 fd c0 2e 3e 1d ee 3e 1d ed f8 30 3d bf 09 ea be 55 ea be 5f ab d8 c7 cf fd 30 00 00 04 79 5f a9 78 2f 5f 9d f3 e2 d1 e9 f8 95 89 2c 5a 24 4c 4d cc 8b 02 90 4b 15 b5 66 ab 96 b9 67 a6 58 ed c7 e5 de b3 0c 75 98 81 28 85 b2 04 cd 64 0b 11 25 10 4c 20 98 16 51 29 33 16 b0 95 ce b3 9b 86 34 9c c6 91 49 4b a8 34 51 5c 8d f8 0b 3e 8b 85 c8 e9 9d a2 8b 2f 39 aa f1 5a c6 fe f9 e3 fe d9 cb ea df a7 f6 ff 00 3c e3 f5 3a 87 0b 93 f3 b8 fa 71 e1 72 33 d6 33 9b 4d 94 99 99 68 98 2b 13 0a 9a c2 6d 6c 6c 6b 39 ca eb 39 49 ac e6 5d 59 c9 b5 b8 f2 6d 6c 61 37 bf 16 4f a1 b7 ca d9 7e 95 38 fa 44 e3 ca a5 9f 3f 1f ab 99 f1 f1 fb b8 9d 7b 8b da 32 d6 7a b5 3b 5d 6e 7a b4 76 ad 4e a9 a7 69 ba f5 6b 76 Data Ascii: ~No5jk.>>0=U_0y_x/_,Z$LMKfgXu(d%L Q)34IK4Q\>/9Z<:qr33Mh+mllk99I]Ymla7O~8D?{2z;]nzvNikv
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 09 85 a2 75 2d 7a 58 ba 96 0a ca 5a 73 85 db 6e 24 4b d9 39 dd 32 c7 6f e0 75 ec 8e 7f cc 8a dc 72 fe af 03 9a bf 4f b5 f4 3e cd e1 fa 3f 5a fa 71 be 47 df e7 6b c2 da 39 3f 3b e8 68 cf c1 e5 72 38 2d f2 f5 f9 7a cb c1 f3 ee db d3 be d7 c6 b4 d6 de cf 33 4c b4 6a 70 a6 b7 17 df 1d a7 59 f9 fb 56 f2 a6 9b f1 96 b4 db 2b cf 5a 41 35 e3 6d 47 3e 67 1b 4c dd 23 3e 44 46 7c fe 2f d1 f3 f7 d6 dc e7 8b e9 cf 61 eb 9f 6b cf e9 e5 26 38 74 be d3 79 21 24 85 55 68 54 d7 4c b4 63 6b e7 7d f3 e7 76 fe 93 dd 3e 97 ca fb 1d 43 b7 f4 8f a5 f9 ff 00 20 bd 2d d7 f3 fa 4c 1c ac 4d 91 13 00 4b 28 9b 2c 2e 6d 7a 5e e6 e2 e0 2a 04 2b 30 d1 02 41 20 44 c1 58 98 94 25 88 43 49 89 44 4c 2a b2 96 09 58 94 02 08 8b 44 b1 68 91 5b 54 81 2d 95 54 a1 16 98 9b 22 26 15 31 28 ac c2 d6 Data Ascii: u-zXZsn$K92ourO>?ZqGk9?;hr8-z3LjpYV+ZA5mG>gL#>DF\|/ak&8ty!$UhTLck}v>C -LMK(,.mz^+0A DX%CIDLXDh[T-T"&1(
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: bd e1 d6 d7 ac e7 d9 78 82 c6 3b 56 b3 bd 17 33 2a 97 9c a6 2f 39 dc 98 91 9d 6f 17 34 ba a6 b6 c3 49 66 9a 4a f1 da d6 f3 ca 2f 5b ce 94 df 2b ca bb 60 67 9d 7e 17 27 3e bd 62 26 74 94 96 ab 44 a4 c9 9a cb 22 52 b3 59 95 a4 cc 16 ac ca 66 b5 52 21 37 35 ad a2 c4 d8 b5 94 b4 bd 2f 2d 95 96 a2 d5 92 6a 82 f3 49 08 b9 5a c9 2b 08 b9 a5 6f 17 3a 73 b8 fb 63 be 91 58 95 8d f0 b9 cb 8b b7 1b 7e 1e 46 bc 7e 43 55 a5 e1 ac 79 58 43 9f d4 ae 7a 63 d8 84 29 15 b9 52 cb 2b 16 a2 22 56 67 9e 99 b8 c4 c4 b0 20 df 5e 3f 2a f7 e3 53 93 4b 8c 97 ab 35 ce f8 38 da d9 4b 8e fa 71 b6 9e 9d b6 73 b9 7b 38 dc fb fd 8f 27 ab 27 3f 2f 1f aa 7e cf c6 fa bc b5 f4 b2 bb 39 f9 5c 5e 67 02 f4 e4 f3 fe 77 d1 b8 9e 1f 33 81 67 ca 67 be fa f2 3e b7 cf ed fa e1 f7 3b 24 5f ec fe 66 be Data Ascii: x;V3/9o4IfJ/[+`g~'>b&tD"RYfR!75/-jIZ+o:scX~F~CUyXCzc)R+"Vg ^?SK58Kqs{8''?/~9\^gw3gg>;$_f
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: a5 fe 98 41 53 95 b3 f5 5e 1d 43 9c d6 b6 5b a5 14 6a 3b bd 0b 8b 5c 1c d5 b4 54 a2 29 b2 b6 6f ea f4 92 46 46 19 55 4d 21 d1 ad 6b 44 92 c7 18 8e aa 9e 42 88 ca bc 53 8a 6a c0 55 86 8f c5 72 27 0a 5b 8d 14 46 9e ae 9a 7d 76 a3 d3 32 b6 4f 4d a7 fe 2c ac ad 9b fa b5 b4 5f 41 95 b3 1f cc b6 af e8 16 c9 69 b5 7f c2 b6 53 f8 56 d6 f6 5b 33 57 ca 49 19 1b 5f 76 a1 6a 86 e9 45 29 1c d1 57 9a 7f 66 ac ca d9 8d 65 9a 38 83 2b 29 5e 74 bf d3 88 2a 41 e8 58 3d 41 5f bd 29 59 e9 0d 65 4c 6c 6c 6c 73 9a c6 cb 79 a4 61 a6 ba d2 4e e5 70 a5 65 54 32 34 c6 fa 48 9d 51 51 4f 0b 20 89 4f 53 04 29 b7 4a 12 58 f6 bd ba 5e 0f fd 90 2a d7 53 ed 34 93 54 c1 0a 37 8a 10 69 ab 69 aa 34 aa 81 95 10 48 d3 14 b9 fe 81 94 e7 84 f9 da 13 a7 29 cf 25 12 b3 ae 56 f2 cf 00 1a 6f 22 e5 Data Ascii: AS^C[j;\T)oFFUM!kDBSjUr'[F}v2OM,_AiSV[3WI_vjE)Wfe8+)^tAX=A_)YeLlllsyaNpeT24HQQO OS)JX^S4T7ii4H)%Vo"
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: bf 7b 58 58 e5 b2 d2 6e 5f f5 a8 60 96 07 46 62 97 f3 a7 e7 62 20 f0 6c 5a ff 00 90 a4 ff 00 97 e5 68 5b 0d e8 bd 2b 9d 7c 14 30 dd 6b aa 2e 15 2d 0d cc 78 2a dc 31 5a 35 3d 95 b6 b2 5a 2a 9a 3a 88 ea a9 f8 ab 7e 8c 20 b0 b6 4e 97 87 0b 0b 1c 37 ba 5f 6a b7 b7 20 b0 f2 5b 35 f4 7c 13 ca c8 63 a5 9e 3a 98 75 b9 52 32 b2 9e 68 9f 04 c3 50 09 36 f8 3d 9e 97 5c 2c 2c 2c 0e 1d a9 a5 dd 95 a8 21 dd 9f 26 b7 1f 50 a3 9e 4a 59 ed d5 71 d6 53 f1 1e d2 7f 2b 50 43 fd 7a 51 4e 4e 44 a7 22 82 61 4d 4d fe a1 49 6d 92 6a 67 b5 cc 76 90 b0 c9 33 79 0d 6e 4e df b8 05 66 9f d9 eb b8 2f d6 c2 5c d4 35 68 2e 36 8a 1f 67 6e b2 bc 47 1d 4c a6 7a 80 ac 3e ab ae d6 7d 12 d9 8a de 1a 99 99 04 15 73 ba a6 a1 9f 3b 3e 4d 2e 7e 9c 13 53 50 e2 92 dd 50 29 c8 44 29 87 27 f7 77 ca 56 Data Ascii: {XXn_`Fbb lZh[+\|0k.-x1Z5=Z:~ N7_j [5\|c:uR2hP6=\,,,!&PJYqS+PCzQNND"aMMImjgv3ynNf/\5h.6gnGLz>}s;>M.~SPP)D)'wV
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 4a 25 12 b3 c2 34 08 68 75 3a 14 53 47 01 d0 a2 8e ae 43 47 f6 d2 03 ba ff 00 99 8e d3 3c f0 9d cc 94 10 1c f1 f1 38 2c 72 6e 5d a7 2c 37 91 6b b9 b3 92 3c 91 38 07 9b 79 31 02 87 cb 9e 6d 1c c1 4d 58 4e ec 39 a1 db 2d c0 59 21 63 2b e2 68 fc 77 29 a7 99 44 e1 64 2e 48 76 c6 8e e4 0a 2a a8 a6 ac 72 ff 00 ca 3d f4 6e 87 4f c1 d4 e9 f8 43 b8 e6 b3 f1 49 cd c5 37 9a 3f 2a ca 6b 72 8e 1a 87 3d 0e 9d d0 08 e4 ad d0 06 fa de 2b 08 61 65 65 1d 32 b3 a0 40 68 34 1c 18 58 58 5b a9 a1 61 61 04 d0 82 3a 0d 0f 03 9a b7 4a f0 01 32 53 05 e1 96 90 82 69 4d 72 07 59 62 de 51 c8 5a 41 cf f6 46 b7 79 5a e8 4c 54 83 92 7b b7 5b 75 a8 c8 7b c9 4e 28 9d 46 85 39 1d 0e 99 e9 0d 1d a1 fd 0b 79 16 fc 8f 85 cf 0d a0 8f 3e 10 4d 88 05 b8 b7 16 e9 08 05 85 8d 32 b3 c0 c9 1c d3 49 Data Ascii: J%4hu:SGCG<8,rn],7k<8y1mMXN9-Y!c+hw)Dd.Hvr=nOCI7?kr=+aee2@h4XX[aa:J2SiMrYbQZAFyZLT{[u{N(F9y>M2I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49791	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	688	OUT	GET /sumbangan.com/public/sliders/661c7d7ce283f_Sumbangan_New_Slider-05.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:39 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 729008 Connection: close x-oss-request-id: 674319DA1698CC3838A05FEA Vary: Origin Accept-Ranges: bytes ETag: "FD4DEAE8FE77AB95B83828B21A8FD163" Last-Modified: Mon, 15 Apr 2024 01:06:05 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9685159916220672411 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: /U3q6P53q5W4OCiyGo/RYw== x-oss-server-time: 2
2024-11-24 12:19:39 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f3 11 d3 c0 02 Data Ascii: JFIFC!"$"$C"
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 00 08 92 c4 48 80 a0 00 07 4c 3c bf 50 04 c4 c0 00 00 00 01 40 00 00 40 00 01 00 44 c0 0a 98 94 12 44 82 26 00 00 44 c0 00 13 13 00 85 00 40 00 92 25 04 82 22 62 50 59 89 80 48 89 20 08 98 24 92 25 15 28 01 00 00 4c 00 02 90 a9 00 40 50 02 50 12 40 42 58 00 28 00 02 00 24 04 02 12 a8 49 60 00 00 00 20 29 3b b3 c6 b7 65 d8 eb 8f 41 c9 fa 4e 4e bc bd 07 3b b5 8d f9 f8 bb cb 5c e5 6a 5c da 69 58 ba b2 4d f2 b9 a3 39 b3 58 89 41 15 22 00 00 08 4c 09 ac 89 a8 b4 00 95 ac 5a 08 8b 0c e3 48 5c ab b5 25 ca 6d 59 a9 40 bd f2 b5 ce 8a da c9 09 24 95 4c 0b 56 4b 40 51 30 b0 16 22 60 40 04 a9 85 01 28 94 5a b2 97 98 9b 2b 9e 98 4b 4e 1e bd 5f 3f 4e 79 4c 63 db 13 13 2c da 2c ca 26 2c cb 1d f1 cf 5c 6f 4d 9d 3b 0e c3 81 da f4 f9 dc 9e 4d 34 ed e3 06 40 00 00 02 80 00 Data Ascii: HL<P@@DD&D@%"bPYH $%(L@PP@BX($I` );eANN;\j\iXM9XA"LZH\%mY@$LVK@Q0"`@(Z+KN_?NyLc,,&,\oM;M4@
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: c6 f0 e2 72 b8 bc 7b f7 9d b7 ce fd 17 d0 f9 7e 0b d4 fd 77 c8 fd 1f ca 86 b9 00 10 14 89 8a 80 a9 89 02 20 01 6a 00 98 01 60 01 00 42 62 80 44 c2 a2 61 40 ed b0 e5 67 cb 97 03 89 d9 f1 71 e8 ea 78 fd 8f 0f 9f bb 21 3a 80 00 00 05 00 00 00 00 02 26 22 11 2b 28 13 01 04 12 02 42 b3 04 09 40 01 6a d8 d6 62 da e7 36 ae 93 36 d2 97 bc ef 7a 59 8b fa 7f 97 fa f7 c4 f6 fd 10 fc 57 de 00 0f 32 f8 ff 00 a0 f9 ff 00 e8 7f 99 df 7e 3e ff 00 43 c3 f4 7e 9b e7 fe 81 f8 7f d1 07 c4 fa 40 3a 0e fb e5 3d de 6f 3d db 0d ff 00 a3 fe 47 91 ae 5a eb 8d a6 27 58 72 f8 9c be 1d 7d 34 7f 2d fd d0 28 00 00 00 00 00 00 00 00 f8 cf b3 af a3 9f e7 49 ec ba af e8 bf 9f d6 69 3d 31 68 92 22 65 1a 4f 2e e3 2e c7 3e c3 7e 5c 78 75 eb 66 fb 2f 9c ac 73 fa 01 3a 80 2c 90 98 00 48 40 00 Data Ascii: r{~w j`BbDa@gqx!:&"+(B@jb66zYW2~>C~@:=o=GZ'Xr}4-(Ii=1h"eO..>~\xuf/s:,H@
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 78 6e ae e6 38 b9 72 13 4d a9 c9 89 e4 71 f9 73 5b 6b 4b 55 a3 3c 56 d7 8b e7 7b 72 f8 7c cc ef 7e 44 72 75 99 ce f4 d6 38 bc 6e 47 02 e6 98 72 30 b3 0c 77 e2 9c 9d 78 fb af 2a f9 72 64 89 b2 ab 68 9c eb 49 ca f8 df 23 9b d7 72 f3 79 9c 9e 17 2f 78 d6 69 6d f3 b5 a9 7b 22 25 48 bd 75 8c b3 d7 3c ef 8d 8f 26 31 bc f9 35 d2 cb e9 13 be 76 c7 5c c4 26 6b 3a 4d 33 a8 23 3b 8e 2f 2f 8a 7c 9f 9f 7a 17 ca 59 c0 d7 b9 a6 6f 1f 9f c6 be 75 d8 f2 3a fe 44 73 2f 97 26 a2 f6 de b2 d2 f6 96 97 ae eb 17 99 4b ed 9d ab 65 62 cb e7 75 b4 9b 49 9c eb 44 ac a4 a4 5e f5 1d 67 6b d6 c9 d2 4d 2b 5a cf 1d 35 cc 8e 1d 4d f1 bf d5 6f 97 41 f7 fd 97 23 d1 e2 7c af 03 cb bd 5f 26 32 3d 3f 1c 24 0a 44 c5 40 54 c4 81 10 00 b4 08 00 00 a0 00 02 26 00 00 0a ee 92 e7 c2 13 10 0a 4c 50 Data Ascii: xn8rMqs[kKU<V{r\|~Dru8nGr0wx*rdhI#ry/xim{"%Hu<&15v\&k:M3#;//\|zYou:Ds/&KebuID^gkM+Z5MoA#\|_&2=?$D@T&LP
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 2f 7f e6 83 5c 02 91 31 50 15 31 20 44 00 2d 02 00 00 28 00 00 89 80 00 02 ba 8e 26 b9 78 7e c5 ad 12 48 00 00 00 00 0a 00 00 00 00 00 80 00 40 22 61 62 b7 aa c4 a2 26 24 40 11 25 00 11 21 32 9b 13 16 4b 69 9e 97 9c cc 4a 26 16 22 62 54 4c 28 82 60 10 91 31 22 62 52 66 26 c4 c4 a5 91 29 64 12 53 02 24 41 04 85 82 48 00 09 81 28 13 30 4b 22 52 d3 59 b2 f3 4b 33 69 8b 33 33 5b 58 98 13 31 28 94 a4 da b2 97 b5 2f 71 7b 52 d7 3b 5f 1d 35 9b da 92 ce 9a 65 7b 9d 66 b6 b9 44 c1 9f 17 99 c6 ce f8 79 ed 96 7b c5 66 25 c7 5c a6 6f 75 66 e2 55 12 89 25 58 ab d6 26 59 80 2a 18 ef 94 d7 16 6b 69 de 62 61 12 d5 2b c9 df 97 be 1c 7d ba de 86 74 ec fa 98 73 f7 84 d5 90 04 89 89 2c 19 94 2d 94 4a 5a d4 96 6d 6a 68 cf 2e 61 ae 12 ad 89 44 a4 da b2 96 e5 71 34 d6 39 d6 ac Data Ascii: /\1P1 D-(&x~H@"ab&$@%!2KiJ&"bTL(`1"bRf&)dS$AH(0K"RYK3i33[X1(/q{R;_5e{fDy{f%\oufU%X&Y*kiba+}ts,-JZmjh.aDq49
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 16 40 a4 c1 24 00 24 24 8b 24 00 00 04 25 11 13 16 a2 62 11 22 2b 78 5a 2d 12 d6 2f 55 88 98 5a d2 f4 6a b4 bd 66 e2 d5 99 74 d3 2b dc 5d 16 b8 8b 44 96 9a 99 be 99 de e6 f7 ce f7 32 42 44 c1 6f 6a 59 9b db 3b 5c de f9 da cb cd 66 cb cd 2c 93 35 9b 26 6a 2d 09 31 cf 93 9c d7 16 bb e7 9d c5 f2 b2 ed 6c 6f 73 b4 e5 6b 9d 22 16 48 22 d4 93 49 a5 91 12 31 cf 6c f3 aa c4 43 56 56 16 ca a2 ca 49 31 13 53 35 82 ea 0b cd 2c 4c 40 95 42 b1 12 dd 9c 97 66 35 66 34 67 25 e2 b5 34 9c b8 b2 d3 08 8e 1d ab 0a e3 73 11 75 a4 69 48 cb 3d b2 cf 5a 44 44 eb 65 21 6e cd 2d aa 2d af 9d ae 6d 7c b4 67 4e 5f 0f b1 e9 e7 ec d1 3e af 94 14 00 90 00 02 81 00 01 20 04 84 44 c0 02 4a 00 00 00 00 4d 40 00 08 00 28 20 00 00 00 00 00 01 13 02 62 44 4c 00 00 89 85 0a 00 00 58 00 00 00 Data Ascii: @$$$$%b"+xZ-/UZjft+]D2BDojY;\f,5&j-1losk"H"I1lCVVI1S5,L@Bf5f4g%4suiH=ZDDe!n--m\|gN_> DJM@( bDLX
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: c5 62 2b 68 6c 5f 6a 7d 91 6d b4 97 74 ae d9 d8 4b 56 32 3b 9f 0a d8 6c 86 c3 22 23 be 92 d1 1d b4 ee e2 b7 77 17 64 2d 1b db b6 8b 47 7b 58 b9 71 34 77 20 8e 51 1b 8b bf ba df 44 b4 be eb 7d 15 b5 6c 4b 5f 7b 69 61 ee 54 3d 9b 19 85 97 35 2a d0 55 29 e2 69 3a 38 8f fc 2d 04 44 5f 75 63 f2 d9 22 64 c7 a4 7b d3 22 22 22 fb be 2a 7b f9 9c 2f 8c 58 6c 79 c4 78 6e 6a 71 43 de 4f b3 da 30 1b de 22 4e e3 62 ee 76 2e 90 90 cf 63 de 44 5e e3 16 c2 d2 3a 2b 8b bc 99 1b e9 71 b4 6e 26 27 a3 1b 2c 5e e7 29 b0 d9 71 77 16 cb bb 4c b8 9b 10 b5 e5 1b 3b 9b 1b 17 e8 7d 37 3b 0f 4b e9 21 15 3b 98 09 6e 71 4d 0f 0b 34 ff 00 c2 b0 22 84 85 f7 66 3f 2d 93 2a 0f 45 de 99 01 10 fb bd 49 72 c5 bb bf 31 6c 64 78 bf c6 65 f5 e9 aa d4 71 34 9d 0a b7 fd d2 5b cc 4c 89 12 1b 17 df Data Ascii: b+hl_j}mtKV2;l"#wd-G{Xq4w QD}lK_{iaT=5U)i:8-D_uc"d{"""{/XlyxnjqCO0"Nbv.cD^:+qn&',^)qwL;}7;K!;nqM4"f?-*EIr1ldxeq4[L
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 2e 85 d7 ee a7 2c 3d 42 2c 44 45 b0 8f 77 f1 22 db ae e2 1d d2 5b 25 61 11 2f d1 11 97 2c 31 5c d8 be 88 5a 6e 5c b9 73 62 f1 bf 73 95 16 89 b8 96 cd 21 b8 92 57 25 b1 22 65 46 55 d1 98 4a 8a 74 e2 c8 b2 12 21 26 42 4c 8c 98 a4 72 a9 13 a2 72 21 73 21 4c 52 89 cc 86 c7 da ed 4b c4 6c b5 dd d4 47 dd b2 e4 9d cb ff 00 72 3d ef fb 1e b7 11 72 e5 cb 8b 4b 9f 08 cb 8d 9f 14 92 b2 91 2e c5 19 f3 2f 76 23 df 5f 6d 2f d4 f4 f6 91 32 9b e5 ac bb 71 55 0f 1b 2d fb 64 91 24 49 7d e5 68 b4 e1 f8 73 66 bd 59 dc f9 32 ce 8c 2c 79 30 dd 58 b9 f3 e2 ba b0 7f 39 f4 cd 26 b1 99 46 0f 10 63 f2 7c 56 1f 4b 97 2e 5c bf 4d fa 62 89 45 2a 50 5b a5 b4 23 b6 22 a4 69 53 c4 55 75 67 e5 ee 5d 9c cc 55 05 34 c4 d7 42 22 b4 ba 25 3b 96 2d aa ee 58 e5 2c 4c a9 2f 22 d7 8d ca 5f be a7 Data Ascii: .,=B,DEw"[%a/,1\Zn\sbs!W%"eFUJt!&BLrr!s!LRKlGr=rK./v#_m/2qU-d$I}hsfY2,y0X9&Fc\|VK.\MbE*P[#"iSUug]U4B"%;-X,L/"_
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 87 20 e9 dc 74 4e 59 22 32 b1 09 c4 4d 11 92 2f bd ae 28 8a 25 b4 b2 1e a9 f4 5b a9 ed 1c 5d fc 39 3f dd ae 1f 05 5e b3 c3 64 c9 14 68 52 a2 8c 5e 2e 86 16 9e 6d 9d d6 c5 7d ee 4c 9b 26 c9 bf b2 ff 00 4f 75 fe a0 7c df 5f 04 e3 ec ca f8 ac 3d 05 3c ff 00 29 81 47 3c ca ea b8 4e 33 8e 9c 6b 80 4b 5e 04 f8 b4 e3 7f 55 47 0e 64 5a e3 f1 74 70 78 7c d3 1f 5b 1f 5f 4e 1a f4 6d 31 bf 39 af 0b 7a 36 99 9b ff 00 f4 4e 19 f5 8d 38 cf e4 8c 8b 2a 96 2e 54 e9 c6 9c 0a 93 8d 38 67 79 9b c6 54 b8 8e 1d c5 f8 18 a2 a5 5a 74 d5 4c d7 01 02 19 be 5f 22 9d 48 54 5a 71 16 17 c5 c2 69 c3 3e a9 d1 2a d4 a2 46 a4 25 ab 57 59 f6 13 f0 79 86 99 0f a4 69 53 fc a8 c9 31 9f 83 c7 c5 dd 4e 70 82 ab 9b e5 f4 c8 e7 99 64 9d 0a f4 6b ad 33 ac 1a c6 60 b1 6b fb 27 0d 7a ef 44 eb 52 81 Data Ascii: tNY"2M/(%[]9?^dhR^.m}L&Ou\|_=<)G<N3kK^UGdZtpx\|[_Nm19z6N8.T8gyTZtL_"HTZqi>F%WYyiS1Npdk3`k'zDR
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 0b 4b 16 2d a5 b4 57 10 ae 2d 50 cc 74 ad 45 0b 55 e4 5c b9 72 e5 c5 d3 cc 6e c4 90 ae 6c 8f dc c8 c0 8a 44 4b 24 7e e6 25 62 28 b8 8e e7 6e 85 e4 48 44 89 0d 19 65 5b e9 c5 38 3f 03 19 fc 87 01 84 ad 8d c4 64 f9 6d 1c bb 0f f7 8c 7e 6b 4f 09 5f f5 05 13 f3 fa 27 e7 f4 4c 3d 4f 1a 87 fc 77 89 7d 5b f8 35 2a 93 a5 3c 17 10 55 89 83 c7 61 b1 71 25 18 c9 54 c0 61 26 4b 28 c1 32 39 46 09 10 c0 e1 60 b3 ca 51 a1 8f 2e 27 a7 73 75 d6 8b 8b e1 d6 43 24 48 91 32 44 90 ca 7f 1c 7b 69 bd f4 d8 b8 8b 5e 22 b8 91 63 95 9c b2 3f 70 b5 5a a7 a2 19 99 bf ed c4 b7 9f 72 e5 cb 97 10 9a 10 ac 5c 89 01 22 e2 12 44 44 8e c2 2e 76 2d bf 6d 16 b6 eb b0 c6 4d 14 a6 e9 55 84 94 a3 9a 61 63 8b c1 c9 38 cb f8 ea d3 0b 42 a6 26 be 49 96 52 cb b0 df 79 e2 5f 51 d7 2c f4 ff 00 f8 ef Data Ascii: K-W-PtEU\rnlDK$~%b(nHDe[8?dm~kO_'L=Ow}[5*<Uaq%Ta&K(29F`Q.'suC$H2D{i^"c?pZr\"DD.v-mMUac8B&IRy_Q,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49788	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:38 UTC	688	OUT	GET /sumbangan.com/public/sliders/6684a59f3ef85_Sumbangan_New_Slider-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:39 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:38 GMT Content-Type: image/jpeg Content-Length: 818173 Connection: close x-oss-request-id: 674319DA9CAEC93637C8CDD4 Vary: Origin Accept-Ranges: bytes ETag: "A05D9947E535563185BC4F54C4E83C35" Last-Modified: Wed, 03 Jul 2024 01:13:03 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 901970093647993007 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: oF2ZR+U1VjGFvE9UxOg8NQ== x-oss-server-time: 1
2024-11-24 12:19:39 UTC	15776	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c0 f3 de 87 cf Data Ascii: JFIFC!"$"$C"
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 00 01 80 00 00 03 00 00 00 00 01 80 81 a0 60 20 00 1a 06 08 62 63 00 00 00 00 00 69 a0 00 00 00 01 a6 0d 30 00 00 00 00 00 68 18 00 d0 30 00 00 02 0c 09 80 01 80 00 40 00 1a 60 04 c0 04 00 12 00 00 0c 09 00 40 00 1a 60 00 34 e6 00 00 00 00 60 00 00 00 01 06 26 00 4c 30 10 34 44 80 00 00 00 98 09 80 c0 01 80 02 04 d2 48 c9 15 d5 6d 55 be 3d 19 14 57 74 c2 2d 93 75 37 db 0b 27 19 4e 6d a9 4c 00 20 00 6d 39 21 82 8b 51 30 ae 75 c5 ab 13 8b db 65 76 4d 2c 6a 53 46 d3 90 00 20 06 88 00 03 4e 43 00 60 00 00 00 d3 40 00 c4 c0 00 68 1a 19 0a 56 35 6f 92 b1 ec 8b 43 1a cc 78 d6 ec 8c 7c 94 4f 0e ca 8a 21 64 6b bc 73 71 36 33 9d 95 5b 3b 61 56 3d 38 d1 bc e2 9d 75 95 95 32 fb f0 ec 9c b3 b1 72 32 27 2d 2c 37 3a d8 de 81 aa e8 00 31 82 01 20 00 1a d8 95 80 9f 36 e2 Data Ascii: ` bci0h0@`@`4`&L04DHmU=Wt-u7'NmL m9!Q0uevM,jSF NC`@hV5oCx\|O!dksq63[;aV=8u2r2'-,7:1 6
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: f5 3e 5b d4 fe 71 f6 60 1e 4f a0 00 00 10 e3 fd 83 8d 7d 77 83 93 02 3f 59 e0 eb e4 9e 7d 39 19 58 f9 77 e7 8e 36 66 3a 16 c3 07 3a 6b ef 77 1a 7d c7 e6 5f 68 01 c5 d4 00 00 1e 77 9e f4 1e 77 f7 9f 31 74 a1 6f bd e4 b7 26 ac 5c 9a 2b 8d c8 a2 19 10 5b 1e 19 15 c6 95 39 b8 98 da ae 51 39 bb 52 b2 c0 ad 5e d1 19 d7 90 a8 95 52 75 95 c5 ea 80 ab b2 52 51 28 69 20 00 26 12 8b 2d f4 5a 0c 99 a7 b3 d1 e9 a8 8d 71 ed 1d b2 d9 7a 4f 0f 4d 37 f5 3e 2e e8 45 8f 61 e4 59 d2 b1 39 e5 55 e8 db fa ae 78 91 ed bc 1c d1 b7 f6 5c e6 49 f6 5e 22 64 c1 bf d2 5a cf a0 e9 fc c5 71 a5 36 29 db 1d ff 00 a5 f0 0a 34 f4 7e 4a c8 a3 d2 6f f9 e2 8d 77 fb 8f 0a 8e ad 85 cd 9c 5f 69 ac 1d b0 8c 16 0e 76 e8 bb 9e 3f 1c fa 7a 5f 95 f3 81 d4 fc f7 8e 09 7a ef 22 d9 f5 0f 31 e5 88 b4 27 Data Ascii: >[q`O}w?Y}9Xw6f::kw}_hww1to&\+[9Q9R^RuRQ(i &-ZqzOM7>.EaY9Ux\I^"dZq6)4~Jow_iv?z_z"1'
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: d0 10 90 c8 b0 62 05 20 94 5c 11 34 38 38 35 33 62 8a 88 92 9c 24 fa ff 00 22 d9 d3 6e f0 b2 6e e6 f5 b0 3c df b3 8a 3e 67 7e bb c7 f5 78 f3 ca c2 9d f1 d8 4e 8f 7c af ad da 66 3e 2f 7f 09 66 f8 b9 af 85 d3 57 2e df 02 62 76 a4 bb 3f 3e eb dc de ae 19 9a 73 fa 38 5e 53 dc 55 6c fe 7c d7 6f 34 3d 7e 1d 91 14 69 91 7d 17 db 17 db 78 97 79 c7 ba 6f 34 e7 f5 34 5c 83 bd f9 9d b8 b9 10 8e bf 16 42 68 3b 8f 0e ef bc fe 9d 26 61 cd ea e1 71 8e e9 c2 b7 f3 f0 88 3e 9f 1e 62 cd 31 3d 57 b4 f4 3c fe af 9d df 5a 61 e9 00 45 d4 2c 0d 0f 8d ea 0a fc fc 0a 3d 9b 94 74 f8 f8 2e 12 d7 8d 80 80 00 68 3a 47 aa f3 9e bb 87 e8 f0 d6 71 4e 8c 25 9c 27 0d 66 88 d5 ea bd 49 35 e6 de 5f b8 55 a7 27 08 97 bc f0 7d 3e 40 e2 ef 83 01 00 01 65 7e ba ba fb 7c 9c b7 c3 f4 d8 66 61 13 Data Ascii: b \48853b$"nn<>g~xN\|f>/fW.bv?>s8^SUl\|o4=~i}xyo44\Bh;&aq>b1=W<ZaE,=t.h:GqN%'fI5_U'}>@e~\|fa
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 8e 3d ad da 6b bf 50 f9 02 53 b7 ab 9a 93 20 98 c7 bc bb 1b f5 e6 9f e5 7f 6c 01 12 79 0f 5f e4 7d 1e 4e 7d 91 45 ff 00 a4 fc 8d f9 98 7e c3 8f 4f 59 62 7f 99 fd 98 05 6c 00 00 00 00 08 60 00 02 d5 6d 96 95 e0 97 6f b4 5f a5 fc a5 8a 13 df 1e bd b4 d5 ed 3f 31 fa e0 0e 7d 4f 3f e8 3c ff 00 56 3c 8a 71 b3 f4 cf 95 8f 42 f0 51 e2 df bb 3f 37 e8 ff 00 3c fa 56 06 3a 00 00 02 e5 7d 53 95 7b be 77 9b ba b9 7d c7 cf e5 cb 16 cb 65 9a a0 a7 3b 08 ec b3 be ba 1d 2f 71 f3 de b7 12 c6 ee 9e 6d a7 2a 96 c3 17 e8 3c e5 97 8b 65 f3 da 53 5e c2 fc ba 6b 33 0a eb 19 db 55 f2 bf 23 1f 2e 72 40 a6 b1 ae ca e2 d8 f5 5b 55 76 1a 71 24 e1 34 64 db 55 b6 c2 6d 39 ab 69 c8 01 09 34 95 aa da ea a9 b4 18 46 d9 a9 a9 c2 8c bc 4c 98 98 51 55 b3 83 69 b3 18 20 01 02 69 28 62 62 30 Data Ascii: =kPS ly_}N}E~OYbl`mo_?1}O?<V<qBQ?7<V:}S{w}e;/qm*<eS^k3U#.r@[Uvq$4dUm9i4FLQUi i(bb0
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: da 2b 76 a3 18 b5 b1 8c a0 a3 63 2a 2d ba 58 b3 dc 6d 2f 97 99 d9 7a 4d a6 9c fa 5d e5 f5 6b c7 6f 8f f2 dc ca 38 b2 31 07 5e 39 49 36 60 91 28 34 99 64 e2 5f 34 cd 95 13 bf 35 58 99 38 b4 e8 a8 0a f4 0c 11 18 c9 45 ad de 68 b7 da f1 68 b3 70 b3 2b ad 78 99 98 71 6f 53 a3 dd e9 3d 3c 9c aa 95 6c c7 14 49 c5 92 14 49 4a 32 43 6a 53 50 8b 10 9a 64 84 89 90 63 71 94 c3 09 22 12 9b 98 4e b8 96 42 ba eb 7b 20 94 5d 8a 44 53 94 4a 72 92 a4 cb 2d 45 26 5a 8d 02 00 06 d0 31 22 44 42 51 44 04 88 b4 90 09 8c 81 30 52 25 30 a5 19 2a 49 12 62 50 64 58 c4 89 c4 43 06 25 21 20 08 69 28 4a 2a 40 c2 4c 04 04 90 03 22 02 40 50 62 50 1a 49 71 8c 92 44 49 68 22 66 22 60 4d 41 c5 b9 94 0e 21 13 80 38 cd 20 34 26 08 44 26 94 e2 04 90 4a 75 4d 04 24 92 e5 0b 10 9a 10 04 49 4e Data Ascii: +vc-Xm/zM]ko81^9I6`(4d_45X8Ehhp+xqoS=<lIIJ2CjSPdcq"NB{ ]DSJr-E&Z1"DBQD0R%0IbPdXC%! i(J*@L"@PbPIqDIh"f"`MA!8 4&D&JuM$IN
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 7e 7d 3e 99 a9 76 78 5a 7a ad af 0f 46 9a 2f a2 9b fa 6c dc 1c ee bf 0f cb d5 75 3c be ce f6 b7 1d bc fc ad 36 e7 4f 17 85 76 43 3e bb f6 7a bd a6 9c b2 68 bf 33 8a 49 71 50 ad dc a3 22 db 2a b2 d9 38 ca 36 81 25 59 8c 5c 6b a4 61 6c 62 f3 b6 33 b6 4a ab 6a 4e 35 56 d1 9f 55 68 8d 77 72 ad 99 13 a2 73 99 02 b8 b6 cf 4b b6 d4 cb 61 7e 3e 44 e5 8f 9f af d9 4d 23 9f ae d9 eb cb e7 6a be 9e 7f 4a 32 6a 2d 54 27 08 d2 00 45 d2 71 48 02 40 01 a6 26 04 c4 2a 45 a4 a0 16 00 80 04 80 00 93 44 18 8d be b3 65 ae b7 3e c0 25 7c 73 b4 db 7d 47 76 c3 08 92 2d 44 92 4c 01 21 20 58 61 00 69 0d a7 21 a1 02 69 28 08 90 00 63 90 0d 54 c6 12 8c a6 00 68 72 25 34 72 4d 58 d5 65 31 78 a6 46 88 23 04 c9 2c 04 95 8c 6c 73 15 b0 8b 26 81 ce 16 22 fb 29 ba fc f0 c5 cf c2 8d 2b 53 Data Ascii: ~}>vxZzF/lu<6OvC>zh3IqP"86%Y\kalb3JjN5VUhwrsKa~>DM#jJ2j-T'EqH@&EDe>%\|s}Gv-DL! Xai!i(cThr%4rMXe1xF#,ls&")+S
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 6a a4 55 01 82 cd 02 00 60 d0 36 84 20 69 40 00 03 c9 c6 ca 9c ec 4c b6 54 c2 da 6b a4 22 d4 68 00 97 91 8f 74 d3 22 ca a7 6c 12 b6 28 c1 9c f1 eb be ca ac 7c b9 cb 09 64 53 5d 5e 66 26 45 b3 b9 37 6c ab 8d b0 8b 41 a1 2e b9 91 20 04 a5 5c a6 24 86 86 e1 34 46 ab e0 9c 12 ca a9 d1 3b f1 ad 46 69 09 df 9a 44 67 31 39 d3 64 d6 40 4c 0d 08 68 0c 1a 6d ab 2e a7 28 c8 cf c6 c9 c5 b6 32 c7 c8 a2 ba 65 64 e3 64 df 14 9a 98 43 02 4a 48 18 d0 03 98 00 06 98 02 04 11 29 34 02 12 a0 e1 5b 24 25 90 11 64 00 4a 33 43 69 cc 30 11 0c 2c cc 3a ed 34 d4 5f 2b 27 1b 26 fc d4 42 70 8b 63 e5 e2 65 c5 ec 68 9c 40 12 26 81 00 08 4b 40 90 55 41 53 09 66 90 85 58 81 89 8d 21 00 28 96 20 6e 2e 4c 40 c4 e1 1c ac 5d ec 6d da ed b3 13 1f a4 c1 48 e4 f4 a5 28 c8 b2 da e7 6c 5b 1c d6 Data Ascii: jU`6 i@LTk"ht"l(\|dS]^f&E7lA. \$4F;FiDg19d@Lhm.(2eddCJH)4[$%dJ3Ci0,:4_+'&Bpceh@&K@UASfX!( n.L@]mH(l[
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: e7 b8 4a a2 ae a5 ad cb 8f fd 35 82 63 b3 e1 e2 93 1e c3 6a 04 73 c3 26 7c 43 84 c5 5f 4d 65 c3 78 3c 54 74 ea ab 10 a2 a5 77 cf b0 95 45 5f 49 5a 57 1a 00 68 da 82 19 e1 3e da b8 8b dd f2 c3 fe 85 62 de e6 82 83 d1 58 8f b8 f0 6b 87 86 aa aa a0 a5 6f ce 30 e5 f3 8c 35 7c e3 0e 5f 38 c3 95 76 2d 40 fa 25 c3 3e d0 b8 b3 dd 72 e0 df a5 5c 67 dd 85 bb 97 11 53 0e 68 a4 1c af cb 83 58 7c 45 c5 e6 d8 7c 7d ec ec 3b 54 7a fc 1c ef fb 45 c6 2d 3c b9 01 73 48 de 5a 65 8c ba f8 af 07 77 ae 31 fa 3c b8 57 dd 97 12 fb 40 58 23 fc 4c 2d 71 44 2e 8f 11 39 60 b4 ee a8 c4 94 de 93 fb c2 08 14 e2 a5 cc e8 08 68 3a 63 40 a3 90 d2 0a ae 17 6f db c6 c7 48 fe 1b c0 05 36 53 c9 ca 1e ee 6c ab 3d 15 6f b2 b2 b2 b2 e5 5c ab 95 72 ae 55 ca b9 57 2a e5 5c ab 95 59 59 59 58 af 35 Data Ascii: J5cjs&\|C_Mex<TtwE_IZWh>bXko05\|_8v-@%>r\gShX\|E\|};TzE-<sHZew1<W@X#L-qD.9`h:c@oH6Sl=o\rUW*\YYYX5
2024-11-24 12:19:39 UTC	16384	IN	Data Raw: 82 19 60 3e dd af 19 f6 c0 82 1a 5c b8 6e a7 c5 a4 e8 71 1d 3f 87 54 10 cb 87 e0 bb f5 d6 4e da 7a 67 b8 bd e1 04 34 51 7d 5f 43 89 fe bc 26 a1 9f 0f fd 2e bc 47 e8 58 82 6a 1d 2c 13 eb ba 18 f7 b9 04 32 e1 fe dd 6f ed 08 27 6d 93 32 7e d1 64 d5 83 fd 0e be 21 f6 f0 9a 86 87 6d 7c 8e 4d 17 57 b0 25 1e 8b 23 5e 43 29 5c 8e ae 19 f6 85 c5 a4 9c 4f c9 a9 e6 e7 87 bd 99 71 53 89 c6 f2 c1 fd a9 71 0f bd 70 7f d6 27 35 ae 1e 0c 4b c1 89 78 31 64 76 7f 94 9c 23 f4 0b 8b 9d fd ef 97 09 7a cb 8a fe 8d a5 0f 20 ab c7 35 67 20 41 a1 70 c9 23 11 58 ff 00 9e 12 ed f0 bf 6e 5c 41 ef 1c 08 3f ee 97 19 12 30 c6 e7 80 38 bb 08 5c 55 e5 8b f0 97 ba 2e 25 25 b8 36 58 19 b6 2c b1 5f 6c 5c 2d 6f 93 2e 30 bf cc f2 1b c1 71 0a af fa e0 86 45 70 e6 26 ca 74 d2 1c 15 81 53 51 52 Data Ascii: `>\nq?TNzg4Q}_C&.GXj,2o'm2~d!m\|MW%#^C)\OqSqp'5Kx1dv#z 5g Ap#Xn\A?08\U.%%6X,_l\-o.0qEp&tSQR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49798	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1485	OUT	GET /mobile/img/menu/inbox.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:39 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:39 GMT Content-Type: image/svg+xml Content-Length: 2131 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-853" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761;Path=/
2024-11-24 12:19:39 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 37 36" version="1.1" xmlns="http://www.w3.org/2000/svg"
2024-11-24 12:19:39 UTC	1068	IN	Data Raw: 33 20 31 37 34 2e 36 38 38 2c 33 33 39 2e 34 33 38 20 31 37 35 2e 32 33 33 2c 33 33 39 2e 30 31 34 4c 31 38 34 2e 32 33 33 2c 33 33 32 2e 30 31 34 43 31 38 34 2e 37 37 38 2c 33 33 31 2e 35 38 39 20 31 38 35 2e 35 36 33 2c 33 33 31 2e 36 38 39 20 31 38 35 2e 39 38 37 2c 33 33 32 2e 32 33 33 43 31 38 36 2e 34 31 31 2c 33 33 32 2e 37 37 38 20 31 38 36 2e 33 31 33 2c 33 33 33 2e 35 36 33 20 31 38 35 2e 37 36 38 2c 33 33 33 2e 39 38 37 5a 4d 31 38 39 2e 33 31 31 2c 33 33 31 2e 30 35 4c 31 37 37 2e 39 31 31 2c 33 32 32 2e 39 37 37 43 31 37 36 2e 36 35 2c 33 32 32 2e 30 38 34 20 31 37 37 2e 32 39 39 2c 33 32 30 2e 31 34 20 31 37 38 2e 38 35 39 2c 33 32 30 2e 31 34 4c 32 30 32 2e 31 34 33 2c 33 32 30 2e 31 34 43 32 30 33 2e 37 30 33 2c 33 32 30 2e 31 34 20 32 30 Data Ascii: 3 174.688,339.438 175.233,339.014L184.233,332.014C184.778,331.589 185.563,331.689 185.987,332.233C186.411,332.778 186.313,333.563 185.768,333.987ZM189.311,331.05L177.911,322.977C176.65,322.084 177.299,320.14 178.859,320.14L202.143,320.14C203.703,320.14 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49800	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1486	OUT	GET /mobile/img/menu/derma2.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:39 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:39 GMT Content-Type: image/svg+xml Content-Length: 2001 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-7d1" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761;Path=/
2024-11-24 12:19:39 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg"
2024-11-24 12:19:39 UTC	938	IN	Data Raw: 36 36 20 33 32 30 2e 34 32 36 2c 32 30 34 2e 39 36 37 4c 33 32 38 2e 35 38 34 2c 32 30 35 2e 30 33 36 4c 33 33 30 2e 38 34 2c 32 30 35 2e 30 35 35 43 33 33 32 2e 32 30 38 2c 32 30 35 2e 30 36 36 20 33 33 33 2e 35 33 39 2c 32 30 34 2e 36 31 20 33 33 34 2e 36 31 32 2c 32 30 33 2e 37 36 31 4c 33 34 33 2e 31 37 37 2c 31 39 36 2e 39 38 39 43 33 34 34 2e 32 36 32 2c 31 39 36 2e 31 33 31 20 33 34 34 2e 34 34 36 2c 31 39 34 2e 35 35 36 20 33 34 33 2e 35 38 39 2c 31 39 33 2e 34 37 31 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 72 67 62 28 32 35 31 2c 32 35 31 2c 32 35 31 29 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 31 31 2e 33 33 32 2c 31 39 37 2e 37 39 36 43 33 31 31 Data Ascii: 66 320.426,204.967L328.584,205.036L330.84,205.055C332.208,205.066 333.539,204.61 334.612,203.761L343.177,196.989C344.262,196.131 344.446,194.556 343.589,193.471Z" style="fill:rgb(251,251,251);fill-rule:nonzero;"/> <path d="M311.332,197.796C311

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49799	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1258	OUT	GET /mobile/img/home/2024/Sedekah.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761
2024-11-24 12:19:40 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:39 GMT Content-Type: image/svg+xml Content-Length: 8216 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2018" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761;Path=/
2024-11-24 12:19:40 UTC	2474	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:40 UTC	5742	IN	Data Raw: 43 33 33 36 2e 31 39 2c 32 32 39 2e 32 38 2c 33 33 37 2e 37 36 2c 32 34 35 2e 36 37 2c 33 33 32 2e 30 37 2c 32 36 33 2e 30 32 7a 22 2f 3e 0a 09 09 09 09 3c 67 3e 0a 09 09 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 33 32 37 2e 32 36 2c 32 37 34 2e 35 34 63 2d 34 2e 39 33 2c 39 2e 36 37 2d 31 31 2e 39 37 2c 31 38 2e 39 37 2d 32 30 2e 37 33 2c 32 36 2e 31 32 63 2d 32 2e 38 38 2c 32 2e 33 34 2d 35 30 2e 31 36 2d 38 2e 39 38 2d 35 38 2e 33 39 2d 33 33 2e 34 32 0a 09 09 09 09 09 09 63 2d 33 2e 37 38 2d 31 31 2e 32 31 2d 31 2e 34 38 2d 31 38 2e 34 31 2c 33 2e 30 34 2d 32 32 2e 37 35 63 36 2e 34 34 2c 31 33 2e 37 36 2c 32 34 2e 32 37 2c 34 35 2e 38 36 2c 37 31 2e 31 32 2c 33 31 2e 34 33 43 33 32 34 2e 30 35 2c 32 37 35 2e 33 39 2c Data Ascii: C336.19,229.28,337.76,245.67,332.07,263.02z"/><g><path class="st4" d="M327.26,274.54c-4.93,9.67-11.97,18.97-20.73,26.12c-2.88,2.34-50.16-8.98-58.39-33.42c-3.78-11.21-1.48-18.41,3.04-22.75c6.44,13.76,24.27,45.86,71.12,31.43C324.05,275.39,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49801	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1256	OUT	GET /mobile/img/home/2024/Zakat.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761
2024-11-24 12:19:40 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:39 GMT Content-Type: image/svg+xml Content-Length: 5802 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-16aa" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761;Path=/
2024-11-24 12:19:40 UTC	1062	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:40 UTC	2824	IN	Data Raw: 2e 32 34 2d 33 38 2e 38 36 2c 31 38 37 2e 34 33 2d 31 33 33 2e 31 2c 32 30 38 2e 31 36 63 2d 35 32 2e 33 2c 31 31 2e 35 2d 31 30 34 2e 32 37 2d 31 2e 37 34 2d 31 34 33 2e 37 31 2d 33 31 2e 39 63 33 38 2e 33 37 2c 35 39 2e 37 39 2c 31 31 31 2e 31 38 2c 39 32 2e 34 32 2c 31 38 34 2e 36 32 2c 37 36 2e 32 37 0a 09 09 43 33 38 31 2e 37 33 2c 33 39 39 2e 39 2c 34 34 31 2e 33 32 2c 33 30 36 2e 37 31 2c 34 32 30 2e 35 39 2c 32 31 32 2e 34 37 7a 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 64 65 66 73 3e 0a 09 09 3c 63 69 72 63 6c 65 20 69 64 3d 22 53 56 47 49 44 5f 31 5f 22 20 63 78 3d 22 32 35 30 22 20 63 79 3d 22 32 35 30 22 20 72 3d 22 31 37 34 2e 37 31 22 2f 3e 0a 09 3c 2f 64 65 66 73 3e 0a 09 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 53 56 47 49 44 5f 30 30 Data Ascii: .24-38.86,187.43-133.1,208.16c-52.3,11.5-104.27-1.74-143.71-31.9c38.37,59.79,111.18,92.42,184.62,76.27C381.73,399.9,441.32,306.71,420.59,212.47z"/></g><g><defs><circle id="SVGID_1_" cx="250" cy="250" r="174.71"/></defs><clipPath id="SVGID_00
2024-11-24 12:19:40 UTC	1916	IN	Data Raw: 2c 34 39 2e 39 37 2c 32 38 2e 33 39 2c 37 35 2e 34 2c 34 31 2e 33 38 0a 09 09 09 09 09 09 63 30 2e 31 36 2c 33 2e 39 35 2c 32 2e 32 39 2c 37 2e 35 35 2c 35 2e 32 38 2c 31 30 2e 30 34 43 32 39 39 2e 38 32 2c 32 36 34 2e 39 36 2c 32 39 36 2e 33 31 2c 32 37 34 2e 30 31 2c 32 39 32 2e 38 37 2c 32 38 33 2e 31 7a 22 2f 3e 0a 09 09 09 09 3c 2f 67 3e 0a 09 09 09 09 3c 67 3e 0a 09 09 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 38 22 20 64 3d 22 4d 32 33 36 2e 35 34 2c 32 35 30 2e 39 6c 2d 31 2e 30 36 2d 36 2e 34 34 6c 2d 30 2e 32 2d 30 2e 30 39 6c 2d 33 2e 35 31 2d 31 2e 36 36 6c 2d 32 2e 32 39 2c 34 2e 38 35 6c 2d 34 2e 30 33 2d 31 2e 39 31 6c 38 2e 32 33 2d 31 37 2e 34 31 6c 37 2e 35 34 2c 33 2e 35 36 0a 09 09 09 09 09 09 63 34 2e 36 35 2c 32 2e 32 2c Data Ascii: ,49.97,28.39,75.4,41.38c0.16,3.95,2.29,7.55,5.28,10.04C299.82,264.96,296.31,274.01,292.87,283.1z"/></g><g><path class="st8" d="M236.54,250.9l-1.06-6.44l-0.2-0.09l-3.51-1.66l-2.29,4.85l-4.03-1.91l8.23-17.41l7.54,3.56c4.65,2.2,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49804	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	356	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:40 UTC	1826	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 40d0f07de7eff907b6dd367c65d36886 ETag: "0d529937f7ee45344bae4820a789278e" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: QNDwfefv+Qe23TZ8ZdNohg== Expires: Sun, 24 Nov 2024 12:39:40 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-11-24 12:19:40 UTC	878	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-11-24 12:19:40 UTC	583	IN	Data Raw: 2f 2a 31 37 33 32 34 35 30 37 38 30 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 38 34 35 33 37 33 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 Data Ascii: /1732450780,,JIT Construction: v1018453738,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-11-24 12:19:40 UTC	1680	IN	Data Raw: 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 73 6f 66 74 77 61 72 65 2e 0a 20 2a 0a 20 2a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 2a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 0a 20 2a 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 Data Ascii: * included in all copies or substantial portions of the software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS * FOR A PARTICULAR PUR
2024-11-24 12:19:40 UTC	830	IN	Data Raw: 30 2c 20 22 46 42 22 2c 20 5b 22 41 70 70 45 76 65 6e 74 73 2e 45 76 65 6e 74 4e 61 6d 65 73 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 73 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 61 63 74 69 76 61 74 65 41 70 70 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 56 65 72 73 69 6f 6e 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 63 6c 65 61 72 55 73 65 72 49 44 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 67 65 74 41 70 70 56 65 72 73 69 6f 6e 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 67 65 74 55 73 65 72 49 44 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 6c 6f 67 45 76 65 6e 74 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 6c 6f 67 50 61 67 65 56 69 65 77 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 6c 6f 67 50 75 72 63 68 61 73 65 22 2c 22 41 Data Ascii: 0, "FB", ["AppEvents.EventNames","AppEvents.ParameterNames","AppEvents.activateApp","AppEvents.clearAppVersion","AppEvents.clearUserID","AppEvents.getAppVersion","AppEvents.getUserID","AppEvents.logEvent","AppEvents.logPageView","AppEvents.logPurchase","A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49802	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1484	OUT	GET /mobile/img/menu/home.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:40 UTC	417	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:40 GMT Content-Type: image/svg+xml Content-Length: 692 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-2b4" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761;Path=/
2024-11-24 12:19:40 UTC	692	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 32 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49803	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1260	OUT	GET /mobile/img/home/2024/Peduli-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761
2024-11-24 12:19:40 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:40 GMT Content-Type: image/svg+xml Content-Length: 11525 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2d05" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761;Path=/
2024-11-24 12:19:40 UTC	3885	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:40 UTC	7640	IN	Data Raw: 37 34 2c 31 39 2e 34 38 2c 33 2e 37 34 73 2d 35 31 2e 36 2c 31 32 2e 35 38 2d 35 39 2e 39 35 2c 31 36 2e 36 32 0a 09 09 09 63 2d 38 2e 33 35 2c 34 2e 30 34 2d 38 2c 31 33 2e 34 34 2c 30 2e 36 2c 31 32 2e 35 35 63 31 38 2e 31 38 2d 31 2e 39 2c 35 30 2e 38 32 2d 38 2e 30 35 2c 34 39 2e 32 35 2d 38 2e 37 36 63 30 2c 30 2d 34 34 2e 31 34 2c 31 33 2e 31 2d 35 33 2e 30 33 2c 31 37 2e 33 32 63 2d 38 2e 38 39 2c 34 2e 32 32 2d 36 2e 31 31 2c 31 37 2e 38 35 2c 34 2e 30 37 2c 31 35 2e 36 32 0a 09 09 09 63 31 30 2e 31 38 2d 32 2e 32 33 2c 35 36 2e 36 38 2d 31 35 2e 35 32 2c 35 34 2e 38 36 2d 31 35 2e 35 31 63 2d 31 2e 38 32 2c 30 2e 30 31 2d 34 32 2e 34 39 2c 31 36 2e 31 38 2d 34 39 2e 32 2c 32 31 2e 34 39 63 2d 36 2e 37 31 2c 35 2e 33 2d 31 2e 32 31 2c 31 34 2e 33 Data Ascii: 74,19.48,3.74s-51.6,12.58-59.95,16.62c-8.35,4.04-8,13.44,0.6,12.55c18.18-1.9,50.82-8.05,49.25-8.76c0,0-44.14,13.1-53.03,17.32c-8.89,4.22-6.11,17.85,4.07,15.62c10.18-2.23,56.68-15.52,54.86-15.51c-1.82,0.01-42.49,16.18-49.2,21.49c-6.71,5.3-1.21,14.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49808	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:40 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-nv9aNLKF' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-24 12:19:40 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-24 12:19:40 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-24 12:19:40 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-11-24 12:19:40 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-11-24 12:19:40 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-11-24 12:19:40 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-11-24 12:19:40 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-11-24 12:19:40 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-11-24 12:19:40 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-11-24 12:19:41 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49806	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:39 UTC	1485	OUT	GET /mobile/img/menu/akaun.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:40 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:40 GMT Content-Type: image/svg+xml Content-Length: 1559 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-617" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761;Path=/
2024-11-24 12:19:40 UTC	1559	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 39 36" version="1.1" xmlns="http://www.w3.org/2000/svg"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49807	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:40 UTC	1260	OUT	GET /mobile/img/home/2024/Akikah-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450777\|1732450761
2024-11-24 12:19:40 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:40 GMT Content-Type: image/svg+xml Content-Length: 10050 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2742" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761;Path=/
2024-11-24 12:19:40 UTC	2473	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:40 UTC	2824	IN	Data Raw: 31 2e 33 37 63 30 2c 30 2d 31 34 2e 30 32 2c 34 34 2e 32 33 2c 32 33 2e 34 37 2c 31 30 30 2e 38 31 63 30 2c 30 2c 33 36 2e 35 39 2c 35 35 2e 36 33 2c 38 38 2e 31 38 2c 35 30 63 30 2c 30 2c 35 35 2e 37 38 2d 35 2e 39 39 2c 38 36 2e 30 34 2d 34 37 2e 34 0a 09 09 09 63 30 2c 30 2c 33 39 2e 31 39 2d 34 36 2e 32 38 2d 31 2e 35 35 2d 36 36 2e 33 33 63 30 2c 30 2d 32 32 2e 33 38 2d 31 33 2e 30 39 2d 34 34 2e 35 32 2d 31 37 2e 33 36 43 33 31 30 2e 38 33 2c 33 33 31 2e 31 2c 32 35 32 2e 32 37 2c 32 35 38 2e 30 34 2c 31 35 39 2e 32 31 2c 33 31 31 2e 33 37 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 33 35 35 2e 33 35 2c 33 34 38 2e 34 37 63 30 2c 30 2d 32 32 2e 33 38 2d 31 33 2e 30 39 2d 34 34 2e 35 32 2d 31 37 2e 33 36 63 Data Ascii: 1.37c0,0-14.02,44.23,23.47,100.81c0,0,36.59,55.63,88.18,50c0,0,55.78-5.99,86.04-47.4c0,0,39.19-46.28-1.55-66.33c0,0-22.38-13.09-44.52-17.36C310.83,331.1,252.27,258.04,159.21,311.37z"/><path class="st4" d="M355.35,348.47c0,0-22.38-13.09-44.52-17.36c
2024-11-24 12:19:40 UTC	4753	IN	Data Raw: 74 68 20 63 6c 61 73 73 3d 22 73 74 31 30 22 20 64 3d 22 4d 32 32 35 2e 33 32 2c 33 30 35 2e 34 39 63 30 2e 30 31 2c 30 2c 30 2e 30 38 2c 30 2e 30 31 2c 30 2e 32 34 2c 30 2e 30 33 63 30 2e 31 36 2c 30 2e 30 32 2c 30 2e 34 2c 30 2e 30 36 2c 30 2e 37 2c 30 2e 31 63 30 2e 36 2c 30 2e 30 39 2c 31 2e 34 35 2c 30 2e 32 32 2c 32 2e 34 35 2c 30 2e 33 35 0a 09 09 09 63 30 2e 35 2c 30 2e 30 37 2c 31 2e 30 33 2c 30 2e 31 33 2c 31 2e 35 38 2c 30 2e 31 38 63 30 2e 35 35 2c 30 2e 30 35 2c 31 2e 31 33 2c 30 2e 31 31 2c 31 2e 37 32 2c 30 2e 31 33 63 30 2e 33 2c 30 2e 30 32 2c 30 2e 35 39 2c 30 2e 30 33 2c 30 2e 38 39 2c 30 2e 30 34 63 30 2e 33 2c 30 2e 30 31 2c 30 2e 36 2c 30 2c 30 2e 39 2c 30 2e 30 31 0a 09 09 09 63 30 2e 33 2d 30 2e 30 31 2c 30 2e 36 2c 30 2c 30 2e 39 Data Ascii: th class="st10" d="M225.32,305.49c0.01,0,0.08,0.01,0.24,0.03c0.16,0.02,0.4,0.06,0.7,0.1c0.6,0.09,1.45,0.22,2.45,0.35c0.5,0.07,1.03,0.13,1.58,0.18c0.55,0.05,1.13,0.11,1.72,0.13c0.3,0.02,0.59,0.03,0.89,0.04c0.3,0.01,0.6,0,0.9,0.01c0.3-0.01,0.6,0,0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49809	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:40 UTC	1472	OUT	GET /whatsapp.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:40 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:40 GMT Content-Type: image/svg+xml Content-Length: 2794 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-aea" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761;Path=/
2024-11-24 12:19:40 UTC	2794	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 77 69 64 74 68 3d 22 39 36 70 78 22 20 68 65 69 67 68 74 3d 22 39 36 70 78 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 34 2e 38 36 38 2c 34 33 2e 33 30 33 6c 32 2e 36 39 34 2d 39 2e 38 33 35 43 35 2e 39 2c 33 30 2e 35 39 2c 35 2e 30 32 36 2c 32 37 2e 33 32 34 2c 35 2e 30 32 37 2c 32 33 2e 39 37 39 43 35 2e 30 33 32 2c 31 33 2e 35 31 34 2c 31 33 2e 35 34 38 2c 35 2c 32 34 2e 30 31 34 2c 35 63 35 2e 30 37 39 2c 30 2e 30 30 32 2c 39 2e 38 34 35 2c 31 2e 39 37 39 2c 31 33 2e 34 33 2c 35 2e 35 36 36 63 33 2e 35 38 34 2c 33 2e 35 38 38 2c 35 2e 35 35 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48" width="96px" height="96px"><path fill="#fff" d="M4.868,43.303l2.694-9.835C5.9,30.59,5.026,27.324,5.027,23.979C5.032,13.514,13.548,5,24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49810	172.217.19.194	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:40 UTC	1091	OUT	GET /pagead/viewthroughconversion/10947617392/?random=1732450766497&cv=11&fst=1732450766497&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkvQPM2qNLJmqkFgp-VubWtSXBh0khAjkCo4VGLx_o7vokLCSzGk-pjs11g
2024-11-24 12:19:41 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 24 Nov 2024 12:19:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-24 12:19:41 UTC	687	IN	Data Raw: 31 32 39 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 63 29 7b 69 66 28 62 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 62 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 62 3b 62 5b 61 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 62 29 7b 62 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1298(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(b,a,c){if(b==Array.prototype\|\|b==Object.prototype)return b;b[a]=c.value;return b};function k(b){b=["object"==typeof globalThis&&global
2024-11-24 12:19:41 UTC	1390	IN	Data Raw: 22 2e 22 29 3b 62 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 62 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 6e 26 26 63 3d 3d 3d 22 65 73 36 22 3f 67 5b 64 5d 3a 6e 75 6c 6c 3b 61 3d 61 28 63 29 3b 61 21 3d 6e 75 6c 6c 26 26 28 62 3f 68 28 71 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 61 7d 29 3a 61 21 3d 3d 63 26 26 28 74 5b 64 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 62 3d 4d 61 74 68 2e 72 61 Data Ascii: ".");b=d.length===1;var e=d[0],g;!b&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;a=a(c);a!=null&&(b?h(q,d,{configurable:!0,writable:!0,value:a}):a!==c&&(t[d]===void 0&&(b=Math.ra
2024-11-24 12:19:41 UTC	1390	IN	Data Raw: 31 29 3b 61 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 61 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 61 2e 73 72 63 3d 62 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 Data Ascii: 1);a.onload=function(){a.onload=null};a.onerror=function(){a.onerror=null};a.src=b};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userA
2024-11-24 12:19:41 UTC	1301	IN	Data Raw: 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b Data Ascii: src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());
2024-11-24 12:19:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49812	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1444	OUT	GET /mobile/css/sweetalert2.min.css HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:41 UTC	438	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:41 GMT Content-Type: text/css Content-Length: 24467 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-5f93" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761;Path=/
2024-11-24 12:19:41 UTC	2478	IN	Data Raw: 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 2e 36 32 35 65 6d 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 2e 36 32 35 65 6d 20 23 64 39 64 39 64 39 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 68 65 61 64 65 72 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 74 69 Data Ascii: .swal2-popup.swal2-toast{flex-direction:row;align-items:center;width:auto;padding:.625em;overflow-y:hidden;background:#fff;box-shadow:0 0 .625em #d9d9d9}.swal2-popup.swal2-toast .swal2-header{flex-direction:row;padding:0}.swal2-popup.swal2-toast .swal2-ti
2024-11-24 12:19:41 UTC	11296	IN	Data Raw: 2d 6c 69 6e 65 5d 7b 68 65 69 67 68 74 3a 2e 33 31 32 35 65 6d 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 20 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 2d 73 75 63 63 65 73 73 2d 6c 69 6e 65 5d 5b 63 6c 61 73 73 24 3d 74 69 70 5d 7b 74 6f 70 3a 31 2e 31 32 35 65 6d 3b 6c 65 66 74 3a 2e 31 38 37 35 65 6d 3b 77 69 64 74 68 3a 2e 37 35 65 6d 7d 2e 73 77 61 6c 32 2d 70 6f 70 75 70 2e 73 77 61 6c 32 2d 74 6f 61 73 74 20 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 20 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 2d 73 75 63 63 65 73 73 2d 6c 69 6e 65 5d 5b 63 6c 61 73 73 24 3d 6c 6f 6e 67 5d 7b 74 6f 70 3a 2e 39 33 37 35 65 6d 3b 72 69 67 68 74 3a 2e 31 38 37 35 65 6d 3b 77 69 64 74 68 3a 31 2e 33 Data Ascii: -line]{height:.3125em}.swal2-popup.swal2-toast .swal2-success [class^=swal2-success-line][class$=tip]{top:1.125em;left:.1875em;width:.75em}.swal2-popup.swal2-toast .swal2-success [class^=swal2-success-line][class$=long]{top:.9375em;right:.1875em;width:1.3
2024-11-24 12:19:42 UTC	1412	IN	Data Raw: 6d 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 20 5b 63 6c 61 73 73 5e 3d 73 77 61 6c 32 2d 73 75 63 63 65 73 73 2d 63 69 72 63 75 6c 61 72 2d 6c 69 6e 65 5d 5b 63 6c 61 73 73 24 3d 72 69 67 68 74 5d 7b 74 6f 70 3a 2d 2e 36 38 37 35 65 6d 3b 6c 65 66 74 3a 31 2e 38 37 35 65 6d 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 33 2e 37 35 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 37 2e 35 65 6d 20 37 2e 35 65 6d 20 30 7d 2e 73 77 61 6c 32 2d 69 63 6f 6e 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 20 2e 73 77 61 6c 32 2d 73 75 63 63 65 73 73 2d 72 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 Data Ascii: m}.swal2-icon.swal2-success [class^=swal2-success-circular-line][class$=right]{top:-.6875em;left:1.875em;transform:rotate(-45deg);transform-origin:0 3.75em;border-radius:0 7.5em 7.5em 0}.swal2-icon.swal2-success .swal2-success-ring{position:absolute;z-ind
2024-11-24 12:19:42 UTC	5648	IN	Data Raw: 2d 6c 69 6e 65 20 34 2e 32 35 73 20 65 61 73 65 2d 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 77 61 6c 32 2d 72 6f 74 61 74 65 2d 73 75 63 63 65 73 73 2d 63 69 72 63 75 6c 61 72 2d 6c 69 6e 65 20 34 2e 32 35 73 20 65 61 73 65 2d 69 6e 7d 2e 73 77 61 6c 32 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 73 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 73 77 61 6c 32 2d 70 72 6f 67 72 65 73 73 2d 73 74 65 70 73 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: -line 4.25s ease-in;animation:swal2-rotate-success-circular-line 4.25s ease-in}.swal2-progress-steps{flex-wrap:wrap;align-items:center;max-width:100%;margin:0 0 1.25em;padding:0;background:inherit;font-weight:600}.swal2-progress-steps li{display:inline-bl
2024-11-24 12:19:42 UTC	3633	IN	Data Raw: 64 65 67 29 7d 7d 62 6f 64 79 2e 73 77 61 6c 32 2d 73 68 6f 77 6e 3a 6e 6f 74 28 2e 73 77 61 6c 32 2d 6e 6f 2d 62 61 63 6b 64 72 6f 70 29 3a 6e 6f 74 28 2e 73 77 61 6c 32 2d 74 6f 61 73 74 2d 73 68 6f 77 6e 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 6f 64 79 2e 73 77 61 6c 32 2d 68 65 69 67 68 74 2d 61 75 74 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 73 77 61 6c 32 2d 6e 6f 2d 62 61 63 6b 64 72 6f 70 20 2e 73 77 61 6c 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 6f 70 3a 61 75 74 6f 3b 72 69 67 68 74 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 61 75 74 6f 3b 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 2e 36 32 35 65 6d 20 2a 20 32 29 3b 62 61 63 6b 67 72 6f Data Ascii: deg)}}body.swal2-shown:not(.swal2-no-backdrop):not(.swal2-toast-shown){overflow:hidden}body.swal2-height-auto{height:auto!important}body.swal2-no-backdrop .swal2-container{top:auto;right:auto;bottom:auto;left:auto;max-width:calc(100% - .625em * 2);backgro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49813	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1259	OUT	GET /mobile/img/home/2024/Wakaf-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761
2024-11-24 12:19:41 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:41 GMT Content-Type: image/svg+xml Content-Length: 6339 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-18c3" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761;Path=/
2024-11-24 12:19:41 UTC	3886	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-11-24 12:19:41 UTC	2453	IN	Data Raw: 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 32 37 38 2e 33 37 2c 33 36 32 2e 35 39 63 30 2c 31 38 2e 31 36 2c 32 36 2e 30 32 2c 33 31 2e 32 35 2c 35 38 2e 31 31 2c 33 31 2e 32 35 73 35 38 2e 31 31 2d 31 33 2e 30 39 2c 35 38 2e 31 31 2d 33 31 2e 32 35 76 2d 31 31 2e 31 36 48 32 37 38 2e 33 37 4c 32 37 38 2e 33 37 2c 33 36 32 2e 35 39 7a 22 2f 3e 0a 09 09 09 3c 65 6c 6c 69 70 73 65 20 63 6c 61 73 73 3d 22 73 74 38 22 20 63 78 3d 22 33 33 36 2e 34 39 22 20 63 79 3d 22 33 35 31 2e 34 33 22 20 72 78 3d 22 35 38 2e 31 31 22 20 72 79 3d 22 33 31 2e 32 35 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 38 22 20 64 3d 22 4d 32 38 37 2e 36 34 2c 33 35 31 2e 34 33 63 30 2d 37 2e 34 35 2c 35 2e 33 36 2d 31 34 2e 32 31 2c 31 35 Data Ascii: <path class="st7" d="M278.37,362.59c0,18.16,26.02,31.25,58.11,31.25s58.11-13.09,58.11-31.25v-11.16H278.37L278.37,362.59z"/><ellipse class="st8" cx="336.49" cy="351.43" rx="58.11" ry="31.25"/><path class="st8" d="M287.64,351.43c0-7.45,5.36-14.21,15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49816	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1496	OUT	GET /mobile/img/category/bencana-alam.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:42 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:41 GMT Content-Type: image/svg+xml Content-Length: 3816 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-ee8" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761;Path=/
2024-11-24 12:19:42 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:42 UTC	2753	IN	Data Raw: 20 31 2e 34 33 37 2c 30 2e 30 36 33 20 31 2e 30 30 38 2c 30 2e 30 36 33 4c 30 2c 30 2e 30 36 33 5a 4d 31 38 2e 38 37 39 2c 31 31 2e 30 35 36 43 31 37 2e 39 38 35 2c 31 31 2e 32 31 36 20 31 37 2e 33 37 31 2c 31 31 2e 35 32 31 20 31 36 2e 38 32 33 2c 31 31 2e 38 30 36 43 31 36 2e 31 31 35 2c 31 32 2e 31 37 36 20 31 35 2e 35 30 33 2c 31 32 2e 34 39 36 20 31 34 2e 32 30 35 2c 31 32 2e 34 39 36 43 31 32 2e 39 30 37 2c 31 32 2e 34 39 36 20 31 32 2e 32 39 36 2c 31 32 2e 31 37 36 20 31 31 2e 35 38 38 2c 31 31 2e 38 30 36 43 31 31 2e 30 34 36 2c 31 31 2e 35 32 33 20 31 30 2e 34 33 36 2c 31 31 2e 32 32 32 20 39 2e 35 35 35 2c 31 31 2e 30 36 31 4c 39 2e 35 35 35 2c 34 2e 37 32 35 4c 31 38 2e 38 37 39 2c 34 2e 37 32 35 4c 31 38 2e 38 37 39 2c 31 31 2e 30 35 36 5a 4d Data Ascii: 1.437,0.063 1.008,0.063L0,0.063ZM18.879,11.056C17.985,11.216 17.371,11.521 16.823,11.806C16.115,12.176 15.503,12.496 14.205,12.496C12.907,12.496 12.296,12.176 11.588,11.806C11.046,11.523 10.436,11.222 9.555,11.061L9.555,4.725L18.879,4.725L18.879,11.056ZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49817	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1496	OUT	GET /mobile/img/category/rumah-ibadah.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450772\|1732450761
2024-11-24 12:19:42 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:42 GMT Content-Type: image/svg+xml Content-Length: 6024 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-1788" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450782\|1732450761;Path=/
2024-11-24 12:19:42 UTC	2474	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:42 UTC	2824	IN	Data Raw: 38 34 2e 35 38 31 2c 35 39 34 2e 33 34 35 4c 32 38 32 2e 32 37 36 2c 35 39 34 2e 33 34 35 43 32 38 32 2c 35 39 34 2e 33 34 35 20 32 38 31 2e 37 37 36 2c 35 39 34 2e 35 36 38 20 32 38 31 2e 37 37 36 2c 35 39 34 2e 38 34 35 4c 32 38 31 2e 37 37 36 2c 35 39 38 43 32 38 31 2e 37 37 36 2c 35 39 38 2e 32 37 36 20 32 38 32 2c 35 39 38 2e 35 20 32 38 32 2e 32 37 36 2c 35 39 38 2e 35 4c 33 31 39 2e 37 38 39 2c 35 39 38 2e 35 43 33 32 30 2e 30 36 35 2c 35 39 38 2e 35 20 33 32 30 2e 32 38 39 2c 35 39 38 2e 32 37 36 20 33 32 30 2e 32 38 39 2c 35 39 38 4c 33 32 30 2e 32 38 39 2c 35 39 34 2e 38 34 35 43 33 32 30 2e 32 38 39 2c 35 39 34 2e 35 36 38 20 33 32 30 2e 30 36 35 2c 35 39 34 2e 33 34 35 20 33 31 39 2e 37 38 39 2c 35 39 34 2e 33 34 35 4c 33 31 37 2e 34 38 34 2c Data Ascii: 84.581,594.345L282.276,594.345C282,594.345 281.776,594.568 281.776,594.845L281.776,598C281.776,598.276 282,598.5 282.276,598.5L319.789,598.5C320.065,598.5 320.289,598.276 320.289,598L320.289,594.845C320.289,594.568 320.065,594.345 319.789,594.345L317.484,
2024-11-24 12:19:42 UTC	726	IN	Data Raw: 39 37 20 33 31 31 2e 33 35 36 2c 35 37 32 2e 39 33 33 4c 33 31 31 2e 39 30 31 2c 35 37 32 2e 39 33 33 43 33 31 32 2e 37 37 31 2c 35 37 32 2e 39 33 33 20 33 31 33 2e 34 37 39 2c 35 37 33 2e 36 34 31 20 33 31 33 2e 34 37 39 2c 35 37 34 2e 35 31 31 43 33 31 33 2e 34 37 39 2c 35 37 35 2e 33 38 20 33 31 32 2e 37 37 31 2c 35 37 36 2e 30 38 38 20 33 31 31 2e 39 30 31 2c 35 37 36 2e 30 38 38 4c 33 31 31 2e 33 37 35 2c 35 37 36 2e 30 38 38 4c 33 31 31 2e 33 37 35 2c 35 37 37 2e 38 34 31 4c 33 31 36 2e 39 38 34 2c 35 37 37 2e 38 34 31 4c 33 31 36 2e 39 38 34 2c 35 39 34 2e 38 34 35 4c 33 31 39 2e 37 38 39 2c 35 39 34 2e 38 34 35 4c 33 31 39 2e 37 38 39 2c 35 39 38 4c 32 38 32 2e 32 37 36 2c 35 39 38 4c 32 38 32 2e 32 37 36 2c 35 39 34 2e 38 34 35 4c 32 38 35 2e 30 Data Ascii: 97 311.356,572.933L311.901,572.933C312.771,572.933 313.479,573.641 313.479,574.511C313.479,575.38 312.771,576.088 311.901,576.088L311.375,576.088L311.375,577.841L316.984,577.841L316.984,594.845L319.789,594.845L319.789,598L282.276,598L282.276,594.845L285.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49818	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1260	OUT	GET /mobile/img/home/2024/Korban-01.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450778\|1732450761
2024-11-24 12:19:42 UTC	420	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:42 GMT Content-Type: image/svg+xml Content-Length: 11093 Connection: close Last-Modified: Tue, 27 Feb 2024 17:21:50 GMT Vary: Accept-Encoding ETag: "65de1a2e-2b55" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450782\|1732450761;Path=/
2024-11-24 12:19:42 UTC	11093	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49819	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:41 UTC	1252	OUT	GET /mobile/img/menu/derma2.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761
2024-11-24 12:19:42 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:42 GMT Content-Type: image/svg+xml Content-Length: 2001 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-7d1" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450782\|1732450761;Path=/
2024-11-24 12:19:42 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg"
2024-11-24 12:19:42 UTC	938	IN	Data Raw: 36 36 20 33 32 30 2e 34 32 36 2c 32 30 34 2e 39 36 37 4c 33 32 38 2e 35 38 34 2c 32 30 35 2e 30 33 36 4c 33 33 30 2e 38 34 2c 32 30 35 2e 30 35 35 43 33 33 32 2e 32 30 38 2c 32 30 35 2e 30 36 36 20 33 33 33 2e 35 33 39 2c 32 30 34 2e 36 31 20 33 33 34 2e 36 31 32 2c 32 30 33 2e 37 36 31 4c 33 34 33 2e 31 37 37 2c 31 39 36 2e 39 38 39 43 33 34 34 2e 32 36 32 2c 31 39 36 2e 31 33 31 20 33 34 34 2e 34 34 36 2c 31 39 34 2e 35 35 36 20 33 34 33 2e 35 38 39 2c 31 39 33 2e 34 37 31 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 72 67 62 28 32 35 31 2c 32 35 31 2c 32 35 31 29 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 31 31 2e 33 33 32 2c 31 39 37 2e 37 39 36 43 33 31 31 Data Ascii: 66 320.426,204.967L328.584,205.036L330.84,205.055C332.208,205.066 333.539,204.61 334.612,203.761L343.177,196.989C344.262,196.131 344.446,194.556 343.589,193.471Z" style="fill:rgb(251,251,251);fill-rule:nonzero;"/> <path d="M311.332,197.796C311

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49814	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:42 UTC	692	OUT	GET /sumbangan.com/public/sliders/668e257b9598f_Sumbangan_Slider_Doa_Harian.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:42 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:42 GMT Content-Type: image/jpeg Content-Length: 472176 Connection: close x-oss-request-id: 674319DEF3A69533386CABBD Vary: Origin Accept-Ranges: bytes ETag: "AECD95211DAAD969B2E94BF1E4FC42DF" Last-Modified: Wed, 10 Jul 2024 06:08:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4843211573392050183 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 11 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: rs2VIR2q2Wmy6Uvx5PxC3w== x-oss-server-time: 1
2024-11-24 12:19:42 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 05 73 09 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 1b 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 c0 f4 7e 1c Data Ascii: JFIFC!"$"$Cs"~
2024-11-24 12:19:42 UTC	16384	IN	Data Raw: 71 7d bf 3b 95 09 7e a5 f1 1d 6e ea 2f fc 5f f4 50 0c ac 00 00 00 00 0e 6b d2 b9 77 d2 79 5a ff 00 40 e7 3d 1b ea 7c 8d c4 0f cc be b0 00 00 00 00 00 03 17 98 75 9f 2f e8 3c ce 56 e9 97 e9 bf 1d 3f 6b 0b aa fc df ac af 0f ce 7e b4 02 18 00 00 00 00 78 dc c3 b2 72 ff 00 b4 f0 72 3a 67 30 e9 fc 1d 00 1f 35 eb 1c cf a6 73 0f a2 f3 b5 99 d1 6f e9 3f 28 6d 5a 96 d7 e4 77 74 c0 3f 2b fa e0 00 e3 de 7e 67 9d fb 07 c5 75 3d 8f 5b d9 3f 30 fa b0 0f 3b a9 72 8e b1 e4 fb 7c 1c 96 a9 e3 fe 9d f2 70 c8 85 cd c2 e8 ef de 76 fb 3e 60 7e 55 f6 20 19 d6 3f 0c ee 5c 23 ee 3c 3c 89 46 5f 65 e0 43 1a da a7 6f 53 b4 68 db ff 00 c0 7b e0 1f 2d eb 00 04 78 e7 65 d2 7e 93 cb d1 a5 4d bf a4 7c 9c 30 f3 30 e7 6b ad ae c7 0d 92 70 29 a1 43 ca f5 b0 a7 7c 6c 8c 2b e7 a7 2e cc 6b ab Data Ascii: q};~n/_PkwyZ@=\|u/<V?k~xrr:g05so?(mZwt?+~gu=[?0;r\|pv>`~U ?\#<<F_eCoSh{-xe~M\|00kp)C\|l+.k
2024-11-24 12:19:42 UTC	16384	IN	Data Raw: 19 a2 72 4d e3 46 5c f3 ec dc 6b 7f 4b df c9 dd 3e 6b ae 9e b7 a7 5d d3 d3 f9 db e8 ff 00 33 cd 34 e4 fd 8f 45 f5 43 93 fd 35 f3 9f d1 0b 2e 3b d4 38 1f 77 6b 82 fd 02 6c 8e b8 5e a1 97 85 1c b9 fd 9b 4b da 2b 4d 83 9c 74 7e 3c f5 ea 9c 07 e9 3f 01 12 e7 dd 3b 91 8b ba 7c cd df b8 08 be 83 e3 3d f7 e6 61 f5 5f 3f 71 e5 e9 f5 fe 25 f4 1e bf 57 c9 fa a7 a9 c8 65 76 4f 9c ba df b8 df 2f df f6 0e 24 9f 5d e4 3d ef e6 82 37 ff 00 7e cd 6a a3 a0 72 dc ee a6 ce 43 d6 ad d6 4a e3 93 ae c5 e7 c9 81 08 51 4c aa 55 4e b1 a6 ca 73 de 35 ba eb 78 d7 2a f4 d9 20 bb 76 c7 26 33 7f 54 7c b3 f5 84 ce 3f 91 ea 79 bb df bb 15 21 40 68 1a 00 68 60 81 03 4d 82 4e 00 c6 98 f1 b2 12 7e 4b 84 39 7d 3a ab 95 73 af 97 e6 7b 3e 7a bd 63 de f1 33 85 e8 e0 67 f9 8a bd ac 1c 99 d4 d1 Data Ascii: rMF\kK>k]34EC5.;8wkl^K+Mt~<?;\|=a_?q%WevO/$]=7~jrCJQLUNs5x* v&3T\|?y!@hh`MN~K9}:s{>zc3g
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 4d 2b 88 d0 e2 9b 9a 13 88 0d 30 69 8d 0d b6 a2 34 00 01 21 0c 64 64 21 30 13 00 01 03 71 60 da 1a 60 00 08 04 31 80 da c1 4d 71 f5 24 c4 d2 60 e2 34 9a 1a 1a 1a 01 30 09 29 03 92 95 43 9a 93 cd c9 4e a0 01 ca 1c 47 18 4e b9 d2 14 5b 46 7b 55 45 b4 1d 75 c2 4b 5d d0 0d a1 a0 00 00 00 18 c2 56 57 64 67 3b 2b b2 32 9d 95 d8 b2 b2 ca ac ac ac 94 26 f2 9b 8b a8 69 8c 84 2c 84 dd 35 db 5c eb 5a 6a 75 40 0c 13 01 36 11 1a 04 da 05 19 44 a4 e4 21 31 b1 0c 48 4d 30 69 80 80 08 c9 0d 26 0d 02 18 81 b1 38 83 88 9d 11 21 54 44 57 62 07 40 00 00 00 00 00 00 00 00 03 40 4a 55 b4 ae 74 b9 9b ca 64 a6 d9 d5 64 44 e1 68 a3 06 71 96 bb ca 51 94 43 84 e0 11 19 54 34 d2 94 a1 25 33 23 29 90 18 86 80 1a 01 a6 80 40 00 d0 11 63 70 8c d3 a8 13 4d c1 4c 75 02 48 14 d4 d2 94 a3 Data Ascii: M+0i4!dd!0q``1Mq$`40)CNGN[F{UEuK]VWdg;+2&i,5\Zju@6D!1HM0i&8!TDWb@@JUtddDhqQCT4%3#)@cpMLuH
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: f0 4c 20 c7 ec eb 77 25 d8 b0 fc 66 78 f1 99 e3 c6 67 8f 19 9e 3c 66 78 f1 99 e2 64 87 65 3c 91 8b fe c7 64 ab d9 2d 48 fc 43 28 31 90 ab 78 b2 1a 92 d7 65 e3 7c 9b 12 14 51 b9 31 7b 25 c9 62 2b 72 b2 33 dc f2 09 c2 3e 4a e1 1c 09 f1 a7 20 48 79 b6 1a b6 b4 72 6a c8 63 7f 52 ec ca be 7c b4 70 c6 23 f3 3d 97 1f 55 21 8e fd 37 b7 26 87 c0 bf 75 16 95 91 4e 54 a4 91 25 3d 92 7e 5d 23 61 b0 58 61 06 67 05 82 8d 17 ba 43 49 79 87 5b 53 2f 05 0f fe c8 17 72 82 cb 65 10 23 04 0b 45 96 e4 7e 46 40 81 76 b8 08 17 a4 7d 86 5d 86 0f bf 0a 4a 4a 99 5e d2 3d 91 f1 10 21 b7 a1 bf 61 76 6f e8 97 66 fa 9f 98 e9 98 ea a3 d6 b2 cd 9e 57 1a 44 a1 25 b4 d2 df 58 a5 6e e5 15 ca 76 32 a9 9c b4 87 4e 56 d1 0a ba 0d 8c 49 a9 4c f7 91 22 14 a6 66 47 d7 7e d2 f4 37 d3 6d 37 ed 31 Data Ascii: L w%fxg<fxde<d-HC(1xe\|Q1{%b+r3>J HyrjcR\|p#=U!7&uNT%=~]#aXagCIy[S/re#E~F@v}]JJ^=!avofWD%Xnv2NVIL"fG~7m71
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: e5 c5 c4 56 4b a5 ca 99 71 bb ac 56 0a e5 5a e6 52 09 9a 4a 05 25 54 f7 4d 3b 1e cf 00 80 e3 96 1f f2 03 dc 30 8b 4c 7d 9e 45 3e 4a cb 8d 5c e1 90 1c 7e d7 39 7c 9b a7 c6 94 95 51 d9 65 36 30 e6 b7 96 d9 2d 17 37 12 2e 0e 32 4a 25 53 eb e6 3f ff 00 1f b3 c5 37 fe 43 78 63 8c f3 ee b2 f7 b9 34 49 dc ce 31 14 5a ac 6d e4 ab 25 cb d9 71 ea 3f 71 8a 42 5c 2a 99 46 9b 1c cf 2d 7b 93 42 31 96 79 14 6e c8 4b b9 35 eb 4b 7e 99 44 64 78 14 07 22 c0 cc dd 29 99 25 92 ca 25 3f 10 c1 99 e5 d2 5d 48 25 e6 17 8d 2d fa 8e 13 23 c2 61 39 1a 06 68 f7 32 e3 09 67 82 a7 2d 7b 9b 75 86 b5 cd b9 ce 1e e0 ad d4 fb 77 d6 b1 24 bb 11 3f f7 62 17 e6 70 19 7e 52 ec 20 7a 79 e8 63 7e c7 77 e7 ab da 40 57 ba 7f 71 d2 dd a8 67 f9 67 27 f4 59 57 12 16 5b a2 03 bb 0f 70 b3 e4 c8 46 ca Data Ascii: VKqVZRJ%TM;0L}E>J\~9\|Qe60-7.2J%S?7Cxc4I1Zm%q?qB\*F-{B1ynK5K~Ddx")%%?]H%-#a9h2g-{uw$?bp~R zyc~w@Wqgg'YW[pF
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 87 fc 5c 5a a2 5a a0 58 59 d4 46 ba 71 18 cb ac 0b 77 a2 b3 88 d3 35 cf b3 cc de e6 5c 88 ff 00 e2 e1 71 1b e6 ca cd dc ff 00 3f 4a 48 25 61 3e ea 19 40 9e 31 c8 cd c4 8b 3a 53 93 25 0a 57 fa 6b 5c c1 8e 4d ce 18 64 f1 64 72 db 69 b2 56 ca 73 a4 c8 a0 fe 17 9c 47 46 98 10 62 3a ae 35 e3 fc b9 d8 e5 85 0c a8 31 16 61 a1 8f cf 8c b8 2b c6 26 1a a1 44 89 42 1e 98 eb 96 13 18 89 91 32 de 30 a6 95 7d 6c c1 c5 ec 2f eb 12 40 8b 53 30 60 82 4b b4 81 10 22 1b 7a 10 ec 66 c4 38 59 49 88 76 b0 65 10 7e 33 0f 94 dc 6e 3b 81 ea eb 4a f5 45 bf 90 d8 b3 5c 4b 74 d5 d6 46 86 87 50 4e 34 cd 54 b3 94 d9 b6 65 32 6c a7 65 63 f6 07 2a 22 63 c1 b3 0d 21 2d 35 f6 13 67 b3 18 2d ca b9 a7 0f 92 51 c6 50 da db 76 52 b7 11 a4 38 eb 50 df ea 58 91 35 a6 a4 ea a9 2c 25 eb 46 b6 36 Data Ascii: \ZZXYFqw5\q?JH%a>@1:S%Wk\MddriVsGFb:51a+&DB20}l/@S0`K"zf8YIve~3n;JE\KtFPN4Te2lec*"c!-5g-QPvR8PX5,%F6
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 93 54 b4 ee a5 ac 7c 8c c0 ae 19 f9 85 57 7e 5a 7e 8d f2 a7 d6 ca 1c 55 35 6f 30 e2 e5 57 16 6c ba a0 66 47 22 a6 9b 96 10 a9 25 46 f0 f1 75 55 18 63 ae a2 60 91 d6 4e 70 8d aa 78 f9 b1 d9 39 b6 58 3b e8 8b 48 ea b8 77 e5 2a 99 9f 1b ac 14 75 8e bf 79 10 24 6a 14 ff 00 8d 82 da 36 a7 55 bc f4 54 f5 3c c3 89 55 f0 07 b3 25 8a a4 8b 95 15 93 1e 24 17 0a a6 2e 5b c8 57 28 15 49 f9 41 55 46 e7 3f 60 a9 e2 78 98 12 14 ff 00 96 53 82 e1 d1 58 66 50 90 17 62 ab 62 ef 64 a2 1b 84 7a 2f 8b 90 28 9f 9b 6e a7 8c 36 a0 59 3b a2 3b 2a 38 ee 73 59 8c b1 55 f1 5c 64 ac 9b d1 4f 0f 30 2a 31 67 95 59 f9 68 ec 57 a2 28 a3 a5 d5 d3 1a 5d d1 7c 1b 9c 37 42 99 8d 50 b7 be 11 ec c9 4c d7 9c bd 55 e5 6f a5 d0 85 cf 7e 72 2a e6 5d a1 ca 37 64 d0 54 86 cd 25 70 f1 b1 2a 5f c5 93 Data Ascii: T\|W~Z~U5o0WlfG"%FuUc`Npx9X;Hwuy$j6UT<U%$.[W(IAUF?`xSXfPbbdz/(n6Y;;8sYU\dO01gYhW(]\|7BPLUo~r]7dT%p*_
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 68 fa 38 db a1 5b 4d 87 2b e5 27 7d f9 3c ff 00 44 ef 77 e6 a3 fc 73 47 72 87 e1 c7 97 bc bf ea 12 e7 ec 5e c9 9e 32 aa 93 5f 02 22 ad d0 c7 e0 69 e3 68 ba 73 3b 43 b3 6b 60 67 a6 6b a7 af 37 62 f6 14 aa c9 56 ae ba 7a 7a 89 5b a6 5d b9 d8 be d3 fd 6a 5f 37 ff 00 a4 e1 28 4b 4c 97 5e 5a 34 27 5e 7a 20 ae ce c8 ec 98 e0 a1 aa 5f 33 22 77 bb f1 29 e7 81 fc b4 3f 84 76 a7 67 43 1d 45 c1 ef e4 56 a3 2a 33 70 9e eb 2c 1e 2a 78 5a aa ac 0c 0e 32 18 ca 2a ac 33 59 3c ad 95 cb f8 4f c1 7b f8 51 96 97 71 57 b6 c8 8f 0f 56 a4 ca 0f ab 65 39 39 a6 a4 55 e1 df e2 1d 05 7b 5c 74 a4 be 95 f2 47 7f d1 3b 6b b0 ea 76 85 55 38 ca dd 0f 74 6b fd e8 f7 46 bf de 8f 74 6b fd e8 f7 46 bf de 8f 74 6b fd e8 5d d1 af f7 a2 9c 74 c5 2e 5e d5 ee ed 5c 66 25 d6 8c 91 ee 8d 7f bd 1e Data Ascii: h8[M+'}<DwsGr^2_"ihs;Ck`gk7bVzz[]j_7(KL^Z4'^z _3"w)?vgCEV3p,xZ2*3Y<O{QqWVe99U{\tG;kvU8tkFtkFtk]t.^\f%
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: b1 a0 e3 74 a8 5c 23 75 c0 cc 70 c9 5a 5c d1 53 71 5e b6 da 36 a5 3b 2c 71 c9 3a cc e8 80 8c 0a de 47 5d 0e ae 46 3b da 52 bf ba 6f da 4e 65 fe cb 80 cd 09 1e 7d 16 57 7b 96 ba cd 68 79 82 4c 71 17 80 54 b4 59 da fe f6 e0 b5 c2 39 23 1c 24 14 3a 1d 24 70 b1 af 7e 66 8a 92 c4 c7 8f 88 55 6d 59 58 3c bb 3f c9 56 cd 33 e3 77 07 62 15 c9 db 9e 44 64 7f 17 12 c4 eb ae 08 36 d1 e8 9f fb 15 79 8e 0e 1c 46 8b cf 7b 5a 38 92 8c 56 33 7d fd bd c1 17 13 52 73 d3 46 9b d1 ef 61 54 32 6a 9f c1 ea a0 d4 68 a9 34 0a 82 4d 6b f8 31 51 c6 ec 7b 98 34 bf cd a2 0f 3e 8b f0 bc b1 dd c8 c6 fb 43 cb 4e 63 44 7e 61 a6 7f 39 e6 c7 a2 0f 21 d0 75 12 b9 95 ce 8b 57 2c ef 7b 78 68 b3 9f 8f 43 bc 10 84 6f 76 28 31 b9 01 4d 05 80 ec c7 87 31 b5 3b 32 6c 9d 14 46 3e a9 75 5a 9b e1 a0 Data Ascii: t\#upZ\Sq^6;,q:G]F;RoNe}W{hyLqTY9#$:$p~fUmYX<?V3wbDd6yF{Z8V3}RsFaT2jh4Mk1Q{4>CNcD~a9!uW,{xhCov(1M1;2lF>uZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49815	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:42 UTC	454	OUT	GET /sumbangan.com/public/sliders/6684cada3ae36_Sumbangan_Slider_Cukai.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:42 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:42 GMT Content-Type: image/jpeg Content-Length: 316513 Connection: close x-oss-request-id: 674319DE9CAEC93139B4CFD4 Vary: Origin Accept-Ranges: bytes ETag: "2CFA8B18E533D5677479028C0CBB2530" Last-Modified: Wed, 03 Jul 2024 03:51:54 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11941476468529353407 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: LPqLGOUz1Wd0eQKMDLslMA== x-oss-server-time: 1
2024-11-24 12:19:42 UTC	15774	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 05 73 09 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f8 41 eb f8 00 Data Ascii: JFIFC!"$"$Cs"A
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 3e 1d f3 de db e5 fa e5 c2 4c 6f cf 21 11 30 a0 22 60 44 c4 d4 45 a2 2a b5 54 c7 a5 9e bb da fc dc 38 f5 74 70 6a 33 db 61 ac 9b dd c9 cf 33 d7 cf c2 cf be 3d bb 68 ec ef c7 14 9a b5 4c 77 c7 9e b5 ad b1 ce b8 b5 ed 5e 7e 98 0d 00 00 00 01 37 a6 56 6b 9f 0e dd e7 bb 92 27 b7 cf 99 ad 99 66 c2 b3 bf 93 81 d9 ef e4 cf 13 1b e5 f4 7e c7 e7 de 83 e2 fb 98 b0 64 c7 9f 58 94 80 b0 94 b4 ae 54 60 ae cb 37 52 37 22 6b 4a bd 08 cd e7 57 a6 cd e5 d7 ac cd e4 3a e9 79 0e b0 e4 d7 b0 8e 35 7b 6c eb 87 5e eb 37 83 5f a0 62 fc f4 7d 13 37 e6 e3 e9 59 d7 cc d7 ea 18 bf 2d 1f 54 cd f9 48 fa c6 6f c9 47 d7 46 2f c9 3e b6 31 7e 4f 5f ec b9 79 df 33 a9 87 37 ea 7e 54 a1 db 9c a2 49 42 35 b8 7d 09 e8 fa 19 89 f1 6e d3 59 8b 5a b2 68 fc 9f 57 95 f9 6f d2 25 1f 3b db a3 f5 9f Data Ascii: >Lo!0"`DE*T8tpj3a3=hLw^~7Vk'f~dXT`7R7"kJW:y5{l^7_b}7Y-THoGF/>1~O_y37~TIB5}nYZhWo%;
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: ac 7a 3e 47 ec 7e 0b ec 2b c8 b5 a7 5f 7e 6d 9f 7d fc fb ed f8 f4 79 57 33 4e 35 ce df a1 7f 3b fd de 7a 6a df d0 33 67 a7 91 fa d7 94 fa 61 e2 df 61 f2 3f 59 ac 75 fe ab e5 3e 7f 3b f9 6d ef 6b e3 67 7d bf 8b fb 5f 3d df 2f aa f9 bf be e7 26 7e 0f 5f 89 73 c9 f9 df a1 f9 ee 9e 6f 66 f8 0f b5 f8 be 7e 9d fe df 17 9b 71 f2 d9 3d af 95 cb d9 ad 9b 4f 27 5f 2f c3 f1 fa dc 8e be 09 1a c3 d7 bc 87 d5 b9 fa bc eb e5 ba fc 2e 5e cf d0 fe 49 ea 9c 2e 7e 9f b1 f0 cf 75 f0 ae df 3f db 7c 3b da 3c 5f 58 f5 9f 85 fb 3f 3f 9b f6 1f 03 fb ff 00 ab c7 5f 8b b7 d4 7c bf 3f 4f 92 2d 59 b8 cf 87 6e e3 36 5a df af 92 f7 ad f7 c6 d6 8b 5e 76 bd 2d 71 68 95 ce 39 ba 5b 62 5c a4 df 12 da 91 32 e4 cb 5c 9a e4 89 5c 89 48 0a 04 49 00 46 6c 50 d7 57 e8 3e 29 37 ea 9d ef 0c 8c 77 Data Ascii: z>G~+_~m}yW3N5;zj3gaa?Yu>;mkg}_=/&~_sof~q=O'_/.^I.~u?\|;<_X??_\|?O-Yn6Z^v-qh9[b\2\\HIFlPW>)7w
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: d5 ab b7 56 29 24 92 4e 30 dc 6b 62 15 15 b5 53 88 aa 6a 22 0f ac ab 7b 58 e7 31 dd ba b5 4b 2c 92 ba 1a 89 e1 06 b6 b0 85 15 44 f0 8e dd 5a 9e e7 3d d0 5c 2b 21 8d ef 73 dd d7 58 ef 0f 99 21 c2 91 d9 40 65 31 8b 1d 05 15 04 86 32 c7 87 0e 03 c8 2a 42 a4 3e 4d 38 f1 8f d3 e5 61 63 cf d3 14 fc 9b 6a b9 cd cf ad 56 78 f6 c3 fa aa e7 7f 91 5e 24 c4 2b 49 7e 3a d7 4e e6 5e 8b 16 d5 85 8e 39 41 c8 3d 07 a1 22 12 21 22 0f 0b 7a dc b7 2c ac ac fc 49 18 0a 74 68 31 0c 84 1e 9a ef d4 b4 ed 2d 70 70 fd f3 88 68 91 db dd f3 27 f4 03 2a 36 2c 74 94 38 35 e5 86 19 04 88 79 2e 2a 42 9d e4 35 53 04 df 9d 85 85 8f 2a 9a 23 34 f0 30 47 0d 53 83 29 90 19 30 33 97 0f ea aa 5d ba 65 75 93 7d 52 d3 b0 f2 ad e4 e0 5e 67 ed 37 3c 2c 2d ab 6a 2c 5b 56 d5 b5 63 8e 56 e4 1e 84 88 Data Ascii: V)$N0kbSj"{X1K,DZ=\+!sX!@e12B>M8acjVx^$+I~:N^9A="!"z,Ith1-pph'6,t85y.B5S#40GS)03]eu}R^g7<,-j,[VcV
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: e4 62 70 5b 4a f1 e3 95 94 1c b7 a0 f4 1e 83 d0 7a dc b2 b2 89 f1 8f cb 07 f5 5a 5c ff 00 ec fa 2f 0d dd 6c ea 91 a8 7d a8 48 17 30 2e 60 45 e8 b8 a0 d2 4d 2f e3 71 97 fa e4 fe c4 55 2f e4 f4 5c 7f 03 86 97 f6 af 22 a2 66 41 0d ca b1 f5 b5 3d 5e aa 1b 7d 64 c9 96 1a f7 26 69 da 82 a2 d3 91 aa 3b 65 25 29 e9 a9 fc 89 dd 81 a3 3d 93 a3 56 7b e7 49 f8 c0 20 87 11 d4 50 43 ca d3 f6 c7 d7 d5 34 06 b7 c8 c8 f8 95 2e cb e3 19 7c ad dd 1c 6d 95 cd 8a 26 b1 56 3b ee 4d 1b 5a 65 90 11 38 42 46 1e 25 8c 28 c0 d5 c9 70 5f e6 6a e7 94 d3 91 c6 a1 db 63 9c e5 fe 44 43 ed 9b d7 aa e3 26 fa 9f d0 b8 e1 bc 34 84 1c db a2 d5 93 72 ed fd 38 58 45 ab 60 46 26 a7 40 13 a9 d1 a7 72 30 b8 22 d3 d1 95 94 1c b7 ad cb 72 67 8b 9b e9 e5 83 fa 9b 0b f6 5d 7a 2a 19 cc 81 e3 6b ba 8b Data Ascii: bp[JzZ\/l}H0.`EM/qU/\"fA=^}d&i;e%)=V{I PC4.\|m&V;MZe8BF%(p_jcDC&4r8XE`F&@r0"rg]z*k
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 2e 08 8c 26 b9 67 e1 e7 f4 64 22 d4 e8 c2 74 28 c4 e4 5a 47 c4 80 65 c3 a5 fe 8e f5 1d 50 1c 4a 9a fc 2e 6a 0f 59 0b c1 78 2d a1 16 23 1a d8 b0 51 eb 7a 81 0e 97 7a 4d e3 34 5f c7 cd 70 ca e5 f8 8f 28 fa 0f 5f 3a 56 a8 8f 17 14 02 c2 da bd 13 4f 17 0c 16 9c 84 ff 00 46 2f 0e 00 fc 07 84 c3 c1 e9 a8 7f 37 fa 47 e9 e7 c8 13 0f 12 51 76 16 e4 d3 f0 26 67 db 09 fb 48 53 33 c1 44 f2 c3 1c a1 c8 7e 95 c3 2a 58 11 05 aa 29 30 99 26 50 3d 45 14 e4 0f 1c f0 21 39 ab c4 20 f4 0f 4e 7c cc ac ac ac ac ac fe 87 0b 08 b5 16 04 62 0b 92 51 8d c1 10 47 9f 4c 10 e9 97 f8 f5 84 df 16 f0 f1 59 2b 7e 10 95 09 90 7a c8 5e 0b c1 48 3c 7a a5 3e 34 dd 52 fa 7a cc cf e3 f2 4f a3 3c f7 8f 06 fd af 1e 89 c3 c4 39 6e 5b 91 f1 4d 1c 5e 3c 23 3c 0a 2d e2 1d 83 f0 3d 08 e0 5a 83 51 08 Data Ascii: .&gd"t(ZGePJ.jYx-#QzzM4_p(_:VOF/7GQv&gHS3D~*X)0&P=E!9 N\|bQGLY+~z^H<z>4RzO<9n[M^<#<-=ZQ
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: c8 e5 95 8b 23 4a 34 47 e0 d1 1f 83 77 1f 83 77 1f 83 77 1f 83 75 13 75 13 75 13 75 12 54 7e 0e 71 65 2a 9a d7 fa cc 77 e5 f0 61 bc e5 5a db b2 12 de 44 6b ee b2 16 16 44 e9 ca 1d c8 51 94 d5 d1 e1 e5 6b 94 d5 4d 1c 8c 3d 3f f2 31 14 9b e6 88 53 94 fb 1e 1a 43 8b 4e cc a5 e7 45 5a 9a 15 ca 55 77 85 78 a5 3e 44 70 d2 64 e8 ca 05 05 3b 7d a5 2b ef 79 98 af 63 c3 ca d7 30 be e5 7f 3f 06 07 c9 e8 23 3f 9c bb f4 58 de 68 5e 95 bb 2b 9c e6 ca 54 d5 35 62 ae 23 da 23 93 7d f8 6e cc 33 6c 56 2d 12 d1 34 c4 6e c3 ad 26 6f 64 6f 64 6f a4 6f a4 6f a4 6f 99 0a 9a 8a 91 ba 29 4b 4c bd 1d cb fa 8c 77 e5 f0 61 7c e5 59 41 79 85 69 c7 ed 30 f0 b4 9d c9 c6 6d f2 65 45 78 73 30 de 42 a5 79 5d a4 51 fc b4 61 a4 ef 63 13 36 9d 91 41 ce dc 91 4e 33 4f ee 66 2b cc 8a 5e 74 55 Data Ascii: #J4GwwwuuuuT~qe*waZDkDQkM=?1SCNEZUwx>Dpd;}+yc0?#?Xh^+T5b##}n3lV-4n&ododoooo)KLwa\|YAyi0meExs0By]Qac6AN3Of+^tU
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 6a bc 1f ba e5 1c dc e9 37 70 59 af 6d 3a ec 74 27 1f 74 f5 a7 45 20 a3 9a 6f fa 26 2e e0 fe cb 28 ef 9d 01 1c 4d 2f 79 c0 05 9d 95 4f 9b f9 58 b9 d9 bc 51 7e 4b 27 2c 07 ba 71 54 38 a1 37 2f 23 5d 5a 10 13 58 d7 17 31 c2 a0 9b 23 85 b8 bc d1 17 bb 2a 96 80 54 e0 8e 6e 15 b9 67 b7 d1 c5 f3 b9 7a 49 e5 71 ea b9 7a 1c a2 46 9f cd 7a cd 99 b7 1c 1c 30 36 3f be 99 dc b3 96 ca 5e f8 ab b2 02 11 c7 94 3e 49 8e ee 1a 0d ef 95 24 03 6d 94 25 72 cd 1a b2 df f7 b4 e5 0e 1a d2 e1 d8 9e d6 fb 86 85 33 b9 67 a3 19 b1 ef 7b 97 a5 9e 57 1e ab 97 fd 3e 50 f6 9f cd 7a cc 9d 94 e0 77 1b 1d 33 e6 7b 08 75 2e 43 22 c9 49 92 ad ad 5d b9 7a 79 e4 73 bf 2d c1 57 26 9d c1 dc 1e 9d 0c cd cd 70 b0 43 03 33 9c ab 94 e5 0e 2e e0 c5 e8 27 91 ae fc d7 84 e8 66 6d 1c 18 7e eb f5 8b 39 Data Ascii: j7pYm:t'tE o&.(M/yOXQ~K',qT87/#]ZX1#*TngzIqzFz06?^>I$m%r3g{W>Pzw3{u.C"I]zys-W&pC3.'fm~9
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 17 eb 72 97 be 53 7f a6 e5 92 ff 00 4c ff 00 75 c8 ef 6b 88 2a 68 64 14 21 ca 08 58 2b ac 11 1f 9d aa 49 e5 68 77 24 35 41 e2 9d 92 e4 ad 6b 73 31 71 0a 08 dd 94 38 82 fb c3 53 3b eb 29 ee 0f ee a4 ec 0a 1e f8 fe e9 dd f6 a6 f7 1c a1 ee 2c a3 be 16 52 c7 0a 6b d5 64 e5 a3 60 e7 15 93 76 95 94 77 c7 f6 59 4f 7f 46 5e fa ca 7b ea 28 6b 40 f7 80 99 f8 68 47 ca d0 af 9c 30 7e 56 d1 36 49 9c e7 3d cd 26 a5 3b b5 3b fa 42 cc a3 be 16 52 78 48 88 8a f2 e8 81 0a 86 e2 8e 51 4d 48 db 8a c9 3f a6 7f bf c1 ae 91 fe 2b d1 e5 32 0f ba d7 e4 e4 ed 0b d3 e4 c4 77 4a e7 4b 3b c1 7a 39 e3 77 ea d1 bc 2b d8 d3 f6 5b 14 ec 5a 92 10 bd 1c 95 1d ab d2 45 55 af 1b 82 db a7 6a d5 70 3e d6 4a e5 1d bf 05 80 58 2c 4a c4 2d 90 56 b4 5f b2 c0 85 aa f5 71 05 6c ad 63 45 46 aa 3a a3 Data Ascii: rSLuk*hd!X+Ihw$5Aks1q8S;),Rkd`vwYOF^{(k@hG0~V6I=&;;BRxHQMH?+2wJK;z9w+[ZEUjp>JX,J-V_qlcEF:
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 54 a8 3b 8d c5 06 c7 7d 30 3b d6 ee 67 68 aa 7a 49 3e 87 4b 35 0e 6e 16 a3 a8 08 b2 ba f0 e7 fd 67 78 c0 32 d6 4d be d1 28 d1 a7 a8 75 e1 63 3e 9d 9f 39 ce 6a f4 61 f0 fa 61 f3 fc b8 48 ab 9c a9 0d b9 c5 3e 15 41 0c 4e 5b df 02 21 e7 fa c1 cb 62 f5 5c 35 69 30 20 e4 96 6e 43 0f ae cf a4 7d e7 d1 fe d8 7d 6e 7c 37 3c 7a 84 fd 50 82 6c 3c 19 8e d1 07 b9 2b 52 06 8c 82 16 9a 14 62 42 96 c5 ea b8 6a d2 20 41 49 ec dc 86 1f 5f c7 9f 4f 3e 33 9e 3d f1 9c a7 d6 b8 d3 8d 77 ab 4e 3a bd 9a f4 5d 27 d0 7e f3 e8 ff 00 6c 3e bd 3e 33 9e 3f 11 ce 10 4d d9 c3 4f 92 66 95 a3 13 c2 6c 68 73 66 83 c7 8b a0 c6 c5 d5 70 d4 11 c0 cc fc 45 a1 33 72 1e 01 2e 29 78 01 2a 64 9a c2 2e 22 08 12 b1 51 4b 83 16 2c b0 1f 82 ca 9c e1 82 c6 e1 04 39 cd 18 90 f0 81 54 15 e4 4a d0 b9 da Data Ascii: T;}0;ghzI>K5ngx2M(uc>9jaaH>AN[!b\5i0 nC}}n\|7<zPl<+RbBj AI_O>3=wN:]'~l>>3?MOflhsfpE3r.)x*d."QK,9TJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49820	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:42 UTC	689	OUT	GET /sumbangan.com/public/campaigns/large/64585d4447fbf_MASJID_AL_KARIIM.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:43 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/jpeg Content-Length: 168602 Connection: close x-oss-request-id: 674319DF45E02A39349EAFE0 Vary: Origin Accept-Ranges: bytes ETag: "E77E1C6962BF4F6CEECC21E09515A0CE" Last-Modified: Mon, 08 May 2023 02:24:04 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13094016331136528122 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 09 May 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: 534caWK/T2zuzCHglRWgzg== x-oss-server-time: 1
2024-11-24 12:19:43 UTC	15774	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: e4 7c e0 63 72 ef 51 11 1b d4 b6 8c 35 a8 cf 31 35 c4 46 44 2f 1d b4 92 72 1e 53 ec 8b 86 6e 07 e1 2a 88 9b fc 44 71 c4 b2 b9 42 b4 2b 8c db b6 af d4 f4 cc d3 b3 ec cb 92 20 f7 a3 d2 8a ec 1b 61 18 da 63 1a 38 35 61 ad e5 40 63 71 e5 a1 af 3e cc 32 ec 42 2a 23 43 42 bd 30 41 3c b7 29 e0 25 95 4b 2b 0e 29 2c c6 f4 6d 4c ef 3f 26 a7 1c 68 1d ef 4e 64 4d 2a 75 0a 61 f4 68 5b 82 fe 88 d5 7a 11 c3 6b 2e 97 b4 25 c9 f7 3e 38 87 52 29 15 fa b7 da 34 d3 13 e7 f0 43 16 e3 d7 ea 27 87 21 a3 0c 43 ba 9b e2 55 b0 cf 69 8b 47 c3 15 02 51 dc 3d de f3 f6 7e 8f d1 c5 76 e2 a2 f1 c8 c9 aa 63 11 6b f7 c8 90 51 e7 70 53 99 b8 a2 3e 08 b8 fb 3c e8 2f 93 8d 6d ec 26 24 de 1e ba b9 0a f8 0d 39 d0 df 82 07 d2 b8 9b 41 0b 12 cc 1d fa bc 72 3a 06 bb 6c 7a b5 86 e2 2f be 44 f2 ec Data Ascii: \|crQ515FD/rSnDqB+ ac85a@cq>2B#CB0A<)%K+),mL?&hNdM*uah[zk.%>8R)4C'!CUiGQ=~vckQpS></m&$9Ar:lz/D
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: e1 c0 9a 9a 63 23 73 6b 87 4e 2d 48 f2 14 c7 7d 6c 0a 2a 03 d4 1b 7f be 41 1b 1c 10 64 1b 7d 28 21 48 73 21 aa f8 0e 2b 6f 4e ed 3e 24 3c 37 dd c7 58 d3 27 27 71 71 1c 7f 77 51 05 ed 61 bc 09 34 fb f2 e0 85 94 7c 49 b4 99 0f 7a 7c d7 7a 37 bc ea ab 24 53 e0 23 71 6a 1e ab 89 db b4 3f dc 03 91 28 ef 04 dc 45 3f 67 a7 c1 c7 11 7b 48 9b bd 2c 6c 48 2d 35 8f 9d 0b e0 87 a7 1d 20 94 d5 b9 1b 51 6d aa 7b 60 93 dd 1c 42 ab 18 a1 70 54 89 aa 46 e1 5f c9 0a 71 84 16 e2 8c fc 86 1b 71 6e 2f 5d 22 6e 47 9e 8c 41 d4 84 4e 26 ec 63 ed 1a 16 2b 97 17 ed 7f dc 86 f9 dc 17 1d 49 7e d6 9b a5 fd ec 50 be ae 19 88 44 26 97 35 51 e3 26 83 6c 23 69 cd e7 3e 4f 51 30 fd 84 78 37 89 37 e3 aa 7d d9 69 5b 6a 7f 4b 63 55 40 1c b9 93 86 e2 d3 58 f2 2d 7c 2b 5c 95 ca b8 af 27 44 bb Data Ascii: c#skN-H}l*Ad}(!Hs!+oN>$<7X''qqwQa4\|Iz\|z7$S#qj?(E?g{H,lH-5 Qm{`BpTF_qqn/]"nGAN&c+I~PD&5Q&l#i>OQ0x77}i[jKcU@X-\|+\'D
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: d4 65 4e 2f 85 9d 7d ec 3c 49 ff 00 69 a6 98 ee fc 70 b4 ae bb f3 0c ea d6 7d 9a e5 8b 77 d5 6c 8d d6 57 a5 52 11 a3 9f 69 39 52 af 1c 51 7d 03 2c bd de 83 70 df ee 03 b1 6f 8e 8a 63 55 fd c4 7c 64 fa d4 b9 7e 24 3d 74 88 e9 4f 72 61 1d f2 2b 3a d3 a4 d1 9f 24 2c d0 e1 da de a0 aa 50 8a 4c dc 1c 0b 4f 73 2c 76 7a 6a e4 cf 4a f4 e1 30 72 74 92 95 0c 45 4b b7 6a 59 99 9f 9e 43 9c d1 b4 41 c8 74 65 4f 4c 0c c8 9e 33 ad 36 d0 f2 21 36 e8 cd 86 17 de 11 da 2f ed 6b c9 e5 2d c8 54 f7 7b 61 36 46 22 f4 f3 23 61 13 3c e8 47 ab 1c f1 d3 aa cc f0 46 20 d3 2f 56 e1 ec 6b ec b4 4c bf f3 90 f5 7f 47 31 c4 ab 09 7a 67 de 17 9e 23 50 ed 5b a6 85 41 6d 4f ab 38 dd 14 76 a8 2a 4a 35 93 a8 7c c4 52 79 e2 d9 e9 6d 87 ee 2f 9c 20 7c aa 73 4d 7a 85 15 c8 ea 4d d2 8e 7e 1e 02 Data Ascii: eN/}<Iip}wlWRi9RQ},pocU\|d~$=tOra+:$,PLOs,vzjJ0rtEKjYCAteOL36!6/k-T{a6F"#a<GF /VkLG1zg#P[AmO8v*J5\|Rym/ \|sMzM~
2024-11-24 12:19:43 UTC	16384	IN	Data Raw: 8d 1a 50 ad 0e 55 5d 79 fb 59 52 72 8d 06 fc 7d 5e ac 67 54 91 cc 25 cb 9d 5e b9 d3 bf 90 74 9a 1b 54 aa 0d db 4a 8c f1 13 27 67 9c 84 8c ea 14 b6 4e 88 36 55 5a 29 c6 80 76 68 5e ac 36 cd cb 1a ab 86 63 6a fd fa 0e 31 e4 cd b2 35 d5 5d 26 ad b9 b3 5b f7 fa 80 26 9e 7d 90 62 20 b5 f9 fc c0 e2 15 aa 8c f2 2f 80 f2 aa 67 4d a5 e0 76 f4 45 11 83 72 70 2f 56 15 d4 08 66 0c c6 c6 9f 48 43 86 de 51 59 cb e4 d7 0c 8e 1f 09 90 89 40 28 2a ab 50 c9 f6 ce c8 59 50 43 4a 43 72 53 52 97 6e 92 ec 68 26 78 c2 f8 ad 41 08 5e ea 11 c0 2d ab d6 6d fa 15 0c 6e aa a1 6a d0 64 1e a1 85 39 e7 5a d7 ea 4a 20 a3 e9 44 ea 86 4d da d4 b1 18 b4 42 f9 16 e2 6a 5a e1 d2 ad 47 a5 1a 9e 41 3b a3 3c 76 17 43 ea cf e8 d7 f0 45 5d 50 b5 1c 52 9e 37 5b 91 17 76 5f 22 d7 02 ec 77 7d 24 60 Data Ascii: PU]yYRr}^gT%^tTJ'gN6UZ)vh^6cj15]&[&}b /gMvErp/VfHCQY@(*PYPCJCrSRnh&xA^-mnjd9ZJ DMBjZGA;<vCE]PR7[v_"w}$`
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 23 ef ea cb 22 cc 84 8e b9 64 55 6b 2e 06 e5 82 46 81 a0 7c 69 59 32 46 8b 7a 99 58 a0 11 c8 ce 86 ce b5 fd ec b1 59 92 fd b9 5e f9 7a bb 99 23 ee 7c 31 6b 61 2d 71 ed c3 4b 79 4a 22 02 84 b0 e5 26 92 7b d0 c6 16 cb 8f 6c 3a 88 51 68 89 86 86 cc c8 cb 90 08 fa b9 33 b3 a7 54 1c c8 6b 39 38 11 f1 22 c7 20 fb 31 fd cc 71 1e 7b 4e 94 ea ac dd 39 6e d9 67 ee 2f 6f 10 e2 4a f3 3c 9b f6 7c 6b d3 86 c5 fa b1 5a c0 6f 21 3b 4f 89 df 85 8c c9 ab 32 69 f2 44 7c 86 a8 89 7a 65 a1 b8 52 fe 21 d3 0f 94 a9 c9 03 d5 38 ca 15 fa 84 88 c8 5e 20 92 e2 30 c3 80 c7 da 69 c2 7b 80 63 d4 ec e3 61 27 a4 41 96 13 d5 35 08 4d 58 5a d1 ae 0e c0 47 a9 e4 fd 1c 6c 70 41 ea 43 7b c6 0f 48 41 ca 4e e4 84 0e 1c 1b d3 e6 31 ed 9f 68 bf 8f 19 0c 09 dc 3c 13 6d 3d 51 15 7a 9e a4 28 70 dc Data Ascii: #"dUk.F\|iY2FzXY^z#\|1ka-qKyJ"&{l:Qh3Tk98" 1q{N9ng/oJ<\|kZo!;O2iD\|zeR!8^ 0i{ca'A5MXZGlpAC{HAN1h<m=Qz(p
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 28 b8 0e de 1a d9 cd dc ab 95 0d 00 cc fa 83 ea d9 e8 e1 d1 9b f5 15 63 13 89 4a 59 db 0e 11 db 8e 08 f2 e4 ac 69 7b dc 24 01 e2 cb 1b 81 d2 c9 0d f2 79 bb 39 de 7e 7c 49 1b 48 6c 69 fa 73 90 94 b2 0f 8f 4e 22 d3 13 79 3b 18 90 29 9e 5c 64 58 bc f1 a8 06 86 8f 08 e4 9a 9a b2 d9 ea 43 a0 c9 2d 42 39 97 38 c9 c7 0d 4e 04 34 bf d3 6c 2f 47 a8 b4 46 d6 6e 48 21 bc 24 f8 e5 ea 46 c0 0e b7 40 d4 f5 85 41 c8 8a 29 e9 b2 ef cf e2 47 3f 58 e5 a8 0a a9 b5 8b a9 04 eb d4 c8 a9 c5 f0 f1 e4 9c d1 eb 84 20 7b 3d cb 96 39 fe d4 4b b3 d4 06 d1 90 66 b7 2a 26 40 a1 1c f9 e0 12 58 16 23 67 ab 98 d9 86 88 f5 ba 6a 28 cf ac b5 8f 8d 7f 24 29 67 52 06 e7 bb 4a a0 84 56 b5 38 09 a7 08 ea b6 cd dd 6c 53 35 ea b4 13 34 71 cf ad 39 25 4a fa a5 0c c7 71 2a 75 38 75 6a 8e a8 86 72 Data Ascii: (cJYi{$y9~\|IHlisN"y;)\dXC-B98N4l/GFnH!$F@A)G?X {=9Kf&@X#gj($)gRJV8lS54q9%Jqu8ujr
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 51 b2 5e 34 c8 67 eb 8a 55 f7 48 d5 12 dc c5 ca 1b 6b 39 d3 77 98 a9 54 f0 8e f6 47 72 54 98 b7 d5 cf a3 34 e4 e3 ea 99 11 dd 8c 58 e2 4d 5f 12 6c dc 2a e8 f9 68 51 83 44 a8 50 ab 4b 3b 7a 83 d7 93 98 9c 3c 29 54 b1 ab 62 51 c1 c6 49 f8 f3 78 e0 c7 46 ca 85 bb 12 64 93 a2 4e c5 12 bb 26 44 6a 52 b2 ff 00 48 ea d6 38 c1 5f 67 d2 ea 99 d1 ba dc b7 d8 a6 c5 a2 b4 1b 55 33 dc 93 39 8d 63 67 27 08 71 9b 66 d4 c9 0a 90 d3 2f 87 ae 38 af 1b 2a 48 ba f1 13 11 ee 55 ab 6c 89 72 99 2d a7 ee 8d 06 5a 25 f9 92 44 7d 07 a3 dd 77 d5 bd 59 ba b1 17 12 70 62 85 6b 2a 85 40 32 9f dc 60 78 33 ae ac 41 4a 59 06 19 e5 91 12 2d 92 9f 52 f8 b9 25 1f 37 03 54 4b eb 2d cd 15 42 29 ea 6f ea 3b da cb b3 bf 1b b9 fb fd e1 b3 08 57 df 22 69 15 59 eb aa 94 a5 13 4a 11 50 76 7d c6 4a Data Ascii: Q^4gUHk9wTGrT4XM_lhQDPK;z<)TbQIxFdN&DjRH8_gU39cg'qf/8HUlr-Z%D}wYpbk*@2`x3AJY-R%7TK-B)o;W"iYJPv}J
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: a3 6d 61 1e 17 61 7b 5b 7a 95 4f 49 9e 53 68 6d 4a 84 e6 ea e3 2c d4 a9 21 32 94 b8 ba b6 45 99 d3 bf 10 5e 91 85 9f 80 a2 75 23 d4 19 34 05 4e e0 5b 69 66 99 1d 48 32 18 93 3f a2 4b 5f 5f ba 38 81 54 b0 bd 76 6b 71 5d 96 95 db 56 b6 2a b4 76 a4 4c de b6 52 a4 a4 0d 7d c9 e5 54 a7 de f3 4e 2a 80 5f 40 67 55 73 54 0d 46 a3 57 af 54 f3 ad f5 49 f4 b5 54 69 4f c5 b2 73 db 0e 5c cf d4 a8 fb 66 2a db d1 68 d3 89 71 87 8e a8 59 95 57 52 dd 2e 04 45 c4 5d 56 c7 4b 97 96 cd 87 66 59 b5 8c 1a 6d 53 ab 59 64 0e eb 52 73 ce 36 a9 54 a4 b9 81 2a 44 f2 19 42 94 91 9f 6e cd bd d8 67 77 d2 a9 c8 ee ec 52 be 4d 63 3a 1b bc 45 a2 ca 92 c9 4b 7b 2f da e4 24 13 0f 5f 07 69 c5 92 7d 59 62 a7 55 75 c4 dc 91 cd 41 da 5e 2d 1c 7d 43 88 7d 76 a5 53 7b 54 cb 27 6b 03 55 fb a3 cd Data Ascii: maa{[zOIShmJ,!2E^u#4N[ifH2?K__8Tvkq]VvLR}TN_@gUsTFWTITiOs\fhqYWR.E]VKfYmSYdRs6TDBngwRMc:EK{/$_i}YbUuA^-}C}vS{T'kU
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: e9 15 cd 38 8c e4 64 4b 88 d4 12 5b 94 c1 b4 e5 eb 2a 89 a0 17 4e 72 59 26 a2 c8 21 6e 3e d1 53 50 f3 a6 4b f9 67 1e bc 45 bc f8 7a 34 e3 21 a8 bb eb 48 fa be a8 8c b0 7f 53 74 ef 58 b2 d5 11 09 c7 22 f5 23 f1 61 73 86 8e 8e 22 31 15 35 32 9f 94 41 50 b4 ec 8a e5 a0 fd e1 d3 36 a2 b3 51 21 ed bd b2 b9 d3 26 e0 8e da ee a7 26 9e 69 e5 52 e1 33 8a 00 9a ac 7a 34 15 b8 5c f9 e4 a8 42 26 15 06 6c 86 d4 a2 52 0c a1 ea 05 33 9e 61 7d 70 f6 cd 55 1a 7e ee de a1 53 11 96 4e 71 22 7b 55 f8 f3 85 2f f8 83 5b a3 9b e9 0b 5b 36 38 58 ca 4c 9a 32 9a 57 e3 42 e7 c4 38 48 b5 b6 de d0 dc 1b 04 e8 fd e5 8f 2c 3e 3b 67 45 78 82 39 33 d1 0b 27 37 5e 6c 91 1f ab 49 53 60 46 8c 1c 84 fb 3d 22 26 a9 ec 44 45 13 7d 9a 06 67 a2 bb 41 35 16 ea 49 5a 3a 97 23 4d 52 4f cb d5 11 ea Data Ascii: 8dK[*NrY&!n>SPKgEz4!HStX"#as"152AP6Q!&&iR3z4\B&lR3a}pU~SNq"{U/[[68XL2WB8H,>;gEx93'7^lIS`F="&DE}gA5IZ:#MRO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49824	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	1251	OUT	GET /mobile/img/menu/inbox.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450779\|1732450761
2024-11-24 12:19:43 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/svg+xml Content-Length: 2131 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-853" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450783\|1732450761;Path=/
2024-11-24 12:19:43 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 37 36" version="1.1" xmlns="http://www.w3.org/2000/svg"
2024-11-24 12:19:43 UTC	1068	IN	Data Raw: 33 20 31 37 34 2e 36 38 38 2c 33 33 39 2e 34 33 38 20 31 37 35 2e 32 33 33 2c 33 33 39 2e 30 31 34 4c 31 38 34 2e 32 33 33 2c 33 33 32 2e 30 31 34 43 31 38 34 2e 37 37 38 2c 33 33 31 2e 35 38 39 20 31 38 35 2e 35 36 33 2c 33 33 31 2e 36 38 39 20 31 38 35 2e 39 38 37 2c 33 33 32 2e 32 33 33 43 31 38 36 2e 34 31 31 2c 33 33 32 2e 37 37 38 20 31 38 36 2e 33 31 33 2c 33 33 33 2e 35 36 33 20 31 38 35 2e 37 36 38 2c 33 33 33 2e 39 38 37 5a 4d 31 38 39 2e 33 31 31 2c 33 33 31 2e 30 35 4c 31 37 37 2e 39 31 31 2c 33 32 32 2e 39 37 37 43 31 37 36 2e 36 35 2c 33 32 32 2e 30 38 34 20 31 37 37 2e 32 39 39 2c 33 32 30 2e 31 34 20 31 37 38 2e 38 35 39 2c 33 32 30 2e 31 34 4c 32 30 32 2e 31 34 33 2c 33 32 30 2e 31 34 43 32 30 33 2e 37 30 33 2c 33 32 30 2e 31 34 20 32 30 Data Ascii: 3 174.688,339.438 175.233,339.014L184.233,332.014C184.778,331.589 185.563,331.689 185.987,332.233C186.411,332.778 186.313,333.563 185.768,333.987ZM189.311,331.05L177.911,322.977C176.65,322.084 177.299,320.14 178.859,320.14L202.143,320.14C203.703,320.14 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49826	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	1250	OUT	GET /mobile/img/menu/home.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761
2024-11-24 12:19:44 UTC	417	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/svg+xml Content-Length: 692 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-2b4" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450783\|1732450761;Path=/
2024-11-24 12:19:44 UTC	692	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 32 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	668	OUT	GET /sumbangan.com/public/organization/1/logo/ppim.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	698	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/jpeg Content-Length: 11090 Connection: close x-oss-request-id: 674319DFAF8AD93235FD68E0 Vary: Origin Accept-Ranges: bytes ETag: "A72E4A24EBFC2667DCC9269D19232648" Last-Modified: Fri, 12 Nov 2021 06:47:09 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9967731808430596187 x-oss-storage-class: Standard x-oss-meta-mtime: 1622212341 x-oss-expiration: expiry-date="Sat, 13 Nov 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQLhiBgIDb5szL6BciIGRhM2U5MjA3NmE1ODQ3ZDk5NDFmYWIzNGQ3ZjA2OTVi Content-MD5: py5KJOv8JmfcySadGSMmSA== x-oss-server-time: 2
2024-11-24 12:19:44 UTC	11090	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 12 11 10 15 12 0f 13 15 15 15 15 17 16 15 15 15 15 16 15 17 15 15 17 18 16 18 16 15 19 18 16 18 1f 28 20 18 1a 25 1d 15 17 21 31 21 26 29 2b 2e 2e 2e 18 20 33 38 33 2c 37 29 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 1b 2d 25 20 26 2d 2d 2d 2f 35 2d 2d 2d 2f 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2f 2b 2d 2d 2d 2d 2d 2b 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d ff c0 00 11 08 00 e1 00 e1 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff c4 00 46 10 00 02 01 03 02 03 05 05 04 06 08 06 01 05 00 00 01 02 03 00 04 11 12 21 05 31 41 06 13 22 51 61 07 14 32 71 81 23 42 91 a1 15 33 52 72 b1 c1 Data Ascii: JFIF( %!1!&)+... 383,7)-.+-% &---/5---/+--------------/+-----++-----------------"F!1A"Qa2q#B3Rr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49823	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	694	OUT	GET /sumbangan.com/public/campaigns/large/61cc0879319af_TELAGA_UNTUK_RUMDENG.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	670	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/jpeg Content-Length: 212968 Connection: close x-oss-request-id: 674319DF7BFFD332353C2B5C Vary: Origin Accept-Ranges: bytes ETag: "759A23C1FEA5599EFC5B48FFA67CD800" Last-Modified: Wed, 29 Dec 2021 07:04:25 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15543557422211225266 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 30 Dec 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQNhiBgMDEmYKU8BciIGJlOGEzZjFlZmZjZTQ2Nzg4NmUwNGNkNzkwZjMwYzhk Content-MD5: dZojwf6lWZ78W0j/pnzYAA== x-oss-server-time: 1
2024-11-24 12:19:44 UTC	15714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 03 2a 00 00 00 00 ff c0 00 11 08 03 2a 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 Data Ascii: JFIFHHLExifMMi88"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstu
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: c3 4b 15 1a 4e 76 ed d3 cd f9 1f 3d c5 79 b7 f6 6e 12 58 b8 53 73 6b a2 b6 9d 9b f2 b9 ef 3e 25 f8 83 6b 23 98 c4 c1 8b 77 1c 8f 6c 9e d5 f3 57 89 9e ca e7 51 8f 57 76 76 f2 5d da 34 66 06 31 2b 0f bf 8c 67 76 33 8e 78 c9 c5 58 3e 25 f0 dc 92 8b 41 a8 db 49 23 10 02 89 15 b9 fc 0d 6c c3 e1 f7 d7 09 d1 6c 2d e4 b8 9a f4 95 58 e2 04 b9 24 76 c7 b5 7e 65 86 f1 2e 2e cf 15 86 4e 49 a7 1d 36 5d 6c de b7 47 e4 14 7c 5b 72 e5 fa e6 12 f3 e6 4e 3a 6c ba da fd 4f 07 d7 75 18 e6 94 39 01 9d 72 14 e3 24 67 d2 bd 3a db c3 d3 e8 5a 2d e7 80 d3 68 d5 75 28 6d ee fc 54 02 09 e7 b3 d2 37 89 22 b3 16 e1 e3 92 40 d2 08 e6 bc 11 48 1e 38 82 03 8c 3d 36 c2 cb 42 f0 3e b7 25 86 85 a8 27 88 7c 60 de 6f 93 35 ac 42 f2 0d 24 41 1f 9b 21 45 ce db bb f0 99 29 1a 92 a9 82 d9 66 c2 Data Ascii: KNv=ynXSsk>%k#wlWQWvv]4f1+gv3xX>%AI#ll-X$v~e..NI6]lG\|[rN:lOu9r$g:Z-hu(mT7"@H8=6B>%'\|`o5B$A!E)f
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: f4 cd 6b dc f8 06 08 5c 44 60 17 0c 54 71 14 87 83 9e e4 d4 71 f8 15 63 c1 7b 64 89 77 15 f9 a5 25 bf 2a a4 e2 c9 8c 5f 63 5b 46 f1 ce 91 0a 97 bc 48 f2 47 50 0d 7c 53 fb 54 6a ba 66 af aa 5c 5c d8 b6 c2 96 6a 54 67 a1 dc 79 af b1 d7 c1 77 32 ab 05 c2 a8 5d c3 05 bf ad 7c 49 fb 49 d8 cb a4 dd df db cd 1e d2 b6 a0 8c 9c ff 00 09 35 e2 e7 36 74 b4 3d bc 9a 52 55 76 3e 29 f8 5b 79 25 e4 3a c4 d7 f7 6f 72 cb 24 40 34 ac 49 ce 5b 20 7a 0a f5 3b 4f 10 69 12 6b 32 78 74 12 6e c3 19 36 81 c0 4c e3 af e7 5e 4f f0 81 9a e2 d3 59 67 42 85 ee 63 55 20 7a e7 fc 2b db ac 3c 27 a6 bf 88 17 c4 32 23 35 f2 c6 d1 e7 a0 c6 7f fd 75 f2 78 a8 47 9e cf 6b 1f 5b 42 b4 dd 3f 3b 96 a6 92 df ec d2 15 90 0f 9a 46 c0 af 10 b8 b8 8d 6e c4 b2 30 19 99 88 e7 93 f3 1a f7 5d 48 18 ac a4 Data Ascii: k\D`Tqqc{dw%*_c[FHGP\|STjf\\jTgyw2]\|II56t=RUv>)[y%:or$@4I[ z;Oik2xtn6L^OYgBcU z+<'2#5uxGk[B?;Fn0]H
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 4e 1a 9c 06 39 41 7d 8c aa cb e6 2f 3d 48 3c e3 e9 5d 18 3c 3c 2a 46 52 94 ac d1 55 22 d3 56 46 14 de 78 d7 63 99 af 42 4c d3 47 19 cc 60 2a b1 1c 12 a3 b5 7a 4f 8a b4 8b ef 0f 5b dc da eb 5b 32 25 44 57 53 83 20 75 ca b8 1f dc f7 f5 c8 af 3a d4 6c e4 be bc bc 11 aa ad c4 47 cd 88 ff 00 7c 02 38 cf b8 ac a8 a5 ba 37 8a 75 24 32 c8 19 4b 48 e4 b1 db 9c 8a e6 d1 ab a3 68 42 5c d6 47 67 6e b7 2d 7b 13 ce 8b 19 46 f2 a4 62 70 15 4e 30 6a 5d 7e 69 74 eb 75 31 0f 35 0c 81 55 d4 70 77 1e 3f f4 13 5d 17 87 ae b4 47 9a f2 e7 5a d3 66 bc 8d c1 65 48 a4 0a 50 fa 92 47 23 da b9 cf 1c f8 87 c3 57 da 6d a4 1e 1c 8e 58 65 59 43 b8 72 b8 52 99 e9 80 3d 6b 2e 47 7b 9d 13 76 f7 59 36 ab 0c b7 b0 2d bb 80 92 c7 23 38 04 7f 7b be 3e 95 c8 45 a3 4f a6 df 7f 6b 1f 9d 61 05 98 Data Ascii: N9A}/=H<]<<FRU"VFxcBLG`zO[[2%DWS u:lG\|87u$2KHhB\Ggn-{FbpN0j]~itu15Upw?]GZfeHPG#WmXeYCrR=k.G{vY6-#8{>EOka
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 97 64 d7 08 16 5c 8d c8 cc 9d c9 3d 0e 2a a5 bd dc 76 50 bb dc 28 69 27 f9 4a af dd 3e f5 2c 37 c7 53 27 4b 76 48 c1 52 14 f2 0f b0 35 9b 9c db 4e e5 ca 09 c4 f1 3b 6d 06 e6 df 52 91 65 5d 99 2c c4 13 c8 f4 35 5e e3 c3 53 dc 43 34 d2 af 98 e8 0b 02 0f f0 e6 bd 62 f2 11 e6 18 59 09 98 2e c6 27 1c d6 04 09 8b af b1 72 a8 72 b9 03 9e 6b d4 c3 62 65 26 a2 ce 57 45 ad 8d 7f 87 fa 6f d8 f4 83 7c 53 0d 72 dc 73 d0 27 4a d0 96 75 9f 52 9a e2 4c ec 85 4f 3d b3 5b 4e 53 4c d3 e3 b7 88 00 b1 ae 38 ae 36 fe 71 6f 60 dd 41 90 e4 f3 5f a3 60 e0 a1 4d 23 df a7 4b 96 29 1c a6 a3 30 b8 ba 79 07 f1 12 6b 8b f1 15 da c2 ca ac 7f 87 a7 bd 74 a0 97 3e 60 e9 ef 5c 2f 8a 54 dc 4b f2 67 2a b5 8d 79 36 8e 2c 5c ca 31 6a 10 ad b9 56 23 79 ef 5d a7 c3 f9 be d9 7b 7f 1b be 40 84 1e Data Ascii: d\=vP(i'J>,7S'KvHR5N;mRe],5^SC4bY.'rrkbe&WEo\|Srs'JuRLO=[NSL86qo`A_`M#K)0ykt>`\/TKgy6,\1jV#y]{@
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: de e9 e9 fa a2 b3 69 77 68 a3 2c d0 c8 00 1d 49 da 6b f3 eb f6 04 fd 91 ac fe 02 78 67 57 f8 89 e2 8b 40 7c 73 e3 5b 89 a7 98 b8 f9 ac ec 5a 52 d0 db 27 a1 23 0f 21 ee c4 0e 8a 2b f4 5a 8a f6 89 f2 22 79 12 24 32 48 42 aa 82 58 9e 00 03 a9 af e5 bf fe 0a 61 fb 62 5d 7c 76 f8 88 ff 00 0b 3c 0f 73 bb c0 9e 12 95 93 7c 67 8b fb e5 c8 92 76 f5 8d 3e ec 63 d8 b7 f1 60 7f 51 77 56 d0 5e db 4b 67 72 81 e1 9d 1a 37 53 d0 ab 0c 10 7e a0 d7 f1 e5 fb 66 7e ce 77 bf b3 af ed 1b 7b e0 40 86 2f 0e eb 12 0b fd 26 77 e2 36 b3 b8 72 02 e7 a6 62 60 c8 47 50 00 3d 08 24 2a 16 be a7 cc 1a 6d a4 89 e1 fb fb fb 7b 46 96 70 53 32 7f cf 28 b3 c9 c7 b9 ef 5f 44 fe cb 96 92 af ed 11 f0 9a 69 a3 c3 1d 76 cd 95 c7 2a e8 ce 39 cf a8 3c 11 5e 11 af b6 af e1 fb fb fb 0b 1b 96 e0 34 33 Data Ascii: iwh,IkxgW@\|s[ZR'#!+Z"y$2HBXab]\|v<s\|gv>c`QwV^Kgr7S~f~w{@/&w6rb`GP=$m{FpS2(_Div9<^43
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: b5 40 92 4f bb ef 9e c2 ba 8d 27 48 8a dc bc b2 c0 8c 83 e6 18 e4 83 ea 28 f6 dc c7 54 20 92 d0 e8 ed e0 5c ee 6c 48 3d 6a ec 30 5a 48 c5 93 68 29 de ab da 98 6e a4 10 44 ac 5f 38 03 07 9f ca b6 63 d1 35 ed a7 ec fa 7c f2 06 19 52 22 62 31 f9 56 a8 1c d2 dc c9 b8 96 ca 35 3b d9 72 3b 13 8a e7 24 9a 09 a7 da 00 70 07 38 6d d8 1e e2 bd 63 c3 ff 00 0a 3c 6d e3 3b b5 48 f4 e3 6f 14 64 06 9a e1 76 a6 3d bd 7f 0a f7 9b 3f d9 5f 40 16 60 df 5f c8 2f d8 10 cf 1a 00 a7 db 1d 7f 5a ea a5 84 9c b5 48 e2 af 9a d1 a4 ed 29 6b e5 a9 f1 ab 3e 97 6b 6e 3c ed 8b 1f bf 3f 37 7a e7 9a fb c3 f2 f9 b1 bc a0 aa fc c5 0b 9d bf 96 71 5f 73 27 ec b1 a5 dc c9 15 a6 ab aa 19 ac 23 72 fb 12 20 92 31 3d 8b fa 7e 15 de e9 3f b3 5f c1 bd 21 b7 a7 87 e2 99 f3 9d d3 33 48 7e 9f 31 f7 fc Data Ascii: @O'H(T \lH=j0ZHh)nD_8c5\|R"b1V5;r;$p8mc<m;Hodv=?_@`_/ZH)k>kn<?7zq_s'#r 1=~?_!3H~1
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: f1 55 20 fb 13 5f 70 57 e7 a7 fc 14 e3 4a b8 d4 bf 65 cb f9 a0 52 df 61 d4 ec 66 7c 76 4d c5 49 fc d8 57 14 77 3a 59 f8 b7 fb 1a fc 20 87 e3 0f c6 5b 0d 22 f9 c4 56 96 4b e7 16 75 de a6 53 9f 2d 4a e4 64 70 5b af 6a fd d3 5f d9 37 52 03 e6 f1 0c 44 7f d7 b1 ff 00 e2 eb f3 17 fe 09 8b 67 17 fc 2c 4b cb b3 80 e9 71 6e 09 3e 9e 5c b8 fe 66 bf a0 d6 b8 81 07 cf 22 a8 f7 20 57 5c eb 4a 09 28 f5 39 94 14 9b b9 f2 05 a7 ec b9 77 6e 46 fd 72 36 c7 a4 04 7f ec f5 27 88 fe 0a 9f 0a e8 57 9a f5 c6 ad 11 8a c6 3d ed ba 3d 80 8c 81 cb 17 c0 eb 5f 61 0d a4 64 74 af 99 7f 6c b7 2b fb 2f 7c 45 75 38 23 4c 3d 3f eb a2 52 58 ea 97 d5 94 f0 f1 3e 6c b1 d6 34 9b a7 68 6c ae e2 9d d4 64 ac 6e ae 40 f5 c0 3d 39 ad 68 ee 0b 1f 96 bf 27 ff 00 61 e7 9a 7f 8a fa a0 77 2c 3f b1 e7 Data Ascii: U _pWJeRaf\|vMIWw:Y ["VKuS-Jdp[j_7RDg,Kqn>\f" W\J(9wnFr6'W==_adtl+/\|Eu8#L=?RX>l4hldn@=9h'aw,?
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 8e db 4d 81 48 5b 78 8c ef ea 38 51 f8 d7 99 53 13 29 2d 0e f8 60 e2 b7 2b ea 0d af f8 c3 51 7d 63 c5 57 d3 6a 97 52 b6 59 a5 72 f8 1e c0 f4 15 af 6b 63 1c 63 cb 85 37 f1 f7 54 7c a3 eb 5a 09 69 1c 40 7d a6 5d c7 fe 79 47 db eb 8e 6b 44 b5 c9 8c 24 28 b6 f1 0f c5 f1 ef d8 57 36 af 73 5b 14 a5 81 60 8f 7d c3 ac 4b 8c 6d 1c 9f a7 ad 58 b2 9e 5e 3e c9 18 45 eb b9 c7 27 fe 03 d6 a5 b6 81 24 63 f6 78 cc ce 7a bb 75 fc ea db 59 cf a7 c5 f6 ab f6 58 d7 3c 2e 71 9f ea 7f 0a a1 99 37 97 16 36 da 92 43 ab cc 43 4e 99 8e 62 4a 98 dd 4f 40 c3 a7 d2 b5 1d ef 76 ab 2b ad e4 7d 14 9c 6f c7 61 91 c1 a4 d6 35 0d 07 53 b3 86 de 6b 33 12 2e 41 70 a7 69 c8 f7 e4 fd 6b 93 1a 15 c5 b3 19 7c 39 7b 85 c9 f9 37 6e 5f c5 4d 05 44 bf 75 6d a7 ea 45 bc d5 fb 3d c0 fe 17 18 24 7b 76 Data Ascii: MH[x8QS)-`+Q}cWjRYrkcc7T\|Zi@}]yGkD$(W6s[`}KmX^>E'$cxzuYX<.q76CCNbJO@v+}oa5Sk3.Apik\|9{7n_MDumE=${v
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 8c 37 63 e5 c7 1d 94 7b 0a fa 18 4f 98 f9 89 c2 c7 57 e1 bf 13 78 7f c5 f6 0b 7f a0 dc ad ca 8c 6f 42 0a cb 1b 1f e1 74 38 23 f2 ad f0 07 dd 1f 7b b8 26 be 50 b1 b4 8e 29 bc d8 41 b6 b8 77 18 78 be 46 c6 ee c4 57 b8 eb 5f 10 3c 51 e0 9b cd 2a ca ce 08 b5 db 39 d4 f9 82 e7 89 01 18 fb af 8c f4 27 ad 6a e4 90 58 f4 95 8c a9 fb a4 7e 15 72 04 60 78 18 fc 2b 8a f0 f7 ed 0f f0 6f c4 b1 98 b5 69 db c3 77 ab 9c c7 74 bb 54 e0 ff 00 0b 8c 83 f8 81 5e f3 e1 4d 7b e0 ae bc 23 11 f8 a6 da 57 72 06 16 78 c0 3e c0 75 ae 4a f5 f9 55 d1 d9 4b 0a d9 c4 88 67 65 c2 82 7f 0a 91 2d 2e c9 03 63 66 be b7 b6 f8 73 e0 f4 b7 17 66 39 44 18 0c 24 32 28 42 08 e0 e6 ba 3d 23 c0 5e 03 9e 33 22 46 67 07 3c f9 80 81 f9 57 97 3c e6 1d 4e f8 60 2c 8f 8d 22 d2 b5 67 e6 38 d8 d5 d8 f4 1d Data Ascii: 7c{OWxoBt8#{&P)AwxFW_<Q*9'jX~r`x+oiwtT^M{#Wrx>uJUKge-.cfsf9D$2(B=#^3"Fg<W<N`,"g8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49825	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	680	OUT	GET /sumbangan.com/public/organization/499/logo/65ad34a8ab77a_1.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:43 GMT Content-Type: image/jpeg Content-Length: 7777 Connection: close x-oss-request-id: 674319DF45E02A3234EDAFE0 Vary: Origin Accept-Ranges: bytes ETag: "C9070F08121F64E22BAD30CE0A872DBD" Last-Modified: Sun, 21 Jan 2024 15:13:44 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10916105402041113994 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Mon, 22 Jan 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: yQcPCBIfZOIrrTDOCoctvQ== x-oss-server-time: 1
2024-11-24 12:19:44 UTC	7777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49832	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	1251	OUT	GET /mobile/img/menu/akaun.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761
2024-11-24 12:19:44 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/svg+xml Content-Length: 1559 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-617" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:44 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 39 36" version="1.1" xmlns="http://www.w3.org/2000/svg"
2024-11-24 12:19:44 UTC	496	IN	Data Raw: 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 33 33 30 2e 34 36 32 2c 2d 32 30 33 2e 39 39 37 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 39 2e 37 36 33 2c 33 39 38 2e 36 33 34 43 36 37 2e 32 36 32 2c 33 39 38 2e 36 33 34 20 36 35 2e 35 30 34 2c 34 30 31 2e 30 37 33 20 36 35 2e 35 30 34 2c 34 30 31 2e 30 37 33 43 36 35 2e 35 30 34 2c 34 30 31 2e 30 37 33 20 36 34 2e 36 32 35 2c 33 39 38 2e 36 33 34 20 36 31 2e 32 34 35 2c 33 39 38 2e 36 33 34 43 35 39 2e 30 37 34 2c 33 39 38 2e 36 33 34 20 35 37 2e 33 30 38 2c 34 30 30 2e 36 39 39 20 35 37 2e 33 30 38 2c 34 30 33 2e 32 33 37 43 35 37 2e 33 30 38 2c 34 30 37 2e 32 38 32 20 Data Ascii: </g> <g transform="matrix(1,0,0,1,330.462,-203.997)"> <path d="M69.763,398.634C67.262,398.634 65.504,401.073 65.504,401.073C65.504,401.073 64.625,398.634 61.245,398.634C59.074,398.634 57.308,400.699 57.308,403.237C57.308,407.282

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49828	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	455	OUT	GET /sumbangan.com/public/sliders/661c7dc1cc458_Sumbangan_New_Slider-01.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 811772 Connection: close x-oss-request-id: 674319E0AF8AD930388769E0 Vary: Origin Accept-Ranges: bytes ETag: "5A46424B8F069AAA8C32F94F3C892359" Last-Modified: Mon, 15 Apr 2024 01:07:14 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 3512096760916875875 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: WkZCS48GmqqMMvlPPIkjWQ== x-oss-server-time: 2
2024-11-24 12:19:44 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 88 9f 6f e4 Data Ascii: JFIFC!"$"$C"o
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 95 3c 42 73 b0 ad 93 2e 57 1e ab f4 71 8a 5e 54 cf 4c e7 6e 35 79 34 cf 5e 3e 77 ce 75 e4 72 fe 47 2a e7 ea fd 4f 9b cb eb f3 f9 d3 c3 6f 87 d0 8c 97 1b d7 0d 09 8a 58 b2 b6 12 04 aa 22 2c 67 3a c1 5b 50 69 14 13 31 10 bd 6b 5a c4 c5 92 8a 97 44 a1 12 10 5b e7 7a 21 15 9a a7 d1 f9 fc ab 39 48 9e 9c 40 00 04 4c 00 00 00 00 22 60 00 08 49 60 58 0a 89 82 62 62 00 0a 00 08 4c 00 02 80 08 89 11 12 58 91 04 28 00 40 13 0a 00 00 80 a4 4c 00 00 04 00 2d 44 c2 26 24 44 c1 80 f2 ed 31 24 a2 49 40 94 48 b5 49 64 49 28 55 95 92 ca ca 59 02 ca ca 4a 04 cc 09 40 94 49 28 24 a0 4c c0 90 4a 04 a0 4a 26 a5 13 04 4a 05 4a 04 81 20 00 12 81 28 54 88 00 09 14 00 40 12 07 ad 79 27 ae 71 fa bc cf 2a f5 7f 23 c7 a7 e7 ce 37 f4 fc 2d 66 b3 63 b8 f4 ee 5e 3b fa ed 7a af c8 f3 7d Data Ascii: <Bs.Wq^TLn5y4^>wurGOoX",g:[Pi1kZD[z!9H@L"`I`XbbLX(@L-D&$D1$I@HIdI(UYJ@I($LJJ&JJ (T@y'q#7-fc^;z}
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 01 31 20 10 15 30 40 00 0a 91 2c 26 00 40 a7 2b 8b d9 fe 77 b7 ef 58 fe 69 fb 80 94 00 23 cd bb ef 93 7e a7 e2 c7 7b e8 ff 00 53 ef fc af 4f 98 9f e6 ff 00 ae 05 00 0c 7c b3 d6 3a 47 e8 be 47 5c bf 1a df b7 fc ce d9 67 8c ba e5 9e 79 e9 5e 26 dc 4c fa 22 11 9e cc ed 59 af 7e e5 f1 39 7f cc bf 4a 1c f6 00 08 98 b3 c6 b0 e5 fa 1f ef 7f 37 b7 d9 3f 0d fa 10 e5 d0 00 04 23 cd 79 7e 79 fa af 95 9f 37 87 cd fd 4f c7 d5 a4 6b 8d 67 68 b3 1a 72 33 96 93 78 2f 34 25 a6 ab 3b f7 71 e9 7d d3 f9 ef ea a4 7c bf 60 00 01 d3 3c df d1 fc e3 f7 7f 9e db 4a 5f ed 7c cb ef 4a de 77 fb 5f 07 ed 79 bb 7a 94 c4 ff 00 32 fd 88 28 00 3e 17 dd f8 1e 8c 78 3f 61 e2 fb 9f eb 7e 6e 9c 93 f1 7f 50 25 00 01 8d 99 f8 87 27 ac 7e cf e5 e3 4e 46 1f 6f 86 09 4e 9b 52 25 35 df 87 ad e7 cf Data Ascii: 1 0@,&@+wXi#~{SO\|:GG\gy^&L"Y~9J7?#y~y7Okghr3x/4%;q}\|`<J_\|Jw_yz2(>x?a~nP%'~NFoNR%5
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 43 fe 75 df 86 d3 4b 6b cb a6 99 5a e3 4a d3 33 5f d0 bf 9d 7d f3 1e ce ce 31 ef 79 0f af 79 be bc fe 69 b6 5c 8f 47 c4 da f1 7b cb 2a e9 9c 67 12 9a a7 1b 97 c6 9d 3d 77 bb f9 e7 a1 f0 fb 81 3b 79 c7 8c 7e 80 fc ff 00 bf 16 91 76 bc f9 22 26 f9 10 9b 8f 55 f5 2e 8b de b9 7d 10 6f aa 78 af ae 79 2f 6f 95 f4 bf 40 7e 7f fd 01 9e f2 39 fb fe 27 37 e3 f4 1d 70 f6 41 9e ff 00 3b c3 ff 00 40 f0 75 e6 73 8c fa 1d 57 b2 f8 06 b8 7b 8f d3 f9 7f 53 3d 98 ed 8a fe 6d db 87 cd f4 7c 2e 57 e8 6f cf 1f a1 f9 fb e4 73 f7 91 d5 19 ed 8e 9f 6b 8e dc ea 12 76 ee 8d cc ea fa e3 d2 59 eb df e2 db df fc 17 de b9 fd 0e 48 e3 f5 5e 13 ee de 03 bf 27 c0 cf 3d 77 e0 7c 6f a1 f2 b3 ea 82 33 e9 b4 25 2b 59 a3 52 4a e8 a4 b3 7f 76 f1 9f d4 d3 5b 89 d6 3c 1b dd 7c 32 e3 cf 29 df 6b Data Ascii: CuKkZJ3_}1yyi\G{*g=w;y~v"&U.}oxy/o@~9'7pA;@usW{S=m\|.WoskvYH^'=w\|o3%+YRJv[<\|2)k
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 7e a9 f3 7f 4e 1e 7f a8 eb 1d 9f ac 6f cd e5 c3 eb fe 35 6a da 6b dd 87 c6 fd c0 2e 3e 1d ee 3e 1d ed f8 30 3d bf 09 ea be 55 ea be 5f ab d8 c7 cf fd 30 00 00 04 79 5f a9 78 2f 5f 9d f3 e2 d1 e9 f8 95 89 2c 5a 24 4c 4d cc 8b 02 90 4b 15 b5 66 ab 96 b9 67 a6 58 ed c7 e5 de b3 0c 75 98 81 28 85 b2 04 cd 64 0b 11 25 10 4c 20 98 16 51 29 33 16 b0 95 ce b3 9b 86 34 9c c6 91 49 4b a8 34 51 5c 8d f8 0b 3e 8b 85 c8 e9 9d a2 8b 2f 39 aa f1 5a c6 fe f9 e3 fe d9 cb ea df a7 f6 ff 00 3c e3 f5 3a 87 0b 93 f3 b8 fa 71 e1 72 33 d6 33 9b 4d 94 99 99 68 98 2b 13 0a 9a c2 6d 6c 6c 6b 39 ca eb 39 49 ac e6 5d 59 c9 b5 b8 f2 6d 6c 61 37 bf 16 4f a1 b7 ca d9 7e 95 38 fa 44 e3 ca a5 9f 3f 1f ab 99 f1 f1 fb b8 9d 7b 8b da 32 d6 7a b5 3b 5d 6e 7a b4 76 ad 4e a9 a7 69 ba f5 6b 76 Data Ascii: ~No5jk.>>0=U_0y_x/_,Z$LMKfgXu(d%L Q)34IK4Q\>/9Z<:qr33Mh+mllk99I]Ymla7O~8D?{2z;]nzvNikv
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 09 85 a2 75 2d 7a 58 ba 96 0a ca 5a 73 85 db 6e 24 4b d9 39 dd 32 c7 6f e0 75 ec 8e 7f cc 8a dc 72 fe af 03 9a bf 4f b5 f4 3e cd e1 fa 3f 5a fa 71 be 47 df e7 6b c2 da 39 3f 3b e8 68 cf c1 e5 72 38 2d f2 f5 f9 7a cb c1 f3 ee db d3 be d7 c6 b4 d6 de cf 33 4c b4 6a 70 a6 b7 17 df 1d a7 59 f9 fb 56 f2 a6 9b f1 96 b4 db 2b cf 5a 41 35 e3 6d 47 3e 67 1b 4c dd 23 3e 44 46 7c fe 2f d1 f3 f7 d6 dc e7 8b e9 cf 61 eb 9f 6b cf e9 e5 26 38 74 be d3 79 21 24 85 55 68 54 d7 4c b4 63 6b e7 7d f3 e7 76 fe 93 dd 3e 97 ca fb 1d 43 b7 f4 8f a5 f9 ff 00 20 bd 2d d7 f3 fa 4c 1c ac 4d 91 13 00 4b 28 9b 2c 2e 6d 7a 5e e6 e2 e0 2a 04 2b 30 d1 02 41 20 44 c1 58 98 94 25 88 43 49 89 44 4c 2a b2 96 09 58 94 02 08 8b 44 b1 68 91 5b 54 81 2d 95 54 a1 16 98 9b 22 26 15 31 28 ac c2 d6 Data Ascii: u-zXZsn$K92ourO>?ZqGk9?;hr8-z3LjpYV+ZA5mG>gL#>DF\|/ak&8ty!$UhTLck}v>C -LMK(,.mz^+0A DX%CIDLXDh[T-T"&1(
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: bd e1 d6 d7 ac e7 d9 78 82 c6 3b 56 b3 bd 17 33 2a 97 9c a6 2f 39 dc 98 91 9d 6f 17 34 ba a6 b6 c3 49 66 9a 4a f1 da d6 f3 ca 2f 5b ce 94 df 2b ca bb 60 67 9d 7e 17 27 3e bd 62 26 74 94 96 ab 44 a4 c9 9a cb 22 52 b3 59 95 a4 cc 16 ac ca 66 b5 52 21 37 35 ad a2 c4 d8 b5 94 b4 bd 2f 2d 95 96 a2 d5 92 6a 82 f3 49 08 b9 5a c9 2b 08 b9 a5 6f 17 3a 73 b8 fb 63 be 91 58 95 8d f0 b9 cb 8b b7 1b 7e 1e 46 bc 7e 43 55 a5 e1 ac 79 58 43 9f d4 ae 7a 63 d8 84 29 15 b9 52 cb 2b 16 a2 22 56 67 9e 99 b8 c4 c4 b0 20 df 5e 3f 2a f7 e3 53 93 4b 8c 97 ab 35 ce f8 38 da d9 4b 8e fa 71 b6 9e 9d b6 73 b9 7b 38 dc fb fd 8f 27 ab 27 3f 2f 1f aa 7e cf c6 fa bc b5 f4 b2 bb 39 f9 5c 5e 67 02 f4 e4 f3 fe 77 d1 b8 9e 1f 33 81 67 ca 67 be fa f2 3e b7 cf ed fa e1 f7 3b 24 5f ec fe 66 be Data Ascii: x;V3/9o4IfJ/[+`g~'>b&tD"RYfR!75/-jIZ+o:scX~F~CUyXCzc)R+"Vg ^?SK58Kqs{8''?/~9\^gw3gg>;$_f
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: a5 fe 98 41 53 95 b3 f5 5e 1d 43 9c d6 b6 5b a5 14 6a 3b bd 0b 8b 5c 1c d5 b4 54 a2 29 b2 b6 6f ea f4 92 46 46 19 55 4d 21 d1 ad 6b 44 92 c7 18 8e aa 9e 42 88 ca bc 53 8a 6a c0 55 86 8f c5 72 27 0a 5b 8d 14 46 9e ae 9a 7d 76 a3 d3 32 b6 4f 4d a7 fe 2c ac ad 9b fa b5 b4 5f 41 95 b3 1f cc b6 af e8 16 c9 69 b5 7f c2 b6 53 f8 56 d6 f6 5b 33 57 ca 49 19 1b 5f 76 a1 6a 86 e9 45 29 1c d1 57 9a 7f 66 ac ca d9 8d 65 9a 38 83 2b 29 5e 74 bf d3 88 2a 41 e8 58 3d 41 5f bd 29 59 e9 0d 65 4c 6c 6c 6c 73 9a c6 cb 79 a4 61 a6 ba d2 4e e5 70 a5 65 54 32 34 c6 fa 48 9d 51 51 4f 0b 20 89 4f 53 04 29 b7 4a 12 58 f6 bd ba 5e 0f fd 90 2a d7 53 ed 34 93 54 c1 0a 37 8a 10 69 ab 69 aa 34 aa 81 95 10 48 d3 14 b9 fe 81 94 e7 84 f9 da 13 a7 29 cf 25 12 b3 ae 56 f2 cf 00 1a 6f 22 e5 Data Ascii: AS^C[j;\T)oFFUM!kDBSjUr'[F}v2OM,_AiSV[3WI_vjE)Wfe8+)^tAX=A_)YeLlllsyaNpeT24HQQO OS)JX^S4T7ii4H)%Vo"
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: bf 7b 58 58 e5 b2 d2 6e 5f f5 a8 60 96 07 46 62 97 f3 a7 e7 62 20 f0 6c 5a ff 00 90 a4 ff 00 97 e5 68 5b 0d e8 bd 2b 9d 7c 14 30 dd 6b aa 2e 15 2d 0d cc 78 2a dc 31 5a 35 3d 95 b6 b2 5a 2a 9a 3a 88 ea a9 f8 ab 7e 8c 20 b0 b6 4e 97 87 0b 0b 1c 37 ba 5f 6a b7 b7 20 b0 f2 5b 35 f4 7c 13 ca c8 63 a5 9e 3a 98 75 b9 52 32 b2 9e 68 9f 04 c3 50 09 36 f8 3d 9e 97 5c 2c 2c 2c 0e 1d a9 a5 dd 95 a8 21 dd 9f 26 b7 1f 50 a3 9e 4a 59 ed d5 71 d6 53 f1 1e d2 7f 2b 50 43 fd 7a 51 4e 4e 44 a7 22 82 61 4d 4d fe a1 49 6d 92 6a 67 b5 cc 76 90 b0 c9 33 79 0d 6e 4e df b8 05 66 9f d9 eb b8 2f d6 c2 5c d4 35 68 2e 36 8a 1f 67 6e b2 bc 47 1d 4c a6 7a 80 ac 3e ab ae d6 7d 12 d9 8a de 1a 99 99 04 15 73 ba a6 a1 9f 3b 3e 4d 2e 7e 9c 13 53 50 e2 92 dd 50 29 c8 44 29 87 27 f7 77 ca 56 Data Ascii: {XXn_`Fbb lZh[+\|0k.-x1Z5=Z:~ N7_j [5\|c:uR2hP6=\,,,!&PJYqS+PCzQNND"aMMImjgv3ynNf/\5h.6gnGLz>}s;>M.~SPP)D)'wV
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 4a 25 12 b3 c2 34 08 68 75 3a 14 53 47 01 d0 a2 8e ae 43 47 f6 d2 03 ba ff 00 99 8e d3 3c f0 9d cc 94 10 1c f1 f1 38 2c 72 6e 5d a7 2c 37 91 6b b9 b3 92 3c 91 38 07 9b 79 31 02 87 cb 9e 6d 1c c1 4d 58 4e ec 39 a1 db 2d c0 59 21 63 2b e2 68 fc 77 29 a7 99 44 e1 64 2e 48 76 c6 8e e4 0a 2a a8 a6 ac 72 ff 00 ca 3d f4 6e 87 4f c1 d4 e9 f8 43 b8 e6 b3 f1 49 cd c5 37 9a 3f 2a ca 6b 72 8e 1a 87 3d 0e 9d d0 08 e4 ad d0 06 fa de 2b 08 61 65 65 1d 32 b3 a0 40 68 34 1c 18 58 58 5b a9 a1 61 61 04 d0 82 3a 0d 0f 03 9a b7 4a f0 01 32 53 05 e1 96 90 82 69 4d 72 07 59 62 de 51 c8 5a 41 cf f6 46 b7 79 5a e8 4c 54 83 92 7b b7 5b 75 a8 c8 7b c9 4e 28 9d 46 85 39 1d 0e 99 e9 0d 1d a1 fd 0b 79 16 fc 8f 85 cf 0d a0 8f 3e 10 4d 88 05 b8 b7 16 e9 08 05 85 8d 32 b3 c0 c9 1c d3 49 Data Ascii: J%4hu:SGCG<8,rn],7k<8y1mMXN9-Y!c+hw)Dd.Hvr=nOCI7?kr=+aee2@h4XX[aa:J2SiMrYbQZAFyZLT{[u{N(F9y>M2I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49831	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	455	OUT	GET /sumbangan.com/public/sliders/661c7e2d24ea7_Sumbangan_New_Slider-03.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 811343 Connection: close x-oss-request-id: 674319E0CE5C5D393433E3E7 Vary: Origin Accept-Ranges: bytes ETag: "C488260D3DC35794826B310CBF06C546" Last-Modified: Mon, 15 Apr 2024 01:09:01 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2755761614406019201 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: xIgmDT3DV5SCazEMvwbFRg== x-oss-server-time: 1
2024-11-24 12:19:44 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e5 e0 7a 7e 7a Data Ascii: JFIFC!"$"$C"z~z
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: d7 29 c6 24 dc dc 19 64 ab 92 4e 55 ca c9 ce b6 cd 92 ad ea 58 ea a6 32 d6 a7 17 3d 37 b8 da 45 9e db 28 60 46 74 db ed 3c bf a7 df 9a c5 23 7e 74 30 00 06 98 03 10 d0 00 36 98 c4 d1 80 00 53 00 1a 72 00 0c 4c 1a 76 21 a5 1a 21 b4 23 02 80 00 00 00 01 c0 05 09 a1 a0 81 a6 00 50 c7 00 08 00 34 14 34 c0 01 88 86 05 0d 30 69 83 4c 60 03 4e c6 20 62 68 c0 18 98 34 0d a1 24 27 40 10 86 00 02 1a 01 a1 80 a0 00 a5 10 69 84 64 88 8d 42 69 ab 00 00 41 30 43 08 b6 02 62 a1 82 18 21 80 00 00 00 28 04 03 08 8c 40 10 da 15 83 00 00 00 00 1a 11 80 00 1c c4 0e 9f 61 80 00 20 00 34 c0 01 80 00 03 4d 00 00 01 80 00 00 08 00 0d 30 00 00 00 20 69 80 00 00 01 40 03 02 00 01 a6 00 23 00 00 00 05 d9 f8 cf be f8 1f 43 a0 81 f8 1f d0 80 00 02 d5 6d 97 4c 7c f3 6e c7 59 fd 4b f2 Data Ascii: )$dNUX2=7E(`Ft<#~t06SrLv!!#P440iL`N bh4$'@idBiA0Cb!(@a 4M0 i@#CmL\|nYK
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 00 13 12 11 b0 9a ac 98 29 37 60 98 90 8d 8a 5a c9 b5 8c c6 83 0b 18 08 86 88 c6 6a 6a b7 32 23 31 d8 da 76 30 01 30 84 6c 52 d4 ad 25 a8 b4 2a 76 05 6e 6c ad cd a2 93 77 28 65 46 16 22 a2 c2 6a b2 c0 ac b4 8a 8b 42 b7 61 4a 43 66 31 b1 15 96 12 c2 6d d8 d8 ee 54 66 8a a3 72 9a c7 86 45 79 d5 44 c9 a8 13 16 2d 88 34 23 71 60 00 a3 31 62 4d a4 66 dd 91 26 ec ac b1 95 3b 19 59 68 95 3b 42 a9 58 25 65 8d 2a 94 dd 29 8e e5 b4 d0 01 12 92 96 b8 da 96 b2 c1 62 e4 24 23 68 53 39 35 26 a4 c3 61 62 8c d1 54 6e 53 54 ce 6c 24 3b 91 a6 80 21 a1 2b 40 00 02 21 2a a2 78 d8 e9 5e b7 23 5d cb db 32 93 3e 8b 21 18 cd 4a 28 68 63 88 92 8d 12 8c a2 76 57 66 b9 ca 4a 6c 29 8e e5 0d a4 21 64 1a 80 13 53 94 67 71 39 46 2c d9 53 c9 ad 6e cf 61 45 e7 2c 09 e9 a6 bd 26 a3 37 09 Data Ascii: )7`Zjj2#1v00lR%vnlw(eF"jBaJCf1mTfrEyD-4#q`1bMf&;Yh;BX%e)b$#hS95&abTnSTl$;!+@!*x^#]2>!J(hcvWfJl)!dSgq9F,SnaE,&7
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: c7 8c b8 bf 57 cb e8 fb 6d fe d3 c3 f6 f9 67 ac d9 e8 ee 33 7c 87 42 d8 4e 9f 3c 7b ef 77 5e f8 6b 4c 3d fe 3b f3 ff 00 07 f4 6f 22 eb e3 f1 e9 65 fa 7e 7f 71 8e d1 fc ef d0 f3 8f 4b 7e 93 a7 0c ff 00 1d d0 76 f2 fc e6 7b df 01 ec f8 f2 d9 5f da 79 f6 f1 7b dd 87 94 e1 f4 37 3e 5f 73 eb cf 9e a1 d5 b9 3f ab e5 4f a6 73 3f a0 39 fa 3c 86 9f a7 d1 c3 dd a1 e7 fd 13 94 f5 f2 e7 74 2d 0f 47 c7 5e 25 e7 b7 1a 7f 4f cd 72 8c f7 ca 4d 3b 90 01 75 de 47 dd fc ff 00 43 2b e7 be d7 c3 f3 d2 5b bd 9f 58 b8 f3 74 ee 79 07 3e f5 c5 f6 de be 5f 1b bf da 79 1e 1f 43 73 e6 76 5e c8 f9 ee 9e c9 c6 bb fc c9 75 de 43 de f3 df 3f e7 6e e5 c1 f3 d1 ee f6 5d 7b 58 f3 30 dd f1 fc 76 a6 33 ed 9d 3c 9e 3b 7f bc f3 1c 7e 8e 47 90 f4 de 9d 9e 67 ea 7d 1e 34 d7 0a c7 52 f5 fc 5e d1 Data Ascii: Wmg3\|BN<{w^kL=;o"e~qK~v{_y{7>_s?Os?9<t-G^%OrM;uGC+[Xty>_yCsv^uC?n]{X0v3<;~Gg}4R^
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 3d 7c 7d f3 80 77 68 f3 f5 7c ef f4 34 65 66 a3 83 77 8e 0d bf 37 7c c9 c4 ca e5 eb f9 f8 1f b3 e4 76 dd fe 87 7d e3 fa ff 00 3a ce 13 f6 fc 5b a7 5d 9a e5 d9 37 3a 6d c7 87 ef 7c f3 19 2f 5f c7 fa 07 0f 37 0b c7 f6 78 48 cf 67 c7 fa 3f ca 7a bf 27 e4 fb 1c 9f e8 5f 9b fd 8f 6f 0f 40 e4 3d e7 2f 97 af e7 cd df 68 d4 dc 7c f9 ed 7c 9f ab ed e3 ec bc 53 b5 f1 3e 3e df 25 d1 f9 c7 48 eb e3 ea 5f 3d 7d 09 f3 e7 2f 5e 9f ac f2 6e b3 d3 cf d0 be 6b fa 53 e6 ae 7d fa 47 4e e6 3d 37 1d b9 b7 37 fa 07 61 73 cd fa 42 f0 d9 eb e2 bd 37 20 b3 a7 97 ea 1e 11 d2 bd 87 3f 5f ca fe c7 bb d7 67 ca f8 3d 23 9a 5c 7d 55 a1 de e8 31 db e7 28 10 b8 fa 3b d8 7c b9 f4 4c e9 c4 75 9f 52 23 41 9d 2e 13 73 e4 3e 8b f9 d7 e8 bb cb 61 f3 5f d2 9f 34 5c 7d 25 77 0a ee d3 af 08 c3 fa Data Ascii: =\|}wh\|4efw7\|v}:[]7:m\|/_7xHg?z'_o@=/h\|\|S>>%H_=}/^nkS}GN=77asB7 ?_g=#\}U1(;\|LuR#A.s>a_4\}%w
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 60 5b 72 cb df 1c 08 ec 20 62 4e 71 95 b8 2a b6 a9 57 04 f1 0c ee fa 93 50 6c 24 03 ba 19 ba e7 29 0b 7c a3 5b 86 6d 78 d6 d1 8e c8 14 dc 51 09 ab 73 30 72 b5 8c b9 46 cd f0 8c 65 42 bc 5b 56 3a 63 19 b0 6b 11 5b 5e 75 1e bf c7 ba 56 3d 9d 33 5d b1 c6 e3 f5 b9 d6 b3 7f a3 f2 fa b1 d5 d4 f3 f4 df 66 26 4e b8 c0 70 cd 9b 85 98 f4 4a 6a 73 a4 af 85 ca ae ae 44 e7 5c ea f9 d7 66 b9 d9 28 cb 58 70 b5 59 4c 6c 8c ae 16 c2 ab 52 84 46 ab 6a 2b c2 cb c5 c6 f5 58 d9 5a c9 36 19 78 59 eb 0c 5d 8e 2e b1 3b f4 f7 62 6c a1 5e 47 2d c6 d8 45 9c a3 02 1d 78 66 e3 e0 60 76 f3 67 e0 61 63 ed 91 9b ab da f3 f4 67 94 3c 6f 2e cc 4b b7 8b a7 0b 06 a4 45 56 16 22 04 31 01 65 41 9d b1 d1 87 a7 cf f1 93 e9 9f 6f 67 86 c9 de 7d a5 7a 0c ed e7 37 1e d9 59 89 8d b8 92 79 aa 7d 65 Data Ascii: `[r bNq*WPl$)\|[mxQs0rFeB[V:ck[^uV=3]f&NpJjsD\f(XpYLlRFj+XZ6xY].;bl^G-Exf`vgacg<o.KEV"1eAog}z7Yy}e
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 87 b2 f3 fc 3e 87 8a ab 2f 1f cb ec a5 4a 32 82 27 46 0a 5a 55 92 88 57 7d 49 5e 2e 6e 0b 78 38 f6 e0 5b e8 b6 de 2b d1 5e 3b 5a ae 8c 55 5d b1 74 c2 79 2a 6e 76 42 6b 3b 6a b2 22 d8 b3 70 69 39 57 22 6e 12 96 4e 0e cb 65 09 92 70 26 ac 9d 56 5a a5 5c e2 e4 d6 b1 11 c5 55 f8 f6 ac 90 5c b1 4e 21 1b 14 4d 5b 5e b9 96 e3 ca cb 2a 92 aa 67 02 6e e8 b4 83 1d 39 41 dc ca 13 25 a9 4e 32 c9 b3 59 ad 36 42 bb eb 13 52 57 19 92 46 53 8d 52 a4 a6 98 49 21 19 c5 2b 84 e1 2c ac ae e9 54 d3 b4 8b 48 93 8b 52 13 c9 42 d8 d2 94 66 62 92 8b 53 94 54 96 d3 76 3b 53 85 90 90 68 a9 4a 16 59 07 27 64 21 74 22 88 5d 54 d5 34 5f 53 58 3a 2f 49 ad b8 f1 74 ec fc ef 5e 7b ac 9d 06 c6 5d de 4e bb 27 3b ca 9e 3d b1 93 7e 35 f9 64 59 44 ea d2 32 50 09 09 45 d5 96 55 2b 2d 51 68 21 Data Ascii: >/J2'FZUW}I^.nx8[+^;ZU]tynvBk;j"pi9W"nNep&VZ\U\N!M[^gn9A%N2Y6BRWFSRI!+,THRBfbSTv;ShJY'd!t"]T4_SX:/It^{]N';=~5dYD2PEU+-Qh!
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: d9 52 30 3d af 69 63 b9 e1 90 38 49 19 61 47 cf f9 dc 9c 2e 30 4f 24 12 71 b5 54 7e e4 2c e2 38 01 c5 05 29 c0 67 9f 24 6d ca 68 e4 2a a1 d9 70 e4 80 65 f2 bb 88 ef e6 a1 6f 0b 7f f6 5c b1 87 89 18 58 ee 78 a4 0f 12 30 b0 9f 2e 49 0f 54 d7 10 81 ce f0 3b 12 13 d2 53 c5 24 2d e1 63 bf 70 a1 e7 39 ea cf 2d d8 dc a6 8e 59 df 81 e6 5c 37 1d 4b ff 00 c6 ce 4a 76 7f ec e9 18 1e d9 18 63 76 d9 58 69 5d 77 8d e2 46 b9 85 bc af f3 d8 1c 20 72 17 91 9a 4f 86 01 99 3f 87 7c c5 79 03 d5 db 81 92 c1 ca e3 81 23 b8 9c ce ae 71 c9 da 21 80 4f 11 dc 0e 22 c1 81 ff 00 b3 a4 60 7b 64 61 8d dc 99 d8 64 18 5c 24 64 8d e0 76 ef f3 e4 69 ca 28 9c aa 7f 9c a2 3a b9 4a 7e 16 79 ef 13 50 e5 9d db 33 cb 68 db c4 e9 4e 4f 25 3b 3f f6 5e 47 34 b1 89 03 d8 58 ee 68 de 58 70 d9 58 e1 Data Ascii: R0=ic8IaG.0O$qT~,8)g$mh*peo\Xx0.IT;S$-cp9-Y\7KJvcvXi]wF rO?\|y#q!O"`{dad\$dvi(:J~yP3hNO%;?^G4XhXpX
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 64 a7 15 2b 93 8f 88 3c 61 b1 ea 2a 8b b8 28 ea e5 79 73 61 90 ba 39 da 1e e7 b4 ce f7 4b 2c 6e 0d 89 ef ff 00 19 f3 2f c2 cf c1 c4 1b 14 cf f8 69 de d6 92 38 9f 16 38 1c 38 90 21 ad 66 38 7c 91 2e 74 aa 57 b5 95 14 e4 16 3c 34 89 58 4b a7 88 b1 fc 7f fc b4 63 85 68 c7 b4 48 9e 3a 55 b1 48 a4 29 a9 a3 7c ac ac ae 25 c4 b8 93 9c a4 72 25 15 22 1e 71 26 26 ac f2 65 67 6c ac ac ac ac ac f2 e5 65 65 65 65 65 65 65 65 65 67 7c ac a2 76 6a 6a ca ca cf 3b 82 95 aa 66 2c e0 b1 c8 14 0a 05 65 02 9a 50 2b 28 1e 41 b6 56 56 79 87 36 77 1c b9 41 01 f6 19 51 4b 85 1c a9 ae d8 8c ab b5 b4 b1 cb 2b 3f f7 59 fe 9a 4a 71 4f 72 79 58 df 0b 0b 1b e1 63 90 78 47 90 6d 28 f8 69 c4 9d ab e4 e1 54 fd a0 4f 99 f8 e3 86 54 e8 58 e1 34 6f 62 61 f8 e7 19 43 aa 77 13 d8 32 a4 72 84 Data Ascii: d+<a*(ysa9K,n/i888!f8\|.tW<4XKchH:UH)\|%r%"q&&egleeeeeeeeeg\|vjj;f,eP+(AVVy6wAQK+?YJqOryXcxGm(iTOTX4obaCw2r
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: de df 57 33 29 e9 ee 15 92 d6 d4 6d a3 aa de 27 2a eb 1f 63 71 a2 8f b6 ab 1e 57 9a d1 43 45 3c b2 4d 2a d3 93 be 1b b2 bb d6 0a 1a 2a 89 e4 9e 55 60 99 d0 dd 56 b5 fa 65 a6 a3 ed 6e eb 52 dd 0d 24 6e 25 c5 41 2b e1 96 d9 53 de e8 ae 51 09 a8 15 82 94 52 db ee 15 2d a4 a5 ab a9 92 a6 7d b4 7d 5b de 1c 03 9b 57 1f 63 55 6a 8f b6 b8 ab bd 6b 68 69 6a ea 66 aa 97 6d 29 1f 05 aa a1 e2 38 5e ee 27 f3 d1 47 da d5 8e 83 57 3c f7 5b 25 88 04 06 05 ea f3 15 10 a9 a8 96 a2 55 a5 e9 05 3d be ae 66 d3 c1 70 ab 96 b6 a3 6d 1d 54 ee dd 5d a3 10 dc a9 19 da d4 b0 61 ba c2 42 28 6c 96 14 00 02 f3 78 8a 89 b5 35 12 d4 ca b4 bd 20 82 81 ee 0c 65 ea e7 25 74 fb 69 5a e7 45 58 b5 4c bd 9d a5 5a 22 ed ee 4b 5a 4b d3 97 4e c7 d9 da 66 91 b1 47 78 b8 cb 5f 3e da 3e b9 ed aa 5a Data Ascii: W3)m'cqWCE<M*U`VenR$n%A+SQR-}}[WcUjkhijfm)8^'GW<[%U=fpmT]aB(lx5 e%tiZEXLZ"KZKNfGx_>>Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49830	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	455	OUT	GET /sumbangan.com/public/sliders/661c7e4845500_Sumbangan_New_Slider-04.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 938807 Connection: close x-oss-request-id: 674319E01698CC31359863EA Vary: Origin Accept-Ranges: bytes ETag: "7DDBA00979C735263BCFA18CCC486610" Last-Modified: Mon, 15 Apr 2024 01:09:28 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2394118236009863024 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: fdugCXnHNSY7z6GMzEhmEA== x-oss-server-time: 2
2024-11-24 12:19:44 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ea 71 6b af 25 Data Ascii: JFIFC!"$"$C"qk%
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: ad 94 67 79 4a 51 95 c3 13 b3 33 b2 f1 ae cb f9 0f ba c0 fc cf d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a b6 ad e7 86 4a 89 ff 00 50 fc 8d d3 ae 5a e7 26 84 64 44 92 00 10 ac 88 6d ba e7 94 f5 9f 83 fd 28 07 c6 fa 00 00 00 00 18 f9 06 b3 c2 ab f6 1e 27 fa 37 e6 2e 75 3f 67 02 8b a9 9b a2 32 a7 3d ee 9e 35 89 93 76 2d ba e7 94 ea 77 94 e3 18 1e 8f ad f2 0e c1 f8 9f be 01 f0 3e 88 05 00 02 69 38 96 9f 6d a7 fe 97 f9 a9 26 bb f3 48 83 52 75 a9 72 2c c7 be e2 ee 9f 8b ed ff 00 27 f5 18 1f 99 fa a0 0a 00 00 0b 5f 3e 55 f6 7e 7b a2 9b 3f 7b f9 ab a5 09 f4 e4 c0 45 19 42 15 73 ae 6a aa 2f a3 1d 68 ea bc ef b5 fe 63 ed cc 0f c8 fd 90 00 00 00 00 0f 01 e0 fb 77 0e fd b7 c1 75 15 fd ef 0c 29 9d 58 ee a2 42 74 94 54 5a b1 d5 24 ec be cf c6 7b 3f e7 bf 68 03 Data Ascii: gyJQ3*JPZ&dDm('7.u?g2=5v-w>i8m&HRur,'_>U~{?{EBsj/hcwu)XBtTZ${?h
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 11 99 44 04 31 50 00 09 50 25 51 94 26 81 13 52 13 42 32 89 14 d6 b6 84 2b 94 5a 4e 50 73 33 69 b2 91 1b 48 38 b6 a2 e3 ad fd 6c 07 7e 44 5c 68 4e 23 8b 88 93 8d 80 3a 4e 40 31 c2 1a 1c 93 01 a8 02 04 dc 64 b3 94 2c 94 ae c5 15 e8 7d 06 8b 4d de 06 7e 2a 79 ff 00 47 a1 f4 13 5a dc fc 69 5c e4 b7 1a aa d9 63 e5 91 e7 b7 3e 7e 6b d4 e0 5b 0d 66 dc ed 76 c6 23 0b 2a ab 27 09 ca dc 5c 20 44 53 56 45 35 54 b0 b1 26 81 a6 00 84 d4 86 c6 45 80 bc bf a8 f2 dc ba f9 fb 69 b7 c9 f4 2f c8 c7 bd 67 75 56 24 da 90 29 02 08 12 aa c4 27 16 36 34 02 54 29 24 23 25 2c 21 3a c7 10 21 55 91 4f 69 b9 f1 9e ef af 8f 8c 43 77 a3 fa 1f 92 00 b8 13 40 00 d2 a6 1d 4e 53 41 35 4e c8 89 11 83 9c 5d 8c 10 9c 9c 24 d5 00 e0 8c 90 30 10 a5 43 52 41 49 08 68 71 69 46 49 10 99 10 01 b6 Data Ascii: D1PP%Q&RB2+ZNPs3iH8l~D\hN#:N@1d,}M~yGZi\c>~k[fv#'\ DSVE5T&Ei/guV$)'64T)$#%,!:!UOiCw@NSA5N]$0CRAIhqiFI
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 7f 66 e2 3d b7 f3 bf 4b 76 07 e3 fe c8 00 78 cf 67 e1 fe 87 0e 6b 66 b6 ff 00 e8 5f 9c cc ae a1 23 8d 91 4c eb 85 f4 6f ce df 45 fe 67 eb 66 81 f9 4f a0 00 1c f7 a1 73 ef a3 c3 91 55 95 57 ef 7e 56 22 9a 9d 8c 8a f2 6e 25 d0 7c 1f bf f0 4e a8 d3 fc 07 da 00 04 d6 b3 f3 eb 91 fd 3b f2 d3 6e 5d 39 4a 52 9d e7 59 62 20 a7 08 c2 be 8e 87 f3 be 8f bb b1 3f e7 9f a2 00 53 53 b5 e6 1e ee 1e 17 b8 f0 6f 7f fa 8f 9d d4 c0 fc 4f d8 00 17 06 ef 3e 33 eb 79 f8 9d 95 3f dc fc cb 80 60 06 25 93 7d c5 19 cf 23 5e 62 c8 9a e1 91 3c 6b 6f 3b 6b 28 2b c4 ba 9c 7a 76 bd c3 e7 5e 9d f9 af af ef 84 ff 00 25 f5 00 15 60 e7 9b c8 06 34 00 18 36 72 bf ad e1 d7 c6 17 7f 40 fc cd d9 14 dd d3 84 9a 6c 8d 16 21 29 54 48 34 c8 a8 94 a1 31 80 47 16 78 59 b5 57 6c 38 f6 a3 17 33 13 9f Data Ascii: f=Kvxgkf_#LoEgfOsUW~V"n%\|N;n]9JRYb ?SSoO>3y?`%}#^b<ko;k(+zv^%`46r@l!)TH41GxYWl83
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: a5 fa 0f 6d f3 5e cf 5d 7e 93 f9 d7 e8 be 6a 70 1e ff 00 c6 3e b0 1e 8f cb fc fb 27 d6 f9 df 24 fd 4c 6b 7e 5c fa 8f e5 93 e8 2f 65 f2 de 45 7d 0b ea 3e 5e ea 8b ec 7e 64 fa ef e5 ec e3 55 9f a8 da 3c 19 bd 13 9f 74 3e fe 5e b1 09 72 ae 7f 5f a2 e7 fc c7 d3 35 e7 e8 1c 0b e8 ee 10 c4 bb 77 cc fb 2b cb b5 6c f8 3e 66 3d 3d eb 87 77 1e 70 eb ca fe 92 f9 4f ea b7 2b e5 85 f3 a4 ef d2 bd ef cb d9 13 9f d5 d8 f9 1c 7a fa 7a 07 cd ba 71 cb e9 fd 8f cc 79 0e 9f 43 fa 5f 97 7b 44 66 f0 1f aa fe 51 79 ec a9 13 cd 4e 16 7e 2e 7d 18 a0 ba 7a 98 80 00 01 96 6d 35 7b 3c f9 72 22 d6 bc 98 9a fc fd 7e 7d d1 03 5d c0 00 01 e6 62 65 e7 9d f1 23 9f 3d 18 f7 53 af 4a 03 5b 00 06 99 6d b1 9f 3e 35 d3 7d 1a da 11 ad e5 ec 34 b7 cf 3e e1 e0 db 7c 99 31 a1 d9 99 6e 2d dd 38 d8 Data Ascii: m^]~jp>'$Lk~\/eE}>^~dU<t>^r_5w+l>f==wpO+zzqyC_{DfQyN~.}zm5{<r"~}]be#=SJ[m>5}4>\|1n-8
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 4f 9c 86 22 06 21 b0 06 91 6c 01 ab 1a 71 51 43 38 d9 c9 3e 9e 09 38 bb 26 21 08 49 2d 75 dd 0c ea 98 ce 2d 2a 6f a6 6a 9a 2f a7 3d e9 93 ae 74 b2 ec 26 6c 9e 06 45 e5 64 27 2b 9a 23 93 5b 54 ca c7 2c 1c 8b 90 93 44 c0 1a 68 86 03 10 dc 12 5d 3c 69 59 91 2c 69 26 49 42 4b cc 6b 4b 54 63 65 8a a6 4c 8b 89 b5 2b 24 d4 ec 8b 94 ac 83 98 90 27 11 00 28 b8 ca 25 19 66 56 96 dd d6 87 de 7c ef 5e 2f 95 ec 7c 63 c1 ea 72 c7 97 e8 7e 55 c5 42 5a 56 c9 c4 44 63 24 d4 46 e0 92 76 32 01 28 b5 12 dc 6a 37 3b e4 eb b6 bd 72 a9 35 34 ad aa 55 92 e3 2b 84 30 00 23 19 85 30 b9 35 53 b1 c4 64 e5 60 57 87 33 95 87 49 98 00 80 00 00 26 08 60 86 80 00 94 65 9d f4 bc 7c ac 5f c1 fe bf 9c 7a 2f 37 d4 3f 4b f1 3c b7 94 eb fc 8b 1b 82 b1 fd bf 97 09 b9 32 98 5c 80 00 00 00 00 03 Data Ascii: O"!lqQC8>8&!I-u-*oj/=t&lEd'+#[T,Dh]<iY,i&IBKkKTceL+$'(%fV\|^/\|cr~UBZVDc$Fv2(j7;r54U+0#05Sd`W3I&`e\|_z/7?K<2\
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: ea 7c ab d7 cb ae 6f bc df aa fc d7 d6 f9 fa 5e 97 51 fb 5f 83 dc 31 f4 7e 8b f0 bf a1 f3 8b cc eb 7e df 83 dd 63 63 f8 6e dc 6e ed 9c 4b b6 f0 d7 88 e7 fe fb 9f 7d 9f 04 fb bf 07 ef 1f 2b dd e3 f9 c7 46 e6 ff 00 4b c7 d6 b3 f5 7b df ca 7d df 9f ee f4 5a 8f da fc 2e eb 83 ac dd 7e 13 f4 3e 75 79 5c 2f bb f3 fd be b9 73 8d cd e7 69 e2 3d bb 85 e7 dc ef a2 f3 bf b7 e0 97 65 e4 7d e3 e5 fb 31 74 18 bc df cd db b2 6d fc 97 ad f9 3e de 21 be f3 fb ff 00 d7 7c 5e a5 c8 ba ef 1f f8 de cd 2f bf e7 dd 03 ef 7c cf 79 c4 bb 6f 12 f8 fe fc 0e 9b cc 7a 7f d4 f1 fa bf 9f fe 80 f9 f3 e5 fb ba 97 b0 c5 c0 f9 3e cc 5c 8e 3f ef 3e b7 93 a1 f2 5e b5 c9 3c 7d f5 dd b3 88 f6 ee b8 e6 1e 1b db f8 6f d0 7c dd a7 76 e1 3d db e1 7d 0e 73 cf ba 17 3c fb 3e 19 b8 4f ea 78 77 3f 44 Data Ascii: \|o^Q_1~~ccnnK}+FK{}Z.~>uy\/si=e}1tm>!\|^/\|yoz>\?>^<}o\|v=}s<>Oxw?D
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 01 44 d0 4e 13 4a 94 a0 28 b8 91 8b 12 2a 51 45 29 03 9a b2 47 74 2c 92 4c 68 03 40 00 00 00 10 d0 29 20 4c 1a 1d 26 98 42 c4 46 40 89 80 86 86 0c 00 58 b4 48 86 2c 46 84 00 0e 23 8b 64 40 08 30 71 94 41 31 22 a6 88 8c 58 a9 12 40 9a 20 db 23 19 a2 24 92 c4 92 22 49 11 60 22 48 43 42 18 25 20 8a 90 45 c8 20 a4 44 49 95 05 30 8b 01 29 22 24 82 2c 00 12 4e ec 62 b6 b2 d5 5d b9 2d 67 a2 23 c8 af 41 ae e5 d7 0a c2 39 d5 ae 12 b1 cd 34 6e 25 92 43 2b 56 25 ad b0 8b 62 0e 01 73 a5 6a 6d 7d cf 34 92 f7 2c 4e 59 ed f1 7c cf 81 fa 2f 13 3e 3f 9e 5f 44 f0 7a f9 b4 26 dc 62 d8 88 22 ad a4 30 28 04 31 35 8a 92 96 24 c2 a5 6c 66 94 e0 d2 71 0b 23 19 46 6d 45 a9 a9 5d 8c d3 28 c5 77 39 0a 99 59 62 52 44 0c 40 28 a4 15 2b 92 d7 29 04 49 24 43 14 1a 40 49 64 e0 c9 11 76 Data Ascii: DNJ(*QE)Gt,Lh@) L&BF@XH,F#d@0qA1"X@ #$"I`"HCB% E DI0)"$,Nb]-g#A94n%C+V%bsjm}4,NY\|/>?_Dz&b"0(15$lfq#FmE](w9YbRD@(+)I$C@Idv
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: ae 16 d4 53 cb 1b a2 94 72 14 e4 56 99 f3 af 4d 76 a2 65 75 2c f1 be 19 49 59 59 df 2b 2b 2b 3b 65 12 b4 6d 1f 63 43 d0 d4 54 95 55 d4 5f 0a d7 af 85 ab d7 c2 d5 e8 69 7a e4 34 cd 72 1a 6e b5 7c 39 58 99 a7 ab 9a e8 f8 b8 3a 1a 96 9b 0f 6a 1c 85 12 9c 53 b6 ca 32 2e 2c ad 27 e7 7d 1d 5f e7 68 6c 36 ca ca 08 7a c7 bb 08 9e 43 d0 1f ea 03 66 ef 54 3f 8d b9 54 37 2c 78 54 6c e1 86 a7 e6 a3 fa 07 ea 35 54 f8 d3 fd 2a 80 a7 f0 a2 07 82 5f 96 9f ee 36 72 08 72 94 7a 83 a6 ef d4 95 1f c9 a9 7e d7 af 95 94 f7 27 1c ac 2e 15 c2 8b 53 98 9c d3 b3 5c 81 40 a6 94 3a 3c 28 31 06 20 39 c8 44 2c 2c 2c 2c 2c 75 08 dc 74 4a 7a 3c 85 14 51 f5 21 04 10 43 a9 14 6f 96 4b 65 13 28 a0 e8 92 00 d4 97 63 59 2f a2 d2 14 9c 10 7a bd 57 49 c1 50 39 4a 21 69 af 38 f4 fa 96 d9 ed 50 Data Ascii: SrVMveu,IYY+++;emcCTU_iz4rn\|9X:jS2.,'}_hl6zCfT?T7,xTl5T*_6rrz~'.S\@:<(1 9D,,,,,utJz<Q!CoKe(cY/zWIP9J!i8P
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: fa b1 dc f3 8e 89 e5 77 24 ca a7 b9 db 04 10 d8 20 87 31 58 58 dc 9d 8a ce d9 4d 43 94 a2 53 9c 8b 91 3c 81 35 0d 86 ee 45 11 bb 50 51 a1 c9 94 e7 2e 30 8b d7 68 bb 44 1e b8 d7 68 8b 91 72 7b 91 7a e2 59 40 a6 1e 52 8e d8 41 ab 08 85 c2 80 d9 9c 8d 44 27 04 e4 76 78 ef d9 a1 00 b1 b6 16 16 13 5a 80 40 21 c9 85 85 85 85 85 8e a1 e7 28 ac 26 a1 bb 8e 04 d2 65 48 51 e5 6b 72 98 c4 c6 e1 0e 42 9e a4 7e 13 9d 9e 60 9a 76 c6 57 02 2d 4f 09 dd 18 d0 58 d8 a2 14 6c ef 63 70 b0 b0 88 52 27 74 da dc a6 c4 9b 1a e0 4d 1c a5 65 17 04 64 4e 91 19 42 32 95 c5 c8 51 e7 08 6c 06 50 8d 70 23 19 45 85 16 95 85 85 85 8f dc 04 39 26 f9 23 fb 84 13 3c 55 47 cf 6f fa 6e fa b0 aa a1 df 4b f4 88 ca 88 61 49 f2 41 dd 2a 3e 91 ca 7f ab 43 f4 35 0f 97 c6 ee 07 c4 ee 38 b5 5c 68 6c Data Ascii: w$ 1XXMCS<5EPQ.0hDhr{zY@RAD'vxZ@!(&eHQkrB~`vW-OXlcpR'tMedNB2QlPp#E9&#<UGonKaIA*>C58\hl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49827	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:43 UTC	455	OUT	GET /sumbangan.com/public/sliders/661c7d7ce283f_Sumbangan_New_Slider-05.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 729008 Connection: close x-oss-request-id: 674319E0F5E04B323559C63F Vary: Origin Accept-Ranges: bytes ETag: "FD4DEAE8FE77AB95B83828B21A8FD163" Last-Modified: Mon, 15 Apr 2024 01:06:05 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9685159916220672411 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 16 Apr 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: /U3q6P53q5W4OCiyGo/RYw== x-oss-server-time: 2
2024-11-24 12:19:44 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 00 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f3 11 d3 c0 02 Data Ascii: JFIFC!"$"$C"
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 00 08 92 c4 48 80 a0 00 07 4c 3c bf 50 04 c4 c0 00 00 00 01 40 00 00 40 00 01 00 44 c0 0a 98 94 12 44 82 26 00 00 44 c0 00 13 13 00 85 00 40 00 92 25 04 82 22 62 50 59 89 80 48 89 20 08 98 24 92 25 15 28 01 00 00 4c 00 02 90 a9 00 40 50 02 50 12 40 42 58 00 28 00 02 00 24 04 02 12 a8 49 60 00 00 00 20 29 3b b3 c6 b7 65 d8 eb 8f 41 c9 fa 4e 4e bc bd 07 3b b5 8d f9 f8 bb cb 5c e5 6a 5c da 69 58 ba b2 4d f2 b9 a3 39 b3 58 89 41 15 22 00 00 08 4c 09 ac 89 a8 b4 00 95 ac 5a 08 8b 0c e3 48 5c ab b5 25 ca 6d 59 a9 40 bd f2 b5 ce 8a da c9 09 24 95 4c 0b 56 4b 40 51 30 b0 16 22 60 40 04 a9 85 01 28 94 5a b2 97 98 9b 2b 9e 98 4b 4e 1e bd 5f 3f 4e 79 4c 63 db 13 13 2c da 2c ca 26 2c cb 1d f1 cf 5c 6f 4d 9d 3b 0e c3 81 da f4 f9 dc 9e 4d 34 ed e3 06 40 00 00 02 80 00 Data Ascii: HL<P@@DD&D@%"bPYH $%(L@PP@BX($I` );eANN;\j\iXM9XA"LZH\%mY@$LVK@Q0"`@(Z+KN_?NyLc,,&,\oM;M4@
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: c6 f0 e2 72 b8 bc 7b f7 9d b7 ce fd 17 d0 f9 7e 0b d4 fd 77 c8 fd 1f ca 86 b9 00 10 14 89 8a 80 a9 89 02 20 01 6a 00 98 01 60 01 00 42 62 80 44 c2 a2 61 40 ed b0 e5 67 cb 97 03 89 d9 f1 71 e8 ea 78 fd 8f 0f 9f bb 21 3a 80 00 00 05 00 00 00 00 02 26 22 11 2b 28 13 01 04 12 02 42 b3 04 09 40 01 6a d8 d6 62 da e7 36 ae 93 36 d2 97 bc ef 7a 59 8b fa 7f 97 fa f7 c4 f6 fd 10 fc 57 de 00 0f 32 f8 ff 00 a0 f9 ff 00 e8 7f 99 df 7e 3e ff 00 43 c3 f4 7e 9b e7 fe 81 f8 7f d1 07 c4 fa 40 3a 0e fb e5 3d de 6f 3d db 0d ff 00 a3 fe 47 91 ae 5a eb 8d a6 27 58 72 f8 9c be 1d 7d 34 7f 2d fd d0 28 00 00 00 00 00 00 00 00 f8 cf b3 af a3 9f e7 49 ec ba af e8 bf 9f d6 69 3d 31 68 92 22 65 1a 4f 2e e3 2e c7 3e c3 7e 5c 78 75 eb 66 fb 2f 9c ac 73 fa 01 3a 80 2c 90 98 00 48 40 00 Data Ascii: r{~w j`BbDa@gqx!:&"+(B@jb66zYW2~>C~@:=o=GZ'Xr}4-(Ii=1h"eO..>~\xuf/s:,H@
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 78 6e ae e6 38 b9 72 13 4d a9 c9 89 e4 71 f9 73 5b 6b 4b 55 a3 3c 56 d7 8b e7 7b 72 f8 7c cc ef 7e 44 72 75 99 ce f4 d6 38 bc 6e 47 02 e6 98 72 30 b3 0c 77 e2 9c 9d 78 fb af 2a f9 72 64 89 b2 ab 68 9c eb 49 ca f8 df 23 9b d7 72 f3 79 9c 9e 17 2f 78 d6 69 6d f3 b5 a9 7b 22 25 48 bd 75 8c b3 d7 3c ef 8d 8f 26 31 bc f9 35 d2 cb e9 13 be 76 c7 5c c4 26 6b 3a 4d 33 a8 23 3b 8e 2f 2f 8a 7c 9f 9f 7a 17 ca 59 c0 d7 b9 a6 6f 1f 9f c6 be 75 d8 f2 3a fe 44 73 2f 97 26 a2 f6 de b2 d2 f6 96 97 ae eb 17 99 4b ed 9d ab 65 62 cb e7 75 b4 9b 49 9c eb 44 ac a4 a4 5e f5 1d 67 6b d6 c9 d2 4d 2b 5a cf 1d 35 cc 8e 1d 4d f1 bf d5 6f 97 41 f7 fd 97 23 d1 e2 7c af 03 cb bd 5f 26 32 3d 3f 1c 24 0a 44 c5 40 54 c4 81 10 00 b4 08 00 00 a0 00 02 26 00 00 0a ee 92 e7 c2 13 10 0a 4c 50 Data Ascii: xn8rMqs[kKU<V{r\|~Dru8nGr0wx*rdhI#ry/xim{"%Hu<&15v\&k:M3#;//\|zYou:Ds/&KebuID^gkM+Z5MoA#\|_&2=?$D@T&LP
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 2f 7f e6 83 5c 02 91 31 50 15 31 20 44 00 2d 02 00 00 28 00 00 89 80 00 02 ba 8e 26 b9 78 7e c5 ad 12 48 00 00 00 00 0a 00 00 00 00 00 80 00 40 22 61 62 b7 aa c4 a2 26 24 40 11 25 00 11 21 32 9b 13 16 4b 69 9e 97 9c cc 4a 26 16 22 62 54 4c 28 82 60 10 91 31 22 62 52 66 26 c4 c4 a5 91 29 64 12 53 02 24 41 04 85 82 48 00 09 81 28 13 30 4b 22 52 d3 59 b2 f3 4b 33 69 8b 33 33 5b 58 98 13 31 28 94 a4 da b2 97 b5 2f 71 7b 52 d7 3b 5f 1d 35 9b da 92 ce 9a 65 7b 9d 66 b6 b9 44 c1 9f 17 99 c6 ce f8 79 ed 96 7b c5 66 25 c7 5c a6 6f 75 66 e2 55 12 89 25 58 ab d6 26 59 80 2a 18 ef 94 d7 16 6b 69 de 62 61 12 d5 2b c9 df 97 be 1c 7d ba de 86 74 ec fa 98 73 f7 84 d5 90 04 89 89 2c 19 94 2d 94 4a 5a d4 96 6d 6a 68 cf 2e 61 ae 12 ad 89 44 a4 da b2 96 e5 71 34 d6 39 d6 ac Data Ascii: /\1P1 D-(&x~H@"ab&$@%!2KiJ&"bTL(`1"bRf&)dS$AH(0K"RYK3i33[X1(/q{R;_5e{fDy{f%\oufU%X&Y*kiba+}ts,-JZmjh.aDq49
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 16 40 a4 c1 24 00 24 24 8b 24 00 00 04 25 11 13 16 a2 62 11 22 2b 78 5a 2d 12 d6 2f 55 88 98 5a d2 f4 6a b4 bd 66 e2 d5 99 74 d3 2b dc 5d 16 b8 8b 44 96 9a 99 be 99 de e6 f7 ce f7 32 42 44 c1 6f 6a 59 9b db 3b 5c de f9 da cb cd 66 cb cd 2c 93 35 9b 26 6a 2d 09 31 cf 93 9c d7 16 bb e7 9d c5 f2 b2 ed 6c 6f 73 b4 e5 6b 9d 22 16 48 22 d4 93 49 a5 91 12 31 cf 6c f3 aa c4 43 56 56 16 ca a2 ca 49 31 13 53 35 82 ea 0b cd 2c 4c 40 95 42 b1 12 dd 9c 97 66 35 66 34 67 25 e2 b5 34 9c b8 b2 d3 08 8e 1d ab 0a e3 73 11 75 a4 69 48 cb 3d b2 cf 5a 44 44 eb 65 21 6e cd 2d aa 2d af 9d ae 6d 7c b4 67 4e 5f 0f b1 e9 e7 ec d1 3e af 94 14 00 90 00 02 81 00 01 20 04 84 44 c0 02 4a 00 00 00 00 4d 40 00 08 00 28 20 00 00 00 00 00 01 13 02 62 44 4c 00 00 89 85 0a 00 00 58 00 00 00 Data Ascii: @$$$$%b"+xZ-/UZjft+]D2BDojY;\f,5&j-1losk"H"I1lCVVI1S5,L@Bf5f4g%4suiH=ZDDe!n--m\|gN_> DJM@( bDLX
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: c5 62 2b 68 6c 5f 6a 7d 91 6d b4 97 74 ae d9 d8 4b 56 32 3b 9f 0a d8 6c 86 c3 22 23 be 92 d1 1d b4 ee e2 b7 77 17 64 2d 1b db b6 8b 47 7b 58 b9 71 34 77 20 8e 51 1b 8b bf ba df 44 b4 be eb 7d 15 b5 6c 4b 5f 7b 69 61 ee 54 3d 9b 19 85 97 35 2a d0 55 29 e2 69 3a 38 8f fc 2d 04 44 5f 75 63 f2 d9 22 64 c7 a4 7b d3 22 22 22 fb be 2a 7b f9 9c 2f 8c 58 6c 79 c4 78 6e 6a 71 43 de 4f b3 da 30 1b de 22 4e e3 62 ee 76 2e 90 90 cf 63 de 44 5e e3 16 c2 d2 3a 2b 8b bc 99 1b e9 71 b4 6e 26 27 a3 1b 2c 5e e7 29 b0 d9 71 77 16 cb bb 4c b8 9b 10 b5 e5 1b 3b 9b 1b 17 e8 7d 37 3b 0f 4b e9 21 15 3b 98 09 6e 71 4d 0f 0b 34 ff 00 c2 b0 22 84 85 f7 66 3f 2d 93 2a 0f 45 de 99 01 10 fb bd 49 72 c5 bb bf 31 6c 64 78 bf c6 65 f5 e9 aa d4 71 34 9d 0a b7 fd d2 5b cc 4c 89 12 1b 17 df Data Ascii: b+hl_j}mtKV2;l"#wd-G{Xq4w QD}lK_{iaT=5U)i:8-D_uc"d{"""{/XlyxnjqCO0"Nbv.cD^:+qn&',^)qwL;}7;K!;nqM4"f?-*EIr1ldxeq4[L
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 2e 85 d7 ee a7 2c 3d 42 2c 44 45 b0 8f 77 f1 22 db ae e2 1d d2 5b 25 61 11 2f d1 11 97 2c 31 5c d8 be 88 5a 6e 5c b9 73 62 f1 bf 73 95 16 89 b8 96 cd 21 b8 92 57 25 b1 22 65 46 55 d1 98 4a 8a 74 e2 c8 b2 12 21 26 42 4c 8c 98 a4 72 a9 13 a2 72 21 73 21 4c 52 89 cc 86 c7 da ed 4b c4 6c b5 dd d4 47 dd b2 e4 9d cb ff 00 72 3d ef fb 1e b7 11 72 e5 cb 8b 4b 9f 08 cb 8d 9f 14 92 b2 91 2e c5 19 f3 2f 76 23 df 5f 6d 2f d4 f4 f6 91 32 9b e5 ac bb 71 55 0f 1b 2d fb 64 91 24 49 7d e5 68 b4 e1 f8 73 66 bd 59 dc f9 32 ce 8c 2c 79 30 dd 58 b9 f3 e2 ba b0 7f 39 f4 cd 26 b1 99 46 0f 10 63 f2 7c 56 1f 4b 97 2e 5c bf 4d fa 62 89 45 2a 50 5b a5 b4 23 b6 22 a4 69 53 c4 55 75 67 e5 ee 5d 9c cc 55 05 34 c4 d7 42 22 b4 ba 25 3b 96 2d aa ee 58 e5 2c 4c a9 2f 22 d7 8d ca 5f be a7 Data Ascii: .,=B,DEw"[%a/,1\Zn\sbs!W%"eFUJt!&BLrr!s!LRKlGr=rK./v#_m/2qU-d$I}hsfY2,y0X9&Fc\|VK.\MbE*P[#"iSUug]U4B"%;-X,L/"_
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 87 20 e9 dc 74 4e 59 22 32 b1 09 c4 4d 11 92 2f bd ae 28 8a 25 b4 b2 1e a9 f4 5b a9 ed 1c 5d fc 39 3f dd ae 1f 05 5e b3 c3 64 c9 14 68 52 a2 8c 5e 2e 86 16 9e 6d 9d d6 c5 7d ee 4c 9b 26 c9 bf b2 ff 00 4f 75 fe a0 7c df 5f 04 e3 ec ca f8 ac 3d 05 3c ff 00 29 81 47 3c ca ea b8 4e 33 8e 9c 6b 80 4b 5e 04 f8 b4 e3 7f 55 47 0e 64 5a e3 f1 74 70 78 7c d3 1f 5b 1f 5f 4e 1a f4 6d 31 bf 39 af 0b 7a 36 99 9b ff 00 f4 4e 19 f5 8d 38 cf e4 8c 8b 2a 96 2e 54 e9 c6 9c 0a 93 8d 38 67 79 9b c6 54 b8 8e 1d c5 f8 18 a2 a5 5a 74 d5 4c d7 01 02 19 be 5f 22 9d 48 54 5a 71 16 17 c5 c2 69 c3 3e a9 d1 2a d4 a2 46 a4 25 ab 57 59 f6 13 f0 79 86 99 0f a4 69 53 fc a8 c9 31 9f 83 c7 c5 dd 4e 70 82 ab 9b e5 f4 c8 e7 99 64 9d 0a f4 6b ad 33 ac 1a c6 60 b1 6b fb 27 0d 7a ef 44 eb 52 81 Data Ascii: tNY"2M/(%[]9?^dhR^.m}L&Ou\|_=<)G<N3kK^UGdZtpx\|[_Nm19z6N8.T8gyTZtL_"HTZqi>F%WYyiS1Npdk3`k'zDR
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 0b 4b 16 2d a5 b4 57 10 ae 2d 50 cc 74 ad 45 0b 55 e4 5c b9 72 e5 c5 d3 cc 6e c4 90 ae 6c 8f dc c8 c0 8a 44 4b 24 7e e6 25 62 28 b8 8e e7 6e 85 e4 48 44 89 0d 19 65 5b e9 c5 38 3f 03 19 fc 87 01 84 ad 8d c4 64 f9 6d 1c bb 0f f7 8c 7e 6b 4f 09 5f f5 05 13 f3 fa 27 e7 f4 4c 3d 4f 1a 87 fc 77 89 7d 5b f8 35 2a 93 a5 3c 17 10 55 89 83 c7 61 b1 71 25 18 c9 54 c0 61 26 4b 28 c1 32 39 46 09 10 c0 e1 60 b3 ca 51 a1 8f 2e 27 a7 73 75 d6 8b 8b e1 d6 43 24 48 91 32 44 90 ca 7f 1c 7b 69 bd f4 d8 b8 8b 5e 22 b8 91 63 95 9c b2 3f 70 b5 5a a7 a2 19 99 bf ed c4 b7 9f 72 e5 cb 97 10 9a 10 ac 5c 89 01 22 e2 12 44 44 8e c2 2e 76 2d bf 6d 16 b6 eb b0 c6 4d 14 a6 e9 55 84 94 a3 9a 61 63 8b c1 c9 38 cb f8 ea d3 0b 42 a6 26 be 49 96 52 cb b0 df 79 e2 5f 51 d7 2c f4 ff 00 f8 ef Data Ascii: K-W-PtEU\rnlDK$~%b(nHDe[8?dm~kO_'L=Ow}[5*<Uaq%Ta&K(29F`Q.'suC$H2D{i^"c?pZr\"DD.v-mMUac8B&IRy_Q,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49829	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	455	OUT	GET /sumbangan.com/public/sliders/6684a59f3ef85_Sumbangan_New_Slider-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 818173 Connection: close x-oss-request-id: 674319E0F3A695323178ACBD Vary: Origin Accept-Ranges: bytes ETag: "A05D9947E535563185BC4F54C4E83C35" Last-Modified: Wed, 03 Jul 2024 01:13:03 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 901970093647993007 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: oF2ZR+U1VjGFvE9UxOg8NQ== x-oss-server-time: 2
2024-11-24 12:19:44 UTC	15776	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 08 fe 0f fe 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 07 06 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 c0 f3 de 87 cf Data Ascii: JFIFC!"$"$C"
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 00 01 80 00 00 03 00 00 00 00 01 80 81 a0 60 20 00 1a 06 08 62 63 00 00 00 00 00 69 a0 00 00 00 01 a6 0d 30 00 00 00 00 00 68 18 00 d0 30 00 00 02 0c 09 80 01 80 00 40 00 1a 60 04 c0 04 00 12 00 00 0c 09 00 40 00 1a 60 00 34 e6 00 00 00 00 60 00 00 00 01 06 26 00 4c 30 10 34 44 80 00 00 00 98 09 80 c0 01 80 02 04 d2 48 c9 15 d5 6d 55 be 3d 19 14 57 74 c2 2d 93 75 37 db 0b 27 19 4e 6d a9 4c 00 20 00 6d 39 21 82 8b 51 30 ae 75 c5 ab 13 8b db 65 76 4d 2c 6a 53 46 d3 90 00 20 06 88 00 03 4e 43 00 60 00 00 00 d3 40 00 c4 c0 00 68 1a 19 0a 56 35 6f 92 b1 ec 8b 43 1a cc 78 d6 ec 8c 7c 94 4f 0e ca 8a 21 64 6b bc 73 71 36 33 9d 95 5b 3b 61 56 3d 38 d1 bc e2 9d 75 95 95 32 fb f0 ec 9c b3 b1 72 32 27 2d 2c 37 3a d8 de 81 aa e8 00 31 82 01 20 00 1a d8 95 80 9f 36 e2 Data Ascii: ` bci0h0@`@`4`&L04DHmU=Wt-u7'NmL m9!Q0uevM,jSF NC`@hV5oCx\|O!dksq63[;aV=8u2r2'-,7:1 6
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: f5 3e 5b d4 fe 71 f6 60 1e 4f a0 00 00 10 e3 fd 83 8d 7d 77 83 93 02 3f 59 e0 eb e4 9e 7d 39 19 58 f9 77 e7 8e 36 66 3a 16 c3 07 3a 6b ef 77 1a 7d c7 e6 5f 68 01 c5 d4 00 00 1e 77 9e f4 1e 77 f7 9f 31 74 a1 6f bd e4 b7 26 ac 5c 9a 2b 8d c8 a2 19 10 5b 1e 19 15 c6 95 39 b8 98 da ae 51 39 bb 52 b2 c0 ad 5e d1 19 d7 90 a8 95 52 75 95 c5 ea 80 ab b2 52 51 28 69 20 00 26 12 8b 2d f4 5a 0c 99 a7 b3 d1 e9 a8 8d 71 ed 1d b2 d9 7a 4f 0f 4d 37 f5 3e 2e e8 45 8f 61 e4 59 d2 b1 39 e5 55 e8 db fa ae 78 91 ed bc 1c d1 b7 f6 5c e6 49 f6 5e 22 64 c1 bf d2 5a cf a0 e9 fc c5 71 a5 36 29 db 1d ff 00 a5 f0 0a 34 f4 7e 4a c8 a3 d2 6f f9 e2 8d 77 fb 8f 0a 8e ad 85 cd 9c 5f 69 ac 1d b0 8c 16 0e 76 e8 bb 9e 3f 1c fa 7a 5f 95 f3 81 d4 fc f7 8e 09 7a ef 22 d9 f5 0f 31 e5 88 b4 27 Data Ascii: >[q`O}w?Y}9Xw6f::kw}_hww1to&\+[9Q9R^RuRQ(i &-ZqzOM7>.EaY9Ux\I^"dZq6)4~Jow_iv?z_z"1'
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: d0 10 90 c8 b0 62 05 20 94 5c 11 34 38 38 35 33 62 8a 88 92 9c 24 fa ff 00 22 d9 d3 6e f0 b2 6e e6 f5 b0 3c df b3 8a 3e 67 7e bb c7 f5 78 f3 ca c2 9d f1 d8 4e 8f 7c af ad da 66 3e 2f 7f 09 66 f8 b9 af 85 d3 57 2e df 02 62 76 a4 bb 3f 3e eb dc de ae 19 9a 73 fa 38 5e 53 dc 55 6c fe 7c d7 6f 34 3d 7e 1d 91 14 69 91 7d 17 db 17 db 78 97 79 c7 ba 6f 34 e7 f5 34 5c 83 bd f9 9d b8 b9 10 8e bf 16 42 68 3b 8f 0e ef bc fe 9d 26 61 cd ea e1 71 8e e9 c2 b7 f3 f0 88 3e 9f 1e 62 cd 31 3d 57 b4 f4 3c fe af 9d df 5a 61 e9 00 45 d4 2c 0d 0f 8d ea 0a fc fc 0a 3d 9b 94 74 f8 f8 2e 12 d7 8d 80 80 00 68 3a 47 aa f3 9e bb 87 e8 f0 d6 71 4e 8c 25 9c 27 0d 66 88 d5 ea bd 49 35 e6 de 5f b8 55 a7 27 08 97 bc f0 7d 3e 40 e2 ef 83 01 00 01 65 7e ba ba fb 7c 9c b7 c3 f4 d8 66 61 13 Data Ascii: b \48853b$"nn<>g~xN\|f>/fW.bv?>s8^SUl\|o4=~i}xyo44\Bh;&aq>b1=W<ZaE,=t.h:GqN%'fI5_U'}>@e~\|fa
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 8e 3d ad da 6b bf 50 f9 02 53 b7 ab 9a 93 20 98 c7 bc bb 1b f5 e6 9f e5 7f 6c 01 12 79 0f 5f e4 7d 1e 4e 7d 91 45 ff 00 a4 fc 8d f9 98 7e c3 8f 4f 59 62 7f 99 fd 98 05 6c 00 00 00 00 08 60 00 02 d5 6d 96 95 e0 97 6f b4 5f a5 fc a5 8a 13 df 1e bd b4 d5 ed 3f 31 fa e0 0e 7d 4f 3f e8 3c ff 00 56 3c 8a 71 b3 f4 cf 95 8f 42 f0 51 e2 df bb 3f 37 e8 ff 00 3c fa 56 06 3a 00 00 02 e5 7d 53 95 7b be 77 9b ba b9 7d c7 cf e5 cb 16 cb 65 9a a0 a7 3b 08 ec b3 be ba 1d 2f 71 f3 de b7 12 c6 ee 9e 6d a7 2a 96 c3 17 e8 3c e5 97 8b 65 f3 da 53 5e c2 fc ba 6b 33 0a eb 19 db 55 f2 bf 23 1f 2e 72 40 a6 b1 ae ca e2 d8 f5 5b 55 76 1a 71 24 e1 34 64 db 55 b6 c2 6d 39 ab 69 c8 01 09 34 95 aa da ea a9 b4 18 46 d9 a9 a9 c2 8c bc 4c 98 98 51 55 b3 83 69 b3 18 20 01 02 69 28 62 62 30 Data Ascii: =kPS ly_}N}E~OYbl`mo_?1}O?<V<qBQ?7<V:}S{w}e;/qm*<eS^k3U#.r@[Uvq$4dUm9i4FLQUi i(bb0
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: da 2b 76 a3 18 b5 b1 8c a0 a3 63 2a 2d ba 58 b3 dc 6d 2f 97 99 d9 7a 4d a6 9c fa 5d e5 f5 6b c7 6f 8f f2 dc ca 38 b2 31 07 5e 39 49 36 60 91 28 34 99 64 e2 5f 34 cd 95 13 bf 35 58 99 38 b4 e8 a8 0a f4 0c 11 18 c9 45 ad de 68 b7 da f1 68 b3 70 b3 2b ad 78 99 98 71 6f 53 a3 dd e9 3d 3c 9c aa 95 6c c7 14 49 c5 92 14 49 4a 32 43 6a 53 50 8b 10 9a 64 84 89 90 63 71 94 c3 09 22 12 9b 98 4e b8 96 42 ba eb 7b 20 94 5d 8a 44 53 94 4a 72 92 a4 cb 2d 45 26 5a 8d 02 00 06 d0 31 22 44 42 51 44 04 88 b4 90 09 8c 81 30 52 25 30 a5 19 2a 49 12 62 50 64 58 c4 89 c4 43 06 25 21 20 08 69 28 4a 2a 40 c2 4c 04 04 90 03 22 02 40 50 62 50 1a 49 71 8c 92 44 49 68 22 66 22 60 4d 41 c5 b9 94 0e 21 13 80 38 cd 20 34 26 08 44 26 94 e2 04 90 4a 75 4d 04 24 92 e5 0b 10 9a 10 04 49 4e Data Ascii: +vc-Xm/zM]ko81^9I6`(4d_45X8Ehhp+xqoS=<lIIJ2CjSPdcq"NB{ ]DSJr-E&Z1"DBQD0R%0IbPdXC%! i(J*@L"@PbPIqDIh"f"`MA!8 4&D&JuM$IN
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 7e 7d 3e 99 a9 76 78 5a 7a ad af 0f 46 9a 2f a2 9b fa 6c dc 1c ee bf 0f cb d5 75 3c be ce f6 b7 1d bc fc ad 36 e7 4f 17 85 76 43 3e bb f6 7a bd a6 9c b2 68 bf 33 8a 49 71 50 ad dc a3 22 db 2a b2 d9 38 ca 36 81 25 59 8c 5c 6b a4 61 6c 62 f3 b6 33 b6 4a ab 6a 4e 35 56 d1 9f 55 68 8d 77 72 ad 99 13 a2 73 99 02 b8 b6 cf 4b b6 d4 cb 61 7e 3e 44 e5 8f 9f af d9 4d 23 9f ae d9 eb cb e7 6a be 9e 7f 4a 32 6a 2d 54 27 08 d2 00 45 d2 71 48 02 40 01 a6 26 04 c4 2a 45 a4 a0 16 00 80 04 80 00 93 44 18 8d be b3 65 ae b7 3e c0 25 7c 73 b4 db 7d 47 76 c3 08 92 2d 44 92 4c 01 21 20 58 61 00 69 0d a7 21 a1 02 69 28 08 90 00 63 90 0d 54 c6 12 8c a6 00 68 72 25 34 72 4d 58 d5 65 31 78 a6 46 88 23 04 c9 2c 04 95 8c 6c 73 15 b0 8b 26 81 ce 16 22 fb 29 ba fc f0 c5 cf c2 8d 2b 53 Data Ascii: ~}>vxZzF/lu<6OvC>zh3IqP"86%Y\kalb3JjN5VUhwrsKa~>DM#jJ2j-T'EqH@&EDe>%\|s}Gv-DL! Xai!i(cThr%4rMXe1xF#,ls&")+S
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 6a a4 55 01 82 cd 02 00 60 d0 36 84 20 69 40 00 03 c9 c6 ca 9c ec 4c b6 54 c2 da 6b a4 22 d4 68 00 97 91 8f 74 d3 22 ca a7 6c 12 b6 28 c1 9c f1 eb be ca ac 7c b9 cb 09 64 53 5d 5e 66 26 45 b3 b9 37 6c ab 8d b0 8b 41 a1 2e b9 91 20 04 a5 5c a6 24 86 86 e1 34 46 ab e0 9c 12 ca a9 d1 3b f1 ad 46 69 09 df 9a 44 67 31 39 d3 64 d6 40 4c 0d 08 68 0c 1a 6d ab 2e a7 28 c8 cf c6 c9 c5 b6 32 c7 c8 a2 ba 65 64 e3 64 df 14 9a 98 43 02 4a 48 18 d0 03 98 00 06 98 02 04 11 29 34 02 12 a0 e1 5b 24 25 90 11 64 00 4a 33 43 69 cc 30 11 0c 2c cc 3a ed 34 d4 5f 2b 27 1b 26 fc d4 42 70 8b 63 e5 e2 65 c5 ec 68 9c 40 12 26 81 00 08 4b 40 90 55 41 53 09 66 90 85 58 81 89 8d 21 00 28 96 20 6e 2e 4c 40 c4 e1 1c ac 5d ec 6d da ed b3 13 1f a4 c1 48 e4 f4 a5 28 c8 b2 da e7 6c 5b 1c d6 Data Ascii: jU`6 i@LTk"ht"l(\|dS]^f&E7lA. \$4F;FiDg19d@Lhm.(2eddCJH)4[$%dJ3Ci0,:4_+'&Bpceh@&K@UASfX!( n.L@]mH(l[
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: e7 b8 4a a2 ae a5 ad cb 8f fd 35 82 63 b3 e1 e2 93 1e c3 6a 04 73 c3 26 7c 43 84 c5 5f 4d 65 c3 78 3c 54 74 ea ab 10 a2 a5 77 cf b0 95 45 5f 49 5a 57 1a 00 68 da 82 19 e1 3e da b8 8b dd f2 c3 fe 85 62 de e6 82 83 d1 58 8f b8 f0 6b 87 86 aa aa a0 a5 6f ce 30 e5 f3 8c 35 7c e3 0e 5f 38 c3 95 76 2d 40 fa 25 c3 3e d0 b8 b3 dd 72 e0 df a5 5c 67 dd 85 bb 97 11 53 0e 68 a4 1c af cb 83 58 7c 45 c5 e6 d8 7c 7d ec ec 3b 54 7a fc 1c ef fb 45 c6 2d 3c b9 01 73 48 de 5a 65 8c ba f8 af 07 77 ae 31 fa 3c b8 57 dd 97 12 fb 40 58 23 fc 4c 2d 71 44 2e 8f 11 39 60 b4 ee a8 c4 94 de 93 fb c2 08 14 e2 a5 cc e8 08 68 3a 63 40 a3 90 d2 0a ae 17 6f db c6 c7 48 fe 1b c0 05 36 53 c9 ca 1e ee 6c ab 3d 15 6f b2 b2 b2 b2 e5 5c ab 95 72 ae 55 ca b9 57 2a e5 5c ab 95 59 59 59 58 af 35 Data Ascii: J5cjs&\|C_Mex<TtwE_IZWh>bXko05\|_8v-@%>r\gShX\|E\|};TzE-<sHZew1<W@X#L-qD.9`h:c@oH6Sl=o\rUW*\YYYX5
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 82 19 60 3e dd af 19 f6 c0 82 1a 5c b8 6e a7 c5 a4 e8 71 1d 3f 87 54 10 cb 87 e0 bb f5 d6 4e da 7a 67 b8 bd e1 04 34 51 7d 5f 43 89 fe bc 26 a1 9f 0f fd 2e bc 47 e8 58 82 6a 1d 2c 13 eb ba 18 f7 b9 04 32 e1 fe dd 6f ed 08 27 6d 93 32 7e d1 64 d5 83 fd 0e be 21 f6 f0 9a 86 87 6d 7c 8e 4d 17 57 b0 25 1e 8b 23 5e 43 29 5c 8e ae 19 f6 85 c5 a4 9c 4f c9 a9 e6 e7 87 bd 99 71 53 89 c6 f2 c1 fd a9 71 0f bd 70 7f d6 27 35 ae 1e 0c 4b c1 89 78 31 64 76 7f 94 9c 23 f4 0b 8b 9d fd ef 97 09 7a cb 8a fe 8d a5 0f 20 ab c7 35 67 20 41 a1 70 c9 23 11 58 ff 00 9e 12 ed f0 bf 6e 5c 41 ef 1c 08 3f ee 97 19 12 30 c6 e7 80 38 bb 08 5c 55 e5 8b f0 97 ba 2e 25 25 b8 36 58 19 b6 2c b1 5f 6c 5c 2d 6f 93 2e 30 bf cc f2 1b c1 71 0a af fa e0 86 45 70 e6 26 ca 74 d2 1c 15 81 53 51 52 Data Ascii: `>\nq?TNzg4Q}_C&.GXj,2o'm2~d!m\|MW%#^C)\OqSqp'5Kx1dv#z 5g Ap#Xn\A?08\U.%%6X,_l\-o.0qEp&tSQR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49834	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769235 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:44 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 59 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:44 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49833	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1238	OUT	GET /whatsapp.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450780\|1732450761
2024-11-24 12:19:44 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/svg+xml Content-Length: 2794 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-aea" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:44 UTC	1063	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 77 69 64 74 68 3d 22 39 36 70 78 22 20 68 65 69 67 68 74 3d 22 39 36 70 78 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 34 2e 38 36 38 2c 34 33 2e 33 30 33 6c 32 2e 36 39 34 2d 39 2e 38 33 35 43 35 2e 39 2c 33 30 2e 35 39 2c 35 2e 30 32 36 2c 32 37 2e 33 32 34 2c 35 2e 30 32 37 2c 32 33 2e 39 37 39 43 35 2e 30 33 32 2c 31 33 2e 35 31 34 2c 31 33 2e 35 34 38 2c 35 2c 32 34 2e 30 31 34 2c 35 63 35 2e 30 37 39 2c 30 2e 30 30 32 2c 39 2e 38 34 35 2c 31 2e 39 37 39 2c 31 33 2e 34 33 2c 35 2e 35 36 36 63 33 2e 35 38 34 2c 33 2e 35 38 38 2c 35 2e 35 35 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48" width="96px" height="96px"><path fill="#fff" d="M4.868,43.303l2.694-9.835C5.9,30.59,5.026,27.324,5.027,23.979C5.032,13.514,13.548,5,24.014,5c5.079,0.002,9.845,1.979,13.43,5.566c3.584,3.588,5.558
2024-11-24 12:19:44 UTC	1731	IN	Data Raw: 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 43 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 43 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 20 4d 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 43 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 43 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 2c 32 34 2e 30 31 34 2c 34 32 2e 39 37 34 20 4d 32 34 2e 30 31 34 2c 34 43 32 34 2e 30 31 34 2c 34 2c 32 34 2e 30 31 34 2c 34 2c 32 34 2e 30 31 34 2c 34 43 31 32 2e 39 39 38 2c 34 2c 34 2e 30 33 32 2c 31 32 2e 39 36 32 Data Ascii: 24.014,42.974C24.014,42.974,24.014,42.974,24.014,42.974C24.014,42.974,24.014,42.974,24.014,42.974 M24.014,42.974C24.014,42.974,24.014,42.974,24.014,42.974C24.014,42.974,24.014,42.974,24.014,42.974 M24.014,4C24.014,4,24.014,4,24.014,4C12.998,4,4.032,12.962

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49821	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	692	OUT	GET /sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:44 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: image/jpeg Content-Length: 186471 Connection: close x-oss-request-id: 674319E09CAEC93635BED0D4 Vary: Origin Accept-Ranges: bytes ETag: "A8C6CEBB088AC7D08ADAE9CFFD1E009E" Last-Modified: Tue, 02 Jan 2024 05:40:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4824979570195105073 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 03 Jan 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: qMbOuwiKx9CK2unP/R4Ang== x-oss-server-time: 1
2024-11-24 12:19:44 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: e1 9d 37 2f 1c b5 b1 ae 22 e5 c3 2e 1a dc 55 8d ee 5b ee 47 4f 02 c7 46 65 3d ee 22 d9 86 f7 05 77 3c 1f 0f 61 bd bf 73 72 25 12 7a 3c 92 9f 19 25 92 2c 83 df 88 1d 58 f1 9c df 31 25 ed 9b 1a da 3b 43 5b 89 c1 1e 12 6f 38 e8 d1 3c b6 81 f5 d7 ea 43 7e d0 4d c4 c3 40 78 e9 01 95 9e cc d9 9d c4 0f af 6e 22 75 83 82 6c 7b 08 82 61 9f b3 44 4e 07 b1 ca 19 ec d2 80 dc b9 d7 b9 0e 1b 64 9f 86 e5 f3 30 ed 5e 7c 33 0c 2d b5 8a 4e 9b a1 ea 46 33 01 ed 2c cc 30 77 ee 0b b4 89 c3 cc b3 67 3b 9a 37 73 32 e2 00 1d c8 b0 08 f1 c6 cf e3 21 b8 0e e2 e2 1e e2 68 41 ed 04 bd b8 32 6e 40 db 68 b0 0e 38 14 12 47 2f 92 78 c8 d9 dc 02 3a 88 80 42 5b b7 db 0d 04 84 6c ea 86 ef 87 6d cf 93 87 42 54 0d cb 6c 62 08 78 70 2d 60 6c 43 ea 07 0e 24 8f 38 97 b4 41 8d ea c6 fb 38 c8 2f Data Ascii: 7/".U[GOFe="w<asr%z<%,X1%;C[o8<C~M@xn"ul{aDNd0^\|3-NF3,0wg;7s2!hA2n@h8G/x:B[lmBTlbxp-`lC$8A8/
2024-11-24 12:19:44 UTC	16384	IN	Data Raw: 38 7b 32 99 27 87 ff 00 74 39 95 8f fd 11 9f fb f8 f3 f2 9e 6a e6 59 26 6b 27 04 b4 da 5b 23 4e 3f 74 ef c3 9f 41 91 cf d9 32 d6 83 8e 7b d2 a8 23 df 48 f6 e4 fd 11 46 3c c2 5c 65 e2 bc c8 aa 46 93 2a 1f 98 de 04 f6 64 f2 3c 63 b8 4c 9f cc 91 8d 1d 75 91 ab 3f f7 f1 ad 98 3c a0 f9 4e 64 83 39 b8 03 b6 53 95 b4 a4 6e db df 16 f8 b5 a7 9d 3f b6 0d 7f 95 84 78 b2 e2 83 97 be 6e 46 ce 4c 61 a0 e3 b6 bb 7e b7 db 8d ef ec 47 e6 5b 87 d9 51 54 64 6c e5 de b9 8d 03 38 59 5a a1 7c ff 00 60 ba 56 2a c7 0f c7 a4 ff 00 8c c2 26 43 c5 b3 11 f6 23 88 da 1d 89 9a ec da 12 b8 d4 95 8a a9 11 91 d4 86 04 ce 86 f3 8a 5e 61 30 a4 9e 86 dc c5 83 d3 b0 72 8f 46 b1 ae da e3 4f fb 17 39 17 20 ab 6b 79 e6 62 54 f2 ec 1d 22 93 1b 72 33 41 30 e7 46 d8 6d 7c cb c7 ce d0 81 c2 3f 64 Data Ascii: 8{2't9jY&k'[#N?tA2{#HF<\eFd<cLu?<Nd9Sn?xnFLa~G[QTdl8YZ\|`V&C#^a0rFO9 kybT"r3A0Fm\|?d
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 7e 45 7f ad 73 df f3 86 65 fe fe 3e 7f 52 db 91 57 eb 5a f3 fc e0 99 7f bf 8a 2f 45 67 d6 f8 0f 52 7f e9 29 c7 4a 98 1f ea fd 05 53 ec 2f 7f c4 85 7d ff 00 be 2a ff 00 53 04 45 39 7c 51 75 5d 41 9e 93 47 32 4d 92 c6 c4 c7 b4 2e 85 f6 29 8d df 95 b9 41 94 1c 9b 28 a7 14 e6 5c c8 9a 53 12 14 2d 6f 9c f3 ba 59 2e 1b 42 70 c4 8b 21 56 a5 29 5a 51 87 de 8c 61 ca d2 b4 fa a4 6d 8f 68 90 bb 24 c4 8e 78 3c 2d 0b b2 94 69 c2 2d 0a 84 54 1e 66 e3 86 6e 62 0c 5f 30 cb 7a f0 63 21 5c cb 5a 1d 1f 26 ee 0b 67 4d d5 0d 88 dc 42 96 84 68 18 fa 97 60 bc d8 cb 7c e4 9b 54 0d df 53 f2 79 89 11 b1 20 66 b6 5d 1c 68 74 cc 8a 1f 33 27 72 fa 4c 54 74 9d d9 0e c2 5c 81 cd 6d 97 47 1b e3 86 7a 9e 60 bd e1 eb 1f 22 fc bf f6 83 c9 f2 9c 13 90 08 73 09 e8 fa 69 e6 8f 7e f7 67 fe 8a Data Ascii: ~Ese>RWZ/EgR)JS/}*SE9\|Qu]AG2M.)A(\S-oY.Bp!V)ZQamh$x<-i-Tfnb_0zc!\Z&gMBh`\|TSy f]ht3'rLTt\mGz`"si~g
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 99 27 73 3c 93 ca 29 cc e5 0f 47 bb 1a f6 94 22 60 85 a3 05 fd 38 b0 29 b7 95 3b eb 62 6d 57 cb a6 43 f5 da a1 6b 1e 9f b9 2f 08 8e fc 82 2a 5c c2 6f 5d b5 cf 32 51 18 90 dc 63 6e 75 3e 01 c1 e4 ac b2 e6 6e c8 da 6e ec 68 40 d6 bd 0b 2e b4 7e fc 35 ec 73 46 d8 6d 22 30 8e 8b 68 dc 26 e2 fe fc 38 cf 09 53 36 60 41 92 5c d1 d2 dd 78 a2 2c 15 61 eb 7b ea d7 09 9c 54 65 96 8c 9d 2d 22 98 34 0b 51 ef 98 62 bc 8f c8 88 ec b6 fa 90 56 d1 55 3f 01 24 9c 41 86 39 c4 cc 84 66 46 cf 65 ce d1 6c 88 d7 df 47 5e 1e d9 ec 6f 6e 6c c6 df 1f 70 7f cd 09 1e 4f 24 f3 6d 9d b3 27 62 da b1 70 05 ac 24 dc 5e 84 f8 7d f8 5f 30 97 b3 72 3b 84 0f cc 5f ff 00 18 7b 85 b8 9b d2 69 d4 34 30 4c 25 e4 73 53 8d b3 90 84 ed 76 3b 8b fc 38 8d d6 14 7b 76 52 b7 f3 29 4f 8a 2c 0d ce b5 a3 Data Ascii: 's<)G"`8);bmWCk/*\o]2Qcnu>nnh@.~5sFm"0h&8S6`A\x,a{Te-"4QbVU?$A9fFelG^onlpO$m'bp$^}_0r;_{i40L%sSv;8{vR)O,
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 77 fa ca 1c 65 1d 1b 2b 53 ee 23 18 5b 51 9b d7 bd ef a0 87 ce 1c 33 7c f3 69 73 32 94 03 68 fb 24 2d 0a b4 20 7a 7c 1e e7 cd 81 34 1c be 64 46 6f 44 69 18 0e 46 d6 d0 10 3b 5a 37 13 ba 35 7a d0 f0 f2 83 93 8f c7 66 f2 13 74 21 25 db 01 8c d3 41 97 b5 25 7c 34 75 d4 bd 5e 18 8f ce 28 7a 6e 5a dd bc c9 f3 c7 7a c9 25 23 77 96 da 6b 43 73 0d 62 d0 84 38 d7 c4 24 0e 60 ee d8 9f 0e 20 6d b8 cd eb dd f1 d0 80 78 41 cc b6 76 cc 4d 2e 1d 81 ad b8 50 d1 da d1 71 09 ef 93 d6 f8 60 b9 a3 89 39 65 6c db 09 e4 b8 6b 69 70 68 d9 dd 2d 06 26 a5 f3 e3 71 7f 3b cd 89 41 28 ba 1e 97 66 e2 40 da 43 31 9d 3d 19 00 e0 cf c6 d5 0b 46 b3 36 59 10 81 dc c5 76 f4 a7 76 11 ce 32 ff 00 2f cb 50 11 eb e9 0c de 97 b0 e0 84 73 c5 42 da f0 f4 68 30 d6 91 ab b4 88 cb 6d 96 fb 22 42 3a Data Ascii: we+S#[Q3\|is2h$- z\|4dFoDiF;Z75zft!%A%\|4u^(znZz%#wkCsb8$` mxAvM.Pq`9elkiph-&q;A(f@C1=F6Yvv2/PsBh0m"B:
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 73 07 23 98 32 26 d6 45 8d 93 57 1b 18 34 2e 66 3d 4b df d7 cf 85 a8 03 95 ed c4 71 69 e5 f4 01 cb b1 ac cd 3e c5 6e 81 a3 9f 0d af 56 f7 e0 44 25 c2 4b 5c bf 79 79 95 04 94 4e 63 db b3 75 19 1d 45 c1 2b ac 28 b7 b3 41 ec d7 89 2e 1b 82 3b 43 62 6b b2 35 f9 fc dc f0 1c 56 14 7b 97 84 19 7a 44 72 b3 bd db cc ce ea ec 91 69 f2 ba 39 f5 45 36 dd 99 36 3d b8 af 03 a0 fb 0f 8e 1f 72 58 4b 8b df b0 be d3 5f ce 85 1b 19 1b 13 66 bc ec 6b 3e d5 b8 ec 48 44 c0 96 fa 9b 30 fa 8a fa 51 af 44 82 25 6e 2d 5c b4 fd 43 3d 35 19 6d 8b 42 75 ae bf a0 b8 27 95 c5 1e e5 e3 c1 4a 0c f1 0c a6 44 06 de 16 f7 b4 38 d3 f3 b7 a0 b7 99 81 45 96 70 e0 6c 66 4e d8 32 3b 24 34 79 62 f6 87 1a 7b 9c 4d ee ac 53 ef 25 e4 2b 82 36 11 a6 37 d0 dd 89 36 66 85 47 48 0e e7 68 b3 8b a8 94 fc Data Ascii: s#2&EW4.f=Kqi>nVD%K\yyNcuE+(A.;Cbk5V{zDri9E66=rXK_fk>HD0QD%n-\C=5mBu'JD8EplfN2;$4yb{MS%+676fGHh
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 34 ca 71 77 9d eb ea 6a 4c 45 87 d1 ac cb 1d c3 7d 28 c2 95 33 84 cc b3 01 fe 1d cc 1f 90 68 ef ee 25 7a 7f 35 31 ba 1c 5b ad 29 7e 34 2f 21 aa e1 d0 d3 a9 45 34 4d 4f cc 4e 72 ae 5e 41 55 03 9b 8f 88 09 11 10 3e 21 74 22 f1 3a ea fa 29 8d a9 ca 92 9f 91 cb 72 0d e0 9b 75 dd b8 93 0f 47 5d 6d 90 4d ef 7f ce d1 19 9f 92 e5 0f 8d 62 02 3d 7d 65 0c 86 e0 ef cc 6b 57 8d bb dd 18 fe 74 68 0e 52 f2 b7 6d b2 8e 60 f6 66 f7 59 dd b8 95 0d 08 ea 20 88 52 d1 8e bd 1e aa 62 aa 0e 2f a4 c6 2d 9e e9 e5 ee 16 f1 d0 9d 1e 0d 2f 71 52 73 3f 68 c3 33 77 8e dc 66 1b a2 09 e0 80 73 cd 16 34 af d7 d7 a6 3d 22 c8 bc 93 97 c8 32 ed 9c b6 a4 9c 3b 99 4c 4e 41 bb 79 c5 5a 2d ba 32 37 13 8e 3b cb d2 94 47 9d 32 a9 03 79 de 6e 32 96 08 da 10 79 ee 03 dc f2 88 da 23 d5 a9 3f 48 4b Data Ascii: 4qwjLE}(3h%z51[)~4/!E4MONr^AU>!t":)ruG]mMb=}ekWthRm`fY Rb/-/qRs?h3wfs4="2;LNAyZ-27;G2yn2y#?HK
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 25 1c 21 3f 20 fd 2b 5f f5 94 c6 c8 e5 57 87 46 e5 84 9a 9f 63 2d b1 2f 60 f4 63 0a c9 fe 0c e1 4b fc f8 d5 c7 3f 69 69 1f d7 11 b2 ff 00 74 75 7e cf fa 46 23 68 82 63 4e 4d 49 fd f2 d5 1f 9f 1b ef 38 24 e3 96 f2 6b 79 74 21 1b ad a0 1b 9e a1 1f a3 1c 17 18 39 29 e7 a4 66 44 f8 26 0c 91 fc 6c 6c ea 9d db c9 9f 24 09 1c c5 c9 8c b2 2c 52 b0 2d 64 2e bb 8b db d5 bf af 1f 57 08 85 32 65 4b 7a 1d 74 25 51 65 af 0d 73 12 a1 d4 93 66 23 3a 6e 9f c9 23 1c 34 22 b1 c2 a7 c4 9d 72 4b 8d fc 6e 11 e8 17 26 77 0f 1b 37 b8 d9 99 8f fd 6a 53 e3 e2 68 d1 bc b5 7e 74 79 fb 2f d2 86 d5 45 ce ba e5 c6 c1 1f 6e f2 23 d0 ac 83 24 9e 53 23 97 be c3 88 77 f4 ec a8 0b 40 0a b5 f6 7e 1c 35 f7 63 9b db 27 52 da 99 bd 66 8a df 99 7b 05 ac 81 a5 3a 4a b0 88 e8 69 cb d8 63 0d 67 7b Data Ascii: %!? +_WFc-/`cK?iitu~F#hcNMI8$kyt!9)fD&ll$,R-d.W2eKzt%Qesf#:n#4"rKn&w7jSh~ty/En#$S#w@~5c'Rf{:Jicg{
2024-11-24 12:19:45 UTC	16384	IN	Data Raw: 1f 37 d5 89 24 f1 98 e6 4c c8 c4 9e 52 dc 17 2f 93 b3 28 c9 b4 86 e7 0f b1 89 2b 6d 6e 23 73 90 46 22 2f 19 af 96 23 89 7b 91 d0 65 29 ad 80 ef 57 bf 77 b9 bb ef c2 8e 54 0e 19 89 e3 31 08 c1 21 2e 01 ba d7 f3 7b b0 39 5a 33 6e 39 a6 5b cb 76 31 10 03 98 9f 70 9b e8 d7 ad 30 c7 ca f1 9b 37 c4 20 8a 17 6d 2e 12 da ed f9 45 e8 8a a8 a2 dc df c8 4d 60 4b 32 cc 97 69 36 64 ec ee 39 20 e2 60 e0 9e 8f c9 f0 e2 bf c9 f7 0c d8 e5 fb 39 46 d8 ed da 00 45 8c 26 71 be 6d 09 d3 cd ae 24 8f 2a 86 e4 21 2d b3 b6 e8 7c 35 dc f2 90 fc 44 36 84 ef 05 51 77 80 e1 bd b2 6d 25 e2 00 77 35 a0 91 17 a7 e9 b9 7b 67 9d 3e d8 c6 da 8e 3f 28 5d 68 fb d1 24 78 f0 62 67 c5 bc 01 90 7b f6 f7 e1 8e 9b 98 11 cc ad b8 b6 3b 6b b7 19 5a 10 e6 e5 b5 c8 08 5e 1f 68 3c 0f 87 da c2 32 11 c0 Data Ascii: 7$LR/(+mn#sF"/#{e)WwT1!.{9Z3n9[v1p07 m.EM`K2i6d9 `9FE&qm$*!-\|5D6Qwm%w5{g>?(]h$xbg{;kZ^h<2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49835	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769234 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:45 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 58 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:45 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49836	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769243 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:45 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 57 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:45 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49838	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769242 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:45 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 56 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:45 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49837	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769241 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:45 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 55 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:45 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49839	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769240 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:45 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 54 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761;Path=/
2024-11-24 12:19:45 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49841	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1262	OUT	GET /mobile/img/category/bencana-alam.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450782\|1732450761
2024-11-24 12:19:45 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:45 GMT Content-Type: image/svg+xml Content-Length: 3816 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-ee8" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450785\|1732450761;Path=/
2024-11-24 12:19:45 UTC	2475	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:45 UTC	1341	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 32 31 30 2e 31 35 36 2c 33 37 34 2e 31 38 38 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2c 2d 33 2e 31 30 37 43 2d 31 2e 36 38 32 2c 2d 33 2e 31 30 37 20 2d 32 2e 35 36 33 2c 2d 32 2e 36 34 37 20 2d 33 2e 33 34 31 2c 2d 32 2e 32 34 32 43 2d 34 2e 30 35 31 2c 2d 31 2e 38 37 33 20 2d 34 2e 36 36 34 2c 2d 31 2e 35 35 33 20 2d 35 2e 39 36 34 2c 2d 31 2e 35 35 33 43 2d 37 2e 32 36 35 2c 2d 31 2e 35 35 33 20 2d 37 2e 38 37 38 2c 2d 31 2e 38 37 33 20 2d 38 2e 35 38 37 2c 2d 32 2e 32 34 32 43 2d 39 2e 33 36 35 2c 2d 32 2e 36 34 37 20 2d 31 30 2e 32 34 37 2c 2d 33 2e 31 30 37 Data Ascii: </g> <g transform="matrix(1,0,0,1,210.156,374.188)"> <path d="M0,-3.107C-1.682,-3.107 -2.563,-2.647 -3.341,-2.242C-4.051,-1.873 -4.664,-1.553 -5.964,-1.553C-7.265,-1.553 -7.878,-1.873 -8.587,-2.242C-9.365,-2.647 -10.247,-3.107

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49843	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:44 UTC	1262	OUT	GET /mobile/img/category/rumah-ibadah.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450782\|1732450761
2024-11-24 12:19:45 UTC	419	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:45 GMT Content-Type: image/svg+xml Content-Length: 6024 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-1788" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450785\|1732450761;Path=/
2024-11-24 12:19:45 UTC	2474	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:45 UTC	3550	IN	Data Raw: 38 34 2e 35 38 31 2c 35 39 34 2e 33 34 35 4c 32 38 32 2e 32 37 36 2c 35 39 34 2e 33 34 35 43 32 38 32 2c 35 39 34 2e 33 34 35 20 32 38 31 2e 37 37 36 2c 35 39 34 2e 35 36 38 20 32 38 31 2e 37 37 36 2c 35 39 34 2e 38 34 35 4c 32 38 31 2e 37 37 36 2c 35 39 38 43 32 38 31 2e 37 37 36 2c 35 39 38 2e 32 37 36 20 32 38 32 2c 35 39 38 2e 35 20 32 38 32 2e 32 37 36 2c 35 39 38 2e 35 4c 33 31 39 2e 37 38 39 2c 35 39 38 2e 35 43 33 32 30 2e 30 36 35 2c 35 39 38 2e 35 20 33 32 30 2e 32 38 39 2c 35 39 38 2e 32 37 36 20 33 32 30 2e 32 38 39 2c 35 39 38 4c 33 32 30 2e 32 38 39 2c 35 39 34 2e 38 34 35 43 33 32 30 2e 32 38 39 2c 35 39 34 2e 35 36 38 20 33 32 30 2e 30 36 35 2c 35 39 34 2e 33 34 35 20 33 31 39 2e 37 38 39 2c 35 39 34 2e 33 34 35 4c 33 31 37 2e 34 38 34 2c Data Ascii: 84.581,594.345L282.276,594.345C282,594.345 281.776,594.568 281.776,594.845L281.776,598C281.776,598.276 282,598.5 282.276,598.5L319.789,598.5C320.065,598.5 320.289,598.276 320.289,598L320.289,594.845C320.289,594.568 320.065,594.345 319.789,594.345L317.484,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49845	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	713	OUT	GET /sumbangan.com/public/campaigns/large/62de3b34d4674_WhatsApp_Image_2022-07-25_at_2.34.32_PM.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:47 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:46 GMT Content-Type: image/jpeg Content-Length: 61679 Connection: close x-oss-request-id: 674319E2CE5C5D39332BE5E7 Vary: Origin Accept-Ranges: bytes ETag: "8E80B6E3876015CD318D332F2CFDA826" Last-Modified: Mon, 25 Jul 2022 06:41:56 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13169346717374608635 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 26 Jul 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: joC244dgFc0xjTMvLP2oJg== x-oss-server-time: 1
2024-11-24 12:19:47 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: b5 45 69 2d b9 6e 2d 86 cc 6d 83 92 72 9d d9 58 f7 bd ec f8 0a 71 b2 49 b3 85 1d ad 78 85 ae 35 bd aa d7 a9 25 69 7b 1b d7 1b b3 d0 65 69 69 e8 7a 2d c6 23 21 6b 4a 5c 6d d5 8d 8f 2f 09 41 da 3a ee c0 e9 41 37 8e 2f 42 6f 86 3a ea e2 78 7f 62 5a 60 f1 c1 cb 2a a3 9e f3 63 eb 0b 47 f2 b5 fb d9 ef 79 f8 72 f4 a9 16 e3 d9 c5 6f 5c 6d 17 9d 5d c4 4b e6 a3 b7 e9 5b 92 6f b0 21 bd 0d 91 29 6f b2 a5 2d b4 2e 40 1d e2 c0 27 00 78 f2 cf 4a 8f f8 57 c0 eb a7 11 b8 6f ac 21 6b 96 2e 9a 59 bb ef 14 a5 6b 48 2d 38 d2 7b f2 c0 2d 96 c2 d2 79 00 48 50 3e 3c a9 25 48 bb 89 9c 6f e2 ae bb 9d c6 dd 2b a1 e1 59 98 d3 3c 3d b2 bd 06 e0 65 95 89 53 9d 7a 1b 8a 74 b4 a1 c9 05 01 2b 23 3c 89 09 f3 a9 33 b2 6d cd d5 f6 6c e1 da df 79 4b 5a ac 4c 15 29 6a 24 a8 f3 ea 4f 8d 01 ea Data Ascii: Ei-n-mrXqIx5%i{eiiz-#!kJ\m/A:A7/Bo:xbZ`*cGyro\m]K[o!)o-.@'xJWo!k.YkH-8{-yHP><%Ho+Y<=eSzt+#<3mlyKZL)j$O
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: db 68 f1 24 6e c7 ca 88 75 be 97 1a 2b 59 5d f4 a8 0c be ed aa 63 ad b6 e2 31 95 e3 92 4f cc 63 e7 43 36 1b 6e b9 85 70 8b 7c 8f 15 a8 b2 5b 70 21 28 5a 73 dc 05 60 15 8c fd ec 66 88 c9 e6 79 3a 7b 2b 12 62 e3 c6 d0 5d dc 6c 83 b4 bd da 5d 8c 08 ce 3f 2e de ea 01 dc c3 a9 e6 9c f4 1b 4f 4c 75 a7 af d3 21 08 90 f4 b9 4a 71 c7 0e f5 17 1b fb 69 50 e5 cf ad 25 e2 ee 9a 91 64 99 fc 2b 75 c5 c8 4c b9 47 da 10 ff 00 da 2b 56 4e 52 af 11 cb e5 40 97 3d 5d 3a e8 a4 4a 94 a4 77 e1 08 65 09 4f 24 a1 09 18 1c bc 79 54 44 4f 93 74 cd c8 8e 3f 69 08 be d4 fd be ee 5f b0 38 85 38 8e 68 25 49 c6 14 70 a0 7f be ba c8 d0 56 5d 9b 7b b5 a4 84 f8 2a 9e 38 0b c4 6b 35 86 f2 ab 3e a5 b7 c4 94 c5 d9 c4 7f 28 79 a0 b5 32 b0 30 90 3d 09 38 ab 12 dd fb 85 f7 29 49 82 d4 4b 5b af Data Ascii: h$nu+Y]c1OcC6np\|[p!(Zs`fy:{+b]l]?.OLu!JqiP%d+uLG+VNR@=]:JweO$yTDOt?i_88h%IpV]{*8k5>(y20=8)IK[
2024-11-24 12:19:47 UTC	13136	IN	Data Raw: 12 89 36 c6 a5 3a e9 64 96 9c 2a 23 29 4a ba 67 c4 8f 23 52 46 a4 93 01 fb b2 ad b1 d6 80 fd b4 f7 0f 32 3e d2 3d d0 a4 e4 78 7d aa 81 f8 4d 72 bd c8 e1 86 94 ba 4b d6 cb 81 b4 bb 2c 31 1d 92 82 a7 11 92 02 8f 8a 4f 21 f4 a9 0a f5 c4 1b 0c ce 29 5d 26 c5 96 89 29 95 02 1a 14 59 4f f3 b2 12 14 93 f3 c0 03 3e 95 6d ad f2 98 16 2e 64 9e aa 77 48 3b a5 f7 3b 4b 13 d4 82 e1 da ea 16 13 bc 1f f4 78 e8 47 8d 20 55 86 3c 80 84 fb 42 92 1b 5e e2 bf 31 d3 14 2f aa f8 97 63 87 a8 e0 db 9e b8 c6 6b da 76 b4 90 5c ca 92 ea 94 00 18 1f 1a 94 e2 68 c6 9e 64 21 57 d6 c3 98 e4 52 8c f9 79 fc 6b 0f 2a 12 e9 0b 80 e5 6b 61 ca 5b 13 5a 4f 08 54 59 ec ac 0d af 61 e2 06 3d f2 4e 06 69 75 be d3 09 c4 29 51 e3 20 36 41 f7 b3 80 69 d6 e1 a0 af c9 29 54 2b cc 59 00 74 0b 4e c3 f0 Data Ascii: 6:d#)Jg#RF2>=x}MrK,1O!)]&)YO>m.dwH;;KxG U<B^1/ckv\hd!WRykka[ZOTYa=Niu)Q 6Ai)T+YtN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49848	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	698	OUT	GET /sumbangan.com/public/campaigns/large/64e85386ea881_Sumbangan_Cover_Kempen-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:47 UTC	611	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:46 GMT Content-Type: image/jpeg Content-Length: 1413263 Connection: close x-oss-request-id: 674319E27BFFD33334762C5C Vary: Origin Accept-Ranges: bytes ETag: "B56D51B9CF4FBB1972EE8016AE11AB28" Last-Modified: Fri, 25 Aug 2023 07:08:55 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13437673896349436848 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Sat, 26 Aug 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: tW1Ruc9Puxly7oAWrhGrKA== x-oss-server-time: 2
2024-11-24 12:19:47 UTC	15773	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 2c 91 70 7c 8a 30 f0 7a 29 5d fa 21 0d e4 30 45 c1 f2 28 c1 f2 2a 56 07 92 c8 03 cb 28 6c 30 44 c1 f2 29 40 1f c9 52 30 3c 96 36 e9 84 d9 cb 08 7c 16 18 c6 4f 90 47 c5 f9 29 f7 0d ba 2c e5 be a9 9b d9 2a 58 18 e5 3e 48 c1 4f b8 8c 74 43 b1 8d 93 d4 b2 09 21 8c 38 76 59 e5 27 b2 70 01 e4 97 f5 27 a5 91 1a 48 8e e6 90 11 93 8c 63 74 f9 07 7d bb 2c 00 39 ba 26 e4 72 5c 11 f9 5d e4 8e 59 7c 94 9c b4 76 46 52 6e 8f 98 d6 f0 47 01 c5 60 31 dd c2 7f 64 1f 24 de f1 78 08 a4 30 1a 7c 96 70 f3 d9 48 23 1b 2c 37 e4 9a aa 36 fa 0f 5c b1 8f 8b f2 56 00 3d 30 a4 e0 79 24 e3 d1 3f 70 fd 84 7c 1c f4 52 03 c0 01 1e 98 4d 10 72 8d c1 b4 77 9f 3d d6 79 c7 4e 60 99 e5 3e 48 c1 46 e0 da 3f 96 b9 18 09 b6 e4 3b 74 ef c9 2e e5 8c b2 29 b7 19 6d 12 31 dd 07 63 95 91 94 1d 89 4c Data Ascii: ,p\|0z)]!0E(V(l0D)@R0<6\|OG),X>HOtC!8vY'p'Hct},9&r\]Y\|vFRnG`1d$x0\|pH#,76\V=0y$?p\|RMrw=yN`>HF?;t.)m1cL
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 42 92 dc 87 27 46 59 21 9c 47 5f 4f cc d0 49 e8 ab ee 8f 3e 03 a3 56 ad d9 bb aa db 93 39 81 c0 51 d4 8e 49 e9 d4 c0 ab 7d 2b 0d 9d c0 f5 21 6a 92 e9 91 3d 77 8a 64 fc 6e 8b 70 a3 f8 6d dc aa ba 36 3b c6 cf aa 85 47 05 fd fc 0e 53 5a 04 50 b5 a1 fd 02 93 15 19 64 a2 40 ee 89 f6 1c 30 04 eb 3c d3 b0 56 9c b2 c6 a6 a7 f1 65 12 74 c2 90 5f f8 30 cc 74 49 df 3e 8b 07 29 dd 08 fc 4c 00 39 48 44 6d e4 04 79 ac 9c 85 8e 6c 03 94 37 c0 d9 2c 2c 8a 69 df 0b 18 f5 28 08 03 b2 13 08 f2 80 33 3d d1 d0 10 16 7b 7d 6b 09 c3 64 bc 04 86 6f d5 29 f8 73 3c 33 e5 84 23 97 3b fe 85 0b 43 e9 cd 22 8a f4 59 68 82 49 b9 79 cb 82 f3 f7 11 ef 13 dc 64 96 99 8c e5 0e 76 cb d0 ba a2 31 2d 31 6b b7 c8 5c 53 53 d8 bc 5a b2 43 06 e5 65 5d c3 0f 26 d5 8a df 2d c7 3b d2 3c 3a 12 d7 0b Data Ascii: B'FY!G_OI>V9QI}+!j=wdnpm6;GSZPd@0<Vet_0tI>)L9HDmyl7,,i(3={}kdo)s<3#;C"YhIydv1-1k\SSZCe]&-;<:
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 6d 04 74 4f 6a 3d 25 ef b4 0d b9 86 02 70 0e 53 fa 5a 0f 02 8c 06 8c 96 ae d6 84 14 68 6e c1 89 77 53 74 f6 13 75 55 7b 68 68 69 21 e5 c1 d8 38 f9 ae 33 c6 1b 8c 71 c9 0c 90 00 09 00 9c 2d eb 88 9a 82 20 f8 a0 0f c3 9a 46 cb 95 eb 16 4f 75 aa 83 98 12 dd ba ae 53 53 6e a6 79 34 2c 29 6d ea 88 96 c6 55 de ec c6 9e 30 43 8f 42 13 d5 3a 6f dc 6d a1 95 4d cb 80 ee b6 4d 1a eb 75 04 ad a3 71 69 71 03 62 9b e2 3d 40 82 9c ba 16 e0 63 b2 c9 a3 4b 12 c9 af 3c 6d 39 65 da d6 25 a8 88 44 31 bf 65 e8 9e 08 db df 4d 6d 69 90 64 72 f7 5e 73 a1 b8 ba 7b 8c 4c 93 f2 bb af 58 70 96 98 49 68 61 6b 40 cb 14 1a 8f 14 c8 69 bf 58 e8 76 53 0b ab 1a c3 10 23 0a 45 fa 92 4a 99 04 74 d9 67 c9 66 d5 46 61 98 4a 42 b1 e7 63 67 7c 92 76 19 19 58 76 4b 29 b2 e6 4a d6 d2 3e 8a d3 3b Data Ascii: mtOj=%pSZhnwStuU{hhi!83q- FOuSSny4,)mU0CB:omMMuqiqb=@cK<m9e%D1eMmidr^s{LXpIhak@iXvS#EJtgfFaJBcg\|vXvK)J>;
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 31 53 ba 40 22 03 03 c9 2a 68 d8 62 c0 09 14 b4 ef 93 99 c4 93 84 ef 84 7e 89 49 92 ec 70 ba 95 6d a3 3c e4 80 a2 57 db a4 91 c0 e3 a7 50 af c0 64 5d 56 1d e1 c8 d2 30 09 23 64 61 8a e4 8a 9a 59 a3 a4 80 b4 00 08 1b aa a9 6e 99 a9 d8 f7 53 eb a8 e6 69 70 1b 02 ab 63 b3 4a f9 39 f1 9d d5 8c f0 42 e4 17 28 9b 5f 16 ed 07 64 8d 35 4d 4b 69 a8 32 4b 03 5c 09 ee 16 c9 4d 63 73 a0 c9 6e d8 49 b5 59 59 55 58 62 97 60 0a 8e 52 23 93 2c 22 d4 f4 d4 ec e5 6d 38 1f 52 cc 7a 86 9a a5 df 14 0d df d1 59 3f 45 d3 ba 1e 66 95 af d4 da 05 0c dc ac 3d d4 32 a8 33 25 8c d7 48 9a df 82 11 b8 f2 55 f1 dc 2a a9 64 32 b5 c5 a0 f4 0a 6d 2d 11 9d bb 8c a8 f7 1a 69 00 2c 6b 3a 04 94 e7 99 60 92 96 1b 09 2b df 71 1c b3 3c 91 ea a1 55 c1 45 04 65 d8 19 55 f3 d4 49 49 cd cd d4 2d 72 Data Ascii: 1S@"hb~Ipm<WPd]V0#daYnSipcJ9B(_d5MKi2K\McsnIYYUXb`R#,"m8RzY?Ef=23%HUd2m-i,k:`+q<UEeUII-r
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: a0 2f f0 ea 4b 60 92 37 07 1e 50 76 57 15 0d f7 69 48 7e c1 73 4f 66 48 aa 26 b2 78 93 92 40 6f 75 bf 6b 2a c1 0c ce 64 47 70 d3 d1 75 56 91 94 ba 9c be a1 49 43 a3 2a ae 95 30 54 48 5a c7 8d 95 0d d6 a2 11 19 0d 78 c8 5a fb af 95 2d aa 9d af 71 d8 15 ae cb 7f ab 9e a1 ec c9 23 2b 4a 4b 69 83 18 39 64 b8 96 57 99 4f 2b fb a7 9b 5c e8 87 55 44 2b 5e 08 2e 29 c6 d7 35 e4 02 e5 13 9e 08 dd 12 6d 75 c9 ef 20 02 91 05 59 d8 12 53 3e 07 89 f1 65 2b c3 f0 fa a6 f7 c9 32 c5 3b 7e 0b ba 0a 80 48 c9 ea af e9 65 6e 37 2b 4b 82 ac 43 d4 f4 53 e2 bd b6 3c 0e 6e bb 29 15 6c 8e 95 be 0d 96 7a f6 40 49 0e 45 25 e6 17 c8 39 9e 0a ab 9a 13 55 4e d9 9a e2 79 93 74 96 79 b9 f9 81 2a 56 d3 59 05 4d a3 73 96 b2 85 d4 bc ae 2d 24 85 ce b5 83 a8 61 85 f3 46 1b 9c 15 73 57 05 4c Data Ascii: /K`7PvWiH~sOfH&x@oukdGpuVIC0THZxZ-q#+JKi9dWO+\UD+^.)5mu YS>e+2;~Hen7+KCS<n)lz@IE%9UNyty*VYMs-$aFsWL
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: b3 41 dd 9b cb b8 af aa c9 f8 2a 64 fd f9 43 b8 ab ac 48 fe 98 93 f7 eb 4f 82 2e 53 f1 ca 3e b2 95 50 4e 3f 06 f0 7e 4a dc 25 1d bc 87 76 6c 53 71 3f 59 49 96 be a6 4c 1f d9 95 51 5b c4 0d 52 e2 40 a9 97 7f d9 ad 7e 6a a9 1a e2 c2 fd d3 b0 44 65 f8 9c e5 5f 6c 6b 7a d1 17 bb 26 1d 69 a9 49 06 4a 99 71 fb 72 a7 51 6a fb dd 43 83 7d ea 4c 9d be 99 54 95 51 b0 b7 90 3c 67 18 51 a2 a3 a9 89 de 24 52 e0 f5 43 a4 90 77 6c da 6e 3a b6 fb 46 e1 13 ea 65 3c dd 30 f2 91 06 b4 bc f2 72 9a 99 72 7f 66 55 54 27 c5 88 ba b1 d9 78 e8 4a 8b 2c ac 6b be 06 e7 07 b2 3b a4 1d d9 b2 d1 df ee 92 4a 65 9a a6 62 d3 fb 22 a1 5f b5 0d 69 91 ae 8a 79 b0 d3 be 1e 54 5a 1a c2 07 2b 86 ca 4c d0 d3 4a c2 e2 07 aa 55 45 2e 43 bb 19 66 a2 ac 98 34 36 79 b2 07 e5 94 e0 bb dc 5b b9 a9 97 Data Ascii: A*dCHO.S>PN?~J%vlSq?YILQ[R@~jDe_lkz&iIJqrQjC}LTQ<gQ$RCwln:Fe<0rrfUT'xJ,k;Jeb"_iyTZ+LJUE.Cf46y[
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 3e 6e 36 cc fd 17 2c 1b 9d b4 76 72 ed df ce d1 59 9c f8 4e fb 16 3f 9d a2 af fb 53 be c5 2a ed ad af f7 6f e6 83 d1 4e 28 2e b6 f1 d8 a8 d5 17 3b 73 9d f4 5c 7e a5 dd 3f 9d a2 af fb 53 d2 5d ec d1 56 7a c4 ef b1 3a 3d b6 b5 5f f0 df cd 02 b6 c7 43 84 fb f5 b8 81 86 b8 24 fb ed b4 f5 63 97 78 fe 76 9a ac 01 e1 3b ec 41 f6 68 aa fe d4 ef b1 3b fa 73 6a bf e1 bf 9a 0f 46 67 09 65 6d b8 38 1e 53 b2 72 5b a5 b7 a7 21 5d c9 be cc f5 59 cf 84 ec 7c 92 df ec d1 3b ba 46 7e c5 14 bb 71 6b fd db f9 a1 3d 10 e0 12 5c 68 09 d9 a7 1f 24 47 5d 6f 38 e6 69 5d ef f9 d8 aa 7f b5 3b ec 4e b3 d9 8a 71 f8 8e fb 14 3f d3 7b 4c fe cd fc d0 3b 4f 81 c0 cd 7d 13 3f 5b 61 c2 c8 bb 53 03 b4 65 7a 09 be cc d3 01 f4 1d f6 25 7f 3b 2c 83 f1 0f d8 aa 4f b7 b6 b0 93 8f 77 2f 99 3c 2d Data Ascii: >n6,vrYN?S*oN(.;s\~?S]Vz:=_C$cxv;Ah;sjFgem8Sr[!]Y\|;F~qk=\h$G]o8i];Nq?{L;O}?[aSez%;,Ow/<-
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 5e fa 06 cd b8 c8 c6 55 89 ce 14 fc 51 12 dd 52 5d 07 68 ef 10 de 6a 64 02 4d ce 42 8f 26 99 98 d6 89 5f 19 2c 2e 5a 16 91 6e a0 82 fe 25 31 b8 d3 17 f5 ed 8c af 43 41 53 63 36 96 3e a1 ed 12 86 e4 e7 cf 0b 9c d6 ef d7 72 d4 70 74 16 16 8e 3c 9a d5 35 b2 df 4c f8 c8 63 43 c7 55 06 e1 71 10 dc bc 3e 6f 87 a2 a4 d4 fa a6 9e 8a bc 98 66 3e 18 76 36 2a 38 b8 53 dd 29 fd ea 09 39 9e bc 3a e3 75 5b a9 e4 e9 5a 7d da 46 c8 f8 a1 b8 1f 85 e3 25 22 7d 3d 20 01 ce fa 2b 56 b5 df 8d be bc 0a d7 96 c7 cc 3a f9 2e 9b 1d f6 c1 73 b7 01 4b 3b 5d 27 2f 9a 72 a6 d0 d8 37 16 46 b3 db 2d d4 94 8e a9 94 37 99 81 69 7a d2 ff 00 06 4f 82 d1 9c 91 b2 9d 70 ad ad 8e 47 d3 c6 5c 18 e3 db c9 50 54 d8 a7 ae 7f c4 09 c9 ce e9 31 82 fc 2a 3c 12 34 65 d2 7a a9 80 70 38 ca e9 54 75 0c Data Ascii: ^UQR]hjdMB&_,.Zn%1CASc6>rpt<5LcCUq>of>v68S)9:u[Z}F%"}= +V:.sK;]'/r7F-7izOpG\PT1<4ezp8Tu
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 75 05 8e 27 e4 be 89 ea ae 15 e9 ab ed 31 9e 81 b1 90 1a 7e 8f c9 79 3f 8c 7c 2e 93 4e 39 d5 30 44 31 b9 c8 5c ce 97 db db 6b 8b 8e e9 54 79 f8 11 3a 32 4f 27 27 a6 67 8a df 89 2e 82 db ef f7 48 a8 1a 32 5e 40 4f 5b c4 22 27 09 ce 1c d1 d1 39 66 a8 34 b7 36 dd 22 1c c6 12 08 f5 c1 5d ee a0 ef ef 2d b7 51 97 80 b1 83 5d 4e e5 6d e0 49 93 4b 1a a9 29 ba c7 cd 93 f2 5e 6e d6 76 b6 69 cb f4 b4 8d c3 48 24 60 7c d7 d1 4e 07 dd e8 f5 b6 8b f7 7b 83 18 d7 88 b0 3e c5 e4 6f 69 5e 19 1b 6e af f1 e8 59 96 c8 fe c3 b6 57 97 d0 ed 3c ed 2e 95 b5 69 e2 5f 02 c4 52 5d 4e 2b 4b a5 ee 1a 96 58 d9 4a c7 3c b8 ec af 2b f8 3f a9 ad 51 32 73 4d 20 6b 86 7a 15 ea ce 08 70 86 c1 47 67 a2 bb 5c 1a ce 72 d0 e3 cc bb 55 cb 4b e9 4b ed 10 a5 86 9e 02 58 39 7b 27 5f 76 c2 92 8b a9 Data Ascii: u'1~y?\|.N90D1\kTy:2O''g.H2^@O["'9f46"]-Q]NmIK)^nviH$`\|N{>oi^nYW<.i_R]N+KXJ<+?Q2sM kzpGg\rUKKX9{'_v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49849	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	716	OUT	GET /sumbangan.com/public/organization/490/logo/629e49f8a7b44_9E920131-5FAB-4983-9055-B8B4DD61A8FB.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:47 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:46 GMT Content-Type: image/jpeg Content-Length: 13373 Connection: close x-oss-request-id: 674319E21698CC36333265EA Vary: Origin Accept-Ranges: bytes ETag: "8B70FA176DEF518B1B3BA73777348D14" Last-Modified: Mon, 06 Jun 2022 18:39:52 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6657192411985731568 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 07 Jun 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: i3D6F23vUYsbO6c3dzSNFA== x-oss-server-time: 2
2024-11-24 12:19:47 UTC	13373	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 f0 a0 03 00 04 00 00 00 01 00 00 00 f0 00 00 00 00 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 Data Ascii: JFIFHHLExifMMi"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49846	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	695	OUT	GET /sumbangan.com/public/campaigns/large/66b1d8d8b73fa_CF_Cover_Kempen_New-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:47 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:46 GMT Content-Type: image/jpeg Content-Length: 220946 Connection: close x-oss-request-id: 674319E245E02A33391DB1E0 Vary: Origin Accept-Ranges: bytes ETag: "E41A6F275175561A5CE1B9FFFEE199C0" Last-Modified: Tue, 06 Aug 2024 08:03:36 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1120157989055405679 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: 5BpvJ1F1Vhpc4bn//uGZwA== x-oss-server-time: 1
2024-11-24 12:19:47 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: cb 86 ce 62 1e 9e 3a 6c 6c 9a 92 5d de b5 79 e2 48 a0 a5 18 80 0e 71 aa a0 f2 fc 48 dc ee 4f 2f a5 17 65 cd a4 4b 0e a9 8d 63 61 56 1c 37 c1 66 8e a5 dc 8d 55 89 7b 55 e5 a9 5b 4e 62 f5 15 5a 93 bc e2 36 f9 db b6 a1 21 78 10 54 28 81 00 04 8f da fc ba 61 77 ef e1 76 a6 95 b9 a7 b3 7a 62 78 20 8e dd a9 f1 f2 aa 7a 84 34 8b 0a cd 1b 1f 52 42 de 3e b1 e0 ed e7 f7 f5 74 71 fd ae f8 b8 ce 77 ad fb b5 97 ad a4 b1 f5 a6 d2 6b a4 ac 61 5d 12 4a 71 44 96 5e c4 2f c1 25 24 94 69 1d 41 53 bf 81 f6 3b f5 18 ff 00 08 07 6c 3b e0 9d 9c ad dc 2d 5f 98 d2 f5 30 5a 17 2d 04 cd 8c c2 56 93 1f 26 54 de 78 ea 72 76 8d dc a3 c6 5f 61 b3 05 68 e4 6d fc 80 3a c7 4e e2 a8 a8 d6 39 d3 2a 4b 41 10 b9 e7 90 16 ed 61 ad 64 e5 8e 19 16 79 61 64 76 4e 32 47 12 96 59 51 57 91 5f ab c1 Data Ascii: b:ll]yHqHO/eKcaV7fU{U[NbZ6!xT(awvzbx z4RB>tqwka]JqD^/%$iAS;l;-_0Z-V&Txrv_ahm:N9*KAadyadvN2GYQW_
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: d2 06 1f 8e fe af 9f ea e9 c1 8c f8 63 9a 27 74 cb e5 b2 b4 60 64 24 9b 55 c5 40 fe db a8 2c ac 37 d8 9f 1b 7d bf 2f 3a 18 1b 4d c4 b5 31 b4 1c dd 01 51 2e ac 9b 44 e5 75 66 67 25 a5 30 96 71 3a 7e 7b b6 2c 62 71 d7 6e 7a 92 d1 ae cd ba 46 d2 ec 0c 8c 37 d8 16 dc 90 a3 72 4e e4 ba f4 df 6e a7 ee 2e 16 8d 9c 3d 7c 3e 9f ab 8e e4 2c db 7b b6 65 6b 73 a1 f3 23 06 3c 14 ec 7d 97 6f 6e bc f7 17 0d a2 b4 3e 5e 6d 11 83 d3 f2 6a 3b f1 c0 ac f9 18 b2 0d 28 83 9a 9d 91 12 25 55 2c a4 83 e4 2f ee f3 e1 b3 a2 af 63 68 6a ac 7d 2c de 12 5c 9c 56 6c a4 4f 4e f3 72 f4 e6 92 44 de 42 9b 02 bb 81 b7 b9 f7 3d 6f a4 f9 dc 26 b6 9b 87 b4 57 ad 69 a6 1f 4d 5d f9 48 f2 18 dc 9d 4a 31 2e f6 e8 c8 c6 b4 80 ca eb c4 93 b8 dc 32 b6 fe 7d 88 fd dd 21 45 8b 2c 91 e4 da 3f a9 b7 26 Data Ascii: c't`d$U@,7}/:M1Q.Dufg%0q:~{,bqnzF7rNn.=\|>,{eks#<}on>^mj;(%U,/chj},\VlONrDB=o&WiM]HJ1.2}!E,?&
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 0b 88 a7 25 c8 de 2b 0d 5a 98 91 22 8d a4 3c 64 5f 2f e4 2f 9d 94 8f bf b6 fd 31 8d 23 40 94 5d a9 2a 1d ed 44 7a 41 22 b7 7b 56 1c 45 91 23 24 09 15 fd 99 a2 1c 58 17 42 5b ee 5c 1f 6f e6 8e 9f ad ae fb 6c b9 91 8e 9f 17 8c 35 63 e3 ea 64 64 66 2f 5d 94 72 3c 10 af 32 01 d8 7d 27 6f f2 f4 ab 4b e1 c3 48 d3 aa b6 ad 0c ae 72 b6 c4 cb 64 af ca 71 8d 09 d8 46 bc 77 f6 fb fd 5b ff 00 93 ad 5e e1 f6 b6 3c 6e 05 33 7d be 8b 92 56 59 0b 57 66 16 9a 48 cf 0f 48 f2 91 89 53 c1 b7 d8 0f e8 1d 38 35 c3 75 43 07 65 92 d6 b6 8e 79 46 a0 d2 78 da 79 7c 56 36 f4 43 23 92 7a a1 cc 66 47 8d 54 80 cb b8 3b f2 d8 80 76 f1 f8 6f d4 63 7e e2 8b 97 5e 6a 09 5e 6a f3 5a 36 69 b4 a5 c2 cc d2 38 11 f1 04 15 01 86 e3 8e df b5 fd 3d 67 7a 38 df d3 11 66 b5 9e a2 b9 8f 9d b7 22 a3 Data Ascii: %+Z"<d_//1#@]*DzA"{VE#$XB[\ol5cddf/]r<2}'oKHrdqFw[^<n3}VYWfHHS85uCeyFxy\|V6C#zfGT;voc~^j^jZ6i8=gz8f"
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 29 4f fd 8d a3 2e 1b d9 77 dc 80 3f af a6 a6 42 1d 6f aa 72 73 8a 7f 27 7e bb 6c be ae 5e fd bb 0e ce 77 0d cc 34 8c 85 fe de 17 7d bc 79 f2 3a 75 6a ae d1 66 f4 96 79 70 d2 41 1e 2f 21 6b 03 0e 62 0a 76 2b d2 26 cd 39 46 d1 dc 0e b1 9d c3 3a 3a 92 58 32 95 d9 82 f8 e9 4e ce e6 e8 50 69 88 94 e0 81 f4 26 99 aa 72 10 67 e7 ce 5d f9 36 9a ec 94 6c 6f 52 82 8f 2f f5 a2 3c 72 1f d9 62 03 6f b7 82 3a 67 e7 7b 89 1e 8e bc 2f 6b 9d 65 98 b1 a6 b2 d4 23 b3 a7 b2 38 c9 d2 b3 df 65 40 65 59 42 43 2b 2f 99 00 05 95 0e de 46 e3 d9 77 4b 63 34 76 63 0f 94 8f 51 52 93 37 7a d0 fe f4 76 fd 74 41 84 7c 44 5b b9 dc 23 31 dc c6 9e 0f 8f 1e dd 36 32 3a ab b8 f4 2b e2 aa 58 d3 fa 2e b6 0a b5 96 15 6d 52 a0 97 69 62 bd 36 d8 24 ac fe a8 81 91 08 63 c7 c8 55 fc b6 e9 2d 71 d8 Data Ascii: )O.w?Bors'~l^w4}y:ujfypA/!kbv+&9F::X2NPi&rg]6loR/<rbo:g{/ke#8e@eYBC+/FwKc4vcQR7zvtA\|D[#162:+X.mRib6$cU-q
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 8e 84 b6 d7 b6 37 66 c3 46 62 37 a4 d4 14 63 92 38 d1 65 1b 34 b5 c4 a5 ca 86 0d b9 68 c9 d9 41 f3 b6 e1 a7 ad f0 56 2f e3 30 56 29 77 53 0b a4 b3 86 96 da aa 58 33 9f 2e d7 ac 98 e3 0e d2 fc b8 7f 54 82 25 1e de 03 6d b6 de cf 78 35 ae 96 6c 24 69 0d 5c f6 a6 35 a8 7c b5 99 28 62 2c 98 ad 21 80 47 39 2f 2c 71 86 e4 9c ce e0 8d f7 df dc f9 4a 90 25 37 ef eb 6b da 6a 7c 4b 77 03 53 64 33 3a 73 54 41 1c 58 b5 d3 36 9e 1a 0f 32 9f 4a 74 74 8c c2 4c 5c da 1d 88 0c c5 37 f2 7c 74 ab 8c d1 f9 5a 19 0d 69 a4 33 7a 6a bd ad 17 e9 bf e8 fc d6 42 18 99 a6 e7 0c 8f f5 d9 6d a4 65 49 4a 2a 95 fd 91 b0 27 6e 9b da 5b 25 dd 4b d0 61 9b b7 18 3c 2b 68 a8 1d 15 71 fa 3a 23 7f 29 52 13 c1 e4 25 18 ca c2 7e 2f c9 86 e5 bc 31 23 71 d4 cf a7 be 0c fb c5 ab 35 95 6d 41 0e 96 Data Ascii: 7fFb7c8e4hAV/0V)wSX3.T%mx5l$i\5\|(b,!G9/,qJ%7kj\|KwSd3:sTAX62JttL\7\|tZi3zjBmeIJ*'n[%Ka<+hq:#)R%~/1#q5mA
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: b7 2d be 90 bb f2 3c 94 86 e5 cf 36 9f cf cb 6b 6a f7 24 1e b7 1f 51 25 8d c3 09 10 b1 d8 9e 2a 15 48 05 3f d6 b7 20 57 dc aa d0 69 a3 90 b6 9e cd fa e6 30 66 ab 2a 4a 02 c6 4b 02 4b 6c 48 00 fd 21 bd 89 eb 22 5d b9 0a 33 5e c7 ba 85 1b 86 8d b9 03 f9 0d 86 df d6 47 49 66 c5 ca f6 d2 3b d8 29 25 2f 68 c4 b3 56 b5 18 66 87 66 6f 5d d0 b2 1f 0f c5 4a a7 26 dd 94 a8 3e c1 43 24 0c 89 e9 20 b7 5a 67 fa 61 92 bc 22 62 1f ea 23 97 d2 c1 7c 00 77 2d fc e2 a4 8f e7 5f 2a 85 92 1c b5 49 99 d5 79 af 00 49 e6 00 20 0d b7 3b 02 4e de 47 9e b2 c7 90 a5 33 05 8a c2 ee db 85 24 15 07 fa f6 eb 4e b6 46 ac ac b8 f3 96 81 ad 18 fe aa f2 15 f5 19 b7 fd a0 a4 9d 97 e9 61 f4 ae c4 82 41 eb 5a fc 26 a5 77 95 f0 6b 6d de 32 c1 21 b0 aa b2 9f 50 02 bb 90 9b ec 84 be fb 7f 31 c7 Data Ascii: -<6kj$Q%H? Wi0fJKKlH!"]3^GIf;)%/hVffo]J&>C$ Zga"b#\|w-_*IyI ;NG3$NFaAZ&wkm2!P1
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 97 72 0c 9c cc 6c bc 18 0f 0c 18 ee 37 dc 13 b8 f7 db 62 0f 9e 99 7a 93 4e ae 52 b7 e8 fb f6 91 6d c5 14 b0 d3 bc 23 59 02 99 23 02 44 78 db e9 6d c0 1c a3 6f c1 59 4a b2 ab 2f 95 b9 65 7c 2a 18 ee f5 2e 4e 3b 8e 81 c7 ec ee 7b 18 30 4f 56 93 99 77 a8 ee bf a7 23 e2 07 dc 72 dc 4e cb 6c 69 bc 0e 73 51 55 d4 55 c7 ca dc a3 61 5e 68 ca 44 ce 10 35 b6 e7 1c aa 39 14 9a 59 4b 1f a9 a3 75 57 fa 12 6f 50 87 7c ef 6c 40 5a 9c 69 2c ed 2c 2a aa ef c4 15 32 a8 90 96 fb 6c 85 c8 fc c0 e9 83 36 4e f2 4c 14 af ca 65 a6 b1 22 c2 8b 61 a6 f9 75 20 c0 26 24 04 33 44 47 cb 96 e4 02 31 78 d5 8a 48 12 40 ea c4 6a 28 6f ca f4 ec a2 56 b6 b2 4a 12 3e 63 8c f1 a3 95 f5 22 fa 89 db 6e 24 a1 3c e3 e6 81 c0 e4 8c fd ab 6b a6 3f 4e bf 5f f3 f9 e0 31 d4 a6 ee 7c b9 7e de 1f 9e 27 Data Ascii: rl7bzNRm#Y#DxmoYJ/e\|.N;{0OVw#rNlisQUUa^hD59YKuWoP\|l@Zi,,2l6NLe"au &$3DG1xH@j(oVJ>c"n$<k?N_1\|~'
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 08 58 80 a4 32 ce 03 23 c6 09 f1 ae 6f 6a 1a d1 ad ad 31 62 bb 64 3d 6a cd 24 77 6a b3 c4 21 69 5a 29 5a 07 3b 44 96 58 4e a1 03 f3 e4 47 1f 4d f9 78 dc d4 56 e0 d1 fa 5a d5 dc 2e 35 5a 9e 9f a6 66 8a 95 4e 10 fa b0 57 4d d2 b4 21 f6 40 d2 70 48 54 33 01 bc 83 ce fb 75 e3 4e 9c de 5a bd 1c ee af c6 be 1a dc 75 e0 91 b1 16 56 07 5c 75 bf 4a 45 9e 43 2a 17 25 f6 99 e3 dc 48 55 55 4e c0 92 ce d6 0a ab 3e a1 ce 26 06 8a 22 54 78 c2 d5 97 d3 b9 22 73 a9 4b 80 50 a6 cb f2 e6 b1 92 e0 b3 f9 01 56 47 91 90 0e 45 12 ad 39 75 5d aa 17 3b 8d 85 c0 a5 4c 46 7c 4b a7 bd 4d e5 36 32 11 cf 76 b5 6b 88 4b 95 8f 94 45 24 89 3e a3 bc aa fc f9 6c 89 e3 25 46 6d 5a b1 69 9d 45 7e 9b c3 42 35 cc 6a 1c 7a 44 24 68 42 d8 5b 15 20 05 41 75 92 27 85 99 5d 1b 7d ea 82 e8 e2 48 fa Data Ascii: X2#oj1bd=j$wj!iZ)Z;DXNGMxVZ.5ZfNWM!@pHT3uNZuV\uJEC*%HUUN>&"Tx"sKPVGE9u];LF\|KM62vkKE$>l%FmZiE~B5jzD$hB[ Au']}H
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 9b 00 e0 8e 9a 9d da fd 33 a7 7b 59 a6 7b 61 90 9b 07 8e b5 9b a7 43 4f 65 a7 b5 90 2e f5 e7 8f e5 dd 66 5e 3b 29 8d 7d 07 47 61 c9 40 91 37 27 c3 16 ea 42 a0 09 e5 ae b5 61 9a 8e 77 21 43 0f 84 b3 3e 12 7a b6 6f e3 1e 67 69 aa c5 05 79 68 46 de bc 6f e9 33 44 2c ab 32 f2 2c ec 9b 00 76 6d b0 df d1 1a aa 6b 78 3b f8 4c 65 5d 39 dc 69 ab 45 90 c8 66 72 15 ed b5 7a e6 18 53 d6 8b 89 e5 07 ad 20 7d c2 15 e2 0c 6e 80 ef b1 e9 0b 1b aa 17 09 93 4c 2e ba ab 66 9e 33 13 69 35 66 36 b4 78 f9 42 49 64 d9 49 63 73 64 17 f5 a0 8c 5c 69 18 01 ec 10 1e 47 c3 49 39 7e e3 e2 75 4e 8f 4a 58 4c cd 98 b0 39 5c 79 e1 9a 69 2b 96 90 a0 55 93 d3 af c4 c8 d2 29 32 9e 27 60 7d 32 09 5d c7 44 a8 ef 28 5f 4b 68 b9 3b 7d 1d bc 4f 6d 75 ee 3b 51 da d6 d5 b2 b8 6b be ae 26 cc 51 e3 Data Ascii: 3{Y{aCOe.f^;)}Ga@7'Baw!C>zogiyhFo3D,2,vmkx;Le]9iEfrzS }nL.f3i5f6xBIdIcsd\iGI9~uNJXL9\yi+U)2'`}2]D(_Kh;}Omu;Qk&Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49847	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	459	OUT	GET /sumbangan.com/public/sliders/668e257b9598f_Sumbangan_Slider_Doa_Harian.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:47 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:46 GMT Content-Type: image/jpeg Content-Length: 472176 Connection: close x-oss-request-id: 674319E2AF8AD93030E46AE0 Vary: Origin Accept-Ranges: bytes ETag: "AECD95211DAAD969B2E94BF1E4FC42DF" Last-Modified: Wed, 10 Jul 2024 06:08:59 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4843211573392050183 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 11 Jul 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: rs2VIR2q2Wmy6Uvx5PxC3w== x-oss-server-time: 2
2024-11-24 12:19:47 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 05 73 09 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 08 ff c4 00 1b 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f1 c0 f4 7e 1c Data Ascii: JFIFC!"$"$Cs"~
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 71 7d bf 3b 95 09 7e a5 f1 1d 6e ea 2f fc 5f f4 50 0c ac 00 00 00 00 0e 6b d2 b9 77 d2 79 5a ff 00 40 e7 3d 1b ea 7c 8d c4 0f cc be b0 00 00 00 00 00 03 17 98 75 9f 2f e8 3c ce 56 e9 97 e9 bf 1d 3f 6b 0b aa fc df ac af 0f ce 7e b4 02 18 00 00 00 00 78 dc c3 b2 72 ff 00 b4 f0 72 3a 67 30 e9 fc 1d 00 1f 35 eb 1c cf a6 73 0f a2 f3 b5 99 d1 6f e9 3f 28 6d 5a 96 d7 e4 77 74 c0 3f 2b fa e0 00 e3 de 7e 67 9d fb 07 c5 75 3d 8f 5b d9 3f 30 fa b0 0f 3b a9 72 8e b1 e4 fb 7c 1c 96 a9 e3 fe 9d f2 70 c8 85 cd c2 e8 ef de 76 fb 3e 60 7e 55 f6 20 19 d6 3f 0c ee 5c 23 ee 3c 3c 89 46 5f 65 e0 43 1a da a7 6f 53 b4 68 db ff 00 c0 7b e0 1f 2d eb 00 04 78 e7 65 d2 7e 93 cb d1 a5 4d bf a4 7c 9c 30 f3 30 e7 6b ad ae c7 0d 92 70 29 a1 43 ca f5 b0 a7 7c 6c 8c 2b e7 a7 2e cc 6b ab Data Ascii: q};~n/_PkwyZ@=\|u/<V?k~xrr:g05so?(mZwt?+~gu=[?0;r\|pv>`~U ?\#<<F_eCoSh{-xe~M\|00kp)C\|l+.k
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 19 a2 72 4d e3 46 5c f3 ec dc 6b 7f 4b df c9 dd 3e 6b ae 9e b7 a7 5d d3 d3 f9 db e8 ff 00 33 cd 34 e4 fd 8f 45 f5 43 93 fd 35 f3 9f d1 0b 2e 3b d4 38 1f 77 6b 82 fd 02 6c 8e b8 5e a1 97 85 1c b9 fd 9b 4b da 2b 4d 83 9c 74 7e 3c f5 ea 9c 07 e9 3f 01 12 e7 dd 3b 91 8b ba 7c cd df b8 08 be 83 e3 3d f7 e6 61 f5 5f 3f 71 e5 e9 f5 fe 25 f4 1e bf 57 c9 fa a7 a9 c8 65 76 4f 9c ba df b8 df 2f df f6 0e 24 9f 5d e4 3d ef e6 82 37 ff 00 7e cd 6a a3 a0 72 dc ee a6 ce 43 d6 ad d6 4a e3 93 ae c5 e7 c9 81 08 51 4c aa 55 4e b1 a6 ca 73 de 35 ba eb 78 d7 2a f4 d9 20 bb 76 c7 26 33 7f 54 7c b3 f5 84 ce 3f 91 ea 79 bb df bb 15 21 40 68 1a 00 68 60 81 03 4d 82 4e 00 c6 98 f1 b2 12 7e 4b 84 39 7d 3a ab 95 73 af 97 e6 7b 3e 7a bd 63 de f1 33 85 e8 e0 67 f9 8a bd ac 1c 99 d4 d1 Data Ascii: rMF\kK>k]34EC5.;8wkl^K+Mt~<?;\|=a_?q%WevO/$]=7~jrCJQLUNs5x* v&3T\|?y!@hh`MN~K9}:s{>zc3g
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 4d 2b 88 d0 e2 9b 9a 13 88 0d 30 69 8d 0d b6 a2 34 00 01 21 0c 64 64 21 30 13 00 01 03 71 60 da 1a 60 00 08 04 31 80 da c1 4d 71 f5 24 c4 d2 60 e2 34 9a 1a 1a 1a 01 30 09 29 03 92 95 43 9a 93 cd c9 4e a0 01 ca 1c 47 18 4e b9 d2 14 5b 46 7b 55 45 b4 1d 75 c2 4b 5d d0 0d a1 a0 00 00 00 18 c2 56 57 64 67 3b 2b b2 32 9d 95 d8 b2 b2 ca ac ac ac 94 26 f2 9b 8b a8 69 8c 84 2c 84 dd 35 db 5c eb 5a 6a 75 40 0c 13 01 36 11 1a 04 da 05 19 44 a4 e4 21 31 b1 0c 48 4d 30 69 80 80 08 c9 0d 26 0d 02 18 81 b1 38 83 88 9d 11 21 54 44 57 62 07 40 00 00 00 00 00 00 00 00 03 40 4a 55 b4 ae 74 b9 9b ca 64 a6 d9 d5 64 44 e1 68 a3 06 71 96 bb ca 51 94 43 84 e0 11 19 54 34 d2 94 a1 25 33 23 29 90 18 86 80 1a 01 a6 80 40 00 d0 11 63 70 8c d3 a8 13 4d c1 4c 75 02 48 14 d4 d2 94 a3 Data Ascii: M+0i4!dd!0q``1Mq$`40)CNGN[F{UEuK]VWdg;+2&i,5\Zju@6D!1HM0i&8!TDWb@@JUtddDhqQCT4%3#)@cpMLuH
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: f0 4c 20 c7 ec eb 77 25 d8 b0 fc 66 78 f1 99 e3 c6 67 8f 19 9e 3c 66 78 f1 99 e2 64 87 65 3c 91 8b fe c7 64 ab d9 2d 48 fc 43 28 31 90 ab 78 b2 1a 92 d7 65 e3 7c 9b 12 14 51 b9 31 7b 25 c9 62 2b 72 b2 33 dc f2 09 c2 3e 4a e1 1c 09 f1 a7 20 48 79 b6 1a b6 b4 72 6a c8 63 7f 52 ec ca be 7c b4 70 c6 23 f3 3d 97 1f 55 21 8e fd 37 b7 26 87 c0 bf 75 16 95 91 4e 54 a4 91 25 3d 92 7e 5d 23 61 b0 58 61 06 67 05 82 8d 17 ba 43 49 79 87 5b 53 2f 05 0f fe c8 17 72 82 cb 65 10 23 04 0b 45 96 e4 7e 46 40 81 76 b8 08 17 a4 7d 86 5d 86 0f bf 0a 4a 4a 99 5e d2 3d 91 f1 10 21 b7 a1 bf 61 76 6f e8 97 66 fa 9f 98 e9 98 ea a3 d6 b2 cd 9e 57 1a 44 a1 25 b4 d2 df 58 a5 6e e5 15 ca 76 32 a9 9c b4 87 4e 56 d1 0a ba 0d 8c 49 a9 4c f7 91 22 14 a6 66 47 d7 7e d2 f4 37 d3 6d 37 ed 31 Data Ascii: L w%fxg<fxde<d-HC(1xe\|Q1{%b+r3>J HyrjcR\|p#=U!7&uNT%=~]#aXagCIy[S/re#E~F@v}]JJ^=!avofWD%Xnv2NVIL"fG~7m71
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: e5 c5 c4 56 4b a5 ca 99 71 bb ac 56 0a e5 5a e6 52 09 9a 4a 05 25 54 f7 4d 3b 1e cf 00 80 e3 96 1f f2 03 dc 30 8b 4c 7d 9e 45 3e 4a cb 8d 5c e1 90 1c 7e d7 39 7c 9b a7 c6 94 95 51 d9 65 36 30 e6 b7 96 d9 2d 17 37 12 2e 0e 32 4a 25 53 eb e6 3f ff 00 1f b3 c5 37 fe 43 78 63 8c f3 ee b2 f7 b9 34 49 dc ce 31 14 5a ac 6d e4 ab 25 cb d9 71 ea 3f 71 8a 42 5c 2a 99 46 9b 1c cf 2d 7b 93 42 31 96 79 14 6e c8 4b b9 35 eb 4b 7e 99 44 64 78 14 07 22 c0 cc dd 29 99 25 92 ca 25 3f 10 c1 99 e5 d2 5d 48 25 e6 17 8d 2d fa 8e 13 23 c2 61 39 1a 06 68 f7 32 e3 09 67 82 a7 2d 7b 9b 75 86 b5 cd b9 ce 1e e0 ad d4 fb 77 d6 b1 24 bb 11 3f f7 62 17 e6 70 19 7e 52 ec 20 7a 79 e8 63 7e c7 77 e7 ab da 40 57 ba 7f 71 d2 dd a8 67 f9 67 27 f4 59 57 12 16 5b a2 03 bb 0f 70 b3 e4 c8 46 ca Data Ascii: VKqVZRJ%TM;0L}E>J\~9\|Qe60-7.2J%S?7Cxc4I1Zm%q?qB\*F-{B1ynK5K~Ddx")%%?]H%-#a9h2g-{uw$?bp~R zyc~w@Wqgg'YW[pF
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 87 fc 5c 5a a2 5a a0 58 59 d4 46 ba 71 18 cb ac 0b 77 a2 b3 88 d3 35 cf b3 cc de e6 5c 88 ff 00 e2 e1 71 1b e6 ca cd dc ff 00 3f 4a 48 25 61 3e ea 19 40 9e 31 c8 cd c4 8b 3a 53 93 25 0a 57 fa 6b 5c c1 8e 4d ce 18 64 f1 64 72 db 69 b2 56 ca 73 a4 c8 a0 fe 17 9c 47 46 98 10 62 3a ae 35 e3 fc b9 d8 e5 85 0c a8 31 16 61 a1 8f cf 8c b8 2b c6 26 1a a1 44 89 42 1e 98 eb 96 13 18 89 91 32 de 30 a6 95 7d 6c c1 c5 ec 2f eb 12 40 8b 53 30 60 82 4b b4 81 10 22 1b 7a 10 ec 66 c4 38 59 49 88 76 b0 65 10 7e 33 0f 94 dc 6e 3b 81 ea eb 4a f5 45 bf 90 d8 b3 5c 4b 74 d5 d6 46 86 87 50 4e 34 cd 54 b3 94 d9 b6 65 32 6c a7 65 63 f6 07 2a 22 63 c1 b3 0d 21 2d 35 f6 13 67 b3 18 2d ca b9 a7 0f 92 51 c6 50 da db 76 52 b7 11 a4 38 eb 50 df ea 58 91 35 a6 a4 ea a9 2c 25 eb 46 b6 36 Data Ascii: \ZZXYFqw5\q?JH%a>@1:S%Wk\MddriVsGFb:51a+&DB20}l/@S0`K"zf8YIve~3n;JE\KtFPN4Te2lec*"c!-5g-QPvR8PX5,%F6
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 93 54 b4 ee a5 ac 7c 8c c0 ae 19 f9 85 57 7e 5a 7e 8d f2 a7 d6 ca 1c 55 35 6f 30 e2 e5 57 16 6c ba a0 66 47 22 a6 9b 96 10 a9 25 46 f0 f1 75 55 18 63 ae a2 60 91 d6 4e 70 8d aa 78 f9 b1 d9 39 b6 58 3b e8 8b 48 ea b8 77 e5 2a 99 9f 1b ac 14 75 8e bf 79 10 24 6a 14 ff 00 8d 82 da 36 a7 55 bc f4 54 f5 3c c3 89 55 f0 07 b3 25 8a a4 8b 95 15 93 1e 24 17 0a a6 2e 5b c8 57 28 15 49 f9 41 55 46 e7 3f 60 a9 e2 78 98 12 14 ff 00 96 53 82 e1 d1 58 66 50 90 17 62 ab 62 ef 64 a2 1b 84 7a 2f 8b 90 28 9f 9b 6e a7 8c 36 a0 59 3b a2 3b 2a 38 ee 73 59 8c b1 55 f1 5c 64 ac 9b d1 4f 0f 30 2a 31 67 95 59 f9 68 ec 57 a2 28 a3 a5 d5 d3 1a 5d d1 7c 1b 9c 37 42 99 8d 50 b7 be 11 ec c9 4c d7 9c bd 55 e5 6f a5 d0 85 cf 7e 72 2a e6 5d a1 ca 37 64 d0 54 86 cd 25 70 f1 b1 2a 5f c5 93 Data Ascii: T\|W~Z~U5o0WlfG"%FuUc`Npx9X;Hwuy$j6UT<U%$.[W(IAUF?`xSXfPbbdz/(n6Y;;8sYU\dO01gYhW(]\|7BPLUo~r]7dT%p*_
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: 68 fa 38 db a1 5b 4d 87 2b e5 27 7d f9 3c ff 00 44 ef 77 e6 a3 fc 73 47 72 87 e1 c7 97 bc bf ea 12 e7 ec 5e c9 9e 32 aa 93 5f 02 22 ad d0 c7 e0 69 e3 68 ba 73 3b 43 b3 6b 60 67 a6 6b a7 af 37 62 f6 14 aa c9 56 ae ba 7a 7a 89 5b a6 5d b9 d8 be d3 fd 6a 5f 37 ff 00 a4 e1 28 4b 4c 97 5e 5a 34 27 5e 7a 20 ae ce c8 ec 98 e0 a1 aa 5f 33 22 77 bb f1 29 e7 81 fc b4 3f 84 76 a7 67 43 1d 45 c1 ef e4 56 a3 2a 33 70 9e eb 2c 1e 2a 78 5a aa ac 0c 0e 32 18 ca 2a ac 33 59 3c ad 95 cb f8 4f c1 7b f8 51 96 97 71 57 b6 c8 8f 0f 56 a4 ca 0f ab 65 39 39 a6 a4 55 e1 df e2 1d 05 7b 5c 74 a4 be 95 f2 47 7f d1 3b 6b b0 ea 76 85 55 38 ca dd 0f 74 6b fd e8 f7 46 bf de 8f 74 6b fd e8 f7 46 bf de 8f 74 6b fd e8 5d d1 af f7 a2 9c 74 c5 2e 5e d5 ee ed 5c 66 25 d6 8c 91 ee 8d 7f bd 1e Data Ascii: h8[M+'}<DwsGr^2_"ihs;Ck`gk7bVzz[]j_7(KL^Z4'^z _3"w)?vgCEV3p,xZ2*3Y<O{QqWVe99U{\tG;kvU8tkFtkFtk]t.^\f%
2024-11-24 12:19:47 UTC	16384	IN	Data Raw: b1 a0 e3 74 a8 5c 23 75 c0 cc 70 c9 5a 5c d1 53 71 5e b6 da 36 a5 3b 2c 71 c9 3a cc e8 80 8c 0a de 47 5d 0e ae 46 3b da 52 bf ba 6f da 4e 65 fe cb 80 cd 09 1e 7d 16 57 7b 96 ba cd 68 79 82 4c 71 17 80 54 b4 59 da fe f6 e0 b5 c2 39 23 1c 24 14 3a 1d 24 70 b1 af 7e 66 8a 92 c4 c7 8f 88 55 6d 59 58 3c bb 3f c9 56 cd 33 e3 77 07 62 15 c9 db 9e 44 64 7f 17 12 c4 eb ae 08 36 d1 e8 9f fb 15 79 8e 0e 1c 46 8b cf 7b 5a 38 92 8c 56 33 7d fd bd c1 17 13 52 73 d3 46 9b d1 ef 61 54 32 6a 9f c1 ea a0 d4 68 a9 34 0a 82 4d 6b f8 31 51 c6 ec 7b 98 34 bf cd a2 0f 3e 8b f0 bc b1 dd c8 c6 fb 43 cb 4e 63 44 7e 61 a6 7f 39 e6 c7 a2 0f 21 d0 75 12 b9 95 ce 8b 57 2c ef 7b 78 68 b3 9f 8f 43 bc 10 84 6f 76 28 31 b9 01 4d 05 80 ec c7 87 31 b5 3b 32 6c 9d 14 46 3e a9 75 5a 9b e1 a0 Data Ascii: t\#upZ\Sq^6;,q:G]F;RoNe}W{hyLqTY9#$:$p~fUmYX<?V3wbDd6yF{Z8V3}RsFaT2jh4Mk1Q{4>CNcD~a9!uW,{xhCov(1M1;2lF>uZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49850	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769239 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 52 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49851	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769235 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 52 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49853	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769238 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 50 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49855	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769237 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 51 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49854	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769234 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 49 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49856	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769236 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 47 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49859	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769235 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 47 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49857	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769242 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 46 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49858	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769243 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 45 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49860	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:46 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769234 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:47 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 44 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:47 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49862	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:47 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769241 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:48 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 43 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:48 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49863	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:47 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769240 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450784\|1732450761
2024-11-24 12:19:48 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 42 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761;Path=/
2024-11-24 12:19:48 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49852	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:47 UTC	696	OUT	GET /sumbangan.com/public/organization/525/logo/6352445c5003b_LPQ_AL_HUDA_LOGOW.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:48 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: image/jpeg Content-Length: 11298 Connection: close x-oss-request-id: 674319E37BFFD33531FC2C5C Vary: Origin Accept-Ranges: bytes ETag: "6538EBC50C9D478C481AD03D9BE41A91" Last-Modified: Fri, 21 Oct 2022 07:03:56 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10813098334749947000 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Sat, 22 Oct 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: ZTjrxQydR4xIGtA9m+QakQ== x-oss-server-time: 2
2024-11-24 12:19:48 UTC	11298	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49861	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:47 UTC	695	OUT	GET /sumbangan.com/public/campaigns/large/66b1d6c790192_CF_Cover_Kempen_New-01.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:48 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:47 GMT Content-Type: image/jpeg Content-Length: 169380 Connection: close x-oss-request-id: 674319E31698CC3537D165EA Vary: Origin Accept-Ranges: bytes ETag: "231208D141FE2ADFB753D4F0C1DD08ED" Last-Modified: Tue, 06 Aug 2024 07:54:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1873168346732039754 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: IxII0UH+Kt+3U9Twwd0I7Q== x-oss-server-time: 1
2024-11-24 12:19:48 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: 0d 52 34 71 f8 ab c2 b2 4b 6c 13 ba 75 fe 93 1f fe 94 3f e2 1c ff 00 56 bc fe 88 1a 48 7f fa 50 ff 00 88 73 fd 5a 68 4f 15 6d 47 26 81 44 c3 cc a0 d6 c8 39 04 f1 a7 5f 69 45 76 ba 13 ff 00 a0 73 fd 5a b8 35 be 98 23 22 e4 7f c4 b9 fe ad 33 ac 0f 8a b3 90 3d 3d e9 8f a5 8d bc ca 9a 3a 87 bf 70 9d 51 ac f4 df fc 62 79 ff 00 cc af fd 5a ab f6 65 a7 3f e3 03 fe 25 7f cd 4d 82 7b 55 44 e4 62 a1 30 b5 5c 07 aa 73 0e b3 d3 60 67 f1 81 ff 00 12 bf e6 aa 1c d7 3a 5d 94 17 1d b9 84 a5 23 24 96 96 00 1f a2 9b 52 32 31 58 8b 4a bc d6 82 9c 27 2b 09 da 53 90 52 72 0f ea a6 18 87 24 a0 f5 4e 82 7a 83 a4 56 94 2d bb b0 5a 5c 50 4a 0a 59 70 ee 24 e0 63 09 f7 ac e1 a9 ec 87 91 33 ff 00 c1 ab f9 a9 8a b7 b7 3a 1e a5 45 b7 2d 39 05 e7 8c 86 f6 af fa 88 4e e2 46 31 c9 27 6f Data Ascii: R4qKlu?VHPsZhOmG&D9_iEvsZ5#"3==:pQbyZe?%M{UDb0\s`g:]#$R21XJ'+SRr$NzV-Z\PJYp$c3:E-9NF1'o
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: 15 b6 f6 12 b6 10 92 d9 0e 2b 0b ca 38 57 d5 6c 0c e0 60 93 9c f1 56 5b d1 31 e3 b5 72 bb 33 78 79 bf 3e 23 d1 5b 90 12 97 92 94 36 b6 dd 0b 09 07 09 39 79 dc fa 90 13 c0 23 9c 59 58 58 cc a0 9d c1 f0 dc 2d 99 2a d9 3c b9 c0 1f 09 1a ee 37 5a 6e a9 dc e2 bd a4 34 c9 7a e3 6b 7e 6b 46 cc 85 79 4e 83 21 48 54 76 b7 b8 07 d6 f2 49 73 bf 6c e3 e5 8d 5d a9 ae 9c bd 70 4c 78 9a 79 31 9c 69 61 41 db 52 d4 84 24 11 90 42 98 23 23 6e 3b 81 eb de b7 3a eb 42 5e 15 16 c9 6a b7 dd 22 cc 8b 6e 5b 45 63 63 a1 d5 21 98 c8 58 29 46 dd a5 5b 63 76 0a ce 56 8e d4 dd eb dd 2d 2a fb 16 da bb 5c 8b 45 82 5c 29 33 54 e2 d6 e0 86 e2 83 ae 05 8f 2d 4d 82 49 4e 00 e4 e0 05 2b 19 e0 8c f7 92 1e 48 70 17 1c c5 ef aa 9e 32 d3 08 68 69 24 1f e5 36 23 6f bf d1 66 59 60 e9 0d 4f a3 62 Data Ascii: +8Wl`V[1r3xy>#[69y#YXX-<7Zn4zk~kFyN!HTvIsl]pLxy1iaAR$B##n;:B^j"n[Ecc!X)F[cvV-\E\)3T-MIN+Hp2hi$6#ofY`Ob
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: 32 1c 7d 9e 6a 92 eb ce b2 b2 94 84 a9 6a 00 92 da 7e 2c 7e 6f 38 19 35 3c 34 96 92 e9 ee bf d3 91 b5 26 95 be 49 7e 0c e4 a9 c6 d7 e6 32 e9 18 f9 a3 20 12 3e 20 72 41 49 0a 1c 54 70 fc 22 1d 3d 89 a5 7a 17 65 b8 c6 98 a7 42 b5 74 56 f6 ad 1b 54 02 a1 cd 39 ef fc 11 55 23 7f 15 e2 27 13 ba 9b 30 60 ce 14 54 d1 f3 66 dd b4 83 b7 97 da 79 c7 65 cc 79 f5 2d 0e ad a0 da 77 81 b4 29 24 12 90 94 a5 18 27 b7 7c e2 94 8c 5b 23 c1 6e e0 a7 1f 69 11 d8 4b ce 7d 1f c8 c8 0f 20 1c 7c 29 18 2b 19 ce 71 ce 40 f4 a4 8e 81 54 97 b4 3d b9 11 1a 67 0c 17 5d 5a dc 43 ae e1 26 42 d0 52 96 db e4 e7 03 25 44 04 fd e6 b7 2a 7d e7 ad b3 12 f5 ca 44 a7 1b 71 6b 53 29 92 10 a6 9a 09 ca 52 5b 69 29 24 63 39 2b 59 18 04 11 9e 69 65 b3 64 73 40 e7 e8 ad c6 4b 98 0b 8f 24 cf f5 12 43 Data Ascii: 2}jj~,~o85<4&I~2 > rAITp"=zeBtVT9U#'0`Tfyey-w)$'\|[#niK} \|)+q@T=g]ZC&BR%D*}DqkS)R[i)$c9+Yieds@K$C
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: cf 91 32 42 94 42 9c 7d d5 38 a5 01 81 dc e4 e3 f9 fe 54 8c fa 4b 8e 39 b9 5f 08 52 77 0e 3b 57 3d 89 d6 8a fa b7 ce 45 86 de 8b 92 a3 12 31 87 28 ea 9c 9b 8d 89 cb 84 56 92 c4 98 eb 52 42 82 88 27 04 16 d4 8c f6 f4 dd 9f ba b3 60 40 95 11 b7 1b 50 69 45 c7 4b b9 4e 72 09 c6 47 6e dc 0a c6 b3 c8 d9 69 8f 83 c9 5a 52 4f c8 a8 03 5b 36 9e 52 5d 50 59 52 86 d3 8e 3e 63 f9 e9 ec 0d 16 70 0b 90 9a 49 da d3 10 d4 02 56 0c c8 72 55 31 87 53 2d 86 cc 7d c5 20 c5 2b ce 53 8f dd 8f 4c d5 7f 8a dc 7a 40 94 e5 d7 27 f2 79 c4 4c 0c a0 93 ff 00 94 f9 9f d3 57 67 2d f0 b5 ba 86 97 b0 0e d8 c1 ed 58 2c ae 6a 16 e9 57 98 37 05 f1 fa 7f ee fd 15 1b ac 0d 94 f0 b6 a5 d1 82 d1 f4 fe ca d5 ee 29 10 24 2d 53 c2 8a 92 51 83 1b 8c 1c 27 d5 7f 3a 48 3b 6d 90 ea f0 8b 93 60 87 d0 Data Ascii: 2BB}8TK9_Rw;W=E1(VRB'`@PiEKNrGniZRO[6R]PYR>cpIVrU1S-} +SLz@'yLWg-X,jW7)$-SQ':H;m`
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: 47 71 1f 58 fc 21 45 5b 6b a6 a1 c3 25 cb c0 3a 0e be 1f f7 5e 6f 84 39 d8 65 23 60 70 b1 61 22 dd 6e 6f 7f 0d c8 b7 41 e2 a0 dd e3 a3 d2 fa 5f 72 b9 69 7b e5 f9 9b f5 e1 a5 fd 0e 63 76 96 89 8e ca d2 bd cb 0d ba e6 dd e3 71 40 2a 52 1b c2 90 40 ce 41 3b 39 76 44 41 b1 ba e4 68 ca 5b aa 61 48 5b 40 05 6d f8 0e 33 cf 39 38 f9 66 95 9d 43 b9 4e 73 5c 6a 89 37 28 ff 00 47 9f 2f 50 dc d4 fa 72 70 10 89 6e 25 b0 9c 9e db 12 0f da a2 7d 6b 5b 02 42 16 54 85 90 02 86 d1 9e c7 ed a6 54 b8 87 58 72 5b b4 34 cd ff 00 10 f3 48 bb 0f 52 ee 9d 28 61 16 e9 96 22 2e ae 21 2b 71 a7 7e 07 10 d3 89 0b 65 48 3c a4 0c 00 a3 c7 29 70 60 8e 69 39 76 ea 55 fb 52 5d c5 d6 e9 71 6d 52 5a 42 50 d9 6d 08 6c 34 90 e1 c6 dd a3 00 e4 93 c7 3d fd 69 6d e2 23 4c cc 91 a7 2c 1a da 3b 28 Data Ascii: GqX!E[k%:^o9e#`pa"noA_ri{cvq@*R@A;9vDAh[aH[@m398fCNs\j7(G/Prpn%}k[BTTXr[4HR(a".!+q~eH<)p`i9vUR]qmRZBPml4=im#L,;(
2024-11-24 12:19:48 UTC	16384	IN	Data Raw: d9 cb 63 97 35 ad a2 46 6a 09 29 72 d5 2d bc 83 b9 a5 53 72 74 86 b1 bd 40 71 eb 46 8e bd ce 64 b6 48 54 6b 7b ce a5 40 e7 18 29 49 1c e0 d7 55 ba 75 e1 bf a6 3d 3d 8e d3 8d d9 9b bb 5c 92 3e 39 d3 d0 1d 59 57 ba 52 7e 14 7d c3 38 ee 4d 38 33 2e 3a 7e cd e5 a2 e3 3a df 07 cd 50 43 61 e7 50 d6 e2 4e 00 19 23 24 9e d5 62 3a 7c ba 92 a9 cb 58 d0 2c 36 5c c2 e9 ed b6 e7 fd 0d d9 b7 5d e2 48 b7 4b 50 3e 5b 72 da 5b 6a 41 43 dc 02 93 83 d9 27 8c 56 e3 f1 76 a0 92 47 d2 f5 4c 55 04 80 94 e2 12 4e 3f 58 ae 90 dd 34 fe 9b d4 d6 f3 0e eb 69 83 70 86 f0 ce d7 1b 4a d0 41 f5 1f ce 2a 24 f8 8c f0 c5 2f 48 da 67 6b ce 9b 49 ba bf 6e 8a 92 fc cb 43 25 4f 3c d2 07 d6 5b 3f 9c b4 8e e5 1c ab be 33 da ae b7 28 24 81 ba a2 5c 4b 6c 4a 66 99 b6 ac b6 a8 b7 0b 90 98 ca 8e 4a Data Ascii: c5Fj)r-Srt@qFdHTk{@)IUu==\>9YWR~}8M83.:~:PCaPN#$b:\|X,6\]HKP>[r[jAC'VvGLUN?X4ipJA*$/HgkInC%O<[?3($\KlJfJ
2024-11-24 12:19:49 UTC	16384	IN	Data Raw: 1c 83 90 82 01 50 f9 ff 00 35 32 7d 73 ea a4 ed 57 36 3d 8f ca 42 e2 db d1 e5 a8 a4 e0 b8 f6 d0 0a cf d9 c7 de 93 ef 4f ea 92 e2 dc 48 58 1f 17 20 7b 0c f7 35 0c 6f 32 16 1c 7d a7 19 21 c5 e4 2c 2b 95 25 41 59 3f 7e 46 2a 20 2e 6e e5 62 16 8d 56 ab e9 0e 7f e5 95 fa 68 a5 27 f4 3d b8 7f c6 d6 bf f2 8f fb a8 a6 7b 5c 3d 55 8e 13 fa 29 c5 a6 e1 3f 1e 09 69 6d 00 a7 f2 a6 c6 7b e5 23 1f 65 6d d5 c3 c0 e7 eb 25 38 fd 26 b5 3a 4a e2 c5 d7 4d d8 ef 17 38 cd bb 26 ef 12 13 4e b0 87 15 e4 a1 b9 1e 59 59 c6 70 ac 70 01 ef ed de b6 13 65 a5 77 34 96 23 bb e4 ad 48 6b cc 65 9f c8 a0 a5 27 71 51 cf c2 01 e3 1c f7 1f 7e 29 88 e4 cc 96 fd fc ab 6d 62 50 fa 60 c7 ab aa ff 00 36 69 ba bb 47 54 8d 51 31 b6 db 2a 5a e4 28 24 7b 93 4b db 13 bf d3 d8 dd f9 ea c7 f8 06 91 b7 Data Ascii: P52}sW6=BOHX {5o2}!,+%AY?~F* .nbVh'={\=U)?im{#em%8&:JM8&NYYppew4#Hke'qQ~)mbP`6iGTQ1*Z(${K
2024-11-24 12:19:49 UTC	16384	IN	Data Raw: 14 ba cb 6a 6f 10 a2 2c 72 0a 50 7f aa 28 1f ce 57 b0 20 24 d6 cb f6 c7 fc 24 88 df 48 fe 88 6f ee f2 f7 f9 5f 8b 5f df 9c 67 6f d5 c6 7d 3b e3 e7 4c 2f 59 7f 0b 2d 9d 4c 3d 64 e8 3e 90 92 f4 a7 12 a4 0b bd e5 01 28 6b 8f ac 86 12 4e e3 ea 0a 95 8e 39 49 cd 0c a7 6b 4d d5 7a 3e cc 50 51 c9 c4 0d 2e 3c b3 6b 6f 97 ea ba 03 a9 74 e5 a7 56 69 bb 9e 93 bd 46 f3 6d d7 78 6e c0 92 d0 3b 77 32 e2 0a 14 01 1d b8 27 04 76 ae 63 df 7c 06 f5 4a c7 d6 6b 5e 89 62 dc fd cf 4a 5c ae 0d a5 37 c6 00 09 6a 1e ec b8 5d 19 f8 1c 4a 02 b8 ec a3 8c 77 c0 d5 f8 64 fc 24 ba df 41 6a c9 b6 8e bc cf b8 ea 7d 3b 79 90 64 19 d9 0a 93 6c 79 47 92 da 78 0a 67 b7 e4 c6 36 f7 4e 39 0a e8 95 8f c4 ef 87 ad 45 66 4d fa d9 d6 3d 29 f4 45 a3 78 fa 45 c9 b8 ee e3 19 fe a4 e1 4b 99 f9 6d cd Data Ascii: jo,rP(W $$Ho__go};L/Y-L=d>(kN9IkMz>PQ.<kotViFmxn;w2'vc\|Jk^bJ\7j]Jwd$Aj};ydlyGxg6N9EfM=)ExEKm
2024-11-24 12:19:49 UTC	16384	IN	Data Raw: e4 cb cb b9 de 11 6f 74 49 5b 48 69 d4 a9 61 48 18 09 5a 54 94 7d 53 df 9c 1f 7a 89 cd b0 f3 d9 f2 59 5b 9b 71 9d a9 27 15 ea e2 ca 6d 25 6e 46 75 29 1c 92 50 40 15 ca 7f e3 bc 40 eb c3 67 a3 bf ea 54 bd e9 2f f4 8f af ea a6 f5 ab 59 69 5b f1 08 b3 ea 08 32 9c 57 d5 42 1d 1b 8f f7 a7 9a f6 c9 3e e9 73 55 c5 17 6b 12 ad aa 85 35 71 98 25 f0 ea 65 32 10 85 25 e4 90 06 01 de 46 d3 c8 28 3d ea 0f 34 eb ac ac 38 cb ab 6d 60 f0 a4 9c 11 4f 0f 4b 3a f1 74 b3 4b 62 c9 ac 25 2e 65 b5 c2 1b 44 95 f2 ec 7f 62 4f e7 27 df 3c 8f 4f 6a da c2 fb 71 15 4c 82 2a c6 64 bf 30 74 f9 f4 f3 d5 58 83 13 6b ce 59 05 bc 54 8a 01 87 9d 75 94 85 6f 64 80 bc a0 81 c8 c8 c1 23 07 ee a4 ee a3 d6 fa 2b 49 4e 6e db a8 6f 8c c2 92 e3 41 f4 b6 b6 d6 a2 50 49 00 fc 29 23 ba 54 3e ea 57 a1 Data Ascii: otI[HiaHZT}SzY[q'm%nFu)P@@gT/Yi[2WB>sUk5q%e2%F(=48m`OK:tKb%.eDbO'<OjqL*d0tXkYTuod#+INnoAPI)#T>W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49864	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:48 UTC	435	OUT	GET /sumbangan.com/public/organization/1/logo/ppim.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:49 UTC	698	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:48 GMT Content-Type: image/jpeg Content-Length: 11090 Connection: close x-oss-request-id: 674319E4F5E04B39374BCA3F Vary: Origin Accept-Ranges: bytes ETag: "A72E4A24EBFC2667DCC9269D19232648" Last-Modified: Fri, 12 Nov 2021 06:47:09 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 9967731808430596187 x-oss-storage-class: Standard x-oss-meta-mtime: 1622212341 x-oss-expiration: expiry-date="Sat, 13 Nov 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQLhiBgIDb5szL6BciIGRhM2U5MjA3NmE1ODQ3ZDk5NDFmYWIzNGQ3ZjA2OTVi Content-MD5: py5KJOv8JmfcySadGSMmSA== x-oss-server-time: 2
2024-11-24 12:19:49 UTC	11090	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 12 11 10 15 12 0f 13 15 15 15 15 17 16 15 15 15 15 16 15 17 15 15 17 18 16 18 16 15 19 18 16 18 1f 28 20 18 1a 25 1d 15 17 21 31 21 26 29 2b 2e 2e 2e 18 20 33 38 33 2c 37 29 2d 2e 2b 01 0a 0a 0a 0e 0d 0e 1b 10 10 1b 2d 25 20 26 2d 2d 2d 2f 35 2d 2d 2d 2f 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2f 2b 2d 2d 2d 2d 2d 2b 2b 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d ff c0 00 11 08 00 e1 00 e1 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 ff c4 00 46 10 00 02 01 03 02 03 05 05 04 06 08 06 01 05 00 00 01 02 03 00 04 11 12 21 05 31 41 06 13 22 51 61 07 14 32 71 81 23 42 91 a1 15 33 52 72 b1 c1 Data Ascii: JFIF( %!1!&)+... 383,7)-.+-% &---/5---/+--------------/+-----++-----------------"F!1A"Qa2q#B3Rr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49867	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:48 UTC	447	OUT	GET /sumbangan.com/public/organization/499/logo/65ad34a8ab77a_1.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:49 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: image/jpeg Content-Length: 7777 Connection: close x-oss-request-id: 674319E51698CC32306566EA Vary: Origin Accept-Ranges: bytes ETag: "C9070F08121F64E22BAD30CE0A872DBD" Last-Modified: Sun, 21 Jan 2024 15:13:44 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10916105402041113994 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Mon, 22 Jan 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: yQcPCBIfZOIrrTDOCoctvQ== x-oss-server-time: 2
2024-11-24 12:19:49 UTC	7777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49866	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:48 UTC	456	OUT	GET /sumbangan.com/public/campaigns/large/64585d4447fbf_MASJID_AL_KARIIM.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:49 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: image/jpeg Content-Length: 168602 Connection: close x-oss-request-id: 674319E5CE5C5D3336D5E6E7 Vary: Origin Accept-Ranges: bytes ETag: "E77E1C6962BF4F6CEECC21E09515A0CE" Last-Modified: Mon, 08 May 2023 02:24:04 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13094016331136528122 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 09 May 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: 534caWK/T2zuzCHglRWgzg== x-oss-server-time: 1
2024-11-24 12:19:49 UTC	15774	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:49 UTC	16384	IN	Data Raw: e4 7c e0 63 72 ef 51 11 1b d4 b6 8c 35 a8 cf 31 35 c4 46 44 2f 1d b4 92 72 1e 53 ec 8b 86 6e 07 e1 2a 88 9b fc 44 71 c4 b2 b9 42 b4 2b 8c db b6 af d4 f4 cc d3 b3 ec cb 92 20 f7 a3 d2 8a ec 1b 61 18 da 63 1a 38 35 61 ad e5 40 63 71 e5 a1 af 3e cc 32 ec 42 2a 23 43 42 bd 30 41 3c b7 29 e0 25 95 4b 2b 0e 29 2c c6 f4 6d 4c ef 3f 26 a7 1c 68 1d ef 4e 64 4d 2a 75 0a 61 f4 68 5b 82 fe 88 d5 7a 11 c3 6b 2e 97 b4 25 c9 f7 3e 38 87 52 29 15 fa b7 da 34 d3 13 e7 f0 43 16 e3 d7 ea 27 87 21 a3 0c 43 ba 9b e2 55 b0 cf 69 8b 47 c3 15 02 51 dc 3d de f3 f6 7e 8f d1 c5 76 e2 a2 f1 c8 c9 aa 63 11 6b f7 c8 90 51 e7 70 53 99 b8 a2 3e 08 b8 fb 3c e8 2f 93 8d 6d ec 26 24 de 1e ba b9 0a f8 0d 39 d0 df 82 07 d2 b8 9b 41 0b 12 cc 1d fa bc 72 3a 06 bb 6c 7a b5 86 e2 2f be 44 f2 ec Data Ascii: \|crQ515FD/rSnDqB+ ac85a@cq>2B#CB0A<)%K+),mL?&hNdM*uah[zk.%>8R)4C'!CUiGQ=~vckQpS></m&$9Ar:lz/D
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: e1 c0 9a 9a 63 23 73 6b 87 4e 2d 48 f2 14 c7 7d 6c 0a 2a 03 d4 1b 7f be 41 1b 1c 10 64 1b 7d 28 21 48 73 21 aa f8 0e 2b 6f 4e ed 3e 24 3c 37 dd c7 58 d3 27 27 71 71 1c 7f 77 51 05 ed 61 bc 09 34 fb f2 e0 85 94 7c 49 b4 99 0f 7a 7c d7 7a 37 bc ea ab 24 53 e0 23 71 6a 1e ab 89 db b4 3f dc 03 91 28 ef 04 dc 45 3f 67 a7 c1 c7 11 7b 48 9b bd 2c 6c 48 2d 35 8f 9d 0b e0 87 a7 1d 20 94 d5 b9 1b 51 6d aa 7b 60 93 dd 1c 42 ab 18 a1 70 54 89 aa 46 e1 5f c9 0a 71 84 16 e2 8c fc 86 1b 71 6e 2f 5d 22 6e 47 9e 8c 41 d4 84 4e 26 ec 63 ed 1a 16 2b 97 17 ed 7f dc 86 f9 dc 17 1d 49 7e d6 9b a5 fd ec 50 be ae 19 88 44 26 97 35 51 e3 26 83 6c 23 69 cd e7 3e 4f 51 30 fd 84 78 37 89 37 e3 aa 7d d9 69 5b 6a 7f 4b 63 55 40 1c b9 93 86 e2 d3 58 f2 2d 7c 2b 5c 95 ca b8 af 27 44 bb Data Ascii: c#skN-H}l*Ad}(!Hs!+oN>$<7X''qqwQa4\|Iz\|z7$S#qj?(E?g{H,lH-5 Qm{`BpTF_qqn/]"nGAN&c+I~PD&5Q&l#i>OQ0x77}i[jKcU@X-\|+\'D
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: d4 65 4e 2f 85 9d 7d ec 3c 49 ff 00 69 a6 98 ee fc 70 b4 ae bb f3 0c ea d6 7d 9a e5 8b 77 d5 6c 8d d6 57 a5 52 11 a3 9f 69 39 52 af 1c 51 7d 03 2c bd de 83 70 df ee 03 b1 6f 8e 8a 63 55 fd c4 7c 64 fa d4 b9 7e 24 3d 74 88 e9 4f 72 61 1d f2 2b 3a d3 a4 d1 9f 24 2c d0 e1 da de a0 aa 50 8a 4c dc 1c 0b 4f 73 2c 76 7a 6a e4 cf 4a f4 e1 30 72 74 92 95 0c 45 4b b7 6a 59 99 9f 9e 43 9c d1 b4 41 c8 74 65 4f 4c 0c c8 9e 33 ad 36 d0 f2 21 36 e8 cd 86 17 de 11 da 2f ed 6b c9 e5 2d c8 54 f7 7b 61 36 46 22 f4 f3 23 61 13 3c e8 47 ab 1c f1 d3 aa cc f0 46 20 d3 2f 56 e1 ec 6b ec b4 4c bf f3 90 f5 7f 47 31 c4 ab 09 7a 67 de 17 9e 23 50 ed 5b a6 85 41 6d 4f ab 38 dd 14 76 a8 2a 4a 35 93 a8 7c c4 52 79 e2 d9 e9 6d 87 ee 2f 9c 20 7c aa 73 4d 7a 85 15 c8 ea 4d d2 8e 7e 1e 02 Data Ascii: eN/}<Iip}wlWRi9RQ},pocU\|d~$=tOra+:$,PLOs,vzjJ0rtEKjYCAteOL36!6/k-T{a6F"#a<GF /VkLG1zg#P[AmO8v*J5\|Rym/ \|sMzM~
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 8d 1a 50 ad 0e 55 5d 79 fb 59 52 72 8d 06 fc 7d 5e ac 67 54 91 cc 25 cb 9d 5e b9 d3 bf 90 74 9a 1b 54 aa 0d db 4a 8c f1 13 27 67 9c 84 8c ea 14 b6 4e 88 36 55 5a 29 c6 80 76 68 5e ac 36 cd cb 1a ab 86 63 6a fd fa 0e 31 e4 cd b2 35 d5 5d 26 ad b9 b3 5b f7 fa 80 26 9e 7d 90 62 20 b5 f9 fc c0 e2 15 aa 8c f2 2f 80 f2 aa 67 4d a5 e0 76 f4 45 11 83 72 70 2f 56 15 d4 08 66 0c c6 c6 9f 48 43 86 de 51 59 cb e4 d7 0c 8e 1f 09 90 89 40 28 2a ab 50 c9 f6 ce c8 59 50 43 4a 43 72 53 52 97 6e 92 ec 68 26 78 c2 f8 ad 41 08 5e ea 11 c0 2d ab d6 6d fa 15 0c 6e aa a1 6a d0 64 1e a1 85 39 e7 5a d7 ea 4a 20 a3 e9 44 ea 86 4d da d4 b1 18 b4 42 f9 16 e2 6a 5a e1 d2 ad 47 a5 1a 9e 41 3b a3 3c 76 17 43 ea cf e8 d7 f0 45 5d 50 b5 1c 52 9e 37 5b 91 17 76 5f 22 d7 02 ec 77 7d 24 60 Data Ascii: PU]yYRr}^gT%^tTJ'gN6UZ)vh^6cj15]&[&}b /gMvErp/VfHCQY@(*PYPCJCrSRnh&xA^-mnjd9ZJ DMBjZGA;<vCE]PR7[v_"w}$`
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 23 ef ea cb 22 cc 84 8e b9 64 55 6b 2e 06 e5 82 46 81 a0 7c 69 59 32 46 8b 7a 99 58 a0 11 c8 ce 86 ce b5 fd ec b1 59 92 fd b9 5e f9 7a bb 99 23 ee 7c 31 6b 61 2d 71 ed c3 4b 79 4a 22 02 84 b0 e5 26 92 7b d0 c6 16 cb 8f 6c 3a 88 51 68 89 86 86 cc c8 cb 90 08 fa b9 33 b3 a7 54 1c c8 6b 39 38 11 f1 22 c7 20 fb 31 fd cc 71 1e 7b 4e 94 ea ac dd 39 6e d9 67 ee 2f 6f 10 e2 4a f3 3c 9b f6 7c 6b d3 86 c5 fa b1 5a c0 6f 21 3b 4f 89 df 85 8c c9 ab 32 69 f2 44 7c 86 a8 89 7a 65 a1 b8 52 fe 21 d3 0f 94 a9 c9 03 d5 38 ca 15 fa 84 88 c8 5e 20 92 e2 30 c3 80 c7 da 69 c2 7b 80 63 d4 ec e3 61 27 a4 41 96 13 d5 35 08 4d 58 5a d1 ae 0e c0 47 a9 e4 fd 1c 6c 70 41 ea 43 7b c6 0f 48 41 ca 4e e4 84 0e 1c 1b d3 e6 31 ed 9f 68 bf 8f 19 0c 09 dc 3c 13 6d 3d 51 15 7a 9e a4 28 70 dc Data Ascii: #"dUk.F\|iY2FzXY^z#\|1ka-qKyJ"&{l:Qh3Tk98" 1q{N9ng/oJ<\|kZo!;O2iD\|zeR!8^ 0i{ca'A5MXZGlpAC{HAN1h<m=Qz(p
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 28 b8 0e de 1a d9 cd dc ab 95 0d 00 cc fa 83 ea d9 e8 e1 d1 9b f5 15 63 13 89 4a 59 db 0e 11 db 8e 08 f2 e4 ac 69 7b dc 24 01 e2 cb 1b 81 d2 c9 0d f2 79 bb 39 de 7e 7c 49 1b 48 6c 69 fa 73 90 94 b2 0f 8f 4e 22 d3 13 79 3b 18 90 29 9e 5c 64 58 bc f1 a8 06 86 8f 08 e4 9a 9a b2 d9 ea 43 a0 c9 2d 42 39 97 38 c9 c7 0d 4e 04 34 bf d3 6c 2f 47 a8 b4 46 d6 6e 48 21 bc 24 f8 e5 ea 46 c0 0e b7 40 d4 f5 85 41 c8 8a 29 e9 b2 ef cf e2 47 3f 58 e5 a8 0a a9 b5 8b a9 04 eb d4 c8 a9 c5 f0 f1 e4 9c d1 eb 84 20 7b 3d cb 96 39 fe d4 4b b3 d4 06 d1 90 66 b7 2a 26 40 a1 1c f9 e0 12 58 16 23 67 ab 98 d9 86 88 f5 ba 6a 28 cf ac b5 8f 8d 7f 24 29 67 52 06 e7 bb 4a a0 84 56 b5 38 09 a7 08 ea b6 cd dd 6c 53 35 ea b4 13 34 71 cf ad 39 25 4a fa a5 0c c7 71 2a 75 38 75 6a 8e a8 86 72 Data Ascii: (cJYi{$y9~\|IHlisN"y;)\dXC-B98N4l/GFnH!$F@A)G?X {=9Kf&@X#gj($)gRJV8lS54q9%Jqu8ujr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49865	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	461	OUT	GET /sumbangan.com/public/campaigns/large/61cc0879319af_TELAGA_UNTUK_RUMDENG.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:50 UTC	670	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: image/jpeg Content-Length: 212968 Connection: close x-oss-request-id: 674319E5F5E04B3931C0CA3F Vary: Origin Accept-Ranges: bytes ETag: "759A23C1FEA5599EFC5B48FFA67CD800" Last-Modified: Wed, 29 Dec 2021 07:04:25 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15543557422211225266 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Thu, 30 Dec 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQNhiBgMDEmYKU8BciIGJlOGEzZjFlZmZjZTQ2Nzg4NmUwNGNkNzkwZjMwYzhk Content-MD5: dZojwf6lWZ78W0j/pnzYAA== x-oss-server-time: 1
2024-11-24 12:19:50 UTC	15714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 03 2a 00 00 00 00 ff c0 00 11 08 03 2a 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 Data Ascii: JFIFHHLExifMMi88"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstu
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: c3 4b 15 1a 4e 76 ed d3 cd f9 1f 3d c5 79 b7 f6 6e 12 58 b8 53 73 6b a2 b6 9d 9b f2 b9 ef 3e 25 f8 83 6b 23 98 c4 c1 8b 77 1c 8f 6c 9e d5 f3 57 89 9e ca e7 51 8f 57 76 76 f2 5d da 34 66 06 31 2b 0f bf 8c 67 76 33 8e 78 c9 c5 58 3e 25 f0 dc 92 8b 41 a8 db 49 23 10 02 89 15 b9 fc 0d 6c c3 e1 f7 d7 09 d1 6c 2d e4 b8 9a f4 95 58 e2 04 b9 24 76 c7 b5 7e 65 86 f1 2e 2e cf 15 86 4e 49 a7 1d 36 5d 6c de b7 47 e4 14 7c 5b 72 e5 fa e6 12 f3 e6 4e 3a 6c ba da fd 4f 07 d7 75 18 e6 94 39 01 9d 72 14 e3 24 67 d2 bd 3a db c3 d3 e8 5a 2d e7 80 d3 68 d5 75 28 6d ee fc 54 02 09 e7 b3 d2 37 89 22 b3 16 e1 e3 92 40 d2 08 e6 bc 11 48 1e 38 82 03 8c 3d 36 c2 cb 42 f0 3e b7 25 86 85 a8 27 88 7c 60 de 6f 93 35 ac 42 f2 0d 24 41 1f 9b 21 45 ce db bb f0 99 29 1a 92 a9 82 d9 66 c2 Data Ascii: KNv=ynXSsk>%k#wlWQWvv]4f1+gv3xX>%AI#ll-X$v~e..NI6]lG\|[rN:lOu9r$g:Z-hu(mT7"@H8=6B>%'\|`o5B$A!E)f
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: f4 cd 6b dc f8 06 08 5c 44 60 17 0c 54 71 14 87 83 9e e4 d4 71 f8 15 63 c1 7b 64 89 77 15 f9 a5 25 bf 2a a4 e2 c9 8c 5f 63 5b 46 f1 ce 91 0a 97 bc 48 f2 47 50 0d 7c 53 fb 54 6a ba 66 af aa 5c 5c d8 b6 c2 96 6a 54 67 a1 dc 79 af b1 d7 c1 77 32 ab 05 c2 a8 5d c3 05 bf ad 7c 49 fb 49 d8 cb a4 dd df db cd 1e d2 b6 a0 8c 9c ff 00 09 35 e2 e7 36 74 b4 3d bc 9a 52 55 76 3e 29 f8 5b 79 25 e4 3a c4 d7 f7 6f 72 cb 24 40 34 ac 49 ce 5b 20 7a 0a f5 3b 4f 10 69 12 6b 32 78 74 12 6e c3 19 36 81 c0 4c e3 af e7 5e 4f f0 81 9a e2 d3 59 67 42 85 ee 63 55 20 7a e7 fc 2b db ac 3c 27 a6 bf 88 17 c4 32 23 35 f2 c6 d1 e7 a0 c6 7f fd 75 f2 78 a8 47 9e cf 6b 1f 5b 42 b4 dd 3f 3b 96 a6 92 df ec d2 15 90 0f 9a 46 c0 af 10 b8 b8 8d 6e c4 b2 30 19 99 88 e7 93 f3 1a f7 5d 48 18 ac a4 Data Ascii: k\D`Tqqc{dw%*_c[FHGP\|STjf\\jTgyw2]\|II56t=RUv>)[y%:or$@4I[ z;Oik2xtn6L^OYgBcU z+<'2#5uxGk[B?;Fn0]H
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 4e 1a 9c 06 39 41 7d 8c aa cb e6 2f 3d 48 3c e3 e9 5d 18 3c 3c 2a 46 52 94 ac d1 55 22 d3 56 46 14 de 78 d7 63 99 af 42 4c d3 47 19 cc 60 2a b1 1c 12 a3 b5 7a 4f 8a b4 8b ef 0f 5b dc da eb 5b 32 25 44 57 53 83 20 75 ca b8 1f dc f7 f5 c8 af 3a d4 6c e4 be bc bc 11 aa ad c4 47 cd 88 ff 00 7c 02 38 cf b8 ac a8 a5 ba 37 8a 75 24 32 c8 19 4b 48 e4 b1 db 9c 8a e6 d1 ab a3 68 42 5c d6 47 67 6e b7 2d 7b 13 ce 8b 19 46 f2 a4 62 70 15 4e 30 6a 5d 7e 69 74 eb 75 31 0f 35 0c 81 55 d4 70 77 1e 3f f4 13 5d 17 87 ae b4 47 9a f2 e7 5a d3 66 bc 8d c1 65 48 a4 0a 50 fa 92 47 23 da b9 cf 1c f8 87 c3 57 da 6d a4 1e 1c 8e 58 65 59 43 b8 72 b8 52 99 e9 80 3d 6b 2e 47 7b 9d 13 76 f7 59 36 ab 0c b7 b0 2d bb 80 92 c7 23 38 04 7f 7b be 3e 95 c8 45 a3 4f a6 df 7f 6b 1f 9d 61 05 98 Data Ascii: N9A}/=H<]<<FRU"VFxcBLG`zO[[2%DWS u:lG\|87u$2KHhB\Ggn-{FbpN0j]~itu15Upw?]GZfeHPG#WmXeYCrR=k.G{vY6-#8{>EOka
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 97 64 d7 08 16 5c 8d c8 cc 9d c9 3d 0e 2a a5 bd dc 76 50 bb dc 28 69 27 f9 4a af dd 3e f5 2c 37 c7 53 27 4b 76 48 c1 52 14 f2 0f b0 35 9b 9c db 4e e5 ca 09 c4 f1 3b 6d 06 e6 df 52 91 65 5d 99 2c c4 13 c8 f4 35 5e e3 c3 53 dc 43 34 d2 af 98 e8 0b 02 0f f0 e6 bd 62 f2 11 e6 18 59 09 98 2e c6 27 1c d6 04 09 8b af b1 72 a8 72 b9 03 9e 6b d4 c3 62 65 26 a2 ce 57 45 ad 8d 7f 87 fa 6f d8 f4 83 7c 53 0d 72 dc 73 d0 27 4a d0 96 75 9f 52 9a e2 4c ec 85 4f 3d b3 5b 4e 53 4c d3 e3 b7 88 00 b1 ae 38 ae 36 fe 71 6f 60 dd 41 90 e4 f3 5f a3 60 e0 a1 4d 23 df a7 4b 96 29 1c a6 a3 30 b8 ba 79 07 f1 12 6b 8b f1 15 da c2 ca ac 7f 87 a7 bd 74 a0 97 3e 60 e9 ef 5c 2f 8a 54 dc 4b f2 67 2a b5 8d 79 36 8e 2c 5c ca 31 6a 10 ad b9 56 23 79 ef 5d a7 c3 f9 be d9 7b 7f 1b be 40 84 1e Data Ascii: d\=vP(i'J>,7S'KvHR5N;mRe],5^SC4bY.'rrkbe&WEo\|Srs'JuRLO=[NSL86qo`A_`M#K)0ykt>`\/TKgy6,\1jV#y]{@
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: de e9 e9 fa a2 b3 69 77 68 a3 2c d0 c8 00 1d 49 da 6b f3 eb f6 04 fd 91 ac fe 02 78 67 57 f8 89 e2 8b 40 7c 73 e3 5b 89 a7 98 b8 f9 ac ec 5a 52 d0 db 27 a1 23 0f 21 ee c4 0e 8a 2b f4 5a 8a f6 89 f2 22 79 12 24 32 48 42 aa 82 58 9e 00 03 a9 af e5 bf fe 0a 61 fb 62 5d 7c 76 f8 88 ff 00 0b 3c 0f 73 bb c0 9e 12 95 93 7c 67 8b fb e5 c8 92 76 f5 8d 3e ec 63 d8 b7 f1 60 7f 51 77 56 d0 5e db 4b 67 72 81 e1 9d 1a 37 53 d0 ab 0c 10 7e a0 d7 f1 e5 fb 66 7e ce 77 bf b3 af ed 1b 7b e0 40 86 2f 0e eb 12 0b fd 26 77 e2 36 b3 b8 72 02 e7 a6 62 60 c8 47 50 00 3d 08 24 2a 16 be a7 cc 1a 6d a4 89 e1 fb fb fb 7b 46 96 70 53 32 7f cf 28 b3 c9 c7 b9 ef 5f 44 fe cb 96 92 af ed 11 f0 9a 69 a3 c3 1d 76 cd 95 c7 2a e8 ce 39 cf a8 3c 11 5e 11 af b6 af e1 fb fb fb 0b 1b 96 e0 34 33 Data Ascii: iwh,IkxgW@\|s[ZR'#!+Z"y$2HBXab]\|v<s\|gv>c`QwV^Kgr7S~f~w{@/&w6rb`GP=$m{FpS2(_Div9<^43
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: b5 40 92 4f bb ef 9e c2 ba 8d 27 48 8a dc bc b2 c0 8c 83 e6 18 e4 83 ea 28 f6 dc c7 54 20 92 d0 e8 ed e0 5c ee 6c 48 3d 6a ec 30 5a 48 c5 93 68 29 de ab da 98 6e a4 10 44 ac 5f 38 03 07 9f ca b6 63 d1 35 ed a7 ec fa 7c f2 06 19 52 22 62 31 f9 56 a8 1c d2 dc c9 b8 96 ca 35 3b d9 72 3b 13 8a e7 24 9a 09 a7 da 00 70 07 38 6d d8 1e e2 bd 63 c3 ff 00 0a 3c 6d e3 3b b5 48 f4 e3 6f 14 64 06 9a e1 76 a6 3d bd 7f 0a f7 9b 3f d9 5f 40 16 60 df 5f c8 2f d8 10 cf 1a 00 a7 db 1d 7f 5a ea a5 84 9c b5 48 e2 af 9a d1 a4 ed 29 6b e5 a9 f1 ab 3e 97 6b 6e 3c ed 8b 1f bf 3f 37 7a e7 9a fb c3 f2 f9 b1 bc a0 aa fc c5 0b 9d bf 96 71 5f 73 27 ec b1 a5 dc c9 15 a6 ab aa 19 ac 23 72 fb 12 20 92 31 3d 8b fa 7e 15 de e9 3f b3 5f c1 bd 21 b7 a7 87 e2 99 f3 9d d3 33 48 7e 9f 31 f7 fc Data Ascii: @O'H(T \lH=j0ZHh)nD_8c5\|R"b1V5;r;$p8mc<m;Hodv=?_@`_/ZH)k>kn<?7zq_s'#r 1=~?_!3H~1
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: f1 55 20 fb 13 5f 70 57 e7 a7 fc 14 e3 4a b8 d4 bf 65 cb f9 a0 52 df 61 d4 ec 66 7c 76 4d c5 49 fc d8 57 14 77 3a 59 f8 b7 fb 1a fc 20 87 e3 0f c6 5b 0d 22 f9 c4 56 96 4b e7 16 75 de a6 53 9f 2d 4a e4 64 70 5b af 6a fd d3 5f d9 37 52 03 e6 f1 0c 44 7f d7 b1 ff 00 e2 eb f3 17 fe 09 8b 67 17 fc 2c 4b cb b3 80 e9 71 6e 09 3e 9e 5c b8 fe 66 bf a0 d6 b8 81 07 cf 22 a8 f7 20 57 5c eb 4a 09 28 f5 39 94 14 9b b9 f2 05 a7 ec b9 77 6e 46 fd 72 36 c7 a4 04 7f ec f5 27 88 fe 0a 9f 0a e8 57 9a f5 c6 ad 11 8a c6 3d ed ba 3d 80 8c 81 cb 17 c0 eb 5f 61 0d a4 64 74 af 99 7f 6c b7 2b fb 2f 7c 45 75 38 23 4c 3d 3f eb a2 52 58 ea 97 d5 94 f0 f1 3e 6c b1 d6 34 9b a7 68 6c ae e2 9d d4 64 ac 6e ae 40 f5 c0 3d 39 ad 68 ee 0b 1f 96 bf 27 ff 00 61 e7 9a 7f 8a fa a0 77 2c 3f b1 e7 Data Ascii: U _pWJeRaf\|vMIWw:Y ["VKuS-Jdp[j_7RDg,Kqn>\f" W\J(9wnFr6'W==_adtl+/\|Eu8#L=?RX>l4hldn@=9h'aw,?
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 8e db 4d 81 48 5b 78 8c ef ea 38 51 f8 d7 99 53 13 29 2d 0e f8 60 e2 b7 2b ea 0d af f8 c3 51 7d 63 c5 57 d3 6a 97 52 b6 59 a5 72 f8 1e c0 f4 15 af 6b 63 1c 63 cb 85 37 f1 f7 54 7c a3 eb 5a 09 69 1c 40 7d a6 5d c7 fe 79 47 db eb 8e 6b 44 b5 c9 8c 24 28 b6 f1 0f c5 f1 ef d8 57 36 af 73 5b 14 a5 81 60 8f 7d c3 ac 4b 8c 6d 1c 9f a7 ad 58 b2 9e 5e 3e c9 18 45 eb b9 c7 27 fe 03 d6 a5 b6 81 24 63 f6 78 cc ce 7a bb 75 fc ea db 59 cf a7 c5 f6 ab f6 58 d7 3c 2e 71 9f ea 7f 0a a1 99 37 97 16 36 da 92 43 ab cc 43 4e 99 8e 62 4a 98 dd 4f 40 c3 a7 d2 b5 1d ef 76 ab 2b ad e4 7d 14 9c 6f c7 61 91 c1 a4 d6 35 0d 07 53 b3 86 de 6b 33 12 2e 41 70 a7 69 c8 f7 e4 fd 6b 93 1a 15 c5 b3 19 7c 39 7b 85 c9 f9 37 6e 5f c5 4d 05 44 bf 75 6d a7 ea 45 bc d5 fb 3d c0 fe 17 18 24 7b 76 Data Ascii: MH[x8QS)-`+Q}cWjRYrkcc7T\|Zi@}]yGkD$(W6s[`}KmX^>E'$cxzuYX<.q76CCNbJO@v+}oa5Sk3.Apik\|9{7n_MDumE=${v
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 8c 37 63 e5 c7 1d 94 7b 0a fa 18 4f 98 f9 89 c2 c7 57 e1 bf 13 78 7f c5 f6 0b 7f a0 dc ad ca 8c 6f 42 0a cb 1b 1f e1 74 38 23 f2 ad f0 07 dd 1f 7b b8 26 be 50 b1 b4 8e 29 bc d8 41 b6 b8 77 18 78 be 46 c6 ee c4 57 b8 eb 5f 10 3c 51 e0 9b cd 2a ca ce 08 b5 db 39 d4 f9 82 e7 89 01 18 fb af 8c f4 27 ad 6a e4 90 58 f4 95 8c a9 fb a4 7e 15 72 04 60 78 18 fc 2b 8a f0 f7 ed 0f f0 6f c4 b1 98 b5 69 db c3 77 ab 9c c7 74 bb 54 e0 ff 00 0b 8c 83 f8 81 5e f3 e1 4d 7b e0 ae bc 23 11 f8 a6 da 57 72 06 16 78 c0 3e c0 75 ae 4a f5 f9 55 d1 d9 4b 0a d9 c4 88 67 65 c2 82 7f 0a 91 2d 2e c9 03 63 66 be b7 b6 f8 73 e0 f4 b7 17 66 39 44 18 0c 24 32 28 42 08 e0 e6 ba 3d 23 c0 5e 03 9e 33 22 46 67 07 3c f9 80 81 f9 57 97 3c e6 1d 4e f8 60 2c 8f 8d 22 d2 b5 67 e6 38 d8 d5 d8 f4 1d Data Ascii: 7c{OWxoBt8#{&P)AwxFW_<Q*9'jX~r`x+oiwtT^M{#Wrx>uJUKge-.cfsf9D$2(B=#^3"Fg<W<N`,"g8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49870	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769242 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 41 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450789\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49871	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769239 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 40 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450789\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49872	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1431	OUT	GET /api/mobile/doa/liked/visitor/769243 HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450781\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 39 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450789\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49869	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	672	OUT	GET /sumbangan.com/public/organization/258/logo/logo(1).png HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:50 UTC	699	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:49 GMT Content-Type: image/png Content-Length: 505762 Connection: close x-oss-request-id: 674319E59CAEC93830F8D3D4 Vary: Origin Accept-Ranges: bytes ETag: "03DBB20031EBE1ABC0DA7441BD97911E" Last-Modified: Fri, 12 Nov 2021 06:51:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10002310511675317556 x-oss-storage-class: Standard x-oss-meta-mtime: 1629949766 x-oss-expiration: expiry-date="Sat, 13 Nov 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQLhiBgIDsrdXL6BciIDQ4ZjdjZDhhMmNjZDQ5NjViNzllZTBmZjdjYWM4MDBk Content-MD5: A9uyADHr4avA2nRBvZeRHg== x-oss-server-time: 7
2024-11-24 12:19:50 UTC	15685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 24 f3 00 00 15 0b 08 06 00 00 00 a9 94 f4 77 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd cd 6d dc d8 d6 36 d0 73 06 1c 4b 19 48 63 4e 2c 30 01 09 60 00 ed 0c ae 43 30 18 c1 1b 01 e1 10 d4 19 c8 01 10 28 25 40 94 26 1c 97 32 28 8d 39 d8 1f e8 8f e5 5b b7 5a dd 76 db fa a9 9f b5 80 83 53 2a c9 72 69 6f ce 9e c1 93 23 22 01 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 31 1b fb f2 e6 1f fe bc cb f9 fc c8 55 4a e9 fc 37 c7 34 fd 8e b3 17 1a f5 53 4a 69 f9 9b bf 63 fd 93 bf 63 39 ff ec b3 8a 6a 58 fc e6 e7 00 00 00 00 00 00 80 bd 90 9b ee 25 72 c1 f7 b0 8e b6 fe dd fc 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 46 8e 08 db 02 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$wpHYs.#.#x?v IDATxm6sKHcN,0`C0(%@&2(9[ZvS*rio#"1UJ74SJicc9jX%rF
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 e0 09 0d 7d f3 3a c9 79 92 13 bb 03 00 00 00 c0 de fa 98 64 31 99 6e 3e 49 0c 00 87 a7 b4 dd 78 dc ff 2c c9 91 fc 00 00 00 00 b0 f3 6e c6 b7 bf ba 9a 5d 4b 09 00 00 00 00 00 00 00 00 00 00 00 b0 3d 4a ad 55 0e 00 00 00 00 00 00 00 00 00 00 00 80 27 30 f4 cd 71 92 f1 68 ef 5b 7b 03 00 00 00 c0 41 b8 1b bf 09 4e a6 9b 73 b9 01 e0 30 94 b6 3b 4d b2 4e 72 22 39 00 00 00 00 ec 9d f7 49 ce eb 6a 76 2b 2d 00 00 00 00 00 00 00 00 00 00 00 c0 f3 2b b5 56 19 00 00 00 00 00 00 00 00 00 00 00 00 1e d9 d0 37 af ef 8f f6 be b0 35 00 00 00 00 1c 9c 8f 49 ce 26 d3 cd b5 f4 00 b0 bf 4a db 2d 93 bc 93 18 00 00 00 00 f6 da e7 24 8b ba 9a 5d c9 0c 00 00 00 00 00 00 00 00 00 00 00 f0 bc 4a ad 55 02 00 00 00 00 00 00 00 00 00 00 00 80 47 32 f4 cd 71 Data Ascii: }:yd1n>Ix,n]K=JU'0qh[{ANs0;MNr"9Ijv+-+V75I&J-$]JUG2q
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 00 00 00 30 6c c7 11 b1 28 aa 7a ac 4e 00 00 00 00 00 00 00 00 00 00 00 c3 77 a4 46 00 00 00 00 00 00 00 00 00 00 00 c3 d6 b5 e5 22 22 ce 95 09 00 00 00 00 00 00 00 00 00 00 00 00 00 9e d5 69 44 34 45 55 8f c5 0c 00 00 00 00 00 00 00 00 00 00 30 6c 47 ea 03 00 00 00 00 00 00 00 00 00 00 30 5c 5d 5b 7e 8c 88 73 25 02 00 00 00 00 00 00 00 00 00 00 00 00 80 17 71 1a 11 4d 51 d5 63 71 03 00 00 00 00 00 00 00 00 00 00 0c d7 91 da 00 00 00 00 00 00 00 00 00 00 00 0c 53 d7 96 17 11 f1 ab f2 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 8b 3a 8d 88 85 c8 01 00 00 00 00 00 00 00 00 00 00 86 eb 48 6d 00 00 00 00 00 00 00 00 00 00 00 86 a7 6b cb b3 88 b8 54 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 78 15 ef 8a aa 5e 88 1e 00 00 00 00 00 00 00 00 00 00 60 98 8e d4 05 00 Data Ascii: 0l(zNwF""iD4EU0lG0\][~s%qMQcqS:HmkTx^`
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: a6 6b a1 d0 00 30 40 45 55 e7 d9 ee b8 0b f1 7d a1 87 30 18 3f 05 fb 9e a5 e5 fc 4c db 80 c7 d2 ed 03 2f ba f5 82 bd 60 86 ec 2a 22 66 f6 b0 36 df dd ee fe 5e b7 67 79 34 f6 5a 00 a3 96 67 c6 93 9d db eb d3 b1 17 62 93 15 55 bd 1d 11 e7 11 f1 72 ec b5 e0 ab bb c8 df 21 69 39 3f 57 5a 80 61 6a 9b f2 b0 3b fb 33 1b c3 b0 7c e8 ce ff 4e 27 d3 f5 8d de c1 7f 15 55 3d eb ce ab dc db 00 00 f8 23 f9 8c ec 20 2d e7 66 2a 00 00 00 00 00 00 00 00 00 00 e0 67 8a 94 92 8a 00 00 00 00 00 00 00 00 00 00 00 bf d2 36 e5 a5 50 48 80 d1 ca c1 61 27 93 e9 7a e5 2d 00 00 c3 d3 05 fd e7 00 df 63 73 1d 6c 84 1c 40 95 d7 e6 ab b4 9c 5f 6a 29 f0 58 da a6 5c 74 41 c9 af 14 99 81 b9 8a 88 d9 64 ba be d7 b8 cd 75 b7 bb bf dd cd 38 f9 b5 35 f6 7a 00 74 3e 9e e7 ec dc 5e 3b cf d9 50 Data Ascii: k0@EU}0?L/`"f6^gy4ZgbUr!i9?WZaj;3\|N'U=# -fg6PHa'z-csl@_j)X\tAdu85zt>^;P
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 72 da ab 07 3a 5f 8a 03 78 06 0f 11 f1 43 a7 3f bb 10 76 b3 95 69 36 8a 88 eb 86 0e 54 1c 75 17 f3 fb 06 1c 07 00 6b b4 1a ac f1 41 a6 00 c0 86 ec 47 c4 24 c9 8b 03 01 03 3b e2 a2 a1 f7 f6 00 00 fe ca 49 99 66 e7 92 01 68 97 e5 b4 37 a9 bf e3 d5 0a 00 6c c8 c9 ea 7a 03 78 21 d5 78 78 5f 8d 87 f5 be bf f7 3a 00 00 9e 89 77 12 01 00 00 00 00 00 00 00 00 00 e0 5f ec 09 03 00 00 00 00 00 00 00 00 00 00 fe d7 c5 6a 98 3d c0 26 dd 46 c4 a0 d3 9f 5d 49 b9 b9 ca 34 3b 28 d3 ac ee e8 43 43 cf 0d 3f 75 17 f3 eb 06 1c 07 00 6b 94 e4 c5 71 44 b8 46 00 00 36 ed c8 35 07 b0 0b ca 34 ab 87 26 bf 55 36 00 b0 65 7e 2e d3 ec 58 69 00 ed b0 9c f6 46 11 71 a6 4e 00 60 c3 ce 56 d7 1d c0 0b aa c6 c3 f3 88 f8 21 22 1e f4 00 00 6c d8 49 92 17 a7 42 06 00 00 00 00 00 00 00 00 00 Data Ascii: r:_xC?vi6TukAG$;Ifh7lzx!xx_:w_j=&F]I4;(CC?ukqDF654&U6e~.XiFqN`V!"lIB
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 12 34 a4 6f bd e8 f8 ed 0f 00 80 7d d1 d7 04 b0 ef 36 d3 c1 e5 fd df ab 3b 65 01 c0 a3 1d d6 26 73 f7 a2 01 00 00 00 00 00 00 00 00 00 f8 4e 21 0e 00 00 00 00 00 00 00 00 00 00 d6 8b 4e f9 e2 ef c3 ec 83 80 d7 57 be 50 7f 58 ef 2d 6f 65 bb 1b ab 56 7b 14 11 7f e6 b0 d6 c4 9c e6 1e 00 40 8e 6a 93 79 37 22 1a ca 07 00 60 4f 18 e8 4b 8e 7c ee 01 00 d8 95 63 49 43 16 5c 67 02 00 b0 2f ec 4d 81 4a d8 4c 07 97 11 31 d2 16 00 3c 89 ff 3b 01 00 00 00 00 00 00 00 00 00 f8 4e 21 0e 00 00 00 00 00 00 00 00 00 00 22 62 2c 04 d8 8a 7e bd b7 fc 22 da dd 58 b5 da dd 88 f8 33 87 b5 26 e6 e3 c1 cd b5 ef 09 40 9e 86 7a 07 00 60 8f 18 e8 4b 8e 8e b4 0e 00 c0 ae ac 5a 6d d7 5d 90 3e df 73 00 00 f6 45 63 bd e8 d8 9f 02 95 b0 99 0e ce 23 e2 5f da 02 80 47 7b 57 9b cc 3d f7 04 Data Ascii: 4o}6;e&sN!NWPX-oeV{@jy7"`OK\|cIC\g/MJL1<;N!"b,~"X3&@z`KZm]>sEc#_G{W=
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 80 b7 49 e4 05 00 00 00 00 00 00 00 00 00 f0 22 07 5e 72 2a e3 34 2b 0d 89 df 8f 41 1b 6e 82 28 f8 cc 03 d0 56 06 cf 00 00 d0 54 0f 9a 23 76 9d f9 b4 1e 6a 3d 8b 3d 07 00 00 5e d6 99 4f 47 22 82 68 78 bf 05 00 80 26 9b 68 0f 80 13 fa 22 7c 00 36 f0 e9 dd d7 6f 97 82 02 00 00 00 00 00 00 00 00 00 d8 5c 22 2b 00 00 00 00 00 00 00 00 00 80 17 5d 8b 87 13 71 38 f7 1e 2c ba bd 3a c7 cf 8d bf 11 62 61 d8 21 00 6d 65 00 1a 00 00 4d 65 bf 06 fe 31 92 03 00 00 2f b8 13 0e c4 23 cd ca 65 08 61 a6 72 00 00 1a ca f3 3f 00 4e a6 2a f2 c7 10 c2 5f 1a 00 60 03 ce 37 00 00 00 00 00 00 00 00 00 00 78 83 44 58 00 00 00 00 00 00 00 00 00 00 2f 72 d8 25 a7 70 9b 66 e5 a3 e4 77 b3 e8 f6 2e 43 08 fd 26 df 03 d1 31 1c 06 80 b6 f2 37 0e 00 80 a6 9a 68 0e Data Ascii: I"^r4+An(VT#vj==^OG"hx&h"\|6o\"+]q8,:ba!meMe1/#ear?N_`7xDX/r%pfw.C&17h
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 89 f9 49 61 a3 b5 c9 8a da 07 96 5f e0 f9 f8 f4 28 22 7e 1e fc 42 61 3c 1e 75 09 00 ec 43 57 95 fd 9e e8 83 b0 01 80 37 f6 71 7b df 01 40 62 f2 b6 e9 af df ff d8 0e 66 07 80 a9 5b f5 03 65 f3 b6 79 98 7a 10 00 0c da c5 f6 37 0b 00 e0 2d cd b3 a2 76 de 19 00 18 95 ae 2a ef 22 e2 49 ab 00 7b f3 bd a8 01 00 00 00 00 00 00 00 00 80 54 cd 34 07 00 00 00 00 00 00 00 00 00 c0 40 dc 28 e2 c5 ce 13 59 27 8c 85 e1 36 00 c0 de 74 55 79 19 11 d7 12 07 00 de c8 6d 57 95 17 c2 05 48 57 de 36 0f fd 60 76 43 4b 01 98 b8 55 ff 7b 98 b7 8d 77 b9 00 0c 5a 56 d4 eb ed 1e 6e a3 29 00 e0 8d bc cf 8a fa 41 b8 00 c0 48 5d 29 16 60 7f be fb f5 b7 b9 b8 01 00 00 00 00 00 00 00 00 80 14 cd b4 06 00 00 00 00 00 00 00 00 00 a4 e2 8f df 7f f0 01 c8 71 bb 99 7a 00 3b 30 6c 1f 00 00 c6 Data Ascii: Ia_("~Ba<uCW7q{@bf[eyz7-v*"I{T4@(Y'6tUymWHW6`vCKU{wZVn)AH])`qz;0l
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: c0 df 93 5e 6b fd a6 86 00 00 00 00 00 00 00 00 00 00 00 6f a3 ad ee 00 00 00 00 00 00 00 00 00 00 8d f6 c3 c1 33 0d 36 6a 7a 01 00 00 00 80 bf ae 2a 8b f5 c1 bf c9 e9 df 2d 67 6b 3c 79 6c 08 f0 53 66 55 59 ac 44 08 00 00 00 00 00 00 7f 5f 67 38 7f f6 6b ae 6f cf 0f 7f fa 7a e5 97 f8 f7 03 00 00 f0 6c d2 6b b6 df 94 13 00 00 00 00 00 00 00 00 00 00 e0 6d b4 d5 1d 00 00 00 00 00 00 00 00 00 a0 b9 3a c3 f9 4c fc df 5b 76 fb bd 88 38 a8 d3 9e 00 00 00 00 aa b2 58 44 c4 a2 f1 85 00 00 00 00 00 00 80 2d d0 19 ce a7 72 04 00 00 d8 0a 5e df 01 00 00 00 00 00 00 00 00 00 00 bc a1 1d c5 07 00 00 00 00 00 00 00 00 00 68 ac 33 d1 3f 6a 54 c3 3d 01 af cb 79 00 00 00 00 00 00 00 00 00 00 00 00 00 80 1f aa ca 62 16 11 37 aa 04 00 00 00 00 00 00 00 00 00 00 f0 36 76 d4 Data Ascii: ^ko36jz*-gk<ylSfUYD_g8kozlkm:L[v8XD-r^h3?jT=yb76v
2024-11-24 12:19:50 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 bf 35 94 09 00 00 00 00 00 00 00 00 00 00 1d 32 56 16 d0 26 cd b0 7f 00 e0 19 0c 16 f9 7c b0 c8 eb 01 24 d7 cd 40 3a 00 00 fe be 8b ed 72 66 98 1b fc 4a 99 a4 f3 88 a8 87 5a 1f cb 05 00 00 e8 b0 d7 11 b1 2a 93 74 a2 44 fa aa 2a b2 7a 8d ff ca 1b 00 00 e8 a9 c3 66 5d f0 a1 2a b2 4d 55 64 57 55 91 39 df 0c 00 00 c0 53 f8 28 55 00 00 00 00 00 00 00 00 00 a0 8d 86 5a 01 00 00 00 00 00 00 00 00 00 3a e0 5e 49 1e 6e d9 30 74 0e 68 1b c3 6e 00 e0 89 0d 16 f9 7c b0 c8 37 11 71 dd 0c 9f 03 00 e0 eb fc b8 5d ce 6e 64 06 bf 28 93 74 5c 26 e9 4d b3 c6 38 10 0b 00 00 b0 07 8e 23 62 55 26 e9 85 32 e9 a9 2b c5 03 00 fc ac 3e 5b 75 19 11 3f 55 45 76 57 15 d9 45 55 64 ce 3a 03 00 ec 89 ed 72 b6 d2 25 b0 63 9e f9 00 00 00 00 00 00 00 00 00 00 b4 d2 0b b5 Data Ascii: 52V&\|$@:rfJZtDzf]*MUdWU9S(UZ:^In0thn\|7q]nd(t\&M8#bU&2+>[u?UEvWEUd:r%c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49873	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769237 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 37 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450790\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49875	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769238 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 38 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450790\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49874	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:49 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769236 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:50 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 36 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450790\|1732450761;Path=/
2024-11-24 12:19:50 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49868	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:50 UTC	459	OUT	GET /sumbangan.com/public/campaigns/large/6593a1d2ca704_BANTUAN_KEMANUSIAAN.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:51 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: image/jpeg Content-Length: 186471 Connection: close x-oss-request-id: 674319E6F3A6953030CCB0BD Vary: Origin Accept-Ranges: bytes ETag: "A8C6CEBB088AC7D08ADAE9CFFD1E009E" Last-Modified: Tue, 02 Jan 2024 05:40:34 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 4824979570195105073 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 03 Jan 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: qMbOuwiKx9CK2unP/R4Ang== x-oss-server-time: 1
2024-11-24 12:19:51 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:51 UTC	16384	IN	Data Raw: e1 9d 37 2f 1c b5 b1 ae 22 e5 c3 2e 1a dc 55 8d ee 5b ee 47 4f 02 c7 46 65 3d ee 22 d9 86 f7 05 77 3c 1f 0f 61 bd bf 73 72 25 12 7a 3c 92 9f 19 25 92 2c 83 df 88 1d 58 f1 9c df 31 25 ed 9b 1a da 3b 43 5b 89 c1 1e 12 6f 38 e8 d1 3c b6 81 f5 d7 ea 43 7e d0 4d c4 c3 40 78 e9 01 95 9e cc d9 9d c4 0f af 6e 22 75 83 82 6c 7b 08 82 61 9f b3 44 4e 07 b1 ca 19 ec d2 80 dc b9 d7 b9 0e 1b 64 9f 86 e5 f3 30 ed 5e 7c 33 0c 2d b5 8a 4e 9b a1 ea 46 33 01 ed 2c cc 30 77 ee 0b b4 89 c3 cc b3 67 3b 9a 37 73 32 e2 00 1d c8 b0 08 f1 c6 cf e3 21 b8 0e e2 e2 1e e2 68 41 ed 04 bd b8 32 6e 40 db 68 b0 0e 38 14 12 47 2f 92 78 c8 d9 dc 02 3a 88 80 42 5b b7 db 0d 04 84 6c ea 86 ef 87 6d cf 93 87 42 54 0d cb 6c 62 08 78 70 2d 60 6c 43 ea 07 0e 24 8f 38 97 b4 41 8d ea c6 fb 38 c8 2f Data Ascii: 7/".U[GOFe="w<asr%z<%,X1%;C[o8<C~M@xn"ul{aDNd0^\|3-NF3,0wg;7s2!hA2n@h8G/x:B[lmBTlbxp-`lC$8A8/
2024-11-24 12:19:51 UTC	16384	IN	Data Raw: 38 7b 32 99 27 87 ff 00 74 39 95 8f fd 11 9f fb f8 f3 f2 9e 6a e6 59 26 6b 27 04 b4 da 5b 23 4e 3f 74 ef c3 9f 41 91 cf d9 32 d6 83 8e 7b d2 a8 23 df 48 f6 e4 fd 11 46 3c c2 5c 65 e2 bc c8 aa 46 93 2a 1f 98 de 04 f6 64 f2 3c 63 b8 4c 9f cc 91 8d 1d 75 91 ab 3f f7 f1 ad 98 3c a0 f9 4e 64 83 39 b8 03 b6 53 95 b4 a4 6e db df 16 f8 b5 a7 9d 3f b6 0d 7f 95 84 78 b2 e2 83 97 be 6e 46 ce 4c 61 a0 e3 b6 bb 7e b7 db 8d ef ec 47 e6 5b 87 d9 51 54 64 6c e5 de b9 8d 03 38 59 5a a1 7c ff 00 60 ba 56 2a c7 0f c7 a4 ff 00 8c c2 26 43 c5 b3 11 f6 23 88 da 1d 89 9a ec da 12 b8 d4 95 8a a9 11 91 d4 86 04 ce 86 f3 8a 5e 61 30 a4 9e 86 dc c5 83 d3 b0 72 8f 46 b1 ae da e3 4f fb 17 39 17 20 ab 6b 79 e6 62 54 f2 ec 1d 22 93 1b 72 33 41 30 e7 46 d8 6d 7c cb c7 ce d0 81 c2 3f 64 Data Ascii: 8{2't9jY&k'[#N?tA2{#HF<\eFd<cLu?<Nd9Sn?xnFLa~G[QTdl8YZ\|`V&C#^a0rFO9 kybT"r3A0Fm\|?d
2024-11-24 12:19:51 UTC	16384	IN	Data Raw: 7e 45 7f ad 73 df f3 86 65 fe fe 3e 7f 52 db 91 57 eb 5a f3 fc e0 99 7f bf 8a 2f 45 67 d6 f8 0f 52 7f e9 29 c7 4a 98 1f ea fd 05 53 ec 2f 7f c4 85 7d ff 00 be 2a ff 00 53 04 45 39 7c 51 75 5d 41 9e 93 47 32 4d 92 c6 c4 c7 b4 2e 85 f6 29 8d df 95 b9 41 94 1c 9b 28 a7 14 e6 5c c8 9a 53 12 14 2d 6f 9c f3 ba 59 2e 1b 42 70 c4 8b 21 56 a5 29 5a 51 87 de 8c 61 ca d2 b4 fa a4 6d 8f 68 90 bb 24 c4 8e 78 3c 2d 0b b2 94 69 c2 2d 0a 84 54 1e 66 e3 86 6e 62 0c 5f 30 cb 7a f0 63 21 5c cb 5a 1d 1f 26 ee 0b 67 4d d5 0d 88 dc 42 96 84 68 18 fa 97 60 bc d8 cb 7c e4 9b 54 0d df 53 f2 79 89 11 b1 20 66 b6 5d 1c 68 74 cc 8a 1f 33 27 72 fa 4c 54 74 9d d9 0e c2 5c 81 cd 6d 97 47 1b e3 86 7a 9e 60 bd e1 eb 1f 22 fc bf f6 83 c9 f2 9c 13 90 08 73 09 e8 fa 69 e6 8f 7e f7 67 fe 8a Data Ascii: ~Ese>RWZ/EgR)JS/}*SE9\|Qu]AG2M.)A(\S-oY.Bp!V)ZQamh$x<-i-Tfnb_0zc!\Z&gMBh`\|TSy f]ht3'rLTt\mGz`"si~g
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 99 27 73 3c 93 ca 29 cc e5 0f 47 bb 1a f6 94 22 60 85 a3 05 fd 38 b0 29 b7 95 3b eb 62 6d 57 cb a6 43 f5 da a1 6b 1e 9f b9 2f 08 8e fc 82 2a 5c c2 6f 5d b5 cf 32 51 18 90 dc 63 6e 75 3e 01 c1 e4 ac b2 e6 6e c8 da 6e ec 68 40 d6 bd 0b 2e b4 7e fc 35 ec 73 46 d8 6d 22 30 8e 8b 68 dc 26 e2 fe fc 38 cf 09 53 36 60 41 92 5c d1 d2 dd 78 a2 2c 15 61 eb 7b ea d7 09 9c 54 65 96 8c 9d 2d 22 98 34 0b 51 ef 98 62 bc 8f c8 88 ec b6 fa 90 56 d1 55 3f 01 24 9c 41 86 39 c4 cc 84 66 46 cf 65 ce d1 6c 88 d7 df 47 5e 1e d9 ec 6f 6e 6c c6 df 1f 70 7f cd 09 1e 4f 24 f3 6d 9d b3 27 62 da b1 70 05 ac 24 dc 5e 84 f8 7d f8 5f 30 97 b3 72 3b 84 0f cc 5f ff 00 18 7b 85 b8 9b d2 69 d4 34 30 4c 25 e4 73 53 8d b3 90 84 ed 76 3b 8b fc 38 8d d6 14 7b 76 52 b7 f3 29 4f 8a 2c 0d ce b5 a3 Data Ascii: 's<)G"`8);bmWCk/*\o]2Qcnu>nnh@.~5sFm"0h&8S6`A\x,a{Te-"4QbVU?$A9fFelG^onlpO$m'bp$^}_0r;_{i40L%sSv;8{vR)O,
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 77 fa ca 1c 65 1d 1b 2b 53 ee 23 18 5b 51 9b d7 bd ef a0 87 ce 1c 33 7c f3 69 73 32 94 03 68 fb 24 2d 0a b4 20 7a 7c 1e e7 cd 81 34 1c be 64 46 6f 44 69 18 0e 46 d6 d0 10 3b 5a 37 13 ba 35 7a d0 f0 f2 83 93 8f c7 66 f2 13 74 21 25 db 01 8c d3 41 97 b5 25 7c 34 75 d4 bd 5e 18 8f ce 28 7a 6e 5a dd bc c9 f3 c7 7a c9 25 23 77 96 da 6b 43 73 0d 62 d0 84 38 d7 c4 24 0e 60 ee d8 9f 0e 20 6d b8 cd eb dd f1 d0 80 78 41 cc b6 76 cc 4d 2e 1d 81 ad b8 50 d1 da d1 71 09 ef 93 d6 f8 60 b9 a3 89 39 65 6c db 09 e4 b8 6b 69 70 68 d9 dd 2d 06 26 a5 f3 e3 71 7f 3b cd 89 41 28 ba 1e 97 66 e2 40 da 43 31 9d 3d 19 00 e0 cf c6 d5 0b 46 b3 36 59 10 81 dc c5 76 f4 a7 76 11 ce 32 ff 00 2f cb 50 11 eb e9 0c de 97 b0 e0 84 73 c5 42 da f0 f4 68 30 d6 91 ab b4 88 cb 6d 96 fb 22 42 3a Data Ascii: we+S#[Q3\|is2h$- z\|4dFoDiF;Z75zft!%A%\|4u^(znZz%#wkCsb8$` mxAvM.Pq`9elkiph-&q;A(f@C1=F6Yvv2/PsBh0m"B:
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 73 07 23 98 32 26 d6 45 8d 93 57 1b 18 34 2e 66 3d 4b df d7 cf 85 a8 03 95 ed c4 71 69 e5 f4 01 cb b1 ac cd 3e c5 6e 81 a3 9f 0d af 56 f7 e0 44 25 c2 4b 5c bf 79 79 95 04 94 4e 63 db b3 75 19 1d 45 c1 2b ac 28 b7 b3 41 ec d7 89 2e 1b 82 3b 43 62 6b b2 35 f9 fc dc f0 1c 56 14 7b 97 84 19 7a 44 72 b3 bd db cc ce ea ec 91 69 f2 ba 39 f5 45 36 dd 99 36 3d b8 af 03 a0 fb 0f 8e 1f 72 58 4b 8b df b0 be d3 5f ce 85 1b 19 1b 13 66 bc ec 6b 3e d5 b8 ec 48 44 c0 96 fa 9b 30 fa 8a fa 51 af 44 82 25 6e 2d 5c b4 fd 43 3d 35 19 6d 8b 42 75 ae bf a0 b8 27 95 c5 1e e5 e3 c1 4a 0c f1 0c a6 44 06 de 16 f7 b4 38 d3 f3 b7 a0 b7 99 81 45 96 70 e0 6c 66 4e d8 32 3b 24 34 79 62 f6 87 1a 7b 9c 4d ee ac 53 ef 25 e4 2b 82 36 11 a6 37 d0 dd 89 36 66 85 47 48 0e e7 68 b3 8b a8 94 fc Data Ascii: s#2&EW4.f=Kqi>nVD%K\yyNcuE+(A.;Cbk5V{zDri9E66=rXK_fk>HD0QD%n-\C=5mBu'JD8EplfN2;$4yb{MS%+676fGHh
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 34 ca 71 77 9d eb ea 6a 4c 45 87 d1 ac cb 1d c3 7d 28 c2 95 33 84 cc b3 01 fe 1d cc 1f 90 68 ef ee 25 7a 7f 35 31 ba 1c 5b ad 29 7e 34 2f 21 aa e1 d0 d3 a9 45 34 4d 4f cc 4e 72 ae 5e 41 55 03 9b 8f 88 09 11 10 3e 21 74 22 f1 3a ea fa 29 8d a9 ca 92 9f 91 cb 72 0d e0 9b 75 dd b8 93 0f 47 5d 6d 90 4d ef 7f ce d1 19 9f 92 e5 0f 8d 62 02 3d 7d 65 0c 86 e0 ef cc 6b 57 8d bb dd 18 fe 74 68 0e 52 f2 b7 6d b2 8e 60 f6 66 f7 59 dd b8 95 0d 08 ea 20 88 52 d1 8e bd 1e aa 62 aa 0e 2f a4 c6 2d 9e e9 e5 ee 16 f1 d0 9d 1e 0d 2f 71 52 73 3f 68 c3 33 77 8e dc 66 1b a2 09 e0 80 73 cd 16 34 af d7 d7 a6 3d 22 c8 bc 93 97 c8 32 ed 9c b6 a4 9c 3b 99 4c 4e 41 bb 79 c5 5a 2d ba 32 37 13 8e 3b cb d2 94 47 9d 32 a9 03 79 de 6e 32 96 08 da 10 79 ee 03 dc f2 88 da 23 d5 a9 3f 48 4b Data Ascii: 4qwjLE}(3h%z51[)~4/!E4MONr^AU>!t":)ruG]mMb=}ekWthRm`fY Rb/-/qRs?h3wfs4="2;LNAyZ-27;G2yn2y#?HK
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 25 1c 21 3f 20 fd 2b 5f f5 94 c6 c8 e5 57 87 46 e5 84 9a 9f 63 2d b1 2f 60 f4 63 0a c9 fe 0c e1 4b fc f8 d5 c7 3f 69 69 1f d7 11 b2 ff 00 74 75 7e cf fa 46 23 68 82 63 4e 4d 49 fd f2 d5 1f 9f 1b ef 38 24 e3 96 f2 6b 79 74 21 1b ad a0 1b 9e a1 1f a3 1c 17 18 39 29 e7 a4 66 44 f8 26 0c 91 fc 6c 6c ea 9d db c9 9f 24 09 1c c5 c9 8c b2 2c 52 b0 2d 64 2e bb 8b db d5 bf af 1f 57 08 85 32 65 4b 7a 1d 74 25 51 65 af 0d 73 12 a1 d4 93 66 23 3a 6e 9f c9 23 1c 34 22 b1 c2 a7 c4 9d 72 4b 8d fc 6e 11 e8 17 26 77 0f 1b 37 b8 d9 99 8f fd 6a 53 e3 e2 68 d1 bc b5 7e 74 79 fb 2f d2 86 d5 45 ce ba e5 c6 c1 1f 6e f2 23 d0 ac 83 24 9e 53 23 97 be c3 88 77 f4 ec a8 0b 40 0a b5 f6 7e 1c 35 f7 63 9b db 27 52 da 99 bd 66 8a df 99 7b 05 ac 81 a5 3a 4a b0 88 e8 69 cb d8 63 0d 67 7b Data Ascii: %!? +_WFc-/`cK?iitu~F#hcNMI8$kyt!9)fD&ll$,R-d.W2eKzt%Qesf#:n#4"rKn&w7jSh~ty/En#$S#w@~5c'Rf{:Jicg{
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 1f 37 d5 89 24 f1 98 e6 4c c8 c4 9e 52 dc 17 2f 93 b3 28 c9 b4 86 e7 0f b1 89 2b 6d 6e 23 73 90 46 22 2f 19 af 96 23 89 7b 91 d0 65 29 ad 80 ef 57 bf 77 b9 bb ef c2 8e 54 0e 19 89 e3 31 08 c1 21 2e 01 ba d7 f3 7b b0 39 5a 33 6e 39 a6 5b cb 76 31 10 03 98 9f 70 9b e8 d7 ad 30 c7 ca f1 9b 37 c4 20 8a 17 6d 2e 12 da ed f9 45 e8 8a a8 a2 dc df c8 4d 60 4b 32 cc 97 69 36 64 ec ee 39 20 e2 60 e0 9e 8f c9 f0 e2 bf c9 f7 0c d8 e5 fb 39 46 d8 ed da 00 45 8c 26 71 be 6d 09 d3 cd ae 24 8f 2a 86 e4 21 2d b3 b6 e8 7c 35 dc f2 90 fc 44 36 84 ef 05 51 77 80 e1 bd b2 6d 25 e2 00 77 35 a0 91 17 a7 e9 b9 7b 67 9d 3e d8 c6 da 8e 3f 28 5d 68 fb d1 24 78 f0 62 67 c5 bc 01 90 7b f6 f7 e1 8e 9b 98 11 cc ad b8 b6 3b 6b b7 19 5a 10 e6 e5 b5 c8 08 5e 1f 68 3c 0f 87 da c2 32 11 c0 Data Ascii: 7$LR/(+mn#sF"/#{e)WwT1!.{9Z3n9[v1p07 m.EM`K2i6d9 `9FE&qm$*!-\|5D6Qwm%w5{g>?(]h$xbg{;kZ^h<2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49877	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:50 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769235 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:51 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 35 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450790\|1732450761;Path=/
2024-11-24 12:19:51 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49876	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:50 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769234 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:51 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:51 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 34 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450791\|1732450761;Path=/
2024-11-24 12:19:51 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49878	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	483	OUT	GET /sumbangan.com/public/organization/490/logo/629e49f8a7b44_9E920131-5FAB-4983-9055-B8B4DD61A8FB.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:51 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:51 GMT Content-Type: image/jpeg Content-Length: 13373 Connection: close x-oss-request-id: 674319E7F3A6953936D8B1BD Vary: Origin Accept-Ranges: bytes ETag: "8B70FA176DEF518B1B3BA73777348D14" Last-Modified: Mon, 06 Jun 2022 18:39:52 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6657192411985731568 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 07 Jun 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: i3D6F23vUYsbO6c3dzSNFA== x-oss-server-time: 1
2024-11-24 12:19:51 UTC	13373	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 f0 a0 03 00 04 00 00 00 01 00 00 00 f0 00 00 00 00 ff c0 00 11 08 00 f0 00 f0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 Data Ascii: JFIFHHLExifMMi"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49880	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	480	OUT	GET /sumbangan.com/public/campaigns/large/62de3b34d4674_WhatsApp_Image_2022-07-25_at_2.34.32_PM.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:52 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:51 GMT Content-Type: image/jpeg Content-Length: 61679 Connection: close x-oss-request-id: 674319E745E02A343249B4E0 Vary: Origin Accept-Ranges: bytes ETag: "8E80B6E3876015CD318D332F2CFDA826" Last-Modified: Mon, 25 Jul 2022 06:41:56 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13169346717374608635 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 26 Jul 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: joC244dgFc0xjTMvLP2oJg== x-oss-server-time: 1
2024-11-24 12:19:52 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: b5 45 69 2d b9 6e 2d 86 cc 6d 83 92 72 9d d9 58 f7 bd ec f8 0a 71 b2 49 b3 85 1d ad 78 85 ae 35 bd aa d7 a9 25 69 7b 1b d7 1b b3 d0 65 69 69 e8 7a 2d c6 23 21 6b 4a 5c 6d d5 8d 8f 2f 09 41 da 3a ee c0 e9 41 37 8e 2f 42 6f 86 3a ea e2 78 7f 62 5a 60 f1 c1 cb 2a a3 9e f3 63 eb 0b 47 f2 b5 fb d9 ef 79 f8 72 f4 a9 16 e3 d9 c5 6f 5c 6d 17 9d 5d c4 4b e6 a3 b7 e9 5b 92 6f b0 21 bd 0d 91 29 6f b2 a5 2d b4 2e 40 1d e2 c0 27 00 78 f2 cf 4a 8f f8 57 c0 eb a7 11 b8 6f ac 21 6b 96 2e 9a 59 bb ef 14 a5 6b 48 2d 38 d2 7b f2 c0 2d 96 c2 d2 79 00 48 50 3e 3c a9 25 48 bb 89 9c 6f e2 ae bb 9d c6 dd 2b a1 e1 59 98 d3 3c 3d b2 bd 06 e0 65 95 89 53 9d 7a 1b 8a 74 b4 a1 c9 05 01 2b 23 3c 89 09 f3 a9 33 b2 6d cd d5 f6 6c e1 da df 79 4b 5a ac 4c 15 29 6a 24 a8 f3 ea 4f 8d 01 ea Data Ascii: Ei-n-mrXqIx5%i{eiiz-#!kJ\m/A:A7/Bo:xbZ`*cGyro\m]K[o!)o-.@'xJWo!k.YkH-8{-yHP><%Ho+Y<=eSzt+#<3mlyKZL)j$O
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: db 68 f1 24 6e c7 ca 88 75 be 97 1a 2b 59 5d f4 a8 0c be ed aa 63 ad b6 e2 31 95 e3 92 4f cc 63 e7 43 36 1b 6e b9 85 70 8b 7c 8f 15 a8 b2 5b 70 21 28 5a 73 dc 05 60 15 8c fd ec 66 88 c9 e6 79 3a 7b 2b 12 62 e3 c6 d0 5d dc 6c 83 b4 bd da 5d 8c 08 ce 3f 2e de ea 01 dc c3 a9 e6 9c f4 1b 4f 4c 75 a7 af d3 21 08 90 f4 b9 4a 71 c7 0e f5 17 1b fb 69 50 e5 cf ad 25 e2 ee 9a 91 64 99 fc 2b 75 c5 c8 4c b9 47 da 10 ff 00 da 2b 56 4e 52 af 11 cb e5 40 97 3d 5d 3a e8 a4 4a 94 a4 77 e1 08 65 09 4f 24 a1 09 18 1c bc 79 54 44 4f 93 74 cd c8 8e 3f 69 08 be d4 fd be ee 5f b0 38 85 38 8e 68 25 49 c6 14 70 a0 7f be ba c8 d0 56 5d 9b 7b b5 a4 84 f8 2a 9e 38 0b c4 6b 35 86 f2 ab 3e a5 b7 c4 94 c5 d9 c4 7f 28 79 a0 b5 32 b0 30 90 3d 09 38 ab 12 dd fb 85 f7 29 49 82 d4 4b 5b af Data Ascii: h$nu+Y]c1OcC6np\|[p!(Zs`fy:{+b]l]?.OLu!JqiP%d+uLG+VNR@=]:JweO$yTDOt?i_88h%IpV]{*8k5>(y20=8)IK[
2024-11-24 12:19:52 UTC	13136	IN	Data Raw: 12 89 36 c6 a5 3a e9 64 96 9c 2a 23 29 4a ba 67 c4 8f 23 52 46 a4 93 01 fb b2 ad b1 d6 80 fd b4 f7 0f 32 3e d2 3d d0 a4 e4 78 7d aa 81 f8 4d 72 bd c8 e1 86 94 ba 4b d6 cb 81 b4 bb 2c 31 1d 92 82 a7 11 92 02 8f 8a 4f 21 f4 a9 0a f5 c4 1b 0c ce 29 5d 26 c5 96 89 29 95 02 1a 14 59 4f f3 b2 12 14 93 f3 c0 03 3e 95 6d ad f2 98 16 2e 64 9e aa 77 48 3b a5 f7 3b 4b 13 d4 82 e1 da ea 16 13 bc 1f f4 78 e8 47 8d 20 55 86 3c 80 84 fb 42 92 1b 5e e2 bf 31 d3 14 2f aa f8 97 63 87 a8 e0 db 9e b8 c6 6b da 76 b4 90 5c ca 92 ea 94 00 18 1f 1a 94 e2 68 c6 9e 64 21 57 d6 c3 98 e4 52 8c f9 79 fc 6b 0f 2a 12 e9 0b 80 e5 6b 61 ca 5b 13 5a 4f 08 54 59 ec ac 0d af 61 e2 06 3d f2 4e 06 69 75 be d3 09 c4 29 51 e3 20 36 41 f7 b3 80 69 d6 e1 a0 af c9 29 54 2b cc 59 00 74 0b 4e c3 f0 Data Ascii: 6:d#)Jg#RF2>=x}MrK,1O!)]&)YO>m.dwH;;KxG U<B^1/ckv\hd!WRykka[ZOTYa=Niu)Q 6Ai)T+YtN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49879	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	462	OUT	GET /sumbangan.com/public/campaigns/large/66b1d8d8b73fa_CF_Cover_Kempen_New-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:52 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:51 GMT Content-Type: image/jpeg Content-Length: 220946 Connection: close x-oss-request-id: 674319E79CAEC931303BD5D4 Vary: Origin Accept-Ranges: bytes ETag: "E41A6F275175561A5CE1B9FFFEE199C0" Last-Modified: Tue, 06 Aug 2024 08:03:36 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1120157989055405679 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: 5BpvJ1F1Vhpc4bn//uGZwA== x-oss-server-time: 1
2024-11-24 12:19:52 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: cb 86 ce 62 1e 9e 3a 6c 6c 9a 92 5d de b5 79 e2 48 a0 a5 18 80 0e 71 aa a0 f2 fc 48 dc ee 4f 2f a5 17 65 cd a4 4b 0e a9 8d 63 61 56 1c 37 c1 66 8e a5 dc 8d 55 89 7b 55 e5 a9 5b 4e 62 f5 15 5a 93 bc e2 36 f9 db b6 a1 21 78 10 54 28 81 00 04 8f da fc ba 61 77 ef e1 76 a6 95 b9 a7 b3 7a 62 78 20 8e dd a9 f1 f2 aa 7a 84 34 8b 0a cd 1b 1f 52 42 de 3e b1 e0 ed e7 f7 f5 74 71 fd ae f8 b8 ce 77 ad fb b5 97 ad a4 b1 f5 a6 d2 6b a4 ac 61 5d 12 4a 71 44 96 5e c4 2f c1 25 24 94 69 1d 41 53 bf 81 f6 3b f5 18 ff 00 08 07 6c 3b e0 9d 9c ad dc 2d 5f 98 d2 f5 30 5a 17 2d 04 cd 8c c2 56 93 1f 26 54 de 78 ea 72 76 8d dc a3 c6 5f 61 b3 05 68 e4 6d fc 80 3a c7 4e e2 a8 a8 d6 39 d3 2a 4b 41 10 b9 e7 90 16 ed 61 ad 64 e5 8e 19 16 79 61 64 76 4e 32 47 12 96 59 51 57 91 5f ab c1 Data Ascii: b:ll]yHqHO/eKcaV7fU{U[NbZ6!xT(awvzbx z4RB>tqwka]JqD^/%$iAS;l;-_0Z-V&Txrv_ahm:N9*KAadyadvN2GYQW_
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: d2 06 1f 8e fe af 9f ea e9 c1 8c f8 63 9a 27 74 cb e5 b2 b4 60 64 24 9b 55 c5 40 fe db a8 2c ac 37 d8 9f 1b 7d bf 2f 3a 18 1b 4d c4 b5 31 b4 1c dd 01 51 2e ac 9b 44 e5 75 66 67 25 a5 30 96 71 3a 7e 7b b6 2c 62 71 d7 6e 7a 92 d1 ae cd ba 46 d2 ec 0c 8c 37 d8 16 dc 90 a3 72 4e e4 ba f4 df 6e a7 ee 2e 16 8d 9c 3d 7c 3e 9f ab 8e e4 2c db 7b b6 65 6b 73 a1 f3 23 06 3c 14 ec 7d 97 6f 6e bc f7 17 0d a2 b4 3e 5e 6d 11 83 d3 f2 6a 3b f1 c0 ac f9 18 b2 0d 28 83 9a 9d 91 12 25 55 2c a4 83 e4 2f ee f3 e1 b3 a2 af 63 68 6a ac 7d 2c de 12 5c 9c 56 6c a4 4f 4e f3 72 f4 e6 92 44 de 42 9b 02 bb 81 b7 b9 f7 3d 6f a4 f9 dc 26 b6 9b 87 b4 57 ad 69 a6 1f 4d 5d f9 48 f2 18 dc 9d 4a 31 2e f6 e8 c8 c6 b4 80 ca eb c4 93 b8 dc 32 b6 fe 7d 88 fd dd 21 45 8b 2c 91 e4 da 3f a9 b7 26 Data Ascii: c't`d$U@,7}/:M1Q.Dufg%0q:~{,bqnzF7rNn.=\|>,{eks#<}on>^mj;(%U,/chj},\VlONrDB=o&WiM]HJ1.2}!E,?&
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 0b 88 a7 25 c8 de 2b 0d 5a 98 91 22 8d a4 3c 64 5f 2f e4 2f 9d 94 8f bf b6 fd 31 8d 23 40 94 5d a9 2a 1d ed 44 7a 41 22 b7 7b 56 1c 45 91 23 24 09 15 fd 99 a2 1c 58 17 42 5b ee 5c 1f 6f e6 8e 9f ad ae fb 6c b9 91 8e 9f 17 8c 35 63 e3 ea 64 64 66 2f 5d 94 72 3c 10 af 32 01 d8 7d 27 6f f2 f4 ab 4b e1 c3 48 d3 aa b6 ad 0c ae 72 b6 c4 cb 64 af ca 71 8d 09 d8 46 bc 77 f6 fb fd 5b ff 00 93 ad 5e e1 f6 b6 3c 6e 05 33 7d be 8b 92 56 59 0b 57 66 16 9a 48 cf 0f 48 f2 91 89 53 c1 b7 d8 0f e8 1d 38 35 c3 75 43 07 65 92 d6 b6 8e 79 46 a0 d2 78 da 79 7c 56 36 f4 43 23 92 7a a1 cc 66 47 8d 54 80 cb b8 3b f2 d8 80 76 f1 f8 6f d4 63 7e e2 8b 97 5e 6a 09 5e 6a f3 5a 36 69 b4 a5 c2 cc d2 38 11 f1 04 15 01 86 e3 8e df b5 fd 3d 67 7a 38 df d3 11 66 b5 9e a2 b9 8f 9d b7 22 a3 Data Ascii: %+Z"<d_//1#@]*DzA"{VE#$XB[\ol5cddf/]r<2}'oKHrdqFw[^<n3}VYWfHHS85uCeyFxy\|V6C#zfGT;voc~^j^jZ6i8=gz8f"
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 29 4f fd 8d a3 2e 1b d9 77 dc 80 3f af a6 a6 42 1d 6f aa 72 73 8a 7f 27 7e bb 6c be ae 5e fd bb 0e ce 77 0d cc 34 8c 85 fe de 17 7d bc 79 f2 3a 75 6a ae d1 66 f4 96 79 70 d2 41 1e 2f 21 6b 03 0e 62 0a 76 2b d2 26 cd 39 46 d1 dc 0e b1 9d c3 3a 3a 92 58 32 95 d9 82 f8 e9 4e ce e6 e8 50 69 88 94 e0 81 f4 26 99 aa 72 10 67 e7 ce 5d f9 36 9a ec 94 6c 6f 52 82 8f 2f f5 a2 3c 72 1f d9 62 03 6f b7 82 3a 67 e7 7b 89 1e 8e bc 2f 6b 9d 65 98 b1 a6 b2 d4 23 b3 a7 b2 38 c9 d2 b3 df 65 40 65 59 42 43 2b 2f 99 00 05 95 0e de 46 e3 d9 77 4b 63 34 76 63 0f 94 8f 51 52 93 37 7a d0 fe f4 76 fd 74 41 84 7c 44 5b b9 dc 23 31 dc c6 9e 0f 8f 1e dd 36 32 3a ab b8 f4 2b e2 aa 58 d3 fa 2e b6 0a b5 96 15 6d 52 a0 97 69 62 bd 36 d8 24 ac fe a8 81 91 08 63 c7 c8 55 fc b6 e9 2d 71 d8 Data Ascii: )O.w?Bors'~l^w4}y:ujfypA/!kbv+&9F::X2NPi&rg]6loR/<rbo:g{/ke#8e@eYBC+/FwKc4vcQR7zvtA\|D[#162:+X.mRib6$cU-q
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 8e 84 b6 d7 b6 37 66 c3 46 62 37 a4 d4 14 63 92 38 d1 65 1b 34 b5 c4 a5 ca 86 0d b9 68 c9 d9 41 f3 b6 e1 a7 ad f0 56 2f e3 30 56 29 77 53 0b a4 b3 86 96 da aa 58 33 9f 2e d7 ac 98 e3 0e d2 fc b8 7f 54 82 25 1e de 03 6d b6 de cf 78 35 ae 96 6c 24 69 0d 5c f6 a6 35 a8 7c b5 99 28 62 2c 98 ad 21 80 47 39 2f 2c 71 86 e4 9c ce e0 8d f7 df dc f9 4a 90 25 37 ef eb 6b da 6a 7c 4b 77 03 53 64 33 3a 73 54 41 1c 58 b5 d3 36 9e 1a 0f 32 9f 4a 74 74 8c c2 4c 5c da 1d 88 0c c5 37 f2 7c 74 ab 8c d1 f9 5a 19 0d 69 a4 33 7a 6a bd ad 17 e9 bf e8 fc d6 42 18 99 a6 e7 0c 8f f5 d9 6d a4 65 49 4a 2a 95 fd 91 b0 27 6e 9b da 5b 25 dd 4b d0 61 9b b7 18 3c 2b 68 a8 1d 15 71 fa 3a 23 7f 29 52 13 c1 e4 25 18 ca c2 7e 2f c9 86 e5 bc 31 23 71 d4 cf a7 be 0c fb c5 ab 35 95 6d 41 0e 96 Data Ascii: 7fFb7c8e4hAV/0V)wSX3.T%mx5l$i\5\|(b,!G9/,qJ%7kj\|KwSd3:sTAX62JttL\7\|tZi3zjBmeIJ*'n[%Ka<+hq:#)R%~/1#q5mA
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: b7 2d be 90 bb f2 3c 94 86 e5 cf 36 9f cf cb 6b 6a f7 24 1e b7 1f 51 25 8d c3 09 10 b1 d8 9e 2a 15 48 05 3f d6 b7 20 57 dc aa d0 69 a3 90 b6 9e cd fa e6 30 66 ab 2a 4a 02 c6 4b 02 4b 6c 48 00 fd 21 bd 89 eb 22 5d b9 0a 33 5e c7 ba 85 1b 86 8d b9 03 f9 0d 86 df d6 47 49 66 c5 ca f6 d2 3b d8 29 25 2f 68 c4 b3 56 b5 18 66 87 66 6f 5d d0 b2 1f 0f c5 4a a7 26 dd 94 a8 3e c1 43 24 0c 89 e9 20 b7 5a 67 fa 61 92 bc 22 62 1f ea 23 97 d2 c1 7c 00 77 2d fc e2 a4 8f e7 5f 2a 85 92 1c b5 49 99 d5 79 af 00 49 e6 00 20 0d b7 3b 02 4e de 47 9e b2 c7 90 a5 33 05 8a c2 ee db 85 24 15 07 fa f6 eb 4e b6 46 ac ac b8 f3 96 81 ad 18 fe aa f2 15 f5 19 b7 fd a0 a4 9d 97 e9 61 f4 ae c4 82 41 eb 5a fc 26 a5 77 95 f0 6b 6d de 32 c1 21 b0 aa b2 9f 50 02 bb 90 9b ec 84 be fb 7f 31 c7 Data Ascii: -<6kj$Q%H? Wi0fJKKlH!"]3^GIf;)%/hVffo]J&>C$ Zga"b#\|w-_*IyI ;NG3$NFaAZ&wkm2!P1
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 97 72 0c 9c cc 6c bc 18 0f 0c 18 ee 37 dc 13 b8 f7 db 62 0f 9e 99 7a 93 4e ae 52 b7 e8 fb f6 91 6d c5 14 b0 d3 bc 23 59 02 99 23 02 44 78 db e9 6d c0 1c a3 6f c1 59 4a b2 ab 2f 95 b9 65 7c 2a 18 ee f5 2e 4e 3b 8e 81 c7 ec ee 7b 18 30 4f 56 93 99 77 a8 ee bf a7 23 e2 07 dc 72 dc 4e cb 6c 69 bc 0e 73 51 55 d4 55 c7 ca dc a3 61 5e 68 ca 44 ce 10 35 b6 e7 1c aa 39 14 9a 59 4b 1f a9 a3 75 57 fa 12 6f 50 87 7c ef 6c 40 5a 9c 69 2c ed 2c 2a aa ef c4 15 32 a8 90 96 fb 6c 85 c8 fc c0 e9 83 36 4e f2 4c 14 af ca 65 a6 b1 22 c2 8b 61 a6 f9 75 20 c0 26 24 04 33 44 47 cb 96 e4 02 31 78 d5 8a 48 12 40 ea c4 6a 28 6f ca f4 ec a2 56 b6 b2 4a 12 3e 63 8c f1 a3 95 f5 22 fa 89 db 6e 24 a1 3c e3 e6 81 c0 e4 8c fd ab 6b a6 3f 4e bf 5f f3 f9 e0 31 d4 a6 ee 7c b9 7e de 1f 9e 27 Data Ascii: rl7bzNRm#Y#DxmoYJ/e\|.N;{0OVw#rNlisQUUa^hD59YKuWoP\|l@Zi,,2l6NLe"au &$3DG1xH@j(oVJ>c"n$<k?N_1\|~'
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 08 58 80 a4 32 ce 03 23 c6 09 f1 ae 6f 6a 1a d1 ad ad 31 62 bb 64 3d 6a cd 24 77 6a b3 c4 21 69 5a 29 5a 07 3b 44 96 58 4e a1 03 f3 e4 47 1f 4d f9 78 dc d4 56 e0 d1 fa 5a d5 dc 2e 35 5a 9e 9f a6 66 8a 95 4e 10 fa b0 57 4d d2 b4 21 f6 40 d2 70 48 54 33 01 bc 83 ce fb 75 e3 4e 9c de 5a bd 1c ee af c6 be 1a dc 75 e0 91 b1 16 56 07 5c 75 bf 4a 45 9e 43 2a 17 25 f6 99 e3 dc 48 55 55 4e c0 92 ce d6 0a ab 3e a1 ce 26 06 8a 22 54 78 c2 d5 97 d3 b9 22 73 a9 4b 80 50 a6 cb f2 e6 b1 92 e0 b3 f9 01 56 47 91 90 0e 45 12 ad 39 75 5d aa 17 3b 8d 85 c0 a5 4c 46 7c 4b a7 bd 4d e5 36 32 11 cf 76 b5 6b 88 4b 95 8f 94 45 24 89 3e a3 bc aa fc f9 6c 89 e3 25 46 6d 5a b1 69 9d 45 7e 9b c3 42 35 cc 6a 1c 7a 44 24 68 42 d8 5b 15 20 05 41 75 92 27 85 99 5d 1b 7d ea 82 e8 e2 48 fa Data Ascii: X2#oj1bd=j$wj!iZ)Z;DXNGMxVZ.5ZfNWM!@pHT3uNZuV\uJEC*%HUUN>&"Tx"sKPVGE9u];LF\|KM62vkKE$>l%FmZiE~B5jzD$hB[ Au']}H
2024-11-24 12:19:52 UTC	16384	IN	Data Raw: 9b 00 e0 8e 9a 9d da fd 33 a7 7b 59 a6 7b 61 90 9b 07 8e b5 9b a7 43 4f 65 a7 b5 90 2e f5 e7 8f e5 dd 66 5e 3b 29 8d 7d 07 47 61 c9 40 91 37 27 c3 16 ea 42 a0 09 e5 ae b5 61 9a 8e 77 21 43 0f 84 b3 3e 12 7a b6 6f e3 1e 67 69 aa c5 05 79 68 46 de bc 6f e9 33 44 2c ab 32 f2 2c ec 9b 00 76 6d b0 df d1 1a aa 6b 78 3b f8 4c 65 5d 39 dc 69 ab 45 90 c8 66 72 15 ed b5 7a e6 18 53 d6 8b 89 e5 07 ad 20 7d c2 15 e2 0c 6e 80 ef b1 e9 0b 1b aa 17 09 93 4c 2e ba ab 66 9e 33 13 69 35 66 36 b4 78 f9 42 49 64 d9 49 63 73 64 17 f5 a0 8c 5c 69 18 01 ec 10 1e 47 c3 49 39 7e e3 e2 75 4e 8f 4a 58 4c cd 98 b0 39 5c 79 e1 9a 69 2b 96 90 a0 55 93 d3 af c4 c8 d2 29 32 9e 27 60 7d 32 09 5d c7 44 a8 ef 28 5f 4b 68 b9 3b 7d 1d bc 4f 6d 75 ee 3b 51 da d6 d5 b2 b8 6b be ae 26 cc 51 e3 Data Ascii: 3{Y{aCOe.f^;)}Ga@7'Baw!C>zogiyhFo3D,2,vmkx;Le]9iEfrzS }nL.f3i5f6xBIdIcsd\iGI9~uNJXL9\yi+U)2'`}2]D(_Kh;}Omu;Qk&Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49882	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	1487	OUT	GET /mobile/img/category/ngo.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 2823 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-b07" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	1760	IN	Data Raw: 37 2c 31 33 39 2e 36 31 32 2c 31 35 39 2e 38 34 33 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2c 2d 36 2e 35 36 37 43 30 2e 36 35 34 2c 2d 36 2e 35 36 37 20 31 2e 32 38 39 2c 2d 36 2e 33 37 32 20 31 2e 38 33 34 2c 2d 36 2e 30 30 35 43 32 2e 32 36 37 2c 2d 35 2e 37 31 33 20 32 2e 38 35 33 2c 2d 35 2e 38 32 37 20 33 2e 31 34 34 2c 2d 36 2e 32 35 38 43 33 2e 34 33 35 2c 2d 36 2e 36 39 31 20 33 2e 33 32 31 2c 2d 37 2e 32 37 37 20 32 2e 38 38 39 2c 2d 37 2e 35 36 38 43 32 2e 30 33 2c 2d 38 2e 31 34 37 20 31 2e 30 33 32 2c 2d 38 2e 34 35 33 20 30 2c 2d 38 2e 34 35 33 43 2d 32 2e 38 34 39 2c 2d 38 2e 34 35 33 20 2d 35 2e 31 36 37 2c 2d 36 2e 31 33 33 20 2d 35 2e 31 36 37 2c 2d 33 2e 32 38 32 43 2d 35 2e 31 36 37 2c 2d 30 2e Data Ascii: 7,139.612,159.843)"> <path d="M0,-6.567C0.654,-6.567 1.289,-6.372 1.834,-6.005C2.267,-5.713 2.853,-5.827 3.144,-6.258C3.435,-6.691 3.321,-7.277 2.889,-7.568C2.03,-8.147 1.032,-8.453 0,-8.453C-2.849,-8.453 -5.167,-6.133 -5.167,-3.282C-5.167,-0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49883	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	1489	OUT	GET /mobile/img/home/lain-lain.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 2346 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-92a" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 32 20 36 30 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 602 602" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	1283	IN	Data Raw: 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 38 2e 33 33 33 33 33 2c 30 2c 30 2c 38 2e 33 33 33 33 33 2c 30 2c 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 30 2c 2d 34 34 32 2e 32 36 34 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 30 35 2e 37 33 37 2c 32 30 37 36 2e 32 36 4c 33 39 32 2c 32 30 37 36 2e 32 36 4c 33 39 32 2c 32 30 39 30 4c 34 30 35 2e 37 33 37 2c 32 30 39 30 4c 34 30 35 2e 37 33 37 2c 32 30 37 36 2e 32 36 5a 4d 34 30 33 2e 37 33 37 2c 32 30 38 38 4c 33 39 34 2c 32 30 38 38 4c 33 39 34 2c 32 30 37 38 2e 32 36 4c 34 30 33 2e 37 33 37 2c 32 30 37 38 2e 32 36 4c 34 30 33 2e 37 33 37 2c 32 30 38 38 5a 22 20 73 Data Ascii: sform="matrix(8.33333,0,0,8.33333,0,0)"> <g transform="matrix(1,0,0,1,0,-442.264)"> <path d="M405.737,2076.26L392,2076.26L392,2090L405.737,2090L405.737,2076.26ZM403.737,2088L394,2088L394,2078.26L403.737,2078.26L403.737,2088Z" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49884	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	1481	OUT	GET /mobile/img/avatar.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 1182 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-49e" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 34 20 31 33 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 134 134" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	119	IN	Data Raw: 31 36 2e 30 30 34 2c 31 31 2e 38 31 36 43 31 36 2e 30 30 34 2c 32 2e 39 37 39 20 38 2e 38 34 31 2c 2d 34 2e 31 38 34 20 30 2e 30 30 33 2c 2d 34 2e 31 38 34 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 72 67 62 28 30 2c 31 36 33 2c 31 37 32 29 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 16.004,11.816C16.004,2.979 8.841,-4.184 0.003,-4.184" style="fill:rgb(0,163,172);fill-rule:nonzero;"/> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49881	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	1483	OUT	GET /mobile/img/facebook.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 1140 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-474" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	77	IN	Data Raw: 31 2e 38 36 38 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 77 68 69 74 65 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 1.868Z" style="fill:white;fill-rule:nonzero;"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49885	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:51 UTC	1482	OUT	GET /mobile/img/twitter.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 1492 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-5d4" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	429	IN	Data Raw: 35 20 31 37 2e 31 33 32 2c 2d 30 2e 37 30 36 20 31 36 2e 32 33 32 2c 2d 30 2e 35 32 38 43 31 35 2e 35 31 2c 2d 31 2e 32 39 37 20 31 34 2e 34 38 33 2c 2d 31 2e 37 37 37 20 31 33 2e 33 34 35 2c 2d 31 2e 37 37 37 43 31 30 2e 37 39 32 2c 2d 31 2e 37 37 37 20 38 2e 39 31 37 2c 30 2e 36 30 35 20 39 2e 34 39 33 2c 33 2e 30 37 39 43 36 2e 32 30 36 2c 32 2e 39 31 34 20 33 2e 32 39 32 2c 31 2e 33 34 20 31 2e 33 34 32 2c 2d 31 2e 30 35 34 43 30 2e 33 30 36 2c 30 2e 37 32 34 20 30 2e 38 30 35 2c 33 2e 30 35 20 32 2e 35 36 36 2c 34 2e 32 32 37 43 31 2e 39 31 37 2c 34 2e 32 30 36 20 31 2e 33 30 37 2c 34 2e 30 32 38 20 30 2e 37 37 34 2c 33 2e 37 33 32 43 30 2e 37 33 31 2c 35 2e 35 36 34 20 32 2e 30 34 34 2c 37 2e 32 37 38 20 33 2e 39 34 36 2c 37 2e 36 36 43 33 2e 33 38 Data Ascii: 5 17.132,-0.706 16.232,-0.528C15.51,-1.297 14.483,-1.777 13.345,-1.777C10.792,-1.777 8.917,0.605 9.493,3.079C6.206,2.914 3.292,1.34 1.342,-1.054C0.306,0.724 0.805,3.05 2.566,4.227C1.917,4.206 1.307,4.028 0.774,3.732C0.731,5.564 2.044,7.278 3.946,7.66C3.38

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49886	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769242 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450789\|1732450761
2024-11-24 12:19:52 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 33 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49887	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	1483	OUT	GET /mobile/img/whatsapp.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:52 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: image/svg+xml Content-Length: 2494 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-9be" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:52 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:52 UTC	1431	IN	Data Raw: 2e 31 35 37 20 38 2e 31 35 2c 37 2e 33 36 35 20 38 2e 31 35 2c 37 2e 35 37 39 43 38 2e 31 35 2c 31 32 2e 30 34 20 34 2e 34 39 33 2c 31 35 2e 36 36 36 20 30 2c 31 35 2e 36 36 36 4d 39 2e 36 38 39 2c 37 2e 33 33 33 43 39 2e 35 35 38 2c 32 2e 31 33 33 20 35 2e 32 37 33 2c 2d 32 2e 30 34 32 20 30 2c 2d 32 2e 30 34 32 43 2d 35 2e 32 31 2c 2d 32 2e 30 34 32 20 2d 39 2e 34 35 38 2c 32 2e 30 33 38 20 2d 39 2e 36 38 35 2c 37 2e 31 35 37 43 2d 39 2e 36 38 39 2c 37 2e 32 39 37 20 2d 39 2e 36 39 33 2c 37 2e 34 33 38 20 2d 39 2e 36 39 33 2c 37 2e 35 37 39 43 2d 39 2e 36 39 33 2c 39 2e 33 39 38 20 2d 39 2e 31 38 36 2c 31 31 2e 30 39 36 20 2d 38 2e 33 30 35 2c 31 32 2e 35 34 38 4c 2d 31 30 2e 30 35 32 2c 31 37 2e 37 30 38 4c 2d 34 2e 36 38 34 2c 31 36 2e 30 30 32 43 2d Data Ascii: .157 8.15,7.365 8.15,7.579C8.15,12.04 4.493,15.666 0,15.666M9.689,7.333C9.558,2.133 5.273,-2.042 0,-2.042C-5.21,-2.042 -9.458,2.038 -9.685,7.157C-9.689,7.297 -9.693,7.438 -9.693,7.579C-9.693,9.398 -9.186,11.096 -8.305,12.548L-10.052,17.708L-4.684,16.002C-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49889	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	1261	OUT	GET /api/mobile/doa/liked/visitor/769243 HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450789\|1732450761
2024-11-24 12:19:53 UTC	421	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-cache, private X-RateLimit-Limit: 60 X-RateLimit-Remaining: 32 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761;Path=/
2024-11-24 12:19:53 UTC	10	IN	Data Raw: 35 0d 0a 66 61 6c 73 65 0d 0a Data Ascii: 5false
2024-11-24 12:19:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49888	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	463	OUT	GET /sumbangan.com/public/organization/525/logo/6352445c5003b_LPQ_AL_HUDA_LOGOW.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:53 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:53 GMT Content-Type: image/jpeg Content-Length: 11298 Connection: close x-oss-request-id: 674319E945E02A3336E0B4E0 Vary: Origin Accept-Ranges: bytes ETag: "6538EBC50C9D478C481AD03D9BE41A91" Last-Modified: Fri, 21 Oct 2022 07:03:56 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10813098334749947000 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Sat, 22 Oct 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: ZTjrxQydR4xIGtA9m+QakQ== x-oss-server-time: 1
2024-11-24 12:19:53 UTC	11298	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49891	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	693	OUT	GET /sumbangan.com/public/campaigns/large/642e39dfa8ebf_MAKANAN_BERKHASIAT12.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:53 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:53 GMT Content-Type: image/jpeg Content-Length: 152626 Connection: close x-oss-request-id: 674319E9AF8AD93430406FE0 Vary: Origin Accept-Ranges: bytes ETag: "536C23DD65CF7E975DBC524408EF85D1" Last-Modified: Thu, 06 Apr 2023 03:17:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5893813499116188149 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Fri, 07 Apr 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: U2wj3WXPfpddvFJECO+F0Q== x-oss-server-time: 1
2024-11-24 12:19:53 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: e9 f3 17 94 a8 73 8f 10 f7 dc 5d 69 ff 00 53 df 7f c9 e6 ff 00 74 1d c4 56 9f f5 3d f7 fc 9e 6f f7 44 1f b4 16 5f ef 2c ff 00 7a 0c ca 93 dd 51 92 39 42 85 08 d6 22 25 a5 c1 30 27 f2 08 2d 08 4f 16 f0 cd 14 f1 e6 44 b8 85 6e de 11 e2 3d c3 c7 71 75 a1 47 70 54 7b e6 81 3f f8 79 bf dd 11 eb 2d 0a 5a 0c 3d 2e 46 b6 fd d7 ad c1 96 f9 78 06 48 f7 24 74 58 de b1 b5 61 10 b9 23 32 45 43 e3 09 c5 a1 38 ff 00 06 31 ce 3b 99 1c b1 e6 31 d7 b5 75 a2 a1 43 56 9d 73 90 34 3e 18 e8 31 c3 c0 e8 ba c0 a3 b8 3a 55 dc 92 13 82 7e 8f 37 fb a1 bd 63 7b 83 6a 8d 59 c9 b4 c9 0f d6 59 38 a7 92 7f e5 88 34 f6 a5 0d 54 99 70 4c d7 3b b9 1c 8a a4 67 c6 f8 b8 da a7 38 eb 04 39 a7 a4 ea 85 c9 c6 a5 35 36 ee a0 04 de 49 38 d2 4f 3c 84 fe 48 65 45 65 2d 06 dd 44 88 df f5 2d c1 1c 6f Data Ascii: s]iStV=oD_,zQ9B"%0'-ODn=quGpT{?y-Z=.FxH$tXa#2EC81;1uCVs4>1:U~7c{jYY84TpL;g8956I8O<HeEe-D-o
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 67 9f 83 9e 5f 26 12 0d 44 4a 28 ca 9c f4 bb fa 4a 8d 10 11 91 c1 0d cd 5a 75 1a 7a 1b 52 4c 3d bd 1c 65 f2 e1 b2 30 ae a5 ab cb d8 7e e2 d0 fd 66 7f fd 47 ff 00 c1 7f e7 c7 e7 eb 30 c7 fe d2 30 ff 00 22 ff 00 cf 86 f2 f2 a2 cc f4 e4 b6 56 2a 7b fe ec 7f f8 d1 a9 00 4b a3 19 7c a9 22 31 6b 04 ec 93 80 cd 9f ac c3 1f fb 48 c3 fc 8b ff 00 3e 29 bc db cb f2 65 7d 46 3a 5f a7 ba 4a 4d 58 6a ef 6a b6 78 b4 bd cd 39 bc 88 b3 aa 4e 55 99 86 c9 52 39 b4 27 68 a7 8a 14 0b 4c 09 08 44 a6 d3 c6 49 27 d1 f3 d1 50 66 1d 7e ef 99 6f fd d1 bf 23 48 05 5a bc 80 d0 48 29 e4 93 42 5d 2f 2e 79 bd f8 0e bd 8c 93 8c 32 d6 85 57 99 55 7a 3a 4d 3a cd 52 43 8e 72 19 4d ad 3b 72 4b 27 3f 3e 86 cc 5f 08 f9 1e 2c 6d 3e b4 83 34 cc 03 79 72 35 7f cf 8e 7c 8e 29 8c 30 1b e5 62 50 f7 Data Ascii: g_&DJ(JZuzRL=e0~fG00"V*{K\|"1kH>)e}F:_JMXjjx9NUR9'hLDI'Pf~o#HZH)B]/.y2WUz:M:RCrM;rK'?>_,m>4yr5\|)0bP
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 7e 02 21 4f 2c 83 9a 79 b0 da d3 24 9c dc 10 c7 4e f2 b3 cb 7a 99 f9 bd 81 33 65 40 9d 43 92 91 a5 09 14 26 0c 83 90 84 9f 46 5c 27 c7 02 e3 cd df f8 20 c6 cc 7b ce e3 66 3e 22 1b cb 6a 94 ba da c1 5a a6 0e da 52 4e da a2 7e 7e c4 db 72 7e 81 3f 8e 32 74 7d 1c ce 6a 54 75 9e 5a 3f b0 62 2c 27 31 12 4e 64 fc fe 78 7b 72 7f 2c b8 47 cf 21 a3 6f f1 a6 34 12 3f 2c e3 e7 64 7b c6 b8 fa 27 c9 ef f6 97 a4 ff 00 83 bf af 34 61 44 6c f4 b9 49 e1 ce 46 1c 9d bb 7f fe c8 df 39 30 9d bd 16 57 53 89 9b 4d 79 28 d1 ee 67 9f dd 93 4b 18 e4 6f cc 3b 1c ec 97 80 c6 dc ab ff 00 6f 37 ff 00 93 49 ff 00 96 14 44 f2 6d ad 43 b6 6b d2 68 91 07 4e 7e 99 4a a3 e6 0e 7b 93 fe 6c 91 a2 73 a7 93 05 7f 98 f9 8e e9 58 31 bb 53 c9 d1 2f 18 24 94 6a ca 69 0d bb 0c 92 76 05 37 91 13 8c Data Ascii: ~!O,y$Nz3e@C&F\' {f>"jZRN~~r~?2t}jTuZ?b,'1Ndx{r,G!o4?,d{'4aDlIF90WSMy(gKo;o7IDmCkhN~J{lsX1S/$jiv7
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: aa c9 f8 a8 e8 4d 60 7d 6b 6a bf c9 42 b3 23 19 95 27 ba 73 b7 1c 23 b9 09 bb f6 99 bf 25 09 f5 c4 ff 00 1c 3f 94 14 72 f6 06 54 9e e8 6e e1 c1 3e e8 83 28 a1 1f 30 fc fc 74 1e ef 77 0e d4 a7 6e b8 dc 88 dd 07 5b 64 9d 3e f6 53 5c 38 d1 6a 8a 7d 79 62 0f 96 7a 9f 4c 12 ef 5f d8 8e 7c 99 df 06 ef 94 f5 65 24 4d e2 a4 04 d6 c3 ea 4d de 88 da 7d 71 32 cb a8 4d bf 1f 9b 8c e4 98 23 c6 c7 ad dd c5 64 f0 71 f2 bc d0 0a 09 04 56 ed 79 88 b0 a3 1a 65 c8 ee 4e 3e 38 22 16 7b 0a 67 d2 be f3 60 47 88 f7 1e 23 56 69 82 22 d9 d1 99 88 f2 4f 2b d6 55 25 fb 2e bf c1 1b 43 e9 cd db f9 b1 34 6b 47 af 2c 18 bb 1d b8 c0 7c b3 33 73 bb fc cc 50 c0 da 6b 8d 14 d7 82 06 4b bb 04 9e 5e 39 e0 02 87 7c 7c 78 a9 1d 14 3b 3d b9 19 7a a3 92 e4 e6 50 5d 38 47 24 11 d0 70 d0 14 27 ea Data Ascii: M`}kjB#'s#%?rTn>(0twn[d>S\8j}ybzL_\|e$MM}q2M#dqVyeN>8"{g`G#Vi"O+U%.C4kG,\|3sPkK^9\|\|x;=zP]8G$p'
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: b3 13 8e 9f ae 91 f4 95 36 6b 6a 87 d7 23 27 18 e2 8b 4f d5 8c 70 e8 de a1 62 22 0c a9 96 18 07 1f 04 e3 d8 89 b0 57 be 33 77 a4 7e 8e a8 ed a8 31 c7 b1 27 25 4f d4 b0 16 37 ac 44 4b 4a 43 6e 12 42 f6 7c cc d7 86 34 35 92 30 9c 3d 5e b8 3e 38 74 78 a6 c6 34 fd 24 d0 b0 2a d1 13 82 71 c5 f4 15 6c a9 3f 3f e9 06 89 da 5a 38 fc 15 2d d9 e4 a9 b8 8e 47 28 e8 48 58 d6 d6 b1 dd 45 b4 c1 89 26 5d 06 f1 8e e6 ee 24 08 e8 f5 8a 47 70 a6 08 fe 50 b1 0f aa 33 b3 29 f2 c9 c0 88 57 2c e9 a7 40 71 a6 49 b7 6e 7f 87 18 a7 db f3 a1 46 66 3c 3c 6b 3e 01 7c 97 13 26 bb d8 88 f3 ce f8 99 8f 09 a6 d1 8b 0e 3b 7e bd b4 53 c9 82 fd cb e2 69 c4 f9 6e e0 b7 da cb 02 4f 93 2c 28 59 49 8e 80 70 4e a6 a9 78 48 db 3f 59 a0 42 c5 75 c9 b7 39 c3 95 75 b8 da 2a 21 08 f4 fb c9 2c 14 ca Data Ascii: 6kj#'Opb"W3w~1'%O7DKJCnB\|450=^>8tx4$ql??Z8-G(HXE&]$GpP3)W,@qInFf<<k>\|&;~SinO,(YIpNxH?YBu9u!,
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 0a 1e 2b 0e 96 f0 6a 6c da d9 d5 93 c2 54 c6 aa 0d 3c c3 56 51 28 47 53 90 2a 91 15 38 c9 8f 62 4c 7b d1 1f 5f 93 94 69 1a 14 77 02 9d 1a 35 bd 89 c7 c1 13 69 ed d8 52 67 67 37 5e eb ca 5a ad 18 aa 96 3d 89 3e 0a 51 b4 7e 57 b8 2d 19 14 a9 6d 56 7b 70 f8 31 a7 6d f0 62 33 ea 96 fc e0 a1 cd 33 c7 28 6c b9 59 82 77 16 76 d5 8d 72 76 c7 12 f6 7c d7 a5 2b 09 f1 69 aa e9 cc 52 93 b4 5c 47 bb 89 b2 5a 75 2a b8 d8 c4 73 3c 14 ae f5 2d 36 06 c3 34 aa d9 3b 95 0a d5 9e ab 58 da f8 e8 da 3b 23 44 76 e3 e9 cf f3 23 e7 19 1a dd 11 2c 70 5d e1 64 54 ad c4 83 4c 98 7e bf 14 6e 3e 56 6e a9 32 71 89 c2 a9 61 2d f4 6e 49 ac 27 9f 9f aa d2 8c 41 4d e6 03 a1 2d 8b 72 43 f5 81 58 4e 31 e9 45 3d ab 23 25 c3 23 39 a1 ab d1 f8 1f 4d 0b 99 be e5 b8 9a 33 e5 3b 38 96 11 de bf 7e Data Ascii: +jlT<VQ(GS8bL{_iw5iRgg7^Z=>Q~W-mV{p1mb33(lYwvrv\|+iR\GZus<-64;X;#Dv#,p]dTL~n>Vn2qa-nI'AM-rCXN1E=#%#9M3;8~
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: c6 60 27 50 55 be 8a 76 cc c3 e7 77 73 ed 77 37 56 49 38 c9 b9 37 6f 42 1f 07 d2 08 59 d6 36 bb b3 85 7d f1 ee 56 76 c7 15 9b c2 87 ca 7f 39 1e 28 ee 92 08 1b 86 b6 7b 33 93 80 72 46 94 a7 e9 b6 75 2d e9 c9 d3 01 57 21 07 b7 38 e2 85 f0 74 69 8f a6 cd 6c 3e b6 3d bd 7a 8c 47 99 84 19 2a 46 36 42 06 da a1 a9 b9 1f 40 32 3d e1 3a 96 f1 8c 9d 78 d3 c8 38 cc 7c a4 28 76 76 d4 7d 36 2d c2 a4 9b c9 16 7a 10 b3 92 fe 70 27 52 34 fe 19 ac 78 bd 38 d5 d3 c9 9b 4c de f3 e6 56 94 6f 8a b1 e6 ec 4e a0 71 cd e1 d3 a3 7a 3c a2 f1 8a 6d c4 5d 9e a8 4e a4 70 b2 a0 58 35 2d 6d f6 b8 c6 a2 19 96 57 16 98 e7 dd c9 f0 c7 58 66 46 85 56 2a 40 b2 fe 16 70 1f b1 0f 31 0c f6 79 c6 6e 6c 34 e7 ef 47 31 a8 12 91 5c 01 74 e4 c7 b5 26 30 dd 53 b3 11 fd 81 7b 2a 75 85 48 45 89 e7 1c Data Ascii: `'PUvwsw7VI87oBY6}Vv9({3rFu-W!8til>=zGF6B@2=:x8\|(vv}6-zp'R4x8LVoNqz<m]NpX5-mWXfFV@p1ynl4G1\t&0S{*uHE
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 64 ba 1d dc 4a 06 e8 3f 15 11 7a 7c 64 23 5d c8 7c ea c7 f2 91 5f 39 a7 a7 7e 54 2d 16 74 a1 14 8c 82 17 1f 62 1a d6 2c 50 5f eb c2 8e aa d9 60 70 4e 31 12 e8 ba b2 6f 24 88 d1 f1 8c 7c 9b 44 0d f1 bf 56 51 75 30 6e 48 4e 38 67 20 c8 42 7a 11 64 23 d5 f5 8b 6a 43 70 04 e3 92 16 28 cb 36 f5 df 63 5e 02 0f 19 a0 48 91 d2 d9 17 18 d6 68 dc d6 8c 39 d4 ba fb d0 83 b3 a7 19 6e 14 bd 42 41 dc 9f e6 c2 3d 0f 86 25 0b 29 b7 46 46 b5 02 52 1d b3 90 7b 63 f2 25 84 6c ec 6b 1c b7 49 83 b7 fd 49 a0 8e bd 9b 4f c5 ab 71 42 eb 22 b6 37 bb 1c 6b a9 6e 39 d2 63 27 4a 10 bf 17 0f 8a 13 f8 47 ca 43 83 5d 3f d1 08 ed 13 af ed c2 85 08 c6 a4 7b ae 31 c1 9f 98 5c be cd 7d 12 60 7e f2 2f 6f ac 82 dc 2c 58 32 09 41 04 4d dc 73 b7 0c c6 47 cb 1b d6 27 21 51 90 71 1f 18 c8 31 ef Data Ascii: dJ?z\|d#]\|_9~T-tb,P_`pN1o$\|DVQu0nHN8g Bzd#jCp(6c^Hh9nBA=%)FFR{c%lkIIOqB"7kn9c'JGC]?{1\}`~/o,X2AMsG'!Qq1
2024-11-24 12:19:54 UTC	5779	IN	Data Raw: 91 d4 c0 d8 9f 64 32 6e c5 8f 63 a9 9e 18 e9 7e 98 6d ac 2a 06 d6 d7 8b 1d 13 e0 08 c2 9f c5 84 93 de 9e 5f a5 1c 96 5d 84 6b 3b ca a6 d2 cd 22 23 59 cd 6e f9 1a 7f 23 12 52 18 67 06 70 3f e6 3d 46 91 41 1a 75 14 9d 24 bf 42 49 c9 39 83 35 fd 0c 3d 1d 5f b3 19 b1 7e 70 23 53 9b 95 85 5a f7 79 d8 67 6e 56 81 b6 7f 42 cc e9 c1 3f d0 8a ac 8e 8a 09 50 3e 29 72 72 37 b6 2e 4f bd eb 27 f7 39 e1 1a 32 23 5c b1 63 df 88 1f 04 84 f2 22 9a be a9 92 53 31 19 dc aa be 6a ba 88 75 7a 9a c4 f8 97 45 49 9e 15 a5 6d 97 9d 1b 52 06 e3 7a 46 ad 4d 32 6b ba 12 5e 9a 4e 6b d3 f9 c2 4d 11 72 66 3d 47 9a 3d 0e 57 f3 2b 56 96 9f 6e 02 04 d2 0f 60 29 f6 39 bb df 47 4b 18 8f d6 15 03 3a 66 f7 04 29 8c 62 4f 39 2c 36 c9 d8 f7 a7 9f 1f 9b 84 27 67 ad 14 53 f9 76 46 86 86 d0 ee c6 Data Ascii: d2nc~m*_]k;"#Yn#Rgp?=FAu$BI95=_~p#SZygnVB?P>)rr7.O'92#\c"S1juzEImRzFM2k^NkMrf=G=W+Vn`)9GK:f)bO9,6'gSvF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49890	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	678	OUT	GET /sumbangan.com/public/campaigns/large/640ea938a18a8_MOBIL.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:53 UTC	607	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:53 GMT Content-Type: image/jpeg Content-Length: 155871 Connection: close x-oss-request-id: 674319E97BFFD33537EE305C Vary: Origin Accept-Ranges: bytes ETag: "14297B05F1FBE0455504F7E2F9CE06E4" Last-Modified: Mon, 13 Mar 2023 04:40:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 31568467108944054 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Tue, 14 Mar 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: FCl7BfH74EVVBPfi+c4G5A== x-oss-server-time: 2
2024-11-24 12:19:53 UTC	15777	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 53 2a 2f 2b 78 aa 8b ed 0e 09 0e 05 55 1c 50 bd ce 47 35 57 8a dd fe 16 1e 20 82 08 d7 94 61 04 10 40 01 04 10 44 40 10 41 04 00 11 d6 39 47 58 e0 0e 50 41 04 00 11 d6 08 20 00 8e 50 41 00 1d 60 82 08 88 0e 51 d0 64 b4 4b a2 8e 70 47 8a 97 4b 1e a6 e5 b9 a7 28 b7 81 bd d3 6d eb 85 c7 6e dc fe bc b0 f9 15 fe 4b 93 fb d7 20 fe 12 2c 08 f8 66 2d 4e da 7a d9 58 ce c5 53 ed d8 4d 43 aa 28 a3 7b fb 50 20 84 ea 1c 1b d3 7b 65 60 47 f1 85 81 3a c4 eb 87 71 31 ae 7c 5c 25 a5 22 26 75 68 f2 4b 1a f0 23 85 10 41 04 46 9b c9 b9 04 11 cc 8a 13 8f ad 30 47 f1 91 0f ab 33 31 ad 82 e0 d3 59 56 7f 20 65 86 29 28 e7 ad 7e 48 5b 71 0a aa c8 28 99 9e 67 58 9a 41 14 7b 86 76 54 0a 7d a4 8c 20 88 db 86 60 55 8e 5d 6b c1 87 f1 71 a6 83 64 2b e5 eb b9 1a 67 a7 db 2a 08 ba 8d 57 Data Ascii: S/+xUPG5W a@D@A9GXPA PA`QdKpGK(mnK ,f-NzXSMC({P {e`G:q1\|\%"&uhK#AF0G31YV e)(~H[q(gXA{vT} `U]kqd+gW
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 9b 28 b5 60 8c d2 f6 0e 9b 0c 25 d1 c7 9f d9 c3 42 52 61 fc b8 df 26 33 52 ae e4 db 9b 8a 1c 1d c0 59 00 91 67 45 55 2d dc dc f7 24 96 7d 19 89 eb 8f b3 ff 00 7e 09 30 d7 c6 f6 e7 91 72 28 bd 56 1c b8 7b e3 49 d5 b9 1f c9 e9 bd 3e 45 7c d6 c7 4d bd 90 9a 89 95 8c 92 76 09 a1 0e 03 a2 d9 c6 4b a5 bc 4f 40 85 8d 5f cb db 2b 1b 12 91 93 94 65 1d 6c 80 71 d5 d2 3b e2 0e 05 03 9a 4f 07 53 f3 76 3f 35 19 b0 64 19 07 70 5c 04 8a dc 4b 5a 85 f9 11 cb 95 42 7a 04 a2 95 61 7a 22 aa 76 f7 a7 60 10 83 4c 3b a5 dd c8 38 6f ee b2 9f fd b2 fd 14 ff 00 d5 1f 6b 5a 17 d4 ee ec 74 53 56 38 60 b6 a0 71 02 00 fa e4 9f 47 f5 a7 8f 4e 1d 79 2e e4 8a da 35 65 2c 8b 2d 29 74 c7 3b 61 10 89 c6 46 74 da c8 a6 98 38 8f 02 dd d0 d2 b9 87 b3 a5 ec f7 a3 dc 37 06 e9 d0 ea 3d c3 74 38 Data Ascii: (`%BRa&3RYgEU-$}~0r(V{I>E\|MvKO@_+elq;OSv?5dp\KZBzaz"v`L;8okZtSV8`qGNy.5e,-)t;aFt87=t8
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 7d 26 68 b0 fb 25 04 9d 1a 99 ac 67 35 2d 44 6b 08 c9 70 89 b7 89 7c 70 7c df e0 8e 84 78 46 35 88 f3 0e 8e 58 13 ad 65 25 c9 ec 71 e8 76 e4 9e 1a d4 53 6e 05 47 6c 66 db 8a ed 19 2b 8a 4a a8 50 2a 7f 2d ee 00 83 f0 95 83 2f b6 3e 44 25 43 56 f8 f8 1e 58 b2 a9 8a cd 39 b7 a2 9e 86 33 be 27 aa 58 da ea 44 5c 0b c7 72 79 3d 38 8b d7 14 d8 dd 94 11 ca ce d9 07 6c df 26 22 7c 95 ea c1 d4 99 6e b1 0d 93 0c ed 2b 76 d3 13 8c 71 68 2c 1d cd 60 5f 94 92 1c ab 83 56 37 30 f9 f5 64 1c 6f 87 c6 c5 4e e8 c7 fd e3 be 22 ea ef a2 38 fe 84 66 ba 2e 8f 6f a9 32 fd bd 91 4d e1 ce 0d 31 e9 8f d7 9a 36 83 82 34 e5 6f dd 87 60 84 db 8c b6 e8 de a2 84 a9 1c 19 10 86 d8 08 42 28 0c 9e 84 d0 84 08 f9 28 3c 94 7b 67 fd 56 68 fb 88 dd 2f 95 69 e8 d7 41 a6 13 91 8f 70 9c 04 2e 9c Data Ascii: }&h%g5-Dkp\|p\|xF5Xe%qvSnGlf+JP*-/>D%CVX93'XD\ry=8l&"\|n+vqh,`_V70doN"8f.o2M164o`B((<{gVh/iAp.
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 4f e4 6b 72 42 86 fa b2 8f 7b fd 88 ad 98 d7 fc 5a b9 23 03 b7 d0 79 67 6f 79 4a 84 93 f9 6a 0b 3c f3 c4 91 ae 9b a4 d1 7e c6 b3 ea 9e 9a 72 cf 24 7b af 0f 89 e7 d1 8f f7 8d d8 44 e4 b7 73 b1 e5 8f 6e 2b 7c dc a4 d3 bb b7 eb 22 0e dd be 38 a5 e9 7a d2 a8 a4 89 f6 12 aa 57 a1 f7 b2 bd b9 22 e4 a1 f3 81 9e bb 27 71 d5 40 42 d2 fc ac 7e 0d e6 56 fa 90 8d 7d 2b 2b 69 9c cf 90 95 75 05 d8 e6 3f 91 8e ea c6 72 36 ac 20 e1 82 2e fc e8 a4 c8 89 c1 46 e6 dc 51 e4 1d b2 47 c9 6a 23 d2 93 21 f2 ea b8 3a 34 ce 61 fb 04 10 44 62 c3 12 74 e4 21 2d c5 f1 93 74 1e bc a0 6a 4a 18 ab e8 76 3e 92 70 18 a3 66 65 9d 3e 9d 81 9c 6e 56 7a bd d8 7e 10 d1 f6 c7 fa d9 32 16 38 2d 0f 49 7d c9 26 ae 36 d6 f4 ed 02 dd f8 c5 3e bc 11 cc 97 08 4f 39 00 fa b8 b9 8e 3d 36 64 37 a8 96 4b Data Ascii: OkrB{Z#ygoyJj<~r${Dsn+\|"8zW"'q@B~V}++iu?r6 .FQGj#!:4aDbt!-tjJv>pfe>nVz~28-I}&6>O9=6d7K
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 84 49 09 ed c8 51 ab 8f ac 17 19 38 e2 2d 4d 33 87 c0 c9 7a e4 3d c1 bc 6d a9 ed 08 d7 27 b9 be 9c 7c 11 24 63 20 ca 44 f0 8e ac 47 e0 63 10 83 b0 3e c4 73 a6 d4 6f 13 c3 3f 69 09 e2 47 a7 c0 4b 14 5c b9 70 70 ce a1 43 a0 89 6a f5 b9 c9 f3 21 e1 46 f2 e0 be 64 31 a8 b8 52 6f 43 b7 09 c0 4a f8 c3 5c 4e 87 7a b7 c2 09 e5 8e 05 0b 35 e2 5d 10 6d fa 11 cf 57 bb 1d 06 38 9c f0 70 6b 4f d6 7c 20 ed c5 77 4b 8c 85 23 e3 21 5c 83 ae a0 53 b1 21 0b d8 9a 2c c4 69 fe c7 ac 17 6d 42 62 68 46 17 a9 16 77 2e 3a 81 d9 d9 62 b1 c8 80 87 d3 9e ec fa 71 55 5d 9e 46 67 f1 2c a9 3a 84 7f ea 88 57 08 d0 b8 31 e5 53 22 c0 9e 72 0f 5b 5f 20 f6 e4 1c 66 7c 97 a2 c7 5f e6 c3 3d 2c 4e a2 e6 b1 3f c9 84 75 a3 a2 8a 91 d0 75 21 4c 63 c8 be e6 81 89 c7 17 c7 20 fa 2d 3a da 91 f3 34 Data Ascii: IQ8-M3z=m'\|$c DGc>so?iGK\ppCj!Fd1RoCJ\Nz5]mW8pkO\| wK#!\S!,imBbhFw.:bqU]Fg,:W1S"r[_ f\|_=,N?uu!Lc -:4
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 73 e6 c3 a6 64 57 94 9e 5e 10 89 9e d6 5b 55 6e 42 49 25 ad 3b 93 cd de 8a ef fb a0 28 f5 3f 6e 18 1e 2f da 9f f7 e0 03 60 5b 50 51 8d c9 b4 d6 15 0c 83 5e 8c de 6c d2 cf 21 64 9f f8 b4 62 e8 ee 91 3e a7 4d e6 d2 1f 04 02 0d 31 b9 06 ee 9d b4 4a 27 97 59 dd f0 69 00 e2 19 26 27 c0 a9 f2 e3 11 d3 7c ab 19 fc 1d 31 6a 46 eb 03 d0 1e f1 bc d2 4f b3 27 97 81 31 8d 31 c9 ff 00 35 29 3a fd 43 c5 2e d2 b1 22 b4 aa d3 eb f6 47 b7 21 34 b7 4a 07 8c fe 94 b8 a7 27 e7 20 02 ec cd 4a 4c 95 d5 1e 41 a2 0f d9 44 96 d7 a0 f2 f4 e5 f6 43 f2 e4 d3 92 2b ba 2d d1 1d 40 d6 8d 71 3c 5e ec d2 7a bf da 89 c6 57 bc 28 e8 72 52 4e 46 31 15 32 90 88 27 32 8e 35 16 e4 d2 19 b4 fc e4 e0 9c 05 9b e6 44 3e a0 6b ee 3b 31 3c db 5d 4a 42 12 49 3b 03 53 e3 24 f9 db 5f 96 80 09 26 b0 d7 Data Ascii: sdW^[UnBI%;(?n/`[PQ^l!db>M1J'Yi&'\|1jFO'115):C."G!4J' JLADC+-@q<^zW(rRNF12'25D>k;1<]JBI;S$_&
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 41 2e 8e e4 45 dd 06 44 24 d6 7a c0 76 e2 41 73 77 09 d4 10 62 1e f2 2e 91 6e 97 43 84 22 6e 8b 06 26 fb 83 f1 91 17 19 21 e2 a8 58 3b 9a b0 c3 a1 27 91 0c 72 42 ef 1b 8c 94 52 6f 8e 14 fa cd 65 0d 9d e6 ee 79 09 c0 48 b5 1a dd 1b dd 87 ba 0e a8 7f 32 4e 0f c5 14 db 5f 5a 38 b2 29 72 78 46 ef c5 c3 14 95 6f 89 fe 02 55 70 32 52 70 8f 74 38 70 46 42 5c eb a2 36 8e b8 a7 f5 82 26 77 46 64 13 8f 77 78 7b 72 44 91 bc 89 d7 7b 46 c9 c6 4e 03 0e 2e ba 43 25 ea 15 4f 8f 4c 1e 13 eb 43 b7 09 db d3 91 12 cb 64 f1 91 20 e8 b2 0f e1 27 86 b7 81 ea 2f 09 d4 f9 c1 f0 40 c9 2c 99 14 f1 e2 c5 89 c6 a4 76 8b 11 77 04 7f 7c 86 dc e3 e0 52 9f fa a1 e0 6b 08 b5 60 f5 63 6e 3a b9 e4 8e 8e 0d e4 16 f4 bc 10 9e 1d 5c ca dc d9 39 22 da fd fe 47 af 8c 8f 93 5c b7 bb 30 74 fb 0a Data Ascii: A.ED$zvAswb.nC"n&!X;'rBRoeyH2N_Z8)rxFoUp2Rpt8pFB\6&wFdwx{rD{FN.C%OLCd '/@,vw\|Rk`cn:\9"G\0t
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 5f 2e 7d 38 80 67 5d 49 8b b3 1a 86 d4 26 fb 1c 95 62 51 99 4c 9e 30 d2 9a 4c 71 93 e4 44 bd f0 8a 18 1a 1a f2 f2 97 36 83 a2 b1 d8 0c ff 00 7b 86 5e b0 f1 14 cc 06 74 02 a1 2a 74 c8 b6 11 31 37 ea 81 b9 e7 b4 e5 21 27 88 e8 21 62 56 32 6e f5 44 6a 7f 0a 2d ae 4b 5d 2b f4 74 59 f1 fc 4b 6d bd 3a 74 c8 d3 a6 4d bb 08 c7 20 e4 93 d0 86 be 94 1a 6a 81 c1 32 93 6c 5b 01 3e 76 96 10 df 4a 3c 29 76 60 6f 21 77 0a a7 44 03 a6 9c 9e 32 49 a4 88 e5 50 f7 6d ed 62 ae ac 83 66 9c e6 93 d3 4e a6 4c 71 fa 33 45 6d 35 0b e5 a8 7c 2f ff 00 7b c7 12 ad 8f 85 ae 61 63 ac 58 9d 12 35 0b 54 f5 00 1d c9 e2 16 c7 d6 53 f7 3d b4 a1 4a a3 9a 4f 37 a3 27 37 d1 84 f5 c3 d8 da 7a 3d 81 4e f1 2b b2 8b 81 b7 c7 a1 2e d5 9f 95 05 3f ac 0e a7 6b d7 ba f2 11 c4 86 f8 3d b9 36 3f 8e 24 Data Ascii: _.}8g]I&bQL0LqD6{^t*t17!'!bV2nDj-K]+tYKm:tM j2l[>vJ<)v`o!wD2IPmbfNLq3Em5\|/{acX5TS=JO7'7z=N+.?k=6?$
2024-11-24 12:19:54 UTC	9022	IN	Data Raw: 6e 66 02 8c c4 59 4f e4 e5 0b bb 45 b8 d6 67 1f 8c 34 d2 73 cf cf f3 e1 ea fc 31 f5 ab 0c 31 f0 b5 1c e7 39 7b 93 75 ff 00 44 1a 7c 9a 6c e3 de bc 91 08 05 0e 41 d6 55 83 a2 d2 2c 08 1b 9a 51 9e 44 77 f6 37 32 cf 31 34 3e 54 68 06 7c 70 a5 a8 4a 61 94 96 81 3a 47 96 b2 7c 67 83 48 52 fd 2d 38 a3 e9 76 76 b2 52 eb db 5b 03 72 45 cf a7 40 19 fb 7a 06 91 2c 82 9f fa 51 2c a9 2a 01 b9 11 45 24 ec b3 41 6a 15 16 f5 91 fe d7 a5 09 70 21 a4 f5 e5 92 2c f1 8a 75 ac 95 b1 c7 d4 45 de 9e 5d bf 79 5a 92 69 aa f9 d8 70 e5 11 56 12 a8 58 9e ac 43 64 6d 68 54 4e 91 b7 75 b6 a2 79 64 94 93 9b f8 f6 7d 18 1c 19 dd 29 b4 f4 81 2a 93 6c 2b 4c 75 fa b7 1d b9 e6 93 9a f1 3d 39 a6 9e 23 ca 1d 11 e6 45 48 c6 c0 4d c3 43 6a 23 e8 5c d8 92 f4 d2 4e 4d 3f 95 3c 49 90 3e 9f 31 28 Data Ascii: nfYOEg4s119{uD\|lAU,QDw7214>Th\|pJa:G\|gHR-8vvR[rE@z,Q,E$Ajp!,uE]yZipVXCdmhTNuyd})l+Lu=9#EHMCj#\NM?<I>1(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49892	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:52 UTC	728	OUT	GET /sumbangan.com/public/campaigns/large/62cd1b8fed963_62a6920f30171_TABUNG_BENCANA_KEPERLUAN_ASAS_FASA_1_(30).png HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:53 UTC	608	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:53 GMT Content-Type: image/png Content-Length: 425399 Connection: close x-oss-request-id: 674319E91698CC3735FB68EA Vary: Origin Accept-Ranges: bytes ETag: "F5FA2479EDA8DD60934B60F19C503D16" Last-Modified: Tue, 12 Jul 2022 06:58:24 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 419597554509738610 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 13 Jul 2022 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: 9fokee2o3WCTS2DxnFA9Fg== x-oss-server-time: 16
2024-11-24 12:19:53 UTC	15776	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 77 08 06 00 00 00 53 f2 b9 fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e cc bd 09 90 65 e9 55 1e f8 dd fd de b7 bf 97 f9 72 df 2b 33 6b af ea a5 ba 5b bd 4a ad ad 91 84 04 88 16 d0 58 02 1b 09 0d 1a c6 63 b0 14 76 cc 78 c2 66 0c 31 26 3c 36 8b cd d8 84 c7 2c 01 31 03 06 d9 58 42 b2 d4 2d f5 5e dd 5d fb 9a 55 59 95 55 95 fb 9e 6f df ee 7e ef c4 39 ff cb 12 26 02 8d a1 85 83 8c c8 ca ca 7c f7 dd 77 97 ff ff bf ef 7c e7 3b e7 4a 71 1c c7 f8 0b be 8c 81 51 78 ae 03 44 31 54 49 45 26 9b 85 6d bb 88 62 09 9a a6 c1 75 6d 00 11 54 43 87 6e 9a 08 c2 10 9e ef c3 4c 98 c8 59 49 14 ad 34 66 fa 06 31 95 e9 41 26 8c 61 c5 40 18 7a 90 14 09 2d 2d 46 dd eb a0 13 d0 ef 0a 0c 49 Data Ascii: PNGIHDRwSsRGB IDATx^eUr+3k[JXcvxf1&<6,1XB-^]UYUo~9&\|w\|;JqQxD1TIE&mbumTCnLYI4f1A&a@z--FI
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: de 9d 67 12 f3 e0 83 a7 70 75 fe 36 3c 45 42 32 9b c5 ea ca 2a 12 ba 8e 89 a9 61 bc f0 a9 e7 51 cc a6 38 75 42 a5 b6 d4 5d ef f6 c2 12 4e 9f 7e 8b 1f d4 65 d0 73 34 ac 14 0e 4c 4d e1 8f fe f0 eb 5c a5 f2 f8 13 0f 61 6a d2 c2 40 a6 89 b4 29 63 77 73 13 71 b8 8d f1 61 0b 76 c7 c5 95 9b bb 38 73 a3 ca 51 7a ad 4e 51 75 c4 55 0b c3 93 33 58 ba f3 df 1e a1 b3 21 53 cc 0e be 06 ef dc fe 3a be 76 e1 b7 70 64 ec 31 7c f4 e1 cf a2 27 3d 20 8c b5 dd 8e 97 bc 65 d7 73 b3 59 5e c0 ef bc f6 8b 58 2f cd b3 65 52 51 0c 3c 3d f3 43 f8 91 67 fe 3e 34 49 43 c7 6b e1 8f de fc 97 58 2a df 80 2e 6b f0 b8 21 16 33 d9 6e 8a ef bf 46 75 7a c8 11 a5 9d 06 d3 d3 f8 f1 f7 7f 09 29 b3 57 a8 b4 dd 67 64 6c d7 56 f0 e5 b7 ff 15 4a 8d 2d 7c f2 d1 9f c1 b1 c9 a7 84 5a 71 ff 39 21 7f f9 Data Ascii: gpu6<EB2aQ8uB]N~es4LM\aj@)cwsqav8sQzNQuU3X!S:vpd1\|'= esY^X/eRQ<=Cg>4ICkX.k!3nFuz)WgdlVJ-\|Zq9!
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: c2 92 54 37 cc c2 14 a5 cc a6 ae aa 00 3a 1e a2 7a d9 7d 92 6d 4e f9 0b e5 63 62 55 c7 9b 9e be f2 bc e7 ab 65 58 8c 06 3c f4 e0 43 d0 e9 6d 48 ac a7 a4 a8 91 e8 97 2b 14 44 f2 42 a7 a2 42 3e 03 bd d9 8c e9 f9 71 d4 f3 2a 78 db db 91 c9 c7 50 c9 65 a1 d7 a9 e0 32 33 a1 ad 0e 63 b1 8a 41 8f 0f 7b 36 0d 22 9f 49 22 b2 18 44 ff d0 00 66 13 29 bc 74 71 02 55 b3 1d 46 47 40 98 e3 e5 06 35 d6 5c 75 f0 60 2c a2 58 49 a3 50 88 8b 57 3c fb 2f e6 6a 33 4a 92 3b 52 8b 51 23 ff 6d b2 50 e2 43 a3 1f 1b ac 16 bb ac 32 12 eb 71 54 8b 39 d8 1c f4 52 37 c3 e6 b0 89 14 89 90 62 a5 4a c3 89 36 81 1e 89 5a c8 f5 57 6b 10 8d c4 c4 09 30 15 4f a0 8a 2a fc 3e 3f 6c 46 9b 64 85 f7 f7 0e a2 a3 ad 13 56 ae 16 6c 4e 9c 7e fa 38 2e 8e 9d 97 95 86 d9 64 87 db d9 2a 86 3f 89 6c 02 0b Data Ascii: T7:z}mNcbUeX<CmH+DBB>qxPe23cA{6"I"Df)tqUFG@5\u`,XIPW</j3J;RQ#mPC2qT9R7bJ6ZWk0O>?lFdVlN~8.d*?l
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 33 02 21 af 58 2c dd 4e b7 04 f5 9c 1a 3a 81 9e ae 3e d9 cc 99 4a 47 a8 11 35 07 6c d3 1f 3a b6 4f ba 98 eb 57 6d 92 5c 10 b6 ce 43 11 3f e6 16 67 b1 7e e5 06 cc 2d cc 22 96 8a 8a f8 8d dd da 6c 86 90 a2 05 9c 1b 19 92 ea bc a7 b3 1f 8d 75 4d 62 47 fd 93 6d e8 1a b5 e7 df fa fd b4 90 b1 54 97 a5 e2 bc a2 96 37 28 e7 c5 0a c5 49 01 c6 08 ee 8e 28 42 e5 4f ca 86 a2 d5 98 b0 63 ed 45 b8 75 c7 c5 18 3f f2 2a d4 d9 45 58 6b 74 50 99 f3 f0 06 a2 b0 58 cb e8 eb 73 c3 6e 73 63 6a 3a 03 b3 cd 89 fe 6e 0f 46 e6 d3 f8 fd 6b 67 f1 c6 a1 39 e4 ca 34 fc 2a ed 36 2d 97 7f 8d 42 98 e3 ec 83 0b 90 c1 62 41 4b 77 3f dc b5 f5 02 bd d0 96 63 d0 96 fc 58 d9 6e c7 8a 16 97 c4 dc 9d 3c 11 c6 e0 70 08 de a0 1f 61 df 59 ac e9 2d e2 f6 0f ae 42 47 73 1d 8a 54 d5 a6 75 40 c9 89 c1 Data Ascii: 3!X,N:>JG5l:OWm\C?g~-"luMbGmT7(I(BOcEu?EXktPXsnscj:nFkg946-BbAKw?cXn<paY-BGsTu@
2024-11-24 12:19:53 UTC	16384	IN	Data Raw: 01 5b 0e 35 8b a8 1d d0 62 42 5e 83 4c 98 c2 01 5b 8b 13 c1 96 76 d7 38 02 f2 91 8e 38 aa b9 f3 32 ee 95 87 e7 b3 5f fe 3c 77 97 ee f0 f8 93 0f 33 3c 30 cc fc ed 55 ae be f2 3a f3 d7 ef 50 2b b7 99 98 1c c3 37 6c 76 6b 0e 75 cb e7 e4 83 27 f9 87 3f ff 0f 34 15 52 3a 2b b1 15 d6 6b 75 35 f7 9a b6 74 cc 22 e4 92 03 48 6a a9 6e 21 25 63 77 29 e8 24 6c 4a a2 69 6b 0d c1 d0 ca a7 14 53 bd 8e ec a6 97 d7 ae f0 67 9f f8 63 76 8b ab 24 22 f2 3a 82 3a 51 10 6f b9 e3 88 d0 b7 6b b5 bb e7 85 50 4f 7e 6f ff b0 5a 67 13 c9 41 2d 52 84 a2 58 6f 38 aa bb 11 0d 44 44 e3 a4 2d c6 06 86 f9 c1 27 de fa 3d 38 d0 bb 68 57 35 d2 09 d6 b6 51 e2 a5 bb 5f e6 a5 3b 5f 62 b7 b6 c6 44 df 41 fa 62 c3 dc 58 bb c4 4e 6d 9d 4e 5b a6 88 41 82 56 88 be f8 08 7b 87 4e 30 33 74 54 45 cb d7 Data Ascii: [5bB^L[v882_<w3<0U:P+7lvku'?4R:+ku5t"Hjn!%cw)$lJikSgcv$"::QokPO~oZgA-RXo8DD-'=8hW5Q_;_bDAbXNmN[AV{N03tTE
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 33 78 fe 7c 88 e3 87 fa b8 31 df e2 ab af af b3 9b 37 09 18 26 c7 0e f8 39 72 48 20 a9 2e 6f 5c 76 b8 b3 dc 56 1f e7 14 5d 7e fe 89 c7 e8 8b 54 b9 b6 75 87 a1 43 60 49 4e 72 32 4c d6 ca 51 69 f9 f8 ee bc 78 1d 43 3a 60 73 6c dc 4b bf e5 b0 eb 74 79 67 d9 d0 1b 38 ea 6f 33 92 70 74 2f 6a 8b c3 5a 37 0a ad 3a e5 a2 43 ce b6 58 b5 fd bc ba dd e4 56 ce e1 44 7c 94 4f 9d 7e 82 0b 7d 69 12 4d 31 5d e9 60 0b 8c d5 e8 e8 4e dd df 97 c6 f4 7b 69 b5 6b 6c 3b 45 e6 9c 26 86 3f 48 36 5d a7 d5 d8 a1 e5 18 98 8e a9 ef a1 e8 77 7d 3e 4b 09 7a cd 8e 24 27 f5 60 2e 49 cf 12 85 5d 1b 0b bf 15 27 18 4b d1 f6 06 71 bd 19 4a 0d 2f 37 17 17 29 d4 1c 02 ad 3a 13 b1 28 4f 8d cf 30 3d d8 47 78 df 08 95 52 85 85 2b 6f 28 9b 37 74 f0 30 76 df 90 ca 86 5a 8d 06 81 90 45 5d 9c b0 ac Data Ascii: 3x\|17&9rH .o\vV]~TuC`INr2LQixC:`slKtyg8o3pt/jZ7:CXVD\|O~}iM1]`N{ikl;E&?H6]w}>Kz$'`.I]'KqJ/7):(O0=GxR+o(7t0vZE]
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 99 9f ef a6 98 b7 e1 72 79 8d 45 84 48 ba ea 53 69 6d ca 36 02 a3 8c 62 f5 61 a6 b6 61 d4 22 6b 0b 99 38 44 ff 6e 4c f2 4b 59 e0 4b 3b 6e a5 07 bf 0c a3 1b f2 2e 55 84 ff 8d bc ab 3e 45 1b 28 78 5d ab 2d 85 d7 88 b3 95 d7 ce 80 cd 0d c2 da d2 fe ba be e2 90 fb 91 46 43 b1 d6 15 d9 4d de 4b d2 60 18 0d 89 7c df e8 f7 8c 26 43 e4 90 57 3e be 2b 61 70 e3 bd fa c1 e9 ba 5e f4 8d db 52 16 6c ea f6 0d fe c1 95 a8 c0 d2 e3 fc 30 e4 fe ef 35 38 6d 2d c1 5f cf 29 6e eb 9a 2e 46 47 a7 15 eb d8 eb 32 3c aa 85 7c 94 cc 5a c8 95 05 ce 31 2b a9 85 f2 d8 35 99 69 6d 6e e3 8e 5b ae c2 ef c8 12 1e 1b 24 3c 3b c9 a5 4b 45 c2 29 8d 2d 37 dd c8 2d 77 6c 53 d3 f4 f4 d0 51 6c a5 b3 78 4c 8b 34 35 f8 b0 da 5a 78 e6 17 43 9c 9a 90 14 2a 33 f9 8c 1d 87 cb 4e 47 77 3f b9 7c 8c b9 Data Ascii: ryEHSim6baa"k8DnLKYK;n.U>E(x]-FCMK`\|&CW>+ap^Rl058m-_)n.FG2<\|Z1+5imn[$<;KE)-7-wlSQlxL45ZxC*3NGw?\|
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: a0 5d d4 e1 17 26 c5 a5 53 19 25 a1 90 29 ce 51 45 55 27 16 8b b3 b9 b9 a5 76 1a b1 78 8c 54 52 f4 8f a1 75 a1 63 db ca 52 72 68 38 ab ac 62 73 eb 1b c4 d2 19 1a c2 04 b4 75 06 86 06 e8 4b 66 f0 aa 15 62 22 05 a9 e7 71 ec 2a b6 6b 51 28 8a 67 f0 20 6d 57 48 24 06 8d 42 5d 25 bd 49 5a 54 47 a6 1c dd a3 53 5e 43 2b dd 65 20 16 a8 18 d4 bf 78 ee 3c b9 b2 ad 0c 19 9c a8 c9 9e d9 7d dc 7f e4 08 83 7d 09 4c 53 93 85 18 ba 5e c3 08 36 d1 ca 37 18 d5 b7 d4 41 b9 da 9a a2 6e cd 60 c7 d2 24 a3 e2 53 ec 60 58 1a 11 c9 0f 97 6e d0 d5 25 26 98 66 71 83 4e ee 0c e3 d6 75 9e 7f fe 22 df 79 03 4a ad 18 87 0f ee 45 d7 cb dc be 7c 55 a8 3f 0c 0e 8d 2b 0b ca 8d e5 45 e6 46 4b 7c f0 09 83 dd d3 0e 6d 3b c1 9f 7f a7 cc 8b 27 1a 54 bc b0 01 32 65 c7 22 d0 54 2b 20 1a 6f 73 68 Data Ascii: ]&S%)QEU'vxTRucRrh8bsuKfb"q*kQ(g mWH$B]%IZTGS^C+e x<}}LS^67An`$S`Xn%&fqNu"yJE\|U?+EFK\|m;'T2e"T+ osh
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: e2 3f bf ba 86 61 78 05 31 fd e0 69 5f 4b fb 62 52 da 19 01 5b a2 d9 8d e2 39 28 2a 1c ef d9 7c 21 2c 85 55 99 f0 9c 92 d7 d4 94 5e 68 cd 4f 26 e9 7c 0a 56 7f ce bd 55 f3 e2 25 9e 08 2c d6 e4 99 e4 bb 75 29 a6 32 18 ab d7 91 d3 7f 01 d1 0b 18 70 62 58 53 18 b6 9c 16 d2 e2 7e 29 26 5d 9e 75 ea 6e cc ab f6 19 09 da c9 de 9e c5 85 c4 5e 21 75 2a 59 5a 71 ff 89 22 49 10 83 9c 04 28 f0 bc e2 32 a9 d2 9e ff 7f fe e3 4f e5 6d 45 e3 72 ea 0b af 3c db 55 e1 56 23 af 92 c9 a9 b7 51 d1 f0 9c ca e1 0a d7 3a 7e cf 06 ad 5f 5f fd b7 67 ea ec ff ff 3f b5 ec bd cb 88 f7 7c c5 8f 7d e1 07 a4 a0 f3 01 5a 96 23 bb 62 42 ef fc 87 07 13 0f 35 29 04 92 11 ab 1e 84 48 7d 2c 42 f4 a1 1c 0c 2c e4 dc 59 d3 59 8d 3b 3e 7e 2f 89 6c 6c 00 02 3f 10 98 8c a6 35 7c cd 5c b2 d8 75 fa af Data Ascii: ?ax1i_KbR[9(\|!,U^hO&\|VU%,u)2pbXS~)&]un^!uYZq"I(2OmEr<UV#Q:~__g?\|}Z#bB5)H},B,YY;>~/ll?5\|\u
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: bc 17 e1 8c 81 93 3f 13 90 1c 66 55 b4 c1 e4 a6 6b 7e 71 4e 11 ae 29 72 a5 b2 88 b4 bc 1f 5c 03 44 f1 c4 74 77 b6 a6 36 a5 41 61 29 42 e1 f6 88 18 50 a5 9a 38 a7 38 15 39 4e b4 db 66 b2 6f 90 bf ae 9d 64 45 ae 55 07 c3 db 30 06 ef 2d 3f 93 8d c5 91 2c a7 34 93 45 a2 04 6c 4c 2f c0 cf a6 b3 68 e5 8d 67 62 6e 66 66 3c 03 cd c4 86 3a 1a 2c 30 ec 65 ed 99 6a 6f 48 73 25 22 59 72 c6 12 4e ba 50 96 9c 9f 87 3a 17 13 8e c3 d2 51 74 31 12 6f 8a a8 f6 de 95 5d 3c fc d9 b7 7f fd 80 de eb 3f 93 58 48 38 1d 8a dc a1 3b c5 59 d0 05 0f 02 66 2c 5c 60 21 66 54 17 9b c7 b1 70 19 dc 32 93 59 70 e6 dc 32 f3 19 e7 19 d5 3f 70 72 f6 0e 66 e0 e1 16 92 e1 1e e3 0d a2 e1 83 cd a9 72 8c 83 9b 54 f2 77 24 95 30 bb d5 36 a0 4a 93 f5 1d 08 15 33 c3 5b c2 21 aa 0c 98 bd d3 f3 38 26 Data Ascii: ?fUk~qN)r\Dtw6Aa)BP889NfodEU0-?,4ElL/hgbnff<:,0ejoHs%"YrNP:Qt1o]<?XH8;Yf,\`!fTp2Yp2?prfrTw$06J3[!8&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49893	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:53 UTC	462	OUT	GET /sumbangan.com/public/campaigns/large/66b1d6c790192_CF_Cover_Kempen_New-01.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:53 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:53 GMT Content-Type: image/jpeg Content-Length: 169380 Connection: close x-oss-request-id: 674319E9F5E04B363604CD3F Vary: Origin Accept-Ranges: bytes ETag: "231208D141FE2ADFB753D4F0C1DD08ED" Last-Modified: Tue, 06 Aug 2024 07:54:47 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 1873168346732039754 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: IxII0UH+Kt+3U9Twwd0I7Q== x-oss-server-time: 1
2024-11-24 12:19:53 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 0d 52 34 71 f8 ab c2 b2 4b 6c 13 ba 75 fe 93 1f fe 94 3f e2 1c ff 00 56 bc fe 88 1a 48 7f fa 50 ff 00 88 73 fd 5a 68 4f 15 6d 47 26 81 44 c3 cc a0 d6 c8 39 04 f1 a7 5f 69 45 76 ba 13 ff 00 a0 73 fd 5a b8 35 be 98 23 22 e4 7f c4 b9 fe ad 33 ac 0f 8a b3 90 3d 3d e9 8f a5 8d bc ca 9a 3a 87 bf 70 9d 51 ac f4 df fc 62 79 ff 00 cc af fd 5a ab f6 65 a7 3f e3 03 fe 25 7f cd 4d 82 7b 55 44 e4 62 a1 30 b5 5c 07 aa 73 0e b3 d3 60 67 f1 81 ff 00 12 bf e6 aa 1c d7 3a 5d 94 17 1d b9 84 a5 23 24 96 96 00 1f a2 9b 52 32 31 58 8b 4a bc d6 82 9c 27 2b 09 da 53 90 52 72 0f ea a6 18 87 24 a0 f5 4e 82 7a 83 a4 56 94 2d bb b0 5a 5c 50 4a 0a 59 70 ee 24 e0 63 09 f7 ac e1 a9 ec 87 91 33 ff 00 c1 ab f9 a9 8a b7 b7 3a 1e a5 45 b7 2d 39 05 e7 8c 86 f6 af fa 88 4e e2 46 31 c9 27 6f Data Ascii: R4qKlu?VHPsZhOmG&D9_iEvsZ5#"3==:pQbyZe?%M{UDb0\s`g:]#$R21XJ'+SRr$NzV-Z\PJYp$c3:E-9NF1'o
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 15 b6 f6 12 b6 10 92 d9 0e 2b 0b ca 38 57 d5 6c 0c e0 60 93 9c f1 56 5b d1 31 e3 b5 72 bb 33 78 79 bf 3e 23 d1 5b 90 12 97 92 94 36 b6 dd 0b 09 07 09 39 79 dc fa 90 13 c0 23 9c 59 58 58 cc a0 9d c1 f0 dc 2d 99 2a d9 3c b9 c0 1f 09 1a ee 37 5a 6e a9 dc e2 bd a4 34 c9 7a e3 6b 7e 6b 46 cc 85 79 4e 83 21 48 54 76 b7 b8 07 d6 f2 49 73 bf 6c e3 e5 8d 5d a9 ae 9c bd 70 4c 78 9a 79 31 9c 69 61 41 db 52 d4 84 24 11 90 42 98 23 23 6e 3b 81 eb de b7 3a eb 42 5e 15 16 c9 6a b7 dd 22 cc 8b 6e 5b 45 63 63 a1 d5 21 98 c8 58 29 46 dd a5 5b 63 76 0a ce 56 8e d4 dd eb dd 2d 2a fb 16 da bb 5c 8b 45 82 5c 29 33 54 e2 d6 e0 86 e2 83 ae 05 8f 2d 4d 82 49 4e 00 e4 e0 05 2b 19 e0 8c f7 92 1e 48 70 17 1c c5 ef aa 9e 32 d3 08 68 69 24 1f e5 36 23 6f bf d1 66 59 60 e9 0d 4f a3 62 Data Ascii: +8Wl`V[1r3xy>#[69y#YXX-<7Zn4zk~kFyN!HTvIsl]pLxy1iaAR$B##n;:B^j"n[Ecc!X)F[cvV-\E\)3T-MIN+Hp2hi$6#ofY`Ob
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 32 1c 7d 9e 6a 92 eb ce b2 b2 94 84 a9 6a 00 92 da 7e 2c 7e 6f 38 19 35 3c 34 96 92 e9 ee bf d3 91 b5 26 95 be 49 7e 0c e4 a9 c6 d7 e6 32 e9 18 f9 a3 20 12 3e 20 72 41 49 0a 1c 54 70 fc 22 1d 3d 89 a5 7a 17 65 b8 c6 98 a7 42 b5 74 56 f6 ad 1b 54 02 a1 cd 39 ef fc 11 55 23 7f 15 e2 27 13 ba 9b 30 60 ce 14 54 d1 f3 66 dd b4 83 b7 97 da 79 c7 65 cc 79 f5 2d 0e ad a0 da 77 81 b4 29 24 12 90 94 a5 18 27 b7 7c e2 94 8c 5b 23 c1 6e e0 a7 1f 69 11 d8 4b ce 7d 1f c8 c8 0f 20 1c 7c 29 18 2b 19 ce 71 ce 40 f4 a4 8e 81 54 97 b4 3d b9 11 1a 67 0c 17 5d 5a dc 43 ae e1 26 42 d0 52 96 db e4 e7 03 25 44 04 fd e6 b7 2a 7d e7 ad b3 12 f5 ca 44 a7 1b 71 6b 53 29 92 10 a6 9a 09 ca 52 5b 69 29 24 63 39 2b 59 18 04 11 9e 69 65 b3 64 73 40 e7 e8 ad c6 4b 98 0b 8f 24 cf f5 12 43 Data Ascii: 2}jj~,~o85<4&I~2 > rAITp"=zeBtVT9U#'0`Tfyey-w)$'\|[#niK} \|)+q@T=g]ZC&BR%D*}DqkS)R[i)$c9+Yieds@K$C
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: cf 91 32 42 94 42 9c 7d d5 38 a5 01 81 dc e4 e3 f9 fe 54 8c fa 4b 8e 39 b9 5f 08 52 77 0e 3b 57 3d 89 d6 8a fa b7 ce 45 86 de 8b 92 a3 12 31 87 28 ea 9c 9b 8d 89 cb 84 56 92 c4 98 eb 52 42 82 88 27 04 16 d4 8c f6 f4 dd 9f ba b3 60 40 95 11 b7 1b 50 69 45 c7 4b b9 4e 72 09 c6 47 6e dc 0a c6 b3 c8 d9 69 8f 83 c9 5a 52 4f c8 a8 03 5b 36 9e 52 5d 50 59 52 86 d3 8e 3e 63 f9 e9 ec 0d 16 70 0b 90 9a 49 da d3 10 d4 02 56 0c c8 72 55 31 87 53 2d 86 cc 7d c5 20 c5 2b ce 53 8f dd 8f 4c d5 7f 8a dc 7a 40 94 e5 d7 27 f2 79 c4 4c 0c a0 93 ff 00 94 f9 9f d3 57 67 2d f0 b5 ba 86 97 b0 0e d8 c1 ed 58 2c ae 6a 16 e9 57 98 37 05 f1 fa 7f ee fd 15 1b ac 0d 94 f0 b6 a5 d1 82 d1 f4 fe ca d5 ee 29 10 24 2d 53 c2 8a 92 51 83 1b 8c 1c 27 d5 7f 3a 48 3b 6d 90 ea f0 8b 93 60 87 d0 Data Ascii: 2BB}8TK9_Rw;W=E1(VRB'`@PiEKNrGniZRO[6R]PYR>cpIVrU1S-} +SLz@'yLWg-X,jW7)$-SQ':H;m`
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 47 71 1f 58 fc 21 45 5b 6b a6 a1 c3 25 cb c0 3a 0e be 1f f7 5e 6f 84 39 d8 65 23 60 70 b1 61 22 dd 6e 6f 7f 0d c8 b7 41 e2 a0 dd e3 a3 d2 fa 5f 72 b9 69 7b e5 f9 9b f5 e1 a5 fd 0e 63 76 96 89 8e ca d2 bd cb 0d ba e6 dd e3 71 40 2a 52 1b c2 90 40 ce 41 3b 39 76 44 41 b1 ba e4 68 ca 5b aa 61 48 5b 40 05 6d f8 0e 33 cf 39 38 f9 66 95 9d 43 b9 4e 73 5c 6a 89 37 28 ff 00 47 9f 2f 50 dc d4 fa 72 70 10 89 6e 25 b0 9c 9e db 12 0f da a2 7d 6b 5b 02 42 16 54 85 90 02 86 d1 9e c7 ed a6 54 b8 87 58 72 5b b4 34 cd ff 00 10 f3 48 bb 0f 52 ee 9d 28 61 16 e9 96 22 2e ae 21 2b 71 a7 7e 07 10 d3 89 0b 65 48 3c a4 0c 00 a3 c7 29 70 60 8e 69 39 76 ea 55 fb 52 5d c5 d6 e9 71 6d 52 5a 42 50 d9 6d 08 6c 34 90 e1 c6 dd a3 00 e4 93 c7 3d fd 69 6d e2 23 4c cc 91 a7 2c 1a da 3b 28 Data Ascii: GqX!E[k%:^o9e#`pa"noA_ri{cvq@*R@A;9vDAh[aH[@m398fCNs\j7(G/Prpn%}k[BTTXr[4HR(a".!+q~eH<)p`i9vUR]qmRZBPml4=im#L,;(
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: d9 cb 63 97 35 ad a2 46 6a 09 29 72 d5 2d bc 83 b9 a5 53 72 74 86 b1 bd 40 71 eb 46 8e bd ce 64 b6 48 54 6b 7b ce a5 40 e7 18 29 49 1c e0 d7 55 ba 75 e1 bf a6 3d 3d 8e d3 8d d9 9b bb 5c 92 3e 39 d3 d0 1d 59 57 ba 52 7e 14 7d c3 38 ee 4d 38 33 2e 3a 7e cd e5 a2 e3 3a df 07 cd 50 43 61 e7 50 d6 e2 4e 00 19 23 24 9e d5 62 3a 7c ba 92 a9 cb 58 d0 2c 36 5c c2 e9 ed b6 e7 fd 0d d9 b7 5d e2 48 b7 4b 50 3e 5b 72 da 5b 6a 41 43 dc 02 93 83 d9 27 8c 56 e3 f1 76 a0 92 47 d2 f5 4c 55 04 80 94 e2 12 4e 3f 58 ae 90 dd 34 fe 9b d4 d6 f3 0e eb 69 83 70 86 f0 ce d7 1b 4a d0 41 f5 1f ce 2a 24 f8 8c f0 c5 2f 48 da 67 6b ce 9b 49 ba bf 6e 8a 92 fc cb 43 25 4f 3c d2 07 d6 5b 3f 9c b4 8e e5 1c ab be 33 da ae b7 28 24 81 ba a2 5c 4b 6c 4a 66 99 b6 ac b6 a8 b7 0b 90 98 ca 8e 4a Data Ascii: c5Fj)r-Srt@qFdHTk{@)IUu==\>9YWR~}8M83.:~:PCaPN#$b:\|X,6\]HKP>[r[jAC'VvGLUN?X4ipJA*$/HgkInC%O<[?3($\KlJfJ
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 1c 83 90 82 01 50 f9 ff 00 35 32 7d 73 ea a4 ed 57 36 3d 8f ca 42 e2 db d1 e5 a8 a4 e0 b8 f6 d0 0a cf d9 c7 de 93 ef 4f ea 92 e2 dc 48 58 1f 17 20 7b 0c f7 35 0c 6f 32 16 1c 7d a7 19 21 c5 e4 2c 2b 95 25 41 59 3f 7e 46 2a 20 2e 6e e5 62 16 8d 56 ab e9 0e 7f e5 95 fa 68 a5 27 f4 3d b8 7f c6 d6 bf f2 8f fb a8 a6 7b 5c 3d 55 8e 13 fa 29 c5 a6 e1 3f 1e 09 69 6d 00 a7 f2 a6 c6 7b e5 23 1f 65 6d d5 c3 c0 e7 eb 25 38 fd 26 b5 3a 4a e2 c5 d7 4d d8 ef 17 38 cd bb 26 ef 12 13 4e b0 87 15 e4 a1 b9 1e 59 59 c6 70 ac 70 01 ef ed de b6 13 65 a5 77 34 96 23 bb e4 ad 48 6b cc 65 9f c8 a0 a5 27 71 51 cf c2 01 e3 1c f7 1f 7e 29 88 e4 cc 96 fd fc ab 6d 62 50 fa 60 c7 ab aa ff 00 36 69 ba bb 47 54 8d 51 31 b6 db 2a 5a e4 28 24 7b 93 4b db 13 bf d3 d8 dd f9 ea c7 f8 06 91 b7 Data Ascii: P52}sW6=BOHX {5o2}!,+%AY?~F* .nbVh'={\=U)?im{#em%8&:JM8&NYYppew4#Hke'qQ~)mbP`6iGTQ1*Z(${K
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 14 ba cb 6a 6f 10 a2 2c 72 0a 50 7f aa 28 1f ce 57 b0 20 24 d6 cb f6 c7 fc 24 88 df 48 fe 88 6f ee f2 f7 f9 5f 8b 5f df 9c 67 6f d5 c6 7d 3b e3 e7 4c 2f 59 7f 0b 2d 9d 4c 3d 64 e8 3e 90 92 f4 a7 12 a4 0b bd e5 01 28 6b 8f ac 86 12 4e e3 ea 0a 95 8e 39 49 cd 0c a7 6b 4d d5 7a 3e cc 50 51 c9 c4 0d 2e 3c b3 6b 6f 97 ea ba 03 a9 74 e5 a7 56 69 bb 9e 93 bd 46 f3 6d d7 78 6e c0 92 d0 3b 77 32 e2 0a 14 01 1d b8 27 04 76 ae 63 df 7c 06 f5 4a c7 d6 6b 5e 89 62 dc fd cf 4a 5c ae 0d a5 37 c6 00 09 6a 1e ec b8 5d 19 f8 1c 4a 02 b8 ec a3 8c 77 c0 d5 f8 64 fc 24 ba df 41 6a c9 b6 8e bc cf b8 ea 7d 3b 79 90 64 19 d9 0a 93 6c 79 47 92 da 78 0a 67 b7 e4 c6 36 f7 4e 39 0a e8 95 8f c4 ef 87 ad 45 66 4d fa d9 d6 3d 29 f4 45 a3 78 fa 45 c9 b8 ee e3 19 fe a4 e1 4b 99 f9 6d cd Data Ascii: jo,rP(W $$Ho__go};L/Y-L=d>(kN9IkMz>PQ.<kotViFmxn;w2'vc\|Jk^bJ\7j]Jwd$Aj};ydlyGxg6N9EfM=)ExEKm
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: e4 cb cb b9 de 11 6f 74 49 5b 48 69 d4 a9 61 48 18 09 5a 54 94 7d 53 df 9c 1f 7a 89 cd b0 f3 d9 f2 59 5b 9b 71 9d a9 27 15 ea e2 ca 6d 25 6e 46 75 29 1c 92 50 40 15 ca 7f e3 bc 40 eb c3 67 a3 bf ea 54 bd e9 2f f4 8f af ea a6 f5 ab 59 69 5b f1 08 b3 ea 08 32 9c 57 d5 42 1d 1b 8f f7 a7 9a f6 c9 3e e9 73 55 c5 17 6b 12 ad aa 85 35 71 98 25 f0 ea 65 32 10 85 25 e4 90 06 01 de 46 d3 c8 28 3d ea 0f 34 eb ac ac 38 cb ab 6d 60 f0 a4 9c 11 4f 0f 4b 3a f1 74 b3 4b 62 c9 ac 25 2e 65 b5 c2 1b 44 95 f2 ec 7f 62 4f e7 27 df 3c 8f 4f 6a da c2 fb 71 15 4c 82 2a c6 64 bf 30 74 f9 f4 f3 d5 58 83 13 6b ce 59 05 bc 54 8a 01 87 9d 75 94 85 6f 64 80 bc a0 81 c8 c8 c1 23 07 ee a4 ee a3 d6 fa 2b 49 4e 6e db a8 6f 8c c2 92 e3 41 f4 b6 b6 d6 a2 50 49 00 fc 29 23 ba 54 3e ea 57 a1 Data Ascii: otI[HiaHZT}SzY[q'm%nFu)P@@gT/Yi[2WB>sUk5q%e2%F(=48m`OK:tKb%.eDbO'<OjqL*d0tXkYTuod#+INnoAPI)#T>W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49907	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:53 UTC	595	OUT	GET /en_US/sdk.js?hash=14c3e620b38618c43ae37684c9f8e04c HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sumbangan.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	1925	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 6203f8a2347f4464338a841b0e724c50 ETag: "8327ec4bd9b98c44b23b9e5a1eeca109" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: YgP4ojR/RGQzioQbDnJMUA== Expires: Mon, 24 Nov 2025 10:34:19 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy-report-only: restrict-properties;report-to="coop_report" cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff
2024-11-24 12:19:54 UTC	878	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-11-24 12:19:54 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-24 12:19:54 UTC	14994	IN	Data Raw: 2a 31 37 33 32 34 34 34 34 35 39 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 38 34 35 33 32 38 36 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1732444459,,JIT Construction: v1018453286,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 20 39 32 3a 62 2b 3d 44 5b 67 5d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 69 66 28 67 3c 33 32 29 7b 62 2b 3d 47 2b 46 28 32 2c 67 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 3b 62 72 65 61 6b 7d 62 2b 3d 65 3f 66 5b 63 5d 3a 61 2e 63 68 61 72 41 74 28 63 29 7d 7d 72 65 74 75 72 6e 20 62 2b 27 22 27 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 2c 6d 2c 72 2c 73 2c 74 2c 7a 2c 42 3b 74 72 79 7b 68 3d 62 5b 61 5d 7d 63 61 74 63 68 28 61 29 7b 7d 69 66 28 74 79 70 65 6f 66 20 68 3d 3d 22 6f 62 6a 65 63 74 22 26 26 68 29 7b 69 3d 6e 2e 63 61 6c 6c 28 68 29 3b 69 66 28 69 3d 3d 75 26 26 21 6f 2e 63 61 6c 6c 28 68 2c 22 74 6f 4a 53 4f 4e 22 29 29 69 66 28 68 3e 2d 31 2f 30 26 26 68 3c 31 Data Ascii: 92:b+=D[g];break;default:if(g<32){b+=G+F(2,g.toString(16));break}b+=e?f[c]:a.charAt(c)}}return b+'"'},I=function(a,b,c,d,e,f,g){var h,i,j,k,m,r,s,t,z,B;try{h=b[a]}catch(a){}if(typeof h=="object"&&h){i=n.call(h);if(i==u&&!o.call(h,"toJSON"))if(h>-1/0&&h<1
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 6f 62 69 6c 65 20 2e 66 62 5f 64 69 61 6c 6f 67 5f 69 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 74 6f 70 3a 30 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 66 72 6f 6d 28 23 37 33 38 61 62 61 29 2c 20 74 6f 28 23 32 63 34 39 38 37 29 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 34 33 62 38 37 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 77 68 69 74 65 20 30 70 78 20 31 70 78 20 31 70 78 20 2d 31 70 78 20 69 6e 73 65 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 3a 62 6f 6c 64 20 31 34 70 78 20 48 65 6c 76 65 74 69 63 61 Data Ascii: obile .fb_dialog_iframe{position:sticky;top:0}.fb_dialog_content .dialog_header{background:linear-gradient(from(#738aba), to(#2c4987));border-bottom:1px solid;border-color:#043b87;box-shadow:white 0px 1px 1px -1px inset;color:#fff;font:bold 14px Helvetica
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 5b 61 5d 3d 64 5b 61 5d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 63 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3f 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 28 22 41 73 73 65 72 74 22 29 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 3b 69 66 28 61 26 26 61 2e 70 72 6f 74 6f 74 79 70 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 3d 3d 3d 21 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 61 72 65 6e 74 20 74 79 Data Ascii: (function(a){c[a]=d[a]})}}function j(a,c,d){var e=c&&Object.prototype.hasOwnProperty.call(c,"constructor")?c.constructor:function(){this.parent.apply(this,arguments)};b("Assert").isFunction(e);if(a&&a.prototype instanceof g===!1)throw new Error("parent ty
2024-11-24 12:19:54 UTC	1500	IN	Data Raw: 72 6e 20 6b 28 22 66 62 73 72 5f 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 22 22 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 56 61 6c 75 65 20 70 61 73 73 65 64 20 74 6f 20 43 6f 6f 6b 69 65 2e 73 65 74 53 69 67 6e 65 64 52 65 71 75 65 73 74 43 6f 6f 6b 69 65 20 77 61 73 20 65 6d 70 74 79 2e 22 29 3b 6a 28 22 66 62 73 72 5f 22 2c 61 2c 62 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 6c 28 29 2c 6a 28 22 66 62 73 72 5f 22 2c 22 22 2c 30 2c 21 30 29 7d 67 2e 73 65 74 52 61 77 3d 6a 3b 67 2e 67 65 74 52 61 77 3d 6b 3b 67 2e 73 65 74 44 6f 6d 61 69 6e 3d 61 3b 67 2e 67 65 74 44 6f 6d 61 69 6e 3d 62 3b 67 2e 6c 6f 61 64 4d 65 74 61 3d 6c 3b 67 2e 6c 6f 61 64 53 69 67 6e 65 64 52 65 71 75 65 73 74 3d 65 3b Data Ascii: rn k("fbsr_")}function f(a,b){if(a==="")throw new Error("Value passed to Cookie.setSignedRequestCookie was empty.");j("fbsr_",a,b,!0)}function m(){l(),j("fbsr_","",0,!0)}g.setRaw=j;g.getRaw=k;g.setDomain=a;g.getDomain=b;g.loadMeta=l;g.loadSignedRequest=e;
2024-11-24 12:19:54 UTC	14884	IN	Data Raw: 22 29 2e 73 65 74 49 73 56 65 72 73 69 6f 6e 65 64 28 21 31 29 29 3a 63 28 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 29 2e 73 65 74 47 72 61 70 68 44 6f 6d 61 69 6e 28 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 64 28 22 73 64 6b 2e 43 6f 6f 6b 69 65 22 29 2e 73 65 74 52 61 77 28 73 2e 4c 4f 47 4f 55 54 5f 43 4f 4f 4b 49 45 5f 50 52 45 46 49 58 2c 22 79 22 2c 44 61 74 65 2e 6e 6f 77 28 29 2b 68 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 61 3d 3d 3d 76 6f 69 64 20 30 26 26 28 61 3d 73 2e 43 4f 4e 4e 45 43 54 45 44 5f 52 45 56 41 4c 49 44 41 54 45 5f 50 45 52 49 4f 44 29 3b 76 61 72 20 62 3d 63 28 22 73 64 6b 2e 41 75 74 68 53 74 61 74 65 22 29 2e 67 65 74 53 74 61 74 65 28 29 2e 74 69 6d 65 72 3b 62 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 Data Ascii: ").setIsVersioned(!1)):c("sdk.Runtime").setGraphDomain("")}function i(){d("sdk.Cookie").setRaw(s.LOGOUT_COOKIE_PREFIX,"y",Date.now()+h,!1)}function j(a){a===void 0&&(a=s.CONNECTED_REVALIDATE_PERIOD);var b=c("sdk.AuthState").getState().timer;b&&window.clea
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 6c 3a 35 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 69 66 28 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 29 72 65 74 75 72 6e 3b 62 2e 74 79 70 65 26 26 28 28 21 61 2e 74 79 70 65 7c 7c 43 5b 61 2e 74 79 70 65 5d 3e 43 5b 62 2e 74 79 70 65 5d 29 26 26 28 61 2e 74 79 70 65 3d 62 2e 74 79 70 65 29 29 3b 76 61 72 20 63 3d 62 2e 6d 65 74 61 64 61 74 61 3b 69 66 28 63 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 64 3b 64 3d 28 64 3d 61 2e 6d 65 74 61 64 61 74 61 29 21 3d 3d 6e 75 6c 6c 26 26 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 6e 65 77 20 42 28 29 3b 63 21 3d 6e 75 6c 6c 26 26 64 2e 61 64 64 45 6e 74 72 69 65 73 2e 61 70 70 6c 79 28 64 2c 63 2e 67 65 74 41 6c 6c 28 29 29 3b 61 2e 6d 65 74 61 64 61 74 61 3d 64 7d 62 2e 70 72 6f 6a 65 63 74 21 3d Data Ascii: l:5};function d(a,b){if(Object.isFrozen(a))return;b.type&&((!a.type\|\|C[a.type]>C[b.type])&&(a.type=b.type));var c=b.metadata;if(c!=null){var d;d=(d=a.metadata)!==null&&d!==void 0?d:new B();c!=null&&d.addEntries.apply(d,c.getAll());a.metadata=d}b.project!=
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 72 65 6e 61 6d 65 46 75 6e 63 74 69 6f 6e 3a 47 61 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 46 42 4c 6f 67 67 65 72 22 2c 5b 22 66 62 2d 65 72 72 6f 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 28 22 66 62 2d 65 72 72 6f 72 22 29 2e 46 42 4c 6f 67 67 65 72 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 44 65 73 65 72 69 61 6c 69 7a 65 50 48 50 51 75 65 72 79 44 61 74 61 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 2f 5e 28 5b 2d 5f 5c 77 5d 2b 29 28 28 3f 3a 5c 5b 5b 2d 5f 5c 77 5d 2a 5c 5d 29 Data Ascii: renameFunction:Ga};e.exports=f}),null);__d("FBLogger",["fb-error"],(function(a,b,c,d,e,f,g){"use strict";g["default"]=c("fb-error").FBLogger}),98);__d("BaseDeserializePHPQueryData",[],(function(a,b,c,d,e,f){"use strict";var g=/^([-_\w]+)((?:\[[-_\w]*\])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49796	157.240.196.15	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1372	OUT	GET /signals/config/1055981978343897?v=2.9.176&r=stable&domain=sumbangan.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-U7zcUUam' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-24 12:19:54 UTC	1672	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-24 12:19:54 UTC	1491	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-11-24 12:19:55 UTC	14893	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: urn!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbo
2024-11-24 12:19:55 UTC	1491	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-11-24 12:19:55 UTC	1491	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 Data Ascii: );return Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue
2024-11-24 12:19:55 UTC	13402	IN	Data Raw: 65 64 49 6e 50 69 78 65 6c 73 28 62 29 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 3d 2d 31 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6a 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e Data Ascii: edInPixels(b).indexOf(c)===-1}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.cookie",function(){return function(j,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEven
2024-11-24 12:19:55 UTC	1491	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-11-24 12:19:55 UTC	1491	IN	Data Raw: 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 Data Ascii: h.listen(function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.ap
2024-11-24 12:19:55 UTC	13402	IN	Data Raw: 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 41 72 72 61 79 2e Data Ascii: e:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function g(a){if(Array.
2024-11-24 12:19:55 UTC	1500	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49896	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	676	OUT	GET /sumbangan.com/public/campaigns/large/6711a3da1b761_van.png HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 1142680 Connection: close x-oss-request-id: 674319EAF3A6953430C2B3BD Vary: Origin Accept-Ranges: bytes ETag: "47A36FD00B69FC9CA16175D419638919" Last-Modified: Thu, 17 Oct 2024 23:55:06 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11364880906213959026 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Fri, 18 Oct 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: R6Nv0Atp/JyhYXXUGWOJGQ== x-oss-server-time: 2
2024-11-24 12:19:54 UTC	15774	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 44 00 00 06 32 08 06 00 00 00 3c 7b a9 11 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec dd 07 bc 1c 55 f9 ff f1 ef cc ec ee ad e9 85 84 24 f4 1e aa 80 80 f4 a2 62 01 05 01 a9 12 3a 48 2f 2a 4a 51 a4 09 c2 0f 50 7a ef 52 54 04 54 8a 80 60 a3 49 35 60 90 0e a1 a4 90 7e db ee ce cc ff 7f 66 76 93 9b 90 e4 6e 99 99 dd bb f9 8c af 78 c9 cd cc ec 9c f7 39 3b e5 9c 67 9e 63 f9 1d 0f fb 62 41 00 01 04 10 40 00 01 04 10 40 00 01 04 10 40 00 01 04 10 40 00 01 04 10 40 00 01 04 10 40 00 01 04 10 40 00 01 04 1a 48 c0 22 20 a2 81 6a 93 a2 20 80 00 02 08 20 80 00 02 08 20 80 00 02 08 20 80 00 02 08 20 80 00 02 08 20 80 00 02 08 20 80 00 02 08 20 80 40 20 40 40 04 0d 01 01 04 10 40 00 01 Data Ascii: PNGIHDRD2<{sRGB IDATx^U$b:H/*JQPzRTT`I5`~fvnx9;gcbA@@@@@@@H" j @ @@@
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: b4 c3 4a 3a a3 3e fa 64 a6 0e 38 fa 1a 3d f9 cf 49 91 06 a2 2c ce c5 1c df 35 17 4d d0 e8 91 83 13 fd ae 94 5a 47 95 ac 77 f5 cd 4f e8 98 1f df 26 d7 8d 37 90 c0 b4 e3 bf 3d 70 9a b6 fc e2 ea 91 07 b7 99 63 df 68 87 33 35 71 d2 e4 d8 db c0 37 be bc 81 fe 70 cb f1 b1 65 ba 58 52 1d 72 ee aa a4 75 87 db 24 71 ee aa fc e8 16 6c d9 94 49 e9 b6 2b 8f d0 77 be b9 69 e4 e7 fa b8 0c 08 88 a8 bc e6 9f 7b f4 a7 da 64 83 95 23 39 1f c6 55 bf bd 4b b7 f2 0a 23 34 7e ad 31 89 f7 79 5d fd cb 09 1a bd dc 90 8a 3f 37 ae fb fc ca 6b 7e f1 5b 2e eb cf 3a 95 7a 72 6d 2c 4d ee e5 89 ef eb 84 d3 ef 8c fd 5e af b4 a3 59 78 ad 57 5f ff 50 73 e6 76 55 b2 69 d9 db ac b5 fa 68 dd 76 c5 11 da 78 83 95 22 39 f7 96 73 00 b4 d5 72 b4 16 5e 37 89 6b 5c 25 cf a0 95 97 28 dc b2 bf 05 5f Data Ascii: J:>d8=I,5MZGwO&7=pch35q7peXRru$qlI+wi{d#9UK#4~1y]?7k~[.:zrm,M^YxW_PsvUihvx"9sr^7k\%(_
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 1e e0 7a 8e 02 d7 a4 f2 f4 44 33 42 8d f0 63 61 b1 8e 9f 56 30 cc 58 ce 30 67 9d 8e bf ca 75 94 9a d4 f7 f6 e4 62 83 a6 ec 31 63 63 1f 84 02 95 c4 bd a2 0e 63 47 62 2c d0 04 15 1f 6b 0e c7 c6 1a b5 bc a4 b6 93 1c 4c 4c 1d 22 a5 4f d5 d9 16 ff 30 6d b0 17 0c c5 7e 33 2c bf 1a 37 ec 2f 71 e0 d6 55 30 b8 33 7b 6b 1e 20 22 99 31 e1 1d e3 59 20 09 0b 78 80 08 db 48 7d 7a 15 62 d1 8f 77 35 0a 88 10 42 e2 a2 6b 5e 71 3d c0 76 f2 31 bb e3 e9 fb fe 0d 9f 8f e8 8d 1a 2f 43 f7 ba ca 15 bd 53 27 37 09 db db 26 80 5b 80 08 02 b5 10 d8 e6 f3 6f 7e 77 85 89 81 bc 28 d9 4c f6 4d 3d 6e d6 9c a5 d8 f5 90 9b 10 8b 39 b3 78 6f 7a fd c9 93 8e c4 b5 13 dd a5 f8 6f 6f 7e 78 ee bf c7 e2 fe 9b 4f 6c 90 cd 26 89 29 ff 6f 73 c8 57 df cf c3 b8 e3 ee 76 3c 90 5a d7 80 3d ba 75 c0 1f Data Ascii: zD3BcaV0X0gub1cccGb,kLL"O0m~3,7/qU03{k "1Y xH}zbw5Bk^q=v1/CS'7&[o~w(LM=n9xozoo~xOl&)osWv<Z=u
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 20 e9 b0 c1 b9 f5 80 ba c3 c8 39 98 48 22 ce 4d f4 7b f5 0a f0 35 3d 36 17 0a 73 13 5b 08 77 c1 43 30 4c 72 8e 77 37 85 88 14 d9 88 0b 83 e2 f6 c0 31 04 a4 b0 10 12 b6 7a f7 92 3d 8e 44 a4 74 cb 46 62 92 ff e3 1f 77 4d 7c 30 ab 10 f7 7e 26 31 71 41 21 12 ac 00 10 0e 0c 24 54 d8 1c 45 88 50 f3 65 90 89 81 0b 9a 7b 25 84 11 06 13 0e f6 1d 50 8b 3b 0f 74 b1 59 cf 3a 45 54 5b 31 69 42 44 90 e3 a3 eb ea d6 08 68 42 44 f3 f0 7a 49 88 a0 52 bf 99 32 1b fb 1f 73 07 2a 96 d6 e6 8d 0d 69 42 84 3f 43 75 f9 f5 2f e0 f6 fb c7 e9 70 19 5d 84 77 d4 ed 27 e3 f4 e3 33 0b f7 90 ab 87 51 b5 75 71 1c 76 f2 3d f8 f0 93 1f 7d 3f d0 5d 7d 40 0f bc f1 cc f9 d8 6a b3 35 33 22 97 74 71 f8 72 fa f1 07 1e fb 00 e7 fd 77 b4 e7 b7 da e9 c0 5c 88 34 59 f7 ed 20 76 cc 61 3b e3 a9 fb fe Data Ascii: 9H"M{5=6s[wC0Lrw71z=DtFbwM\|0~&1qA!$TEPe{%P;tY:ET[1iBDhBDzIR2s*iB?Cu/p]w'3Quqv=}?]}@j53"tqrw\4Y va;
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 91 8d a2 ec 5d 55 98 b2 73 c1 5c 08 4e a8 1b 30 84 01 43 26 20 b9 44 d2 58 0d 56 f1 0e 30 0b fb 03 bc 77 b7 08 95 d1 72 30 ff ac 2f c2 3f 5e 8f e2 fd d9 26 12 2c 04 4e 38 34 12 21 98 0a 51 44 56 49 18 79 60 5b 8c e6 5c 17 52 9a a0 b2 8b 8c b8 56 88 f0 e0 cd d2 45 68 04 34 02 1a 01 8d 80 46 40 23 a0 11 d0 08 68 04 34 02 1a 01 8d 40 9e 21 b0 70 71 35 1e 7b f6 63 dc fd d0 7b 58 5c 51 e3 6b eb 49 0a 72 e2 d8 ff e0 6f 3b 6d d0 ea 6d 33 5f 2b d7 85 6b 04 34 02 1a 01 8d 80 46 40 23 a0 11 d0 08 68 04 56 61 04 a4 74 e0 54 bc 0c c4 7e 87 e4 a9 50 0e 14 26 83 33 01 e9 16 80 93 b3 92 2f 85 1d de 0a 66 8f 03 60 9a 24 b1 bf 7c 72 eb 2c 2c fe e7 33 88 4c 9a 06 37 44 21 37 18 0c 49 e4 0a ab 51 ed a0 e5 ad f2 95 c1 4e 69 17 a4 48 11 b6 29 10 4e d8 88 6f b3 31 7a dd 71 14 Data Ascii: ]Us\N0C& DXV0wr0/?^&,N84!QDVIy`[\RVEh4F@#h4@!pq5{c{X\QkIro;mm3_+k4F@#hVatT~P&3/f`$\|r,,3L7D!7IQNiH)No1zq
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 6f a6 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a a0 02 2a 70 90 04 0c f9 e4 15 e4 f9 56 ea 63 e7 e0 ec 03 76 23 fb 1a e3 7f f8 29 ec 37 ae c1 37 6a d8 d8 4d 61 79 8f b9 9d dc 49 37 90 9f 74 1c 6b 3e f2 5b d8 b1 fd 7f cf 9f 4f 8f f2 a2 8f 1a 6e 9a 6e 60 ad c1 23 85 d1 de f8 0f 19 13 b0 da ea be 91 4a 14 25 af 20 15 72 b9 c6 22 fe 76 d6 fa 2e 9f 3b bf 60 7d df cc fc 40 83 61 f6 9a 71 66 fe e8 13 8c ec 9a 66 32 29 71 f2 9a 71 67 bd 14 6c a5 50 5f 2e fb 28 95 f9 9d ec 6a 7e 54 40 56 6e 61 1c c1 58 fa b2 80 b7 90 25 25 b5 56 4e fe 9c a7 b1 e6 7d bf 8a 49 17 12 1c 4a 99 1d ff 3a f5 f6 37 80 be 6a c5 84 84 60 73 4c fc 9c 2f ff 67 fd c0 de b1 f8 cd 12 bb 9a c4 91 23 21 c4 6e 34 22 5b 05 7a 0c 26 94 18 93 93 99 Data Ascii: o************pVcv#)77jMayI7tk>[Onn`#J% r"v.;`}@aqff2)qqglP_.(j~T@VnaX%%VN}IJ:7j`sL/g#!n4"[z&
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 8b 97 ae c3 69 c3 1f 07 cd 2f ba 5d f0 28 45 c6 0b 8f 9e 8f de 3d f4 ae 51 ca 0a 13 eb 6e 7c 07 e6 7b 5f c0 b6 3d 38 96 0d cb 0b aa 34 15 ae 45 36 fc b1 54 16 ba 0b dd 82 e4 00 e4 0a 41 f7 8c 9a 16 6c 41 3f 14 d0 f5 e0 29 d7 08 0b 30 1c 04 5c 0f 25 c1 a6 78 ab 53 3f 4c ec 3a 10 df 36 ef 85 0a 33 07 86 8c 40 22 0a 29 03 2a f8 5b 23 e4 88 ed f2 ae 7e 67 a6 0c 03 10 b1 30 65 86 89 e4 63 04 28 84 1a 84 ed 96 61 dc e1 1e 86 0f d8 88 00 e5 3c 88 a3 78 2b ab b0 6a ec 4c d8 73 e6 23 4f 02 61 7a 3e 83 d2 a0 c4 5c 02 3c 93 f2 29 fc 1d 16 8f e3 92 7c 48 12 04 48 10 a1 7a 9c b4 e0 9a 24 f3 71 61 4a 53 89 75 42 c2 45 a9 2b 60 5d 31 18 ad cf 1e 08 c3 4a 40 1c 48 82 88 f0 4a 88 a5 ef c0 5a e2 a2 72 61 05 4a 17 16 23 b4 34 07 a2 5c 42 46 05 4c 61 c2 ca 32 20 9a b8 30 bb Data Ascii: i/](E=Qn\|{_=84E6TAlA?)0\%xS?L:63@")*[#~g0ec(a<x+jLs#Oaz>\<)\|HHz$qaJSuBE+`]1J@HJZraJ#4\BFLa2 0
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 70 1c 38 7c 91 cb 5d d5 9a 85 dd d1 a8 be e7 e7 23 57 6c e2 9b 87 ae 58 2b ed 67 79 9d 49 ed 4b 4c 0f 10 61 36 5b d1 7d e0 62 7c bb 74 27 17 80 94 7d 3d 6a 55 2f 8e f9 d3 3f 46 de dc 11 cf e4 9c a1 4f 8f 25 e6 a2 01 d6 1b 09 88 9a f7 07 ac eb ff 44 88 a8 c1 ac 5a 61 64 2c 0a 44 c9 ff 6f 69 0c 20 91 f8 67 1b 6b 82 93 98 00 5d 2b 9c 32 33 16 2d af 12 50 43 44 82 c9 c2 18 1d 0c 72 00 14 91 62 ce e3 e0 a7 58 11 6d 08 c1 a9 d0 9c d8 1e 59 1c 7b b2 15 c5 e1 ac 05 11 15 98 09 8a aa c0 68 b1 42 52 04 58 45 29 b1 7d 0a 28 13 51 23 fa 7d 0d aa a8 40 95 28 9a 5e 80 26 fb 43 90 25 68 a2 cc 9e 71 9c 7c 80 08 c7 36 ca f8 4f d8 00 30 2a 63 26 b1 48 22 93 6b 31 30 79 19 05 21 b2 15 77 21 21 62 65 3f 04 17 0b 4a 65 52 08 88 db 7b 07 f7 3f 9d 8f 4c 72 02 64 91 d8 48 f4 f0 Data Ascii: p8\|]#WlX+gyIKLa6[}b\|t'}=jU/?FO%DZad,Doi gk]+23-PCDrbXmY{hBRXE)}(Q#}@(^&C%hq\|6O0*c&H"k10y!w!!be?JeR{?LrdH
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 8a 23 21 e3 d8 6b 50 ef 6e ac ff 61 30 77 d9 8c 3b d1 d1 68 c6 3c 37 eb db 60 46 5d 78 e4 b1 75 e7 7f 18 3d e9 27 ac 5a cf 27 1a 9b 47 9d d3 f3 24 86 95 e6 4f 54 c3 c0 5e 2d 40 72 72 be 52 f2 1b a9 d3 fa cd 07 f1 d4 4b 1f c1 e9 e2 03 7a be ab 7c 51 c6 64 13 16 9a 7b 5a ec d6 af 7f 86 25 2b 77 72 39 9f 15 8c 8a c0 de 4d 63 50 a2 68 14 d7 a8 cb 3b 6d 9d 22 c9 cf d1 43 5e 40 e5 00 b0 04 65 1c f7 14 c8 42 32 98 3c cf ab 33 26 bd 8e 4e 39 ec 5d b3 9b 8b 7b f6 9f c2 83 4f 8e 02 31 47 f1 48 ef f4 7d 06 a3 06 3e ef d7 3e cd 9f fa 5c ba 9c 80 4a 75 07 72 61 e2 98 36 e1 55 74 7b 25 67 46 99 ff 8e 5f c4 bd 8f 0e 85 c3 61 dc 9e 04 28 39 b9 73 12 bb 8b f3 f4 27 12 c3 d7 ee 7d 27 0d df 7d 90 fc c7 d1 bf c6 a3 6c e9 42 39 ae e9 03 47 2d c0 a4 cf 57 9b 0e 04 27 26 ce 43 Data Ascii: #!kPna0w;h<7`F]xu='Z'G$OT^-@rrRKz\|Qd{Z%+wr9McPh;m"C^@eB2<3&N9]{O1GH}>>\Jura6Ut{%gF_a(9s'}'}lB9G-W'&C
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: bb 5c 02 24 e8 90 74 06 23 00 f9 e5 29 a5 cb 79 30 a0 86 08 84 38 01 5d d3 71 b5 52 29 94 f9 f4 35 48 a5 48 ab c5 c7 f2 99 54 86 1d 09 d3 37 43 59 b5 03 61 4e 05 76 41 85 2a c9 b0 6a 64 0f 92 9d 20 03 d0 b8 65 2d f4 31 e3 ac 1f 23 9f 85 c0 e0 22 4e 66 2b 05 56 48 ba 08 ab e6 c2 15 5d 45 f4 d8 37 10 d9 a2 6c 26 40 87 5b 2e 63 2d 24 c7 6e 28 82 cc a4 2c 68 16 e5 54 1f 77 1f aa 0c d0 40 f2 17 c4 f6 20 22 01 2e 4b 49 58 0a bd 04 49 8e cc 00 53 12 a0 2b 49 70 9d 9b 01 49 88 83 22 12 43 8f 02 51 a5 b6 d3 b4 55 21 68 12 b3 05 49 71 a8 92 02 17 c2 21 5a ee 42 68 fe 1a 10 6c e5 0c db c7 90 71 f3 d0 cb 41 40 84 47 67 1c 3d 76 11 2d da 7f c4 d5 69 97 5e dc 63 0f 57 c1 9a ef fb c3 62 a1 49 62 2c f1 72 84 7a d6 ea 76 07 44 5c 8c 49 40 c7 9e d3 b1 7e d3 41 53 29 af b3 Data Ascii: \$t#)y08]qR)5HHT7CYaNvA*jd e-1#"Nf+VH]E7l&@[.c-$n(,hTw@ ".KIXIS+IpI"CQU!hIq!ZBhlqA@Gg=v-i^cWbIb,rzvD\I@~AS)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49898	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1494	OUT	GET /mobile/img/home/laporan-harian.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:54 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 179371 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-2bcab" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	2498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 5b 08 06 00 00 00 1c e2 f0 de 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec dd 77 9c 5f 57 7d e7 ff d7 39 f7 de 6f 9b 3e 9a aa 32 ea cd 92 2b ee c6 18 03 86 40 08 b0 40 36 e1 47 ca 23 9b 35 29 9b 64 f7 b7 d9 2c bb 29 6c 1a 59 52 49 08 fb db dd fc 92 90 05 42 20 15 42 31 01 8c c1 c6 60 e3 26 c9 b2 ba d5 db 8c a6 97 6f bb e5 ec 1f f7 ce 77 66 64 c9 96 b1 24 5b d2 fb f9 78 d8 23 69 be f5 7e ef f7 de f3 be e7 73 ce 01 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: PNGIHDR [pHYs.#.#x?v IDATxw_W}9o>2+@@6G#5)d,)lYRIB B1`&owfd$[x#i~s
2024-11-24 12:19:54 UTC	5648	IN	Data Raw: 3a 79 cf e3 9e a5 fd 7c 7a df 01 ee 5c dc 43 35 4a f8 ec c1 23 00 84 89 e3 9a 45 1d dc da db c5 c9 4a 85 f7 ac 59 d9 e8 29 b8 b3 bf 87 df dd f2 0c 3f bf 79 03 ed f9 1c 06 78 4d 7f 0f 8b 0a 79 c6 aa 75 00 36 76 b6 f1 ae d5 03 e4 b2 ab fc 6f 5c da cf 27 f7 ec e7 f6 be 6e 56 b6 b6 30 1d 86 e4 ac e5 b5 8b 7b b9 ad af 87 cf 1d 38 cc 1b 96 f6 d3 55 28 b0 b1 a3 b5 11 06 5e b3 b8 97 e6 c0 e7 d8 74 99 ff 7a c3 66 00 aa 71 c2 ab fb ba 39 3c 5d a6 b3 90 63 69 4b 13 6b 5a 5b 98 09 23 3c 6b 78 8d e7 f1 da c5 bd fc ee 96 ed bc 61 49 3f 63 b5 3a af 5b d2 47 7f 53 31 db 12 3d ac 69 69 e1 ff 7b 66 0f ad 3d 3e bf 75 d3 b5 7c fe d0 51 9e 3c 35 8a a7 6f a1 88 88 88 5c 20 d6 1a c2 30 c6 18 83 9f 0f 88 f6 1f 24 79 e8 e1 34 80 9c f3 05 86 33 07 95 c8 79 ac ad ed 66 f1 b2 77 72 Data Ascii: :y\|z\C5J#EJY)?yxMyu6vo\'nV0{8U(^tzfq9<]ciKkZ[#<kxaI?c:[GS1=ii{f=>u\|Q<5o\ 0$y43yfwr
2024-11-24 12:19:54 UTC	5648	IN	Data Raw: 54 05 26 72 be 0f bc be 25 8a 34 2b 96 88 88 28 80 5c b1 ac 31 c4 89 e3 68 65 86 8e 7c 9e 53 b5 1a e6 05 c2 87 03 5a 73 01 db 47 c7 b9 67 59 3f c7 67 ca ec 9f 9c a2 bb 90 67 e7 58 8d e6 20 60 3a 8a 38 34 35 4d c9 f3 a9 bb 84 30 4e 58 dd d6 4c 73 ce e7 4b 87 8f 71 4b 6f 17 db 47 c7 a9 44 11 cb 9b 9b d8 3a 39 46 29 f0 78 7a ba 10 94 3f 00 00 20 00 49 44 41 54 64 8c db fa ba 19 ab d5 51 b5 86 c8 65 7a dc 51 4f 88 88 88 28 80 5c c1 1b c1 18 b6 8f 8c 63 0d 1c 99 9e c1 b7 f6 9c 06 c7 34 07 3e 5f 3d 7a 1c e7 1c 81 b5 78 c6 f0 ed c1 e1 74 e0 b9 35 3c 78 7c 90 c0 5a 12 e7 30 80 31 86 23 d3 33 00 e4 ac e5 81 63 27 f1 8c c1 18 c3 c1 a9 19 7c 63 71 ce e1 5b c3 b7 4e 0c 35 6e 27 22 97 67 00 71 ee dc cb 45 45 44 44 14 40 2e 33 41 d6 d5 e0 bd 88 59 aa 9c 83 fc 69 01 21 Data Ascii: T&r%4+(\1he\|SZsGgY?ggX `:845M0NXLsKqKoGD:9F)xz? IDATdQezQO(\c4>_=zxt5<x\|Z01#3c'\|cq[N5n'"gqEEDD@.3AYi!
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: da 9c 03 e2 24 2d c3 32 d9 44 00 2e 9d c0 d7 18 b0 89 6d 84 93 34 12 a5 63 1c e2 c4 61 9c 25 1b 08 82 31 3e e4 f3 98 c0 c3 9a ec 3e 36 5d 40 91 d0 e0 82 b4 ac eb d8 f8 08 c7 eb 8e 65 03 4b 49 72 45 a8 3b a0 9e ae 57 61 3d 5c 12 a7 a3 7c 66 67 a3 f2 b2 01 e4 8d 0f 7e 76 ca dc 04 5c 1d e2 08 2f 68 e1 b6 ef fb 61 96 2f 5b 4a 5b 73 89 42 21 a0 98 f3 c8 05 09 81 07 37 5c 7b 15 d7 5f bf 99 bd 7b df c4 f6 27 1e e6 d1 6f 7d 91 b0 36 ca 54 2d 9d 2d 0a c2 b9 14 eb 1c b8 90 be 15 6b 58 dc db 43 e0 07 78 9e 9f 4e 38 e0 79 c4 61 42 a1 e8 91 cf fb 18 6b b1 d6 72 f5 d5 9b b8 f1 a6 1b d9 bb 7b 37 4f 3e fe 30 8f 7c fb 2b 69 65 9b 83 96 1c 2c 29 42 b5 9e 30 5a ad 72 ac 52 e5 f8 d7 1f e2 a1 07 1e a2 b7 a7 93 35 ab d7 b1 61 f3 0d dc 7c fb 5d 34 35 f7 52 9b ac 73 f2 40 99 e6 Data Ascii: $-2D.m4ca%1>>6]@eKIrE;Wa=\\|fg~v\/ha/[J[sB!7\{_{'o}6T--kXCxN8yaBkr{7O>0\|+ie,)B0ZrR5a\|]45Rs@
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 78 c5 45 17 b1 f1 e9 cd 3c f4 d0 3a f6 8d ed 43 78 3e d6 e4 dd 09 9b 25 39 f9 d0 71 ae ff c8 52 74 92 f2 e8 bd b7 f2 d8 7d 77 50 a9 d4 98 35 7b 2e ab 8f 3d 9d 53 9e 77 2e c2 55 98 34 05 61 70 a5 20 f0 73 3d 4d 92 08 b2 24 e5 c8 a3 8f e6 f2 77 7c 8c ff fb af ff 40 14 ee c6 f5 3c 32 99 d2 33 d0 cf 9a a3 4f a2 bb d6 45 a1 58 68 db 2c e7 fb 40 4d 73 56 93 13 32 a1 72 5b e6 cc 0a 32 9d 51 2a 7a 6c df b6 0e dd 8a e9 ae 42 31 00 85 c1 55 2e d5 40 93 18 4b 00 28 47 20 50 a8 c0 a5 35 35 89 12 2e a5 4a 85 5a 57 95 2c 8a b8 e7 bb 57 72 df 4d df 65 ce aa 93 39 f7 e5 af c5 75 bb d8 b5 b5 49 ff 50 01 b7 20 11 ca 50 8f 9b dc 78 e7 0f c8 6c 03 a5 7c dc b6 90 de 9a 2c 27 a6 ed d7 ad a7 c9 bb 95 cf fa b3 24 8a 12 3e f9 89 af 72 e0 c0 04 8b 16 8d b0 6c d9 28 7f fa 27 5f e2 Data Ascii: xE<:Cx>%9qRt}wP5{.=Sw.U4ap s=M$w\|@<23OEXh,@MsV2r[2Q*zlB1U.@K(G P55.JZW,WrMe9uIP Pxl\|,'$>rl('_
2024-11-24 12:19:55 UTC	3384	IN	Data Raw: be 94 9c ee f4 f0 94 64 3d 2d eb 4b 35 96 f3 bd 3e 71 a1 71 a5 e4 73 67 2f e2 2b c5 f9 de 00 5f 4a ce f6 4a 62 f1 d2 7a 1b 4f 96 cd d0 0b c3 18 57 4a 1e 59 58 46 02 2f ac b7 df 12 a9 7a 47 c7 f1 e7 dc fb ae 1c 89 1f 3a b8 61 15 e9 29 44 91 80 e7 a3 2b 55 c2 91 29 e2 ee 00 41 d9 58 1e 06 0e 8e 0d 40 85 38 be 4b 51 28 b0 ba 6c 40 46 20 31 28 69 51 d6 e0 2a 07 df 51 b8 aa 1c 6b 79 ad 49 fc da 39 97 f6 0d 03 70 ad 24 2b 07 93 52 64 39 45 3c 20 cf 13 f2 a4 40 6b 85 4e 0c 7a c4 a1 22 25 02 59 3a 91 3b 1e ee e8 0e 92 cc 40 11 97 76 86 8e 42 48 90 d6 a1 90 02 07 09 42 60 25 65 03 b2 b0 18 ad 29 32 48 d2 8c 54 1b d2 22 47 58 49 05 4b bf b7 c1 20 53 98 4a 8b 53 f3 1d d6 b4 62 64 5b 83 42 4b e2 42 90 67 12 29 7c f2 3c 26 49 52 4c 1a b1 73 a4 c5 b6 9b 6e 20 17 82 f6 Data Ascii: d=-K5>qqsg/+_JJbzOWJYXF/zG:a)D+U)AX@8KQ(l@F 1(iQ*QkyI9p$+Rd9E< @kNz"%Y:;@vBHB`%e)2HT"GXIK SJSbd[BKBg)\|<&IRLsn
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 23 65 f9 39 ef be fb 16 9e 7a f2 25 ce 9c bd cc d1 a3 07 f8 de 77 9f c7 f7 3d 16 97 d6 98 9c 1c a1 db ed 73 ea d4 05 3e f0 2b c7 f9 c6 d7 9f 60 d7 ae 69 ee be fb 96 ad 1b f2 bb 21 28 72 14 17 db 8b bc 6f f7 cd fc d9 8b 5f e5 77 6f fb 55 1e ff ca cb c4 71 82 d5 1a 29 45 e9 2d f5 36 38 ea 60 10 f3 cc d3 af e0 f9 0e 87 0f ed 21 ac 04 ac ae b6 19 1f 6f e1 79 2e 2f be 70 9a 03 07 76 e1 b8 8a 46 a3 c6 c5 8b 0b 8c 8e 36 48 92 8c a2 d0 d4 6a 21 67 ce 5c 66 f7 dc 2c be e7 92 a6 29 cd 66 83 ab 57 97 f0 3c 8f c0 77 31 d6 52 a9 04 a4 69 81 94 6c 6e ae 09 d2 34 e3 95 57 ce b2 6b d7 34 be ef 63 ad a1 52 09 59 5a 5a e5 f0 e1 3d 48 b9 b5 0f bd 85 9f 0f 7e 29 55 b0 56 d3 94 af 2d 2d 11 a8 ad 0b eb 6f 9f 7f 10 7c ec e7 a9 82 d5 5b a7 58 39 8b 70 1c ac 31 e4 49 4c 91 a7 18 Data Ascii: #e9z%w=s>+`i!(ro_woUq)E-68`!oy./pvF6Hj!g\f,)fW<w1Riln4Wk4cRYZZ=H~)UV--o\|[X9p1IL
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 9d 1f b9 86 fc 38 0c e3 ec 07 32 19 8e a3 f8 f6 23 cf 73 e6 cc 15 e2 38 a5 e2 fb 98 d2 99 96 34 cd f0 7c 97 6a 25 e0 1f 7c ea fe 1f 92 e9 6f d4 fc ad 39 f8 4b 82 34 d5 44 f1 cf ac 5f e7 df 8f 8e 54 fe e1 d6 28 6f 65 40 80 d2 b1 f9 d0 48 93 b9 5a 8d 54 1b 96 e2 98 57 db 9d d7 65 70 df 0c ed 34 e3 9f 1e 39 44 3f cf 59 4b 12 d2 c2 f0 6a a7 cb a0 28 30 c6 96 4d a1 94 b5 a2 f7 4c 4f f2 d4 ca 3a e9 66 0d 29 16 8c 2d eb b8 b7 f0 63 02 0b 0c e8 04 93 83 29 4a c3 3f 93 67 a4 c3 1e ed b5 36 4d 6f 94 9a f2 10 be 8b 90 39 68 53 12 41 59 66 41 d0 0e 5a e8 b2 5f c4 55 18 61 91 b2 24 8a 52 96 92 bc c2 6e 3a b4 d9 d2 d6 5a 08 55 fe b9 99 15 b1 6c ca 01 6f 3e 27 1d 1f d0 58 ed 22 1c 17 a1 14 52 19 a4 10 38 c2 03 fa a4 6b 2f 63 aa 21 99 1a c7 d4 aa 4c dd 78 07 49 3f 66 7d Data Ascii: 82#s84\|j%\|o9K4D_T(oe@HZTWep49D?YKj(0MLO:f)-c)J?g6Mo9hSAYfAZ_Ua$Rn:ZUlo>'X"R8k/c!LxI?f}
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: b1 08 fc 1c 85 1d 45 b6 b5 6f 67 fd 76 0f ab 2c 46 75 55 48 4c e6 d1 63 35 e4 bb 36 61 8b 14 6e 20 88 fb 79 3c 04 9e 14 cc 9d 3d 97 91 4d 63 41 82 1d 8b 53 59 5d c1 f6 b6 2e 3c 2f 44 13 a0 69 06 96 61 d1 d9 99 a7 b3 bb 40 e0 48 f4 98 86 1f 86 78 25 fd 1d 04 1e f9 7c 8e 64 a2 0c 43 37 49 a7 2d 34 a9 11 b3 92 74 b4 b7 e2 98 39 92 f1 14 98 76 e9 ee d1 28 b8 0e f9 62 16 d7 09 a8 af 6d a6 be be 01 2f d0 11 fe e1 1d a4 15 f1 38 f1 4b cf c3 9a 77 32 ce 4b 8b 08 d6 ac 27 ec ca f4 fc 5e 93 92 b0 a2 3c 8a 4f 3c 36 2c 4f f4 c6 7a ac 99 d3 89 9d 31 b7 4f 95 db 15 c3 07 c7 f1 69 6a ae 65 c9 e2 55 ac df d0 8a ae 6b ac 59 be 85 ca ca 34 f7 2f 7b 82 89 13 9b 58 b8 f0 4d ce 3a eb 44 1c f7 d0 c7 76 2a 19 e7 d4 53 a7 93 4e 27 f1 3c 1f 10 8c 1a dd 48 32 19 67 c2 04 87 78 cc Data Ascii: Eogv,FuUHLc56an y<=McASY].</Dia@Hx%\|dC7I-4t9v(bm/8Kw2K'^<O<6,Oz1OijeUkY4/{XM:Dv*SN'<H2gx
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 61 72 d8 68 c8 e1 d9 a3 b4 86 42 a1 04 88 52 22 67 7c 0b a3 50 28 14 c3 a1 36 06 fa b4 7b 9a 55 bf 1d fd 45 08 02 a4 14 59 11 d2 5d d7 1f 1c 0d e9 31 84 65 bf b6 60 a8 9b 03 4d 3b 33 45 c8 e1 ee 1d e2 10 c1 71 74 f1 31 d0 09 85 6a 84 14 8a 33 4b 80 48 29 47 f5 d3 dd 11 4b ab da 49 a1 50 28 46 89 e6 38 cc 64 97 03 1f 9b 1d ed e8 ef 68 2e 7a f4 85 ec e3 13 22 e9 1b e6 6a 40 c3 55 8a 41 0e 39 d9 9f 24 ce cc 7c 14 47 fd 5c f4 7f 3f c0 c8 47 1f e9 72 98 ce 10 03 2b 1d 85 62 4c 30 da ed ee 21 13 20 2a 09 14 47 7e 52 54 12 28 14 8a a1 15 21 fd de 0c 38 18 32 c0 87 dd 4e 1e fd 44 48 f7 a1 52 f6 ba a4 f7 ee eb 7b 8a c1 6c d9 93 ad de b4 31 3c 15 4b 1c 4f 7e 8a fe 62 42 88 01 84 89 38 8e 31 0e 71 82 f7 a3 50 8c 91 47 4b 09 10 85 d2 1f 2a 09 14 0a c5 e9 d0 28 7d 22 Data Ascii: arhBR"g\|P(6{UEY]1e`M;3Eqt1j3KH)GKIP(F8dh.z"j@UA9$\|G\?Gr+bL0! G~RT(!82NDHR{l1<KO~bB81qPGK(}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49903	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1253	OUT	GET /mobile/img/category/ngo.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:54 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/svg+xml Content-Length: 2823 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-b07" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 32 38 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 285 285" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:54 UTC	1760	IN	Data Raw: 37 2c 31 33 39 2e 36 31 32 2c 31 35 39 2e 38 34 33 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2c 2d 36 2e 35 36 37 43 30 2e 36 35 34 2c 2d 36 2e 35 36 37 20 31 2e 32 38 39 2c 2d 36 2e 33 37 32 20 31 2e 38 33 34 2c 2d 36 2e 30 30 35 43 32 2e 32 36 37 2c 2d 35 2e 37 31 33 20 32 2e 38 35 33 2c 2d 35 2e 38 32 37 20 33 2e 31 34 34 2c 2d 36 2e 32 35 38 43 33 2e 34 33 35 2c 2d 36 2e 36 39 31 20 33 2e 33 32 31 2c 2d 37 2e 32 37 37 20 32 2e 38 38 39 2c 2d 37 2e 35 36 38 43 32 2e 30 33 2c 2d 38 2e 31 34 37 20 31 2e 30 33 32 2c 2d 38 2e 34 35 33 20 30 2c 2d 38 2e 34 35 33 43 2d 32 2e 38 34 39 2c 2d 38 2e 34 35 33 20 2d 35 2e 31 36 37 2c 2d 36 2e 31 33 33 20 2d 35 2e 31 36 37 2c 2d 33 2e 32 38 32 43 2d 35 2e 31 36 37 2c 2d 30 2e Data Ascii: 7,139.612,159.843)"> <path d="M0,-6.567C0.654,-6.567 1.289,-6.372 1.834,-6.005C2.267,-5.713 2.853,-5.827 3.144,-6.258C3.435,-6.691 3.321,-7.277 2.889,-7.568C2.03,-8.147 1.032,-8.453 0,-8.453C-2.849,-8.453 -5.167,-6.133 -5.167,-3.282C-5.167,-0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49894	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	691	OUT	GET /sumbangan.com/public/campaigns/large/6593b4023f088_OKU_Nur_-_Kemudhan.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	610	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/jpeg Content-Length: 341950 Connection: close x-oss-request-id: 674319EA9CAEC931393DD7D4 Vary: Origin Accept-Ranges: bytes ETag: "BB66E7A3EE1D46BF1B039BB354D6DBAA" Last-Modified: Tue, 02 Jan 2024 06:58:10 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 15746894664223888779 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Wed, 03 Jan 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: u2bno+4dRr8bA5uzVNbbqg== x-oss-server-time: 3
2024-11-24 12:19:54 UTC	15774	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 69 5c d2 86 c8 ca a4 30 b8 58 5b 92 f0 e0 d5 75 3f cf 32 fd d9 7e 35 dd 7e 83 df ad 05 5f ed cc ff 00 c5 c6 b8 52 a7 f9 e6 5f bb 2f c6 bb af d0 7b f5 a0 ab fd b9 9f f8 b8 d6 be bb fc 8f e9 47 53 b0 3f ae 57 ee cb f8 1d 12 a2 35 6f f4 a9 7a fd 81 53 fc 59 29 75 11 ab 7f a5 4b d7 ec 0a 9f e2 c9 78 d8 fc a4 7d b2 bf e8 a5 ee 7f 71 f2 88 2a 26 a4 ad 1a 98 0d 86 48 64 de 04 dd 58 99 f2 cf f7 d5 ab 8b 54 f1 b6 b8 ad bd 52 8e 28 ef db 6f 34 af e1 d9 54 b7 69 86 fb 97 27 17 f7 83 b2 a9 cb fa a9 fd d3 ae 9d d2 1c 0c 7e 31 7a 36 59 2e 16 87 10 d4 96 79 ab 46 8c e4 2c 0d 44 5d b1 bb c0 ee fc 87 bc ee e2 fd 19 dd fe 93 bb 7d 02 e6 bc 2d 5c 6a 4f a3 78 fa fc 7e c3 f3 a6 97 61 5f 54 8d 5b 5a 0b 32 4b 7a 5e 7b 78 69 7b d4 be b4 5b fd 0d f8 cd 68 aa d3 91 70 b6 fd 5b 1d Data Ascii: i\0X[u?2~5~_R_/{GS?W5ozSY)uKx}q*&HdXTR(o4Ti'~1z6Y.yF,D]}-\jOx~a_T[Z2Kz^{xi{[hp[
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 44 ee de 21 0c 11 c5 51 0e 18 1f a3 67 f9 57 26 09 a5 c9 d6 6d 31 f0 72 8a 31 71 c3 ed 7c fd f5 96 7d eb 19 a6 29 a4 29 5f 6b 03 63 6b 78 e3 09 20 90 4d f6 b1 2b 10 29 35 40 00 ec 29 3a f8 2f 20 8a df 00 be 61 cb c9 cb 2b 06 b6 53 39 bc a7 b9 c9 f9 f2 e8 89 0c 83 01 18 f2 f0 ca b9 8b c4 77 10 51 45 d2 15 ef 6d 0b be d8 a3 c3 a6 f1 54 18 7b 71 fd e4 a1 d5 46 4d ca 32 67 ff 00 6f 7a 86 f0 1f 22 9b fd cb 30 12 26 cb 12 69 eb 23 f4 17 85 58 61 dd 0e 8a a4 6d 63 dd 87 f4 92 7b fd c9 b7 af ca bd f5 91 fa 08 36 b1 72 2c b6 17 9d 98 a4 7d 61 89 7b da 7d b3 20 da cc c8 58 57 9d c4 99 c9 d3 6f 3f 82 4f b6 76 f9 a4 83 6b 1d 37 b2 84 d8 6b a1 1e e1 ee ca cf d6 e1 7f 9c 84 6d 66 2b 21 7d bd e5 80 ca c4 bd 2c 93 72 e6 e8 4e d6 28 d3 6d 5e 1d 4e e7 48 14 53 6d dc c2 49 Data Ascii: D!QgW&m1r1q\|}))_kckx M+)5@):/ a+S9wQEmT{qFM2goz"0&i#Xamc{6r,}a{} XWo?Ovk7kmf+!},rN(m^NHSmI
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 1e 80 9a 2a af 69 37 33 03 2e 63 cd 27 0d 40 10 0e 7a a5 da 58 9f 1d d5 3e 00 08 12 6e 7d 8b ef 22 c6 79 27 24 22 b1 d8 24 5b 5e 3d fe e5 88 1e 84 f1 be 37 4c 5f bd 4a 94 bb 1d 9a 29 32 c9 9d 56 f1 c7 65 4e 9b 94 f2 83 b6 f1 c2 02 6e 23 22 ea 49 49 2a 62 61 51 11 d6 7d b2 74 10 ec ef 99 65 9f bc 80 cb d6 22 39 58 4e 3c 8b f5 4a 09 53 b7 ea 63 85 e0 d4 d2 16 21 db de 7f 14 a8 f6 71 a0 32 88 9c bd af a9 2b bb dc 92 f5 80 93 ba 1f 35 1b be dd 00 e4 24 c3 7b 4b de db de 9a b9 e0 53 73 9f 6e ee f2 02 45 a6 fb 65 e9 ce 20 db 94 18 d7 92 50 6b b2 fb 4b a2 02 60 2a 41 fa 8a f2 49 01 c9 9d b9 26 01 57 1a 75 19 84 c0 e4 25 d3 92 01 4e d4 7e 71 2c 18 3b d9 49 1f 24 a8 c9 b4 1b ee 55 e1 d4 86 2a 5d d6 74 dc e5 76 7e 44 bc 39 df 6e 12 1b fb ca c5 47 01 29 0f 7b 72 cc Data Ascii: i73.c'@zX>n}"y'$"$[^=7L_J)2VeNn#"IIbaQ}te"9XN<JSc!q2+5${KSsnEe PkK`AI&Wu%N~q,;I$U]tv~D9nG){r
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 6c 38 4d fa 61 ba 2b 3d ba d8 f4 34 bd 86 ec bb 72 66 fc 0a 9f ab 86 58 63 9b 7c 9c fc 96 38 e3 7f 06 c4 b8 83 c9 a5 f5 1b bc f5 12 46 25 df 80 77 8b 79 bb bb 65 be f2 5e df 4c 67 61 a2 98 87 2d b6 4c e3 cf 79 26 57 cd de b6 f8 ef 33 ee 27 76 eb d3 0c ac 56 99 a9 20 b3 35 09 8f 7e 23 3f c2 4e 5f ca bb 75 1e 29 23 cc da c7 37 6d bf 68 c6 28 43 7b 6c e6 cf d5 5d 6c b4 66 d4 ed 91 26 c2 a7 d1 46 fe b9 d9 8f 36 dc b6 55 18 c6 d4 41 b7 6e 5c 79 fb 9d 72 aa 4b 27 a6 a5 12 12 f3 11 76 4d 0b 7b 46 bd ba 56 86 9a d3 32 4e c5 b6 79 1b b3 8d be 3e 29 d7 ab 15 75 c0 23 db c8 7d ac aa 0f 13 b5 17 ad 5d 9a cf 4e 5f 21 45 91 7c 78 97 8a c9 69 4b bf ac 93 e8 b9 30 6a 57 1e 89 6c e4 ba be 11 40 b9 bb c9 50 73 97 53 77 77 7f 8a 6b bb dc 9c d6 3e e6 dc 98 ef c2 f4 52 e1 f0 Data Ascii: l8Ma+=4rfXc\|8F%wye^Lga-Ly&W3'vV 5~#?N_u)#7mh(C{l]lf&F6UAn\yrK'vM{FV2Ny>)u#}]N_!E\|xiK0jWl@PsSwwk>R
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 24 77 92 1a 54 20 5d 85 96 5b 47 cd 22 d2 af 7b 51 24 02 9b 59 60 42 2b 12 35 81 1a b2 58 02 84 02 bc ec 87 c9 61 bf df f8 51 bc 94 64 0a 6c 17 58 ec 15 8e ff 00 7f e1 47 68 89 e0 19 76 62 bc 1d ab cd f9 59 8a 80 02 94 0e ea c3 1e e4 a0 f5 42 52 c8 bb 06 59 9f 9f 34 2c 37 fb 90 a7 05 f0 8f a1 b0 eb 7d 71 ab ad e3 66 b8 6a 9b 95 5c 27 cc c7 d7 24 d8 f8 e6 d9 62 27 f2 53 7a 62 c7 3d bc 65 7a da 58 c4 4d f6 76 9b 59 c8 ba 3f 5e 6b 5b c3 42 74 b5 43 53 6f 9c 9a 31 ea 03 d7 ef 29 da 0d 6f a9 2c e1 d8 93 15 7d 1b be 71 29 61 99 fe a5 fa 1a a6 91 6f 65 41 28 35 9e a7 ce e7 52 4f 93 64 54 4f 71 a3 a5 90 29 4b b1 1f 51 92 7d bb b9 13 33 e3 2f 87 5b 77 83 94 30 5d ad 36 7b d5 05 96 86 4a 82 22 69 27 ec 05 cb 93 e3 ab f3 5a 1a 8a f3 75 9e d8 fd b5 94 69 e9 67 c8 14 Data Ascii: $wT ][G"{Q$Y`B+5XaQdlXGhvbYBRY4,7}qfj\'$b'Szb=ezXMvY?^k[BtCSo1)o,}q)aoeA(5ROdTOq)KQ}3/[w0]6{J"i'Zuig
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 8f 0e ef d3 e0 b4 9f 0e 29 a2 79 67 bd d7 16 6a 0c dd 83 77 93 ad a7 76 bb 51 69 2b 10 ea 8b b4 b1 84 a3 86 8f b5 26 61 ef 61 be 77 2f 15 b1 2a 79 e0 ac 27 85 92 36 af 57 4d 62 a9 3a 9b e4 d1 c3 bd b3 14 41 ed 7d 79 f8 3a db bc 28 d4 72 5f 28 3d 6e 5a 72 80 4c bb b9 e5 96 ce 16 9c d3 fc 1d ad d7 34 8d ae af 97 4e dc 25 2c c5 18 f2 6c 63 3f 35 d9 bc d6 d3 d3 97 27 b5 8c 56 a1 a7 18 86 9b ba d8 f1 e7 95 8a 74 9a e8 67 a7 53 bc 59 66 e6 96 9c 24 85 8c 08 96 3e a6 f2 c2 c2 5c 9f 1c dd 36 b0 57 7a e4 40 cf cd 5a 23 a6 0d ad dd 5a 73 cc 64 84 aa a4 ca 8d 6e 9c a7 ac 88 e2 78 f9 9b 3b 67 e2 cb 5c 5f 74 4d 65 15 58 99 f7 e1 1e 5b 5f 38 c3 2d f0 54 60 4c fb 47 9f 82 85 ba da 62 ab 12 86 72 1c bf 25 32 93 de 8c b2 92 ab 1c 1a 16 ff 00 c5 db 7f 0b 68 c2 a6 82 d5 0d Data Ascii: )ygjwvQi+&aaw/*y'6WMb:A}y:(r_(=nZrL4N%,lc?5'VtgSYf$>\6Wz@Z#Zsdnx;g\_tMeX[_8-T`LGbr%2h
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 4c e6 0f bf a2 d6 91 62 9f 76 a3 96 8e 6e d5 ba 2c a9 6e 34 f2 83 46 fd 55 96 ef 44 15 74 c5 dd cb 33 2d 73 54 de a1 59 dc dc dd e5 af 20 f9 2e 23 49 0c a1 bc 56 4d 40 1b 77 f8 a6 d6 ca b2 7a 60 73 2e aa 4c 8e 13 0d c1 e2 b1 95 d8 47 98 4b 1b f7 09 3e a7 b8 d4 07 74 d2 06 1d ee 49 dc 60 32 93 6f 15 04 63 06 55 67 eb 74 ce c2 3d e7 c2 63 04 53 45 2a 9c 8a 9a 31 0e e0 f3 5e 8d 20 17 7b 6f 35 92 26 19 0f 6d 33 1f 64 e2 7e 6a 49 e6 ee a8 ba 71 30 1d ad d1 3d 06 23 f6 96 cc 7a 1a f2 8e 59 99 4c 93 ed b9 b2 53 b1 0e 7d d4 d4 5b e5 04 7e d9 49 1b 09 08 4b bc 9d 39 ed 6e f2 8b 92 62 83 e7 24 8a ef 10 8b 89 96 56 4c 8d 84 99 d4 0b 24 8e bb 62 86 3b 8c 92 1e 03 a2 56 28 6a 2a 3b de 0a 1b c9 2a 03 f2 af f0 4a 1d 7c b3 e0 40 70 91 86 da 0f ed 8f f9 49 77 a8 a3 85 b6 Data Ascii: Lbvn,n4FUDt3-sTY .#IVM@wz`s.LGK>tI`2ocUgt=cSE1^ {o5&m3d~jIq0=#zYLS}[~IK9nb$VL$b;V(j;*J\|@pIw
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 60 f6 bb 5d 57 d5 6f 86 28 4b 25 d0 bb 4f af c9 32 0a 8b bd 79 77 8a 46 fc 3f c8 9c 43 6a 7e d5 b6 c3 f5 ed 56 8b 15 8c e4 36 f9 3f f2 55 25 9f 01 1e 56 4a c0 d8 2b 2a c7 e5 a6 91 f1 d1 b6 ba 79 6f d1 93 54 4d b1 e8 c8 db cf 69 2d a9 6a d1 f2 54 90 8b 42 3e fe ea d9 1a 7b 87 a1 16 0c e9 c7 f7 ab 24 56 4c 53 ad 18 75 35 86 8e e1 44 d2 76 73 15 0e 03 c1 dc 0b cd 6d eb 4e 8d a6 a0 85 a3 7a 71 6f dc ba b9 db 2c 83 47 08 c4 d1 8b 33 7d af bf 29 c9 db 44 cf 77 68 3c bc 15 f0 8d 29 56 9b 6d a6 41 d1 5b 61 a5 f6 23 e4 9e 1c 5c b7 00 ec 4f fb 21 14 9c c2 db 11 c5 60 aa 9c b2 42 4f 19 6f ce e4 a5 3e dd dc d2 93 8f 79 26 c0 5e d8 f8 2c 5b 51 99 49 8b d4 c2 e4 1f 24 a3 66 a7 72 6f 95 93 66 14 d5 24 c0 5d d3 50 1a aa b0 69 05 f6 72 ca ac 92 5d 0c b9 33 86 6a 68 4b 69 Data Ascii: `]Wo(K%O2ywF?Cj~V6?U%VJ+*yoTMi-jTB>{$VLSu5DvsmNzqo,G3})Dwh<)VmA[a#\O!`BOo>y&^,[QI$frof$]Pir]3jhKi
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 70 9d 9c 3e 0b 62 ad 84 a9 53 dc d1 d3 a9 63 3a 49 1a fb 46 d8 0e e5 23 91 f3 d8 ed cb ef fe 45 b7 b4 c6 97 a8 a9 28 e0 86 9f 9b e1 94 27 09 74 e1 56 0b bb 89 76 8f 23 0b 37 87 32 26 5d 75 c3 ee 16 d1 d1 d3 41 5f 51 1c 9d af 27 c6 e6 c7 e2 5e 43 50 a8 a3 27 15 d4 c9 46 9c a3 d4 80 e1 c7 02 21 a9 92 2a db 9c 3d cd b9 c3 f9 ad e1 43 a0 2c b6 ea 46 a6 0a 31 7c 0e 3d 95 69 d3 f6 91 8e 96 38 fb 3d a0 2d cb 0a c9 4d 6f 79 09 84 61 17 6f 78 ae 33 94 9a c1 b8 a5 14 b9 28 96 bd 1d 04 02 ef 4b 47 1f 37 cf 31 65 33 47 a6 6b e7 97 6f a9 c7 8f b9 65 75 8a c4 c2 4c 65 b8 1f c9 b9 32 95 a3 a3 3a 7e f0 75 f7 a4 12 5f 28 87 57 c8 82 a1 b0 b5 b6 94 8c 29 45 8b 6f 3e ef 8a 86 a8 b9 18 76 b9 db 96 65 7a b9 4c 41 41 23 f7 72 b5 0d c6 69 e6 a9 31 12 c3 bf 4f 24 69 45 91 04 e4 Data Ascii: p>bSc:IF#E('tVv#72&]uA_Q'^CP'F!*=C,F1\|=i8=-Moyaox3(KG71e3GkoeuLe2:~u_(W)Eo>vezLAA#ri1O$iE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49902	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1255	OUT	GET /mobile/img/home/lain-lain.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:54 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/svg+xml Content-Length: 2346 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-92a" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 32 20 36 30 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 602 602" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:54 UTC	1283	IN	Data Raw: 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 38 2e 33 33 33 33 33 2c 30 2c 30 2c 38 2e 33 33 33 33 33 2c 30 2c 30 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2c 30 2c 30 2c 31 2c 30 2c 2d 34 34 32 2e 32 36 34 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 30 35 2e 37 33 37 2c 32 30 37 36 2e 32 36 4c 33 39 32 2c 32 30 37 36 2e 32 36 4c 33 39 32 2c 32 30 39 30 4c 34 30 35 2e 37 33 37 2c 32 30 39 30 4c 34 30 35 2e 37 33 37 2c 32 30 37 36 2e 32 36 5a 4d 34 30 33 2e 37 33 37 2c 32 30 38 38 4c 33 39 34 2c 32 30 38 38 4c 33 39 34 2c 32 30 37 38 2e 32 36 4c 34 30 33 2e 37 33 37 2c 32 30 37 38 2e 32 36 4c 34 30 33 2e 37 33 37 2c 32 30 38 38 5a 22 20 73 Data Ascii: sform="matrix(8.33333,0,0,8.33333,0,0)"> <g transform="matrix(1,0,0,1,0,-442.264)"> <path d="M405.737,2076.26L392,2076.26L392,2090L405.737,2090L405.737,2076.26ZM403.737,2088L394,2088L394,2078.26L403.737,2078.26L403.737,2088Z" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49899	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1247	OUT	GET /mobile/img/avatar.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:54 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/svg+xml Content-Length: 1182 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-49e" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 34 20 31 33 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 134 134" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:54 UTC	119	IN	Data Raw: 31 36 2e 30 30 34 2c 31 31 2e 38 31 36 43 31 36 2e 30 30 34 2c 32 2e 39 37 39 20 38 2e 38 34 31 2c 2d 34 2e 31 38 34 20 30 2e 30 30 33 2c 2d 34 2e 31 38 34 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 72 67 62 28 30 2c 31 36 33 2c 31 37 32 29 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 16.004,11.816C16.004,2.979 8.841,-4.184 0.003,-4.184" style="fill:rgb(0,163,172);fill-rule:nonzero;"/> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49897	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	465	OUT	GET /sumbangan.com/public/campaigns/large/64e85386ea881_Sumbangan_Cover_Kempen-02.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	611	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/jpeg Content-Length: 1413263 Connection: close x-oss-request-id: 674319EAF5E04B33398FCD3F Vary: Origin Accept-Ranges: bytes ETag: "B56D51B9CF4FBB1972EE8016AE11AB28" Last-Modified: Fri, 25 Aug 2023 07:08:55 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13437673896349436848 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Sat, 26 Aug 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: tW1Ruc9Puxly7oAWrhGrKA== x-oss-server-time: 1
2024-11-24 12:19:54 UTC	15773	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:54 UTC	16384	IN	Data Raw: 2c 91 70 7c 8a 30 f0 7a 29 5d fa 21 0d e4 30 45 c1 f2 28 c1 f2 2a 56 07 92 c8 03 cb 28 6c 30 44 c1 f2 29 40 1f c9 52 30 3c 96 36 e9 84 d9 cb 08 7c 16 18 c6 4f 90 47 c5 f9 29 f7 0d ba 2c e5 be a9 9b d9 2a 58 18 e5 3e 48 c1 4f b8 8c 74 43 b1 8d 93 d4 b2 09 21 8c 38 76 59 e5 27 b2 70 01 e4 97 f5 27 a5 91 1a 48 8e e6 90 11 93 8c 63 74 f9 07 7d bb 2c 00 39 ba 26 e4 72 5c 11 f9 5d e4 8e 59 7c 94 9c b4 76 46 52 6e 8f 98 d6 f0 47 01 c5 60 31 dd c2 7f 64 1f 24 de f1 78 08 a4 30 1a 7c 96 70 f3 d9 48 23 1b 2c 37 e4 9a aa 36 fa 0f 5c b1 8f 8b f2 56 00 3d 30 a4 e0 79 24 e3 d1 3f 70 fd 84 7c 1c f4 52 03 c0 01 1e 98 4d 10 72 8d c1 b4 77 9f 3d d6 79 c7 4e 60 99 e5 3e 48 c1 46 e0 da 3f 96 b9 18 09 b6 e4 3b 74 ef c9 2e e5 8c b2 29 b7 19 6d 12 31 dd 07 63 95 91 94 1d 89 4c Data Ascii: ,p\|0z)]!0E(V(l0D)@R0<6\|OG),X>HOtC!8vY'p'Hct},9&r\]Y\|vFRnG`1d$x0\|pH#,76\V=0y$?p\|RMrw=yN`>HF?;t.)m1cL
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 42 92 dc 87 27 46 59 21 9c 47 5f 4f cc d0 49 e8 ab ee 8f 3e 03 a3 56 ad d9 bb aa db 93 39 81 c0 51 d4 8e 49 e9 d4 c0 ab 7d 2b 0d 9d c0 f5 21 6a 92 e9 91 3d 77 8a 64 fc 6e 8b 70 a3 f8 6d dc aa ba 36 3b c6 cf aa 85 47 05 fd fc 0e 53 5a 04 50 b5 a1 fd 02 93 15 19 64 a2 40 ee 89 f6 1c 30 04 eb 3c d3 b0 56 9c b2 c6 a6 a7 f1 65 12 74 c2 90 5f f8 30 cc 74 49 df 3e 8b 07 29 dd 08 fc 4c 00 39 48 44 6d e4 04 79 ac 9c 85 8e 6c 03 94 37 c0 d9 2c 2c 8a 69 df 0b 18 f5 28 08 03 b2 13 08 f2 80 33 3d d1 d0 10 16 7b 7d 6b 09 c3 64 bc 04 86 6f d5 29 f8 73 3c 33 e5 84 23 97 3b fe 85 0b 43 e9 cd 22 8a f4 59 68 82 49 b9 79 cb 82 f3 f7 11 ef 13 dc 64 96 99 8c e5 0e 76 cb d0 ba a2 31 2d 31 6b b7 c8 5c 53 53 d8 bc 5a b2 43 06 e5 65 5d c3 0f 26 d5 8a df 2d c7 3b d2 3c 3a 12 d7 0b Data Ascii: B'FY!G_OI>V9QI}+!j=wdnpm6;GSZPd@0<Vet_0tI>)L9HDmyl7,,i(3={}kdo)s<3#;C"YhIydv1-1k\SSZCe]&-;<:
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 6d 04 74 4f 6a 3d 25 ef b4 0d b9 86 02 70 0e 53 fa 5a 0f 02 8c 06 8c 96 ae d6 84 14 68 6e c1 89 77 53 74 f6 13 75 55 7b 68 68 69 21 e5 c1 d8 38 f9 ae 33 c6 1b 8c 71 c9 0c 90 00 09 00 9c 2d eb 88 9a 82 20 f8 a0 0f c3 9a 46 cb 95 eb 16 4f 75 aa 83 98 12 dd ba ae 53 53 6e a6 79 34 2c 29 6d ea 88 96 c6 55 de ec c6 9e 30 43 8f 42 13 d5 3a 6f dc 6d a1 95 4d cb 80 ee b6 4d 1a eb 75 04 ad a3 71 69 71 03 62 9b e2 3d 40 82 9c ba 16 e0 63 b2 c9 a3 4b 12 c9 af 3c 6d 39 65 da d6 25 a8 88 44 31 bf 65 e8 9e 08 db df 4d 6d 69 90 64 72 f7 5e 73 a1 b8 ba 7b 8c 4c 93 f2 bb af 58 70 96 98 49 68 61 6b 40 cb 14 1a 8f 14 c8 69 bf 58 e8 76 53 0b ab 1a c3 10 23 0a 45 fa 92 4a 99 04 74 d9 67 c9 66 d5 46 61 98 4a 42 b1 e7 63 67 7c 92 76 19 19 58 76 4b 29 b2 e6 4a d6 d2 3e 8a d3 3b Data Ascii: mtOj=%pSZhnwStuU{hhi!83q- FOuSSny4,)mU0CB:omMMuqiqb=@cK<m9e%D1eMmidr^s{LXpIhak@iXvS#EJtgfFaJBcg\|vXvK)J>;
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 31 53 ba 40 22 03 03 c9 2a 68 d8 62 c0 09 14 b4 ef 93 99 c4 93 84 ef 84 7e 89 49 92 ec 70 ba 95 6d a3 3c e4 80 a2 57 db a4 91 c0 e3 a7 50 af c0 64 5d 56 1d e1 c8 d2 30 09 23 64 61 8a e4 8a 9a 59 a3 a4 80 b4 00 08 1b aa a9 6e 99 a9 d8 f7 53 eb a8 e6 69 70 1b 02 ab 63 b3 4a f9 39 f1 9d d5 8c f0 42 e4 17 28 9b 5f 16 ed 07 64 8d 35 4d 4b 69 a8 32 4b 03 5c 09 ee 16 c9 4d 63 73 a0 c9 6e d8 49 b5 59 59 55 58 62 97 60 0a 8e 52 23 93 2c 22 d4 f4 d4 ec e5 6d 38 1f 52 cc 7a 86 9a a5 df 14 0d df d1 59 3f 45 d3 ba 1e 66 95 af d4 da 05 0c dc ac 3d d4 32 a8 33 25 8c d7 48 9a df 82 11 b8 f2 55 f1 dc 2a a9 64 32 b5 c5 a0 f4 0a 6d 2d 11 9d bb 8c a8 f7 1a 69 00 2c 6b 3a 04 94 e7 99 60 92 96 1b 09 2b df 71 1c b3 3c 91 ea a1 55 c1 45 04 65 d8 19 55 f3 d4 49 49 cd cd d4 2d 72 Data Ascii: 1S@"hb~Ipm<WPd]V0#daYnSipcJ9B(_d5MKi2K\McsnIYYUXb`R#,"m8RzY?Ef=23%HUd2m-i,k:`+q<UEeUII-r
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: a0 2f f0 ea 4b 60 92 37 07 1e 50 76 57 15 0d f7 69 48 7e c1 73 4f 66 48 aa 26 b2 78 93 92 40 6f 75 bf 6b 2a c1 0c ce 64 47 70 d3 d1 75 56 91 94 ba 9c be a1 49 43 a3 2a ae 95 30 54 48 5a c7 8d 95 0d d6 a2 11 19 0d 78 c8 5a fb af 95 2d aa 9d af 71 d8 15 ae cb 7f ab 9e a1 ec c9 23 2b 4a 4b 69 83 18 39 64 b8 96 57 99 4f 2b fb a7 9b 5c e8 87 55 44 2b 5e 08 2e 29 c6 d7 35 e4 02 e5 13 9e 08 dd 12 6d 75 c9 ef 20 02 91 05 59 d8 12 53 3e 07 89 f1 65 2b c3 f0 fa a6 f7 c9 32 c5 3b 7e 0b ba 0a 80 48 c9 ea af e9 65 6e 37 2b 4b 82 ac 43 d4 f4 53 e2 bd b6 3c 0e 6e bb 29 15 6c 8e 95 be 0d 96 7a f6 40 49 0e 45 25 e6 17 c8 39 9e 0a ab 9a 13 55 4e d9 9a e2 79 93 74 96 79 b9 f9 81 2a 56 d3 59 05 4d a3 73 96 b2 85 d4 bc ae 2d 24 85 ce b5 83 a8 61 85 f3 46 1b 9c 15 73 57 05 4c Data Ascii: /K`7PvWiH~sOfH&x@oukdGpuVIC0THZxZ-q#+JKi9dWO+\UD+^.)5mu YS>e+2;~Hen7+KCS<n)lz@IE%9UNyty*VYMs-$aFsWL
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: b3 41 dd 9b cb b8 af aa c9 f8 2a 64 fd f9 43 b8 ab ac 48 fe 98 93 f7 eb 4f 82 2e 53 f1 ca 3e b2 95 50 4e 3f 06 f0 7e 4a dc 25 1d bc 87 76 6c 53 71 3f 59 49 96 be a6 4c 1f d9 95 51 5b c4 0d 52 e2 40 a9 97 7f d9 ad 7e 6a a9 1a e2 c2 fd d3 b0 44 65 f8 9c e5 5f 6c 6b 7a d1 17 bb 26 1d 69 a9 49 06 4a 99 71 fb 72 a7 51 6a fb dd 43 83 7d ea 4c 9d be 99 54 95 51 b0 b7 90 3c 67 18 51 a2 a3 a9 89 de 24 52 e0 f5 43 a4 90 77 6c da 6e 3a b6 fb 46 e1 13 ea 65 3c dd 30 f2 91 06 b4 bc f2 72 9a 99 72 7f 66 55 54 27 c5 88 ba b1 d9 78 e8 4a 8b 2c ac 6b be 06 e7 07 b2 3b a4 1d d9 b2 d1 df ee 92 4a 65 9a a6 62 d3 fb 22 a1 5f b5 0d 69 91 ae 8a 79 b0 d3 be 1e 54 5a 1a c2 07 2b 86 ca 4c d0 d3 4a c2 e2 07 aa 55 45 2e 43 bb 19 66 a2 ac 98 34 36 79 b2 07 e5 94 e0 bb dc 5b b9 a9 97 Data Ascii: A*dCHO.S>PN?~J%vlSq?YILQ[R@~jDe_lkz&iIJqrQjC}LTQ<gQ$RCwln:Fe<0rrfUT'xJ,k;Jeb"_iyTZ+LJUE.Cf46y[
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 3e 6e 36 cc fd 17 2c 1b 9d b4 76 72 ed df ce d1 59 9c f8 4e fb 16 3f 9d a2 af fb 53 be c5 2a ed ad af f7 6f e6 83 d1 4e 28 2e b6 f1 d8 a8 d5 17 3b 73 9d f4 5c 7e a5 dd 3f 9d a2 af fb 53 d2 5d ec d1 56 7a c4 ef b1 3a 3d b6 b5 5f f0 df cd 02 b6 c7 43 84 fb f5 b8 81 86 b8 24 fb ed b4 f5 63 97 78 fe 76 9a ac 01 e1 3b ec 41 f6 68 aa fe d4 ef b1 3b fa 73 6a bf e1 bf 9a 0f 46 67 09 65 6d b8 38 1e 53 b2 72 5b a5 b7 a7 21 5d c9 be cc f5 59 cf 84 ec 7c 92 df ec d1 3b ba 46 7e c5 14 bb 71 6b fd db f9 a1 3d 10 e0 12 5c 68 09 d9 a7 1f 24 47 5d 6f 38 e6 69 5d ef f9 d8 aa 7f b5 3b ec 4e b3 d9 8a 71 f8 8e fb 14 3f d3 7b 4c fe cd fc d0 3b 4f 81 c0 cd 7d 13 3f 5b 61 c2 c8 bb 53 03 b4 65 7a 09 be cc d3 01 f4 1d f6 25 7f 3b 2c 83 f1 0f d8 aa 4f b7 b6 b0 93 8f 77 2f 99 3c 2d Data Ascii: >n6,vrYN?S*oN(.;s\~?S]Vz:=_C$cxv;Ah;sjFgem8Sr[!]Y\|;F~qk=\h$G]o8i];Nq?{L;O}?[aSez%;,Ow/<-
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 5e fa 06 cd b8 c8 c6 55 89 ce 14 fc 51 12 dd 52 5d 07 68 ef 10 de 6a 64 02 4d ce 42 8f 26 99 98 d6 89 5f 19 2c 2e 5a 16 91 6e a0 82 fe 25 31 b8 d3 17 f5 ed 8c af 43 41 53 63 36 96 3e a1 ed 12 86 e4 e7 cf 0b 9c d6 ef d7 72 d4 70 74 16 16 8e 3c 9a d5 35 b2 df 4c f8 c8 63 43 c7 55 06 e1 71 10 dc bc 3e 6f 87 a2 a4 d4 fa a6 9e 8a bc 98 66 3e 18 76 36 2a 38 b8 53 dd 29 fd ea 09 39 9e bc 3a e3 75 5b a9 e4 e9 5a 7d da 46 c8 f8 a1 b8 1f 85 e3 25 22 7d 3d 20 01 ce fa 2b 56 b5 df 8d be bc 0a d7 96 c7 cc 3a f9 2e 9b 1d f6 c1 73 b7 01 4b 3b 5d 27 2f 9a 72 a6 d0 d8 37 16 46 b3 db 2d d4 94 8e a9 94 37 99 81 69 7a d2 ff 00 06 4f 82 d1 9c 91 b2 9d 70 ad ad 8e 47 d3 c6 5c 18 e3 db c9 50 54 d8 a7 ae 7f c4 09 c9 ce e9 31 82 fc 2a 3c 12 34 65 d2 7a a9 80 70 38 ca e9 54 75 0c Data Ascii: ^UQR]hjdMB&_,.Zn%1CASc6>rpt<5LcCUq>of>v68S)9:u[Z}F%"}= +V:.sK;]'/r7F-7izOpG\PT1<4ezp8Tu
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 75 05 8e 27 e4 be 89 ea ae 15 e9 ab ed 31 9e 81 b1 90 1a 7e 8f c9 79 3f 8c 7c 2e 93 4e 39 d5 30 44 31 b9 c8 5c ce 97 db db 6b 8b 8e e9 54 79 f8 11 3a 32 4f 27 27 a6 67 8a df 89 2e 82 db ef f7 48 a8 1a 32 5e 40 4f 5b c4 22 27 09 ce 1c d1 d1 39 66 a8 34 b7 36 dd 22 1c c6 12 08 f5 c1 5d ee a0 ef ef 2d b7 51 97 80 b1 83 5d 4e e5 6d e0 49 93 4b 1a a9 29 ba c7 cd 93 f2 5e 6e d6 76 b6 69 cb f4 b4 8d c3 48 24 60 7c d7 d1 4e 07 dd e8 f5 b6 8b f7 7b 83 18 d7 88 b0 3e c5 e4 6f 69 5e 19 1b 6e af f1 e8 59 96 c8 fe c3 b6 57 97 d0 ed 3c ed 2e 95 b5 69 e2 5f 02 c4 52 5d 4e 2b 4b a5 ee 1a 96 58 d9 4a c7 3c b8 ec af 2b f8 3f a9 ad 51 32 73 4d 20 6b 86 7a 15 ea ce 08 70 86 c1 47 67 a2 bb 5c 1a ce 72 d0 e3 cc bb 55 cb 4b e9 4b ed 10 a5 86 9e 02 58 39 7b 27 5f 76 c2 92 8b a9 Data Ascii: u'1~y?\|.N90D1\kTy:2O''g.H2^@O["'9f46"]-Q]NmIK)^nviH$`\|N{>oi^nYW<.i_R]N+KXJ<+?Q2sM kzpGg\rUKKX9{'_v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49901	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1503	OUT	GET /mobile/img/home/aplikasi-telefon-pintar.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:54 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 247274 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-3c5ea" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	2498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 5b 08 06 00 00 00 1c e2 f0 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec dd 79 94 9d e5 7d 27 f8 ef f3 ee 77 ab aa 5b fb 5e da 37 b4 6f 80 84 24 c0 66 07 0b 13 64 c4 e2 24 4d 67 d2 d9 26 93 33 3d c9 64 ce 74 8e 7b 99 ee 73 a6 93 99 1c 77 7a 3a 36 b6 63 26 71 48 0c 03 18 37 9b 84 d8 24 40 42 20 09 84 28 09 49 48 2a 49 b5 af 77 7f f7 67 fe b8 b7 ae 54 a2 b4 97 6c 6c be 9f 73 74 24 54 b7 6e bd f5 de 52 f1 7c eb 79 7e bf 1f 40 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: PNGIHDR [pHYs IDATxy}'w[^7o$fd$Mg&3=dt{swz:6c&qH7$@B (IH*IwgTllst$TnR\|y~@DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD
2024-11-24 12:19:54 UTC	11296	IN	Data Raw: 88 7e bd 7c eb 5b df 8a 47 a3 d1 5b 74 5d bf 57 08 b1 2a 0c c2 b9 7e e0 47 fd f2 11 2b 0f 9e e7 c3 71 1c 38 8e 53 1e 14 d8 de de 8e b5 6b d7 62 f5 ea d5 98 31 63 06 6a 6a 6a a0 28 ca 57 22 68 5c 4c 2a 95 c2 91 23 47 f0 d6 5b 6f e1 f5 d7 5f c7 d0 d0 50 79 ce 49 71 57 c4 84 69 94 8a d5 cf 99 27 22 04 f2 02 38 ec 38 ee 7b a9 74 e6 ff 1d 4d a5 f6 be f6 da 6b 0c 22 c4 00 42 44 44 44 bf da 36 6d da 54 13 8b c5 1e 36 0c e3 11 01 31 cb 0f fc 2a cf f3 74 cf f3 e0 b9 1e fc c0 83 eb 7a 70 1c 1b 8e e3 22 08 02 08 21 30 73 e6 4c 3c f0 c0 03 58 b5 6a 15 aa aa aa 10 8d 46 bf 94 9f df 97 61 07 26 97 cb a1 a7 a7 07 5b b7 6e c5 0b 2f bc 80 91 91 11 28 8a 52 1c b8 18 89 c0 b4 cc e2 6e 88 a1 97 27 ac 1b 7a b1 70 5d 55 55 0f 52 f6 e4 f2 f9 37 52 e9 cc df 0c 0c 0e ee 7f e7 9d Data Ascii: ~\|[G[t]W~G+q8Skb1cjjj(W"h\L#G[o_PyIqWi'"88{tMk"BDDD6mT61*tzp"!0sL<XjFa&[n/(Rn'zp]UUR7R
2024-11-24 12:19:55 UTC	1412	IN	Data Raw: 10 03 af 6d db e6 f3 3b 2b 03 08 11 11 d1 17 3c f4 d0 43 ba 69 46 ea 55 55 cc 01 f0 4d 21 94 8d 80 6c f3 3c 4f 8c 07 0f df f7 e1 7b 1e 5c cf 85 eb 16 db ea 56 54 54 a0 a3 a3 03 37 de 78 23 ee bc f3 4e 34 34 34 5c f5 b5 48 00 79 df c7 40 c1 46 77 be 80 03 a3 29 98 aa 8a 5b 9b ea d1 16 2b d6 4c 48 00 dd b9 02 7e 7e aa 1b a7 72 79 ac aa ad c6 f2 ea 24 9a a2 16 cc 8b 14 77 9f 1a 1c c5 4b bb f6 e3 a3 a3 a7 30 98 ca c0 0f 42 4c b6 d3 71 79 81 e3 cc a3 be d0 dd 57 5e ea 7b 16 17 7d c9 44 14 77 af 5e 88 1b 16 cc 40 53 75 e5 55 4f 56 df b1 63 07 3a 3b 3b 71 fd f5 d7 63 74 74 14 47 8f 1e 45 5d 5d 1d 66 cd 9a 85 13 27 4e 60 68 68 08 ad ad ad 98 3f 7f 3e c2 30 44 7f 7f 3f aa aa aa d0 dc dc 5c 1e 86 37 15 81 e3 7c 02 29 b1 77 78 14 4f 9f 38 85 fd a3 69 f4 3b 36 bc 50 Data Ascii: m;+<CiFUUM!l<O{\VTT7x#N444\Hy@Fw)[+LH~~ry$wK0BLqyW^{}Dw^@SuUOVc:;;qcttGE]]f'N`hh?>0D?\7\|)wxO8i;6P
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 7e 62 38 b8 d2 c0 71 81 e0 21 2f f1 19 a4 2c 16 d5 27 13 51 2c 9b d5 86 8d 6b 96 62 5a 63 cd 94 2d fc 3d cf 9b 30 37 a4 a6 a6 06 27 4e 9c 40 67 67 27 12 89 04 e6 cd 9b 87 54 2a 85 f7 de 7b 0f f7 dc 73 0f 16 2c 58 30 a5 81 e3 7c f2 7e 80 01 db c6 cb a7 fb f0 4c d7 69 f4 db ce 99 21 82 a5 fb 24 24 70 47 63 03 1a 23 06 b6 f4 0e a0 50 0a 22 96 a2 c0 52 54 2c a8 4a e0 ae 96 26 ec 1d 1a c1 ee e1 31 f4 3b 2e 0a 67 2f e4 a5 44 a5 a1 e3 be d6 26 dc d7 da 84 99 15 71 68 42 e0 ad be 41 fc e0 f0 31 1c ca 64 8b f3 42 26 a9 03 31 84 c0 8d 75 d5 78 78 5a 1b e6 57 55 20 69 18 30 d5 a9 0d 67 ae eb 62 70 70 10 db b6 6d c3 13 4f 3c 81 fe fe 01 5c ea de dc e5 84 14 55 55 a1 69 1a 54 55 2d fe 59 55 cb 33 41 c6 43 c8 f8 31 cc f3 05 17 4d d3 10 8d 46 11 8b c5 4a 35 22 46 a9 f3 Data Ascii: ~b8q!/,'Q,kbZc-=07'N@gg'T*{s,X0\|~Li!$$pGc#P"RT,J&1;.g/D&qhBA1dB&1uxxZWU i0gbppmO<\UUiTU-YU3AC1MFJ5"F
2024-11-24 12:19:55 UTC	9884	IN	Data Raw: 4d bf 7d 1d bb 11 42 10 0d 05 79 74 e3 4a 76 ac 5e 42 75 79 9c 90 ae cd 49 a1 39 69 cd 7a f2 e4 49 4e 9c 38 c1 8a 15 2b 58 b5 6a 15 8a a2 e0 38 0e 8a a2 30 38 38 c8 8b 2f be 48 24 12 a1 ba ba 9a 8e 8e 0e da da da 78 f4 d1 47 3f b5 e2 fb 6a 64 6d 87 61 d3 24 6d 3b 38 45 f7 2b 5d 96 a9 d4 03 c4 03 da 8c 61 95 9f 17 c2 31 1d f2 f9 3c ef be fb 2e df ff fe f7 39 7f fe 3c 63 63 63 3f b5 f3 bb d5 f1 af 60 30 48 38 1c 26 1c ba aa 23 52 12 ac 17 9c b3 64 09 cf 34 ad 03 86 69 fe df 48 bc 97 c9 e6 fb f6 ec d9 63 fa 04 c4 87 0f 1f 3e 7c f8 98 43 6c df be 5d aa a9 a9 89 07 83 c1 65 b2 2c df 2d 49 d2 2e 60 93 eb ba 71 cb b2 8a 16 ba 57 92 ca 27 89 88 2c cb 2c 5c b8 90 95 2b 57 b2 79 f3 66 d6 ac 59 83 a6 69 3f b3 f3 98 aa 18 31 5d 97 0f 07 47 f8 64 78 14 5d 91 59 55 5e Data Ascii: M}BytJv^BuyI9izIN8+Xj8088/H$xG?jdma$m;8E+]a1<.9<ccc?`0H8&#Rd4iHc>\|Cl]e,-I.`qW',,\+WyfYi?1]Gdx]YU^
2024-11-24 12:19:55 UTC	5648	IN	Data Raw: 90 a5 a2 b2 bc 40 50 5a aa 93 7c 7d c7 3d d4 97 27 f0 3c 51 5a dc 25 d9 03 49 e0 da 0e aa 56 08 dd f2 bc 82 bb 96 c0 43 12 0e b6 eb 91 1e bc cc 99 37 7f 82 18 1b 47 2a ab e3 ae 47 7e 19 29 56 ce 78 7a 02 bd d8 75 48 65 52 b8 8e 83 ae 07 8a c7 21 50 64 b5 d0 8d 91 25 c2 01 15 c9 cc d1 79 ea 10 17 8f 1e 62 7c 38 c5 70 2a cf 84 65 50 91 2c a3 26 59 49 26 97 a5 65 c1 3c f4 50 98 ac a7 32 ee 05 70 c2 09 96 ac 5e 4b 3c 59 49 d6 71 f0 24 a9 60 13 2c ae b2 21 2e da 02 4f 3a 3a 25 24 41 bd aa 50 a1 07 88 ea 3a da 14 1d 91 3b 29 ba 04 70 6a 6c 82 97 3b 2e 63 79 1e 9b aa 92 dc 55 51 4e 7d 38 84 22 cf 6e fb 29 db e6 7f fb f8 30 0f d4 d5 50 17 0a 72 74 74 8c ee bc 41 b9 16 60 6d 65 39 67 53 69 1a 42 21 16 c5 63 b4 c4 22 37 58 03 4f b7 fd 8c ed f0 6e ff 20 bb fb 07 a9 Data Ascii: @PZ\|}='<QZ%IVC7GG~)VxzuHeR!Pd%yb\|8peP,&YI&e<P2p^K<YIq$`,!.O::%$AP:;)pjl;.cyUQN}8"n)0PrttA`me9gSiB!c"7XOn
2024-11-24 12:19:55 UTC	4236	IN	Data Raw: 96 af 3f 7d 88 ef 3e ff 72 f0 71 b9 1c 11 8a 3e bf 09 dc bf 75 1d 1f bb f3 00 83 9d 59 0c f9 c3 03 22 2d 4a d5 3f ac 75 4e 4c 4c f0 d1 8f 7e 94 43 87 0e 5d f6 63 0c 29 18 ec ef 27 d7 d1 4e 26 6a 72 e3 c6 7e 0e ec d9 4e 24 1e 63 be aa be 71 ff e3 07 ef f8 cf 7f f6 99 37 14 8e d3 02 20 ad 6a 55 ab 5a a0 e3 2d ac 5b 6f bd d5 ec ea ea ca 59 96 b5 11 b8 4b 4a f9 93 5a eb 01 d7 0d dc ac 56 68 56 5e 28 2a 0f 78 e8 ed ed ed 8c 8c 8c 70 e7 9d 77 72 dd 75 d7 11 8b c5 ae 78 c3 5b 2d 2a 9f cd 17 38 35 35 c3 13 27 4e f3 d8 c9 51 ca f5 1a f8 5e 40 8f 52 ba 99 93 a0 b5 0e e8 52 be 0f c2 40 c4 e2 08 29 d0 6e 1d ed 3a 20 45 90 97 c1 aa c4 72 a5 42 fb 5c 81 d6 c1 74 82 46 40 9b 19 3a 63 99 36 22 12 43 58 11 9a b1 84 8d a6 7e d5 e9 09 5a 76 f8 d5 5b ae e3 ba 0d c3 4d 1a 53 Data Ascii: ?}>rq>uY"-J?uNLL~C]c)'N&jr~N$cq7 jUZ-[oYKJZVhV^(xpwrux[-855'NQ^@RR@)n: ErB\tF@:c6"CX~Zv[MS
2024-11-24 12:19:55 UTC	1412	IN	Data Raw: 34 82 3c d8 bf 65 84 dd 9b 47 82 63 2d c0 0f 01 48 38 e3 58 71 b2 92 12 e9 ba a8 4a 11 2f 3f 47 75 6e 9c 5a 7e 06 df 71 90 c2 c2 b4 02 27 ab 88 65 a3 b5 8f ef bb 28 e5 01 1a d3 b4 b0 2d 0b 41 40 a9 4a c5 93 e4 52 69 12 91 08 76 24 82 34 6d cc 78 0a 33 9e 01 29 02 70 43 c3 65 4b 82 92 c1 29 10 3e 42 48 dc ca 12 c5 fc 29 b4 aa 86 93 0f 23 0c 25 14 18 e1 39 16 d2 46 48 0b 13 89 0f 08 c3 46 8a 00 54 34 c4 fc 86 b4 30 8d 18 a6 65 a3 a5 45 a5 52 06 5f 13 b5 a3 24 e3 c9 a6 6b d6 5b 21 56 6f d4 6c ad ce d7 c7 a7 78 a5 b0 cc 60 32 ce 35 1d 59 76 b4 b7 11 33 8c 4b 36 7f 25 d7 e3 50 be c0 92 e3 06 34 2f c7 65 b2 5a 23 61 18 5c d3 91 65 d9 71 78 6a 6e 01 d3 90 6c ce a4 d9 d1 96 61 30 19 27 7a 19 a0 5f 69 cd b9 72 85 6f 8c 4f 71 b6 58 66 28 19 e7 da ce 0e b6 64 d2 21 Data Ascii: 4<eGc-H8XqJ/?GunZ~q'e(-A@JRiv$4mx3)pCeK)>BH)#%9FHFT40eER_$k[!Volx`25Yv3K6%P4/eZ#a\eqxjnla0'z_iroOqXf(d!
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: a3 ad 1d d9 d6 8e 8c 45 41 6b 76 6d dc c0 be cd 9b 58 aa 56 59 28 95 f0 3d 0f c7 f7 49 44 a3 41 63 89 e0 f4 f4 1c c7 a6 a7 11 48 34 3a 4c 3b 0f f2 2c 1a 81 6c 81 1e 44 34 79 ec 61 fc f9 ca 4e a9 83 e6 37 a0 65 85 80 04 8d 96 02 61 46 11 b1 14 60 00 5e 30 31 d1 2a a0 66 19 01 d5 65 cf 9a 3e 3e 7e c3 d5 d8 46 e0 e6 24 9b a2 f9 57 b5 55 e1 cf ce 57 ab fc d6 37 1f 61 a9 e6 04 c2 74 c7 09 c3 12 03 da 91 9a 9b 85 68 14 91 48 86 20 27 74 c3 0a 5d b4 08 83 02 07 7a 3a b8 79 cf 76 32 c9 14 48 0b 29 2c 2c 34 7e 71 81 f2 cc 28 6e 7e 16 bf 18 50 9f 7c ad 89 d8 29 12 f1 0c a6 19 41 69 1f d7 75 02 6d 8d 08 74 19 b6 90 44 7d 8f 38 1e d1 44 94 b9 42 9e 4a 21 4f dc 36 29 e4 97 28 16 8b 6c 18 ea 23 13 55 08 bf 8e ef 38 f8 9e 46 09 1b 15 ef 24 d6 bb 91 fe ad bb 89 65 da 9a Data Ascii: EAkvmXVY(=IDAcH4:L;,lD4yaN7eaF`^01*fe>>~F$WUW7athH 't]z:yv2H),,4~q(n~P\|)AiumtD}8DBJ!O6)(l#U8F$e
2024-11-24 12:19:55 UTC	8472	IN	Data Raw: f5 e9 14 fb 72 59 36 a4 d3 c4 cd 8b 83 a4 c5 62 99 ef bd f0 32 8f 1e 3a c9 cb a3 53 54 c3 d4 73 7d d1 d1 85 6e 1e d7 a1 ae 2c 03 b9 2c 87 cf 4e 52 28 57 11 57 08 38 2e f6 a0 78 d4 e6 a6 1d eb b9 71 c7 06 b6 0f f7 93 4d c5 df 96 1b cc db 79 1a 33 5b ad f1 e5 d1 09 be 3b 3d c7 78 a5 c2 ae b6 0c bf bd 7d 33 c3 c9 c4 95 9e ad 66 88 e0 c1 83 07 f9 de f7 be c7 b7 bf fd 6d f2 f9 fc 15 d1 e1 84 10 d8 b6 dd cc 00 5a 6d 09 df d7 d7 47 3a 9d c6 57 8a 72 b1 c4 e2 dc 1c a7 ce 9d 45 29 85 94 02 53 4a 2c cb 7c d5 04 c4 e4 5d 3b 37 72 eb 35 db 57 00 48 4d bd b8 5c 73 3f f0 fe 5f fd d4 d9 16 00 69 55 ab 5a f5 63 07 38 56 d7 bd f7 de db 16 8b c5 6e 92 d2 b8 5d 6b bd 5f 29 7f 8b e7 79 f1 86 73 d5 6a 37 ab 86 b6 63 68 68 88 fd fb f7 b3 6b d7 2e ae ba ea 2a 3a 3a 3a ae 68 23 Data Ascii: rY6b2:STs}n,,NR(WW8.xqMy3[;=x}3fmZmG:WrE)SJ,\|];7r5WHM\s?_iUZc8Vn]k_)ysj7chhk.*:::h#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49900	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1490	OUT	GET /mobile/img/home/vanity-url.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:54 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 335309 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-51dcd" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	2498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 5b 08 06 00 00 00 1c e2 f0 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec bd 69 b0 25 c7 75 e7 f7 cf ac f5 ee 6f 5f ba fb 75 37 ba d1 00 08 90 04 b8 89 20 48 8a 02 69 8a 1c 80 23 51 84 40 51 a2 a4 51 88 9a a1 b6 b1 44 d1 1a d9 a3 19 4b b3 44 8c 65 cf d8 31 f3 c1 5b d8 31 13 63 3b 14 92 c7 a3 c5 1a ca dc 83 5a 48 82 20 00 62 23 08 34 ba 1b e8 f5 75 bf fd dd fd 56 55 a6 3f d4 72 b3 f2 66 dd 7b 5f a3 1b 84 c8 f3 8b 00 fa bd fb ea 56 65 65 66 55 9e 7f e6 39 27 01 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 Data Ascii: PNGIHDR [pHYs IDATxi%uo_u7 Hi#Q@QQDKDe1[1c;ZH b#4uVU?rf{_VeefU9'
2024-11-24 12:19:54 UTC	11296	IN	Data Raw: 2b 42 44 c7 3d d7 5d b4 1d c7 0d 06 03 16 84 21 a2 30 8c 2f 90 58 e3 8a 25 39 79 aa 2c 39 06 8c e5 a7 15 a5 e1 5b fa 31 c9 f7 d3 eb 9a be cb 18 33 4e 89 17 3a be c7 06 cf f7 c6 cb 82 b1 61 fd be 96 cb 65 2a 67 da 6e 07 2d ff 8d bc e7 57 72 ae a2 ef 9a ee 4b ff 2c b7 f6 c1 94 27 74 d8 37 b3 e3 d9 a4 50 29 c3 df b4 5f 8b 82 2e d8 14 67 35 3d 4f f2 00 b3 1f e3 7c 12 8b ae c7 26 94 43 a6 55 aa fe a0 7c 59 af 66 96 b4 95 54 de 17 e9 3b 64 9a 00 b1 5c fb 31 66 7e c7 31 ed c2 d7 f9 86 19 b7 fc 30 29 20 69 e4 6f 4c f9 96 5a 76 96 48 35 09 b0 58 48 c3 b6 2c 38 ae 0b cb b2 60 59 16 a2 28 1a f4 7b bd 0d c7 71 ae d4 6a b5 4b 42 88 6b 9d 6e f7 74 b9 5a 79 8e 49 34 45 14 b5 1a f5 fa c6 b3 cf 3e bb 7d e9 d2 a5 16 f2 b1 47 e9 ea 0a c5 91 10 24 40 08 e2 fb a4 ef eb 01 a8 Data Ascii: +BD=]!0/X%9y,9[13N:ae*gn-WrK,'t7P)_.g5=O\|&CU\|YfT;d\1f~10) ioLZvH5XH,8`Y({qjKBkntZyI4E>}G$@
2024-11-24 12:19:55 UTC	1412	IN	Data Raw: 5f fc e5 5f 8e ec 3c 7f 60 23 20 69 4b c7 71 61 db 4e 32 db 87 5c b6 d1 1b 55 a5 ec 06 36 86 29 65 69 8a e3 38 70 5c d7 50 37 4c fb 7f 41 23 19 ad 7f 53 0c 86 6a bd 4b 18 fd 02 d9 38 85 6a 10 9b 5a ba 53 06 98 a5 12 2b e8 39 5a a0 31 33 c9 19 36 56 c7 5d 77 c3 31 53 0a 69 c3 9e 2d 79 a3 8e e5 aa 4a dd 60 d0 b2 2c 38 4e 92 c8 41 73 49 1a 67 a7 a6 e7 57 37 d0 54 45 82 2a 36 d4 32 e5 f7 94 99 a6 4f 8c 6a 53 14 6c b7 c3 18 83 e3 ba d9 86 79 79 81 96 6e c0 3a 2a 32 98 b2 af 8d 2a 4d 19 18 ee b8 e3 76 fc f2 2f fe 22 8e 1e 3d 3a ba da 31 ad f8 30 a9 b8 eb 98 d0 98 f8 99 be ef 91 e9 f7 22 77 ac 22 b7 4e 65 6c c8 fe 33 08 db f4 7b b6 e3 e0 96 e3 c7 71 ff 0f bd 07 b7 9e 3c 89 4a a5 82 20 08 d1 6a b7 b2 0d 45 a5 9a 05 cb f4 de 91 93 33 1f 86 61 1c 8c 5e 2a f9 58 59 Data Ascii: __<`# iKqaN2\U6)ei8p\P7LA#SjK8jZS+9Z136V]w1Si-yJ`,8NAsIgW7TE62OjSlyyn:2Mv/"=:10"w"Nel3{q<J jE3a^XY
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 76 bb b9 7c e8 ba f0 50 37 89 1a 1d 5c d2 d4 8e c0 dc ec 1c 3e f6 13 3f 81 1f fd 91 1f c1 ca f2 72 96 0b 7e 64 d6 50 9a 13 9e e8 1b 71 4d e5 3a 22 0f 20 32 26 cd 14 df 88 19 5f 39 c1 2a 1f fb c5 e1 0d a8 2e 26 e5 52 09 c7 8e 1e 1d 6b e8 e9 6d 96 66 11 9b 9d 9b c3 ea ca 0a ea f5 3a 3c cf 83 6d d9 59 9a cd 34 e8 32 dd 03 a6 5c 2a e1 fc f9 f3 08 52 7f 69 a5 3c c9 76 70 63 76 72 96 13 ef 6a b4 4a f2 8d ad 9f 1f ea 35 a4 c4 f1 5b 4e e0 c4 89 5b 50 2a 95 01 c4 7b 0c 84 61 00 09 c0 e2 16 5c d7 c1 e2 e2 02 ea f5 3a aa f5 1a ce be 78 26 f1 fd 96 9a 7b 92 c1 af 4f 35 42 33 43 97 0f 3b 2a e7 08 fa 3d 74 da 6d 04 41 90 cd 44 33 c6 86 a9 47 19 43 18 86 59 66 22 29 e3 b4 ce 42 88 78 67 67 cb 8a f7 85 51 d2 41 73 ce b3 76 e0 9c 2b ab 34 f1 67 2c f9 3b 72 d9 b1 18 f2 19 Data Ascii: v\|P7\>?r~dPqM:" 2&_9.&Rkmf:<mY42\Ri<vpcvrjJ5[N[P{a\:x&{O5B3C;=tmAD3GCYf")BxggQAsv+4g,;r
2024-11-24 12:19:55 UTC	4236	IN	Data Raw: 13 d4 92 31 80 27 b3 f0 8e 63 67 b3 f2 69 3f 4f 45 82 6d 0d 63 24 d2 55 0c db b6 61 27 71 15 8e e3 40 26 31 19 ae eb 26 e9 90 9d 6c c6 34 bb 2f 00 9e ef a3 54 2a c1 f3 bc cc 78 f5 95 cf d2 58 12 2f d9 d4 d3 75 dd 6c c6 d5 f3 bc ac 5c be ef 67 71 26 a9 70 b1 6d 3b 16 3a 49 16 aa f8 33 2b 6b 37 db b6 b3 7a e7 c9 3d 78 9e 87 52 a9 04 11 89 02 7b af 28 00 3d bf 41 5f ad 5a 45 b9 54 02 63 0c 51 18 e1 f4 e9 17 b1 bd b3 0d bf 54 42 b5 56 c5 dc dc 2c ca 95 2a 3c df c7 c6 c6 06 ce 9d 7b 09 41 18 c0 e2 1c a5 52 09 95 72 39 7b 49 8c 6e 86 aa be 18 a6 d9 11 74 78 58 16 04 9e ac 60 e4 de 43 05 ef 97 5a ad 86 4e bb 8d 5e af a7 94 45 cd be a5 bf dc 18 82 20 44 bb dd 86 65 c5 42 30 5b ed 50 56 19 47 84 08 63 58 5a 5a cc 76 fe fe be 16 1f f9 e0 9f 83 7d af 60 65 44 9d b8 Data Ascii: 1'cgi?OEmc$Ua'q@&1&l4/TxX/ul\gq&pm;:I3+k7z=xR{(=A_ZETcQTBV,<{ARr9{IntxX`CZN^E DeB0[PVGcXZZv}`eD
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: db 0d d8 69 24 a3 2f 12 29 ac 54 1c 74 bb 5d fc f8 47 3f 42 2f ac 79 52 29 84 39 01 3c 34 67 a7 7e d8 2d 2a 28 f5 5c 0f 96 6d 65 1b 83 92 b8 0d 49 fd 05 89 49 2e ea 13 89 a1 b6 9f 6a 98 b0 a9 e4 2b 55 f6 31 9c 53 92 70 0e d3 e2 14 bb 2e d2 4d e1 ec e7 1b 47 24 c2 5a 21 59 ac 34 ed b0 ee df af 6c f4 a7 53 a2 80 e7 f6 ec 41 b5 56 c5 61 87 ad c7 c8 c8 08 8e 3e ea 68 ec db b7 17 9d 6e 37 8e 30 54 6b 55 ac 9e 99 c1 e8 e8 18 7c df c3 de bd fb f0 d2 4b 07 12 b7 da 07 1c ac 80 1e 09 5e 92 19 28 e7 8d 61 06 83 e4 87 c2 32 d8 05 3c df 8f 15 e5 43 6f 35 2c 4b ff 7c a2 fe 9b 0a 85 2b 5f 78 f1 45 f3 fb a5 cc 9f a7 9d 72 4a cc c0 56 82 0f 03 e0 50 22 10 aa 63 6d 98 6b 20 e5 d8 93 93 93 f8 d5 5f f9 15 ec db bf 1f b7 df 79 67 fc 9e 51 e4 d0 93 df 6f f9 65 25 a0 56 ab c2 Data Ascii: i$/)Tt]G?B/yR)9<4g~-*(\meII.j+U1Sp.MG$Z!Y4lSAVa>hn70TkU\|K^(a2<Co5,K\|+_xErJVP"cmk _ygQoe%V
2024-11-24 12:19:55 UTC	560	IN	Data Raw: e3 19 2c 64 a2 e6 19 d5 45 59 9b 5e 8e 02 ec f4 f1 75 c9 52 c5 ae 2f 6f 4c 50 81 63 16 81 0a 83 82 55 5d bf e9 52 81 48 db e3 34 c0 d3 cb 1f 11 9c d9 13 45 8e 42 86 14 35 92 d2 50 75 2c 6e cb 31 aa 87 49 0d 53 af be c8 31 8a 44 56 28 54 4a 47 9c c2 2a 60 31 01 e4 a4 75 88 0a 30 32 65 79 f1 07 35 a4 5f 4d 40 c4 e8 12 28 50 44 de eb f5 f0 e2 8b 2f e2 c0 81 83 98 99 99 c6 da b5 6b 51 a9 54 32 1d 72 45 84 1e 4d 6b 52 82 95 2b 4c 45 b6 42 76 2b cd 52 1d 02 a7 e4 31 44 44 db 4b 6a 0d 48 f0 79 40 24 40 60 b0 dd f3 dc d2 d6 2c 5b 09 40 ca 36 5c b3 04 7c c7 a9 a0 d6 a8 c5 74 b0 b2 7a 34 4b de 0e cb b2 e3 90 2e 05 a1 86 be 29 c3 7a 3d 8e d8 4b 49 19 f4 89 1a 6d 0f 75 62 cf 14 79 0a bf b7 2c 0b be 10 b8 e3 8e 3b f1 a9 4f 7f 0a 07 0e 1c 40 a5 52 c5 17 bf f4 25 f8 be Data Ascii: ,dEY^uR/oLPcU]RH4EB5Pu,n1IS1DV(TJG*`1u02ey5_M@(PD/kQT2rEMkR+LEBv+R1DDKjHy@$@`,[@6\\|tz4K.)z=KImuby,;O@R%
2024-11-24 12:19:55 UTC	1412	IN	Data Raw: b2 12 2c 89 49 87 41 04 70 38 d6 58 29 5b d9 4a 00 52 b6 a1 9a 2f 7c ab d7 ed a1 d7 ed c5 01 10 62 c4 1e 13 cb b2 d1 0f bd fa 21 d8 60 c9 f0 57 a6 eb 54 f4 a3 5f 43 62 19 58 40 64 90 61 0a 4b 9b 3e 8f f6 f7 7d 1f ed 76 1b f7 7e ef 7b f8 d4 a7 3f 8d f9 f9 05 9c 70 fc 09 68 36 9b 78 f8 91 87 71 d3 4d 37 c1 22 c2 a5 97 5e 8a d1 d1 d1 54 5a 95 ee 3a 96 d3 04 8b fe 82 35 94 d7 33 5a f0 82 df 5d b7 87 9b 6f b9 15 37 df 7c 33 66 67 67 61 db 36 2a d5 2a ce 3c e3 4c bc e3 8a cb 30 35 3d 1d 80 30 b2 72 a3 0b 72 ee 7a 4a fb 25 a2 4e 36 98 b2 a6 c4 20 f5 d8 d9 8a 0e 9c f9 b7 bc e7 e2 d2 12 ae fe c0 07 00 30 fe e0 da 3f c0 f1 27 9c a0 18 57 59 25 c2 79 46 35 0f 00 56 4c de ff 41 64 e9 4c 5a f2 9c 03 04 8a 46 27 28 e3 58 00 0a a5 f1 0c ea 07 2e 0e d5 54 70 19 79 e0 6f Data Ascii: ,IAp8X)[JR/\|b!`WT_CbX@daK>}v~{?ph6xqM7"^TZ:53Z]o7\|3fgga6**<L05=0rrzJ%N6 0?'WY%yF5VLAdLZF'(X.Tpyo
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 6c da b4 29 74 b6 08 fc f0 87 3f c4 4d df b8 09 d7 5d 77 1d 36 6f de 8c d7 9d fd ba d4 bc 94 64 7e 22 79 2e 4d 1b 6f 61 7b ec b1 c7 f0 a5 2f 7f 09 47 1d 79 14 66 66 66 b4 7d 62 5b c9 94 b2 17 5e 78 01 9f fa f4 a7 f0 b5 eb af c7 29 a7 9c 82 37 9c 7b 2e d6 ad 3b 0c ed 4e 1b 3f f8 c1 0f f0 cd 5b bf 89 3f fa e3 3f c6 c4 e4 24 4e 3f ed f4 f8 31 10 48 72 7c 17 7f 0f a2 88 54 90 61 63 16 19 92 a3 50 51 b4 94 73 0c fe 57 15 08 21 73 7d 9c 4c a1 2e 47 42 f2 54 d8 75 0e b4 7a ad 86 d3 4e 3b 0d 3f f9 c9 93 d8 bf 7f 1f d6 ac 59 83 93 4e 3a 11 8d 46 e3 90 dd 9a 65 59 b0 1d bb ff 44 89 f5 99 6f a4 f9 23 a7 96 87 a5 71 1e 46 b8 2d 08 b6 4b 2b aa 6c 25 00 29 db 70 13 16 d8 03 0b 24 d2 44 29 4d 93 19 88 12 f5 17 36 52 16 5f 89 22 24 5d 6c ae f1 20 e9 a2 1b 59 4c 53 26 3e Data Ascii: l)t?M]w6od~"y.Moa{/Gyfff}b[^x)7{.;N?[??$N?1Hr\|TacPQsW!s}L.GBTuzN;?YN:FeYDo#qF-K+l%)p$D)M6R_"$]l YLS&>
2024-11-24 12:19:55 UTC	13560	IN	Data Raw: 78 e0 7e dc ff c0 fd b8 ef be ef 61 f7 ee dd b0 2c 0b 8f 3e f6 28 be 76 fd f5 f8 d6 37 bf 85 4e a7 13 18 2c a4 32 d4 70 e2 f8 04 e0 a5 03 2f e1 13 9f b8 0e 23 23 a3 f8 93 3f f9 13 3c f0 c0 03 b8 73 e7 4e 5c 7e d9 e5 78 e2 89 27 f0 99 cf fc 0d 16 17 17 95 31 91 a6 cb 65 c1 b1 77 36 4e df 63 c6 ee dd bb f1 d6 ff c9 de 9b c7 d9 51 95 e9 e3 cf 39 55 77 ed db 7b a7 d3 49 77 27 9d 95 84 24 04 48 20 51 24 41 c0 30 28 fb 2a 0c 88 8a 0a 88 e8 8c 23 0a 3a df 71 1c 1d 87 f9 09 22 33 b8 00 2e e8 cc 08 88 2c 02 51 04 44 0c 90 84 25 90 95 6c 64 ef a4 3b bd a4 d3 db ed bb 54 9d f3 fb a3 b6 53 75 ab ee ad 7b bb 3b e9 84 7a fd c4 90 7b eb d6 72 aa ea 9c f7 79 97 e7 39 ff 7c bc fa ea 0a ac 5f b7 16 77 ff e0 6e 8c 1f 3f 1e 8f 3c f2 08 9e 79 e6 19 dc 78 e3 8d 58 b3 66 0d d6 Data Ascii: x~a,>(v7N,2p/##?<sN\~x'1ew6NcQ9Uw{Iw'$H Q$A0(*#:q"3.,QD%ld;TSu{;z{ry9\|_wn?<yxXf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49906	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1490	OUT	GET /mobile/img/home/notifikasi.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:54 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 154885 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-25d05" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	13794	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 5b 08 06 00 00 00 1c e2 f0 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec bd 79 9c 1d d7 59 e7 fd 3b b5 dd ad f7 55 2d b5 5a 92 25 b5 f6 c5 bb 63 27 24 24 21 0b 24 04 42 26 64 06 02 21 33 c0 cb cb f0 0e bc 79 99 84 0c c3 e7 85 b0 24 04 86 6d 18 92 19 20 21 81 10 66 12 c8 40 16 27 8e 9d d8 96 2d cb 96 6d c9 5a 5b 4b b7 5a bd 68 eb bd fb 6e b5 9d f9 a3 6f 95 ea 56 57 9d 3a 75 bb 65 2b c9 f3 fd a8 3f ea be b7 d6 53 a7 ce 79 9e e7 3c 0b 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 Data Ascii: PNGIHDR [pHYs IDATxyY;U-Z%c'$$!$B&d!3y$m !f@'-mZ[KZhnoVW:ue+?Sy<@AAAAAAAAAAAAAAAAAAAAAA
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 4c 64 59 e2 f1 d6 2b b9 46 11 58 b9 62 26 bd b8 bf a3 72 d1 8b 8e 1b e5 3f bd e2 1c 2c 5a 59 ab 53 5a 58 bc 00 10 f6 cd 8e b4 ec dd dc c6 74 5d cc 55 cd 58 eb 6d d4 64 98 a4 30 c4 d5 4e 10 59 89 45 9f 25 15 87 93 b5 30 47 5d 4b dc aa 4a 9a 82 87 a2 fb 8a 13 3c 5d d7 45 26 93 c1 96 2d 5b d0 d2 d2 02 c6 98 1f f8 bd 7d fb 76 bf d6 86 97 05 cb 4b b3 a9 aa 2a 2c cb 42 7b 7b 3b a6 a7 a7 7d 57 aa ad 5b b7 62 64 64 c4 cf 60 d5 dd dd 8d d1 d1 51 b4 b5 b5 a1 5a ad fa f1 23 b6 6d a3 ad ad 0d d7 ae 5d f3 6b 87 6c de bc 19 17 2f 5e c4 e6 cd 9b 31 31 31 81 be be 3e 5c be 7c 19 5d 5d 5d 58 58 58 40 3e 9f f7 b3 eb 34 35 35 f9 05 10 27 27 27 d1 df df 8f e1 e1 61 0c 0e 0e e2 ca 95 2b d8 b0 61 03 0c c3 c0 e0 e0 20 7a 7a 7a 22 eb 07 89 94 be 38 a5 44 d7 f5 9b 41 b6 aa 86 d7 Data Ascii: LdY+FXb&r?,ZYSZXt]UXmd0NYE%0G]KJ<]E&-[}vK*,B{{;}W[bdd`QZ#m]kl/^111>\\|]]]XXX@>455'''a+a zzz"8DA
2024-11-24 12:19:55 UTC	9032	IN	Data Raw: b0 e3 d1 29 c6 a6 f5 31 81 7c d3 bc cb 45 59 e5 50 5a 15 30 92 d7 57 61 bd b6 ca 2d 95 ec a5 78 78 4c 1e 3c 93 dc d4 9d 4f 14 8f 90 3c 4e aa 8c b5 7d 66 03 47 14 43 14 55 96 c9 e3 ec 55 52 8c 9b 46 0d c6 25 07 f7 87 5b d7 08 57 33 3f cd 5f 6e fe 27 c3 39 32 52 e8 a8 18 4a 65 1a ab 49 be ea ae 65 8c 15 47 6a 56 d4 22 00 12 35 55 6b a3 12 ce 3a 21 6f 52 2e 74 82 cf bb 6f 9a 73 34 b5 50 1d e6 54 41 4f 65 d0 a5 b8 08 8f 8c 3d 1c fb b6 2d b6 1e c6 aa c3 32 a7 32 ba e2 60 56 59 df 29 87 95 e9 d0 b2 cd 07 e5 90 52 29 7b 26 cb b1 ee 9e 16 46 12 e3 61 a2 5a 5f d5 9c da 0e 4b 9d d2 1a c6 fa aa 52 ba e4 cf 4c 21 45 54 6f 80 69 ff da c6 6e f3 24 a8 94 30 9b 42 ea fd eb 28 c0 b7 cd 5a af 53 98 65 70 43 01 c8 36 eb a7 c9 0b a0 03 34 3a c5 56 4b 4b 6d 59 53 dd da 98 14 Data Ascii: )1\|EYPZ0Wa-xxL<O<N}fGCUURF%[W3?_n'92RJeIeGjV"5Uk:!oR.tos4PTAOe=-22`VY)R){&FaZ_KRL!EToin$0B(ZSepC64:VKKmYS
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: f9 24 ba 75 eb a6 3c 7c db b6 6d 8b f2 f2 72 ec b3 cf 3e 60 8c 21 1e 8f fb 79 21 de fa 7b ac 2e f3 e7 cf c7 8b 2f be 18 b8 07 85 94 40 b5 5f b6 6e dd 8a cb 2f bf 1c cf 3e fb 2c a6 4f 9f 8e 43 0e 39 04 b1 58 0c 45 45 45 d8 bc 79 33 92 c9 24 0e 38 e0 00 1c 78 e0 81 70 1c 07 83 06 0d c2 bf fe f5 2f ac 59 b3 26 27 a1 bf b0 b0 30 f0 ac 78 3c ee e7 9a 78 0c 2c 6d da b4 09 f4 79 eb d6 ad 00 80 8e 1d 3b a2 57 af 5e a8 a8 a8 c0 cb 2f bf ec cf d1 db 6f bf 8d 07 1f 7c 10 9f 7c f2 49 56 18 c6 e3 48 24 12 88 c5 62 fe 67 e2 7d 3d 70 b3 67 cf 1e d4 d7 d7 a3 4d 9b 36 18 34 68 10 3a 75 ea 84 5f ff fa d7 f8 f8 e3 8f f1 c3 0f 3f f8 ef 54 22 91 40 79 79 b9 9f b0 2f ce b7 89 8e d6 a4 70 51 ea 4b d8 e2 f8 29 cf 55 85 8a 98 98 91 a8 a1 49 b6 04 7c db 35 a6 3e 50 f6 69 98 9a 15 Data Ascii: $u<\|mr>`!y!{./@_n/>,OC9XEEEy3$8xp/Y&'0x<x,my;W^/o\|\|IVH$bg}=pgM64h:u_?T"@yy/pQK)UI\|5>Pi
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: ef 03 76 ee 48 d2 bb de 27 af 2d e1 bb d5 f7 8c 7a e7 55 09 2c 4f 05 fb f3 31 1f 33 00 79 04 1f a5 4c c6 94 c0 a1 1e 9c b1 46 74 e7 c6 86 74 86 85 56 56 71 fb da 09 bc ee bf dc 82 ff ef d6 3b bb 41 48 2b 08 ef dd 34 f9 e7 e8 ec 9e 56 69 d1 06 6d ad 8d 63 99 ca c2 32 d7 db 1b 78 6f 87 a6 fe b2 0e ef bd e7 b1 5d 26 7d 2d e7 72 eb ef 56 50 df ca 1e d7 02 e3 ed a0 d0 f4 c8 01 2f 93 e1 af 79 1e 3c 5c 63 71 2b 06 97 53 64 a9 7b c1 81 3e 1f ee c6 6d 05 a7 53 ab a6 53 a9 7f a5 aa e9 32 9c fb a9 49 99 ad ae b5 ff 3d 82 ce 1e 8a 6a a9 f7 62 aa d7 46 89 82 f5 3f 3a bb ef bd c7 e7 0f 7f 0b af f9 f4 17 f1 e7 b7 df 09 ec de c9 7e 89 ac e1 5c 66 1f c9 04 0a 53 e8 b4 bd 6e f5 73 15 64 3e a6 1c ab f3 2d 78 e4 00 0e 6b 63 6d 39 79 5b c6 76 bd 12 98 8b 15 3d a4 61 00 ac 50 Data Ascii: vH'-zU,O13yLFttVVq;AH+4Vimc2xo]&}-rVP/y<\cq+Sd{>mSS2I=jbF?:~\fSnsd>-xkcm9y[v=aP
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 7b 3f be c6 19 d4 1b e5 7f c1 4d d3 52 10 e3 99 e3 f3 e2 f3 1d d3 72 77 2c 48 88 7e 1f 8e 44 76 36 56 57 84 59 1b 2d b8 ec 63 26 d3 b9 f1 bf 91 be 15 03 b3 f8 df e2 73 1d 77 83 8e 4e eb 89 73 1f 15 b9 c2 7b c8 a5 9f 87 20 90 c6 0c b4 4f 4d c3 2e fa 30 90 90 04 e6 7d 01 d2 c3 02 4c a4 cd 8b 60 53 18 d2 69 c0 ce 29 5c e1 3d 8e 12 65 2b 04 53 8e 64 05 2e 70 dd 16 37 22 65 73 9d 52 46 d3 5a c7 99 c9 8b ea e9 20 b7 f8 cf 51 aa d6 65 32 d0 cc f8 90 5c de 2f 52 33 60 2b 55 2a 10 9a dc 29 0f 76 a2 41 21 ab 5e f2 ef 72 ec fd 1a 54 10 fb 39 7f bd 23 58 25 52 e1 4a 1f e6 0f 74 bf 9b fa 1a 21 32 e6 a3 b8 03 07 1f 5a 59 ce c5 f7 a4 ea 48 ac a6 b0 f7 ba 51 f2 5a cc 23 2c 7c 34 dc f8 38 57 c8 61 85 cd 8d 48 6d 8c 94 2d c8 73 08 74 2e c7 1d d5 47 1f 11 72 6c 78 79 36 6c Data Ascii: {?MRrw,H~Dv6VWY-c&swNs{ OM.0}L`Si)\=e+Sd.p7"esRFZ Qe2\/R3`+U*)vA!^rT9#X%RJt!2ZYHQZ#,\|48WaHm-st.Grlxy6l
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: fa 15 a1 06 86 d1 5d 40 2f b3 32 b0 9b 48 95 e3 e7 6d b4 24 e0 bd 7b ac 6a 9e e8 25 c7 ce 85 12 91 6a 18 a6 58 9d 42 b1 59 81 68 20 63 fa 4e 00 7b 84 a2 34 4d 0e af cb b1 99 61 a3 0e 70 31 ef 9f e3 d9 03 ee c7 fe 1e b3 5c 29 5e 29 e8 07 ba 76 86 b5 28 25 3c 63 34 94 8f f3 dc 68 a4 1f 2a ca 11 48 41 60 01 3a 80 08 55 8e 66 3c ef 4c a6 f8 1c 8c 5d 15 48 86 6b 17 33 1e d4 7f 02 69 90 78 8d a2 c7 8f 76 26 70 3b 1f 66 4d cd 00 96 2a cf 79 32 35 1c 46 d4 54 9c 14 28 b5 9e a1 fe 10 d5 68 4e c5 f3 79 de 4e 0a a8 aa 71 08 51 9d 90 38 c4 9b bf c4 07 82 fd 5a 10 1c ef a9 25 3e 69 1c 0d 18 31 49 fd c8 8c fd 5b 02 27 c5 c0 39 39 bb f6 8f 6a 45 77 db 6d 03 90 dd a6 3c 18 3d 16 8c cb 5e 7c 9b fe 14 d1 ee 7a 0c 41 6c 3c cc 33 1c ec 68 d8 09 e9 73 4e 51 ea 7a 86 bf a3 f1 Data Ascii: ]@/2Hm${j%jXBYh cN{4Map1\)^)v(%<c4hHA`:Uf<L]Hk3ixv&p;fMy25FT(hNyNqQ8Z%>i1I['99jEwm<=^\|zAl<3hsNQz
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 32 d8 5b 02 db 52 75 3f b7 e8 7c 22 b1 8b e7 c7 9c 00 1e 67 87 cc 6e 1c 15 91 8b 65 55 01 10 69 1e ec 8d c2 f3 95 ed 98 2f 1e 9f c6 34 bb 9c da ce 35 2b 7e e8 51 ef 6e 6f fc fc ec ea 44 32 66 32 1b d0 4e 18 d9 14 bb ed b6 01 c8 6e 53 13 c5 6a 38 75 4f 34 0f 99 7c bc a0 c0 56 2c d1 0e 5d 6f a4 86 ee 81 93 88 40 20 a4 f7 39 0b db 9f 36 85 57 b9 56 3b 80 82 c0 00 b4 91 90 f0 33 fb df d7 ef b8 dc be fb 3b 82 8f c5 42 f4 71 84 c4 83 2c 9f df 65 65 a1 a2 41 3c 3b 7a 82 61 5a dc 44 2e 19 0f 21 c0 e5 58 e1 11 d6 63 70 f5 94 08 c5 31 1a 74 a8 44 20 c4 bf 34 09 eb 41 68 e9 29 f2 c4 c0 b9 01 42 ae 50 ad f1 24 d0 18 a6 63 cd 44 75 47 2f 7d b7 cb 43 da 38 1c 67 1d 8f 23 3b 61 a7 65 ed b6 01 c8 6e 97 26 92 a7 26 a1 ef 62 81 b0 91 83 cb 51 01 c7 b5 b7 22 34 e8 6e c3 44 Data Ascii: 2[Ru?\|"gneUi/45+~QnoD2f2NnSj8uO4\|V,]o@ 96WV;3;Bq,eeA<;zaZD.!Xcp1tD 4Ah)BP$cDuG/}C8g#;aen&&bQ"4nD
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 63 a8 6f 3f 8e 85 5e 0e 25 7d 4d 9e 3e 25 49 fd ca 3f 1b 16 c0 08 4a cb 7e dd 1f 9b aa 58 b0 1b 33 75 d4 a8 dc a4 af ce 9c 10 af f5 83 d5 0c ed 57 52 47 e0 67 52 3b b7 a7 77 7d 47 bb 39 56 f4 13 49 da c9 91 be 15 ab 0c e9 bd 26 89 a3 48 b5 8a 81 fe a8 86 56 91 b0 90 fe 0e 21 9c c5 43 01 8f aa b1 bd 02 2e bb a6 f2 6a 0c 66 c0 63 35 47 ec ee cf 09 b8 aa be c7 7a 24 77 0e ea 9b f9 59 55 e5 79 9e ef fb 7d 7d 10 37 dc e5 2e 17 80 fc 95 e2 0e 36 a8 9c 36 98 e9 c2 47 20 6d 83 ba f4 7e 68 fc b4 02 02 54 3e f6 50 7d aa ca 1c 55 55 91 13 27 da 4f 26 18 d6 4c 3a 3b 91 f3 24 1d 81 8d 15 55 94 d4 b3 21 05 27 48 b2 19 7a a4 64 61 34 a0 01 00 a9 93 03 ca 8a 59 b9 fc 20 be ff 44 73 9a 7f 37 b9 3b f0 c6 ae 7b af 70 b4 14 0c 43 3b f4 a4 c4 84 6c 29 66 fb 15 d4 ab 52 74 e3 Data Ascii: co?^%}M>%I?J~X3uWRGgR;w}G9VI&HV!C.jfc5Gz$wYUy}}7.66G m~hT>P}UU'O&L:;$U!'Hzda4Y Ds7;{pC;l)fRt
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 20 3c 65 ef 3d 6d 4b 59 43 15 36 27 18 79 17 b5 56 04 13 8b 9f 9b 7f 16 57 c7 cc 00 1a 4d 88 10 6a 1e 79 5f 95 47 b7 a9 c2 56 bd 7f b4 6a 16 df 75 b8 4c 6d e4 4e 74 4a e2 22 85 b6 83 0e 34 a3 07 e5 46 e7 cd 21 a1 02 f2 ce 2f bd b2 91 a4 76 bb b3 b9 80 93 79 af 86 c0 3a ad bb 9f f7 75 65 36 a3 37 ec 09 79 8f f7 87 f1 fe 4c 36 ef af fc bf 6e 75 e3 2e 17 80 dc e5 97 0b 1f 0c 68 ec a4 f5 d8 60 b4 03 31 2a 22 7f a3 d3 b0 af c9 97 fb b9 41 99 f9 01 15 ac 4e b3 fa 69 cf 57 46 07 7c 36 7e 3a 1f 91 4e ab fa aa 8c 74 20 80 26 86 ae bf 43 55 7e 88 0d 20 d3 ab 33 68 70 6d fa 35 e8 f7 9f fb bf 6c 6e 6c 60 90 88 3d 90 0f 93 c8 8d 59 3e c9 5e 29 22 5c 55 29 cb 78 2e bc 25 20 08 49 34 b1 98 dd 67 81 d0 62 1f 55 b0 48 03 c5 42 09 a9 32 57 74 f1 4a e3 01 85 48 36 e8 63 b4 Data Ascii: <e=mKYC6'yVWMjy_GVjuLmNtJ"4F!/vy:ue67yL6nu.h`1*"ANiWF\|6~:Nt &CU~ 3hpm5lnl`=Y>^)"\U)x.% I4gbUHB2WtJH6c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49904	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1493	OUT	GET /mobile/img/home/kongsi-sosial.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:54 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/png Content-Length: 161973 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-278b5" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:54 UTC	1086	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 02 5b 08 06 00 00 00 1c e2 f0 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec 9d 77 9c 1c d5 95 fd cf 7d d5 93 94 73 40 48 42 64 81 90 04 42 56 20 99 64 8c 0d 5e 0c 0e f8 e7 b4 8e 60 6c b0 b1 59 a7 75 c0 71 6d af b3 d7 38 ac 03 ce 69 1d 16 7b 1d c9 20 82 08 22 0a 21 21 21 09 e5 9c 66 34 33 dd f5 ee ef 8f aa f7 ea bd ea ee 41 60 b0 91 74 be fa 8c 7a a6 bb fa 55 e8 ea ea 77 fa de 73 2f 40 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 Data Ascii: PNGIHDR [pHYs IDATxw}s@HBdBV d^`lYuqm8i{ "!!!f43A`tzUws/@!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B
2024-11-24 12:19:55 UTC	12708	IN	Data Raw: 6b af db cd 57 92 10 42 08 05 08 21 84 3c c7 f9 e6 d4 37 1c 07 e8 0f 00 99 22 10 88 94 63 1d c5 df d9 e3 06 02 81 42 e1 84 4a a5 a2 8f bd f2 f2 07 c6 55 2a d2 e1 2f ff 2e 52 01 e7 e9 08 3c 1f 51 0f 10 a9 37 a7 6b f0 31 e2 3d 24 49 51 ae 37 8c 8c 64 2b b9 0e c0 4b e4 75 7f eb e2 2b 4a 08 21 fb 37 86 87 80 10 42 9e bb 7c 6b ea 1b df 21 c0 ed 06 66 8a 11 03 23 99 dc 48 60 60 90 64 d6 72 31 48 c4 20 91 c4 47 3c 4c fe 23 22 30 22 5d 67 bf ee 31 a9 24 49 47 66 30 0f 05 06 80 b4 25 13 0f 2a 40 9a e4 bf 9b 5c 44 e4 cb da 24 fb db fd a8 29 96 b1 26 7f 0e f2 e5 92 42 d0 14 d1 93 d3 a1 e6 0f 7a f5 0b fb f1 55 25 84 10 0a 10 42 08 21 cf 41 be 3d ed 4d 57 09 f0 35 11 d3 6a 02 8f 47 82 4c 44 18 11 24 92 e4 62 23 bf 0f 49 26 52 24 13 26 06 06 d3 4f d8 70 ef b0 11 d5 43 Data Ascii: kWB!<7"cBJU/.R<Q7k1=$IQ7d+Ku+J!7B\|k!f#H``dr1H G<L#"0"]g1$IGf0%@\D$)&BzU%B!A=MW5jGLD$b#I&R$&OpC
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: f2 9c 76 97 7e 05 00 89 54 f2 32 bc 45 81 de 6c 62 6a 51 d3 14 36 ff 97 fa 6f c5 6d 51 d6 b5 48 62 ca 44 49 36 a1 1d be 6b b7 dd ac 35 b3 c3 57 9e 0a 3b a3 03 71 89 5d 2d 57 c8 2a fa 7d a8 9a fc 47 90 6a e6 03 ae e5 11 82 aa fb 66 ff e1 ed b0 ff f5 58 73 f1 35 ba 1d 95 cf 4d 85 1d d1 8a aa 55 f4 d8 34 4f 43 d2 28 25 cb 19 b6 dd f8 a9 2a ec e6 5e 6c 7f fb 5d e8 9d b7 e9 19 7b 2d ba ef de 8c 0d 57 dc 83 b4 b3 9a 47 94 5c 23 40 1b 89 22 d7 fd dc 45 6a fa 9f 3f 1e 1d b3 47 36 1e d4 2a d6 7e e2 7e 54 b7 f5 fa 0a 5a 2e 8d ca 45 37 dc 97 fc 35 2f b6 d4 2f e7 2a 6f b9 e3 51 f3 fd 46 ec fb 8f bd fd 25 f3 f7 f6 f3 5f 55 bf 03 d5 d1 85 91 3c f7 6c a0 dc e3 03 a5 0e e7 c5 fd 4d c7 b6 25 61 92 8b 8b b0 22 96 f8 e6 9d a5 c6 85 91 e0 08 85 47 bc ac 88 14 25 7d 91 a5 67 Data Ascii: v~T2ElbjQ6omQHbDI6k5W;q]-W}GjfXs5MU4OC(%^l]{-WG\#@"Ej?G6~~TZ.E75//oQF%_U<lM%a"G%}g
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 6c c4 03 97 dc 0a 6b e3 be 12 b5 a0 28 40 78 8b 72 8a 5b 54 01 cb 0f 7b 83 55 3d e3 9c fb 5e 69 f7 e6 73 79 ca 9b ef 1c 2e c6 3c 28 c6 8c 0d a3 1b 4e 78 34 2a b1 5b 88 8e c0 db 51 ae 7c 95 b9 cf 37 ae 5d b6 62 5d 77 57 d7 31 ff a8 fd a9 b4 54 9e 18 31 7a e4 8a 96 96 64 8e aa 26 45 fa 55 1a 99 d3 11 78 3d b2 48 09 82 94 ab 34 37 a2 07 46 f5 fc 39 0d ca fc 5e 0f d5 8f 2c f9 f5 8b e6 f1 ca 48 08 05 08 21 84 3c ab 6c 39 f5 4f a7 a8 ea ff 01 e8 1f 26 56 69 28 40 00 df 39 dd dd 17 94 6d 0d 0c d0 61 2a 92 8d 3c 1b a9 37 b8 ab 8f b4 24 92 dc 3e a0 65 c8 4c 48 d6 55 43 02 81 e1 c5 0c 62 61 53 74 94 2e 26 f4 aa 40 12 88 16 b7 4c 28 4e 5a c7 f6 c3 81 ff 35 0b 2d a3 fb 10 21 4f 74 62 d9 a5 b7 c3 6e ec 09 52 ba 8a 48 88 09 04 87 6b 20 58 5f 5a b8 be 9a 17 10 fa 45 c4 Data Ascii: lk(@xr[T{U=^isy.<(Nx4[Q\|7]b]wW1T1zd&EUx=H47F9^,H!<l9O&Vi(@9ma<7$>eLHUCbaSt.&@L(NZ5-!OtbnRHk X_ZE
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 8b 6a 5a b5 9e 9e 63 76 eb c6 25 35 9b 76 5b 05 52 5b 3c 5a b3 d6 57 86 b2 0a 9f 72 e4 4c e8 61 da 53 4d 5d fa 56 6c 26 f7 13 79 55 d4 76 f6 e2 ee 4b 6e c1 96 bb 37 36 3d 16 92 08 8e b8 7c 1a a6 7f 6e 0e 2a fd 2b de 88 ee 44 95 eb 55 e2 5a 0d ba 7d 4e f3 74 b0 83 2e 38 04 c7 7e ec 79 4d c5 47 6d 77 0d b7 be fb 66 f4 ec ae 16 e6 76 14 3d 4d 34 d8 b7 34 f7 bc 14 9e 8f e2 7e b7 3d ee f1 61 93 87 bf 77 c6 7b 66 ac da db cf c5 df de b4 66 f0 dd 8f 6e fb bc aa 8a f3 7b 64 f3 62 f5 7e 85 f8 77 eb 45 58 33 7c 34 cc f6 de b5 7d 47 d7 94 7d ed fd db d5 93 1e b1 7e 7b ef d1 bb ab 76 51 25 91 85 59 59 e2 7a d3 79 66 60 77 21 33 57 78 5a 62 1f 88 e4 ff 89 b4 7f fb 57 8f bc 8d 57 47 42 9e 3a 2e 02 e2 be 0a 08 6f f7 94 46 e5 23 9a 8d 25 0d 1e 47 1f eb 0b 3f 9e b4 c9 7a Data Ascii: jZcv%5v[R[<ZWrLaSM]Vl&yUvKn76=\|n*+DUZ}Nt.8~yMGmwfv=M44~=aw{ffn{db~wEX3\|4}G}~{vQ%YYzyf`w!3WxZbWWGB:.oF#%G?z
2024-11-24 12:19:55 UTC	14120	IN	Data Raw: c7 d1 1c 75 44 80 12 2d ea 38 d4 3e 79 fd 3a bc 18 44 d0 ec f7 d7 90 1a d9 30 bd fb eb e9 d8 45 84 94 d6 c0 4e 54 06 6e 64 c6 f1 3e 51 8f c9 1d 23 e1 17 3f 9e f9 cc f1 27 0d 38 b2 57 6d 5b 9f 43 ff fa 62 53 f6 cd 8f 2e fc 0f 11 ba bb ed 75 55 a4 c3 d3 62 57 45 41 3c 1e 20 75 05 88 8a 9a 58 8b 0b e8 9a 98 b7 a3 b4 f6 50 fe a4 36 81 10 41 6c 21 6a 2b f3 4d c3 ec a9 22 22 b9 59 fe 17 16 bd 7d da 9d 3c 40 0c b3 67 b8 06 84 61 18 a6 89 e9 72 54 bf f2 78 69 cd ac b2 15 85 c7 4b 29 b3 08 aa b6 c1 2d 2e 77 6f c6 65 ca 63 15 01 f1 be b6 ab 43 ba 55 33 62 2a 77 70 bb e8 58 12 c1 34 cd 8e 10 d5 9b a4 c8 f4 13 44 90 28 b5 33 94 aa 2f 49 da db 4e 7a 22 1e aa 4b 96 24 b7 03 95 69 77 a0 32 3c 4e e3 54 a7 1b 95 da 37 13 70 0a db 89 94 60 b1 9e 77 ea 5a 3c 4a 42 75 e7 aa Data Ascii: uD-8>y:D0ENTnd>Q#?'8Wm[CbS.uUbWEA< uXP6Al!j+M""Y}<@garTxiK)-.woecCU3b*wpX4D(3/INz"K$iw2<NT7p`wZ<JBu
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: f0 e9 22 ed c6 6a c1 c6 38 ce 7c b6 a8 49 b7 99 17 d1 fe b0 e0 d6 ee 8f f0 4c 6c 59 fe be e2 e1 4e 33 37 7d 78 6e 55 b2 e2 7c 53 ca de 2a da 01 28 a1 a1 3a c3 29 81 01 5b 60 78 a3 22 04 21 04 48 12 a4 a4 54 b1 62 77 92 13 10 d5 42 88 cd fe 80 6f 43 38 e2 2f c8 c9 e8 b0 68 52 ef 63 e7 5c 3d fc b6 22 3e 0b 0c c3 30 2c 40 18 66 bf e5 f0 17 b6 ff 4f 02 bd 53 44 87 96 ea 82 ee 44 45 52 dc d1 2d d1 a2 09 94 6f 59 12 cb 46 13 b5 e3 be f7 a4 5c 9c 73 48 46 da 8d d3 9d 1f 95 e3 e5 b9 d5 4d ba 4d bf 8e 79 ab ef ec f9 73 9e 85 2d c3 d5 ff 3d f7 b0 2d 35 1b 2f 8a 19 b1 9f 13 51 c0 12 19 aa ae 03 9e 48 c6 1e 22 1c 12 29 d1 0e 10 a5 44 44 6c 21 12 0b 04 f4 25 5a c4 08 21 64 0c 15 02 81 ba fb a1 0b df fc ce a1 fc e7 ee 1a fd d7 f7 0e e8 70 60 92 cf 0c c3 30 0c 0b 10 86 Data Ascii: "j8\|ILlYN37}xnU\|S*(:)[`x"!HTbwBoC8/hRc\=">0,@fOSDDER-oYF\sHFMMys-=-5/QH")DDl!%Z!dp`0
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 90 60 90 12 b5 b5 cd b7 8f 19 41 81 eb 8e ce c6 45 87 65 41 6f 44 b6 d7 d2 ad 09 dc f4 6e 29 7e 2c 32 d2 62 cc 83 3a be 6b cf 73 ea 6d f1 d8 df a4 30 8e 13 24 dc f9 42 d6 bc b2 44 04 d9 75 1c 04 cd a7 81 88 54 56 96 25 3c 84 7a 2c d4 6b d1 58 6d 72 f1 f6 c2 c2 1e b1 78 fc c0 f6 38 66 31 19 9d c0 57 a3 c6 63 9a 66 bd 97 4b 26 93 f5 12 3c bb 13 2a 42 08 f8 7c 7c 0b c4 30 ad 05 fb 80 30 4c 3b e1 ef e7 f5 58 06 49 85 4e 0d 88 24 48 d3 4d 81 21 49 20 43 3a 8f d5 32 90 80 34 24 c8 94 20 c8 fe cd b1 6f 1d c2 1a a6 8f cb c4 cc 6b bb e2 d2 09 0d 13 1f 86 49 78 7f 69 2d ce f8 c7 4e 9c fa f4 ce b4 11 1f 00 d0 29 53 7f 6f 8f e2 64 37 f5 17 9a a6 41 d7 75 84 42 21 ca c8 c8 20 ef 32 7b ba 21 0a 04 ac 14 b5 ac ac 2c d2 34 0d 59 59 59 ce 3a a1 50 88 32 33 33 49 ad ef 7d Data Ascii: `AEeAoDn)~,2b:ksm0$BDuTV%<z,kXmrx8f1WcfK&<*B\|\|00L;XIN$HM!I C:24$ okIxi-N)Sod7AuB! 2{!,4YYY:P233I}
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: bc 1b 42 04 61 3e 13 72 3d 40 50 be aa 15 22 54 a1 a0 01 29 cc 5b 71 c6 2d 9d db f1 ae 2d ef 5b 3a 93 27 e9 f8 c3 f3 3f 84 5b ee bb 09 aa b9 60 9c f6 83 d1 ff be e2 65 bd af fd 41 dc bb 16 16 be 7f 7a e1 53 cf f3 50 2e 97 4f 1b df 53 a9 14 d7 93 15 21 04 3a 3a 3a c6 1f a2 76 56 e4 c2 51 4c 44 62 c4 04 24 46 8c a5 0d 9e 62 00 5f ca 83 f7 84 f6 fd fd db d6 1d fb f6 c3 8f 3c a5 98 ce 8f 8a 0d b2 e2 c0 e3 c1 14 06 f5 03 90 00 44 58 84 30 f4 8e 44 c9 e8 ca 97 5b 21 d8 01 d1 59 c4 42 78 2c 63 e2 0b 2f dc 80 7f fc c3 e7 e3 54 dc dd 27 4d 0a 6c dc e3 b2 bd 25 e2 1a 4a a2 26 62 50 4b 3a 0f c9 89 52 0c 21 82 50 2d a1 11 88 c4 bc 94 bb 4f 68 49 bc 7f fb c7 a0 d1 d2 32 04 cf eb ba 10 d7 ad bc 11 df 3d f6 8d a6 fb e4 fc d1 ab 01 c4 04 64 09 a3 52 a9 9c 46 4a aa d5 71 Data Ascii: Ba>r=@P"T)[q--[:'?[`eAzSP.OS!:::vVQLDb$Fb_<DX0D[!YBx,c/T'Ml%J&bPK:R!P-OhI2=dRFJq
2024-11-24 12:19:55 UTC	13560	IN	Data Raw: 9f af 8f 8c fd 54 f5 76 bf a0 1d f3 a5 21 f8 9b ab 3b bc db 3e 74 e5 e0 c3 f1 9b b0 b4 90 e0 e4 dd 05 65 bf 93 c6 c3 f0 82 b0 3c 19 ae 18 87 84 84 89 c7 89 48 98 a0 9e b2 52 a3 b6 37 bb 77 2b dd 42 ee c6 d6 ce ed b8 bc ff 1a dc 37 f4 93 86 9f ff e5 63 7f 80 bf b8 e8 1f d0 6d f6 b6 7c dd 7b 4f fd 10 ef 7b f8 b7 4f db 9e 35 3a b1 a1 63 0b 3e b0 e3 e3 e8 b5 fa 1b 1e 3b ea 4e 1f 25 e8 c2 bd ea b9 d6 87 e6 52 f9 bb 7e 65 7f 32 a6 f3 4a 50 98 a8 d4 aa 27 b9 59 c8 ab 10 82 94 52 dc e0 3b 11 11 91 e3 38 5c df a6 a5 a6 c2 57 ad 56 6b 73 5c 57 57 d7 bc 3f eb 54 2a 85 18 31 5a 7a e7 98 39 1b df 86 18 8b 85 4a a5 42 73 99 a0 e6 02 db b6 c9 75 dd 79 0d ed 9a 2d 98 19 ae eb 52 23 a2 b6 10 72 be c3 45 25 3e f2 5f ce b9 47 47 f9 12 db c3 25 9e c4 4e 05 da 42 04 0d a1 e4 Data Ascii: Tv!;>te<HR7w+B7cm\|{O{O5:c>;N%R~e2JP'YR;8\WVks\WW?T*1Zz9JBsuy-R#rE%>_GG%NB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49905	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1249	OUT	GET /mobile/img/facebook.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:55 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/svg+xml Content-Length: 1140 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-474" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450794\|1732450761;Path=/
2024-11-24 12:19:55 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:55 UTC	77	IN	Data Raw: 31 2e 38 36 38 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 77 68 69 74 65 3b 66 69 6c 6c 2d 72 75 6c 65 3a 6e 6f 6e 7a 65 72 6f 3b 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 1.868Z" style="fill:white;fill-rule:nonzero;"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49895	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	699	OUT	GET /sumbangan.com/public/organization/56/logo/WhatsAppImage2021-08-27at2.13.51PM.jpeg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:54 UTC	699	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:54 GMT Content-Type: image/jpeg Content-Length: 16546 Connection: close x-oss-request-id: 674319EACE5C5D363492E9E7 Vary: Origin Accept-Ranges: bytes ETag: "BE1942B1DB05D27DCD911E3DDC716FA1" Last-Modified: Fri, 12 Nov 2021 06:52:02 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 18424060302143948818 x-oss-storage-class: Standard x-oss-meta-mtime: 1630044842 x-oss-expiration: expiry-date="Sat, 13 Nov 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQLhiBgIDx39XL6BciIGI1NGY4OGFlY2M2NTQ3ZjU5NTYzYTZhMzdmMDYwM2Y2 Content-MD5: vhlCsdsF0n3NkR493HFvoQ== x-oss-server-time: 1
2024-11-24 12:19:54 UTC	15685	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 Data Ascii: JFIF(ICC_PROFILEmntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(w
2024-11-24 12:19:54 UTC	861	IN	Data Raw: c3 2a 76 88 6b be 43 6d d0 bc d2 18 e9 73 e8 db 06 4f 0d 2c 66 48 ed ee 76 cd 2f dc 74 69 db 7e aa f6 66 3d 6e d4 91 8b 70 61 a1 d7 2f 6b c6 28 22 8a e1 99 df 20 1e e5 43 9c 04 8f 67 38 ee e2 49 05 78 11 58 71 fc 8a dd 3f 0f dc 33 58 46 6b 90 5d cf 26 53 9b 5c 61 32 c2 cd fe ff 00 23 bc 88 07 a7 55 3b f8 56 e1 ab 11 e1 c7 03 87 18 b4 44 da 9b a4 8d 0e b9 5c 1e df 7e 79 4f 7d 8f 7d 87 a2 0c a3 85 e3 16 bc 32 c1 6f c5 ac d0 32 1a 3b 65 33 29 e1 63 06 de eb 46 db ab 85 53 64 2c 63 b9 c7 75 51 01 11 10 11 11 01 11 10 11 11 01 70 46 e3 62 b9 44 1d 79 1b d3 e0 bb 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 e8 e6 07 ed bf 65 dd 10 7c ae a1 a6 7d 4b 6a 0b 37 7b 3b 15 f4 35 a0 2e 76 03 aa e5 6b 15 8a cf 31 00 88 8b 61 d2 48 c4 83 6d Data Ascii: *vkCmsO,fHv/ti~f=npa/k(" Cg8IxXq?3XFk]&S\a2#U;VD\~yO}}2o2;e3)cFSd,cuQpFbDy" """ """ """ """ ""e\|}Kj7{;5.vk1aHm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49909	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1498	OUT	GET /mobile/img/home/tiada-pecah-amanah.png HTTP/1.1 Host: sumbangan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450787\|1732450761
2024-11-24 12:19:55 UTC	395	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:55 GMT Content-Type: image/png Content-Length: 136790 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT ETag: "658db01a-21656" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450795\|1732450761;Path=/
2024-11-24 12:19:55 UTC	2498	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 20 00 00 03 01 08 06 00 00 00 17 80 d0 fb 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec 9d 79 9c 1c 65 9d b8 9f b7 aa fa 9a 33 21 37 81 24 40 86 fb 92 43 14 14 0d 02 0a 22 e0 09 8a 41 61 5d 65 77 c5 f5 e7 ea ee ba 46 59 a4 5d 5d 15 5c c4 15 10 0f a4 41 30 a0 22 42 54 90 1b 15 15 59 44 39 9b 23 9c e1 c8 9d 39 fa a8 aa f7 f7 c7 5b 6f 57 75 4f cf 91 64 26 99 99 fe 3e 9f cf 30 a1 a7 ba bb fa ed ea ee 7a fa 7b 29 04 41 10 84 96 a0 67 e9 b2 36 60 e7 e8 67 41 e2 f7 8e 40 16 48 03 99 e8 77 e3 bf d3 40 09 58 07 ac 1f e6 f7 b3 c0 63 c0 b3 c5 42 3e 94 55 17 04 41 10 1a 51 b2 04 82 20 08 53 4e 34 e6 03 87 46 3f fb 26 64 63 c6 36 dc 8d 01 e0 71 e0 d1 c4 cf 63 c0 Data Ascii: PNGIHDR pHYs IDATxye3!7$@C"Aa]ewFY]]\A0"BTYD9#9[oWuOd&>0z{)Ag6`gA@Hw@XcB>UAQ SN4F?&dc6qc
2024-11-24 12:19:55 UTC	11296	IN	Data Raw: 1a 3a aa f1 59 b7 ef 47 b7 e3 40 a9 d3 dc 7e ae aa c9 98 54 ac cc c6 81 83 99 c0 35 6c 3b 74 b5 33 67 7a d7 98 dc d6 dc 1d 9a df ce ab 1b 7a b9 f5 fe 47 f8 cd 9f 1f e1 de 87 9f a6 62 53 d9 b6 80 94 eb 8e b8 bf 9f 5f 7a 02 1f f9 fa 15 e8 31 92 9e d1 72 da d1 af e5 e0 dd 17 0e bb 4d 7b 36 33 99 5f 5d fb f5 2c 5d 36 a3 58 c8 af 91 37 1a 41 10 44 40 04 41 68 6d 2e ba 48 d1 de ae 48 b7 3b 04 65 07 d7 71 e8 ec 74 08 3d 08 d1 04 0e a4 83 58 03 c2 30 96 06 3f 6d 2e 53 3a 96 8f 64 ca 95 95 8f 20 05 ae 86 b6 48 3e 7c 5f d7 6a 42 42 cf 44 3e 14 90 f5 6b f2 41 10 a0 42 7d 58 ab 3f 3d b3 ba 3b 38 75 c9 a1 9c ba e4 50 56 ad dd c0 79 57 dc c4 6f ee 7f 64 dc ee ef 8d fb 2d e6 e8 83 f6 e2 96 3f 3f bc cd 1e e3 cc ee 0e fe f9 5d 6f 19 71 3b a5 26 7d 3f 95 d7 03 37 ca 9b 8e Data Ascii: :YG@~T5l;t3gzzGbS_z1rM{63_],]6X7AD@Ahm.HH;eqt=X0?m.S:d H>\|_jBBD>kAB}X?=;8uPVyWod-??]oq;&}?7
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 90 98 e1 82 71 0d 87 d6 a6 f3 55 90 32 9d af 6c f7 2b db c1 ca 4f 43 b5 cd 5c de 56 35 b7 55 a9 c4 d1 8f 4a 9b 69 bf eb 6a e8 2e 9b 7d b1 d1 0e d7 35 c3 05 7d df d4 7f f8 3e ac 5e 0d 2f bf 0c f3 e7 c3 df ff bd 9e 84 02 42 cf d2 65 3b 61 5a f3 ce 96 97 80 b0 95 bc bf 58 c8 5f 23 cb 20 08 82 b0 79 c8 24 f4 a9 21 1e 3b 50 b8 ee 33 c0 93 c0 cf 44 3e 46 cd 0c e0 ff 81 fa 0b a8 1f e2 e8 c3 87 ac 40 f7 a2 ba 91 64 1c a3 b1 80 3c 99 7a 95 cc c2 4a 46 3f f4 10 2d 7f b5 1b 77 e6 b2 12 d1 58 40 ae 80 74 10 cf 11 a9 75 d2 1a a2 ae 5a bb 71 eb dd 74 22 dd cb ca 47 b9 1d ca 1d 71 d1 7b a6 a1 73 a8 8d 70 f8 7e 7c 9d 57 5e 69 f8 0a 63 f2 7d 87 51 2c e4 9f 07 de 07 04 f2 12 10 b6 82 4f 89 7c 08 82 20 88 80 b4 a2 78 ec 4f e1 ba cb 80 e7 81 af 22 a9 56 5b 8a 8b 52 27 a2 b8 Data Ascii: qU2l+OC\V5UJij.}5}>^/Be;aZX_# y$!;P3D>F@d<zJF?-wX@tuZqt"Gq{sp~\|W^ic}Q,O\| xO"V[R'
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: bf 11 a7 ba 92 6a d6 d4 80 38 1a 72 be f9 66 b1 5a 35 e1 7c ad a0 d2 61 2e cb f9 a6 9d 6e a9 64 fe 3f 48 41 a5 dd dc 5c 77 59 e3 68 73 9d 81 01 93 9a 55 ea d4 68 c7 d4 8d cc ee 33 b7 d9 df 6f 26 9e ef be bb b9 5e b9 0c 1b 37 9a db 7b fc 71 93 de f5 f6 b7 6b 5e f3 1a 11 90 ad a4 67 e9 b2 2c 26 2a fa 29 60 2f 59 91 b1 7b f1 00 3f 06 ce 8d 1a 02 08 a3 93 0e 07 38 3c 37 63 f6 47 66 ef 7d d0 7b 67 ee be 6f 9b e3 6e f5 f7 91 2f 01 5f 01 be d3 b2 22 62 53 62 bf f8 45 85 e7 c1 82 05 26 82 31 6d 9a 22 15 cd 61 ea ef 87 e7 9f 87 f6 76 55 93 8c 55 51 1b f4 4c 2f 64 fa cc 1b 6d 7b f4 7e 5e 76 a1 3f 65 2e 6b eb 85 8e 5c c8 3b df 19 c8 51 2c 88 80 08 56 3e 3e 0a 5c 2a 0b 21 6c e1 27 d7 23 10 2e 21 f0 36 8c b9 80 94 3a 35 95 b6 e8 cc a3 1f bc 10 4a 25 18 18 30 d7 6d 14 Data Ascii: j8rfZ5\|a.nd?HA\wYhsUh3o&^7{qk^g,&)`/Y{?8<7cGf}{gon/_"bSbE&1m"avUUQL/dm{~^v?e.k\;Q,V>>\!l'#.!6:5J%0m
2024-11-24 12:19:55 UTC	560	IN	Data Raw: 80 cf 83 35 23 77 97 7b fb 3e 94 b8 7d d9 b0 71 72 c0 43 c1 c7 d3 4f 03 d7 5e 4b e8 e9 01 ce 3e 1b 58 b1 82 17 fe dd dd 84 e5 cb 09 71 cc 65 9c 87 0f 03 95 0a 3f d7 d5 45 a8 ba c0 98 af 33 0e 6e 1d 28 0d 65 bb 9b 07 02 18 cd 11 c6 7d ce 88 28 bd 07 0b d2 29 35 e0 a8 26 9a 0d 11 02 5e 85 32 7a 0f b5 f1 52 4b 04 e7 6e 43 03 8c ca 9c 44 c2 b4 b0 d5 6e 57 a1 01 25 ca 6a 57 e9 f0 9a 1d af 4c f8 50 59 0e d9 46 50 9e c2 07 b1 e0 3c 68 82 07 fe 5c fd 62 95 fd 30 7b 8d a4 f0 21 35 7c 00 d9 66 83 cd f0 60 36 1b 8c cd e3 8d d2 ab f4 18 6a b5 fb 55 15 5c e6 bc 92 c2 47 f2 33 49 59 40 48 9e bd 41 2c 80 2c de b8 6e b3 00 c9 2e 48 59 48 1e 79 c0 5e 0e 36 16 f0 6c 3e 88 18 4f 00 d0 62 72 53 6c 0e 00 6e 43 4f 3c 0a 52 cc b2 03 8a 78 f2 05 80 9a ab 85 91 b9 5c 16 42 fc a4 Data Ascii: 5#w{>}qrCO^K>Xqe?E3n(e}()5&^2zRKnCDnW%jWLPYFP<h\b0{!5\|f`6jU\G3IY@HA,,n.HYHy^6l>ObrSlnCO<Rx\B
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: 44 09 cd 8b 45 0d 21 1b 12 b3 a8 7a 9d bb 1a 3f f4 50 eb a2 64 7e c7 6f 02 e8 5a c2 d7 d9 72 70 a3 c5 c7 ca bd 7d 4f 95 7b fb fe 53 b9 b7 6f a5 bd fd 6c 1c 37 7c 1c 3e 0c dc 71 07 61 fb 76 76 b8 ea e9 e1 f1 a2 ab 8b c7 0b d7 65 f0 d8 b7 0f 18 19 e1 ff 77 74 10 0a 05 c2 68 1e 98 50 3a b3 06 90 1f e3 31 89 24 97 5d b9 2e bb 4d 29 c1 b9 3f 01 b8 35 0d 1f ae cb 0b e4 8a ab 37 63 9c 00 70 12 b7 2b cf 33 e0 43 e8 ac 72 3b f8 68 38 40 43 68 dd 88 ca 26 04 6e 16 3e 4c b7 2b 40 35 12 6c 97 f9 30 ba 8a 4f 07 1f b1 21 e6 56 8f 67 ca aa 9a 00 02 1a 20 4c 78 68 86 8f 76 8e 57 0a 5e cc f7 57 9d d0 61 00 84 10 06 7c c4 59 d7 2b 89 6c 16 47 09 de 65 e6 77 27 48 f8 70 e3 9c bd 59 2c 80 2c ce 70 e2 95 c8 b8 80 d1 3e 00 2f db 4b c2 c6 02 8d 2d 70 42 2d aa 8c 8c 32 2c e5 68 Data Ascii: DE!z?Pd~oZrp}O{Sol7\|>qavvewthP:1$].M)?57cp+3Cr;h8@Ch&n>L+@5l0O!Vg LxhvW^Wa\|Y+lGew'HpY,,p>/K-pB-2,h
2024-11-24 12:19:55 UTC	1412	IN	Data Raw: 03 38 70 20 2b 4c 57 cf 75 75 b1 38 7d 59 e2 c2 f5 b5 af b1 38 7d cf 1e bd e8 39 45 31 b8 6d eb 1e 00 b7 db cb ef a4 05 01 78 2f 80 a7 ca bd 7d b7 94 7b fb 2e b0 a7 64 01 c1 07 00 fc ec 67 c0 c3 0f 03 57 5e c9 0b f0 65 cb 80 f5 eb 75 df a0 7c 9e fb 7b 38 0e e1 c0 01 ee 0f a4 dc ab 8a 45 2e a1 1a 2a 00 03 a6 c5 f7 18 c1 ab e9 6c 6d a1 c0 8b d7 40 70 d9 15 22 20 3f ca 63 92 1a a7 14 7c f0 6b 12 cd 47 9c 8e 6d 4f bf e3 1d eb 00 ac 78 45 0b 26 a2 d7 b0 03 96 03 c8 04 2a dc 26 bd 47 1c 03 8d 86 5e 48 b7 2b bb 52 b6 c4 cd f0 41 d0 59 8e 76 6e 57 19 f8 90 46 af 0f 53 4b 92 c0 c3 64 82 73 b3 57 08 4d e2 98 95 42 c2 34 f0 a1 32 17 b2 09 3e 52 80 30 7e 86 b6 f0 62 7c 58 d4 06 3e 28 a6 f4 78 49 2e 42 94 70 f5 d5 d6 a5 d4 02 c8 02 09 d7 75 01 5a c1 a3 c5 b4 23 aa f9 Data Ascii: 8p +LWuu8}Y8}9E1mx/}{.dgW^eu\|{8E.lm@p" ?c\|kGmOxE&&G^H+RAYvnWFSKdsWMB42>R0~b\|X>(xI.BpuZ#
2024-11-24 12:19:55 UTC	2824	IN	Data Raw: f0 c2 0b c0 e8 28 6b bc 96 2f d7 4d 05 47 0a c0 c1 0e 0d 14 5d 87 09 f9 31 36 ae 28 16 b9 64 8b 92 0d 94 63 79 d2 16 e3 31 97 67 a9 cc 87 1a d3 c6 3d bd 48 f5 aa 94 ea cf cc f1 0c 00 26 3c 3a 50 a9 3d f7 8a e9 43 ca 9d 37 ec da d7 c8 c0 87 94 dc e3 43 4a fe 5c d7 31 bb a0 6b f8 88 e3 56 cd 87 d2 7b 48 09 34 02 ca 08 ce 55 87 f3 c8 14 a7 07 c9 58 2f 74 06 66 5a b7 2b b4 77 bb ca 94 5d b5 79 0f 35 66 9b f0 d0 ec 56 d5 4e b7 61 96 5d 45 d4 1e 60 f4 fb 4f 26 3a 6f ea 25 22 c8 00 62 07 10 45 5c 7d 83 d5 82 58 00 99 a7 f1 8d 1b 8a 90 8e d1 74 90 66 b6 58 91 2d 06 37 d7 42 62 60 29 5c 0c 4f 0e 0d 2f fa df f1 89 85 fe 3b 12 be 00 a2 31 98 1a be ba b1 fb e7 34 18 42 58 eb c1 ff b2 e5 63 13 84 34 f4 e8 3e 61 08 d3 53 ad c7 b8 16 92 37 0c 4d 08 d0 e4 8e 65 08 d3 a5 Data Ascii: (k/MG]16(dcy1g=H&<:P=C7CJ\1kV{H4UX/tfZ+w]y5fVNa]E`O&:o%"bE\}XtfX-7Bb`)\O/;14BXc4>aS7Me
2024-11-24 12:19:56 UTC	4236	IN	Data Raw: 2e 1e 79 e7 2f 9f 7d 76 67 e9 75 45 d7 ed 75 88 4e 6f c4 f1 33 a3 41 b0 ed c1 23 c7 b6 7d e0 81 9f 1c 4d b5 1e 6a e1 2b da f4 f8 30 e1 c3 04 0f 41 da 19 4b c1 07 99 8f a5 99 8d 26 cd 87 b1 90 57 ba 88 f8 95 c2 47 1b 80 31 17 ff d3 95 4d b5 b8 55 bd 12 f8 98 4c 37 32 43 f8 90 00 e2 f4 f8 18 c0 30 8e 60 1c ff f5 03 f6 7e b7 00 72 2a 96 69 b7 10 22 9c 0e a0 1b 52 ca 13 02 10 13 42 4c 00 69 3e 9e f0 09 10 fd f7 a5 70 81 ac 2b 16 f0 e6 55 65 5c d2 b3 1c 97 ac 58 86 d5 85 f9 ad f9 7a 79 bc 82 47 8f 0e e1 b1 a3 c7 b0 f5 d0 20 46 82 60 21 9f fe 7d 00 bd 01 80 f6 0e 9e 09 84 c4 52 22 4a 26 00 2f 32 20 c4 33 74 22 f1 34 10 e2 2b 58 91 70 e3 2c 84 48 02 22 5f 22 76 00 e9 30 80 28 9d 49 1c 6b 8d 89 7a 6d 50 d4 d9 90 7c c8 d9 15 b4 81 90 5a a7 84 14 40 90 e7 d7 f9 31 Data Ascii: .y/}vguEuNo3A#}Mj+0AK&WG1MUL72C0`~r*i"RBLi>p+Ue\XzyG F`!}R"J&/2 3t"4+Xp,H"_"v0(IkzmP\|Z@1
2024-11-24 12:19:56 UTC	12148	IN	Data Raw: b4 da fb 77 50 55 1f 7c dc 67 be f0 7f 6e de b9 a7 0a 7e 22 c2 2b 24 05 21 99 09 2d 59 80 ad 5a c8 b9 cf 06 83 80 6d 83 ea 56 c6 1f cb 06 83 f6 38 7b 4e 9d 59 60 33 53 02 ca bd 37 73 33 18 58 94 7d a0 e8 c5 1f b1 57 d9 4a 0b 19 76 47 8f 81 c8 e2 46 cb 0d 31 64 81 cc da a1 fd 4c dd ca 1e b7 b0 e0 24 8c 05 2f a6 d7 03 8e 39 26 0e b8 76 ed 0a d7 52 09 63 c5 2d 5b 80 a2 c0 a6 4f fc db 7a 55 56 b7 01 d8 d8 4e e1 87 fc d8 09 e0 c7 1e 74 75 2c 9e 7f 37 df 6c e5 a1 3f f3 99 30 d1 67 66 42 90 be 66 0d b0 69 13 07 fa 76 0f 5a bf 9e 3c c8 e7 16 c3 2d 5b 62 b5 2b 36 0f 34 b0 c1 f9 42 c7 72 36 7c 30 5c 58 03 41 0e f8 a5 aa 95 24 32 33 f0 b0 84 66 eb 5e ae aa 98 e3 c1 81 a6 57 b6 62 1f 8f 01 f9 63 b9 02 c9 c7 f2 7f 07 59 a8 8a 48 33 43 a5 82 a1 20 fb 7a 70 d4 9b 0d c9 Data Ascii: wPU\|gn~"+$!-YZmV8{NY`3S7s3X}WJvGF1dL$/9&vRc-[OzUVNtu,7l?0gfBfivZ<-[b+64Br6\|0\XA$23f^WbcYH3C zp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49910	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1248	OUT	GET /mobile/img/twitter.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:55 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:55 GMT Content-Type: image/svg+xml Content-Length: 1492 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-5d4" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450795\|1732450761;Path=/
2024-11-24 12:19:55 UTC	1063	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg
2024-11-24 12:19:55 UTC	429	IN	Data Raw: 35 20 31 37 2e 31 33 32 2c 2d 30 2e 37 30 36 20 31 36 2e 32 33 32 2c 2d 30 2e 35 32 38 43 31 35 2e 35 31 2c 2d 31 2e 32 39 37 20 31 34 2e 34 38 33 2c 2d 31 2e 37 37 37 20 31 33 2e 33 34 35 2c 2d 31 2e 37 37 37 43 31 30 2e 37 39 32 2c 2d 31 2e 37 37 37 20 38 2e 39 31 37 2c 30 2e 36 30 35 20 39 2e 34 39 33 2c 33 2e 30 37 39 43 36 2e 32 30 36 2c 32 2e 39 31 34 20 33 2e 32 39 32 2c 31 2e 33 34 20 31 2e 33 34 32 2c 2d 31 2e 30 35 34 43 30 2e 33 30 36 2c 30 2e 37 32 34 20 30 2e 38 30 35 2c 33 2e 30 35 20 32 2e 35 36 36 2c 34 2e 32 32 37 43 31 2e 39 31 37 2c 34 2e 32 30 36 20 31 2e 33 30 37 2c 34 2e 30 32 38 20 30 2e 37 37 34 2c 33 2e 37 33 32 43 30 2e 37 33 31 2c 35 2e 35 36 34 20 32 2e 30 34 34 2c 37 2e 32 37 38 20 33 2e 39 34 36 2c 37 2e 36 36 43 33 2e 33 38 Data Ascii: 5 17.132,-0.706 16.232,-0.528C15.51,-1.297 14.483,-1.777 13.345,-1.777C10.792,-1.777 8.917,0.605 9.493,3.079C6.206,2.914 3.292,1.34 1.342,-1.054C0.306,0.724 0.805,3.05 2.566,4.227C1.917,4.206 1.307,4.028 0.774,3.732C0.731,5.564 2.044,7.278 3.946,7.66C3.38

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49911	47.254.245.190	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	1249	OUT	GET /mobile/img/whatsapp.svg HTTP/1.1 Host: sumbangan.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldrYmhHL3NNQU1HU3ozYmVUYXF5cGc9PSIsInZhbHVlIjoiRjBLRE9rVW9XWlQ3MkhYaHM2N01vNzVZU0NQVVJHOWZtZEZMMXdodGQ4SUNQS2dsMEdDNXpYUWQzSi9qSHY4cjFIMlRrakhPNHNtU01kdWxPeS80VkVBS0pvbGx0eXIvd1lBV1c1bGhPLzl4YWFrRnlBYldCM2xOcDArQ3RtV20iLCJtYWMiOiJmMDcxYjBjNjc1NDYwYjhkYTUyNTk3ZTY0OGVhYWQ5Nzg4ZGM1ZDA4ZmM3ZGIzZDVhMjExOGY1NGJhNTI3MTgyIn0%3D; sumbangancom_session=eyJpdiI6IkNqR0Q4Ukw4cXVQU3lFY0pjTWtnR1E9PSIsInZhbHVlIjoiZzBOdnArVzU0SEd1d3N5WFJwRlpPNXNLek1sUHdia3FBTVF1ZTE3T0pSVk5QZkNZZ2twakFiaWltWXlsVW9NaUV1WGdtMHlwbFhOUGJ4NHdyTFo1M1BMQjg1TUVldWYxSWoraXNMM2twY2NVZDdsVitYQkV2Ykpzb0Nid3ozK1MiLCJtYWMiOiI1ZjViMGI4ZWU5ZTQyYjhkMWQ5NzUwZjM1NGVmMTU5NmMzNjljZDMwMDIwMjhhZGM2YTZlMzczZmEwZjE2NTFjIn0%3D; _gcl_au=1.1.82930210.1732450767; _ga=GA1.1.1954701450.1732450767; _ga_RN6CJEGFTM=GS1.1.1732450766.1.0.1732450766.0.0.0; SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450792\|1732450761
2024-11-24 12:19:55 UTC	418	IN	HTTP/1.1 200 OK Date: Sun, 24 Nov 2024 12:19:55 GMT Content-Type: image/svg+xml Content-Length: 2494 Connection: close Last-Modified: Thu, 28 Dec 2023 17:27:54 GMT Vary: Accept-Encoding ETag: "658db01a-9be" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes Set-Cookie: SERVERID=a8dd470f0cfe335f3bb3f09593235cc7\|1732450795\|1732450761;Path=/
2024-11-24 12:19:55 UTC	2494	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 31 20 31 35 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg width="100%" height="100%" viewBox="0 0 151 151" version="1.1" xmlns="http://www.w3.org/2000/svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49908	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:54 UTC	439	OUT	GET /sumbangan.com/public/organization/258/logo/logo(1).png HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:55 UTC	699	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:55 GMT Content-Type: image/png Content-Length: 505762 Connection: close x-oss-request-id: 674319EBAF8AD933354870E0 Vary: Origin Accept-Ranges: bytes ETag: "03DBB20031EBE1ABC0DA7441BD97911E" Last-Modified: Fri, 12 Nov 2021 06:51:49 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 10002310511675317556 x-oss-storage-class: Standard x-oss-meta-mtime: 1629949766 x-oss-expiration: expiry-date="Sat, 13 Nov 2021 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: CAEQLhiBgIDsrdXL6BciIDQ4ZjdjZDhhMmNjZDQ5NjViNzllZTBmZjdjYWM4MDBk Content-MD5: A9uyADHr4avA2nRBvZeRHg== x-oss-server-time: 2
2024-11-24 12:19:55 UTC	15685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 24 f3 00 00 15 0b 08 06 00 00 00 a9 94 f4 77 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd cd 6d dc d8 d6 36 d0 73 06 1c 4b 19 48 63 4e 2c 30 01 09 60 00 ed 0c ae 43 30 18 c1 1b 01 e1 10 d4 19 c8 01 10 28 25 40 94 26 1c 97 32 28 8d 39 d8 1f e8 8f e5 5b b7 5a dd 76 db fa a9 9f b5 80 83 53 2a c9 72 69 6f ce 9e c1 93 23 22 01 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 31 1b fb f2 e6 1f fe bc cb f9 fc c8 55 4a e9 fc 37 c7 34 fd 8e b3 17 1a f5 53 4a 69 f9 9b bf 63 fd 93 bf 63 39 ff ec b3 8a 6a 58 fc e6 e7 00 00 00 00 00 00 80 bd 90 9b ee 25 72 c1 f7 b0 8e b6 fe dd fc 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 46 8e 08 db 02 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$wpHYs.#.#x?v IDATxm6sKHcN,0`C0(%@&2(9[ZvS*rio#"1UJ74SJicc9jX%rF
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 e0 09 0d 7d f3 3a c9 79 92 13 bb 03 00 00 00 c0 de fa 98 64 31 99 6e 3e 49 0c 00 87 a7 b4 dd 78 dc ff 2c c9 91 fc 00 00 00 00 b0 f3 6e c6 b7 bf ba 9a 5d 4b 09 00 00 00 00 00 00 00 00 00 00 00 b0 3d 4a ad 55 0e 00 00 00 00 00 00 00 00 00 00 00 80 27 30 f4 cd 71 92 f1 68 ef 5b 7b 03 00 00 00 c0 41 b8 1b bf 09 4e a6 9b 73 b9 01 e0 30 94 b6 3b 4d b2 4e 72 22 39 00 00 00 00 ec 9d f7 49 ce eb 6a 76 2b 2d 00 00 00 00 00 00 00 00 00 00 00 c0 f3 2b b5 56 19 00 00 00 00 00 00 00 00 00 00 00 00 1e d9 d0 37 af ef 8f f6 be b0 35 00 00 00 00 1c 9c 8f 49 ce 26 d3 cd b5 f4 00 b0 bf 4a db 2d 93 bc 93 18 00 00 00 00 f6 da e7 24 8b ba 9a 5d c9 0c 00 00 00 00 00 00 00 00 00 00 00 f0 bc 4a ad 55 02 00 00 00 00 00 00 00 00 00 00 00 80 47 32 f4 cd 71 Data Ascii: }:yd1n>Ix,n]K=JU'0qh[{ANs0;MNr"9Ijv+-+V75I&J-$]JUG2q
2024-11-24 12:19:55 UTC	16384	IN	Data Raw: 00 00 00 30 6c c7 11 b1 28 aa 7a ac 4e 00 00 00 00 00 00 00 00 00 00 00 c3 77 a4 46 00 00 00 00 00 00 00 00 00 00 00 c3 d6 b5 e5 22 22 ce 95 09 00 00 00 00 00 00 00 00 00 00 00 00 00 9e d5 69 44 34 45 55 8f c5 0c 00 00 00 00 00 00 00 00 00 00 30 6c 47 ea 03 00 00 00 00 00 00 00 00 00 00 30 5c 5d 5b 7e 8c 88 73 25 02 00 00 00 00 00 00 00 00 00 00 00 00 80 17 71 1a 11 4d 51 d5 63 71 03 00 00 00 00 00 00 00 00 00 00 0c d7 91 da 00 00 00 00 00 00 00 00 00 00 00 0c 53 d7 96 17 11 f1 ab f2 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 8b 3a 8d 88 85 c8 01 00 00 00 00 00 00 00 00 00 00 86 eb 48 6d 00 00 00 00 00 00 00 00 00 00 00 86 a7 6b cb b3 88 b8 54 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 78 15 ef 8a aa 5e 88 1e 00 00 00 00 00 00 00 00 00 00 60 98 8e d4 05 00 Data Ascii: 0l(zNwF""iD4EU0lG0\][~s%qMQcqS:HmkTx^`
2024-11-24 12:19:56 UTC	16384	IN	Data Raw: a6 6b a1 d0 00 30 40 45 55 e7 d9 ee b8 0b f1 7d a1 87 30 18 3f 05 fb 9e a5 e5 fc 4c db 80 c7 d2 ed 03 2f ba f5 82 bd 60 86 ec 2a 22 66 f6 b0 36 df dd ee fe 5e b7 67 79 34 f6 5a 00 a3 96 67 c6 93 9d db eb d3 b1 17 62 93 15 55 bd 1d 11 e7 11 f1 72 ec b5 e0 ab bb c8 df 21 69 39 3f 57 5a 80 61 6a 9b f2 b0 3b fb 33 1b c3 b0 7c e8 ce ff 4e 27 d3 f5 8d de c1 7f 15 55 3d eb ce ab dc db 00 00 f8 23 f9 8c ec 20 2d e7 66 2a 00 00 00 00 00 00 00 00 00 00 e0 67 8a 94 92 8a 00 00 00 00 00 00 00 00 00 00 00 bf d2 36 e5 a5 50 48 80 d1 ca c1 61 27 93 e9 7a e5 2d 00 00 c3 d3 05 fd e7 00 df 63 73 1d 6c 84 1c 40 95 d7 e6 ab b4 9c 5f 6a 29 f0 58 da a6 5c 74 41 c9 af 14 99 81 b9 8a 88 d9 64 ba be d7 b8 cd 75 b7 bb bf dd cd 38 f9 b5 35 f6 7a 00 74 3e 9e e7 ec dc 5e 3b cf d9 50 Data Ascii: k0@EU}0?L/`"f6^gy4ZgbUr!i9?WZaj;3\|N'U=# -fg6PHa'z-csl@_j)X\tAdu85zt>^;P
2024-11-24 12:19:56 UTC	16384	IN	Data Raw: 72 da ab 07 3a 5f 8a 03 78 06 0f 11 f1 43 a7 3f bb 10 76 b3 95 69 36 8a 88 eb 86 0e 54 1c 75 17 f3 fb 06 1c 07 00 6b b4 1a ac f1 41 a6 00 c0 86 ec 47 c4 24 c9 8b 03 01 03 3b e2 a2 a1 f7 f6 00 00 fe ca 49 99 66 e7 92 01 68 97 e5 b4 37 a9 bf e3 d5 0a 00 6c c8 c9 ea 7a 03 78 21 d5 78 78 5f 8d 87 f5 be bf f7 3a 00 00 9e 89 77 12 01 00 00 00 00 00 00 00 00 00 e0 5f ec 09 03 00 00 00 00 00 00 00 00 00 00 fe d7 c5 6a 98 3d c0 26 dd 46 c4 a0 d3 9f 5d 49 b9 b9 ca 34 3b 28 d3 ac ee e8 43 43 cf 0d 3f 75 17 f3 eb 06 1c 07 00 6b 94 e4 c5 71 44 b8 46 00 00 36 ed c8 35 07 b0 0b ca 34 ab 87 26 bf 55 36 00 b0 65 7e 2e d3 ec 58 69 00 ed b0 9c f6 46 11 71 a6 4e 00 60 c3 ce 56 d7 1d c0 0b aa c6 c3 f3 88 f8 21 22 1e f4 00 00 6c d8 49 92 17 a7 42 06 00 00 00 00 00 00 00 00 00 Data Ascii: r:_xC?vi6TukAG$;Ifh7lzx!xx_:w_j=&F]I4;(CC?ukqDF654&U6e~.XiFqN`V!"lIB
2024-11-24 12:19:56 UTC	16384	IN	Data Raw: 12 34 a4 6f bd e8 f8 ed 0f 00 80 7d d1 d7 04 b0 ef 36 d3 c1 e5 fd df ab 3b 65 01 c0 a3 1d d6 26 73 f7 a2 01 00 00 00 00 00 00 00 00 00 f8 4e 21 0e 00 00 00 00 00 00 00 00 00 00 d6 8b 4e f9 e2 ef c3 ec 83 80 d7 57 be 50 7f 58 ef 2d 6f 65 bb 1b ab 56 7b 14 11 7f e6 b0 d6 c4 9c e6 1e 00 40 8e 6a 93 79 37 22 1a ca 07 00 60 4f 18 e8 4b 8e 7c ee 01 00 d8 95 63 49 43 16 5c 67 02 00 b0 2f ec 4d 81 4a d8 4c 07 97 11 31 d2 16 00 3c 89 ff 3b 01 00 00 00 00 00 00 00 00 00 f8 4e 21 0e 00 00 00 00 00 00 00 00 00 00 22 62 2c 04 d8 8a 7e bd b7 fc 22 da dd 58 b5 da dd 88 f8 33 87 b5 26 e6 e3 c1 cd b5 ef 09 40 9e 86 7a 07 00 60 8f 18 e8 4b 8e 8e b4 0e 00 c0 ae ac 5a 6d d7 5d 90 3e df 73 00 00 f6 45 63 bd e8 d8 9f 02 95 b0 99 0e ce 23 e2 5f da 02 80 47 7b 57 9b cc 3d f7 04 Data Ascii: 4o}6;e&sN!NWPX-oeV{@jy7"`OK\|cIC\g/MJL1<;N!"b,~"X3&@z`KZm]>sEc#_G{W=
2024-11-24 12:19:56 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 80 b7 49 e4 05 00 00 00 00 00 00 00 00 00 f0 22 07 5e 72 2a e3 34 2b 0d 89 df 8f 41 1b 6e 82 28 f8 cc 03 d0 56 06 cf 00 00 d0 54 0f 9a 23 76 9d f9 b4 1e 6a 3d 8b 3d 07 00 00 5e d6 99 4f 47 22 82 68 78 bf 05 00 80 26 9b 68 0f 80 13 fa 22 7c 00 36 f0 e9 dd d7 6f 97 82 02 00 00 00 00 00 00 00 00 00 d8 5c 22 2b 00 00 00 00 00 00 00 00 00 80 17 5d 8b 87 13 71 38 f7 1e 2c ba bd 3a c7 cf 8d bf 11 62 61 d8 21 00 6d 65 00 1a 00 00 4d 65 bf 06 fe 31 92 03 00 00 2f b8 13 0e c4 23 cd ca 65 08 61 a6 72 00 00 1a ca f3 3f 00 4e a6 2a f2 c7 10 c2 5f 1a 00 60 03 ce 37 00 00 00 00 00 00 00 00 00 00 78 83 44 58 00 00 00 00 00 00 00 00 00 00 2f 72 d8 25 a7 70 9b 66 e5 a3 e4 77 b3 e8 f6 2e 43 08 fd 26 df 03 d1 31 1c 06 80 b6 f2 37 0e 00 80 a6 9a 68 0e Data Ascii: I"^r4+An(VT#vj==^OG"hx&h"\|6o\"+]q8,:ba!meMe1/#ear?N_`7xDX/r%pfw.C&17h
2024-11-24 12:19:56 UTC	16384	IN	Data Raw: 89 f9 49 61 a3 b5 c9 8a da 07 96 5f e0 f9 f8 f4 28 22 7e 1e fc 42 61 3c 1e 75 09 00 ec 43 57 95 fd 9e e8 83 b0 01 80 37 f6 71 7b df 01 40 62 f2 b6 e9 af df ff d8 0e 66 07 80 a9 5b f5 03 65 f3 b6 79 98 7a 10 00 0c da c5 f6 37 0b 00 e0 2d cd b3 a2 76 de 19 00 18 95 ae 2a ef 22 e2 49 ab 00 7b f3 bd a8 01 00 00 00 00 00 00 00 00 80 54 cd 34 07 00 00 00 00 00 00 00 00 00 c0 40 dc 28 e2 c5 ce 13 59 27 8c 85 e1 36 00 c0 de 74 55 79 19 11 d7 12 07 00 de c8 6d 57 95 17 c2 05 48 57 de 36 0f fd 60 76 43 4b 01 98 b8 55 ff 7b 98 b7 8d 77 b9 00 0c 5a 56 d4 eb ed 1e 6e a3 29 00 e0 8d bc cf 8a fa 41 b8 00 c0 48 5d 29 16 60 7f be fb f5 b7 b9 b8 01 00 00 00 00 00 00 00 00 80 14 cd b4 06 00 00 00 00 00 00 00 00 00 a4 e2 8f df 7f f0 01 c8 71 bb 99 7a 00 3b 30 6c 1f 00 00 c6 Data Ascii: Ia_("~Ba<uCW7q{@bf[eyz7-v*"I{T4@(Y'6tUymWHW6`vCKU{wZVn)AH])`qz;0l
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: c0 df 93 5e 6b fd a6 86 00 00 00 00 00 00 00 00 00 00 00 6f a3 ad ee 00 00 00 00 00 00 00 00 00 00 8d f6 c3 c1 33 0d 36 6a 7a 01 00 00 00 80 bf ae 2a 8b f5 c1 bf c9 e9 df 2d 67 6b 3c 79 6c 08 f0 53 66 55 59 ac 44 08 00 00 00 00 00 00 7f 5f 67 38 7f f6 6b ae 6f cf 0f 7f fa 7a e5 97 f8 f7 03 00 00 f0 6c d2 6b b6 df 94 13 00 00 00 00 00 00 00 00 00 00 e0 6d b4 d5 1d 00 00 00 00 00 00 00 00 00 a0 b9 3a c3 f9 4c fc df 5b 76 fb bd 88 38 a8 d3 9e 00 00 00 00 aa b2 58 44 c4 a2 f1 85 00 00 00 00 00 00 80 2d d0 19 ce a7 72 04 00 00 d8 0a 5e df 01 00 00 00 00 00 00 00 00 00 00 bc a1 1d c5 07 00 00 00 00 00 00 00 00 00 68 ac 33 d1 3f 6a 54 c3 3d 01 af cb 79 00 00 00 00 00 00 00 00 00 00 00 00 00 80 1f aa ca 62 16 11 37 aa 04 00 00 00 00 00 00 00 00 00 00 f0 36 76 d4 Data Ascii: ^ko36jz*-gk<ylSfUYD_g8kozlkm:L[v8XD-r^h3?jT=yb76v
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 bf 35 94 09 00 00 00 00 00 00 00 00 00 00 1d 32 56 16 d0 26 cd b0 7f 00 e0 19 0c 16 f9 7c b0 c8 eb 01 24 d7 cd 40 3a 00 00 fe be 8b ed 72 66 98 1b fc 4a 99 a4 f3 88 a8 87 5a 1f cb 05 00 00 e8 b0 d7 11 b1 2a 93 74 a2 44 fa aa 2a b2 7a 8d ff ca 1b 00 00 e8 a9 c3 66 5d f0 a1 2a b2 4d 55 64 57 55 91 39 df 0c 00 00 c0 53 f8 28 55 00 00 00 00 00 00 00 00 00 a0 8d 86 5a 01 00 00 00 00 00 00 00 00 00 3a e0 5e 49 1e 6e d9 30 74 0e 68 1b c3 6e 00 e0 89 0d 16 f9 7c b0 c8 37 11 71 dd 0c 9f 03 00 e0 eb fc b8 5d ce 6e 64 06 bf 28 93 74 5c 26 e9 4d b3 c6 38 10 0b 00 00 b0 07 8e 23 62 55 26 e9 85 32 e9 a9 2b c5 03 00 fc ac 3e 5b 75 19 11 3f 55 45 76 57 15 d9 45 55 64 ce 3a 03 00 ec 89 ed 72 b6 d2 25 b0 63 9e f9 00 00 00 00 00 00 00 00 00 00 b4 d2 0b b5 Data Ascii: 52V&\|$@:rfJZtDzf]*MUdWU9S(UZ:^In0thn\|7q]nd(t\&M8#bU&2+>[u?UEvWEUd:r%c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49913	172.217.21.36	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:55 UTC	1332	OUT	GET /pagead/1p-user-list/10947617392/?random=1732450766497&cv=11&fst=1732449600000&bg=ffffff&guid=ON&async=1&gtm=45be4bk0za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&u_w=1280&u_h=1024&url=https%3A%2F%2Fsumbangan.com%2F&hn=www.googleadservices.com&frm=0&tiba=sumbangan.com&npa=0&pscdl=noapi&auid=82930210.1732450767&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dHfuDPnJsZY8Qm64ifenTSb12oYza8OP6NlzCPze7vT-sEVZW&random=3183504702&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 24 Nov 2024 12:19:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-24 12:19:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49912	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:56 UTC	674	OUT	GET /sumbangan.com/public/campaigns/large/6736c2af60561_3.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sumbangan.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:56 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:56 GMT Content-Type: image/jpeg Content-Length: 363050 Connection: close x-oss-request-id: 674319ECCE5C5D38350BEBE7 Vary: Origin Accept-Ranges: bytes ETag: "47DFF1385F8462974389CD76E655C7DC" Last-Modified: Fri, 15 Nov 2024 03:40:31 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 2993635545798370888 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Sat, 16 Nov 2024 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: R9/xOF+EYpdDic125lXH3A== x-oss-server-time: 2
2024-11-24 12:19:56 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: e8 af 64 65 a4 90 46 4a 33 54 fd e6 d3 ad ac 8e bf 67 7a ce d9 6a de f2 1d 27 3c a4 2d 59 0e 7f 11 5f a5 a9 b4 5b c1 dd d1 00 0e f8 1e 55 cd 1e 33 da a3 e8 cd 66 8d 54 c5 b9 8b 84 69 12 b6 b9 f7 61 41 a6 c8 39 6d 48 3c 1f 2c 67 d2 b3 c8 9a ec 16 53 d7 58 57 4b 2d ba 0d ea 72 90 e5 b2 4b 40 3a e9 18 c3 9d b0 0f d7 8a 1d a5 e3 6a 4b ec d5 2d a8 ae 18 8b 75 c1 bb a7 fb 98 18 e7 f5 ae a6 b0 f8 27 a3 35 b6 9c 8b 7a 7a 5e e8 8e 94 4b 10 9b 78 f4 02 f8 38 50 39 d9 e9 81 8a b4 e0 69 8b 25 b6 23 30 21 da a3 47 43 68 09 da d3 41 20 50 93 61 67 20 23 c3 7d 42 a0 95 a2 33 85 24 71 91 5f 0f 0d 75 0e 7e 28 6e 1f ca bb 37 ec 88 04 f2 c2 09 03 d2 b0 fb 1e dd b8 7f 76 47 e9 5a 6d 0b 38 b9 ef 0e 2f e9 1b 17 0d c5 21 7e 82 a8 ff 00 19 de bf 5a 4b ba 76 2c 63 6e 80 8f fa cb Data Ascii: deFJ3Tgzj'<-Y_[U3fTiaA9mH<,gSXWK-rK@:jK-u'5zz^Kx8P9i%#0!GChA Pag #}B3$q_u~(n7vGZm8/!~ZKv,cn
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: ef 7d e2 52 4f de 39 cf 29 ce 09 3c 9e dc 51 df 78 d5 52 bc 11 63 52 47 48 b6 3c 52 e5 b6 3e 5d f8 a5 46 58 23 79 6f bf 04 fe 2c 79 0a 41 d3 f1 6f 17 76 22 38 cb a8 99 ee 6d 74 19 6d d4 04 96 1c 2b 23 2a 1f 5e 72 7c b1 57 2f 9b b8 0c 1a 72 f8 99 5e 1c cf 66 0d c8 bb 7a 91 3d 87 23 c4 49 29 7d e6 82 15 c0 1f 23 b4 f6 f2 a7 cf 09 b4 a7 f6 a7 54 33 72 97 a8 cb 50 10 da 04 e7 1f 23 70 73 6f de 36 3f 88 cd 53 88 b1 de ed 9a c9 e4 4e 53 96 c9 b0 3f 66 df 4f 05 a3 8e 49 ff 00 26 0f 7a 79 6a 6c 0d 2d 60 4d 8a f0 ef b8 4a 43 8e 06 a5 45 1b 8c de a1 c8 69 1d be 00 01 ef f2 a9 ab 7c 0a 8e a7 b5 f8 90 eb 3a a2 1b 6d 3f 1d 9d 22 b6 dd 62 23 aa 46 77 2d 80 a2 ac fd 76 9a 33 e3 0d d6 7b 1e 1d 4b bd 69 f7 24 25 c4 ff 00 7b 69 f8 b9 57 4f 03 8d c0 73 b3 be 6b 92 f4 e7 8b Data Ascii: }RO9)<QxRcRGH<R>]FX#yo,yAov"8mtm+#*^r\|W/r^fz=#I)}#T3rP#pso6?SNS?fOI&zyjl-`MJCEi\|:m?"b#Fw-v3{Ki$%{iWOsk
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: e6 72 9e a1 ee bc 79 79 f1 4c 17 ed 39 31 17 68 92 4c 07 59 93 1d 00 9e 90 f8 dc 59 ec 85 0f 21 db 9f 9d 23 c3 8a 8e ac 96 a6 d9 d7 29 98 cb eb 38 b7 96 12 77 9c f0 06 6a d7 cc 03 53 b6 f8 c8 b4 c8 bb bf a9 18 53 4d 0d a5 49 01 2f 29 7f 4f 4c fc e9 49 c5 5d 5b 5c 45 d9 e3 cb 95 2e 42 c1 29 6d ce a3 6e 0c f1 f0 f3 51 f5 0a 19 9f f7 70 50 fb 71 77 b6 95 a3 e0 25 2e 7a 7c c7 ad 4d 67 50 48 d2 6e aa db 01 4b 0e 47 78 2b 71 1b 4a 89 4e 0e dc 8e 40 f9 55 35 b5 00 db e0 e5 e6 e7 0f 54 9d 73 a8 af 70 d7 6d b7 b8 88 ce c1 b8 2b a3 d6 e4 80 84 e3 04 01 ce 7b f7 ae 80 f1 b3 56 5a 21 68 3b 82 f4 cd ca df 73 8c 8e 98 91 6c 9a 8e bb 2d 03 c9 e8 3f 8e 31 8c 63 1e 7d eb 9d ac da 7e c1 ab 2d 12 2e 73 bd d2 03 92 5e 6d a6 e5 27 9e 91 0b fb c2 a6 fc fc e9 b3 c4 cd 6b 63 b1 Data Ascii: ryyL91hLYY!#)8wjSSMI/)OLI][\E.B)mnQpPqw%.z\|MgPHnKGx+qJN@U5Tspm+{VZ!h;sl-?1c}~-.s^m'kc
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 6e 29 6b 6f ab 77 b8 08 e8 ff 00 0a 5c e7 f4 ed 5b 6d 50 ae 17 55 16 74 7d 85 f9 6e 2b 80 f9 6c a8 7d 49 ec 28 51 1b 69 22 a0 be e9 1f 68 eb 8c fe 8c 6d 71 12 24 6e 08 79 2d b6 da 71 e5 92 46 68 b3 1a 5a ea 9b 4a 6c 57 fd 55 26 64 e5 23 3f 69 c2 77 a4 a0 bf a7 3f ce af 7b 5f 83 57 a9 e5 32 35 6e a0 f7 56 4f 2e 46 6c 64 9f 97 7a 68 8f a6 f4 26 94 db f6 45 8a 34 e9 00 60 3d 28 21 63 3f 9f 6a d2 92 ee 62 9a 7d ac e3 c8 7e 06 f8 c1 32 e1 d6 7b c5 ab a4 58 05 7b 82 d7 29 e0 e9 1f f0 8e 39 f5 a7 27 bc 25 9f 0d a6 59 81 e2 85 f6 24 94 0c 97 a4 3f d4 07 fc c4 2f 38 15 76 ea 6b 9b f7 a7 10 ca 98 12 5e 60 e1 96 62 b3 8d bf a0 c9 af 2d 7e 19 6a db e2 3d e6 fa eb 56 e8 eb e4 a1 c4 61 44 7a 60 f3 51 7b df 06 89 28 2b 65 67 62 d3 ea d2 cc 96 e5 ea 0b a6 a7 b8 be 33 ef Data Ascii: n)kow\[mPUt}n+l}I(Qi"hmq$ny-qFhZJlWU&d#?iw?{_W25nVO.Fldzh&E4`=(!c?jb}~2{X{)9'%Y$?/8vk^`b-~j=VaDz`Q{(+egb3
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 42 a1 ab 70 fc 3d 8d 67 28 59 a6 39 92 99 97 bd 42 33 89 f8 87 9d 6d 76 2a d0 a0 eb 6a db f2 15 83 ec 32 fb 42 5c 6f cf 1e b5 b2 2d c1 b5 81 1e 42 f0 af 2a c7 b1 d0 fe 62 44 69 0d be 9e 9a d2 0a 87 ad 6a 75 95 c7 77 a8 ca 70 3c c7 95 63 21 92 85 05 a3 e1 57 c8 d6 d8 f3 92 ea 03 2e 55 6e 21 a3 7a 5c 6a 53 7b 71 f1 1e f9 a8 89 ea c3 74 a7 f7 49 ad b2 42 91 97 19 50 4a bc fe 75 ec 77 51 23 08 7b 85 7c eb 44 23 62 db 6a 62 32 16 32 2b 14 4a 5b 0b 0c bf f1 27 c8 d6 2e 47 31 9c 0e 34 4a 92 9e 70 2b 6b 65 b9 49 da bf 85 43 be 7c a8 40 79 2e 38 90 d8 31 d7 82 3d 2a 3b 52 dd 69 61 99 39 23 d4 d7 cf aa 44 27 86 cf 89 3e 95 b4 29 99 cd 9c fe 2e d4 c0 f1 c8 88 70 7b c4 63 cf ca b7 45 9b b4 f4 e4 27 1e 55 0c 07 e1 3b e7 b2 a5 96 d9 9e d7 c0 ac 39 40 12 8c 70 a3 d5 61 Data Ascii: Bp=g(Y9B3mvj2B\o-BbDijuwp<c!W.Un!z\jS{qtIBPJuwQ#{\|D#bjb22+J['.G14Jp+keIC\|@y.81=*;Ria9#D'>).p{cE'U;9@pa
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 89 2e 00 7f 23 5b f6 16 a3 36 85 0f 88 d6 ab d8 48 5c 64 0f 88 34 37 81 e8 4f 14 a2 1b ec ce 10 0b 4b bf 1e 52 17 fa d7 d3 fe 20 d8 29 c8 00 e2 b1 b5 fd eb 28 1b 71 95 73 52 26 37 fd e4 ed ec 8e 31 40 c8 0e 30 a4 34 94 a7 fd e7 7a f2 4c 72 85 36 14 3b d4 d7 10 92 94 6e fc 59 e2 b6 c8 6d 26 4b 28 58 a4 c0 f5 88 aa 69 1c 23 71 1e 74 1e f6 ca d4 1b 0b 5e 49 57 6a 67 18 1d 4d 87 00 71 42 6e 8d a0 c8 6d 3e 9c 8a 9d c0 42 4c 14 b7 1d 2b 42 30 a3 c5 64 f4 65 ed 42 bc ea 73 9c 30 d9 f5 3c d7 d2 5b 52 54 d9 3d 8d 1b 80 5f 9d 05 66 42 16 b4 e7 15 b6 5b 07 e0 f9 a6 88 cf 6d 4a 4a 55 d8 03 c5 61 21 b5 3a 86 d7 c7 6a 56 26 c5 d9 ec 39 ee 83 6f 03 7d 69 72 3a 92 db 7b 53 9c e3 9a 23 71 68 ae 3a b9 c0 07 35 af 29 5c 76 f7 77 ec 2b 48 fd d3 36 c0 d7 36 8a 5c 4e 51 de b6 Data Ascii: .#[6H\d47OKR )(qsR&71@04zLr6;nYm&K(Xi#qt^IWjgMqBnm>BL+B0deBs0<[RT=_fB[mJJUa!:jV&9o}ir:{S#qh:5)\vw+H66\NQ
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 50 2b 42 3b 8c d5 3f 66 be 3e 86 c3 4b 5f 28 38 e0 f7 ab 93 4a 48 6a 5b 4d 38 f7 39 4f 63 5e 7c e3 e5 33 d2 c1 93 7a 00 5c ee 6e b6 d3 e8 24 a0 e3 83 55 ce a1 d7 6f 47 4f b9 c8 b8 2c 63 8c 0a 7d d7 6f c6 6a 52 d0 d0 da 90 09 35 50 4e 30 e6 3c e3 c6 18 74 67 19 23 bd 6b 82 16 63 a8 7b 0b 07 c3 bd 79 0d 2f 37 1a 5c d4 29 a3 c6 09 e6 ac cb d3 16 ed 43 65 92 ca 30 a4 38 d9 e9 8f ca b9 da dd 67 b3 5c e1 37 25 0d 39 01 ec e5 b7 90 30 09 ab 3b c3 fb d4 c8 eb 6a db 3b 2e 01 c2 16 7c ea 73 c1 c3 94 3d 3e 4f 33 e5 2a cd 3b aa 2f 1e 16 f8 8f 16 f3 6b 92 b8 ef 42 96 8c e1 5c 29 19 e4 1a fd 6e d3 17 76 ef b6 6b 7d e9 9f 89 33 59 43 c5 5e 5c 8a fc a0 f1 ca d0 d4 1d 64 d3 cd 35 b5 a9 9b 16 78 f3 e2 bf 51 bc 1e 67 ff 00 cd be 9f 42 3b 22 0b 63 f8 57 81 d6 5d a4 d7 73 c5 Data Ascii: P+B;?f>K_(8JHj[M89Oc^\|3z\n$UoGO,c}ojR5PN0<tg#kc{y/7\)Ce08g\7%90;j;.\|s=>O3*;/kB\)nvk}3YC^\d5xQgB;"cW]s
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 55 24 77 cf 95 6d 87 6b dc 9e a4 79 3d 42 38 ef da a8 54 0a 7a 22 59 21 0a d8 8e 2a 2a 55 d3 51 db f1 1f 95 31 3e ce c4 e1 f8 db 8f f8 aa 32 1b 51 57 dd c6 40 1f 3a 06 43 69 52 7a 7b 83 5c 57 ad 82 ea 54 5e 18 40 e3 34 55 b6 96 a4 fc 68 19 f4 15 90 88 e8 3b 8c 7c 24 f9 1e d4 a8 ae 41 8d 47 8b 19 45 e4 2c 2d 7f ba 33 da a6 7b cd c1 d4 ed 2a 42 73 d8 f6 35 35 b8 2d be d9 79 51 c2 d2 8f 24 77 15 b9 98 8d cb 20 46 67 21 07 e3 dc 71 8a 52 15 01 9c 8a b2 bd ab 6b 79 1c 82 0f 9d 1f 89 19 f4 45 6f fb a6 56 e1 18 26 a6 44 b5 16 e5 8d ec 83 e5 de 8d f4 a5 b3 d1 58 8c 16 96 8e f2 07 90 a5 65 00 5c 80 46 f7 f7 e5 c0 70 52 46 71 f2 ac 5d b6 ac 2d 45 39 2a c7 64 8a 27 35 4a 4c a9 32 1d 47 4f 7f 3b 33 8c 71 58 42 71 39 76 4b 4b 5a c0 4e 49 07 ca a4 81 66 60 44 7c 25 d2 Data Ascii: U$wmky=B8Tz"Y!*UQ1>2QW@:CiRz{\WT^@4Uh;\|$AGE,-3{Bs55-yQ$w Fg!qRkyEoV&DXe\FpRFq]-E9*d'5JL2GO;3qXBq9vKKZNIf`D\|%
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: d2 bb 89 da 11 1d c5 9c 1c e5 42 b7 32 b2 44 09 2f b0 db b0 5e 41 42 5c 18 dc a4 77 a8 ef b0 b7 1a d8 ca 77 9e f5 e0 9f 23 85 95 6f 1e 7c 57 9d 55 15 a1 4d 3b b0 9c f1 40 8e 9d f0 06 3a e2 78 27 39 6b 56 0b aa 90 46 7d 7a a3 fd 6a 86 f1 0d 99 2e ea 89 cf b8 d3 89 42 36 05 10 32 32 12 07 f4 ae 8f f0 82 39 87 e0 07 5d f0 14 5d ea 90 7f f2 9f e9 5c e7 af ee 32 59 d6 d7 58 ed 3a 56 86 de 23 6f 95 67 1e e6 b3 ec 25 a1 c4 3a e2 95 b8 f0 08 06 a6 32 b4 ac 29 08 de f3 84 63 24 70 3f 5a 90 a9 b1 9f 1b dd 86 80 a1 fb c9 18 ad 4d b7 6f 7d 2a e8 4f 75 0e ff 00 85 68 da 3f 95 68 64 7c 5e ca f0 b0 16 55 e4 91 80 3f 4a f0 b5 8e 9e 32 93 d4 f2 51 15 21 b8 73 58 69 0f 74 0a 91 fe 2c 54 62 b5 ae 53 5b 81 fd aa 09 00 79 64 54 b2 91 fa 0d a4 db 29 d3 16 6d f9 2a f7 06 0e 73 Data Ascii: B2D/^AB\ww#o\|WUM;@:x'9kVF}zj.B6229]]\2YX:V#og%:2)c$p?ZMo}Ouh?hd\|^U?J2Q!sXit,TbS[ydT)ms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49914	47.254.218.46	443	4928	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 12:19:56 UTC	460	OUT	GET /sumbangan.com/public/campaigns/large/642e39dfa8ebf_MAKANAN_BERKHASIAT12.jpg HTTP/1.1 Host: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-24 12:19:56 UTC	609	IN	HTTP/1.1 200 OK Server: AliyunOSS Date: Sun, 24 Nov 2024 12:19:56 GMT Content-Type: image/jpeg Content-Length: 152626 Connection: close x-oss-request-id: 674319ECF3A695393965B5BD Vary: Origin Accept-Ranges: bytes ETag: "536C23DD65CF7E975DBC524408EF85D1" Last-Modified: Thu, 06 Apr 2023 03:17:51 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5893813499116188149 x-oss-storage-class: Standard x-oss-expiration: expiry-date="Fri, 07 Apr 2023 00:00:00 GMT", rule-id="ac3e620c-c370-43db-9564-034f9be1d2b5" x-oss-version-id: null Content-MD5: U2wj3WXPfpddvFJECO+F0Q== x-oss-server-time: 1
2024-11-24 12:19:56 UTC	15775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: e9 f3 17 94 a8 73 8f 10 f7 dc 5d 69 ff 00 53 df 7f c9 e6 ff 00 74 1d c4 56 9f f5 3d f7 fc 9e 6f f7 44 1f b4 16 5f ef 2c ff 00 7a 0c ca 93 dd 51 92 39 42 85 08 d6 22 25 a5 c1 30 27 f2 08 2d 08 4f 16 f0 cd 14 f1 e6 44 b8 85 6e de 11 e2 3d c3 c7 71 75 a1 47 70 54 7b e6 81 3f f8 79 bf dd 11 eb 2d 0a 5a 0c 3d 2e 46 b6 fd d7 ad c1 96 f9 78 06 48 f7 24 74 58 de b1 b5 61 10 b9 23 32 45 43 e3 09 c5 a1 38 ff 00 06 31 ce 3b 99 1c b1 e6 31 d7 b5 75 a2 a1 43 56 9d 73 90 34 3e 18 e8 31 c3 c0 e8 ba c0 a3 b8 3a 55 dc 92 13 82 7e 8f 37 fb a1 bd 63 7b 83 6a 8d 59 c9 b4 c9 0f d6 59 38 a7 92 7f e5 88 34 f6 a5 0d 54 99 70 4c d7 3b b9 1c 8a a4 67 c6 f8 b8 da a7 38 eb 04 39 a7 a4 ea 85 c9 c6 a5 35 36 ee a0 04 de 49 38 d2 4f 3c 84 fe 48 65 45 65 2d 06 dd 44 88 df f5 2d c1 1c 6f Data Ascii: s]iStV=oD_,zQ9B"%0'-ODn=quGpT{?y-Z=.FxH$tXa#2EC81;1uCVs4>1:U~7c{jYY84TpL;g8956I8O<HeEe-D-o
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 67 9f 83 9e 5f 26 12 0d 44 4a 28 ca 9c f4 bb fa 4a 8d 10 11 91 c1 0d cd 5a 75 1a 7a 1b 52 4c 3d bd 1c 65 f2 e1 b2 30 ae a5 ab cb d8 7e e2 d0 fd 66 7f fd 47 ff 00 c1 7f e7 c7 e7 eb 30 c7 fe d2 30 ff 00 22 ff 00 cf 86 f2 f2 a2 cc f4 e4 b6 56 2a 7b fe ec 7f f8 d1 a9 00 4b a3 19 7c a9 22 31 6b 04 ec 93 80 cd 9f ac c3 1f fb 48 c3 fc 8b ff 00 3e 29 bc db cb f2 65 7d 46 3a 5f a7 ba 4a 4d 58 6a ef 6a b6 78 b4 bd cd 39 bc 88 b3 aa 4e 55 99 86 c9 52 39 b4 27 68 a7 8a 14 0b 4c 09 08 44 a6 d3 c6 49 27 d1 f3 d1 50 66 1d 7e ef 99 6f fd d1 bf 23 48 05 5a bc 80 d0 48 29 e4 93 42 5d 2f 2e 79 bd f8 0e bd 8c 93 8c 32 d6 85 57 99 55 7a 3a 4d 3a cd 52 43 8e 72 19 4d ad 3b 72 4b 27 3f 3e 86 cc 5f 08 f9 1e 2c 6d 3e b4 83 34 cc 03 79 72 35 7f cf 8e 7c 8e 29 8c 30 1b e5 62 50 f7 Data Ascii: g_&DJ(JZuzRL=e0~fG00"V*{K\|"1kH>)e}F:_JMXjjx9NUR9'hLDI'Pf~o#HZH)B]/.y2WUz:M:RCrM;rK'?>_,m>4yr5\|)0bP
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 7e 02 21 4f 2c 83 9a 79 b0 da d3 24 9c dc 10 c7 4e f2 b3 cb 7a 99 f9 bd 81 33 65 40 9d 43 92 91 a5 09 14 26 0c 83 90 84 9f 46 5c 27 c7 02 e3 cd df f8 20 c6 cc 7b ce e3 66 3e 22 1b cb 6a 94 ba da c1 5a a6 0e da 52 4e da a2 7e 7e c4 db 72 7e 81 3f 8e 32 74 7d 1c ce 6a 54 75 9e 5a 3f b0 62 2c 27 31 12 4e 64 fc fe 78 7b 72 7f 2c b8 47 cf 21 a3 6f f1 a6 34 12 3f 2c e3 e7 64 7b c6 b8 fa 27 c9 ef f6 97 a4 ff 00 83 bf af 34 61 44 6c f4 b9 49 e1 ce 46 1c 9d bb 7f fe c8 df 39 30 9d bd 16 57 53 89 9b 4d 79 28 d1 ee 67 9f dd 93 4b 18 e4 6f cc 3b 1c ec 97 80 c6 dc ab ff 00 6f 37 ff 00 93 49 ff 00 96 14 44 f2 6d ad 43 b6 6b d2 68 91 07 4e 7e 99 4a a3 e6 0e 7b 93 fe 6c 91 a2 73 a7 93 05 7f 98 f9 8e e9 58 31 bb 53 c9 d1 2f 18 24 94 6a ca 69 0d bb 0c 92 76 05 37 91 13 8c Data Ascii: ~!O,y$Nz3e@C&F\' {f>"jZRN~~r~?2t}jTuZ?b,'1Ndx{r,G!o4?,d{'4aDlIF90WSMy(gKo;o7IDmCkhN~J{lsX1S/$jiv7
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: aa c9 f8 a8 e8 4d 60 7d 6b 6a bf c9 42 b3 23 19 95 27 ba 73 b7 1c 23 b9 09 bb f6 99 bf 25 09 f5 c4 ff 00 1c 3f 94 14 72 f6 06 54 9e e8 6e e1 c1 3e e8 83 28 a1 1f 30 fc fc 74 1e ef 77 0e d4 a7 6e b8 dc 88 dd 07 5b 64 9d 3e f6 53 5c 38 d1 6a 8a 7d 79 62 0f 96 7a 9f 4c 12 ef 5f d8 8e 7c 99 df 06 ef 94 f5 65 24 4d e2 a4 04 d6 c3 ea 4d de 88 da 7d 71 32 cb a8 4d bf 1f 9b 8c e4 98 23 c6 c7 ad dd c5 64 f0 71 f2 bc d0 0a 09 04 56 ed 79 88 b0 a3 1a 65 c8 ee 4e 3e 38 22 16 7b 0a 67 d2 be f3 60 47 88 f7 1e 23 56 69 82 22 d9 d1 99 88 f2 4f 2b d6 55 25 fb 2e bf c1 1b 43 e9 cd db f9 b1 34 6b 47 af 2c 18 bb 1d b8 c0 7c b3 33 73 bb fc cc 50 c0 da 6b 8d 14 d7 82 06 4b bb 04 9e 5e 39 e0 02 87 7c 7c 78 a9 1d 14 3b 3d b9 19 7a a3 92 e4 e6 50 5d 38 47 24 11 d0 70 d0 14 27 ea Data Ascii: M`}kjB#'s#%?rTn>(0twn[d>S\8j}ybzL_\|e$MM}q2M#dqVyeN>8"{g`G#Vi"O+U%.C4kG,\|3sPkK^9\|\|x;=zP]8G$p'
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: b3 13 8e 9f ae 91 f4 95 36 6b 6a 87 d7 23 27 18 e2 8b 4f d5 8c 70 e8 de a1 62 22 0c a9 96 18 07 1f 04 e3 d8 89 b0 57 be 33 77 a4 7e 8e a8 ed a8 31 c7 b1 27 25 4f d4 b0 16 37 ac 44 4b 4a 43 6e 12 42 f6 7c cc d7 86 34 35 92 30 9c 3d 5e b8 3e 38 74 78 a6 c6 34 fd 24 d0 b0 2a d1 13 82 71 c5 f4 15 6c a9 3f 3f e9 06 89 da 5a 38 fc 15 2d d9 e4 a9 b8 8e 47 28 e8 48 58 d6 d6 b1 dd 45 b4 c1 89 26 5d 06 f1 8e e6 ee 24 08 e8 f5 8a 47 70 a6 08 fe 50 b1 0f aa 33 b3 29 f2 c9 c0 88 57 2c e9 a7 40 71 a6 49 b7 6e 7f 87 18 a7 db f3 a1 46 66 3c 3c 6b 3e 01 7c 97 13 26 bb d8 88 f3 ce f8 99 8f 09 a6 d1 8b 0e 3b 7e bd b4 53 c9 82 fd cb e2 69 c4 f9 6e e0 b7 da cb 02 4f 93 2c 28 59 49 8e 80 70 4e a6 a9 78 48 db 3f 59 a0 42 c5 75 c9 b7 39 c3 95 75 b8 da 2a 21 08 f4 fb c9 2c 14 ca Data Ascii: 6kj#'Opb"W3w~1'%O7DKJCnB\|450=^>8tx4$ql??Z8-G(HXE&]$GpP3)W,@qInFf<<k>\|&;~SinO,(YIpNxH?YBu9u!,
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 0a 1e 2b 0e 96 f0 6a 6c da d9 d5 93 c2 54 c6 aa 0d 3c c3 56 51 28 47 53 90 2a 91 15 38 c9 8f 62 4c 7b d1 1f 5f 93 94 69 1a 14 77 02 9d 1a 35 bd 89 c7 c1 13 69 ed d8 52 67 67 37 5e eb ca 5a ad 18 aa 96 3d 89 3e 0a 51 b4 7e 57 b8 2d 19 14 a9 6d 56 7b 70 f8 31 a7 6d f0 62 33 ea 96 fc e0 a1 cd 33 c7 28 6c b9 59 82 77 16 76 d5 8d 72 76 c7 12 f6 7c d7 a5 2b 09 f1 69 aa e9 cc 52 93 b4 5c 47 bb 89 b2 5a 75 2a b8 d8 c4 73 3c 14 ae f5 2d 36 06 c3 34 aa d9 3b 95 0a d5 9e ab 58 da f8 e8 da 3b 23 44 76 e3 e9 cf f3 23 e7 19 1a dd 11 2c 70 5d e1 64 54 ad c4 83 4c 98 7e bf 14 6e 3e 56 6e a9 32 71 89 c2 a9 61 2d f4 6e 49 ac 27 9f 9f aa d2 8c 41 4d e6 03 a1 2d 8b 72 43 f5 81 58 4e 31 e9 45 3d ab 23 25 c3 23 39 a1 ab d1 f8 1f 4d 0b 99 be e5 b8 9a 33 e5 3b 38 96 11 de bf 7e Data Ascii: +jlT<VQ(GS8bL{_iw5iRgg7^Z=>Q~W-mV{p1mb33(lYwvrv\|+iR\GZus<-64;X;#Dv#,p]dTL~n>Vn2qa-nI'AM-rCXN1E=#%#9M3;8~
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: c6 60 27 50 55 be 8a 76 cc c3 e7 77 73 ed 77 37 56 49 38 c9 b9 37 6f 42 1f 07 d2 08 59 d6 36 bb b3 85 7d f1 ee 56 76 c7 15 9b c2 87 ca 7f 39 1e 28 ee 92 08 1b 86 b6 7b 33 93 80 72 46 94 a7 e9 b6 75 2d e9 c9 d3 01 57 21 07 b7 38 e2 85 f0 74 69 8f a6 cd 6c 3e b6 3d bd 7a 8c 47 99 84 19 2a 46 36 42 06 da a1 a9 b9 1f 40 32 3d e1 3a 96 f1 8c 9d 78 d3 c8 38 cc 7c a4 28 76 76 d4 7d 36 2d c2 a4 9b c9 16 7a 10 b3 92 fe 70 27 52 34 fe 19 ac 78 bd 38 d5 d3 c9 9b 4c de f3 e6 56 94 6f 8a b1 e6 ec 4e a0 71 cd e1 d3 a3 7a 3c a2 f1 8a 6d c4 5d 9e a8 4e a4 70 b2 a0 58 35 2d 6d f6 b8 c6 a2 19 96 57 16 98 e7 dd c9 f0 c7 58 66 46 85 56 2a 40 b2 fe 16 70 1f b1 0f 31 0c f6 79 c6 6e 6c 34 e7 ef 47 31 a8 12 91 5c 01 74 e4 c7 b5 26 30 dd 53 b3 11 fd 81 7b 2a 75 85 48 45 89 e7 1c Data Ascii: `'PUvwsw7VI87oBY6}Vv9({3rFu-W!8til>=zGF6B@2=:x8\|(vv}6-zp'R4x8LVoNqz<m]NpX5-mWXfFV@p1ynl4G1\t&0S{*uHE
2024-11-24 12:19:57 UTC	16384	IN	Data Raw: 64 ba 1d dc 4a 06 e8 3f 15 11 7a 7c 64 23 5d c8 7c ea c7 f2 91 5f 39 a7 a7 7e 54 2d 16 74 a1 14 8c 82 17 1f 62 1a d6 2c 50 5f eb c2 8e aa d9 60 70 4e 31 12 e8 ba b2 6f 24 88 d1 f1 8c 7c 9b 44 0d f1 bf 56 51 75 30 6e 48 4e 38 67 20 c8 42 7a 11 64 23 d5 f5 8b 6a 43 70 04 e3 92 16 28 cb 36 f5 df 63 5e 02 0f 19 a0 48 91 d2 d9 17 18 d6 68 dc d6 8c 39 d4 ba fb d0 83 b3 a7 19 6e 14 bd 42 41 dc 9f e6 c2 3d 0f 86 25 0b 29 b7 46 46 b5 02 52 1d b3 90 7b 63 f2 25 84 6c ec 6b 1c b7 49 83 b7 fd 49 a0 8e bd 9b 4f c5 ab 71 42 eb 22 b6 37 bb 1c 6b a9 6e 39 d2 63 27 4a 10 bf 17 0f 8a 13 f8 47 ca 43 83 5d 3f d1 08 ed 13 af ed c2 85 08 c6 a4 7b ae 31 c1 9f 98 5c be cd 7d 12 60 7e f2 2f 6f ac 82 dc 2c 58 32 09 41 04 4d dc 73 b7 0c c6 47 cb 1b d6 27 21 51 90 71 1f 18 c8 31 ef Data Ascii: dJ?z\|d#]\|_9~T-tb,P_`pN1o$\|DVQu0nHN8g Bzd#jCp(6c^Hh9nBA=%)FFR{c%lkIIOqB"7kn9c'JGC]?{1\}`~/o,X2AMsG'!Qq1
2024-11-24 12:19:57 UTC	5779	IN	Data Raw: 91 d4 c0 d8 9f 64 32 6e c5 8f 63 a9 9e 18 e9 7e 98 6d ac 2a 06 d6 d7 8b 1d 13 e0 08 c2 9f c5 84 93 de 9e 5f a5 1c 96 5d 84 6b 3b ca a6 d2 cd 22 23 59 cd 6e f9 1a 7f 23 12 52 18 67 06 70 3f e6 3d 46 91 41 1a 75 14 9d 24 bf 42 49 c9 39 83 35 fd 0c 3d 1d 5f b3 19 b1 7e 70 23 53 9b 95 85 5a f7 79 d8 67 6e 56 81 b6 7f 42 cc e9 c1 3f d0 8a ac 8e 8a 09 50 3e 29 72 72 37 b6 2e 4f bd eb 27 f7 39 e1 1a 32 23 5c b1 63 df 88 1f 04 84 f2 22 9a be a9 92 53 31 19 dc aa be 6a ba 88 75 7a 9a c4 f8 97 45 49 9e 15 a5 6d 97 9d 1b 52 06 e3 7a 46 ad 4d 32 6b ba 12 5e 9a 4e 6b d3 f9 c2 4d 11 72 66 3d 47 9a 3d 0e 57 f3 2b 56 96 9f 6e 02 04 d2 0f 60 29 f6 39 bb df 47 4b 18 8f d6 15 03 3a 66 f7 04 29 8c 62 4f 39 2c 36 c9 d8 f7 a7 9f 1f 9b 84 27 67 ad 14 53 f9 76 46 86 86 d0 ee c6 Data Ascii: d2nc~m*_]k;"#Yn#Rgp?=FAu$BI95=_~p#SZygnVB?P>)rr7.O'92#\c"S1juzEImRzFM2k^NkMrf=G=W+Vn`)9GK:f)bO9,6'gSvF

Target ID:	0
Start time:	07:19:09
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:19:11
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2024,i,2013743561821100083,1166226205460231320,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:19:14
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sumbangan.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://sumbangan.com/	HTTP Parser: No favicon
Source: https://sumbangan.com/	HTTP Parser: No favicon
Source: https://sumbangan.com/	HTTP Parser: No favicon
Source: https://sumbangan.com/	HTTP Parser: No favicon
Source: https://sumbangan.com/	HTTP Parser: No favicon
Source: https://sumbangan.com/	HTTP Parser: No favicon

Source: global traffic	DNS traffic detected: DNS query: sumbangan.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: app-production-sumbangan-oss1.oss-ap-southeast-3.aliyuncs.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 2.20.68.201
Source: unknown	TCP traffic detected without corresponding DNS query: 2.20.68.201
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: chromecache_185.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_279.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ak:function(){e=qb()},zd:function(){d()}}};var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_279.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Dh:e,Bh:f,Ch:g,ji:k,ki:m,Re:n,Ib:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(TD(w,"iframe_api")\|\|TD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!KD&&RD(x[A],p.Re))return qc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr	String found in binary or memory: return b}GD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_315.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_315.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_315.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_185.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (__fb_err) {var __fb_i = new Image();__fb_i.crossOrigin = 'anonymous';__fb_i.dataset.testid = 'fbSDKErrorReport';__fb_i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+__fb_err.name+'","line":"'+(__fb_err.lineNumber\|\|__fb_err.line)+'","script":"'+(__fb_err.fileName\|\|__fb_err.sourceURL\|\|__fb_err.script\|\|"sdk.js")+'","stack":"'+(__fb_err.stackTrace\|\|__fb_err.stack)+'","revision":"1018453286","namespace":"FB","message":"'+__fb_err.message+'"}}');document.body.appendChild(__fb_i);} equals www.facebook.com (Facebook)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://sumbangan.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
http://sumbangan.com