Edit tour

Windows Analysis Report
https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20

Overview

General Information

Sample URL:	https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%2
Analysis ID:	1546665
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1976,i,4310585169220383811,17731307399520697066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:23:33.727596+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.16	49721	TCP
2024-11-01T12:24:11.165079+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.16	49743	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://mclimber.org/fishar	HTTP Parser: No favicon
Source: https://mclimber.org/fishar	HTTP Parser: No favicon
Source: https://mclimber.org/fishar/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49743 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.16:49721
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.16:49743

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WB8smfs3E6wMblS&MD=7GlabZBR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclim&oit=1&cp=5&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimb&oit=1&cp=6&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimbe&oit=1&cp=7&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimber&oit=1&cp=8&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /fishar HTTP/1.1Host: mclimber.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /htdocs_error/style.css HTTP/1.1Host: mclimber.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mclimber.org/fisharAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mclimber.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /htdocs_error/something-lost.png HTTP/1.1Host: mclimber.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mclimber.org/fisharAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /htdocs_error/something-lost.png HTTP/1.1Host: mclimber.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WB8smfs3E6wMblS&MD=7GlabZBR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mclimber.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mclimber.org/fisharAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-9Q6H0QETRF&gacid=1083010327.1730460249&gtm=45je4au0v9125959112za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=370783763 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mclimber.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /fishar/ HTTP/1.1Host: mclimber.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1; _ga_9Q6H0QETRF=GS1.2.1730460251.1.0.1730460251.60.0.0
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
Source: global traffic	HTTP traffic detected: GET /fishar/ HTTP/1.1Host: mclimber.orgConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1; _ga_9Q6H0QETRF=GS1.2.1730460251.1.1.1730460262.49.0.0
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Source: chromecache_78.1.dr, chromecache_83.1.dr

String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: mclimber.org
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 914sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: chrome-untrusted://new-tab-pageX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/htmllast-modified: Fri, 22 Sep 2023 22:22:12 GMTetag: "999-650e1394-9651062872b0aa99;;;"accept-ranges: bytescontent-length: 2457date: Fri, 01 Nov 2024 11:24:07 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/htmllast-modified: Fri, 22 Sep 2023 22:22:12 GMTetag: "999-650e1394-9651062872b0aa99;;;"accept-ranges: bytescontent-length: 2457date: Fri, 01 Nov 2024 11:24:11 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/htmllast-modified: Fri, 22 Sep 2023 22:22:12 GMTetag: "999-650e1394-9651062872b0aa99;;;"accept-ranges: bytescontent-length: 2457date: Fri, 01 Nov 2024 11:24:22 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecontent-type: text/htmllast-modified: Fri, 22 Sep 2023 22:22:12 GMTetag: "999-650e1394-9651062872b0aa99;;;"accept-ranges: bytescontent-length: 2457date: Fri, 01 Nov 2024 11:25:05 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: chromecache_76.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_77.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_87.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_87.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_83.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_87.1.dr, chromecache_77.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_87.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_87.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_87.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_92.1.dr, chromecache_88.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_76.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_92.1.dr, chromecache_88.1.dr, chromecache_95.1.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_77.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_87.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_87.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_85.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_87.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_92.1.dr, chromecache_88.1.dr, chromecache_95.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_83.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_87.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_87.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_83.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_81.1.dr, chromecache_85.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_77.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_77.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_77.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_78.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49743 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@23/51@20/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1976,i,4310585169220383811,17731307399520697066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1976,i,4310585169220383811,17731307399520697066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mclimber.org	195.35.38.103	true	false	unknown
plus.l.google.com	142.250.181.238	true	false	unknown
play.google.com	172.217.18.110	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
analytics.google.com	142.250.186.110	true	false	unknown
td.doubleclick.net	142.250.186.34	true	false	unknown
stats.g.doubleclick.net	66.102.1.157	true	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://mclimber.org/favicon.ico	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimb&oit=1&cp=6&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://mclimber.org/htdocs_error/style.css	false	unknown
https://www.google.com/async/newtab_promos	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://mclimber.org/fishar	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimber&oit=1&cp=8&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://play.google.com/log?format=json&hasfast=true	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false	unknown
https://mclimber.org/fishar/	false	unknown
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimbe&oit=1&cp=7&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclim&oit=1&cp=5&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://mclimber.org/htdocs_error/something-lost.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_78.1.dr, chromecache_83.1.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_77.1.dr	false	URL Reputation: safe	unknown
https://tagassistant.google.com/	chromecache_81.1.dr, chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_81.1.dr, chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_87.1.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_78.1.dr, chromecache_83.1.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_87.1.dr	false		unknown
https://www.google.com	chromecache_83.1.dr	false		unknown
https://www.google.com/ads/ga-audiences	chromecache_81.1.dr, chromecache_85.1.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_81.1.dr, chromecache_85.1.dr	false		unknown
https://td.doubleclick.net	chromecache_78.1.dr, chromecache_83.1.dr	false		unknown
https://www.merchant-center-analytics.goog	chromecache_78.1.dr, chromecache_83.1.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_76.1.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_76.1.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_87.1.dr, chromecache_77.1.dr	false	URL Reputation: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_83.1.dr	false		unknown
https://domains.google.com/suggest/flow	chromecache_87.1.dr	false	URL Reputation: safe	unknown
https://clients6.google.com	chromecache_87.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.238	plus.l.google.com	United States	15169	GOOGLEUS	false
66.102.1.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
195.35.38.103	mclimber.org	Germany	8359	MTSRU	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546665
Start date and time:	2024-11-01 12:22:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/51@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.186.174, 74.125.133.84, 34.104.35.123, 142.250.184.227, 216.58.206.42, 142.250.186.106, 142.250.185.202, 216.58.206.74, 142.250.185.106, 142.250.185.74, 172.217.23.106, 172.217.16.202, 142.250.185.138, 216.58.212.170, 142.250.186.138, 142.250.184.234, 216.58.212.138, 142.250.185.170, 142.250.186.74, 172.217.18.10, 142.250.184.206, 142.250.186.42, 142.250.185.163, 142.250.186.110, 142.250.185.238, 142.250.185.136, 142.250.185.232, 142.250.186.35, 142.250.186.46
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, encrypted-tbn0.gstatic.com, fonts.gstatic.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 10:23:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9819424540507624
Encrypted:	false
SSDEEP:	48:89dBQTh0UbhHAyidAKZdA1FehwiZUklqehHMy+3:8yvRmMy
MD5:	BFF69EA73A2A553F7D87CA3648B0285C
SHA1:	AB032EDC52C421EC6EF5C70F8A9AA98673ACA51E
SHA-256:	2965E27C43F8460895A5C7B492984DF3939107CB420F02A50DE35F83F48E8AB8
SHA-512:	C2DDBA86E73E68A2AD2C530882E95E955837704A9633579180DD52352BA568C546589F6DAF366BBCC7814848E3106277E0CFA99003C1F7373E1D25EB0AD59EA5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....h{vP,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.Z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 10:23:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9988571284542775
Encrypted:	false
SSDEEP:	48:8ldBQTh0UbhHAyidAKZdA1seh/iZUkAQkqehWMy+2:86vH9QBMy
MD5:	3AC1049D2EFCCDDCB8F650A3CC1D152D
SHA1:	E94F176A41080644FAA6BFD2B59917436937B34B
SHA-256:	604545A9E1B668317B394A08F514B03CA22D1760174F9C7E10FA9832D03186DB
SHA-512:	B2CD84D9E9A685E99508ED583E06E93B4AA8E823A22796BCF470672F0F63A35D1E9F7EE9A800558B091E9BBD10821362285DC1C22AE31275F5B1F9A5E4ECB4DF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....I.nvP,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.Z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008041054207116
Encrypted:	false
SSDEEP:	48:8ydBQTh0UbAHAyidAKZdA14meh7sFiZUkmgqeh7sgMy+BX:8/v8nqMy
MD5:	4AB593D55FAF13A4AC37A949DE6EBAC4
SHA1:	2733A01D27C46AF65BECD74AF49383D425B009C1
SHA-256:	65875CDEED83522693898E2F3F7ACDE4497D750C648DEB4946453ABAB797835A
SHA-512:	005D978E5EC6E8AF7621ED035D8E4C81FD70E283A5980CF6ED674A39A276BD6103C9AEF389436FF74EBE97691723E0AE97B833FF9D02BDCD09C451B6176A45F1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 10:23:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9967337674817918
Encrypted:	false
SSDEEP:	48:89dBQTh0UbhHAyidAKZdA1TehDiZUkwqehyMy+R:8yv0IMy
MD5:	16915517D97BA8BA95166110F98406E0
SHA1:	FC444E4321FBCED90CF285F35E21871855E4C14E
SHA-256:	9F23B62D8A02833D6180499EAFC23B93F926D3D91DF7E54FEBB2CBE84E1029EB
SHA-512:	E337FA63F8248F1B800657119DC2D46C6874193D035FB8B08134DDC8ED1C257F34B5B20CCE7AF8284D2FAA7E74971240563741F2FCA7A2C57F8435B06C8DEFF2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'.hvP,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.Z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 10:23:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9870278694689727
Encrypted:	false
SSDEEP:	48:89dBQTh0UbhHAyidAKZdA1dehBiZUk1W1qeh0My+C:8yv09UMy
MD5:	5AC482FD08681B85D02DA5457D4EE435
SHA1:	566E7D0890EC45A35F55EE5BFF1CF10887AC0638
SHA-256:	FB426FF1F5F2EC9438FAFF4070AA99BC5595AFC8967BDF9AA23088F1C016BAD8
SHA-512:	227A449A10B71A68958C655026BE5A8A4AA906B44E2616A6D8B2B82B3A9BC0992CC4526DB8E861B8D21AF4A3CFBFFDAAF23549029CEC511F53A521E8B79F3FDA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....'uvP,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.Z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 10:23:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9956270170146544
Encrypted:	false
SSDEEP:	48:8YdBQTh0UbhHAyidAKZdA1duTeehOuTbbiZUk5OjqehOuTbqMy+yT+:8NvGTfTbxWOvTbqMy7T
MD5:	4E332202124AB419BE312F28A61890AC
SHA1:	6E6EF8CDDAC3B1F13F07D2B80C031DFEB5463038
SHA-256:	69D985775682CF54AD290179902A6657440D11C782D11B364A4E2D204EF01466
SHA-512:	FCDC857CB6E5A516DCD9DB2F917DFBC7A311D1EDC33BC0ED2B0946C4B7925E5F1E6875D8B2AF9EA15E6D936ED42D729F7C2CA34EAC7804A10D7A1EE4374488BF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....^vP,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.Z....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.Z....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.Z..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.Z...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........mh.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	1820
Entropy (8bit):	7.706872417477562
Encrypted:	false
SSDEEP:	48:r9ZLvICfVcatsPegxxZiMcIgvqrA9WRZab:JZLPV9OeM8MPgvOA6Zab
MD5:	4104E66C5F8AA9D16E14ED1DA6BB1E6A
SHA1:	FC895AA1F3E39C19139116450A057873EEB82A1B
SHA-256:	97B3561FEE81D041A1CC086B10846F66EB05D29711A442FE6C587253CC423A90
SHA-512:	9E4B78F790B1B0A227BFB3A65E46CD8F47DA0A581D969622B918F1BD586544EF9CCF47460DD889C013437F4DAB23BBBBC3ABB35C313E0EFE86CFB2DE9141AB1A
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTQM8UBe3OiBcyImXi26vJKMoUWCd74Dq-oVQyffP1vo8hZhVhZ8kKK8xs&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@.."......................................./.........................!1A.."Qaq...2...B..3..............................!......................!.1.A.Qa2............?.R..4.i.>.Hs.8.)lvh.'}......G.R..S.....hP.$..=P.7W.q..%i........\|UTG.$Hu...B...=..1....BUf..%....k-.YH.D..<..s...P..?B.$z.. .J.I.pF...i.2u...ki..:o].G.qS!Q^,...5....T..?<.....v.0...E.~.........q.:.....8.~...D.S\|E..V.#.u.y5_.q.."Hq..-Z..RQ..@s..p..{$yg..a.?..\|............9..Mu...c...n;..?..$....lz..`..'QO'.....6...rz.s.e.b[.I[..5.(....J.dG\|..5>4..{.7.....<....%...i.....].}.d.,KO.wCl..WGt.T~9.....0s..,...#Aq..[.4b..I!$.h......H.#/w.Lt8..R.C.........u..V..IS.?.). ...q<.......j:..vA..{....2.~.-e.x.,ML...d.!.iaK.J........O._.)p.hT......x"....o.\|//..).._....#M..........gb..\|.8.&............}..V.}l9.........m(r.i....~..Z\w#.....N.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	178061
Entropy (8bit):	5.555305495625512
Encrypted:	false
SSDEEP:	3072:i7bpK2pOwPnpW+DsZDbnjuBv5Vjq3B30GSK20YOA2ZPnpm6UzDnI13o2Mn5Pz5R3:i7bzO6I+DsZDDjuBv5Vjq3B30GSXOA24
MD5:	2901E98725751AAF9E3A6DA8A0AE100F
SHA1:	9A03B9B58521464BEA5EFDB95898D7A4DE2D66C6
SHA-256:	783C8FCA9918286C64FDD9C6DF8BB841815E5F6BA7BA95424DF63EA1ACF01B2D
SHA-512:	21235956E9B45B0C78055C8862072DE63FB1971F6396945610AC925A3E9D2D9FFAEC996DF4A64B33BC57B0EF6CF185A68DAC17D9AD5E570277CDD2BB869C9EBD
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mTUNAFoITms.2019.O/rt=j/m=q_d,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu-nsZOrMYTmX5E4o0SDpwg5MUFYA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.kj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var lj,mj,oj,rj,uj,tj,nj,sj;lj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};mj=function(){_.Ka()};oj=function(){nj===void 0&&(nj=typeof WeakMap==="function"?lj(WeakMap):null);return nj};rj=function(a,b){(_.pj\|\|(_.pj=new nj)).set(a,b);(_.qj\|\|(_.qj=new nj)).set(b,a)};.uj=function(a){if(sj===void 0){const b=new tj([],{});sj=Array.prototype.concat.call([],b).length===1}sj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.vj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.wj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.xj=function(a,b){a===0&&(a=_.wj(a,b));return a\|1};_.yj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.zj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Dj=function(a,b,c,d,e,f,g){const h=a.ea;var k=!!(2&b);e=k?

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	287760
Entropy (8bit):	5.586122217458038
Encrypted:	false
SSDEEP:	6144:B9OGLgB4zoIA60nx0C8rT/L2CUZ9Or24AZd:D3c4zoIvmYA
MD5:	C90BB99C1777A4935ED84CDDA0503B38
SHA1:	8075674588E729F0267ED19A494E71473957F5A0
SHA-256:	5A928395AFCA417B18F18E99362DB95CF26F12508CB33622070780A8C4AD8C1E
SHA-512:	F81477CE1EA3A4E728228764759C8D387CC336B8A07B502579934E560E40866D54CB206B06D8F0AC787A4652A2EAD3BEA572D43FBA5EB15611CB8F1BA7AB7AB7
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":12},{"function":"__ogt_ip_mark","priority":7,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":14},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","hostinger\\.com"],"tag_id":15},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":16},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEm

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (810)
Category:	downloaded
Size (bytes):	815
Entropy (8bit):	5.128934181091911
Encrypted:	false
SSDEEP:	24:ArNcg4dLF7yYBHslgT9lCuABuP0+87HHHHHHHYqmffffffo:AJcg21ZKlgZ01BuM+8Eqmffffffo
MD5:	CFA43A76101D443D50A020CB33784450
SHA1:	99541BD652992C0ED391A92D1E410B1AAC7FB0BA
SHA-256:	4842781B225337A4C73121B876E693FBC02E0A09A4119A9E3D9292A132C694BC
SHA-512:	CD6BAF0CFA78EC80C968610382F2DD1883B726FC61550487CD3E2A30AEC531833F65C6C84A20CE5FC3ABD3C6038D593244CE155EC9A6A0A5536C181C47405B0D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["trick or treat locations nba 2k25","international paper mill georgetown sc","nintendo music app soundtracks","la clippers vs phoenix suns","winter forecast","terminus easter egg black ops 6","peanut the squirrel euthanized","boeing strike contract offer"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1252,1251,1250,1154,1153,1152,1151,1150],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 550, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	108225
Entropy (8bit):	7.985241028494235
Encrypted:	false
SSDEEP:	3072:zlAJRh5nvAcYdvEWTr7K5Z706GE/LhubOVaN:RuR0cYdvEWaS6V/LhwZ
MD5:	9E40B6A3D4ED68ED6CC346336F0EE822
SHA1:	77B89C06962AC1DE6513ADBC3468B62430530C26
SHA-256:	FA0483D6548B10C76A81EDC62798719BE4D3ACD8A6F40C19E2F824D751BA0F4E
SHA-512:	593426C48476FBE8D8B3C51A2F255C7043EFAB5B54D3707DAC46261586FC9622600F4BF98DC78A0D0103ED5049C2656871EFABD95877AB2D03D80849D0CC6CDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...&........S....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e68fff10-4b37-4e4f-966b-c21aa192aa7e" xmpMM:DocumentID="xmp.did:108DC4E3FA6C11E69E3390FFF2FEF690" xmpMM:InstanceID="xmp.iid:108DC4E2FA6C11E69E3390FFF2FEF690" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95b26102-a992-4e27-b0ac-a3a2b837aa8b" stRef:documentID="adobe:docid:photoshop:ad678573-2cd7-117a-afc0-87d4465d20e6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?.......IDATx....,.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	287760
Entropy (8bit):	5.586122217458038
Encrypted:	false
SSDEEP:	6144:B9OGLgB4zoIA60nx0C8rT/L2CUZ9Or24AZd:D3c4zoIvmYA
MD5:	C90BB99C1777A4935ED84CDDA0503B38
SHA1:	8075674588E729F0267ED19A494E71473957F5A0
SHA-256:	5A928395AFCA417B18F18E99362DB95CF26F12508CB33622070780A8C4AD8C1E
SHA-512:	F81477CE1EA3A4E728228764759C8D387CC336B8A07B502579934E560E40866D54CB206B06D8F0AC787A4652A2EAD3BEA572D43FBA5EB15611CB8F1BA7AB7AB7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-9Q6H0QETRF&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":12},{"function":"__ogt_ip_mark","priority":7,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":14},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","hostinger\\.com"],"tag_id":15},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":16},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEm

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (776)
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	5.129822553324191
Encrypted:	false
SSDEEP:	24:qJ8mNhpRBHslgT9lCuABuoB7HHHHHHHYqmffffffo:qHhpRKlgZ01BuSEqmffffffo
MD5:	01C5DFB43B776C18C85B570D520CFD85
SHA1:	9A384090FBCE4BC1F6355E09D5F67496F9585AAA
SHA-256:	F0D9493EAF9B1206B24D43BF5B3EC1C7A0B8951F588A8A16EF928E77738BD4FB
SHA-512:	358259662DA284E2C82FB2F1C81529156919FA7A294943D795108A87FE67CCCD4A9BC4874614736D1D81FCC393A4E7939F5F915CE1436ADF9F05D931128B3028
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["trick or treat locations nba 2k25","black friday deals walmart","air india flights cancelled","breeders cup 2024 races","winter forecast","daylight saving time clocks","scorpio new moon horoscope","apple earnings report"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133763
Entropy (8bit):	5.436631554686055
Encrypted:	false
SSDEEP:	3072:2Pavjxd0QniyZ+qQf4VBNQ0pqnvx7U+OUaKszQ:Eavv0yTVBNQ0p+vxI+ORQ
MD5:	E745F40530F99BD45EA570E7E43D87A6
SHA1:	E11F09F734FC3C2D8B12255B0FF77643081658C6
SHA-256:	CF78AAD6E524B6096387335D7D8F6973CD4409B91240DFA6754421EB8946D485
SHA-512:	B65C15305C0E60878EB1C5428F817701EDBE40DC37E5606463440EB9964219EFACE9FBC3035E0C086108BEEF41CF83B108145579503545580BED2A2964191270
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Od\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_jd gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	5.02115483997928
Encrypted:	false
SSDEEP:	48:HTr+ulzMhjTgBLkJ7VKhnAzjtM48vwKgLzSNPhzSku:zr+ulgjsBwJ7VKhKMYxLiPh+ku
MD5:	E53FDF76753EDCD8773AB17AE968BFD6
SHA1:	4BEA38CD83442080BDF51CD1DB206715F9198955
SHA-256:	3D70CE95EB1EB78620CC57FE1A6A479E6F2D70508BF813238E573863DF000D6E
SHA-512:	F168878F0D1047CE3775A511EE5CFFED3AFC7A47081304B4C884B6099DACE99A17E473B727F5AFCC87B0E0C1DF461439F821B2DBCF341F94B9C206E8487C7888
Malicious:	false
Reputation:	low
URL:	https://mclimber.org/fishar
Preview:	<!DOCTYPE html>.<html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#">..<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <style type="text/css">. @charset "UTF-8";. [ng\:cloak],. [ng-cloak],. [data-ng-cloak],. [x-ng-cloak],. .ng-cloak,. .x-ng-cloak,. .ng-hide:not(.ng-hide-animate) {. display: none !important;. }.. ng\:form {. display: block;. }.. .ng-animate-shim {. visibility: hidden;. }.. .ng-anchor {. position: absolute;. }. </style>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (338)
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	4.90134335349137
Encrypted:	false
SSDEEP:	6:VweI0aVYjIgVrTIgVc2BHsL2YriFGHLNjQ9kwGRVzSSNrwGd/ff0wWeXFELH/V:uX0aG0gNTIg62BHslriFuZs9kwuzSSN8
MD5:	7D4968A85A9C4301FFE34409A9BD223D
SHA1:	600D50282120FDBC04B75167D3F3355A96B45218
SHA-256:	98E996765F8C68EE629E28924401B941B177EEC6D8983EC61EDD1FD929F26275
SHA-512:	3491BA58C0608EBEE6E85120EFF032EC786BDB3DA3D01B67EB02A387D868CA03C7C0184EB007D1D07F9F316B822DC6288AEA5DB0D64AD6D4D670F991AE9E8FBF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimber&oit=1&cp=8&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["mclimber",["climber machine","climber marc","myclimb","climber library"],["","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,551,550],"google:suggestsubtypes":[[512,546],[512,546],[512,546],[512,546]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	58085
Entropy (8bit):	5.326897648007968
Encrypted:	false
SSDEEP:	384:+aOClrtSZvbqY490nVg3Of0wt32vSqY49NnSzdOhqqt5Iv0qY49HnQd+OWJ3tWN2:4HjMuOA8IgbX0CC1Uw/rVfQEL/
MD5:	8FA4157BAD1F1B7EA34251C7971FA917
SHA1:	5D14EF7DAF977B2533EB12FD17BFF5B8BEDF7B60
SHA-256:	200EA2792715456EA62F7DE0AB54444D6F417F183F61ECFB53BBFA78476194F9
SHA-512:	75FEF37AC57693FA450E6E472FF623A0F961A1EDF0F08B09E52191B967DF40D22851C02D1DE7F86B1EAFCD52581CD7AA4E7CD53831390C1C8625BF70D8143223
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1010)
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	5.546296094690439
Encrypted:	false
SSDEEP:	24:j7/mW9w7BHslghxQezrEoPCNeIHcXdfVkmQo8uZs0F7FAZimfffffff0uV:/SKlghxnQEwed9kmQfuZsEFjmffffff1
MD5:	6C1602B1B5281CD000AA63C4DA107AF7
SHA1:	D3725C1E866C43A386D93A838ACDFBEFF70828A6
SHA-256:	DE831A50CE2DE71EDF535CE2E852BEBADAFFF2AFA4E82E7FFF435E64C74988EA
SHA-512:	B71FF09CC71EB4A0D65D28F2CC216E237881DC0619D03874ACF151A877FCE2CD2F5E4E338600A486DE25DA6364BFAFFDB9974433E1389ECA4ACD0A0B32BE7424
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimb&oit=1&cp=6&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["mclimb",["climbing","climb","climbing texas","climbing userfornia","climb credit","climbing shoes","climbing gym","climb credit union","climbing hydrangea","climbzone"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{},{},{},{},{},{},{"google:entityinfo":"CgkvbS8wYnd2dHQSBVBsYW50MnRodHRwczovL2VuY3J5cHRlZC10Ym4wLmdzdGF0aWMuY29tL2ltYWdlcz9xPXRibjpBTmQ5R2NUUU04VUJlM09pQmN5SW1YaTI2dkpLTW9VV0NkNzREcS1vVlF5ZmZQMXZvOGhaaFZoWjhrS0s4eHMmcz0xMDoSQ2xpbWJpbmcgaHlkcmFuZ2VhSgcjNTA3NTJmUj5nc19zc3A9ZUp6ajR0VFAxVGRJS2k4cktURmc5QkpLenNuTVRjck1TMWZJcUV3cFNzeExUMDBFQUtXV0N1c3AN"},{}],"google:suggestrelevance":[601,600,557,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,10,433,457],[512,10,433],[512,650,402],[512,650,402],[512,10,433,131],[512,10,433],[512,10,433],[512,10,433,131],[512,10,433],[512,10]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","ENTITY","QUERY"],"google:verbatimre

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	5.02115483997928
Encrypted:	false
SSDEEP:	48:HTr+ulzMhjTgBLkJ7VKhnAzjtM48vwKgLzSNPhzSku:zr+ulgjsBwJ7VKhKMYxLiPh+ku
MD5:	E53FDF76753EDCD8773AB17AE968BFD6
SHA1:	4BEA38CD83442080BDF51CD1DB206715F9198955
SHA-256:	3D70CE95EB1EB78620CC57FE1A6A479E6F2D70508BF813238E573863DF000D6E
SHA-512:	F168878F0D1047CE3775A511EE5CFFED3AFC7A47081304B4C884B6099DACE99A17E473B727F5AFCC87B0E0C1DF461439F821B2DBCF341F94B9C206E8487C7888
Malicious:	false
Reputation:	low
URL:	https://mclimber.org/fishar/
Preview:	<!DOCTYPE html>.<html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#">..<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <style type="text/css">. @charset "UTF-8";. [ng\:cloak],. [ng-cloak],. [data-ng-cloak],. [x-ng-cloak],. .ng-cloak,. .x-ng-cloak,. .ng-hide:not(.ng-hide-animate) {. display: none !important;. }.. ng\:form {. display: block;. }.. .ng-animate-shim {. visibility: hidden;. }.. .ng-anchor {. position: absolute;. }. </style>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 550, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	108225
Entropy (8bit):	7.985241028494235
Encrypted:	false
SSDEEP:	3072:zlAJRh5nvAcYdvEWTr7K5Z706GE/LhubOVaN:RuR0cYdvEWaS6V/LhwZ
MD5:	9E40B6A3D4ED68ED6CC346336F0EE822
SHA1:	77B89C06962AC1DE6513ADBC3468B62430530C26
SHA-256:	FA0483D6548B10C76A81EDC62798719BE4D3ACD8A6F40C19E2F824D751BA0F4E
SHA-512:	593426C48476FBE8D8B3C51A2F255C7043EFAB5B54D3707DAC46261586FC9622600F4BF98DC78A0D0103ED5049C2656871EFABD95877AB2D03D80849D0CC6CDB
Malicious:	false
Reputation:	low
URL:	https://mclimber.org/htdocs_error/something-lost.png
Preview:	.PNG........IHDR...4...&........S....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e68fff10-4b37-4e4f-966b-c21aa192aa7e" xmpMM:DocumentID="xmp.did:108DC4E3FA6C11E69E3390FFF2FEF690" xmpMM:InstanceID="xmp.iid:108DC4E2FA6C11E69E3390FFF2FEF690" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95b26102-a992-4e27-b0ac-a3a2b837aa8b" stRef:documentID="adobe:docid:photoshop:ad678573-2cd7-117a-afc0-87d4465d20e6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?.......IDATx....,.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (355)
Category:	downloaded
Size (bytes):	2457
Entropy (8bit):	5.02115483997928
Encrypted:	false
SSDEEP:	48:HTr+ulzMhjTgBLkJ7VKhnAzjtM48vwKgLzSNPhzSku:zr+ulgjsBwJ7VKhKMYxLiPh+ku
MD5:	E53FDF76753EDCD8773AB17AE968BFD6
SHA1:	4BEA38CD83442080BDF51CD1DB206715F9198955
SHA-256:	3D70CE95EB1EB78620CC57FE1A6A479E6F2D70508BF813238E573863DF000D6E
SHA-512:	F168878F0D1047CE3775A511EE5CFFED3AFC7A47081304B4C884B6099DACE99A17E473B727F5AFCC87B0E0C1DF461439F821B2DBCF341F94B9C206E8487C7888
Malicious:	false
Reputation:	low
URL:	https://mclimber.org/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#">..<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <style type="text/css">. @charset "UTF-8";. [ng\:cloak],. [ng-cloak],. [data-ng-cloak],. [x-ng-cloak],. .ng-cloak,. .x-ng-cloak,. .ng-hide:not(.ng-hide-animate) {. display: none !important;. }.. ng\:form {. display: block;. }.. .ng-animate-shim {. visibility: hidden;. }.. .ng-anchor {. position: absolute;. }. </style>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-9Q6H0QETRF&gacid=1083010327.1730460249&gtm=45je4au0v9125959112za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=370783763
Preview:	<html></html>

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	4942
Entropy (8bit):	4.718961854398533
Encrypted:	false
SSDEEP:	96:Ea0H0+UNF4bESB8RFIP6G2rMnKRwPeBM8UOzT:DqMF4brGFIP6JrMnKRwPeBM8UOzT
MD5:	DBBDA15BB0123CBF9A6C6246DE9F8D78
SHA1:	1A8EB99795644E369CD19766FC5922717E586BBE
SHA-256:	9A0CA52CD2B9D09BED0EAC23E7FF741244D96225FA9AFAB1B680978C01AB85D3
SHA-512:	5E78B390E8734A9250C5AADACB69F80C9881F2331057DBFFFF85A00D1BF1F4B5B6E0CE1E5ED2A62D1BFE91A4C1C4CCD3E1DEEA3843BD8D6D21E6641181DEC556
Malicious:	false
Reputation:	low
URL:	https://mclimber.org/htdocs_error/style.css
Preview:	html {. width: 100%;. overflow-x: hidden;. height: 100%.}..body {. font-family: 'Open Sans', sans-serif;. color: #333;. height: 100%;.}....content {. padding: 65px 0 65px 0;. position: relative;.}...introduction {. margin-bottom: 45px;.}..p {. margin: 0 0 20px;. font-size: 18px;. line-height: 28px;. font-weight: 300;.}..p.large {. font-size: 20px;. line-height: 30px;. font-weight: 300;. margin-bottom: 55px;.}..span.underline {. text-decoration: underline;.}..a {. cursor: pointer;. -webkit-transition: all .3s ease-in-out;. -moz-transition: all .3s ease-in-out;. -ms-transition: all .3s ease-in-out;. -o-transition: all .3s ease-in-out;. transition: all .3s ease-in-out;.}..b {. font-weight: 700;.}..img {. max-width: 100%;.}...h1,..h2,..h3,..h4,..h5,..h6,.h1,.h2,.h3,.h4,.h5,.h6 {. font-family: inherit;. font-weight: 400!important;. line-height: 1.1;. color: inherit;.}..h1 {. font-size: 48px;.}..h2 {

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T12:23:33.727596+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.16	49721	TCP
2024-11-01T12:24:11.165079+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.16	49743	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 12:23:23.335237026 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.335278988 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:23.335336924 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.335509062 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.335521936 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:23.828716040 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.828762054 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:23.828852892 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.829062939 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.829077959 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:23.860990047 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.861030102 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:23.861109972 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.861260891 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:23.861273050 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.206419945 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.206669092 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.206692934 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.207686901 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.207748890 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.208646059 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.208704948 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.208817959 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.208823919 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.259211063 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.479937077 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.531224012 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.531249046 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.532831907 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.532936096 CET	443	49705	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.533005953 CET	49705	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.930589914 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.930856943 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.930879116 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.931857109 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.931925058 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.932248116 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.932300091 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.932391882 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.932396889 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.935147047 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.935348034 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.935389996 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.938956022 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.939070940 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.939273119 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.939353943 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.939471960 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:24.977222919 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.993202925 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:24.993223906 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.041205883 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.212678909 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220639944 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220698118 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220735073 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220746040 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.220769882 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220804930 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220813990 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.220819950 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.220861912 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.220911026 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.228693962 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.228749990 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.228756905 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.265197992 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.265217066 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.265983105 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.266125917 CET	443	49706	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.266196966 CET	49706	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.281197071 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.281203032 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.329210043 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.335879087 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.335931063 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.336065054 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.336070061 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.340320110 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.340368986 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.340373039 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.344604015 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.344654083 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.344659090 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.353409052 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.353465080 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.353470087 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.362250090 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.362303972 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.362308025 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.371037006 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.371099949 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.371107101 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.379640102 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.379693985 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.379703045 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.387465000 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.387533903 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.387540102 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.395292997 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.395345926 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.395350933 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.439302921 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.439308882 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451442003 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451476097 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451519012 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451603889 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.451603889 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.451611996 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451867104 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.451915026 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.451920033 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.455771923 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.455809116 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.455821037 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.455825090 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.455862045 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.460128069 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.463567019 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.463594913 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.463623047 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.463627100 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.463665009 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.470357895 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.476311922 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.476336956 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.476371050 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.476375103 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.476414919 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.482428074 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.488308907 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.488343000 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.488363981 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.488368034 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.488535881 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.494467020 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.500518084 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.500544071 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.500566959 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.500571012 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.500730991 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.506527901 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.512651920 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.512685061 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.512706995 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.512712002 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.512866020 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.518686056 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.525000095 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.525029898 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.525051117 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.525054932 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.525099039 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.530939102 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.536894083 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.536926031 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.536942959 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.536951065 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.537102938 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.542834997 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.548858881 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.548914909 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.548919916 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.566812992 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.566845894 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.566878080 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.566987991 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.566987991 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.566993952 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.567171097 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.567199945 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.567245007 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.567250013 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.567305088 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.572185993 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.577435970 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.577483892 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.577507019 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.577512980 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.577663898 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.582900047 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.588438034 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.588464975 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.588490009 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.588495016 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.588534117 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.593832016 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.597196102 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.597264051 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.597285032 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.597290993 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.597325087 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.600442886 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.603627920 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.603682995 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.603698969 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.603703976 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.603743076 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.606822968 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.610034943 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.610061884 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.610104084 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.610109091 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.610148907 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.613120079 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616419077 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616451979 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616476059 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.616482973 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616516113 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.616519928 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616631985 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:25.616667986 CET	443	49707	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:25.616740942 CET	49707	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:26.953502893 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:27.161403894 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:27.161442995 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:27.161528111 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:27.161758900 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:27.161770105 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:27.256223917 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:27.330919027 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:27.330950022 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:27.331002951 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:27.331208944 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:27.331219912 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:27.862315893 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:28.317586899 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:28.317859888 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:28.317884922 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:28.318907976 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:28.318974018 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:28.319257021 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:28.319348097 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:28.322832108 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.322988033 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.323004961 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.324024916 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.324084044 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.324877977 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.324934006 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.324992895 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.324999094 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.337408066 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:28.337440968 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:28.337516069 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:28.337692022 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:28.337707996 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:28.374239922 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.374809980 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:28.374831915 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:28.422310114 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:28.570034027 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570082903 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570112944 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570143938 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570180893 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570269108 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.570283890 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.570322990 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.570593119 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.578511953 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.578568935 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.578574896 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.630325079 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.630331993 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.678330898 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.688445091 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.688494921 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.688536882 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.688551903 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.689677000 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.689733028 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.689739943 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.694050074 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.694111109 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.694127083 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.712622881 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.712661028 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.712702036 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.712707043 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.712718010 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.712758064 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.720191956 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.720256090 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.720264912 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.729106903 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.729162931 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.729168892 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.737564087 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.737620115 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.737626076 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.745786905 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.745836020 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.745841026 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.790225029 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.790239096 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807463884 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807512045 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.807516098 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807526112 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807554960 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.807563066 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807610035 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.807642937 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.807647943 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.808182001 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.808212996 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.808214903 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.808223963 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.808257103 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.809329987 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.812855959 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.812902927 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.812932968 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.812946081 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.812988043 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.819530010 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.825916052 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.825965881 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.825972080 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.825980902 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.826014996 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.832091093 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.838596106 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.838627100 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.838654995 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.838668108 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.838711977 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.844075918 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.850150108 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.850181103 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.850203991 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.850215912 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.850250959 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.856182098 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.862267017 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.862302065 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.862323046 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.862337112 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.862377882 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.868305922 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.874382019 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.874417067 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.874433041 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.874445915 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.874480963 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.880301952 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.886338949 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.886367083 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.886385918 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.886399031 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.886439085 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.892373085 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.913475037 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.913547993 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.913564920 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925609112 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925642967 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925668955 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.925678015 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925702095 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925710917 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.925715923 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.925755978 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.925909996 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.926275969 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.926306963 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.926306963 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.926316023 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.926346064 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.926773071 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.931833982 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.931868076 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.931885958 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.931894064 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.931929111 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.937062025 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.942553043 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.942583084 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.942619085 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.942625046 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.942662954 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.945684910 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.995222092 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.995233059 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.995456934 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:28.995505095 CET	443	49714	142.250.181.238	192.168.2.16
Nov 1, 2024 12:23:28.995552063 CET	49714	443	192.168.2.16	142.250.181.238
Nov 1, 2024 12:23:29.077372074 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:29.296267033 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.296524048 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.296550989 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.297771931 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.297854900 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.300295115 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.300353050 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.301292896 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.301443100 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.301449060 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.301467896 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.301469088 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.345196962 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.345206022 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.393214941 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.585133076 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.632287025 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.632298946 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.633124113 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.633220911 CET	443	49715	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:29.633286953 CET	49715	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:29.955559969 CET	49689	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:30.769561052 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:30.769610882 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:30.769697905 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:30.769952059 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:30.769963980 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.485222101 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:31.633196115 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.633497000 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.633518934 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.633889914 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.633956909 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.634582043 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.634635925 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.634790897 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.634848118 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.634943008 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.634949923 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.634969950 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.675333977 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.677268028 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.941759109 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.996236086 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.996263027 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.997330904 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:31.997420073 CET	443	49719	172.217.18.110	192.168.2.16
Nov 1, 2024 12:23:31.997492075 CET	49719	443	192.168.2.16	172.217.18.110
Nov 1, 2024 12:23:32.643687963 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:32.643748045 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:32.643843889 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:32.645817041 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:32.645833969 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.321451902 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:33.321496964 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:33.321567059 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:33.322542906 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:33.322559118 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:33.410490990 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.410595894 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.419794083 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.419817924 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.420139074 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.462239027 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.476758957 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.523343086 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727004051 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727030039 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727036953 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727071047 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727102995 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727164030 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.727195978 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727216005 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.727243900 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.727267981 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727329016 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.727334023 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727505922 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.727547884 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.744748116 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.744781971 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:33.744795084 CET	49721	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:23:33.744801044 CET	443	49721	172.202.163.200	192.168.2.16
Nov 1, 2024 12:23:34.205054998 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.205127001 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.207684040 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.207691908 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.207925081 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.253036976 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.299331903 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.501075029 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.501132965 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.501184940 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.501251936 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.501267910 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.501276970 CET	49722	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.501281023 CET	443	49722	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.544236898 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.544275045 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:34.544354916 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.544611931 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:34.544622898 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.122526884 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:35.393416882 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.393497944 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.394742966 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.394750118 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.395175934 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.396152020 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.426234961 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:35.439330101 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.638607979 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.638714075 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.639435053 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.639456034 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.639456034 CET	49723	443	192.168.2.16	184.28.90.27
Nov 1, 2024 12:23:35.639468908 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:35.639476061 CET	443	49723	184.28.90.27	192.168.2.16
Nov 1, 2024 12:23:36.029308081 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:36.306507111 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:37.240235090 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:38.024554968 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:38.024615049 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:38.024697065 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:38.584645987 CET	49712	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:38.584677935 CET	443	49712	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:39.590513945 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:39.654263973 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:39.894258976 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:40.501261950 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:41.716259003 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:44.130289078 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:44.466295004 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:45.919272900 CET	49673	443	192.168.2.16	204.79.197.203
Nov 1, 2024 12:23:48.939361095 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:53.312789917 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.312832117 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:53.312936068 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.313256979 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.313266039 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:53.614911079 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.614959955 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:53.615073919 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.615324974 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:53.615336895 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.076291084 CET	49678	443	192.168.2.16	20.189.173.10
Nov 1, 2024 12:23:54.151597977 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.151966095 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.151981115 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.152286053 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.152661085 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.152717113 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.152823925 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.199331999 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.424429893 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.424479961 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.424549103 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.424560070 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.475284100 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.475291967 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.475430965 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.475456953 CET	443	49724	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.475514889 CET	49724	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.527087927 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.527321100 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.527338982 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.527674913 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.527961969 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.528022051 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.528079033 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.571335077 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.826702118 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:54.826741934 CET	443	49725	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:54.826807976 CET	49725	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:58.540297031 CET	49680	80	192.168.2.16	192.229.211.108
Nov 1, 2024 12:23:59.981735945 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:59.981789112 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:23:59.981859922 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:59.982125044 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:23:59.982136965 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.253396034 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.253469944 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.253634930 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.253833055 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.253851891 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.671892881 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.671945095 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.672156096 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.672358036 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.672379971 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.778404951 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.778458118 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.778565884 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.778810024 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.778825045 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.837876081 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.838171959 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.838185072 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.839221001 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.839386940 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.839637041 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.839694023 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.888454914 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.888464928 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:00.889061928 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:00.931329012 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.103502989 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.103768110 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.103796005 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.105228901 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.105295897 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.105552912 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.105631113 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.128644943 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.128709078 CET	443	49726	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.128765106 CET	49726	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.129281044 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.129292011 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.174309969 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.456304073 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.508322954 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.508353949 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.509118080 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.509166002 CET	443	49727	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.509221077 CET	49727	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.515822887 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.516041994 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.516061068 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.517110109 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.517184019 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.517473936 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.517538071 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.572309017 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.572321892 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.620321989 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.641330957 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.641613007 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.641640902 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.642652988 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.642720938 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.642997026 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.643062115 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.654187918 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.684315920 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.684343100 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.695329905 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.700920105 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.700973988 CET	443	49728	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:01.701034069 CET	49728	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.731390953 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.763978004 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:01.811359882 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.061153889 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.115288019 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.115303040 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.116230011 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.116287947 CET	443	49729	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.116348028 CET	49729	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.516767979 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.516803026 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.516870022 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.517102957 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.517116070 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.788068056 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.788103104 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.788181067 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.788394928 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.788408041 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.963490963 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.963526011 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:02.963606119 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.963790894 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:02.963809013 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.075709105 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.075752974 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.075862885 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.079154015 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.079168081 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.369967937 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.370270967 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.370309114 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.371351957 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.371423960 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.371682882 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.371743917 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.424380064 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.424387932 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.472381115 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.651530027 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.651901007 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.651921034 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.652251959 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.652580023 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.652650118 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.695437908 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.853756905 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.854039907 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.854054928 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.855063915 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.855165958 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.855480909 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.855537891 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.902462006 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.902472973 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.931806087 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.932140112 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.932161093 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.933233976 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.933372021 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.933602095 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.933662891 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:03.950372934 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.982290030 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:03.982304096 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:04.030312061 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:06.782773018 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.782830000 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:06.782908916 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.783238888 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.783277988 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:06.783337116 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.783557892 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.783577919 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:06.783786058 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:06.783802032 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.446410894 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.446758032 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.446788073 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.447807074 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.447885990 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.449004889 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.449068069 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.449218988 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.449227095 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.462071896 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.462423086 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.462436914 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.463882923 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.463948011 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.464307070 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.464382887 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.501389027 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.516359091 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.516366959 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.564416885 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.595922947 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.596118927 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.596173048 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.596215010 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.596364021 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.597651005 CET	49735	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.597676039 CET	443	49735	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.611552954 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.623917103 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:07.623949051 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:07.624021053 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:07.624274015 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:07.624289989 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:07.659332037 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.762490988 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.762681007 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.762691975 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.762749910 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.762761116 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.762811899 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.763467073 CET	49736	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.763484001 CET	443	49736	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.765145063 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.765189886 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:07.765289068 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.765548944 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:07.765563011 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.248856068 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.249253035 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.249285936 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.250967026 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.251049042 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.252274990 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.252366066 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.252490997 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.252500057 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.295378923 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.396641970 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.396806955 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.396903038 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.396986008 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.397005081 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.397051096 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.397058010 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.397232056 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.397301912 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.397309065 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.397399902 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.397449970 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.397458076 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.435647964 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.436021090 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.436057091 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.437164068 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.437470913 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.437592030 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.437597036 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.437648058 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.438324928 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.438334942 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.485304117 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.485321999 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.514799118 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.514892101 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.514933109 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.514945030 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.514960051 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.515108109 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.515397072 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.515481949 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.515518904 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.515528917 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.515537977 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.515577078 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.516062021 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.516140938 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.516180038 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.516186953 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.516194105 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.516257048 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.516263008 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517014980 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517065048 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.517071009 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517107964 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517149925 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517154932 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.517163038 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517208099 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.517214060 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517893076 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.517946005 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.517952919 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.565310001 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.583389044 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.629465103 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.634454012 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.634634972 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.634694099 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.634705067 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.634793043 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.634857893 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.634865046 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.634973049 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635037899 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.635044098 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635128975 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635202885 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.635210037 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635344982 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635384083 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.635390043 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635736942 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635793924 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.635799885 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.635840893 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.636300087 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.636363029 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.636497974 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.636545897 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.636686087 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.636743069 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.637202024 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.637264967 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.637294054 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.637351036 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.638041973 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.638104916 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.638149023 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.638222933 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.638943911 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.639008999 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.639040947 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.639096022 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.639743090 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.639806032 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.720374107 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720403910 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720441103 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720463037 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720484972 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720612049 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.720612049 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.720628977 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720639944 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.720690012 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.722331047 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.722351074 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.722389936 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.722393990 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.722409010 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.722424030 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.722448111 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.722470045 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.753371000 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.753443956 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.753506899 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.753571033 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.753606081 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.753667116 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.753694057 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.753746033 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754257917 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.754326105 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754348040 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.754407883 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754512072 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.754556894 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754565954 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.754622936 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754654884 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.754659891 CET	443	49737	104.18.11.207	192.168.2.16
Nov 1, 2024 12:24:08.754710913 CET	49737	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:24:08.817687035 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.817733049 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.817846060 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.817879915 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.817981958 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.819293976 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.819351912 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.819363117 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.819377899 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.819410086 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.819427967 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.820296049 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.820339918 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.820365906 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.820374012 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.820396900 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.820414066 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.865529060 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.865572929 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.865658045 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.865695000 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.865761042 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.934362888 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.934438944 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.934467077 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.934480906 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.934526920 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.934741974 CET	443	49739	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.934770107 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.934823990 CET	49739	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.979772091 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.979809999 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:08.979871035 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.980139971 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:08.980154991 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.620699883 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.620949030 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.620965958 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.622471094 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.622530937 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.622895002 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.622977018 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.623017073 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.665430069 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.665442944 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.713316917 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.766838074 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.808371067 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.808396101 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.855412006 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.882262945 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882285118 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882299900 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882338047 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882356882 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882395983 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.882411957 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.882504940 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.883409023 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883426905 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883443117 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883469105 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.883483887 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883493900 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.883503914 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883529902 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.883533955 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.883554935 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.935318947 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.997586012 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.997606993 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.997622967 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.997653008 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.997699022 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.997730017 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.997747898 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.997790098 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.999190092 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.999207973 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.999249935 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.999260902 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.999265909 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.999288082 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.999304056 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:09.999349117 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:09.999829054 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.000031948 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.000072002 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.000102043 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.000113010 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.000125885 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.000150919 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.003002882 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.003042936 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.003071070 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.003077984 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.003102064 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.003112078 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.104043007 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.104094028 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:10.104176998 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.104638100 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.104654074 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:10.112732887 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.112768888 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.112804890 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.112819910 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.112833977 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.112859964 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.112890959 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.113038063 CET	49741	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.113049984 CET	443	49741	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.420902014 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.420919895 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.421000957 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.421233892 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:10.421248913 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:10.897274971 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:10.897363901 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.898956060 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.898964882 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:10.899197102 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:10.900509119 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:10.947329044 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.069210052 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.069516897 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.069546938 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.069897890 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.070220947 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.070286036 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.070460081 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.115330935 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.163439035 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.163465023 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.163551092 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.163556099 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.163594007 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.163618088 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.163650990 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.164865971 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.164925098 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.164942980 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.164968014 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.164980888 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.165000916 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.165025949 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.165923119 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.165937901 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.165952921 CET	49743	443	192.168.2.16	172.202.163.200
Nov 1, 2024 12:24:11.165956974 CET	443	49743	172.202.163.200	192.168.2.16
Nov 1, 2024 12:24:11.217824936 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.217972040 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.218034983 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:11.218031883 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.218079090 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.218653917 CET	49746	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:11.218669891 CET	443	49746	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:12.215481043 CET	49697	80	192.168.2.16	2.19.126.137
Nov 1, 2024 12:24:12.215648890 CET	49699	80	192.168.2.16	2.19.126.137
Nov 1, 2024 12:24:12.220866919 CET	80	49697	2.19.126.137	192.168.2.16
Nov 1, 2024 12:24:12.220994949 CET	49697	80	192.168.2.16	2.19.126.137
Nov 1, 2024 12:24:12.221270084 CET	80	49699	2.19.126.137	192.168.2.16
Nov 1, 2024 12:24:12.221360922 CET	49699	80	192.168.2.16	2.19.126.137
Nov 1, 2024 12:24:13.304045916 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:13.304069996 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:13.304117918 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:13.304366112 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:13.304379940 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:13.309612989 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:13.309628963 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:13.309699059 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:13.309884071 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:13.309895039 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:13.364377975 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.364511967 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.364635944 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.643625975 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.643688917 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.643739939 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.671180010 CET	49731	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.671197891 CET	443	49731	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.671238899 CET	49732	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.671264887 CET	443	49732	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.671370983 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.719332933 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.838362932 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.838419914 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.838557959 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.838582993 CET	49733	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.838603020 CET	443	49733	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:13.838797092 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:13.879343987 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.103673935 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.103754997 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.103809118 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.103967905 CET	49734	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.103986979 CET	443	49734	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.104435921 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.104468107 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.104542971 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.104784966 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.104799032 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.143450975 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.143678904 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.143688917 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.144689083 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.144763947 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.145874023 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.145936012 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.146025896 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.146037102 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.186780930 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.186985970 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.186996937 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.188066959 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.188138962 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.188894987 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.188967943 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.189045906 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.189053059 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.196321964 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.244345903 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.385351896 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.385858059 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.385919094 CET	443	49751	66.102.1.157	192.168.2.16
Nov 1, 2024 12:24:14.385981083 CET	49751	443	192.168.2.16	66.102.1.157
Nov 1, 2024 12:24:14.462441921 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.515336037 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.515343904 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.515588045 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.515638113 CET	443	49752	142.250.186.34	192.168.2.16
Nov 1, 2024 12:24:14.515691042 CET	49752	443	192.168.2.16	142.250.186.34
Nov 1, 2024 12:24:14.963957071 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.965826035 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.965842009 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.966203928 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.966537952 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:14.966614008 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:14.966649055 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:15.009388924 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:15.009398937 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:15.185643911 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:15.185735941 CET	443	49753	142.250.186.132	192.168.2.16
Nov 1, 2024 12:24:15.185817003 CET	49753	443	192.168.2.16	142.250.186.132
Nov 1, 2024 12:24:21.955576897 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.955677032 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:21.955703974 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.955749035 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:21.955806971 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.955846071 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.956008911 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.956042051 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:21.956161976 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:21.956176043 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.608165979 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.608503103 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.608534098 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.608884096 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.609266043 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.609328032 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.609416008 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.623876095 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.624219894 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.624242067 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.624629974 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.625030041 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.625097036 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.651361942 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.680350065 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.758219004 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.758264065 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.758366108 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.758392096 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.758498907 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:22.758550882 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.759140015 CET	49754	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:24:22.759164095 CET	443	49754	195.35.38.103	192.168.2.16
Nov 1, 2024 12:24:27.236597061 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:27.236651897 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:27.236740112 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:27.237051010 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:27.237063885 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.315303087 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.315651894 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:28.315696001 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.316576004 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.316657066 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:28.316956997 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:28.317020893 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.357388020 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:28.357409954 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:28.405386925 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:38.126863956 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:38.126931906 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:24:38.127018929 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:38.596071959 CET	49759	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:24:38.596154928 CET	443	49759	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:00.905719995 CET	49698	443	192.168.2.16	20.190.159.75
Nov 1, 2024 12:25:00.911005020 CET	443	49698	20.190.159.75	192.168.2.16
Nov 1, 2024 12:25:00.911128044 CET	49698	443	192.168.2.16	20.190.159.75
Nov 1, 2024 12:25:00.921685934 CET	49700	80	192.168.2.16	192.229.221.95
Nov 1, 2024 12:25:00.926949978 CET	80	49700	192.229.221.95	192.168.2.16
Nov 1, 2024 12:25:00.927041054 CET	49700	80	192.168.2.16	192.229.221.95
Nov 1, 2024 12:25:04.550843000 CET	49701	443	192.168.2.16	20.190.159.75
Nov 1, 2024 12:25:04.555969954 CET	443	49701	20.190.159.75	192.168.2.16
Nov 1, 2024 12:25:04.556112051 CET	49701	443	192.168.2.16	20.190.159.75
Nov 1, 2024 12:25:04.714288950 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:04.714333057 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:04.714540958 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:04.714783907 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:04.714797974 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.580251932 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.580647945 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.580668926 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.581127882 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.581461906 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.581547976 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.581624985 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.627335072 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.881812096 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.881901026 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.881959915 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.881989956 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.882006884 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.882065058 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.882179022 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.882186890 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.882231951 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.882246017 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.886164904 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.886212111 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.886224031 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.886233091 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.886282921 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.890510082 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.890667915 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.890712023 CET	443	49762	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:05.890779018 CET	49762	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:05.919367075 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:05.919955969 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:05.919987917 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:05.920083046 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:05.920269012 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:05.920300961 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:05.920368910 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:05.920706987 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:05.920722008 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:05.920929909 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:05.920948029 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:05.963336945 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.066570997 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.066651106 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.066698074 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.066807032 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:06.066807032 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:06.067598104 CET	49755	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:06.067609072 CET	443	49755	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.535299063 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:06.535926104 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:06.535965919 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:06.537209988 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:06.537691116 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:06.537878036 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:06.589270115 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.589667082 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:06.589678049 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.590858936 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.591278076 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:06.591470003 CET	443	49763	195.35.38.103	192.168.2.16
Nov 1, 2024 12:25:06.593533993 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:06.641655922 CET	49763	443	192.168.2.16	195.35.38.103
Nov 1, 2024 12:25:11.766196012 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:11.766247988 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:11.766350985 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:11.766602993 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:11.766629934 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.622672081 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.623017073 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.623043060 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.624078989 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.624207973 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.624497890 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.624561071 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.624623060 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.667337894 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.674550056 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.674570084 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.722573042 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.896907091 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.946516991 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.946561098 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.948117018 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:12.948174000 CET	443	49768	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:12.948268890 CET	49768	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:21.412683964 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:21.412858963 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:21.413017035 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:22.590473890 CET	49764	443	192.168.2.16	104.18.11.207
Nov 1, 2024 12:25:22.590497017 CET	443	49764	104.18.11.207	192.168.2.16
Nov 1, 2024 12:25:27.283437014 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:27.283463001 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:27.283545017 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:27.283766031 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:27.283777952 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.129889011 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.134115934 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:28.134149075 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.135127068 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.135194063 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:28.135471106 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:28.135529041 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.177510023 CET	49770	443	192.168.2.16	142.250.184.196
Nov 1, 2024 12:25:28.177520037 CET	443	49770	142.250.184.196	192.168.2.16
Nov 1, 2024 12:25:28.225610018 CET	49770	443	192.168.2.16	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 12:23:22.475506067 CET	53	54639	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:22.482040882 CET	53	49739	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:23.327331066 CET	53475	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:23.327589035 CET	55562	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:23.334443092 CET	53	53475	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:23.334458113 CET	53	55562	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:23.768748999 CET	53	53957	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:27.321746111 CET	50805	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:27.322072029 CET	53617	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:27.328231096 CET	53	51165	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:27.330050945 CET	53	50805	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:27.330595016 CET	53	53617	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:28.329807043 CET	63712	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:28.329936981 CET	64382	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:23:28.336961985 CET	53	63712	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:28.337094069 CET	53	64382	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:40.844780922 CET	53	54525	1.1.1.1	192.168.2.16
Nov 1, 2024 12:23:59.892057896 CET	53	52942	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:01.518383026 CET	53	55230	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:06.728914976 CET	55362	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:06.729129076 CET	62394	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:06.771416903 CET	53	62394	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:06.782103062 CET	53	55362	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:07.615998983 CET	59912	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:07.616272926 CET	52191	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:07.622932911 CET	53	52191	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:07.622986078 CET	53	59912	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:07.623895884 CET	53	62824	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:08.937791109 CET	50097	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:08.937922955 CET	58003	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:08.971632004 CET	53	50097	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:09.089589119 CET	53	58003	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:10.396724939 CET	53	57646	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:11.587924004 CET	53	56484	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.273952961 CET	53	50459	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.296082020 CET	64085	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.296216965 CET	50796	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.296823978 CET	53577	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.296976089 CET	56873	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.302258015 CET	54971	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.302529097 CET	61992	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:13.302953005 CET	53	64085	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.303423882 CET	53	53577	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.303502083 CET	53	50796	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.303725958 CET	53	56873	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.309140921 CET	53	54971	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:13.309182882 CET	53	61992	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:22.299148083 CET	53	56199	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:22.424851894 CET	53	55993	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:27.227366924 CET	54994	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:27.227550983 CET	51425	53	192.168.2.16	1.1.1.1
Nov 1, 2024 12:24:27.234399080 CET	53	54994	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:27.234416008 CET	53	51425	1.1.1.1	192.168.2.16
Nov 1, 2024 12:24:31.286273003 CET	138	138	192.168.2.16	192.168.2.255
Nov 1, 2024 12:24:51.605310917 CET	53	63750	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 1, 2024 12:24:09.089711905 CET	192.168.2.16	1.1.1.1	c233	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 12:23:23.327331066 CET	192.168.2.16	1.1.1.1	0x327c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:23:23.327589035 CET	192.168.2.16	1.1.1.1	0x2e5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 12:23:27.321746111 CET	192.168.2.16	1.1.1.1	0xfa85	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:23:27.322072029 CET	192.168.2.16	1.1.1.1	0x1c42	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 1, 2024 12:23:28.329807043 CET	192.168.2.16	1.1.1.1	0x248	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:23:28.329936981 CET	192.168.2.16	1.1.1.1	0xec27	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 1, 2024 12:24:06.728914976 CET	192.168.2.16	1.1.1.1	0x51a7	Standard query (0)	mclimber.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:06.729129076 CET	192.168.2.16	1.1.1.1	0x29cc	Standard query (0)	mclimber.org	65	IN (0x0001)	false
Nov 1, 2024 12:24:07.615998983 CET	192.168.2.16	1.1.1.1	0xe6d9	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:07.616272926 CET	192.168.2.16	1.1.1.1	0x69b2	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Nov 1, 2024 12:24:08.937791109 CET	192.168.2.16	1.1.1.1	0x8d8	Standard query (0)	mclimber.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:08.937922955 CET	192.168.2.16	1.1.1.1	0xef26	Standard query (0)	mclimber.org	65	IN (0x0001)	false
Nov 1, 2024 12:24:13.296082020 CET	192.168.2.16	1.1.1.1	0x201f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.296216965 CET	192.168.2.16	1.1.1.1	0x56d0	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 1, 2024 12:24:13.296823978 CET	192.168.2.16	1.1.1.1	0xd0df	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.296976089 CET	192.168.2.16	1.1.1.1	0x4541	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 12:24:13.302258015 CET	192.168.2.16	1.1.1.1	0x4382	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.302529097 CET	192.168.2.16	1.1.1.1	0x4ed5	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 12:24:27.227366924 CET	192.168.2.16	1.1.1.1	0xbe1e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:27.227550983 CET	192.168.2.16	1.1.1.1	0x5999	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 12:23:23.334443092 CET	1.1.1.1	192.168.2.16	0x327c	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:23:23.334458113 CET	1.1.1.1	192.168.2.16	0x2e5e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 12:23:27.330050945 CET	1.1.1.1	192.168.2.16	0xfa85	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:23:27.330050945 CET	1.1.1.1	192.168.2.16	0xfa85	No error (0)	plus.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:23:27.330595016 CET	1.1.1.1	192.168.2.16	0x1c42	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:23:28.336961985 CET	1.1.1.1	192.168.2.16	0x248	No error (0)	play.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:06.782103062 CET	1.1.1.1	192.168.2.16	0x51a7	No error (0)	mclimber.org		195.35.38.103	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:07.622932911 CET	1.1.1.1	192.168.2.16	0x69b2	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Nov 1, 2024 12:24:07.622986078 CET	1.1.1.1	192.168.2.16	0xe6d9	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:07.622986078 CET	1.1.1.1	192.168.2.16	0xe6d9	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:08.971632004 CET	1.1.1.1	192.168.2.16	0x8d8	No error (0)	mclimber.org		195.35.38.103	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.302953005 CET	1.1.1.1	192.168.2.16	0x201f	No error (0)	analytics.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.303423882 CET	1.1.1.1	192.168.2.16	0xd0df	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.303423882 CET	1.1.1.1	192.168.2.16	0xd0df	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.303423882 CET	1.1.1.1	192.168.2.16	0xd0df	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.303423882 CET	1.1.1.1	192.168.2.16	0xd0df	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:13.303502083 CET	1.1.1.1	192.168.2.16	0x56d0	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:24:13.309140921 CET	1.1.1.1	192.168.2.16	0x4382	No error (0)	td.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:27.234399080 CET	1.1.1.1	192.168.2.16	0xbe1e	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:24:27.234416008 CET	1.1.1.1	192.168.2.16	0x5999	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

apis.google.com

play.google.com

slscr.update.microsoft.com

fs.microsoft.com

mclimber.org

https:

maxcdn.bootstrapcdn.com

stats.g.doubleclick.net

td.doubleclick.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:24 UTC	627	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:23:24 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:23:24 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xFTq2sMgT0eJaBAGyo0pYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:24 UTC	112	IN	Data Raw: 33 32 66 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 72 69 63 6b 20 6f 72 20 74 72 65 61 74 20 6c 6f 63 61 74 69 6f 6e 73 20 6e 62 61 20 32 6b 32 35 22 2c 22 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 70 61 70 65 72 20 6d 69 6c 6c 20 67 65 6f 72 67 65 74 6f 77 6e 20 73 63 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 6d 75 73 69 63 20 61 70 70 20 Data Ascii: 32f)]}'["",["trick or treat locations nba 2k25","international paper mill georgetown sc","nintendo music app
2024-11-01 11:23:24 UTC	710	IN	Data Raw: 73 6f 75 6e 64 74 72 61 63 6b 73 22 2c 22 6c 61 20 63 6c 69 70 70 65 72 73 20 76 73 20 70 68 6f 65 6e 69 78 20 73 75 6e 73 22 2c 22 77 69 6e 74 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 74 65 72 6d 69 6e 75 73 20 65 61 73 74 65 72 20 65 67 67 20 62 6c 61 63 6b 20 6f 70 73 20 36 22 2c 22 70 65 61 6e 75 74 20 74 68 65 20 73 71 75 69 72 72 65 6c 20 65 75 74 68 61 6e 69 7a 65 64 22 2c 22 62 6f 65 69 6e 67 20 73 74 72 69 6b 65 20 63 6f 6e 74 72 61 63 74 20 6f 66 66 65 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 Data Ascii: soundtracks","la clippers vs phoenix suns","winter forecast","terminus easter egg black ops 6","peanut the squirrel euthanized","boeing strike contract offer"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo"
2024-11-01 11:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:24 UTC	530	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:23:25 UTC	1042	IN	HTTP/1.1 200 OK Version: 691307345 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Fri, 01 Nov 2024 11:23:25 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:25 UTC	336	IN	Data Raw: 32 32 34 30 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 50 65 20 67 62 5f 70 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 2240)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 20 67 62 5f 6e 64 20 67 62 5f 45 64 20 67 62 5f 6b 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 71 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 Data Ascii: gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u00
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 74 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 Data Ascii: 03c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_vd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_td\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_v
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 Data Ascii: vg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 Data Ascii: 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 38 33 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 Data Ascii: 2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700283,3700949,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 59 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 59 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 68 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 5b 57 64 28 5c 22 64 61 74 61 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 57 64 28 5c 22 6d 61 69 6c 74 6f 5c Data Ascii: globalThis.trustedTypes;_.Yd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Zd\u003dnew _.Yd(\"about:invalid#zClosurez\");_.Vd\u003dclass{constructor(a){this.hh\u003da}};_.$d\u003d[Wd(\"data\"),Wd(\"http\"),Wd(\"https\"),Wd(\"mailto\
2024-11-01 11:23:25 UTC	172	IN	Data Raw: 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 6f 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 29 7b 6c 65 74 20 63 2c 64 3b 62 5c 75 30 30 33 64 28 64 5c 75 30 30 33 64 28 63 5c 75 30 30 33 64 5c 22 64 6f 63 75 6d 65 6e 74 5c 22 69 6e 20 62 3f 62 2e 64 6f 63 75 6d 65 6e 74 3a 62 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 60 24 7b 61 7d 5b 6e 6f 6e 63 65 5d 0d 0a Data Ascii: ;return a};_.oe\u003dfunction(a,b\u003ddocument){let c,d;b\u003d(d\u003d(c\u003d\"document\"in b?b.document:b).querySelector)\u003d\u003dnull?void 0:d.call(c,`${a}[nonce]
2024-11-01 11:23:25 UTC	449	IN	Data Raw: 31 62 61 0d 0a 60 29 3b 72 65 74 75 72 6e 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 5c 22 5c 22 3a 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 22 6e 6f 6e 63 65 5c 22 29 7c 7c 5c 22 5c 22 7d 3b 5c 6e 5f 2e 70 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 5c 75 30 30 33 64 5f 2e 54 61 28 61 29 3b 72 65 74 75 72 6e 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 61 72 72 61 79 5c 22 7c 7c 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6f 62 6a 65 63 74 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 7d 3b 5f 2e 71 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 Data Ascii: 1ba`);return b\u003d\u003dnull?\"\":b.nonce\|\|b.getAttribute(\"nonce\")\|\|\"\"};\n_.pe\u003dfunction(a){var b\u003d_.Ta(a);return b\u003d\u003d\"array\"\|\|b\u003d\u003d\"object\"\u0026\u0026typeof a.length\u003d\u003d\"number\"};_.qe\u003dfunction(a,b,c){r
2024-11-01 11:23:25 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 7d 3b 5f 2e 73 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 72 65 74 75 72 6e 20 5f 2e 42 62 28 5f 2e 53 28 61 2c 62 29 2c 63 29 7d 3b 5f 2e 75 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 62 2c 30 29 5c 75 30 30 33 64 5c 75 30 30 33 64 30 7d 3b 65 65 5c 75 30 30 33 64 5f 2e 58 64 3b 5f 2e 69 65 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 2b 5c 22 5c 22 7d 7d 3b 6c 65 5c 75 30 30 33 64 2f 5e 5c 5c 73 2a 28 3f 21 6a 61 76 61 73 63 72 69 70 74 3a 29 28 3f 3a 5b 5c 5c Data Ascii: 8000};_.se\u003dfunction(a,b,c\u003d0){return _.Bb(_.S(a,b),c)};_.ue\u003dfunction(a,b){return a.lastIndexOf(b,0)\u003d\u003d0};ee\u003d_.Xd;_.ie\u003dclass{constructor(a){this.i\u003da}toString(){return this.i+\"\"}};le\u003d/^\\s*(?!javascript:)(?:[\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:24 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:23:25 UTC	957	IN	HTTP/1.1 200 OK Version: 691307345 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Fri, 01 Nov 2024 11:23:25 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:25 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-11-01 11:23:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49714	142.250.181.238	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:28 UTC	737	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:23:28 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 15:39:31 GMT Expires: Thu, 30 Oct 2025 15:39:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 157437 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 11:23:28 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 Data Ascii: ototype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)ret
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 Data Ascii: var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.a
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 Data Ascii: =function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),rejec
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e Data Ascii: .promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=fun
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 Data Ascii: ror("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));f
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 Data Ascii: ar h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 Data Ascii: te=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();thi
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 Data Ascii: ype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)
2024-11-01 11:23:28 UTC	1378	IN	Data Raw: 62 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 Data Ascii: b+9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49715	172.217.18.110	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:29 UTC	722	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:23:29 UTC	914	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 34 36 30 32 30 35 39 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1730460205994",null,null,null,
2024-11-01 11:23:29 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=avolAe5La6jqOYQ__hTK7vDp4TbxlbSZVWJePrF-qiV2efeGcZuwVlqAkejzgTkn3Jet0fuop-bNMZhxFVbsdRN4_MP3f4jUHwQy0RQEIsqo0JQHV2PI9nZ8KidET0s6LMgrpwmLidSUsd9up5wasBmzDIJ_Tslf40TZxNQhn-XEFCvxU38; expires=Sat, 03-May-2025 11:23:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 01 Nov 2024 11:23:29 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 01 Nov 2024 11:23:29 GMT Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:29 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-01 11:23:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49719	172.217.18.110	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:31 UTC	919	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 919 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=avolAe5La6jqOYQ__hTK7vDp4TbxlbSZVWJePrF-qiV2efeGcZuwVlqAkejzgTkn3Jet0fuop-bNMZhxFVbsdRN4_MP3f4jUHwQy0RQEIsqo0JQHV2PI9nZ8KidET0s6LMgrpwmLidSUsd9up5wasBmzDIJ_Tslf40TZxNQhn-XEFCvxU38
2024-11-01 11:23:31 UTC	919	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 30 34 36 30 32 30 38 34 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1730460208445",null,null,null,
2024-11-01 11:23:31 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M; expires=Sat, 03-May-2025 11:23:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 01 Nov 2024 11:23:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 01 Nov 2024 11:23:31 GMT Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-11-01 11:23:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49721	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:33 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WB8smfs3E6wMblS&MD=7GlabZBR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-01 11:23:33 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: aacc6f1c-170f-4f1b-a20e-fbb70833e2f3 MS-RequestId: b17d56b8-60f8-453f-aafb-dd71dec8986b MS-CV: BE/sHbhGp0qG3wOm.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 01 Nov 2024 11:23:32 GMT Connection: close Content-Length: 24490
2024-11-01 11:23:33 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-01 11:23:33 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 11:23:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=105728 Date: Fri, 01 Nov 2024 11:23:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 11:23:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=105784 Date: Fri, 01 Nov 2024 11:23:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-01 11:23:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49724	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:54 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:23:54 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:23:54 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8Of-B3syacBq3-RqY0efSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:54 UTC	112	IN	Data Raw: 39 36 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 66 6c 20 6a 65 74 73 20 74 65 78 61 6e 73 22 2c 22 61 6d 64 20 72 79 7a 65 6e 20 37 20 39 38 30 30 78 33 64 20 70 72 6f 63 65 73 73 6f 72 22 2c 22 63 68 69 70 6f 74 6c 65 20 62 6f 6f 72 69 74 6f 20 64 65 61 6c 22 2c 22 74 72 6f 70 69 63 61 6c 20 73 74 6f 72 6d 73 20 68 75 72 72 69 63 Data Ascii: 965)]}'["",["nfl jets texans","amd ryzen 7 9800x3d processor","chipotle boorito deal","tropical storms hurric
2024-11-01 11:23:54 UTC	1378	IN	Data Raw: 61 6e 65 73 22 2c 22 74 68 65 20 72 75 73 68 20 6c 79 72 69 63 73 20 6c 69 6c 20 75 7a 69 20 76 65 72 74 22 2c 22 68 6f 6e 67 20 6b 6f 6e 67 20 63 72 69 63 6b 65 74 20 73 69 78 65 73 22 2c 22 70 65 74 65 72 20 73 74 65 72 6e 20 70 65 6c 6f 74 6f 6e 20 63 65 6f 22 2c 22 74 65 72 6d 69 6e 75 73 20 65 61 73 74 65 72 20 65 67 67 20 62 6c 61 63 6b 20 6f 70 73 20 36 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 Data Ascii: anes","the rush lyrics lil uzi vert","hong kong cricket sixes","peter stern peloton ceo","terminus easter egg black ops 6"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZX
2024-11-01 11:23:54 UTC	922	IN	Data Raw: 34 51 6c 4e 6d 61 6b 39 57 4e 6a 6b 77 64 44 4e 46 59 31 63 30 61 33 4a 73 64 56 42 48 52 55 64 52 4d 33 6c 61 56 44 6b 77 52 33 46 4c 63 30 4e 6d 52 6d 51 32 65 6e 64 6c 4f 54 4d 79 4f 57 68 77 4e 47 39 56 61 53 74 78 62 6c 67 7a 57 54 56 42 62 43 38 34 51 56 70 6f 56 48 52 35 51 6a 52 72 65 55 31 48 4e 44 4a 6d 64 45 6c 76 51 6c 42 4b 55 6e 70 76 4e 6d 4e 31 4c 7a 46 45 57 47 68 74 4e 6d 4a 78 65 56 4e 48 56 6c 42 78 55 6e 46 54 5a 54 4e 5a 55 6d 77 31 52 31 46 75 64 33 4a 48 56 44 64 4a 53 6e 4e 78 53 30 35 42 56 6e 55 77 63 57 70 75 4e 6d 31 69 54 6e 64 50 4e 44 52 7a 52 48 56 4a 54 31 52 49 52 6d 64 6b 65 48 68 5a 51 56 5a 4d 5a 45 56 71 4d 6d 56 77 4e 32 55 31 4d 55 46 34 4e 30 4e 35 62 32 74 6a 51 30 4a 54 63 47 68 57 59 6c 42 36 5a 6e 6c 54 59 6e Data Ascii: 4QlNmak9WNjkwdDNFY1c0a3JsdVBHRUdRM3laVDkwR3FLc0NmRmQ2endlOTMyOWhwNG9VaStxblgzWTVBbC84QVpoVHR5QjRreU1HNDJmdElvQlBKUnpvNmN1LzFEWGhtNmJxeVNHVlBxUnFTZTNZUmw1R1Fud3JHVDdJSnNxS05BVnUwcWpuNm1iTndPNDRzRHVJT1RIRmdkeHhZQVZMZEVqMmVwN2U1MUF4N0N5b2tjQ0JTcGhWYlB6ZnlTYn
2024-11-01 11:23:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49725	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:23:54 UTC	831	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:23:54 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:23:54 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hd2xGglrSt5cPI8M3OKD8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:23:54 UTC	112	IN	Data Raw: 39 36 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 66 6c 20 6a 65 74 73 20 74 65 78 61 6e 73 22 2c 22 61 6d 64 20 72 79 7a 65 6e 20 37 20 39 38 30 30 78 33 64 20 70 72 6f 63 65 73 73 6f 72 22 2c 22 63 68 69 70 6f 74 6c 65 20 62 6f 6f 72 69 74 6f 20 64 65 61 6c 22 2c 22 74 72 6f 70 69 63 61 6c 20 73 74 6f 72 6d 73 20 68 75 72 72 69 63 Data Ascii: 965)]}'["",["nfl jets texans","amd ryzen 7 9800x3d processor","chipotle boorito deal","tropical storms hurric
2024-11-01 11:23:54 UTC	1378	IN	Data Raw: 61 6e 65 73 22 2c 22 74 68 65 20 72 75 73 68 20 6c 79 72 69 63 73 20 6c 69 6c 20 75 7a 69 20 76 65 72 74 22 2c 22 68 6f 6e 67 20 6b 6f 6e 67 20 63 72 69 63 6b 65 74 20 73 69 78 65 73 22 2c 22 70 65 74 65 72 20 73 74 65 72 6e 20 70 65 6c 6f 74 6f 6e 20 63 65 6f 22 2c 22 74 65 72 6d 69 6e 75 73 20 65 61 73 74 65 72 20 65 67 67 20 62 6c 61 63 6b 20 6f 70 73 20 36 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 Data Ascii: anes","the rush lyrics lil uzi vert","hong kong cricket sixes","peter stern peloton ceo","terminus easter egg black ops 6"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49726	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:00 UTC	856	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclim&oit=1&cp=5&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49727	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:01 UTC	857	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimb&oit=1&cp=6&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:24:01 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:24:01 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MQxkBMmsgRCT-N4hTJ31oQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:24:01 UTC	112	IN	Data Raw: 33 66 37 0d 0a 29 5d 7d 27 0a 5b 22 6d 63 6c 69 6d 62 22 2c 5b 22 63 6c 69 6d 62 69 6e 67 22 2c 22 63 6c 69 6d 62 22 2c 22 63 6c 69 6d 62 69 6e 67 20 74 65 78 61 73 22 2c 22 63 6c 69 6d 62 69 6e 67 20 63 61 6c 69 66 6f 72 6e 69 61 22 2c 22 63 6c 69 6d 62 20 63 72 65 64 69 74 22 2c 22 63 6c 69 6d 62 69 6e 67 20 73 68 6f 65 73 22 2c 22 Data Ascii: 3f7)]}'["mclimb",["climbing","climb","climbing texas","climbing userfornia","climb credit","climbing shoes","
2024-11-01 11:24:01 UTC	910	IN	Data Raw: 63 6c 69 6d 62 69 6e 67 20 67 79 6d 22 2c 22 63 6c 69 6d 62 20 63 72 65 64 69 74 20 75 6e 69 6f 6e 22 2c 22 63 6c 69 6d 62 69 6e 67 20 68 79 64 72 61 6e 67 65 61 22 2c 22 63 6c 69 6d 62 7a 6f 6e 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 6b 76 62 53 38 77 59 6e 64 32 64 48 51 53 42 56 42 73 59 57 35 30 4d 6e 52 6f 64 48 52 77 63 7a Data Ascii: climbing gym","climb credit union","climbing hydrangea","climbzone"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{},{},{},{},{},{},{"google:entityinfo":"CgkvbS8wYnd2dHQSBVBsYW50MnRodHRwcz
2024-11-01 11:24:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49728	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:01 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimbe&oit=1&cp=7&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49729	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:01 UTC	859	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=mclimber&oit=1&cp=8&pgcl=7&gs_rn=42&psi=bKgronxzrWYrwhBx&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:24:02 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:24:01 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uj2ym2InJ9xtqg9xHP7HSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:24:02 UTC	112	IN	Data Raw: 31 35 37 0d 0a 29 5d 7d 27 0a 5b 22 6d 63 6c 69 6d 62 65 72 22 2c 5b 22 63 6c 69 6d 62 65 72 20 6d 61 63 68 69 6e 65 22 2c 22 63 6c 69 6d 62 65 72 20 6d 61 72 63 22 2c 22 6d 79 63 6c 69 6d 62 22 2c 22 63 6c 69 6d 62 65 72 20 6c 69 62 72 61 72 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 Data Ascii: 157)]}'["mclimber",["climber machine","climber marc","myclimb","climber library"],["","","",""],[],{"google:c
2024-11-01 11:24:02 UTC	238	IN	Data Raw: 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 2c 35 35 31 2c 35 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 31 32 2c 35 34 36 5d 2c 5b 35 31 32 2c 35 34 36 5d 2c 5b 35 31 32 2c 35 34 36 5d 2c 5b 35 31 32 2c 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 31 33 30 30 7d 5d 0d 0a Data Ascii: lientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,551,550],"google:suggestsubtypes":[[512,546],[512,546],[512,546],[512,546]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]
2024-11-01 11:24:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49735	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:07 UTC	661	OUT	GET /fishar HTTP/1.1 Host: mclimber.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:07 UTC	472	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html last-modified: Fri, 22 Sep 2023 22:22:12 GMT etag: "999-650e1394-9651062872b0aa99;;;" accept-ranges: bytes content-length: 2457 date: Fri, 01 Nov 2024 11:24:07 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:07 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# si
2024-11-01 11:24:07 UTC	1561	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 6c 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6f 70 73 2c 20 6c 6f 6f 6b 73 20 6c 69 Data Ascii: bsolute; } </style> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49736	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:07 UTC	551	OUT	GET /htdocs_error/style.css HTTP/1.1 Host: mclimber.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mclimber.org/fishar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:07 UTC	544	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Fri, 08 Nov 2024 11:24:07 GMT content-type: text/css last-modified: Fri, 22 Sep 2023 22:22:29 GMT etag: "134e-650e13a5-c50d1ed4d33818c6;;;" accept-ranges: bytes content-length: 4942 date: Fri, 01 Nov 2024 11:24:07 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:07 UTC	824	IN	Data Raw: 68 74 6d 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 0a 2e 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 35 70 78 20 30 20 36 35 70 78 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: html { width: 100%; overflow-x: hidden; height: 100%}body { font-family: 'Open Sans', sans-serif; color: #333; height: 100%;}.content { padding: 65px 0 65px 0; position: relative;}.introduction { margin-bottom
2024-11-01 11:24:07 UTC	4118	IN	Data Raw: 2e 68 34 2c 0a 2e 68 35 2c 0a 2e 68 36 2c 0a 68 31 2c 0a 68 32 2c 0a 68 33 2c 0a 68 34 2c 0a 68 35 2c 0a 68 36 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 7d 0a 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 35 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 0a 7d 0a 0a 68 32 2e 73 65 Data Ascii: .h4,.h5,.h6,h1,h2,h3,h4,h5,h6 { font-family: inherit; font-weight: 400!important; line-height: 1.1; color: inherit;}h1 { font-size: 48px;}h2 { text-align: center; margin-bottom: 35px; font-size: 36px;}h2.se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49737	104.18.11.207	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:08 UTC	570	OUT	GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mclimber.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:08 UTC	951	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:24:08 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"ec3bb52a00e176a7181d454dffaea219" Last-Modified: Mon, 25 Jan 2021 22:03:59 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/18/2024 14:03:32 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 30f70849cf83ba6449f32883e8cbe87b CDN-Cache: HIT CF-Cache-Status: HIT Age: 531285 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8dbb8447f8ca345c-DFW alt-svc: h3=":443"; ma=86400
2024-11-01 11:24:08 UTC	418	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7bfb/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f Data Ascii: ,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{bo
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: height:auto}input[type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 Data Ascii: 1px solid #ddd!important}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 65 30 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 Data Ascii: e010"}.glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphi
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 Data Ascii: on-bookmark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-heig
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: hicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{conte
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: }.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{conte
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f Data Ascii: d:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:befo
2024-11-01 11:24:08 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: e{content:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49739	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:08 UTC	606	OUT	GET /htdocs_error/something-lost.png HTTP/1.1 Host: mclimber.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mclimber.org/fishar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:08 UTC	548	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Fri, 08 Nov 2024 11:24:08 GMT content-type: image/png last-modified: Fri, 22 Sep 2023 22:22:20 GMT etag: "1a6c1-650e139c-dfffb536e0945831;;;" accept-ranges: bytes content-length: 108225 date: Fri, 01 Nov 2024 11:24:08 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 02 26 08 06 00 00 00 85 1b cf 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR4&StEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 59 06 21 76 be a2 8b f3 b6 08 15 f4 48 45 e6 52 4c 22 d4 1e 6f 61 16 3d 8f c9 5f 98 c7 e2 95 ca 74 22 4c 2e 25 cc d0 bc 17 2a 49 28 bc d9 9b 22 61 cb c8 4c fb 3d ed 30 44 5d 11 9c 38 5c 51 24 e8 6d 7f 8a 37 c9 a3 79 12 ad 8c d4 b3 cf a5 b1 f3 5a 9a f9 69 6a d4 90 8a 9a 2f 0a aa 2c c1 29 16 4e 80 a0 54 81 f0 40 5d 33 a7 2f c9 bc 0a 1a f4 21 6b 3a 50 57 03 31 c6 bf ef c7 27 f7 e3 f3 6f 70 fb 51 91 cf 97 1d b9 21 92 f3 af c1 7a 72 68 1b e5 e7 90 60 c9 0e 1c 76 11 d0 0e 12 b1 54 10 a0 f9 f1 38 06 34 05 01 9a db 96 87 bf f5 08 02 b0 72 1a 13 1a 06 83 71 5b e3 47 e1 d6 72 fe 93 55 f5 d3 d8 7e e1 f4 f2 19 53 49 7d e4 43 65 22 22 d3 7a 2e 8c 21 27 04 1a 97 32 a7 f2 1f 86 a8 98 c5 50 51 7b 75 c8 4e 28 d0 60 bb 7e a3 84 1b 37 0b 18 8f 72 d8 d8 94 30 c1 c7 2c 77 a1 Data Ascii: Y!vHERL"oa=_t"L.%*I("aL=0D]8\Q$m7yZij/,)NT@]3/!k:PW1'opQ!zrh`vT84rq[GrU~SI}Ce""z.!'2PQ{uN(`~7r0,w
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 30 88 11 9d 66 8b f6 7c 26 d1 26 a7 9b cc 41 2d 42 ad 52 d2 38 c8 d1 78 07 86 75 27 07 0e 7a fa c1 95 be 52 4e 10 23 83 84 3e 5e 50 2f 3b fa 58 a3 71 90 81 19 be b0 9e bb 5e 46 bd 6f a4 63 1e 1d ae f8 69 61 01 28 13 23 9a de 7e 67 e6 9a 5c 1c 52 06 64 6a 80 24 9a 47 a7 6d 2d eb 7a 51 cd 71 6f 56 cb f4 e7 e2 fc b5 42 32 0d 99 ca d9 f2 ab d1 88 66 c1 20 ad 3f de d1 ba d0 4b b2 0e 32 8d 55 ab 45 a8 32 fc e1 74 00 da 5d 97 cd 41 d4 a5 71 39 ad 39 cf 18 b3 a2 1d 84 b5 2b fe 50 7b a4 02 a4 ce 3e 37 c1 5e 79 9c bd 76 2a 76 41 73 c5 52 f6 3d 47 88 c8 4c f8 a0 66 96 b5 93 fe e7 2e 67 1b dc 86 85 90 40 ed 59 f6 59 a4 65 1e 63 07 f4 14 b6 bd 5d ac 0d fb db f9 9c 00 a6 8c 19 40 63 cc d8 aa da 83 e7 d9 f1 8e b1 76 3b 6b 7f ca da 3b 01 c0 54 2b 9e 4d eb 00 0a 6c 7e 6a Data Ascii: 0f\|&&A-BR8xu'zRN#>^P/;Xq^Focia(#~g\Rdj$Gm-zQqoVB2f ?K2UE2t]Aq99+P{>7^yv*vAsR=GLf.g@YYec]@cv;k;T+Ml~j
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 30 53 13 22 1b 6e 6e bd 16 22 69 d9 a8 e6 af 8e 21 cd 12 f6 e5 e4 d8 8f 2d 5c 03 24 fc 2e f8 64 00 32 c8 4c db 5e 52 bb 47 7f fd 59 b9 5c 4f ae 3f e3 7a 74 db 1c cc f8 d8 9b 01 98 12 6b 8f 12 9f 8a 3b de 44 a0 63 52 cd 0c a0 31 66 6c a3 82 1a 24 07 f8 fd 65 b8 4c bc 6e 66 c6 2d 9b c1 5c 23 bb e6 c6 6d 66 10 d6 c0 fe e2 2f fe 02 9e fd ec 67 c3 a3 8f 3e ba e4 6d e0 77 31 fd 0c b7 75 b6 cc ae 6e f7 9d a6 48 d9 9c c4 84 04 55 80 87 4a ef a7 ff 2c 5a ec eb e3 63 15 b8 78 d7 08 57 b7 57 83 13 aa 70 74 f3 2f 82 20 88 b8 68 e7 08 df 57 bc 7f a2 61 24 84 1f 77 46 11 7f d4 cf c8 a2 62 f6 f4 7e 95 8a 16 8f 4e 21 b0 a2 39 d5 e9 65 5d 9c 34 d0 e4 81 9a 4e c7 81 a3 c7 66 61 df 63 a7 e1 fb 3f 3a 02 df f9 c1 21 78 e8 d1 33 ac 9d 82 47 0f 4c c2 fd 0f 9d e0 7a 3d b8 95 9a Data Ascii: 0S"nn"i!-\$.d2L^RGY\O?ztk;DcR1fl$eLnf-\#mf/g>mw1unHUJ,ZcxWWpt/ hWa$wFb~N!9e]4Nfac?:!x3GLz=
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 19 8a 65 5f b1 cf 9b 53 b9 f9 2a 88 b9 9e c0 63 fb 21 3e 3d 98 fd c6 88 6e aa a9 a1 09 cd 7c c7 75 68 97 a1 7d 70 be 1c f0 98 33 90 29 90 ae 31 bb 70 cd 77 1e 85 a3 4e 58 0a c7 9c b0 6c de ce c1 86 f5 a3 62 1e 3a 0d 22 20 d4 e4 92 6c e5 ea 11 38 f2 d8 25 b0 f6 a8 c5 70 38 da d2 15 83 30 3c 52 80 c1 a1 82 58 77 7a aa 02 93 13 15 d8 b7 67 5a 44 7a 9e 47 7b ee 99 fd b0 7b fb 44 b7 a6 a5 6c b6 f1 b6 ac 2c 08 40 11 98 0a 5f 04 55 7b 18 09 cd b0 20 37 d1 36 ea 3c 95 bc 44 48 0e 28 49 ce f1 c2 09 67 de fb 5c f2 f8 b9 f7 4f 44 d1 89 87 2c 84 79 e1 04 ee 3d 67 21 5d 72 53 d1 82 75 9f 20 57 7b e9 60 15 8c b2 5b d3 43 b5 35 16 0f 6b 40 28 52 34 d0 57 04 65 90 ab dd 5f a3 dc d5 a6 e6 b5 a2 39 11 06 12 1c b2 1d 38 fc ee bc 50 64 67 23 3e dd 28 7d c8 74 c9 0c d5 8d 1a Data Ascii: e_S*c!>=n\|uh}p3)1pwNXlb:" l8%p80<RXwzgZDzG{{Dl,@_U{ 76<DH(Ig\OD,y=g!]rSu W{`[C5k@(R4We_98Pdg#>(}t
2024-11-01 11:24:08 UTC	16384	IN	Data Raw: 60 68 15 94 2b 93 50 2c 8f 89 86 9c bf bc fa 21 78 d3 9f be 18 0a 7d 9d fd 0a 5a 77 d3 7a b8 f7 37 cf 74 64 db b7 df f8 24 bc ed 3d 67 c3 82 85 03 ad 33 75 87 c3 65 94 6a 56 ee 6c cf a4 e2 54 05 49 cd b3 70 d6 ab 8e 8b 2c ff ee d7 d7 b5 2c 96 50 db 77 cb 23 a1 a9 cc e9 eb dc 30 e1 b8 4d 5b cc 2b 4e 3c ca ee 0b e5 98 0d bf ee 25 24 36 7e 54 c6 2f 80 67 29 8e 2e 77 42 a7 3c d0 f5 15 4d b5 d6 ab 9b 7b 02 24 0a f6 23 8f b2 a3 ac 20 0d 75 49 0e 40 26 d1 01 d5 d8 7a 48 74 80 7a d3 94 ed 65 48 6a 16 c3 a0 f9 1c 44 04 01 e2 59 71 7e 1d 0a 67 b5 e9 6c 53 82 00 d9 b8 65 96 e2 b3 f8 f8 c4 b8 53 f6 c3 a4 b9 62 75 c9 9b 16 04 d0 98 45 df c1 7a 0a 34 e6 3a 1c 93 31 d3 ac f6 eb 99 98 59 f4 15 86 45 1a 1a 3d 8e 1f 98 86 5b 7e fd 78 47 f7 b7 7f 74 12 be f9 1f b7 74 6c fb Data Ascii: `h+P,!x}Zwz7td$=g3uejVlTIp,,Pw#0M[+N<%$6~T/g).wB<M{$# uI@&zHtzeHjDYq~glSeSbuEz4:1YE=[~xGttl
2024-11-01 11:24:08 UTC	9921	IN	Data Raw: 7f 7e ff c1 c1 9b 84 98 99 a5 87 21 10 e8 48 87 b3 25 55 41 9e 9b 89 09 e9 9b 80 4b 14 51 b5 49 00 0f 47 d2 d2 10 80 d6 8b cb bd 7e 40 15 a7 97 4a 3d 91 d3 62 46 25 aa 9e 45 db cc b1 d7 9b 80 a6 51 e4 a4 a5 09 a8 2b 72 9a 31 1d e8 93 26 a0 00 82 06 00 60 b1 45 8c 75 62 9c d8 ee 27 96 d9 14 53 d6 11 db dc 20 c6 ab c6 46 97 15 43 8b 3d 45 fe 63 b0 8c 55 27 23 1f d3 c8 2f 9b 74 4f 93 43 4e 59 93 c2 26 9f 1b c2 74 b4 3e 83 b1 ca ce e1 a1 e2 0f 97 2d de f7 95 fb 36 1c 76 ff fe 83 39 1c 14 f5 84 00 33 16 07 6b 65 1c 23 00 b5 89 66 20 70 53 4d 01 dc 80 cd 54 82 34 f5 8c 30 9b 11 b7 3d 24 86 59 1d 47 b5 a3 97 4a b3 19 15 9d 60 d2 39 64 d5 9b 22 46 31 8b e5 db dc 04 94 1a a9 c7 d1 09 09 cd 54 35 d6 0e 81 a3 5b 07 9a 80 a6 b7 09 28 80 a0 01 00 a8 fc bc dd 82 a6 52 Data Ascii: ~!H%UAKQIG~@J=bF%EQ+r1&`Eub'S FC=EcU'#/tOCNY&t>-6v93ke#f pSMT40=$YGJ`9d"F1T5[(R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49741	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:09 UTC	367	OUT	GET /htdocs_error/something-lost.png HTTP/1.1 Host: mclimber.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:09 UTC	548	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Fri, 08 Nov 2024 11:24:09 GMT content-type: image/png last-modified: Fri, 22 Sep 2023 22:22:20 GMT etag: "1a6c1-650e139c-dfffb536e0945831;;;" accept-ranges: bytes content-length: 108225 date: Fri, 01 Nov 2024 11:24:09 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:09 UTC	820	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 02 26 08 06 00 00 00 85 1b cf 53 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR4&StEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-11-01 11:24:09 UTC	14994	IN	Data Raw: 30 61 63 2d 61 33 61 32 62 38 33 37 61 61 38 62 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 61 64 36 37 38 35 37 33 2d 32 63 64 37 2d 31 31 37 61 2d 61 66 63 30 2d 38 37 64 34 34 36 35 64 32 30 65 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 3f 05 b3 be 00 01 a2 d1 49 44 41 54 78 da ec bd 09 d0 2c c9 71 1e 96 55 dd 73 fc c7 3b b0 37 76 17 e0 62 01 70 71 70 09 12 04 c1 0b 22 48 c1 24 78 48 24 01 8a 8a 20 45 91 b4 b1 a6 44 8b 11 16 65 4a 61 5b a4 45 87 22 64 52 94 69 cb 96 6c c9 02 c3 32 25 85 ac b0 17 0e 99 3e 15 76 84 75 Data Ascii: 0ac-a3a2b837aa8b" stRef:documentID="adobe:docid:photoshop:ad678573-2cd7-117a-afc0-87d4465d20e6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>?IDATx,qUs;7vbpqp"H$xH$ EDeJa[E"dRil2%>vu
2024-11-01 11:24:09 UTC	16384	IN	Data Raw: 38 d5 ea 4b b7 27 a4 db bb d1 0c d5 13 41 a8 9b 5e e9 7a 86 d4 ef 19 d2 2f 99 ec df 32 f2 09 2b d9 9c 31 e1 a9 83 c2 da 04 d6 e7 54 a5 0b 8c ca 5a 49 cd 53 29 9c a0 59 56 e7 41 29 55 ab ad 29 13 9a a6 8d 57 87 08 0e e5 e6 98 62 a1 a5 0d 6b d3 5a 57 f3 bc 5a a9 0f 95 d3 94 68 87 61 e9 3a 9c 2d 5a 14 d0 e2 1c 3e 50 7b 8b 33 80 4b fc 5c 5d c1 dd ae 38 32 43 9e 1b ef c5 79 d6 91 1e 7a 6d df a2 24 fd 82 00 62 e8 a4 3a 18 12 b1 0f 99 e3 2a 34 2c fa 0e d2 d1 7d 89 af ad e3 3a 18 0c 26 34 0c 06 e3 00 f1 13 b7 50 5f 7f e6 b4 13 1a c4 bb d0 08 78 37 1a 05 95 9c 57 18 7e 63 0c 06 62 2f a6 b2 7b 1e 1b 0d 14 ba 23 2c 71 b9 b9 35 83 9d 1d 22 33 00 23 34 24 d7 a7 23 18 21 b1 91 b2 96 61 d6 4e 3a 59 47 06 ad 72 ab fa 99 93 51 56 69 83 d5 25 c2 43 c2 ec d6 81 c4 71 ca 08 Data Ascii: 8K'A^z/2+1TZIS)YVA)U)WbkZWZha:-Z>P{3K\]82Cyzm$b:*4,}:&4P_x7W~cb/{#,q5"3#4$#!aN:YGrQVi%Cq
2024-11-01 11:24:09 UTC	16384	IN	Data Raw: 30 02 43 89 00 26 f0 fd 60 7b 61 a2 1d 0e fe 69 f6 a4 ce 9e 9e 61 7f 1f 60 ef 1d 02 6a 2d 7a c7 43 83 43 c7 60 95 cb a3 3b 34 22 26 f0 ef 9d 5e c9 0e f5 23 7d 6e 6c 9a 44 c3 75 cc 6f c6 36 b8 99 94 33 63 eb c1 f6 9f 07 c7 88 b7 d8 b7 b1 86 35 1b 3f c7 da e1 75 d2 af be f3 7c ee 0d c1 1d 63 17 b1 c7 7d 67 63 e7 ec 07 1a b5 70 fa 44 4a d4 50 ab c1 d7 6f c0 d5 d2 be 92 e5 a7 71 c8 40 42 5d 45 20 aa 6f 2f 4d 13 23 0d 01 aa 52 67 68 48 f9 2c 16 fb ab 45 1b 69 2c 85 46 47 ed ac ab 0f 20 5a 67 dd f2 1d 31 51 89 5c a0 c1 d5 d6 1b 58 c2 e7 93 7d 8e 1c d4 68 0c a2 fa 1e 37 74 8e 97 b2 fe 8b 91 98 ed 5b 06 b4 f4 cc 34 e5 dc a1 f6 8a ad 8d 90 a4 d3 48 63 ca d9 99 a9 45 d8 34 5a 53 cc 0f 99 55 4b aa 51 62 8e e3 62 a3 1d d6 b5 78 60 83 f6 00 e0 28 d4 aa 6a fe 17 a4 64 Data Ascii: 0C&`{aia`j-zCC`;4"&^#}nlDuo63c5?u\|c}gcpDJPoq@B]E o/M#RghH,Ei,FG Zg1Q\X}h7t[4HcE4ZSUKQbbx`(jd
2024-11-01 11:24:09 UTC	16384	IN	Data Raw: 17 e7 5b 8a 68 a0 9d da 3f d2 c3 7c d4 03 23 27 53 13 27 09 bc a2 3e 47 0c 69 6e c8 4e 67 59 14 5a 6d 76 95 ba 04 38 79 1b 67 00 64 cf 09 4f 82 c3 90 e4 61 d6 3a 3a 00 93 07 e4 18 33 80 c6 98 b1 73 d1 f0 3e f9 2b ac dd cb da b2 55 06 1f eb 6c 82 7f aa 1b c6 ad b5 b0 4b af de 0c 43 23 15 33 10 6b 64 ed 76 1b de f7 be f7 c1 7b de f3 1e 38 72 e4 88 da 81 6e 36 e1 e4 c9 93 f0 ad 6f 7d 0b fe f2 2f ff 12 76 ee dc 09 bf fd db bf 0d 6f 7a d3 9b a0 54 2a 9d b5 be db 03 17 81 97 f2 d2 cd 58 f1 8e 3b 7e 91 23 25 ff 9d 04 35 18 55 39 7a 62 9e 8d 53 37 05 28 e8 00 02 c9 04 0a f1 f7 2a fe ca 7e d2 79 8d 0c 23 21 d9 f5 33 94 81 90 7e 9e 7a 87 35 1d 73 0b 6d e1 18 b2 d7 e8 c3 31 18 28 f1 9a 19 5d 9a 99 08 08 b8 8c a8 95 9d 72 86 e9 79 50 29 66 02 4e 3c a7 53 53 8d 1c 80 Data Ascii: [h?\|#'S'>GinNgYZmv8ygdOa::3s>+UlKC#3kdv{8rn6o}/vozTX;~#%5U9zbS7(~y#!3~z5sm1(]ryP)fN<SS
2024-11-01 11:24:09 UTC	16384	IN	Data Raw: 1e c8 b1 47 77 db ec d6 fe 1c a7 3b 02 15 93 85 e7 a5 df b4 60 cb e4 21 b0 64 70 4c 38 e2 75 bc e9 f4 ba 24 45 8e 52 24 e2 13 1c 0f f7 9c e1 e0 b3 53 e0 b6 19 90 64 fa 38 65 15 f4 b9 be 36 dd 99 ca 51 11 dd 11 68 87 e3 f6 8e c5 e5 fe f3 65 b8 8f 61 7c 34 38 63 79 5c 3e 12 6c 98 2b a2 17 41 76 12 8f 08 11 04 12 d3 7e 0f 1d c3 8b 04 31 16 72 28 9f 63 e2 31 95 ab 54 e8 ee 37 86 64 22 9d 4a 10 1a 41 6e 1c 41 74 4c 24 33 82 ec 10 09 32 4d 30 85 48 81 e9 91 42 22 b7 9e c0 41 c6 3a 98 e8 61 d4 4a 71 33 62 52 d1 f2 e7 e4 fe 34 fe 29 a9 af 7a 16 9c ba 20 b2 c3 14 db 94 5e db 0c 26 a6 4a 60 21 19 a4 e3 96 eb 5c 82 9e 46 ee 9f cf 3a b4 87 d5 df 19 d9 fb cd a8 64 9b 35 34 a1 d1 98 7b 20 c9 a7 f7 a0 fd 0a 9a 97 df 9f 95 a8 70 43 9f fd 39 84 c7 1f dc 09 37 fc f4 69 38 Data Ascii: Gw;`!dpL8u$ER$Sd8e6Qhea\|48cy\>l+Av~1r(c1T7d"JAnAtL$32M0HB"A:aJq3bR4)z ^&J`!\F:d54{ pC97i8
2024-11-01 11:24:09 UTC	16384	IN	Data Raw: 1e 19 08 01 30 2f a5 89 49 8e 62 f0 77 c1 a2 8e b4 2c 38 10 38 95 86 e4 5d 06 84 64 9f db 83 06 92 64 a8 19 92 a3 24 25 69 24 87 d5 a9 c7 e9 5d d1 01 37 f5 6c 89 20 36 ed 20 0c f2 70 6a 0a 02 a4 7e ce 88 1e 52 16 55 b8 f6 7c cb 48 ae 5f 56 41 80 38 51 d2 bf 75 1a 9a d0 68 68 34 02 92 c5 fa 09 da 87 d1 5e 8e 46 ed ce 8f 41 bb 00 ed d3 68 3f 40 fb 2d 5a dd dc 9c 01 a3 aa 67 b3 8b 28 e4 87 60 e1 f0 21 e2 31 8e 1b af 7d 4c a4 7f 75 0b 94 46 f5 f5 2f df d4 d6 6d 3e 74 ef 26 d8 ba 79 5f db c7 4a e9 5e 1b 9e dc d9 b1 b9 58 77 d3 53 a9 ef 5d f5 8d 3b c1 ae 76 86 74 94 8a 79 c8 99 73 32 df fe 65 82 d4 7c 6d f0 0a b4 61 f4 02 17 02 e3 6b dd 28 82 1f 95 31 24 32 01 12 91 e0 61 a3 cf 80 fc 48 c4 c5 77 f2 59 e4 e7 9a ea 66 90 95 b2 dd 2a c7 ba 29 92 c3 15 2a 62 a9 24 Data Ascii: 0/Ibw,88]dd$%i$]7l 6 pj~RU\|H_VA8Quhh4^FAh?@-Zg(`!1}LuF/m>t&y_J^XwS];vtys2e\|mak(1$2aHwYf)b$
2024-11-01 11:24:10 UTC	10491	IN	Data Raw: 9b cb e4 c4 3a 9b ad 3b 33 ae db e6 38 db c1 fc 80 5b 5d a7 2e 8b a3 c6 ef 2d 9f 64 d7 ec 83 6e db 62 65 b6 12 14 39 6a 16 87 87 b3 38 5c 93 4d 63 11 d9 34 6a 32 63 d7 ce 4c 8e 2e 13 c5 fd 13 0d e1 cc 5e cd e3 41 11 99 3e de e4 67 01 f4 03 c8 d0 00 d0 18 52 cc dc 23 c6 c9 1d 5d 49 79 8a 2a 95 80 6e 92 22 e6 4d 42 cc b8 a6 04 a7 48 db e6 f0 54 33 f9 f7 e4 f4 3e 21 86 0e 5a d9 9a 7c 6e 18 19 1b a0 a3 32 38 58 fa fe d2 45 bb 3f b4 7e e3 92 ed 1f fb f2 27 fb 54 b1 29 d9 14 ef 82 cb 1b 57 89 fb c6 3c 31 13 54 24 be 49 80 85 d2 30 d3 0b b4 43 67 f3 dd 29 67 6e e0 c8 f9 94 b8 b6 de b7 7c 6e 67 46 25 66 5d 45 c7 4c 07 e2 36 01 a5 14 9b 0e d4 ea fd 92 d2 7a 9c aa 55 76 a3 1e a7 c6 71 0a 5c b6 c3 74 a0 53 4d 40 01 04 0d 00 c0 e5 e6 4e 0b 9a a9 e9 aa 1e 86 1f 11 62 Data Ascii: :;38[].-dnbe9j8\Mc4j2cL.^A>gR#]Iy*n"MBHT3>!Z\|n28XE?~'T)W<1T$I0Cg)gn\|ngF%f]EL6zUvq\tSM@Nb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49743	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WB8smfs3E6wMblS&MD=7GlabZBR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-01 11:24:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: ac2ffbee-8579-4394-b900-c9a60a3b441c MS-RequestId: ceaf87b0-5529-49d5-b59f-221c653abf4f MS-CV: mGBXxyt4dE+5UA6p.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 01 Nov 2024 11:24:10 GMT Connection: close Content-Length: 30005
2024-11-01 11:24:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-01 11:24:11 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49746	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:11 UTC	669	OUT	GET /favicon.ico HTTP/1.1 Host: mclimber.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mclimber.org/fishar Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1
2024-11-01 11:24:11 UTC	472	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html last-modified: Fri, 22 Sep 2023 22:22:12 GMT etag: "999-650e1394-9651062872b0aa99;;;" accept-ranges: bytes content-length: 2457 date: Fri, 01 Nov 2024 11:24:11 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:11 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# si
2024-11-01 11:24:11 UTC	1561	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 6c 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6f 70 73 2c 20 6c 6f 6f 6b 73 20 6c 69 Data Ascii: bsolute; } </style> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49733	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:13 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49734	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:13 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49751	66.102.1.157	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:14 UTC	845	OUT	POST /g/collect?v=2&tid=G-9Q6H0QETRF&cid=1083010327.1730460249&gtm=45je4au0v9125959112za200&aip=1&dma=0&gcd=13l3l3l3l2l1&npa=0&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mclimber.org X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://mclimber.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:14 UTC	843	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://mclimber.org Date: Fri, 01 Nov 2024 11:24:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49752	142.250.186.34	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:14 UTC	985	OUT	GET /td/ga/rul?tid=G-9Q6H0QETRF&gacid=1083010327.1730460249&gtm=45je4au0v9125959112za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=370783763 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mclimber.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 11:24:14 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 11:24:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 01-Nov-2024 11:39:14 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:24:14 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-11-01 11:24:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49753	142.250.186.132	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:14 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49754	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:24:22 UTC	800	OUT	GET /fishar/ HTTP/1.1 Host: mclimber.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1; _ga_9Q6H0QETRF=GS1.2.1730460251.1.0.1730460251.60.0.0
2024-11-01 11:24:22 UTC	472	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html last-modified: Fri, 22 Sep 2023 22:22:12 GMT etag: "999-650e1394-9651062872b0aa99;;;" accept-ranges: bytes content-length: 2457 date: Fri, 01 Nov 2024 11:24:22 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:24:22 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# si
2024-11-01 11:24:22 UTC	1561	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 6c 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6f 70 73 2c 20 6c 6f 6f 6b 73 20 6c 69 Data Ascii: bsolute; } </style> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49762	142.250.184.196	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:25:05 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:25:05 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:25:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DAPxkiL-e6eZFATYHdyjZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:25:05 UTC	112	IN	Data Raw: 31 32 36 65 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 64 72 61 67 6f 6e 20 61 67 65 20 76 65 69 6c 67 75 61 72 64 22 2c 22 68 65 72 65 20 6d 6f 76 69 65 20 72 65 76 69 65 77 73 20 74 6f 6d 20 68 61 6e 6b 73 22 2c 22 6d 61 63 61 75 6c 61 79 20 63 75 6c 6b 69 6e 20 6a 6f 65 20 62 75 72 72 6f 77 20 68 61 6c 6c 6f 77 65 65 6e 22 2c 22 73 61 Data Ascii: 126e)]}'["",["dragon age veilguard","here movie reviews tom hanks","macaulay culkin joe burrow halloween","sa
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 74 6f 73 68 69 20 6e 61 6b 61 6d 6f 74 6f 20 62 69 74 63 6f 69 6e 22 2c 22 68 75 72 72 69 63 61 6e 65 20 74 72 6f 70 69 63 61 6c 20 73 74 6f 72 6d 22 2c 22 77 69 6e 74 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 67 72 6f 74 65 73 71 75 65 72 69 65 20 65 70 69 73 6f 64 65 20 31 30 20 65 6e 64 69 6e 67 20 65 78 70 6c 61 69 6e 65 64 22 2c 22 70 6f 6b c3 a9 6d 6f 6e 20 74 63 67 20 70 6f 63 6b 65 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 Data Ascii: toshi nakamoto bitcoin","hurricane tropical storm","winter forecast","grotesquerie episode 10 ending explained","pokmon tcg pocket"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmc
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 45 46 54 54 56 6f 33 5a 44 5a 70 53 6e 4a 70 54 6e 42 71 51 6d 4a 53 5a 30 56 6f 61 44 42 46 57 6d 4a 35 5a 6a 6c 79 57 6a 4a 79 55 31 4e 52 63 54 42 35 51 6b 67 34 61 6a 56 56 65 54 46 4b 4e 46 64 68 61 54 5a 73 53 31 5a 70 62 31 56 77 55 32 64 56 63 46 4e 6e 56 58 42 54 5a 79 38 76 57 6a 6f 5a 52 48 4a 68 5a 32 39 75 49 45 46 6e 5a 54 6f 67 56 47 68 6c 49 46 5a 6c 61 57 78 6e 64 57 46 79 5a 45 6f 48 49 7a 67 79 4e 44 46 68 4d 31 4a 47 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 45 78 44 65 6b 31 54 61 6b 78 4d 53 30 55 30 65 6c 6c 51 55 56 4e 54 55 32 78 4c 56 45 31 66 55 46 55 77 61 45 31 55 4d 56 56 76 55 7a 67 7a 54 56 4e 54 4f 55 35 4d 52 57 39 43 51 55 39 49 65 55 52 4b 4e 48 41 45 22 2c 22 7a 6c 22 3a 31 30 30 30 32 Data Ascii: EFTTVo3ZDZpSnJpTnBqQmJSZ0VoaDBFWmJ5ZjlyWjJyU1NRcTB5Qkg4ajVVeTFKNFdhaTZsS1Zpb1VwU2dVcFNnVXBTZy8vWjoZRHJhZ29uIEFnZTogVGhlIFZlaWxndWFyZEoHIzgyNDFhM1JGZ3Nfc3NwPWVKemo0dFZQMXpjMExDek1TakxMS0U0ellQUVNTU2xLVE1fUFUwaE1UMVVvUzgzTVNTOU5MRW9CQU9IeURKNHAE","zl":10002
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 6e 42 54 4d 45 78 4d 64 31 45 79 4c 30 31 6b 59 58 70 4c 64 6b 64 53 4d 7a 52 43 54 30 30 78 63 46 6c 58 61 32 31 72 53 55 78 74 4e 48 52 76 56 58 51 79 54 30 31 34 53 57 4e 6e 5a 44 4a 58 65 6c 68 5a 4e 6c 68 68 57 55 77 32 4e 6e 4d 33 61 47 68 75 4d 6c 6c 47 65 44 63 7a 54 57 64 71 59 6b 68 36 63 6d 68 36 65 44 5a 71 5a 56 68 6a 62 47 73 77 4d 47 68 6e 4e 48 56 79 56 55 6c 76 52 31 5a 36 61 6b 68 75 64 46 4d 33 53 30 31 51 4d 44 5a 46 62 57 39 48 4e 46 6c 58 4f 57 78 4d 4c 32 74 5a 57 6a 6b 79 54 47 70 50 55 46 4e 6f 53 6a 45 78 54 7a 4a 6a 54 6d 51 7a 53 46 68 34 54 55 39 35 65 55 4a 44 62 69 39 4f 56 48 46 55 55 6c 63 78 4d 32 4e 35 4e 6d 5a 4a 4d 58 4a 4f 51 31 4a 46 56 30 74 61 51 6c 68 42 4b 79 39 71 55 58 5a 49 55 48 46 42 55 6a 4e 75 59 56 52 75 Data Ascii: nBTMExMd1EyL01kYXpLdkdSMzRCT00xcFlXa21rSUxtNHRvVXQyT014SWNnZDJXelhZNlhhWUw2NnM3aGhuMllGeDczTWdqYkh6cmh6eDZqZVhjbGswMGhnNHVyVUlvR1Z6akhudFM3S01QMDZFbW9HNFlXOWxML2tZWjkyTGpPUFNoSjExTzJjTmQzSFh4TU95eUJDbi9OVHFUUlcxM2N5NmZJMXJOQ1JFV0taQlhBKy9qUXZIUHFBUjNuYVRu
2024-11-01 11:25:05 UTC	480	IN	Data Raw: 31 6c 4d 6f 38 61 5a 47 46 30 59 54 70 70 62 57 46 6e 5a 53 39 71 63 47 56 6e 4f 32 4a 68 63 32 55 32 4e 43 77 76 4f 57 6f 76 4e 45 46 42 55 56 4e 72 57 6b 70 53 5a 30 46 43 51 56 46 42 51 55 46 52 51 55 4a 42 51 55 51 76 4d 6e 64 44 52 55 46 42 61 30 64 43 64 32 64 49 51 6d 64 72 53 55 4a 33 5a 30 74 44 5a 32 74 4d 52 46 4a 5a 55 45 52 52 64 30 31 45 55 6e 4e 56 52 6c 4a 42 56 30 6c 43 4d 47 6c 4a 61 55 46 6b 53 48 67 34 61 30 74 45 55 58 4e 4b 51 31 6c 34 53 6e 67 34 5a 6b 78 55 4d 48 52 4e 56 46 55 7a 54 32 70 76 4e 6b 6c 35 63 79 39 53 52 44 67 30 55 58 70 52 4e 55 39 71 59 30 4a 44 5a 32 39 4c 52 46 46 33 54 6b 64 6e 4f 46 42 48 61 6d 4e 73 53 48 6c 56 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d Data Ascii: 1lMo8aZGF0YTppbWFnZS9qcGVnO2Jhc2U2NCwvOWovNEFBUVNrWkpSZ0FCQVFBQUFRQUJBQUQvMndDRUFBa0dCd2dIQmdrSUJ3Z0tDZ2tMRFJZUERRd01EUnNVRlJBV0lCMGlJaUFkSHg4a0tEUXNKQ1l4Sng4ZkxUMHRNVFUzT2pvNkl5cy9SRDg0UXpRNU9qY0JDZ29LRFF3TkdnOFBHamNsSHlVM056YzNOemMzTnpjM056YzNOemMzTnpjM
2024-11-01 11:25:05 UTC	124	IN	Data Raw: 37 36 0d 0a 62 46 46 73 53 6e 68 72 57 6b 78 55 52 6e 59 76 52 55 46 43 62 30 4a 42 51 55 6c 45 51 56 46 46 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 55 55 5a 42 55 55 31 48 51 57 64 45 4c 33 68 42 51 54 52 46 55 55 46 43 51 58 64 4e 52 45 46 52 56 55 64 43 51 56 46 49 51 55 46 42 51 55 46 42 51 55 4a 42 5a 30 31 53 51 55 46 52 61 45 4a 53 53 58 0d 0a Data Ascii: 76bFFsSnhrWkxURnYvRUFCb0JBQUlEQVFFQUFBQUFBQUFBQUFBQUFBUUZBUU1HQWdEL3hBQTRFUUFCQXdNREFRVUdCQVFIQUFBQUFBQUJBZ01SQUFRaEJSSX
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 31 30 64 34 0d 0a 68 52 55 6b 35 53 57 56 68 48 51 6b 4a 70 53 31 4a 33 5a 45 68 33 55 58 46 48 65 44 52 53 56 57 74 4e 64 45 6c 56 53 58 70 4e 4d 46 56 75 54 48 67 76 4f 57 39 42 52 45 46 4e 51 6b 46 42 53 56 4a 42 65 45 56 42 55 48 64 45 4e 6e 59 78 57 55 35 70 61 7a 6c 6c 4e 6e 4e 6c 61 57 39 79 65 58 52 6d 53 47 6c 4c 63 6c 56 68 62 47 70 6e 53 6a 6c 6c 4d 46 5a 4d 55 57 73 78 57 6b 5a 49 5a 6d 4d 30 55 33 59 7a 54 6b 35 48 56 33 45 33 61 31 6c 4c 54 45 52 42 55 47 46 47 55 6e 42 72 4d 6d 6c 4c 53 46 6b 30 4e 6b 4a 78 4e 45 4e 78 65 54 4a 4d 51 6c 68 6a 56 6e 6c 59 65 48 4e 76 63 6b 6f 77 64 6d 46 77 4d 55 31 31 55 56 70 57 54 6c 68 48 62 47 46 78 57 6b 70 72 61 56 64 4a 56 47 52 32 61 30 55 7a 64 6c 6b 72 4d 33 52 70 51 32 74 73 64 30 6c 43 61 6b 5a Data Ascii: 10d4hRUk5SWVhHQkJpS1J3ZEh3UXFHeDRSVWtNdElVSXpNMFVuTHgvOW9BREFNQkFBSVJBeEVBUHdENnYxWU5pazllNnNlaW9yeXRmSGlLclVhbGpnSjllMFZMUWsxWkZIZmM0U3YzTk5HV3E3a1lLTERBUGFGUnBrMmlLSFk0NkJxNENxeTJMQlhjVnlYeHNvckowdmFwMU11UVpWTlhHbGFxWkpraVdJVGR2a0UzdlkrM3RpQ2tsd0lCakZ
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 78 57 4d 58 46 4f 64 7a 42 42 65 69 39 54 56 54 55 34 55 6c 4a 56 4e 7a 56 6a 61 33 68 76 65 6b 68 51 56 6e 6c 73 63 6d 31 48 54 7a 68 73 62 6b 70 4b 63 30 4e 54 59 6b 63 31 55 45 46 50 4c 33 70 33 63 57 59 78 62 47 68 6f 57 6d 4a 5a 55 6e 56 51 61 47 70 71 53 48 4a 42 65 44 52 45 52 6d 46 4c 65 44 6c 72 4f 56 4a 31 62 55 55 7a 62 44 67 76 4d 6c 4e 6c 61 79 38 78 55 57 5a 6f 52 54 6b 7a 55 47 56 4c 4d 48 46 54 5a 33 41 32 4b 32 64 78 53 31 6c 56 57 57 6c 74 61 56 70 44 55 6c 5a 69 55 33 42 69 5a 30 46 72 4d 33 5a 6c 4d 33 42 70 64 54 4d 78 5a 45 52 79 4e 44 64 5a 52 6b 56 44 53 57 35 48 5a 53 74 78 4f 56 45 35 62 6e 4a 74 4d 46 70 4d 64 47 30 30 53 48 52 34 62 56 46 44 52 6c 6b 31 61 6d 74 6c 62 56 42 58 64 57 31 35 51 56 70 55 61 33 52 53 62 54 68 50 57 Data Ascii: xWMXFOdzBBei9TVTU4UlJVNzVja3hvekhQVnlscm1HTzhsbkpKc0NTYkc1UEFPL3p3cWYxbGhoWmJZUnVQaGpqSHJBeDRERmFLeDlrOVJ1bUUzbDgvMlNlay8xUWZoRTkzUGVLMHFTZ3A2K2dxS1lVWWltaVpDUlZiU3BiZ0FrM3ZlM3BpdTMxZERyNDdZRkVDSW5HZStxOVE5bnJtMFpMdG00SHR4bVFDRlk1amtlbVBXdW15QVpUa3RSbThPW
2024-11-01 11:25:05 UTC	1378	IN	Data Raw: 4d 44 46 57 54 33 4e 57 52 46 4d 31 61 6a 46 52 4d 6b 70 73 62 44 64 61 55 6d 6c 76 64 55 39 45 59 32 5a 71 64 46 6c 46 4b 31 55 30 57 45 34 72 4d 45 5a 79 5a 48 4e 43 55 32 6c 56 61 57 4e 52 53 6d 31 47 52 55 52 35 4c 30 52 4e 64 30 4a 31 52 32 46 54 55 47 46 4a 62 30 39 42 61 55 52 71 54 53 74 4a 4e 53 39 69 65 6d 39 61 63 33 70 78 57 6b 6b 31 4e 44 5a 32 53 31 4a 4d 4d 58 4d 77 56 56 4e 7a 61 47 52 52 4e 45 68 57 5a 47 5a 56 5a 32 6f 78 53 54 6c 6a 54 32 68 6a 56 32 70 6e 51 6a 4e 34 51 55 4e 71 65 48 64 61 52 32 56 6e 65 55 4e 51 54 56 56 72 52 32 73 7a 54 45 4e 70 52 33 68 6e 62 55 70 46 4b 30 64 52 54 33 59 31 4d 55 56 56 5a 46 6c 43 4d 6a 52 78 52 6b 6b 33 59 6e 51 31 64 32 74 61 53 46 56 47 53 6c 5a 6e 51 30 52 68 4e 55 38 35 61 55 46 45 5a 54 4a Data Ascii: MDFWT3NWRFM1ajFRMkpsbDdaUmlvdU9EY2ZqdFlFK1U0WE4rMEZyZHNCU2lVaWNRSm1GRUR5L0RNd0J1R2FTUGFJb09BaURqTStJNS9iem9ac3pxWkk1NDZ2S1JMMXMwVVNzaGRRNEhWZGZVZ2oxSTljT2hjV2pnQjN4QUNqeHdaR2VneUNQTVVrR2szTENpR3hnbUpFK0dRT3Y1MUVVZFlCMjRxRkk3YnQ1d2taSFVGSlZnQ0RhNU85aUFEZTJ
2024-11-01 11:25:05 UTC	182	IN	Data Raw: 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 5d 7d 5d 0d 0a Data Ascii: 62],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["ENTITY","QUERY","QUERY","ENTITY","QUERY","QUERY","QUERY","ENTITY"]}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49755	195.35.38.103	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:25:05 UTC	826	OUT	GET /fishar/ HTTP/1.1 Host: mclimber.org Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1083010327.1730460249; _gid=GA1.2.1107014479.1730460249; _gat=1; _ga_9Q6H0QETRF=GS1.2.1730460251.1.1.1730460262.49.0.0
2024-11-01 11:25:06 UTC	472	IN	HTTP/1.1 404 Not Found Connection: close content-type: text/html last-modified: Fri, 22 Sep 2023 22:22:12 GMT etag: "999-650e1394-9651062872b0aa99;;;" accept-ranges: bytes content-length: 2457 date: Fri, 01 Nov 2024 11:25:05 GMT server: LiteSpeed platform: hostinger panel: hpanel alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-11-01 11:25:06 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# si
2024-11-01 11:25:06 UTC	1561	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6f 70 73 2c 20 73 6f 6d 65 74 68 69 6e 67 20 6c 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6f 70 73 2c 20 6c 6f 6f 6b 73 20 6c 69 Data Ascii: bsolute; } </style> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49768	142.250.184.196	443	6980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:25:12 UTC	818	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=MCDrL-xr_UPsrTtSrm2mwosMq1ZgyOcYmdeOaGqHFqvt8zTawP7FB8AwlRSn7LM0EDATdqyQap9TfCifmuv0gKalaWmPSs79X1N9jy3hta4quHQWAo0lpM4NmWovheAOmPrLN08xe69bxOO3s-yi4CT7cxXZpQll5hQY5mDpsG27zGyU6i4jteXT46M
2024-11-01 11:25:12 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:25:12 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-qwe8r_IQdcHvrTiSKeulag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 11:25:12 UTC	112	IN	Data Raw: 33 30 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 72 69 63 6b 20 6f 72 20 74 72 65 61 74 20 6c 6f 63 61 74 69 6f 6e 73 20 6e 62 61 20 32 6b 32 35 22 2c 22 62 6c 61 63 6b 20 66 72 69 64 61 79 20 64 65 61 6c 73 20 77 61 6c 6d 61 72 74 22 2c 22 61 69 72 20 69 6e 64 69 61 20 66 6c 69 67 68 74 73 20 63 61 6e 63 65 6c 6c 65 64 22 2c 22 62 Data Ascii: 30d)]}'["",["trick or treat locations nba 2k25","black friday deals walmart","air india flights cancelled","b
2024-11-01 11:25:12 UTC	676	IN	Data Raw: 72 65 65 64 65 72 73 20 63 75 70 20 32 30 32 34 20 72 61 63 65 73 22 2c 22 77 69 6e 74 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e 67 20 74 69 6d 65 20 63 6c 6f 63 6b 73 22 2c 22 73 63 6f 72 70 69 6f 20 6e 65 77 20 6d 6f 6f 6e 20 68 6f 72 6f 73 63 6f 70 65 22 2c 22 61 70 70 6c 65 20 65 61 72 6e 69 6e 67 73 20 72 65 70 6f 72 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f Data Ascii: reeders cup 2024 races","winter forecast","daylight saving time clocks","scorpio new moon horoscope","apple earnings report"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNo
2024-11-01 11:25:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:23:20
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:23:20
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1976,i,4310585169220383811,17731307399520697066,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:23:21
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mclimber%5B.%5Dorg/fishar%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20/"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95