Edit tour

Windows Analysis Report
https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details

Overview

General Information

Sample URL:	https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details
Analysis ID:	1546863
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,11781724367075088181,9093435567813915424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ui/signin?relationships=groups%2Cderived_from HTTP/1.1Host: www.virustotal.comConnection: keep-aliveContent-Length: 4sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x311x0X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTEzNzg1Mjg1NjItWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzQyLjY1NQ==sec-ch-ua-platform: "Windows"Origin: https://www.virustotal.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/jsonVary: Accept-EncodingX-Cloud-Trace-Context: 10303aeb5888394e5c88a4ed68549c84Date: Fri, 01 Nov 2024 15:52:34 GMTServer: Google FrontendContent-Length: 134Connection: close

Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_160.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_258.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://cloud.google.com/terms/service-terms
Source: chromecache_205.1.dr	String found in binary or memory: https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/locations/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://dialogflow.googleapis.com/v3
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_205.1.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_172.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RF
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/cloud_download/default/24px.svg
Source: chromecache_186.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://github.com/chjj/)
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://github.com/markedjs/marked.
Source: chromecache_160.1.dr	String found in binary or memory: https://google.com
Source: chromecache_160.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_258.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_195.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_210.1.dr, chromecache_188.1.dr	String found in binary or memory: https://recaptcha.net/recaptcha/api2/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://speech.googleapis.com/v1p1beta1/speech:recognize?key=
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_160.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_197.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://storage.googleapis.com/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://storage.googleapis.com/upload/storage/v1/b/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://storage.mtls.cloud.google.com/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://sts.googleapis.com/v1/token
Source: chromecache_195.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_258.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_160.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_205.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cloud-platform
Source: chromecache_205.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_160.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_160.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_144.1.dr, chromecache_197.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_160.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave-silent.gif
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave.gif
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/integrations/dialogflow-messenger/progress_
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/styles/googlecode.css
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/styles/googlecode.css);
Source: chromecache_210.1.dr, chromecache_149.1.dr, chromecache_214.1.dr, chromecache_154.1.dr, chromecache_188.1.dr, chromecache_250.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_160.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_149.1.dr, chromecache_214.1.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_229.1.dr	String found in binary or memory: https://www.virustotal.com/graph
Source: chromecache_229.1.dr	String found in binary or memory: https://www.virustotal.com/graph/
Source: chromecache_229.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a
Source: chromecache_229.1.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a23
Source: chromecache_265.1.dr, chromecache_191.1.dr, chromecache_209.1.dr	String found in binary or memory: https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://www.youtube.com/embed
Source: chromecache_164.1.dr, chromecache_205.1.dr	String found in binary or memory: https://ytimg.googleusercontent.com/vi/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49924 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@19/257@32/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,11781724367075088181,9093435567813915424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,11781724367075088181,9093435567813915424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ghs-svc-https-c46.ghs-ssl.googlehosted.com	74.125.34.46	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	216.58.206.46	true	false	unknown
i.ytimg.com	142.250.186.118	true	false	unknown
www.recaptcha.net	216.58.206.67	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
recaptcha.net	142.250.74.195	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.virustotal.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.virustotal.com/gui/images/favicon.svg	false	unknown
https://www.virustotal.com/gui/70520.2084d2d63c64ac00d8ff.js	false	unknown
https://www.virustotal.com/gui/27197.598dbd3bfe6cc1efe979.js	false	unknown
https://www.virustotal.com/gui/44288.d69fcc0ea934ea412b4a.js	false	unknown
https://www.virustotal.com/graph/assets/reset.css	false	unknown
https://www.virustotal.com/gui/29990.af467ebfc75146d97344.js	false	unknown
https://www.virustotal.com/gui/88116.be3428c199d3d7ca9393.js	false	unknown
https://www.virustotal.com/ui/files/b19e94149729ebbf76d9a027e6e9ea53f796c5bafd5c281fa87c023ad59b13e8?attributes=meaningful_name	false	unknown
https://www.youtube.com/s/player/4e23410d/www-player.css	false	unknown
https://www.virustotal.com/gui/images/overviews/ico_graph_2.svg	false	unknown
https://www.virustotal.com/graph/assets//images/logo.png	false	unknown
https://www.virustotal.com/gui/75884.d7767dd34ca82b896517.js	false	unknown
https://www.virustotal.com/gui/c48548105569470b2222.woff2	false	unknown
https://www.virustotal.com/gui/16339.77d3ab69801aa191ff1b.js	false	unknown
https://www.virustotal.com/gui/1402accbefdec6a25762.woff2	false	unknown
https://www.virustotal.com/gui/images/manifest/icon-192x192.png	false	unknown
https://www.virustotal.com/gui/b30e3941fb7b9339531c.svg	false	unknown
https://www.virustotal.com/gui/join-us	false	unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location	false	unknown
https://www.virustotal.com/gui/images/overviews/ico_graph_4.svg	false	unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e?relationships=network_location	false	unknown
https://www.virustotal.com/gui/main.57341db7f55d9342c505.js	false	unknown
https://www.virustotal.com/gui/88687.cca6b938f5ec6b221b34.js	false	unknown
https://www.virustotal.com/gui/13420.2099364bebdd02277cf9.js	false	unknown
https://www.virustotal.com/gui/ee990a93df71bfdfb3b5.woff2	false	unknown
https://www.virustotal.com/gui/59084.04d6b3360a5bc50128d1.js	false	unknown
https://www.virustotal.com/gui/26044.e227fd5c65cff1753dd6.js	false	unknown
https://www.virustotal.com/gui/67920.83f748ec82f4e379de06.js	false	unknown
https://www.recaptcha.net/recaptcha/enterprise.js	false	unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/related_comments?limit=5	false	unknown
https://www.virustotal.com/ui/user_notifications	false	unknown
https://www.virustotal.com/gui/22232.15ef530edb01268cfe7b.js	false	unknown
https://www.google.com/js/bg/p-7RyvuJU9m0QQmVDJx8SL9t4pWXVpOJSp0296ydJmo.js	false	unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?relationships=owner&limit=5	false	unknown
https://www.virustotal.com/graph/assets/8.main.bundle.b31bf10d14fd1bba0f63.js	false	unknown
https://www.virustotal.com/gui/graph-overview	false	unknown
https://www.virustotal.com/graph/assets/7.main.bundle.d5baa643dc30350353ab.js	false	unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?relationships=voter&limit=5	false	unknown
https://www.virustotal.com/gui/33274.186e9fb49d3ce6fbe3b3.js	false	unknown
https://www.virustotal.com/gui/74278.df011db4b71607f93e04.js	false	unknown
https://www.virustotal.com/gui/25076.f1d5707846ec1ba9ed7f.js	false	unknown
https://www.virustotal.com/ui/cookie_disclaimer	false	unknown
https://www.virustotal.com/gui/92285.13a9b4319a138ac2aab7.js	false	unknown
https://www.virustotal.com/gui/stackdriver-errors.3069a6025a2308368f46.js	false	unknown
https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a2308	false	unknown
https://www.virustotal.com/graph/assets/js/webcomponent-polyfill.js	false	unknown
https://www.virustotal.com/graph/assets/73f5acaa7eed2d3fa37c.worker.js	false	unknown
https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=h5acdqhznrsa	false	unknown
https://www.youtube.com/s/player/4e23410d/player_ias.vflset/en_US/base.js	false	unknown
https://www.youtube.com/s/player/4e23410d/www-embed-player.vflset/www-embed-player.js	false	unknown
https://www.virustotal.com/gui/87347.c002f57d03220f54c084.js	false	unknown
https://www.virustotal.com/gui/images/overviews/ico_graph_1.svg	false	unknown
https://www.youtube.com/s/player/4e23410d/player_ias.vflset/en_US/embed.js	false	unknown
https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details	false	unknown
https://www.virustotal.com/gui/90396.306e7eb0c5c689cee651.js	false	unknown
https://www.virustotal.com/gui/manifest.json	false	unknown
https://www.virustotal.com/gui/images/overviews/virustotal_graph_screenshot.png	false	unknown
https://www.virustotal.com/gui/d5e8889ca86857475abb.png	false	unknown
https://www.virustotal.com/gui/58686.2b5c3fb77a4c9bf80677.js	false	unknown
https://www.virustotal.com/ui/signin?relationships=groups%2Cderived_from	false	unknown
https://www.virustotal.com/gui/e7c1b54f5b702950d209.svg	false	unknown
https://www.virustotal.com/gui/11405.39ee0be00408314d19fe.js	false	unknown
https://www.virustotal.com/gui/images/overviews/ico_graph_3.svg	false	unknown
https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2	false	unknown
https://www.virustotal.com/gui/30192.1c015be440de00e9b531.js	false	unknown
https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js	false	unknown
https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js	false	unknown
https://www.virustotal.com/gui/36253.6f4dc6a9d8dab2123ae5.js	false	unknown
https://www.virustotal.com/gui/ca87c5776539e7809d73.svg	false	unknown
https://www.virustotal.com/gui/19299.9ce6ff847745ede896a5.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://storage.mtls.cloud.google.com/	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://dialogflow.cloud.google.com/v1/cx/locations/	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://recaptcha.net/recaptcha/api2/	chromecache_210.1.dr, chromecache_188.1.dr	false		unknown
https://support.google.com/recaptcha#6262736	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a	chromecache_229.1.dr, chromecache_183.1.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_144.1.dr, chromecache_197.1.dr	false	URL Reputation: safe	unknown
https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png	chromecache_205.1.dr	false		unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_160.1.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_197.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://www.virustotal.com/graph	chromecache_229.1.dr	false		unknown
https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/	chromecache_265.1.dr, chromecache_191.1.dr, chromecache_209.1.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_258.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_195.1.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_144.1.dr, chromecache_197.1.dr	false		unknown
https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://fonts.google.com/license/googlerestricted	chromecache_172.1.dr	false	URL Reputation: safe	unknown
https://ytimg.googleusercontent.com/vi/	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://github.com/markedjs/marked.	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://cloud.google.com/terms/service-terms	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://cloud.google.com/contact	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed	chromecache_164.1.dr, chromecache_205.1.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_239.1.dr, chromecache_296.1.dr, chromecache_195.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
74.125.34.46	ghs-svc-https-c46.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
142.250.186.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
142.250.74.195	recaptcha.net	United States	15169	GOOGLEUS	false
216.58.206.67	www.recaptcha.net	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.131	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546863
Start date and time:	2024-11-01 16:51:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@19/257@32/13

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.181.238, 108.177.15.84, 34.104.35.123, 142.250.181.232, 142.250.184.195, 142.250.186.104, 142.250.185.227, 142.250.186.46, 142.250.185.138, 216.58.206.42, 142.250.184.202, 142.250.186.42, 142.250.181.234, 142.250.74.202, 142.250.185.170, 142.250.186.170, 142.250.185.74, 142.250.185.106, 142.250.185.234, 142.250.185.202, 142.250.186.74, 216.58.206.74, 172.217.23.106, 172.217.18.106, 172.217.18.3, 20.109.210.53, 199.232.214.172, 142.250.74.206, 192.229.221.95, 40.69.42.241, 142.250.186.67, 20.3.187.198, 20.12.23.50, 142.250.185.195, 172.202.163.200, 142.250.186.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 314
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.978954722591275
Encrypted:	false
SSDEEP:	6:XtsGKGrj27rf0tWele0HnUG5zUiD6Yi4kIYQtQWNwlSr:XM2jCAI0HUiLD6SOcQWNz
MD5:	B6A9D8D081CC891B1E5AE6E9FFC5F4DA
SHA1:	F88CDF1A4E0BA2C7D2D3B544FE2C96AE1B5A28AD
SHA-256:	0385D1AA058BE36022BDDA4EE04046EFD0043C5487EB23773B04B6C4CE85F51F
SHA-512:	A8732DC9E04594740746BB9DC2CDDB292C0A2506E2C0990682C2361689E2D5A89EE17DA1BAAD9F95D865836FE785854017F42428DEE7F598B807C9B1E21E0EBD
Malicious:	false
Reputation:	low
Preview:	..........\|.AO.@.........f[*QZ...^4z!.y]^.-..vQC.."=....\|.L..v...L..Q...QWO;o...Y.....\|...j.;..8.%I!.Q..$I..c....U.$....g..^.........^.-6....$J"!.....E....`@_.l..Si.....C!..B.k....B.7..m.'.hz..6v.........o.....b.8..cT{VG..........F.I:...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22180, version 1.0
Category:	downloaded
Size (bytes):	22180
Entropy (8bit):	7.99033920580306
Encrypted:	true
SSDEEP:	384:FeyVzTXvrVeKtDRfxqfeS3KDVAQBJpjMqeEDOne7vg++t98+:FtxTz0IR8f5IV1JujEjZQ1
MD5:	E905A9BE581B8C837C48020AF6C606A0
SHA1:	E00C1833F1C65B812094C149B314800350F54685
SHA-256:	58180E3CBA5A736E1875C690B3A756DABC7EE19960F4C66A692D42E5679C13D0
SHA-512:	BCAF31FAB00B69FC58AEF04EFC77C1E3786CD46E294B67AE862EB6E9D29FA4515E884BA6E105907D1E50593AD8220DDCDA428125CAE5118383A9BB6CEAE2549B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyk.woff2
Preview:	wOF2......V...........VA..........................j...H....`?STATx..B.....H..!.....6.$..V. ..6..:...=....N.U.(..v..m...f..._~d.Qa...-....?#A...g.3.Y..@.....fv.....;..G[.N..9%1..Y.. ..{.EL..2`.>..>hS%..P.....W..../b.~.yy.Y.(l..3..jg...y....+..'=#n..(...h.r.....w.u"nfUs.....O._.;....?.....1.!.G@..!..CD...Zb...ql........M-m......@)...c.....\|...}.w..D...$.(...,.<...N}.$..6{..H.i.m..#...O<.........%.K(m..&..%..]......$u.)V...0c.S\6/...vb...........e..va.....o.e..].....?.c..Q....Z.......ar)W&.I.R.$...........,!.._O)..!u...;.U..4..>.3....3.....S`IPM.r.y..n....&.u..XMg.....D....j.\|P.n......HJ.......~..O\|..?(.......]R....ex.\|....Av.[.....\.$.=.Nm.")...1...H0O...P.d:....R...z.......Krz...9.&.4.+.Gn...h.($}R=.E......[...[.?...'."$..?....h...vW...~CH..!...^f#))..Da._x.../$..0....4.K5+Ya.hrm...?.;...F&.iO&....B.0vm..m._3.O..-..AF.d. \|.z..x.A.7.-.;..{......%.B#.;U(UU]Z../.....n^3..;.,.U-<._..[0.9)..E4..w.._x6.o.n.....B.!.lk../.7-.O..g.Z..""F...1FT...a.).<.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 266372
Category:	downloaded
Size (bytes):	80388
Entropy (8bit):	7.983153023051787
Encrypted:	false
SSDEEP:	1536:QziMvjJFuT9CBZxYYgCF16pMSKy8YuCmDV8vuHCuaA:eHJFuTaHFAMKUDGvtA
MD5:	35A46116980C974751122A331D47FD84
SHA1:	CD6E9014E38596C681641A27706124B5B69F86FC
SHA-256:	CCAB92B9BFA43457F743CD83E454BCC63A768DEB352FBAD2D06D718EB2815A66
SHA-512:	AA4F484D3CA65525D5613243797D7E025E552DBD4E68BD9887D88D32FC6928C13DD7A47E8F97C77436924478D451445FA121D1BC1958A0BA94A2A05159345048
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/36253.6f4dc6a9d8dab2123ae5.js
Preview:	............w..q..U.9.C$.t..4..E2C....;.;.<>..K...`...i~.y~.]..@j..#....Vo........\|.>{..f}tyx....../_.......:<=...o.......{y{.....0..g.?n...{.....W[..z...z=...:=.y......f...t..N....G..t..}.......ag..dk.P...j...l}38.>.>.?....t.........U.}..N5.S....W..........z....{.gg...7.......^...X.....^]\..n............z.w.....G.F..\|o/.....[??#./~..p........z.b.....d}.{.S..~....3zr............8.../~..b..zq..bk..W.h.6.......'W...........E........{..m_.7...?>.?>;......Y..\.nv......ZL\|w\|q.....+[.o......`......k.wv.v....$....'.9?Y..?l...'g..s...W.............!..z.e.....0..WW.o.....o.................o.5...x.........N...=.?8.~vx}C.4...@#.Vy.=.f....waz\|._......'..Z......n.z......K...5.U.....S.ek...{...c...P.._?.EYs././]..(.>..[/._.. ..u..g.=.?..$...K/.....'..H........z.....\..Z..@&^#..N..N.....o...........<a..PTk........b.>{.....gJ..k....ON.]u].o..?P....{..+....f.Z/O....}\|.o.W....FK[.d.7.z..\..?.7&...k..VtH........_o...<........&......~.K[.om\.^...\.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9182
Category:	dropped
Size (bytes):	4104
Entropy (8bit):	7.948910842499831
Encrypted:	false
SSDEEP:	96:5/0w4xzd8si6nn1QdZ5cR2INKfTWEiLLotVKekJZkTiybkuD25iP0:lsZnWmHEfTWEJtszJgRbfCic
MD5:	BDC5A45E28B2FD2F352FD82A5619892C
SHA1:	846356F067ADBF0FE2B5D640E57DC4E7F9063AEB
SHA-256:	BBB7F07353D10EBA66A6EEFAC5AB6CB7D8E3AA40555516C8E358CC35758C7004
SHA-512:	E675AEF317F892E6D761E80D3D5817C0D049A27D539913A21E2EEECDAF4BAF5F76656417D7C0633F32875621F1B2C2C7478861914A18E649084C14EAF6DFEF82
Malicious:	false
Reputation:	low
Preview:	...........ZYs.8.~....t.....K6..N.ru.;.N..n_7DA.b.......~....%.'....8.g........0.0.x9I.\|.`...R...R...._\|{x......E.....7..h...,2.Lx..nx.#.'<.G2...\|....Y.V.\g..\|..C..y..0....t....'q"0<\|...E<4.~C.\.k..F.k..r...t...^.6...3.,R.f;Y...%.E.....R.@.u.Q...x..k".o.e..O^Ul.......t..9L....y......t............yt.o..E.F.d. .PL.P..p.. 7...&.yx80...X...\_..G.L....\...7Cl_)1...y.........l9.cZ.GF.$...Z[1}...V:....C./+.x.X..Y.V.\.4....%..n.o.&.........0l.T9.M@........i......FY..N.\.f.......a..B......A.Z.C!...E:]ka..A..j...DH.3Ypm.....;~.':....,.....l5.T......t...5......vA'...21...j./..H..2...<5^>1.%...#.D.d..Z.{.$..JSC..)......w.Bi.-W#-..1;....D.s.U...Y.....PlL.y......4'7.99..Q.r.vFQ.:.;.i>.9..}......~.!.?Gd......Zx.\|..rS[..1..}.r:\|..b.....a....z&53..D&....5q".... .k4..9l,k.\|C.d.....o../>]..a......\| k.m....l.zl._wn.o....U.F"j.:D..9..m.D...P.....H@q*%......OK+..C..U;\.u..\rC....t:..Y.pA. ..7.t.._E2..-..Z....&z......0g..T.(>..R>{.O...+..6W+.~..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22489
Category:	downloaded
Size (bytes):	5646
Entropy (8bit):	7.97458463888794
Encrypted:	false
SSDEEP:	96:UQ/Vx7mG8Z5q7cNo37GKhelQcPufy8mXWlNdy8ruYvopE8kAdqf:UQ/rf8fqQNREel7F8mXcG8ru3E
MD5:	FB927E8CA4122016C9BF2DDB2EFC2AAE
SHA1:	7557B5DB3CD7A2317AB5D157B112A23F65E94BAE
SHA-256:	F8E6EB31A067F1AFA666BE7E147B6BCC61234750045814C2C519E543CFAB4BA8
SHA-512:	B75D3E5AD5FDCBF3215F7B303B7F1B923D80F2C3943EF6E587D8CEACF556CD2F4E6C31850EFD505A6BFE3DF9812E4DED445EA70E59298540D69E78F6E7D4196B
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/22232.15ef530edb01268cfe7b.js
Preview:	...........\{s.F...>..l.D...P\|.......q.";[.>W..D..\.........0.IY.&w[W....gzf.{.M.heU$a..z%Ic..k?..\n...M...O..=.....0...\..w]w.~...;......._.+......O..1.....W..)....~;...F...ht>4.......&$........N..\\|........,%..........9._..K<.7YX%y../...=.N~..HV.VJ.E........6i:...g......V.T..f.+.5)..KR.E........%qO..T}>..k....$N....]...fE$..."F0.....3..Q16..O.D..tf...%.i..9y.\|0.<.....E........}...1....cV.jSd..O..O..[F$N2"o)....L^@.....%..#)"H....^..\|..w.}}...wW.2.\&$..R.\....;......:K^....)...{..x...7o...$..3..RJ..I.....SQY.{..[..F..E..[.&..P..a...&..6v..\.Y.U......&..$[.p....Z....Q.U.YD.ZHT....E.</KR.t7p.&O"..=...Tbq.?..ek.3..#..n....s..]B+.....@w..v.QIx...\|..7..w.u..f.w\|.`...d...wo^.z.....aD*<-....~.).I.....Ff......wo~xu..7o^......]d.....3.0>]m.8....3.y...H......y..c.............q.P..n~..y...Bj......../...hkV.._lu......M.B.1.e..:C.....t`/.......W.o..0.vr.}......_#:.N~...X...P\......._....X....~5?-,...a.%@.Y...tDx....5.{.Y...G.E......Ru\|.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 266372
Category:	dropped
Size (bytes):	80388
Entropy (8bit):	7.983153023051787
Encrypted:	false
SSDEEP:	1536:QziMvjJFuT9CBZxYYgCF16pMSKy8YuCmDV8vuHCuaA:eHJFuTaHFAMKUDGvtA
MD5:	35A46116980C974751122A331D47FD84
SHA1:	CD6E9014E38596C681641A27706124B5B69F86FC
SHA-256:	CCAB92B9BFA43457F743CD83E454BCC63A768DEB352FBAD2D06D718EB2815A66
SHA-512:	AA4F484D3CA65525D5613243797D7E025E552DBD4E68BD9887D88D32FC6928C13DD7A47E8F97C77436924478D451445FA121D1BC1958A0BA94A2A05159345048
Malicious:	false
Reputation:	low
Preview:	............w..q..U.9.C$.t..4..E2C....;.;.<>..K...`...i~.y~.]..@j..#....Vo........\|.>{..f}tyx....../_.......:<=...o.......{y{.....0..g.?n...{.....W[..z...z=...:=.y......f...t..N....G..t..}.......ag..dk.P...j...l}38.>.>.?....t.........U.}..N5.S....W..........z....{.gg...7.......^...X.....^]\..n............z.w.....G.F..\|o/.....[??#./~..p........z.b.....d}.{.S..~....3zr............8.../~..b..zq..bk..W.h.6.......'W...........E........{..m_.7...?>.?>;......Y..\.nv......ZL\|w\|q.....+[.o......`......k.wv.v....$....'.9?Y..?l...'g..s...W.............!..z.e.....0..WW.o.....o.................o.5...x.........N...=.?8.~vx}C.4...@#.Vy.=.f....waz\|._......'..Z......n.z......K...5.U.....S.ek...{...c...P.._?.EYs././]..(.>..[/._.. ..u..g.=.?..$...K/.....'..H........z.....\..Z..@&^#..N..N.....o...........<a..PTk........b.>{.....gJ..k....ON.]u].o..?P....{..+....f.Z/O....}\|.o.W....FK[.d.7.z..\..?.7&...k..VtH........_o...<........&......~.K[.om\.^...\.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18298)
Category:	dropped
Size (bytes):	18916
Entropy (8bit):	5.6453273959723
Encrypted:	false
SSDEEP:	384:/K2+nG8EXuGyW8FuKW/00BlP8rbnPrlsi1yKnaeRF+yMfRGcL6ZEm2:/K2d8E+Gzr0uSrjlygaeD3ILaEr
MD5:	87F3F1784464A56B80F04D1C64FAC841
SHA1:	66ED80D249257F5352375A3F12103538963D7CFD
SHA-256:	A7EED1CAFB8953D9B44109950C9C7C48BF6DE295975693894A9D36F7AC9D266A
SHA-512:	6156B8B9CA66D7E360AC2E6201AA78F89D0CDBD1D473EFC6BFF7C6EE8C36C15944FDF60C62DB6FE9099830350F929ED0AEDB225A9082E5F91C4ABB052AFFA344
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var z=this\|\|self,L=function(f,b){if(f=(b=null,z).trustedTypes,!f\|\|!f.createPolicy)return b;try{b=f.createPolicy("bg",{createHTML:T,createScript:T,createScriptURL:T})}catch(d){z.console&&z.console.error(d.message)}return b},T=function(f){return f};(0,eval)(function(f,b){return(b=L())&&f.eval(b.createScript("1"))===1?function(d){return b.createScript(d)}:function(d){return""+d}}(z)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var W=this\|\|self,f4=function(f,b,d,T){for(d=(T=B(f),0);b>0;b--)d=d<<8\|g(f);h(T,f,d)},g=function(f){return f.G?bK(f.Y,f):e(8,f,true)},B=function(f,b){if(f.G)return bK(f.Y,f);return b=e(8,f,true),b&128&&(b^=128,f=e(2,f,true),b=(b<<2)+(f\|0)),b},TL=function(f,b,d){if(d=typeof f,d=="object")if(f){if(f instanceof Array)return"array";if(f instanceof Object)return d;if((b=Object.prototy

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13863
Entropy (8bit):	4.887937848699048
Encrypted:	false
SSDEEP:	192:l/VNMR9Z2cLY6AJb3NNQzJulST6QRnqTdd4ICiekV9SdRq+r1/SM/RlchzpxGpAb:ld9+aSacPvrNpkXEoyRKR3
MD5:	21AAEB1A96856839E3A6B71157A83987
SHA1:	F56B97707EA1F609AF0D3E4F467E7ADB2E4518C5
SHA-256:	0990957743DFB317FAE65DFBD9CB05964322592AEC4918C3BA76C3849E9EAAC8
SHA-512:	4D63F4F186DC524F52B8559058A13B50A2E5B632CD1151AD0F5D05119838193720627599282D15BA1B88FFC5ABA54B6D5C0D71B44DBD0641E5B29942238E0449
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e?relationships=network_location
Preview:	{"data": {"id": "70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e", "type": "url", "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e"}, "attributes": {"redirection_chain": ["https://www.google.se/url?q=%25CHAR5fgdrehsuabfolb&rct=%25CHAR4ndgsTYhfgyrv452jbsda&sa=t&esrc=Rgxldhffsbxhds&source=&cd=ZyB0byB5b3Ugbm=BAowunbc&ved=NmsnjdowpteqndyCBtY=&url=amp/reformasvaesma.es/pujrtqdguyr?eyCBtYgRFnRgxLmVnPv", "https://www.google.se/amp/reformasvaesma.es/pujrtqdguyr?eyCBtYgRFnRgxLmVnPv", "http://reformasvaesma.es/pujrtqdguyr"], "last_modification_date": 1730287049, "total_votes": {"harmless": 0, "malicious": 0}, "url": "https://www.google.se/url?q=%25CHAR5fgdrehsuabfolb&rct=%25CHAR4ndgsTYhfgyrv452jbsda&sa=t&esrc=Rgxldhffsbxhds&source=&cd=ZyB0byB5b3Ugbm=BAowunbc&ved=NmsnjdowpteqndyCBtY=&url=amp/reformasvaesma.es/pujrtqdguyr?eyCBtYgRFnRgxLmVnPv", "first_submission_date": 1730287023, "reputation": 0, "last_http_resp

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.830947767550464
Encrypted:	false
SSDEEP:	3:YAf0KmKXp2BIWl5R+xDSNn5h3TGSqBbtpdaW4Tex1n:YAf0KmMpqIo8xDgstwW4Tex1n
MD5:	A2E43DFD4AC85D16A98E3589491D4F5D
SHA1:	45D76ACA4F4F2284A4C134D9B5DC791A66BBEB3A
SHA-256:	624AF723EE51CBE36997B1134138F99234449E1714C7B63DB62C3181572B243E
SHA-512:	5999EA21D9D5DBEF6CA91247AE1E979EEE6091CBE6DF775F8A30ECBEE271B85F5C1A88ADDFCA361DEBF22C970426B71070A8478C8B439D93A5A3D262FF098849
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/files/b19e94149729ebbf76d9a027e6e9ea53f796c5bafd5c281fa87c023ad59b13e8?attributes=meaningful_name
Preview:	{"error": {"code": "NotFoundError", "message": "File \"b19e94149729ebbf76d9a027e6e9ea53f796c5bafd5c281fa87c023ad59b13e8\" not found"}}

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	dropped
Size (bytes):	371424
Entropy (8bit):	5.657457381510619
Encrypted:	false
SSDEEP:	6144:JkGxFh1GLgB40ozAzRRSRx0C8rT/N2CUZ9Or24Avo:60FhOc40ozdSmYn
MD5:	29448815DB6BD1F35B6F1BA31C5D2666
SHA1:	82B0045C2560E8E0FF61E1CCEDF11F64E86D83E5
SHA-256:	324D6B9CAE8F3258600921FA4D9D90EBE0464C74C6488D648E489B130787DC21
SHA-512:	CC0DD1A8F67699225CBA04A6B3135C2A32428E7CF325AC5DBFB931DC68D56C0645B8C4920C01B30358B4D65F740FB923BCB2B8B80EBAF0D3097DD1C4D4341C0D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	downloaded
Size (bytes):	1838
Entropy (8bit):	5.854832783067556
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:pAxMI5czgk/msuG
MD5:	A3B2F935CEDF98CF2849A74EB50477AF
SHA1:	699479DF6435336BE4AA1D41378148A922CFD8F2
SHA-256:	3609B3C4EC2F9E0E1B6A33987818B09BAB19817A0B978068E10A909F74AA24F2
SHA-512:	301380C10598EE09D07B6C3259A21F73D72DEA17007FD3849FEE77DAE1FA09B8FD02A9FD95E949FFF4FC5329C9F2BB77ED7FD6DFCA1B5BB37474B6ED4DBB7250
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 70200
Category:	downloaded
Size (bytes):	19475
Entropy (8bit):	7.99030350023132
Encrypted:	true
SSDEEP:	384:PCkyepKg+mjrJsjUs/NJJIc+GLCI2masI/+S4YS7s5C:P4epHOjUqJJVSmm+S4YSo5C
MD5:	3744CFCD4ADB74EBAAB73528BCE81268
SHA1:	2071598C137A0F2760E8299A46FB4FCDC11AEBAC
SHA-256:	64940DA3B942F8612FF02476EC1780A05260741BD15C6AB9FCBEA65313046118
SHA-512:	DC66711BACE2D48EAC1B5EE4E233412F762BC64514595A29754682A611BFE2E06C29EEB31A32341F5E4BAAA668C6DE60C1AD4021D0B66B44D8DD0B014189DE98
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/38304.bf8d5ba4a04bb6a92f62.js
Preview:	...........}............bx..(Y.)':.-....m..1H.CX$...\L...Y...I.WU..@..%9...........[..`>.......<.m../..Mx.....O.>.U..&..?\|h.......;.3w.m6..A9p.w].>.6q...:.'..K..D.u....Z.7..z..jW..?;.^.Qq}Jm7......F.^qG..Uk....vzu..P.n.]9...3vW..0.>....p.Y..0Z.p.......__l..2..y..Hf.5\|.\|.....\|8.F..../.8.......u...... ...U...4.At.N.......f.DS.]0...'%=.B.7....O..?T.M...q0........j......v..V+.x.\|X.U.<)..2."...A..~`..>.G..._9^..f.t......$...@.R.s...8Z...6...Of....i...ay<...8v..$XNb'...y@..r..fL..l...W.<.@..&.0..~t......k..k..D.?.%.:-._,.....b.......z.'..);,.a[.1@.....o0....<.a.9...y...W....`.C.}S.G.h]).T..C..j..PP.)L.Y.<...5...o.. .+%7.9......w....#5.B...S~.5d...G.8......u.l.k.57.f.b^).>}...?;O'..x0,....O..p=....:.&7..%...<...ok..L.j.Vsf......1....$..l.4...k.2N@._...V...*...p2,..8L.. ...L.j.c....y>.'.`i.L...#.Y.?W......\\|y.Pw.NLW.y.....O......,.....s.N...-.^...,.N..ed.V..^.7f.O.....6Z.#.....V.....kE.(-OC..R......R$.#.....?...+..c..g..]......c_].\n.>.K.?w\-.....W

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 15466
Category:	downloaded
Size (bytes):	2643
Entropy (8bit):	7.91982612378452
Encrypted:	false
SSDEEP:	48:XMdzFKUazpZehBDwAMHJsTn5esEt8ELzRrsNCRxfwWP1iFuVAosBIMzT06ZFQJEh:ctwU1XHMHJstePtnVskRxoWPHVAonYT9
MD5:	FA19D74C5004131A92A0740DD51FA769
SHA1:	7949BE60AE023A30183CB21E29D82D53CF8D5747
SHA-256:	066BA6602FDF7F822E9B1FF98232A35AEA1B125E6CC6BA6A957C59312C7C2E23
SHA-512:	D2F785CCF94DEF118C63940C93875421FCD3C746A1CCB90724BEF21EA257614035A16E5E775FEA2F67F40799B44C6C5C422C26F5629068F28F143344476101A8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/8405.86474e95af8bef65079f.js
Preview:	...........[io.8....B.b.i+h.LNg.L.k..d.......,....@RN...}.R.%;v.4......E...3.....@...'...!...>.....Hts.}.x.......n....>.o.t......I...q..P.o.gB..~.....g..u.w.{`;.....O.m'..ak.._m..q.hw..>..Z..]..xrxr\|d;.\|<8<>..@....?.O.y...&F...'..........L....).XzeH.7..K3...j...._..{.1..3.y...H.fY....eD.,1.^....L.L..$...{....PEO..hlQ..S}...7.}M^}.E....SH.W$!...2.;..g$....vG..t..B=q]......1.tD:.d.......@...(....}2..H...w.b.5.T.,.1.rc\|..o.....~.]g.9....7...c.G9q.".).7....+..>...a6.0.d....8....B...6yn.Sp..!.4..MH)... ,.oS..X{...i2..\qP..aTHn.yj..5.x... .972.\|.$.s....d......0..!d"..H2...g.f.........'S......O......%.\|..<......I..n._t....M..F.0F...vO..f.i.N...~%y..T@...\.#."..;..Y.vvZ.....AX#..U.6.....4./e.%.s.O............P^...(.XL..Xs,..07........9......a.,.ugt...R.."...o\|P.3^j..-}m`.n..........rp.....Q..(....#...(...(M.....j%3Z...z+.hZ..XN)&.^?...Hk...$^GMF.".M.I....Ii...e.O........+D.aN.....*6..d....x.w.S....'.:i.....^..K..n.......F#..$...+.3..SB..Z.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/manifest/icon-192x192.png
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 221
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	6.841014064623295
Encrypted:	false
SSDEEP:	6:XtqDe7vzqnoDf20BZm/6EIlKTOUgo+F8Rl:XSA2gs/6EIlCLo8Rl
MD5:	751911295BFFBFE07B94E21C19D23E50
SHA1:	CB4BBFB5C73B6A38FDC2DE7E55D32AD984D0106A
SHA-256:	413AC989E713AF6DF5BF755FF4063A782E139E0C8B666836508DCD4C03370EA1
SHA-512:	92F3AF4802BB5F6F208A7F8B68E3BE742231C68CC5DF207D3B6BC0CFC335DF202CEE4C04AE11C74B10ECBCF5B7AAB43C7251DC5E0713F85C30D986DCEACB5CC6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/favicon.svg
Preview:	..........L.;..0..w~..u..TPj(.....VJR..J...b..N...G..[...Vafz.k.....{7<.Z...!...l\|.\...Q..3.8....dDPJ...j.z...9....Z_....B3.a..A+<...R@..".....5....,.E..n[0Y..(.$.H.+.}.`].u.N..[.\|.........k?....

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 58004
Category:	downloaded
Size (bytes):	15134
Entropy (8bit):	7.984256581631135
Encrypted:	false
SSDEEP:	384:keSWlIFfScW7e7dKyzJVgmTElihTRgrb08A/Xane+gsP:NlIpbWM/TEUTRgf0Z/qneUP
MD5:	6F76AEEC5FAD589B2B81E8BCD340B6E5
SHA1:	165D110FE92768CDCEDB7E217F0F3B49D8C1CC11
SHA-256:	3594950139E65AA66876788E9B47185275D5A7FCCBF295BD32E50A8552B6D081
SHA-512:	8FCF8A43CF237C269C47935E563FA1FA85F73701FF09561812F99066649DF7A7F452E14241C721007D33BA7F373903184755511588C917A15CEEA82F51A2D462
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/30592.64f38a11064ff2dd4b23.js
Preview:	...........}kw.F.....0.8...$u'M+..9.y.I....he..%....@]B..S.n4@R...{f.(....TwWWW...y.yY....g.d.\F.Y8...l>.\|.....0..o...9:n..yvV?:.j..t....n..?..o.{..c....V.....6....a.%.......n.1~l..n.4..?.:.;..$.....~......?.O.y.L...4.V.~az:?..y.L..i~.c.....t>.....0..<.-...i..\|9.%MfQ._...a...$....I/..k.7.....,J..h<A..kf.+u.(.&i.G.i_..";.^4........#.n.....[...l..~t..7.?.O.uZE\.6..s..s.....h..L..4....C.....u..h.O#.J..O...Q.8.....h:.$x..'.ap..a..=...r=..zc!c..[~..Y8.^...g....2..(....,..4..r...\|.Oon...'.Y.qe......=..M......O.....-.F...F.0.>h.X.{.:M/.f.....6...D>=]6........5._.H..j....>.gyr..h.k.ys.7g.E...Fc......=..h....h^..h.f.L.u.z.l..s.3..w.:[. ..<L.wYF..vg{oo#.....<...^.E..?$W..G...;.nmo...a.....4....z.....K...<{.z...7'[.3....v[N.^...4z..y\|..my...5.8./.4....EYC.<Z.......H.r.C..[..qt.F.G....>.$...#.)....G...&:.}....vL\..<..>..f\|p...1...?.?j....f...i?...dBs..8Y~.\|..C...z.x..<YI.@.K..z..~=.g.$..Q2.....b.."....*......si...0....0-..~...1..N....+.d..`@..?.._g9.YN..-

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 12042
Category:	downloaded
Size (bytes):	4106
Entropy (8bit):	7.94057963290253
Encrypted:	false
SSDEEP:	96:Ms/K70GoX6TzQ1oxD0A3jqZDPTJPpxrg/HiydkSB9:MsCwDyQy50BbT5E/CKkm9
MD5:	8785BF307F5E799B7B733B30D0C2919C
SHA1:	067C6C04AE321639F166E2E105054F3C37B178DD
SHA-256:	30B66B900825F39743AD24031080EEFE1B04A80225B5A0285FBF76C6E6C74C27
SHA-512:	6125C4EE1F435B96A52813FDF430326C8C962F0ADD93E8512CDBB16421FD39090CB3EAB68B5D0FF691E944828314C67A2AFF0D040D70036CDCBE7C94440551B5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/92285.13a9b4319a138ac2aab7.js
Preview:	...........Z[s..~.......#..S'..q.L.s....I.)R......{?..x..{..<.H\...[.,g.s..L..s..<..s.....x.....L.&L$......]{.t...o..wv:...A..u%.Tx.....H..w..jk.1......=......m.&x<.?.t<...;.;[..B..;.. ........;.;[.>P._...p.;..>>..c.,......3L....3..q.`....S......C<...v^y....{..;...q{..x......&.....z.Q.%..9../.-.....=.W.^.7.-.N...5....D.)>\|...d E............f...<.y2.c.....n2..0...4.....2.q.q.\|..)......21.i..w.#1t.T.u.P.Oy:$..0...M...-.. ..^..........3.f.@y(.r...$.:.}.s.P~...M7.]u..M..;Q....~....;..e.....ds.8e."....<.,4./Bw..b....<.r...B...b..%Q.....bp.J.A......>d.X... MrIx..99..2..U.\g...@.t.C.%.q.a .X...z.....e0.g<.....<.D>er06Kqoahy..8e...{0{...b...pZ...E.........]..E.1(8.\.....[.+C}LE].$ .?.<.$.R..-..<5..S>f;...X..."..x........ep.h...$....;.?..H..-...%.........i..;...h4.sB^<l-..KL;!7.]...,K......{..c.&..I.y.8.P4,....8'j.b.a.*a.).XX..az@?......D,./.>~)N.q>aql..n.E"&./.4.b..s..$JX..'.$......EB.YF..>4.....I..E&.2..!.MR8....Q....rM.D......).......3..b~..P.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22489
Category:	dropped
Size (bytes):	5646
Entropy (8bit):	7.97458463888794
Encrypted:	false
SSDEEP:	96:UQ/Vx7mG8Z5q7cNo37GKhelQcPufy8mXWlNdy8ruYvopE8kAdqf:UQ/rf8fqQNREel7F8mXcG8ru3E
MD5:	FB927E8CA4122016C9BF2DDB2EFC2AAE
SHA1:	7557B5DB3CD7A2317AB5D157B112A23F65E94BAE
SHA-256:	F8E6EB31A067F1AFA666BE7E147B6BCC61234750045814C2C519E543CFAB4BA8
SHA-512:	B75D3E5AD5FDCBF3215F7B303B7F1B923D80F2C3943EF6E587D8CEACF556CD2F4E6C31850EFD505A6BFE3DF9812E4DED445EA70E59298540D69E78F6E7D4196B
Malicious:	false
Reputation:	low
Preview:	...........\{s.F...>..l.D...P\|.......q.";[.>W..D..\.........0.IY.&w[W....gzf.{.M.heU$a..z%Ic..k?..\n...M...O..=.....0...\..w]w.~...;......._.+......O..1.....W..)....~;...F...ht>4.......&$........N..\\|........,%..........9._..K<.7YX%y../...=.N~..HV.VJ.E........6i:...g......V.T..f.+.5)..KR.E........%qO..T}>..k....$N....]...fE$..."F0.....3..Q16..O.D..tf...%.i..9y.\|0.<.....E........}...1....cV.jSd..O..O..[F$N2"o)....L^@.....%..#)"H....^..\|..w.}}...wW.2.\&$..R.\....;......:K^....)...{..x...7o...$..3..RJ..I.....SQY.{..[..F..E..[.&..P..a...&..6v..\.Y.U......&..$[.p....Z....Q.U.YD.ZHT....E.</KR.t7p.&O"..=...Tbq.?..ek.3..#..n....s..]B+.....@w..v.QIx...\|..7..w.u..f.w\|.`...d...wo^.z.....aD*<-....~.).I.....Ff......wo~xu..7o^......]d.....3.0>]m.8....3.y...H......y..c.............q.P..n~..y...Bj......../...hkV.._lu......M.B.1.e..:C.....t`/.......W.o..0.vr.}......_#:.N~...X...P\......._....X....~5?-,...a.%@.Y...tDx....5.{.Y...G.E......Ru\|.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	dropped
Size (bytes):	367233
Entropy (8bit):	5.656141880283898
Encrypted:	false
SSDEEP:	6144:JkGxFh1GLgB40ozAzRRSRx0C8rT/52CUZ9Or24Avo:60FhOc40ozdUmYn
MD5:	5B3207D19D9A68BD867C3A439661CA56
SHA1:	5E46545049B20A4B81052068D7019DF49767B539
SHA-256:	1938FD369EBDCD54E949FB4181285983805623F4C7AD7E539D79B933BA512F3E
SHA-512:	17E2B1DADDA9C5F67CC925BCDE153BFC0F2B6A93BE1EEE542F35BD1DA969333EC299B8A3EC794042DE0348EF511EE33C69BF66646821A7B52303D04BB2328574
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 61400
Category:	dropped
Size (bytes):	16579
Entropy (8bit):	7.987454663763108
Encrypted:	false
SSDEEP:	384:R5SNqKFSg62e1EPiQz0oad32tc8+JQAK20SUSB894y/v:HSqCPe11McT3nnuDX
MD5:	BC50471BCB96B192003500BA7C29A5CE
SHA1:	86026AAF0C37B8BF9E76FA163BB60675DC7BD401
SHA-256:	ABFEC913B0E3B58A04194DD5ED6DC83C9BACE5C604175CC2E666A0E105C6304A
SHA-512:	97B91803202D60F32C6C5E90F911F2B626DF2716D3E7EAE5063F07F293B6F3D90AE6649B0F0BD8112C0AB70AA3B037D68C3510A214EE6EDA11646DE40623EC2B
Malicious:	false
Reputation:	low
Preview:	...........}.v.F.....0'.M.4I..P..Gvf.b'...5.^.H."b... eE.Z.5..'9_U_P.P......q.K@./..u.....4K.I.8j.~8.\..7yw2_E....8[xA4....o.:.U:o.y.......^....v...`.....^.........Ak..j.%N:..;...A.....~w..z.....;h..5...C..?...v.-7...~..r..v...i...x.w0.g+...`......k.Kz:...f......E..c4<.....}\|..v{.=.a........s.6..u...3v..{.....+....}.....3......=u......k.{.'.......;.[._.7.G..QvD...h..&Y.G.Dn.b........~.....9..=.9....G.Qz..~...O....p....K?.....$..Y.4....(.5.17m.F...g.K.......f..w..?../.[.H7...\|....4.`..p...{G.Q.(l.[.x......o&.&."n&....~..]..?.Z.>$....VI........z.S..D.Y...M6G.8J3..7..:M.g....q...Y.xQ.bAS...m..]..9.MB/M..}.G..;..i...\. .jB`m].+....t....l...,.B..h...^... LO.kl....F.z.......2..6x...!..~{..z...F..L..@f`D.po4j..u..:.....r9.#Z..N.L...f.}.z..x..`.t.P.\|.t..c.W...........p...U.0..x.hl..e....4..~u...i,...K...[..%.%.g.?..8\|.d... .....6....+.,........h."../.'...=B......u.....#BR...%.q..K...z'`..Z.8.....;,......4..D...B^...=..E..s@.....<....I..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19296
Category:	downloaded
Size (bytes):	5980
Entropy (8bit):	7.971059673572338
Encrypted:	false
SSDEEP:	96:E4NAQ9o/Lig0GYTUpv7ty9HJNxpZjfS7mcXo1Xv2kc99XJfpDVGQVBJO/HlliPzm:EZL4fAJ7w9Hv3lfS7mcYleka9LVGQjJ2
MD5:	42FC46104768142F2F90D85B5AC358B9
SHA1:	EEC3F8C8419F0C75E542D1F1BC889A4190375B99
SHA-256:	047067160565CF0C427F8852ED3CF994313DB7C67DA22A42C975B97FE3595950
SHA-512:	9FD9C4FD78ABD63D42E8B3164BC4CFE1F0998F737FA2D567EE4B31443C5F3DB115F6E6ACECD0D70D5EF1B17B3488048476FB4308AEADCEBA9CEDF38C74A854CD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/71288.1829e1a8db7a3e06e295.js
Preview:	...........\[..6.~._.h6=b.dSTK-Q......d.k{...3.HHb."yH./....+\H....e.)Vb.Q.B.P.....Kf.U...h5.Y.u..&....czs[.............?.N~,....'.b..:y..r...Y..~y....rb.n......jq.^.V.....jfZ.\|.{..gZ%.........&....k:.^..a..[..Z..[;k.../.N.v.=.a.g........`.....,.J'a..c....O.I.^../.....YX9;V.x..g....feX.y..c......x.q..z]=.,..o.6A...b..s".fEP1.\K....w..,........U.r.R.6...x.~0/...zL....o^...h....4?~,.U..c..._\...r....)S.......\|X.IP....X..F.\|.W.$.$x...zs.I$.<BLc.qj.c..q.A.......l"ZX.W....C.5.q.}.Dq...........K...x.Y...0.G...6d.e.Tqh`U..`...B$c..cZ.[...[s.:..s..o...,>Q.X...x},....-.0....\.iFq..U....<...+^giUdI3...I.4..........Cb.....z..m.U.0.Z.G....Uf...=.^./6..s5H..#..H.n,x..I........!(...kjKU.N...-0.uw.&K...U....z..2..P.Z4.4^.i.......Y..<O...t.B./.2-.i.pq.....4..W.;..:g..{...B..Ab..4.r.E..,G.).Yi..e.&.z.?~..I@k..k...q..x.NK[#..DP... (...S++W..1^D..`.%./..@...Kc@.$...n.e..c.@.C".S,a.?..a...;$.;.....g....o.ll1X......Z......v'.aC..L..H...."...i.../..D.y..H.6..=

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	downloaded
Size (bytes):	359366
Entropy (8bit):	5.549209156154755
Encrypted:	false
SSDEEP:	6144:vUI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDInZRRu/tGghyXV8AXvPh+zaohh:hZzJ2tGcyXV8OvCf7
MD5:	6986FB735FDCE62D18DAF8BA05E17B6D
SHA1:	6EB769D93846C4FA0FEEF2F3D7726C5D63797398
SHA-256:	89237639FFFDFBB3F05FE2FEF2F70F484F583CD97279882A18DCA1C95A6A501A
SHA-512:	A42E682FCFB34AB54229B81BCD1611B467A588EC5349938B1EF881D1DC6307DD98F755E99A1EE1E264BC0D556578E156FAC1697C87946CF0736E813B0D6D0DFD
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22257
Category:	downloaded
Size (bytes):	7442
Entropy (8bit):	7.977233413704481
Encrypted:	false
SSDEEP:	192:wegUV1VwoKSANTzAt4vck15BYL4PnjVQ8RPugiuJx:wegAXAxwbWMLOVBR2HuJx
MD5:	264C425F19498C59901C5442DE489EA5
SHA1:	0E6EE42A35234DCD14BC8F4E1857AB76D23BDE4F
SHA-256:	17482FEBCF6FFB31F494F96EC8B77206AAA18C957F8067DB8DC098C4FECAFAB3
SHA-512:	37C64E1F9850859E30B2B1E366925DF67C4315ABE6C238B5B5226ABA4E75C6E70A7FD99586510E523FFD21280FCAA6D1582BF784D9462C6F2EF1C615B43C33A3
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/71254.89ea96287cbc8b900860.js
Preview:	...........\.v.F..?O.3..H...q.)G..(...N..a@.H"........wk.. e...........j...i..^V;..,.:.l.t.......`.p.h......7......5[......[.~.g.C.cu..v..6...{k=.tZ.a=...........(...{...J..#.:...c...v..eFj.V8.FG.!..F.U.eA......k%..&..EY.,.es+.E...0Z..h4...._..93.....$.%....zI...N....`Z..\|hm4.n.,..gl.b..^M.......7cf:.....C...SlF.rG...n..G..k.f=.e.....^=....I=5...}.....`...R.0a......{{.>...S...t....MS..d,.S#v^......i.f.g.M....us-..7.......>....<N........Q.=7...&..,.g..<H.q..YE.^.:oX.o.#..<[.f.....6..K7:2._....x./..bZb15.Y.,.,.n.5.a.......cd.m.4....h... ..Md..N......Gif..6W.........kp~"..fs...ah.,%..5q......6.{..,.V....YWq...........$.Y.]e.*..........&o..v1.....k/.W...:.c.?.a.u.%.Zm.\.HR..v.....~S.......gA.E...V.........u.l..^o9.#.z.}\|=>.8I...`6..7V....DB...A....[>7.)...p....U.y...5..Zwn.J.',.F.Z.?.,.'.E.]..p.-..f...H.IG.{D.zP...M.X.T../W..).V..2.L.z..j`.G.Z..5...........\|A.3.iM.q...`...93....9.Mk....uEc...Z...3.[..i......... .7.4......n0....0

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 7256
Category:	downloaded
Size (bytes):	3092
Entropy (8bit):	7.925565986083929
Encrypted:	false
SSDEEP:	48:XL3mtr126s6y7B6truS2y62OBcbrNa5wZ8eFcXtRCL6jCk2vWmX1LEahDLyNV1m+:ryR24ruTgccXNaeFWy6jv2uM1LpLy/Y+
MD5:	843F2084450F7137BBD8657D571AAD47
SHA1:	8E6092F1E72448504F2CD16AFF87AEB4D3B9F1D1
SHA-256:	3BE9841DB81D8FB03F65D7C98777B7D02CD2A72C68FC47439B1C1C49285A86AC
SHA-512:	139C81903C18D638994A2A467C24BD64D83E98AF9525BDD89C58901CDEA7D5584EDAF878811B6ECD6ABB693ED457BCD80C18A55D72BCAAAF3774B58664E3A985
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/graph-overview
Preview:	...........Y.s....+.N]... ..;...n.'.;I.L..."..,eW..E..~..@..:m2.y.=g.<....Q.C..6.irz.~k..&c.f:.).NODX.\.>.gY(..Z..12c.^.............V.D.........[.g"i.Py.R.j.tN39...n..I..c.H.&4.[.dyE&.......h.x....6.x~\XD,.p..6.K..X.J..Q.s{{kM8.$T.IJ22.....v-~b....K../O..y.B7R+'..^..Z,...Oh......n.,..t6S.3.J3..GD..dI..}...k.7}...\.D....-.+.!Q...\..../...E..VA..u(.........K..-..BP9.g26.0v.4.....f. .....L.c..:.:.>.....5.-..t..9..Y..).X:KM.........dw?...........L&...{..4w..J.Pbc........+=..u.hc....3..l2....r.A[?.t...E........%,..7\|&)....cVP%.q..%.>>.D..O.....w.i.'./...n...................S.2,...&\|.Y[.$.K.1.....d.V.{/......?V..O.....\........_....go?.....fs......$CxP...1\o....P...u..cx.<...uz=..ms......=s.....0.Q....R..+..:-.^\.By."..3K...<.<........$....T.x..t.^..{}...nt....Vt=..R[.Wi.............Kr.G...U.68cIt..\.... Y8U..(.NJ.....$..K...%.....J...mv.+......C.O...q.P.k.._./.;...,l}.C{.5..3Z,/iBCDe.R]..z......%..F...?>....\.&.........h.M.:..}.T,...NL`8@.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	downloaded
Size (bytes):	367233
Entropy (8bit):	5.656141880283898
Encrypted:	false
SSDEEP:	6144:JkGxFh1GLgB40ozAzRRSRx0C8rT/52CUZ9Or24Avo:60FhOc40ozdUmYn
MD5:	5B3207D19D9A68BD867C3A439661CA56
SHA1:	5E46545049B20A4B81052068D7019DF49767B539
SHA-256:	1938FD369EBDCD54E949FB4181285983805623F4C7AD7E539D79B933BA512F3E
SHA-512:	17E2B1DADDA9C5F67CC925BCDE153BFC0F2B6A93BE1EEE542F35BD1DA969333EC299B8A3EC794042DE0348EF511EE33C69BF66646821A7B52303D04BB2328574
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 1641
Category:	dropped
Size (bytes):	1044
Entropy (8bit):	7.824719522652342
Encrypted:	false
SSDEEP:	24:Xi4J0/EGfYW2T/ZYr2FUWdYRX1Ntmg1lcXbGLM:Xi4JqhfYW2tYrOdkX9mg/cbSM
MD5:	7949B4CEE3174871953F6A166E700BC1
SHA1:	5A256FFE0B3D59E8A4B92C4057D340B75A90D248
SHA-256:	94E23705D039ABC185876BFC0E7B3D4132EF3F9C169ABC1FAF93FB66ED60776D
SHA-512:	A60D02716335433649070441D0C08F9C9D1E6065BF4DB7E1E82DDA682FF45858F2168AE3F58269BAB712B87444F7B44BAD41AB66D1A2C55608276EFF8971FC65
Malicious:	false
Reputation:	low
Preview:	..........\|..n.6........d!+..H.S m...n...40v)i$sC.I)..z..d;m..W.IC..o.4...V.>H..UF.."...6......i'.....x\|..n.>>N..r......<...P3.>..R.RMoV7......5.......b1..P...zz.B..\|..,Y(0../V+....f.\|.R.....K.\|.i...K.Iq....2t.........~...B5....[..`.7V...h...0..<.Y.5;. ...j.?E~..b...[..R.R..%Q...jv......o.3y{}...(.9.w...@....g..j.~.3.....4.}LlK..!5...k0%.....Qp..._T@n....?..~z..B.J,v..,w<I.....5h...:N.....u..Ft;...G.....4r....J....y]..D[.+......p.E...h.-Bq/...Ozr.....r......5.[..(.....S....C...H.w...x.w:..{2~i..gr.8ov....J.M....j... <dM.)p.q.X".?W.K!-..........?hD...\\....uU.......V.....w=.......a... D./...&.o.y....f f.E.(..^....b.......8D.cT..T..s.5..z...'.2.SZ.'..LD...xH....O.........x4...c..xI&.4.......87.....q..)..bi-.B..D..]... ..h..j.......J..I..OO./.....).I.......'`.X.M..^..T..>...y....~..m....'..lO&..b...\|II%.LP`J...A.;........i?v.+$......C.[.Q_..W....u.,6O...>sMn.P.\|..4.[.`.5......l%myM...L...V._O...T=...m....R4...6,....;.p..~C...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 1641
Category:	downloaded
Size (bytes):	1044
Entropy (8bit):	7.824719522652342
Encrypted:	false
SSDEEP:	24:Xi4J0/EGfYW2T/ZYr2FUWdYRX1Ntmg1lcXbGLM:Xi4JqhfYW2tYrOdkX9mg/cbSM
MD5:	7949B4CEE3174871953F6A166E700BC1
SHA1:	5A256FFE0B3D59E8A4B92C4057D340B75A90D248
SHA-256:	94E23705D039ABC185876BFC0E7B3D4132EF3F9C169ABC1FAF93FB66ED60776D
SHA-512:	A60D02716335433649070441D0C08F9C9D1E6065BF4DB7E1E82DDA682FF45858F2168AE3F58269BAB712B87444F7B44BAD41AB66D1A2C55608276EFF8971FC65
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/25076.f1d5707846ec1ba9ed7f.js
Preview:	..........\|..n.6........d!+..H.S m...n...40v)i$sC.I)..z..d;m..W.IC..o.4...V.>H..UF.."...6......i'.....x\|..n.>>N..r......<...P3.>..R.RMoV7......5.......b1..P...zz.B..\|..,Y(0../V+....f.\|.R.....K.\|.i...K.Iq....2t.........~...B5....[..`.7V...h...0..<.Y.5;. ...j.?E~..b...[..R.R..%Q...jv......o.3y{}...(.9.w...@....g..j.~.3.....4.}LlK..!5...k0%.....Qp..._T@n....?..~z..B.J,v..,w<I.....5h...:N.....u..Ft;...G.....4r....J....y]..D[.+......p.E...h.-Bq/...Ozr.....r......5.[..(.....S....C...H.w...x.w:..{2~i..gr.8ov....J.M....j... <dM.)p.q.X".?W.K!-..........?hD...\\....uU.......V.....w=.......a... D./...&.o.y....f f.E.(..^....b.......8D.cT..T..s.5..z...'.2.SZ.'..LD...xH....O.........x4...c..xI&.4.......87.....q..)..bi-.B..D..]... ..h..j.......J..I..OO./.....).I.......'`.X.M..^..T..>...y....~..m....'..lO&..b...\|II%.LP`J...A.;........i?v.+$......C.[.Q_..W....u.,6O...>sMn.P.\|..4.[.`.5......l%myM...L...V._O...T=...m....R4...6,....;.p..~C...

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1043 x 698, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12414
Entropy (8bit):	7.162803239499544
Encrypted:	false
SSDEEP:	384:NkugCVjOuGo2MUtq//RSaxV1p/Tt3RJRicFoGulM1kOmRFBVyDubkX:NxgbGEQ1FFoMkOmRFHHAX
MD5:	2C9A0FBDE0906AE9486FA6DDDE5875A9
SHA1:	4DBAD549EA29E5DDD4F0EB5FC2D537D13EA6F6D0
SHA-256:	1A8DACDF71F627F7D72F355F441DA02494E50B19A2B7B812ED3759CB0F812FE6
SHA-512:	865DEC7A348CE085AFF73EFE68C11737679B5C39CDCC9C4A917EECF5416D3D704AA0542BF72CD40D313EFCB3727EBEC091E830B212BAD3FD76C86F107F9036B8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/d5e8889ca86857475abb.png
Preview:	.PNG........IHDR.............k..A..0EIDATx...{ld.}..{..pI..-U..]I.bI......D.r..A.:..A..M...P I..(P.)..M.k...#H.IP.......Mm.l.qc9.e.,{-)^-./>....3Z.G......q>.`..rw.93...}.9...................................................................................................................................................................................................................................................................................................................................D....g?....s..80yf..aeuu..'N...N<.~z....7......V6.Vk.{G...Z..,.w..0..mM@DUU..>[...rqqq.~..:x....87w...1..9>>.8==..ccc....n.Q>......n..'...?......}cll...O.F....{M...z......{.I......?...O.?}.UU.....r.].6........?..t...:].h...'''.O....q..>=??.....C....lN.MOO......'....h4n6..W.cc...o..._z..$X@.@./....w.sziy.........o...;..zlue.3KA......jg..]~.\...,...[......zezz....G&&&.....5......?...o..o.[^^..W.^......,,,t.6.dr\|\|.l4........V.U..Z.JG.ccc.C.n.?~..G...H.......}UK!L`CO>..D{.x

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	10717
Entropy (8bit):	5.628149335409592
Encrypted:	false
SSDEEP:	192:oJZtyeXwX/kPXW+YAD775Nr3bqGIwVjEGKYqH+dMJ:Ob1qYlg
MD5:	FB1809FEB9DB1EAB65CE754ED28AD243
SHA1:	30E58AB89311BBF9056D06916161231087195E5B
SHA-256:	10D91823E45B6940F49D2AC0ED5B44BF28F12B4580EF20595424E392978AA1C4
SHA-512:	74BB7274DE06AEA7BE94FB4BE77B4D8A4ACC3C1EE48397E1C285FC3E10CE7CA6A9D20D2C485D9F9B2B7DC8971C9B90C9BD65BAAB1A963FCE40F8FCE10EEFE210
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl1pynSEg.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl3pynSEg.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ canadian-aboriginal */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39535
Category:	downloaded
Size (bytes):	12218
Entropy (8bit):	7.978613747850689
Encrypted:	false
SSDEEP:	192:CNtagQpzZ/JC7tlwhPncJ9dcxiSXFNpq8dbJ8FqjUvnAFZCQ/iAgGWVW+GFq7K:ca71/JC3wh0JnoiSVNw2fwnAYAviW+nK
MD5:	8EBD6E2CDE3A1BF92D95F856FDF4BDBF
SHA1:	F167050FF1908D57FE20C3464344608A1E91C0FA
SHA-256:	9623B6B441872B5C39C86EEB577FEFA5CA36971814613FE62E4E6C5DDD5D0A79
SHA-512:	7CFFD1D101FF4E4C355A6D7D6B303FFF5BC06628605B298C15599E5DCB9D4BADEDA1FBB25DCB2462C304ECCC0AF2632BD38BA411E860AEC3AA30BEA7C9CA9C30
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/21928.84211e4ee5e5aa330648.js
Preview:	...........}k{.F.....0.....&..L+......Z..=..#.@..E....%....VU7...N.dw.(..F_......n..r.<...vZ..l..h..7..e\|s._/......<....U.[,.i..N...r.z''.A]...6...n..I.i..?n..n....a.(...k7\..O........q...4...v.{.......p..\|....)....q.GI,-.I.[.P..N.s..7S.$....Y.,....l8.&g.....ro.....i.Pi~...4Z.IZ.N...h\.%..6.......7j<C.Ok...g^..$.s...:{.T.{.f..1....C..m.O....i.l6..P....O...a.z.... zN.@../......o.._....O..O..^.j....R.s..i..Y.L..Z9......q8S..8.....#...).tF..N.K....O..H[.....-GaBsH...E.=r...%~h........Eu..Te.2..Ue....8..<.'.q...\Q...[.o.hH.X..J.../.u..2PSvF.G$..5."D../.3.)3...X.$...%D\|...,...j...(..KnU:..-.h....+..?.(My...1....M-.4...4b3....b..,.#.k....h...^........B.s..X..u..k.....rWc.N....;.KL..'Yb.+X.!...5V...v.p..L.s.....}.,...cD.\|?.......x.f^v;..`!w._p.sd.yqGY2.}K.........;..1..H...7.(.S........Dh0.......... .....I..R..j.%..>Q.Rc.(.....E>Q...3cF...o8'*B.4L.+.M..)5..Dv..LwT+.......2.%.uV.b[(..\|....G\|..\|..M./U<...1/..O.MF....'.52a^O......o.e...h

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29075
Category:	dropped
Size (bytes):	8779
Entropy (8bit):	7.974310392674005
Encrypted:	false
SSDEEP:	192:wHMklToU95BlAqddPKCpRbUkt01xkVpKarKDZWGv9WZPt8Dv8xNyv5GfOg:wnJ5Bltdx5Hrt04Vwi/Glqgf5Jg
MD5:	9649362A779A0DE830138C8A4369DB54
SHA1:	E5CC775B024B7B3DA7B2C839F5621EACC41D2F9B
SHA-256:	6338280D2BFAD77F05F1771D052FE7C3A2F9DF4D1033ABA16D9C8777504679FA
SHA-512:	E62819F7BC36968F51F3BA5B5AF09357B7EAA295EAA26C119BE4F8FA0A0A943DA57257A9183BD2722CA56DB49FFCF367A96417CCAE3C1564D95392B3109427D2
Malicious:	false
Reputation:	low
Preview:	...........]y.....?.L....@$g8.)J.e9..J.:6.U...l.......0...>.8.(.7/o5.....@.M....Y..ws./..1]...g.Mru]\|.D.Wa.L.......n..............u3Ox.;y...3......E...r\|....z..N.i.....zi....w...OOO..........".xr..1>....3....I..f.t2.............p.z.\|<......mO...........]........;u.(.k...[.....{.d.'.x.IfE.&.syV..r/........${.~.N..$......b..f.6..&K..4.;).vI0O..Tt#w.*KWQ..L.i\|MMA..I.[.;..O.:.....bR,..K'av.Y....j.D.8j.n...yb8.p...D..S..y7.SN...$..x.\/.$.1.2Kox..'.;...'.N.D.?...XB..".,......S1J6q<.L....w.?.Y.\..w7.N..Yq...gY.......h..<..ywk....b.c..QG.....b.fa!..D.7M...!C.lF.....~..<......\.\|p....I.N..#F......aF..u..y.j2...hzt.N9..(...j.7.1.~...0...D$.....mgi.......6..;. ..;..1H..8.xb.<.w.M.D...&..H....{...y#.D.+.v.f.../.(.st~.rGkE3...Z..E..%.u{^.l.<\.go........Fn.q.._.?F...."..K..8.. ..6....;:..d...n...l.e..w..s36;:.e....(...........Y.$Qr...>..Lc.D..D..K.......g3 ....j.G..D@...Q............Y.,.l..(...e......?w.'...x.C.yX.~!.b...i./..8....H..."....s.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30780
Category:	downloaded
Size (bytes):	9887
Entropy (8bit):	7.974749784794349
Encrypted:	false
SSDEEP:	192:zyicorQj+x+wlOnJIi5oYE9ZbtDob7C3W/x//DotI64wWK2MSx8UnH:8orotwe4YEjtDob7eW/t/iD4wMx5H
MD5:	0BBFD9A5690ED408A669533AD4B2925E
SHA1:	4339B3450313557639E5D6EF76DC4BA6839F3FA2
SHA-256:	83CB6854E93B67A4390ABDCB125AB07CAB3919DCE515D8B96C151E6703C9E090
SHA-512:	A40AA03A2522A087D7DC509ED0FBC0B581A556BC0E68E21FA52D607FC2C9AA5F11174E5FCFDD2399B89455991E4D8D57A229FFB204A547ADE63529D100FAE58F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/76194.9a49eca4de4d4a1bd1bf.js
Preview:	...........}kw.F.....03Q.Y...;i..0....qN............@]B....Tu7. ){&..{..M....u.j.......M4..,...].a..XGq2.H.....m...yu.......t..kg..p2...v.m.....Y...^..l..........MT.i....+.n1I.B$....=..2+...v..m'...mwl'.7.f....1^s...{...h... ..._.;..)....G+QX3g..g3..W..X...dF.H......9......0..J$7..sD/[..a.]...q.:....]...F.....t#......xS.X3p1LG..H.ic<..7"]X?...}......:o.fi....yYT.;.+ z....d,..n0J^..Q.v3.....>;k..&."o..0zE_.....b.OO.=.D.....gg..Z.\,.D.U.~N.g.n.U..x.>.s+.....E...&.]..v........K...7..J4dA...m.w.}^.Nf.0.bz\..#I..z.$..bryi7...vK..E.n..E...1bX.l.6.)..t......../....m...6v.X.....4.[>6\<=U...a.".)M.Z...P..7]'.4..%...7[. ..D\|.,..^.\_.X.....9.o~.......'[..(o...m5.a.QC........z). .6Q2'..x{..p....t..b.RTg.V.n....q...q.....+I.".rW./..p..E.....^..;+_....I&4^Y4....Uhp~..+..h..,0..........d........L.w...M\|...4Y.7..........UB.........%.V...7`.a."rc`.Ac...Y.ZE..7....A@.[.}...oy..,..b..}......2...n.R.?B<..s.oN....0...\|1.1..b.G..}zQ..l.!}W,E.c.#l..An3

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 10374
Category:	downloaded
Size (bytes):	3187
Entropy (8bit):	7.9364260320783515
Encrypted:	false
SSDEEP:	48:XgjdDiBXHw8bdatjbaWZ6ULFbfw9sqG4D2Ebro3zv5Jcj6Ve/LFmJ/WSK3e2/:wdY33RatKW4p9k4pbU38maJmJeSMem
MD5:	C43946ABB837D7BBCE0BADF60EB51D1D
SHA1:	C1BA5ABAEE8927C1838DC5028C5DD7A610D19B37
SHA-256:	8525373619A443494A06D781B3775F51A8E63DB56EF73D3E1345712E4C131C32
SHA-512:	F80C0880692F92C19D2F3A6A3330B94E6404A4F53B7EE7DE3D0A370BAA5A0C6E3EE35D2B07228F72FBA5F04FBA46CFF1371AC996BC72B89DB525E32E3D49A79A
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/11405.39ee0be00408314d19fe.js
Preview:	...........Zks.6......v4.,IK........$..Y..H.BM.\........$E.a'.z./.$.....{.=.]...d...NN.qpGG..n/&.......L...#.... +.su...v....~..[.........'..l!..Q.....?.t.3"-....?.?p...x.._(.!.=.;..H1......%Z{/.._HB.-I..&.g.9...).s.....G....X..G.).....H....cJ..M....%.....=...D."..Oo...Q5.'.[..).2^0..e.7..1..Ke....k"oK.~..i.Z.8...KET6xW..e.......?.[..8Z......\...q...R{....Q...8.~...1....q....6...a...E<....{.....wr...S...+..y.o.....[&...X..=.....3...S.U...'j......j..4..P....4RAB.Ow.g)2....I.A.p.....[..v..yF..zK.).v:v-..7xO$.k.j.z..wHS.1&..!...{..,..S.w......t..:z..a. ?............J...-\|.tX.S.2.c.i....F...C.U.[.7Ey.[y....).J\...7..u.y.M9A....zj.j2.ih..?..n.h\|..Bo{....Y.I....}.bh.........VMm.4...)...+.:4.6]...`..}..}.]....n~i.?0..&../...Xo=.....^.h.`..R.....Q5.\|.........SY."..>.4.n.)...6o`k...+(.{.zp%.]....n...[.`...r)aQX.]...t.<..i.:...S.....,...=.M8Dl.{...7....].l........d.y..x...z..9..w.H..}...\|....,.hU...^S.L)he!.....wf.S./k....v,.mOz...:d..n.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9182
Category:	downloaded
Size (bytes):	4104
Entropy (8bit):	7.948910842499831
Encrypted:	false
SSDEEP:	96:5/0w4xzd8si6nn1QdZ5cR2INKfTWEiLLotVKekJZkTiybkuD25iP0:lsZnWmHEfTWEJtszJgRbfCic
MD5:	BDC5A45E28B2FD2F352FD82A5619892C
SHA1:	846356F067ADBF0FE2B5D640E57DC4E7F9063AEB
SHA-256:	BBB7F07353D10EBA66A6EEFAC5AB6CB7D8E3AA40555516C8E358CC35758C7004
SHA-512:	E675AEF317F892E6D761E80D3D5817C0D049A27D539913A21E2EEECDAF4BAF5F76656417D7C0633F32875621F1B2C2C7478861914A18E649084C14EAF6DFEF82
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js
Preview:	...........ZYs.8.~....t.....K6..N.ru.;.N..n_7DA.b.......~....%.'....8.g........0.0.x9I.\|.`...R...R...._\|{x......E.....7..h...,2.Lx..nx.#.'<.G2...\|....Y.V.\g..\|..C..y..0....t....'q"0<\|...E<4.~C.\.k..F.k..r...t...^.6...3.,R.f;Y...%.E.....R.@.u.Q...x..k".o.e..O^Ul.......t..9L....y......t............yt.o..E.F.d. .PL.P..p.. 7...&.yx80...X...\_..G.L....\...7Cl_)1...y.........l9.cZ.GF.$...Z[1}...V:....C./+.x.X..Y.V.\.4....%..n.o.&.........0l.T9.M@........i......FY..N.\.f.......a..B......A.Z.C!...E:]ka..A..j...DH.3Ypm.....;~.':....,.....l5.T......t...5......vA'...21...j./..H..2...<5^>1.%...#.D.d..Z.{.$..JSC..)......w.Bi.-W#-..1;....D.s.U...Y.....PlL.y......4'7.99..Q.r.vFQ.:.;.i>.9..}......~.!.?Gd......Zx.\|..rS[..1..}.r:\|..b.....a....z&53..D&....5q".... .k4..9l,k.\|C.d.....o../>]..a......\| k.m....l.zl._wn.o....U.F"j.:D..9..m.D...P.....H@q*%......OK+..C..U;\.u..\rC....t:..Y.pA. ..7.t.._E2..-..Z....&z......0g..T.(>..R>{.O...+..6W+.~..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18981
Category:	dropped
Size (bytes):	6658
Entropy (8bit):	7.970684268514322
Encrypted:	false
SSDEEP:	192:bXV5D9/IRR20FYq/jLMdb32ewh8QmJC1rmUAS6SvH:55D9m20Wq3MAyRIrl56Sv
MD5:	2E54D383A81C50EB46E0C5FEF3E1F031
SHA1:	CDD442B25A5FCC769B0AE1C4974529FFC4475BEB
SHA-256:	E2FB54E1E177EC74BD10FD32A0D67F9EAFABFF76DDA71C9A90D8D395693A2C79
SHA-512:	EE7181D46B0E3D898F9BB3C16550B6E60E6ADB124C3FDC1B76B2F190EB60866315383F3566D0BA11AD8FE75D6B913293ADA7268F3C3570C169470257531C217F
Malicious:	false
Reputation:	low
Preview:	...........\}w.F.......z.G......:..........B.@..XI.q..}.........<.[...;........Y...Q-.......\.N...Mq...f~..?.......7_...w..~...Y..A.p......?..aTk.z.v......6.N>.E.~..;Q...v..$.7..v.....m..Zu'..^.....F.Z-jFc..E#.t.Z..?B...a....?..q...^..;S\|l7.}\|\P.N...}..{.u...V.X.1..C.1..k4.36.l....:t;.&.}..:.n.(..u.\;.8W.s.<wN.7.s.9O.........y.<s^:.;......_.......qqD$..p.H."J.IJ'.3)3...&..H..E2). Z....$.8.....t.z....o"...,....{. ..E..;..(.....aq7...:...c..l.....E.f~!..Pu/.J\|.D.!.c1.?,..n..?.6.\|..a..._..%...".%.A~L...._$..O...Q&.E.X...%{{j...G..T.d..e..~.[.C!.0..^.,.4../."E}./@...y%e.N1.r/.F.\|...-..].i\D.K.6.O.`=.c.a..,Q.V.G.Q.g.-.MQqw....h^i\|...v".....(..2h.],r`&....pro...X.^\.k.h....L...w..~...`JX+......y.X.Dfc_3....l.(....w4w.l.D..&.<PN....n.(......lA..)..Xe...N..4M...9Q..#.`.....(.f~\..>b.Y...Z.m4._.v..w~T.(f{{.d....Lo.8.C\|.G .U....".....f.$.@.d.p.L.E.....,V+.X.....YR.m....U.r#..0...,..n?}................N...L^A.........8\...n.w...z.&.!.i.f.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 12552
Category:	downloaded
Size (bytes):	5246
Entropy (8bit):	7.9575147056011835
Encrypted:	false
SSDEEP:	96:WCA52yTcRma5t3MbjU8pJJfPxBJvm5eAIPpU19mm/JainpTlc0k9Yiy:WCA52yT3ilMHU8Ge21pRainJl29Yiy
MD5:	9DEEA49CE5CD79544EC27EF2B7D725E3
SHA1:	7DC8AA199A994058A67AD4BE600B4A6C541E606D
SHA-256:	AC35EE83DF32EE5C1EF262D5F7180241AACBBCF32E59553D1310DADF999C92DC
SHA-512:	BE1AC8030E64DDCC59116FA55BE520CA23826C72C4820E6F4D97F32CCA588F0B672DCC27FBECD54975BE57DF2649104889335B5D429DDF31A8D7D9DCC186F2C4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/25924.b3a6356de76617e73c99.js
Preview:	...........[[w..~......f$..E...8N.6...n...EA.m..IP.b.op!)..<......s...."...b....y.\,.F.A...[..C._......~x.....<{.~..u%.,...7.g~r9q..[.Y#..h... ....S$.1..1......K.....v.i.......}....+.3H.."...lV\.D.C..up....k.\|....$.Q..+..^.i,..N+.@.@...0....e...[T.7".Y ..=.....`.T._.. .:,...W.#ub.f..C.^F9..\|.....].>....Z.......~. .(..vT....)m.k.;.l........>.q.......t..wZu......C..3.P....&....<.>x.>...w..Ag...l......lz'.R.^.i .......z..]]o....x..=.w/r..Ju....BL..H.w.E=..mv2(.d9...OL?..3..9.,.gD?.....5.\..>.\.y..t..;Z....j!.ic... n....Z.8.a..o1..h...o.R.;.W.....j..dB.Y..(w<.c..h...O.8..Z-.^...X...=.[....H3.c...K.....Y..<go..h....lucV{.j...Q2....S.(v.M..p..u..`K...V........xO.....K......cP...J?..L.{;;...ESW.r..Y....5.=..lJ..... ..W..J?....oH.+...k'bC.w..vv...&...cY......D+5J....{....#......_...?.Q..~...8.0...y>..A........ez.L......c.]'0........_..._.p..#....[......._..........q<...+...Y.:...k.q...^.%$...u.rv~.. ...<?..8...hpv.....N...g..z.h....-.6j{.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 86417
Category:	downloaded
Size (bytes):	15014
Entropy (8bit):	7.9863875317742306
Encrypted:	false
SSDEEP:	384:pg9gKZWx2oDVhw/Th6UomFiZcHtxq6jxVNXIhbvvufbcXd:+do2oDVQThNXHPhNV9fbcN
MD5:	DEB2A20540089992B969A131BD0E9FD1
SHA1:	3C082C930E68B8C55D50A9464D94B2BFE84B1BE9
SHA-256:	0C2807847A9C72AEA91AEBADADD9AD3B203CFC5690ECC131518497A8DA79250B
SHA-512:	3EBA7CE6C3F58718700C89CC28B70B29F278F0B91259E213D0334F781A9BB35B39A021D9DABBF92A2010B0476DBD4908751FED3A7AEDCFA9B5EF8529FC9B9CF4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/51452.78c2117408c1bf8fcbcf.js
Preview:	...........}.c.....W.L.#S.&..e.ul'u..9+I...\.\..H..@=B...~ff.X<(...E.....;;;.i,c..I..I3V.I.Z......t.\^%.......;..?;ou..x.<;.........A....MZ.'..y\|t.k.\y.......aw.....wp...r.A3i.......ytt\|...;....{;;...L%.........<Q..h0Y........[+.,F.^t... .;3.\$S..x.w.F.`9.....i8x3...%..............E."..&......f#.. .].p.U...>\|.0S(.u.j.F^.Z.@WO?..=Q3...............'.v....lx.z..............st....j...N".,..A....z.c5..eV....7w1..8v.M..q.o...L...Fa.xY.hKZ.x.mjv:.t.qdS?.x3l_\|.xI<Xa......W.?v..,..w....9~...S.........H.q..^.h....`.v.b.(.iv...bo......^.Yk.\......Nxv...T...7..e.a1_..DE.l..NSh........f4...w\|...{..a.....Ur]>.Oq.a:.. .N.B.Yg....l..vbu..E...r_.V...h./nOu.2..nk.%.q:..JC...4..ZM..{..........f..co8SN'..4>]u..g.o....l<.i..7s...4..K.Rcg..sg....8\F#\|.Qc6./T0R.@....O..1~r.Y....M.4.u._.o...O;Z.....L.......e'w.f....n..^p......r.?......J2.B.l'.8.o......]k...\|...K..nT.;P.X%.?.\y..Z.\..P..Z.....2.T~...[0.Z`1.X.-..8.,........g....mf...0..4&..!.....N.aDW$@C..m.W6.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 24531
Category:	dropped
Size (bytes):	9059
Entropy (8bit):	7.975920602662275
Encrypted:	false
SSDEEP:	192:MCtRjBGkBVbr7/GPch1MuaEaDKnH4lNltw+Juwfd:MMXGWVb/Cckuazf/uad
MD5:	D4C7AF8CB71D4708222A387EF16DBC7D
SHA1:	AB8707BCA294E9F06913523F0E6A3ABDA6F73983
SHA-256:	0996D686960A75C9AB831217EA9C73840A88EA30814B5D0EC0CBAB52AC647754
SHA-512:	9D7B2D3B14DA175C994B1B3DEB3B658D511D07B2026C7A69B82602AF471064A00727286ABDCDBFFB8D685C2FC25FFEF8FFBFAD6A328DC9E16151D7F87FF89F1C
Malicious:	false
Reputation:	low
Preview:	...........\.s.F..}...N.". .&!."....dkV....I"........}.... .....V.iI`...w}...`FQ..4.Z.Kf.-.W....b.~.)....2.....}.tye..u.h]^.........N..[....<.dn.b.._....[.(a...M..(.x..........7s......'.r.>..0.!.[&i11.e....ooo.......y.(a..8I&.t..,-O.$.....F.MLv....IXQ..d..rA.}d.2.Y...31.i.......].o...1Y.7L..B.{.......s.g{n.?xr{.7.C.3Dn...O.......................M...5.S]....=..Pmx.n..1~.0&.lA..]....F..&.._>X............W.1._c..=w....if.R..'........n.y.w.dm..L9.`.d.v.R..VM...."ZQT.Jr.i...8iw.e@....r.@Z2...k6..F.Kv.,........L......A.o..d.N.e...o...P......,U..K.....g...O.`..$..O...i..Y..6.9.V,/._.b..2......G.ef..9...+..wl......H..s#6..dV1.....#.@......NJI..>J.O...q.V<)/.+..ULZ4..UX~..@../...>}.....<5..pP...QFl..L.R..-.l...5M..0.]..0..<.O.F..).......<..\|k#da6....o.w....O........H..O2.X..\.....r.h....9?.[.Lw.;[.6.ea..R./n.82<?G.U.D.*..v....=.,5..9...F..T...-......f...,..U..Z.......I..\..y.`l..8...m...\....a.F...n..D.\.;].y9.Q.../..}?.~...l.6...'

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17825)
Category:	downloaded
Size (bytes):	24221
Entropy (8bit):	5.386874835616361
Encrypted:	false
SSDEEP:	384:VDWRv+XamKIJoX7pw1XnODJBa0dETJBnwnUuJfjg56:VqRv+XamwXuBOLa5wn+o
MD5:	7D42EE6EC7E5892832B6414789840CF5
SHA1:	03A3899E7A2402A014BE9F64C2493700A99D61AC
SHA-256:	81F5E8D412C63797E959C173456BDDF1EF5AE50FAD72C2DE4A135DB989758D37
SHA-512:	6A019D99B216F2EB00971F02FE85425D2309DD5CDE544CCBD4E9425DD18436DBC19DF11EC2441CF1A2B676F4640876A4569C763EAB9121F149F61590017B8545
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/33748.87af4c1fd5f31e57a521.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[33748,25072],{14284:(e,n,t)=>{t.d(n,{p:()=>s});var a=t(16645),i=t(56717),r=t(44052),o=function(e,n,t,a){var i,r=arguments.length,o=r<3?n:null===a?a=Object.getOwnPropertyDescriptor(n,t):a;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,n,t,a);else for(var s=e.length-1;s>=0;s--)(i=e[s])&&(o=(r<3?i(o):r>3?i(n,t,o):i(n,t))\|\|o);return r>3&&o&&Object.defineProperty(n,t,o),o};let s=class extends i.C{constructor(){var e;super(),this.intelligenceAccess=null===(e=r.NU.currentUser)\|\|void 0===e?void 0:e.vtiAccess,this.user=r.NU.currentUser}updated(e){e.has("_large")&&(this.small=!this._large)}};o([(0,a.property)({type:Boolean})],s.prototype,"intelligenceAccess",void 0),o([(0,a.property)({type:Boolean})],s.prototype,"small",void 0),o([(0,a.property)({type:Object})],s.prototype,"user",void 0),s=o([(0,a.customElement)("generic-overview")],s)},67119:(e,n,t)=>{t.r(n),t.d(n,{pdfIcon:()

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	dropped
Size (bytes):	260705
Entropy (8bit):	5.550011618623141
Encrypted:	false
SSDEEP:	3072:FwizDGHET/tzA055yptcY0/H8+bOQDmKD0C8rT/RVQ6:HGHg/tLY3Wx0C8rT/TL
MD5:	84A5020109D5B0E7990AFC9EA462D4B6
SHA1:	FBD7051916D753B612733A52A3F52E82760C48FF
SHA-256:	C1E195F3FD054E6FDBE19EF148952451F5C4E004C588E07FB01856A72F27AF17
SHA-512:	50C38AF028F824F470567220CE6F7C7C5EAE384D8806B980AE68C24754EC28F5DE7ADF6F16B952B2DE1DE994C5FBA8BC689F4D9FAB61DE05A523C31C7BB5CC4D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13134
Entropy (8bit):	5.234327603132497
Encrypted:	false
SSDEEP:	192:B1zZrD5JLuDBrgR4bPrlGDfQGb/rVohQrTzVHr7LVK9nVuvPExr1llrpDor6KD8Y:BhvtAeR42BohitLV6nzldhKD8PoEm
MD5:	E52A42ACA3422098D8D8775AA5B57AE0
SHA1:	BD1188360B10B7F66DEDEB37E4DFB1BE0C5F5188
SHA-256:	BE18DEB177DD6AF1064B6A12744BBF4296E855733818EFD49E2FB5BF08F4EE5B
SHA-512:	11F3977AA8F5D89806FFF1E2B387CB4D22B83F20901C2BAAA6EED7CCDBB22A22A1ECFD432A1BD6522FAABCCD8172B0EF51FA387644CAA22C90155CB6D86A632F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/user_notifications
Preview:	{"data": [{"id": "20240110093621-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20240110093621-everyone"}, "attributes": {"link_url": "https://www.brighttalk.com/webcast/18282/604369?utm_source=VirusTotal&utm_medium=brighttalk&utm_campaign=604369", "date": 1704879381, "title": "Threat Hunting Open Session - Episode 5", "target_tags": ["everyone"], "body": "<p><a href=\"https://www.brighttalk.com/webcast/18282/604369?utm_source=VirusTotal&utm_medium=brighttalk&utm_campaign=604369\">Join us</a> next <b>January 11th</b> for a new <b>Threat Hunting live session</b> where we will cover how to hunt through <b>Sigma rules</b> with the latest features we have added on macOS and Linux, and explore how <b>Crowdsourced AI</b> analysis compares to and complements the identified Sigma rule matches.</p>"}, "context_attributes": {"user_read_notification": false}}, {"id": "20230818090454-everyone", "type": "user_notification", "links": {"sel

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 49635
Category:	downloaded
Size (bytes):	14325
Entropy (8bit):	7.983726032171922
Encrypted:	false
SSDEEP:	384:MRewb9zxfTgXMv77ax7j911/q19VE22MT:Mg0fTIMfa9j9mE22i
MD5:	C1839E0127CF8555BD63850E4BCF0882
SHA1:	E7BA29B0DE20563D50D9FC85F4F14BA530F192B4
SHA-256:	46E826AAC449E4D3CAB6722291588E1A8790096A5AE36E6EE5130AD2E797DD80
SHA-512:	0B4D9D524A251F5E706BF59C390676A77C824F01CF2AB1364FE65B144487B4A362D2442CF045B388C4F2F2E73BBB047563DFADCD167127002728DF5E948A5DF7
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/11358.3abf8514c0ca6feab7cf.js
Preview:	...........}...F....W.'..,l.'......!_..}..< ..`[^I.ab.....[.<.\6w.-!.3.Z]]]]...:..,O.Q.8mf.\|.\E.U8zw6[/.].o..E./.7.}..........u..wp...u...........Ikp...i3o.I0n...,M..Y.NG..a.".....2...~..3.w..q.s..uz..^:H.....n......:...,.2/z.G.q.lv.48o5.#k.7a.&.....f+}.v.8xws......X+.0...(....:.-?.t.......$@..n....w......wr..c...r\|..G...;8.k.C.x......W...Kc...~.....M..wrp.L7.z..V._P.n...:.G.w.O...~...&..(...l...6.....t...y...4.....y......A. .<.....`....?..J..GQ6J.U.`....4.4..7m....J&.h2G.w...J]0.FI..Qk9P.M...4...'.........=...:.a..j..ux.{...4i.qs..g............a.:M.\|..=....{W.r.M.e.W....-..z ....({.,..2z.....#x......$7Be..G...&[.}. ...[~>...2...A.!.-.1~.J.<R%.y8.f.\|....,.G/.L.F..Nw..a..<.....<.0.,.G#...,.Dg.8".g.C..<.hmS...$4.g.O.L.........y9......^<.4.$....1V......(...K...O.8....q...2o..6x.H"Iu.<.f./...V.....y..k...NT.y.p..G.Ts..........f.x..G.x.N.x..o....2.*.....,.....4T..s..a.o.U.%V.a.!....0.4..2....u.'K/.my.0B{..'.]/.;5.45.Y.x...SDco....A.....K.R....@

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	5.877974442451391
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:f2gMI5czgk/msuG
MD5:	701CA9A170177F52147D6FC08CA104E5
SHA1:	2DA8BEBDEB658E20A1C433E9138D1D5320BF61DA
SHA-256:	8A559B8056902E22005BF7BEF1C9E80D98CA65C63975E399ADF711BAE96FC808
SHA-512:	084BB15119C8026A784759E25324D44827009A3426D2E060C2A07AFD607C26E1FBA15CAA7952592BAA890BE9B94255D71431A7CB0DE43A5274281052508B00B4
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 11604
Category:	dropped
Size (bytes):	3330
Entropy (8bit):	7.935392702198804
Encrypted:	false
SSDEEP:	96:715ARrHfYXT6BWR2Q+HWsUZsuvT7cL8ZtiG9//:hWR7YD6BIfPb7K8ZQS//
MD5:	A34C9F17EE2EFD4CD0D41A1E9AF9F474
SHA1:	BC08273FA97EDE12E5787303B6D27C463479CA10
SHA-256:	78C72B1547C07AA3D10F94B978ABF5FE20ECE2E4A1A6C75CA6D6BECCAABE740B
SHA-512:	319A3444C93972E12A322DDB8C8C7546308DEE0F4652304BE1FF373E6DB706469709642BEF16478EAFF6282BEDD567804BA7FE9E68CA5CDC3429150DDBFC9708
Malicious:	false
Reputation:	low
Preview:	...........Zks.6......v=.......n..i.4..Ifv=..%........U...s..aK~$u....C.. p.......T".(w.<;..x.........DEU...4.oyvyyr..e%G........)..n.om.<.8.~..L.......#...T.p..1{......=(.?..S..o..]=H...$.N..occgw.g9...;.}&1....\.YF.[.;;>+hvsmk..;..J...>..q...tOpU..Q......b7.r.3.~...?."...b......S.....E0.K.S...i.K..s.?...c/...C...X.F.E..x.R5..\6....b.S.....s....7.V..T...Vc.....C5.~muuR.......O.N......k.-...T..C:..H...v.,..<.q..."6..p..S.....J...^r.wH.TD0Q...K....#.'\..s.p...z.2-.....c...........}+....==...u}]........7..-...6..#+.C.o...R..7S...)c,w.[Q.a...H..2..;...E........a0q\..)...]....1..P..^\|X.q.....+.l^.........W....6\|...T......b..R..@...sp.y1..;9E.l.T...a.^.FZO......W<..".....+kb.X...A.......T..b9B.6i.V..u....m.:...E.(...D.:...T...8.Z.....Q........VK."..:.......M..f..&).!...].*6...G.R\.Nt.<.......(...~..8...J...."..R..6....(....?.3.A....:.w....G....:l.o........t.......G>..E<^.........`...G...\|6....j..J.nlln.lB...up.dF8D...j~...v.2\|s...E...O.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	5.145225903877927
Encrypted:	false
SSDEEP:	3:YBECHJ0HyzJVAs2sDVDRySLAXGLQZwjRcDl5CfVHRXzqHSEte1YTALvJJM+QLsE+:Y5JiyzzAhsdLA2ED3CftwZKvLM2bl
MD5:	9552CB3DE5FEF4AF09C41FC7E7979B19
SHA1:	EA2551C0C823D137C763AB6A0DB29FB5EE3A14C1
SHA-256:	76A7520093C91B66E6F54734B672577FDB76AB0030760A009A04CD0816285A2D
SHA-512:	C85092C7B804DF9C68745BC6BC79DEA43934187946080DA37D9D03BF14552C793D0BE0D0ADD6594CF0AB86EDB7A26507D33823A41FC31BE147C618CBB0B08906
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/comments?relationships=author&limit=5
Preview:	{"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/comments?limit=5&relationships=author"}}

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/1402accbefdec6a25762.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 11604
Category:	downloaded
Size (bytes):	3330
Entropy (8bit):	7.935392702198804
Encrypted:	false
SSDEEP:	96:715ARrHfYXT6BWR2Q+HWsUZsuvT7cL8ZtiG9//:hWR7YD6BIfPb7K8ZQS//
MD5:	A34C9F17EE2EFD4CD0D41A1E9AF9F474
SHA1:	BC08273FA97EDE12E5787303B6D27C463479CA10
SHA-256:	78C72B1547C07AA3D10F94B978ABF5FE20ECE2E4A1A6C75CA6D6BECCAABE740B
SHA-512:	319A3444C93972E12A322DDB8C8C7546308DEE0F4652304BE1FF373E6DB706469709642BEF16478EAFF6282BEDD567804BA7FE9E68CA5CDC3429150DDBFC9708
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/40946.52e58c8b2a8b55ad5067.js
Preview:	...........Zks.6......v=.......n..i.4..Ifv=..%........U...s..aK~$u....C.. p.......T".(w.<;..x.........DEU...4.oyvyyr..e%G........)..n.om.<.8.~..L.......#...T.p..1{......=(.?..S..o..]=H...$.N..occgw.g9...;.}&1....\.YF.[.;;>+hvsmk..;..J...>..q...tOpU..Q......b7.r.3.~...?."...b......S.....E0.K.S...i.K..s.?...c/...C...X.F.E..x.R5..\6....b.S.....s....7.V..T...Vc.....C5.~muuR.......O.N......k.-...T..C:..H...v.,..<.q..."6..p..S.....J...^r.wH.TD0Q...K....#.'\..s.p...z.2-.....c...........}+....==...u}]........7..-...6..#+.C.o...R..7S...)c,w.[Q.a...H..2..;...E........a0q\..)...]....1..P..^\|X.q.....+.l^.........W....6\|...T......b..R..@...sp.y1..;9E.l.T...a.^.FZO......W<..".....+kb.X...A.......T..b9B.6i.V..u....m.:...E.(...D.:...T...8.Z.....Q........VK."..:.......M..f..&).!...].*6...G.R\.Nt.<.......(...~..8...J...."..R..6....(....?.3.A....:.w....G....:l.o........t.......G>..E<^.........`...G...\|6....j..J.nlln.lB...up.dF8D...j~...v.2\|s...E...O.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19516
Category:	downloaded
Size (bytes):	7082
Entropy (8bit):	7.970534013791315
Encrypted:	false
SSDEEP:	192:mOMgyS6VwrlcwfFZUQbz0Z6YnEe78ql6VhpUED683:mOoSCFwfFZU8Qx+TUG3
MD5:	EFC93C41A0F83151168CD3884906C34E
SHA1:	E13E12F99CCE04BE44DC318C11BC575CF4FA33D2
SHA-256:	864C0E7F5CD89B0D0C373995B2875B2BADAC6588EA5DC4D423CF14CBBE8BA35B
SHA-512:	5DB898F19137887CB5233828D448EF39652432DB947BD0C43F82F49E0ACAC74E46439B415F9199D146F0886097ABBB7BBA135CE236A9F53501BFD57F0F0725FC
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/88116.be3428c199d3d7ca9393.js
Preview:	...........\kw.8.......x.^...$.L:=.9..>vr..fs...J.S.....Y.}o....#I...Oku;4..B....P.u!....lM.H".Q.V~p.f.N............^^>~...X.?~...v.......t;.no..N...j...V6-.....v.<v...C..x...l..a......N.Jgx.....l'..`t..'.(..I..TL....:..8K.Nf......z)......../...8]'.t:...........1.%.V"/...E..2..4.q6..v+..\|^.,.nE....IK..W.".r...?U....H.......S..u...j...k.....~.ON...M.(.=....<:...l...'.(.yj....?9Q..E..B.R.s..$.....f.e.D.}O>toP.qY...O..#...r...SO>p.2......g....O../.K<."..+.~....e.0..: ..b..h{.W-......g...... ...s..0.".i..-J....+...ND..R,.y..#....n..k{.....h.(....^^..t..u.....?m=.\|po....o]Y..t...).\.j;J...hG...W.64..4..L...).....n........?[y..g.;....=.O.y....'r.ey..c."........uE.._.X...,-.t-,..B.i.J..........3w.<..0w....1..c.....F/..t[..X..h.......j.m'.(>9...v.qnK........2b.Z.(.......4.....N. Ri4.1M.....vY.........?....VP.vK.[K..(9_i.YO..:.w:k..g6....t:o.^.%...~Sn.5...7...q..NV.z.....C...e.....Se.Q...K.r..8.:.s..db....=..O..2.....V.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30282
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	7.967188667746753
Encrypted:	false
SSDEEP:	96:KGJooKQOk+zE1RSU1vhkdcjCJDRWfuHtcwuY1J1v+9BITBqKb8MpH:SoK+FvhIEufuYT2yB9pH
MD5:	A3F7841D3E0477EDDC2FAEE619F04545
SHA1:	281A69C5D0011B2C5F37466AF2154F90C7F234FA
SHA-256:	F33B7AA283FA389CDA9C90F85DEF174FAD44B65C29334EB91EA8F8FAC9C5F249
SHA-512:	A2F9322C83E9658447ADD48296915538F6AB4A21E8D7D2C6F4F1C0A7F306F1DF72CAAFCC058F276D5269D6F2401583D600730939AA538427F07081228ABB0D30
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js
Preview:	...........]ms.F..~...]..2..%.%d`..V...T$'w..@...Q....$......t.@L..%.ba...gfz03.p0\7..i.b..g.&_....u..\|}../o.t].WYQ&=.......z.\.>~<.z....]...l]..G.8.......$....A....2?+.\|9\|....yu68...W.....+.....t._\|.....z.iV....q..U]g.q.t.....~.&.t.....E...a.].Q......r&..m.:.."[.@;nV.".=..e.........1.k@:^T%._/....ppJ.2....]v.)...Or..R.....t..>__.e.(.W.;z9.P..Ee..=..<........:_F...\|..y............B.d@rggX...y.. ^..y{..A-FE.F]+......mT..i9.m7Gw....Pei.......T.5..d.u>->.....l...}.^...A...M..F^....)D.a]W.hxT...O...u;h....\|PV._...\|P@/d."...<.U..!...$"..2..2.7....fp.n..Ev......Q4...j......f\%.v.u.hb[...T'iu.l.....q...t$.*h9.bch..a...I.........\.V.}...{..(.....#..d.6..O.Q..7.62....."...tf4;...#cw.&r.e..&....G...SR..T[.....(.....8M...n..g.z...k.bd....,..7..z.., x$\|Zl639.by.......e.U....".."/.g..8YTu.t..^.y....&...V....%....uU....[.W\|....@i...q7......?F...`VE..x....S.....[V.u.V....p....D..Yw..4I9jG{O...F.D...z..)\u...f...K....]\.......S.........>M?.....O

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29075
Category:	downloaded
Size (bytes):	8779
Entropy (8bit):	7.974310392674005
Encrypted:	false
SSDEEP:	192:wHMklToU95BlAqddPKCpRbUkt01xkVpKarKDZWGv9WZPt8Dv8xNyv5GfOg:wnJ5Bltdx5Hrt04Vwi/Glqgf5Jg
MD5:	9649362A779A0DE830138C8A4369DB54
SHA1:	E5CC775B024B7B3DA7B2C839F5621EACC41D2F9B
SHA-256:	6338280D2BFAD77F05F1771D052FE7C3A2F9DF4D1033ABA16D9C8777504679FA
SHA-512:	E62819F7BC36968F51F3BA5B5AF09357B7EAA295EAA26C119BE4F8FA0A0A943DA57257A9183BD2722CA56DB49FFCF367A96417CCAE3C1564D95392B3109427D2
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/5978.4206cee10d7d4c2afd11.js
Preview:	...........]y.....?.L....@$g8.)J.e9..J.:6.U...l.......0...>.8.(.7/o5.....@.M....Y..ws./..1]...g.Mru]\|.D.Wa.L.......n..............u3Ox.;y...3......E...r\|....z..N.i.....zi....w...OOO..........".xr..1>....3....I..f.t2.............p.z.\|<......mO...........]........;u.(.k...[.....{.d.'.x.IfE.&.syV..r/........${.~.N..$......b..f.6..&K..4.;).vI0O..Tt#w.*KWQ..L.i\|MMA..I.[.;..O.:.....bR,..K'av.Y....j.D.8j.n...yb8.p...D..S..y7.SN...$..x.\/.$.1.2Kox..'.;...'.N.D.?...XB..".,......S1J6q<.L....w.?.Y.\..w7.N..Yq...gY.......h..<..ywk....b.c..QG.....b.fa!..D.7M...!C.lF.....~..<......\.\|p....I.N..#F......aF..u..y.j2...hzt.N9..(...j.7.1.~...0...D$.....mgi.......6..;. ..;..1H..8.xb.<.w.M.D...&..H....{...y#.D.+.v.f.../.(.st~.rGkE3...Z..E..%.u{^.l.<\.go........Fn.q.._.?F...."..K..8.. ..6....;:..d...n...l.e..w..s36;:.e....(...........Y.$Qr...>..Lc.D..D..K.......g3 ....j.G..D@...Q............Y.,.l..(...e......?w.'...x.C.yX.~!.b...i./..8....H..."....s.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14050
Entropy (8bit):	4.912463100398945
Encrypted:	false
SSDEEP:	192:0EyedmBGm7Rsb99+cLY6AJb3N/zJuT6QRxGIOqQtiekVDdRIr9/R2h/RNmpzpxGC:1yP39bavqcPNwNpkaEo5L
MD5:	88F352375BFAC1AC9B96D815EEDF27E2
SHA1:	E426D1EAAE0954DE8AE65918FF5B912D53A134A4
SHA-256:	DFF3D1016D7318118F1AF890C445BA500550A2D0A948161F05C93C3D57122AFD
SHA-512:	BC101C9E7AA39D8743504C4C755D1228A48A73A75A0F7CA09D9D5A824DD36C20A770C1FF9BA8A0A81450CF034B0800B76636D269255E6263AF29C5FAF4DAC739
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location
Preview:	{"links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location"}, "meta": {"count": 1}, "data": {"id": "www.google.se", "type": "domain", "links": {"self": "https://www.virustotal.com/ui/domains/www.google.se"}, "attributes": {"reputation": 0, "tags": [], "whois": "created: 2003-08-27\ndnssec: unsigned delegation\ndomain: google.se\nexpires: 2025-10-20\nholder: mmr8008-171440\nmodified: 2024-09-18\nnserver: ns1.google.com\nnserver: ns2.google.com\nnserver: ns3.google.com\nnserver: ns4.google.com\nregistrar: MarkMonitor Inc\nstate: active\nstatus: serverDeleteProhibited\nstatus: serverTransferProhibited\nstatus: serverUpdateProhibited\ntransferred: 2009-03-06", "tld": "se", "last_analysis_date": 1730471268, "jarm": "27d40d40d29d40d1dc42d43d00041d4689ee210389f4f6b4b5b1b93f92252d", "last_dns_records": [{"type": "A", "ttl": 300, "value": "74.125.202.94"}, {"type": "AAAA", "ttl": 300, "value": "2607:f8b0:4001:c06::5e"

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39779
Category:	dropped
Size (bytes):	12236
Entropy (8bit):	7.983705091641009
Encrypted:	false
SSDEEP:	192:Qdxxtj7UXmX5+lPKRQuT6Pwx4NIrxm0DHOx3m0hstexJeKTQMz28sQyDbBJJdkeK:QdN8Xmp+wQe6JNIt9YDsowzDbB3dfudL
MD5:	18F365FA513073B2D6CFF6049ECA738C
SHA1:	FF20A120F43347FAF1AC28A2F71077150F4EE656
SHA-256:	066FC1C9BFFC86156872F8C7A3F7E948BE319ADF96819F66E2CD96CA125CA6DC
SHA-512:	176B0DDC7D785D7FA7D961E8592554CFC31B72E419266AAFB2992204B70CD80E195C74F9CB541D84F637830FEB709FA9EC6E8D302B0A27F537E7E29BBDDD7A73
Malicious:	false
Reputation:	low
Preview:	...........}.z.....s.c8Q.g0...4..Z,.Z..v.E.<...X......!.......$%.gy.c&..kuUum].h.S.Y....i3U.ip.F.p...l.\|.>...."...k.>~\|..............=....G.C..=.t}....7...^...\|.G...M.$M..`.T.f.-Wq....e....u..i.-.Q.{...k..x.fQ..>ZR........4Ua2.....L......._).w.sx.{.h...$.1H....>L......qwo.hY...\|..u..z...Hf.^..d...@....Q..f.<9>....}..Z~B.<<.?h.!>....z-.......z..W..JQ.n....J..{.hah..W.v.w...#\|....-...G...a..L....G.U......?.G.M......u.O'.'.G-..>......K..[....tO....1-....uh....n...u:W...?....k...;........?..O...+.?.K.....G.[._..................e.2...O3?..0..?....^v:]/...$....~.~..d......7..fB.....\|..`...6.....{.G./B.6.&.R.W.y..}./.T..J..{...Z61Ekkg^af;.)m.xn5.fQ.G...z..Yz.g\.KO..l.^42wL.Y..V.+l../3........X..Y...f./.6.fI\|..&/...Z.-!h..LW.C.......jy......{.U.........r.j...g.6..%..RIv.H..$Ze1...._.F.f#.. .Z.x.V.9...0 T...I..V2..m...T.!P..L.\........n5cpB..u.N3.4i.1.......L......I.P..w.$w..UN.4Z*.J..O...l0..i.&j9I.a..7,G...p..k.....O\.Dh7.......L_

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	5.341883574690003
Encrypted:	false
SSDEEP:	3:jm2V3VAnaWLgzKEnkcOy9iEE9xmHgzGmVsczCkYHU4Y18sYn:jm2VCnaD7hryxmHgCJvE8sYn
MD5:	826973F1D1144BF39EA6EDDC675C95E0
SHA1:	A11DB1AA9081F60C0BFE729A1DF66F17ABD52764
SHA-256:	C2C601338285300A8F29A6E0648EC77112D569CEF4BF9B5795B06AC317403E05
SHA-512:	C25E7A780F12ED5A2E36EB7F4B6C0464A962C8FE191FCB4AFA905B663FC3F40A853E0521CA991B38752580E4A853F4FD8538444F5109AC49363456CCDAAC8519
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwn7EhllyoebnhIFDWtomm4SBQ1Pnif4EgUNg6hbPRIFDWp1l1cSBQ3OQUx6EgUNa-0Dig==?alt=proto
Preview:	CmUKCw1raJpuGgQIAxgBCgsNT54n+BoECAUYAQoLDYOoWz0aBAgJGAEKCw1qdZdXGgQIVhgCCiINzkFMehoECEwYAioVCApSEQoHQCEuIyRfKhABGP////8PCgsNa+0DihoECF8YAg==

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 58004
Category:	dropped
Size (bytes):	15134
Entropy (8bit):	7.984256581631135
Encrypted:	false
SSDEEP:	384:keSWlIFfScW7e7dKyzJVgmTElihTRgrb08A/Xane+gsP:NlIpbWM/TEUTRgf0Z/qneUP
MD5:	6F76AEEC5FAD589B2B81E8BCD340B6E5
SHA1:	165D110FE92768CDCEDB7E217F0F3B49D8C1CC11
SHA-256:	3594950139E65AA66876788E9B47185275D5A7FCCBF295BD32E50A8552B6D081
SHA-512:	8FCF8A43CF237C269C47935E563FA1FA85F73701FF09561812F99066649DF7A7F452E14241C721007D33BA7F373903184755511588C917A15CEEA82F51A2D462
Malicious:	false
Reputation:	low
Preview:	...........}kw.F.....0.8...$u'M+..9.y.I....he..%....@]B..S.n4@R...{f.(....TwWWW...y.yY....g.d.\F.Y8...l>.\|.....0..o...9:n..yvV?:.j..t....n..?..o.{..c....V.....6....a.%.......n.1~l..n.4..?.:.;..$.....~......?.O.y.L...4.V.~az:?..y.L..i~.c.....t>.....0..<.-...i..\|9.%MfQ._...a...$....I/..k.7.....,J..h<A..kf.+u.(.&i.G.i_..";.^4........#.n.....[...l..~t..7.?.O.uZE\.6..s..s.....h..L..4....C.....u..h.O#.J..O...Q.8.....h:.$x..'.ap..a..=...r=..zc!c..[~..Y8.^...g....2..(....,..4..r...\|.Oon...'.Y.qe......=..M......O.....-.F...F.0.>h.X.{.:M/.f.....6...D>=]6........5._.H..j....>.gyr..h.k.ys.7g.E...Fc......=..h....h^..h.f.L.u.z.l..s.3..w.:[. ..<L.wYF..vg{oo#.....<...^.E..?$W..G...;.nmo...a.....4....z.....K...<{.z...7'[.3....v[N.^...4z..y\|..my...5.8./.4....EYC.<Z.......H.r.C..[..qt.F.G....>.$...#.)....G...&:.}....vL\..<..>..f\|p...1...?.?j....f...i?...dBs..8Y~.\|..C...z.x..<YI.@.K..z..~=.g.$..Q2.....b.."....*......si...0....0-..~...1..N....+.d..`@..?.._g9.YN..-

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	dropped
Size (bytes):	359366
Entropy (8bit):	5.549209156154755
Encrypted:	false
SSDEEP:	6144:vUI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDInZRRu/tGghyXV8AXvPh+zaohh:hZzJ2tGcyXV8OvCf7
MD5:	6986FB735FDCE62D18DAF8BA05E17B6D
SHA1:	6EB769D93846C4FA0FEEF2F3D7726C5D63797398
SHA-256:	89237639FFFDFBB3F05FE2FEF2F70F484F583CD97279882A18DCA1C95A6A501A
SHA-512:	A42E682FCFB34AB54229B81BCD1611B467A588EC5349938B1EF881D1DC6307DD98F755E99A1EE1E264BC0D556578E156FAC1697C87946CF0736E813B0D6D0DFD
Malicious:	false
Reputation:	low
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21631
Category:	dropped
Size (bytes):	8178
Entropy (8bit):	7.9746321228938095
Encrypted:	false
SSDEEP:	192:HrZJTzO4NfGoUHGVM9KK4xqIYsECiJzQ7WCFvw99rSQ:H1JvOKTUmVMKTAIQCKrp
MD5:	58EDF1EEA65EDDD82F56C4614FD58AF8
SHA1:	519B80D7811346B105E06CA093AAFCE17B4C7A9E
SHA-256:	BE4B6CB44E9C0E9986F6AD849691939A57EE98DECBDB9148491E9C52782FADD0
SHA-512:	ABE6F169ECCE62AF804FC245F6AEFC1771F8239F17F5C62295D7299ADAE2B10DB752A60BB1F2AD0C8B1120CF674DD728136D916DB2D0D7A81D1448BBA1156DD7
Malicious:	false
Reputation:	low
Preview:	...........\is.F......&... ..e.Qfv\.$.v&[.......$X..#4..>o.@...d+V".}......V...6.....nsw.~....y..~....w.Mg.kV.w....C+.".}o...d.Z.....h.0.i.b...q.f.yu..F>..a...i5...q..V..i.i...W5.rZ;.qaZ3.ea....m3.ZP..{.i....?0.[\|....B[..gibZ;\|.#?.LkE.Q.......s=...z...f@......,.M.d..............'...W...[.k....`....-G...r...E....rsO.7@4.owk.i..d..v.....+6...r:......_.unY...._u.eu...k.u.m.zLD..W.r<....t.>mY.4.e....#..I..`..[f.S9.k..b%8..f.x9m%..wU...W.m..f.+....b:&,.pkR........`..?..U..].1..qQ\\H,.lYl..R...'...y.7...[.Y4...f?.6...(a...3v..#.i...q.6o....h..].m...{Q..n..y.g..E..j8.bn....'.b....rg.i.%.~....;_..\|....,.w.V..]q..z*.9f..\|W....... .}U,...f....s.]....^q.V...}-Di$zF`.....E.<...u...ur....O..+....\|.z.6.D>!.S,.Zg[.{P....we;..0.%..:G.3.;..&.4@...r..f...{..-.89g...rt0.s..>....+..zz4\gz..c.....\|..b.Is.y.F`..j~..c......<.:l.c..Sl...^. A....G84~.r~J..a.....w].G.fy{..k.....Q...R`..s.aV......:...B.n.{..l.W.Y.y......x..3...+N8..[....x..b.)...S...n.@....RV.(..t:

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 98170
Category:	downloaded
Size (bytes):	34325
Entropy (8bit):	7.993229831721479
Encrypted:	true
SSDEEP:	768:PdDmcvAB8wtB3JkPCaqKHm9+nOJS9jwloCRSGiST:PdKcKPkPCsn190FRSJ+
MD5:	F20D8515FEED73A8B92424C2B9C67A6C
SHA1:	01642C9B975538B3B219D95ADDE840C09A40E7D9
SHA-256:	FC6BFC6DE25F96E31C0FA01B6C746EF9035900E6A0A1BBDE6477617310D41A19
SHA-512:	5334172621BB287B692617365A83D5135C6FB258DBA24581DCE0DFBAD7A237830635981B5AA8409DDAC4D1284A09E8C22C022D371A7F7BC0572C7F6F04B92FA5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/87347.c002f57d03220f54c084.js
Preview:	............z.F..{+4..4A...2%.....8.....h4..I.)@.AK.....{...}).J.[..4$.Q.f.^.<.E......U.U....,i..".....,...........y..}.7O.N.i.....;....\|v....x...h7...a...(i....lR.y.(.Y..H.y.5..t.....".}=.zXne..`Xng#..g....W......Ji#..i#...m.}9M...F..o{L.y....h~.d.7M...x{....yz.....;.#_..a?......+a..ai.o...t+o_.+..Z.`.-....r.g3...N...=.LZ.N.K...(...`.....q:M..+[9u...7jeq.%q........=...A7i.)X.q\\|. ?...WR.lG`......HK..../.vr.1w...o.....<......A{...N.<.$v..`.....\.x4,.."=:.....N%.o..U5..-?e.WI.....qr6l1...G.G.z....^..%.W....~.W.E?>[.Y4>~.W..S..F..^.i...{......z.\|...b..a..~..>}..}.D.......$.NV...it..^...oOM.....4..E.?1..y...Z..y.}...gy..Q...<:N..r..O......'.'..h..D.....R/?...9..l~.D<..V...d.M.....x.....1a.....9..~\4..i....l..I.g..a.%..{qyq..W.'.....r.\.R...]..N.?...7w...K..=)..E/../...V.W..S.0L..M.).Q..b>Y:.u..).I\|y.+.WZ.7.O.....$imD..l~..6A@.m..eO.@1......P{...'p....V...*1uG...E~...'...K.o....^.........+.m..N.'..A.p..W&....G.7C#...h..d...

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17630
Category:	downloaded
Size (bytes):	5811
Entropy (8bit):	7.967036072983005
Encrypted:	false
SSDEEP:	96:Ppu3Bgb7OjYnEJ+IKIqgag/6VclnnS/Iw3WjKcUAgc07cHt1wWFG3UhHEEUeFkBV:huxsiuEJ3zdD6VUS/v3WeAgOCsFEViUV
MD5:	618E767D6D994BB6BB005B72DAA09FCA
SHA1:	5576FDF89C0EFE5EB07697681D14F60D9A2CA06E
SHA-256:	FA76BFAB54228ED6EA9F09664B58954193A217D5AC8BF5F796901CE339D4753F
SHA-512:	36EF9241EC95D315653E4F1AC8DBF1169083329DB3610A145FC2DDCABEFFD278D51CED1C84D82D46F55D381CA7FD8B6B9D02152E931C91108FF43D6904D32250
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/27197.598dbd3bfe6cc1efe979.js
Preview:	...........\..6...OA+...!..R.(.I.I..L23'.......J.S..I..Q...w.n.d.. )u;.=g..F...B.n.2:......j\.<..,..7.C....!......._.}.....z;~.nz7Y.wN.g0...a.........z.+.Y......k;5.N....D......SP.\|6..N.......v;..Nl'...?.j...y:.........g..;{g.l...[...%...I....,.sNc........cES{9+6...D.f_VAq...z.\|.......a._...r....V.U.o.jL...U..G%G.......Ks.}.r.X.....e.6....]7i~W,.......d....k....=.......X.i......5}...~._l.._.{U..P.../_./_.Y&,...f).9.y.B.`\...).l.....#..~`)~....<~......t..r\.yX...."..............S}.P......f..^..a..d.b". ."+6.d..%]?....y.=Hkt,mF.U....y.Q\.(.<...D..F...X^ ..Y.4E..XU.).E.......Vt#......8..E.)...<..T.{.1g5d!.e......y.........@O..hl..k..9....{....../.UA..CUAR?C....k......b....Ay..)z..9b.+...y........F..Vt.-f.2.Dq.l/..x;.c7sv.y...3....\Z..U........Q[.....7.jJ.Sm...!..uS6a...n.c.5$.y.....3..U...LF.}.R......4y...Wc......vFo...$.....U..[t.bc.....r$9..O...A.gPMX%...H+c......8....X..}XX\|;.G[.O...{wj%0LIy,.a..UaV.Qth....U.g..._O.yd.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	5.1518440894433635
Encrypted:	false
SSDEEP:	3:YBECHJ0HyzJVAs2sDVDRySLAXGLQZwjRcDl5CfVHRXzqHSEte1YGmdpQLsExi3ml:Y5JiyzzAhsdLA2ED3CftwZp38
MD5:	96CB04D5D7AB04659979DB0AA5DF3E71
SHA1:	818B7916DC822C36AA5032071224984DB92A1E91
SHA-256:	792283677976BC8BA2F6F49D5DBC8330620869058D22AE42A5186131B564C564
SHA-512:	06F498EBA212EA5D45320B52D4B5F9850D5F7F92355B04BEDF162B0A2A1127919C4B4FAF826310B18F5F22E2563491D6B4509E9387758B69A1C433FCE5051F2C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?relationships=voter&limit=5
Preview:	{"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?limit=5&relationships=voter"}}

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	dropped
Size (bytes):	1746
Entropy (8bit):	5.877974442451391
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:f2gMI5czgk/msuG
MD5:	701CA9A170177F52147D6FC08CA104E5
SHA1:	2DA8BEBDEB658E20A1C433E9138D1D5320BF61DA
SHA-256:	8A559B8056902E22005BF7BEF1C9E80D98CA65C63975E399ADF711BAE96FC808
SHA-512:	084BB15119C8026A784759E25324D44827009A3426D2E060C2A07AFD607C26E1FBA15CAA7952592BAA890BE9B94255D71431A7CB0DE43A5274281052508B00B4
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 23912
Category:	dropped
Size (bytes):	8769
Entropy (8bit):	7.9739407171910015
Encrypted:	false
SSDEEP:	192:BzMATIl61/PTE5wXVV4xutOEpt6EPglxLix+ot5wNuHTI63Fbh3/:B/S62ew1EptEgdgNus63b/
MD5:	4B05DE09A116BDC04DECD1C5EF857189
SHA1:	0856BF5385A182C8EC93755FEA4DB2B7991075B1
SHA-256:	A72809BA9B63CC2656305E224A93B9CE36A8DEDBE8ED949D9D3708B3DAA67369
SHA-512:	FA9DE40CA98F708ED99CC309A0D4EA8249A417ED4D76AFD2C023530B41954557630410204F26B9ED25164C6A2CEAA5FC285FA0039B462FE3CF93C63E58D5BEB1
Malicious:	false
Reputation:	low
Preview:	...........\k..6....B.Y.+it.dK.g7.$M.$ms....ie...-W....y.R.<c99....!..A... .M)....O{..f......l.Y._T.m..q...I.....}k.).._..<w80F#7..C.......w84</.F.(.1p....Cc.x.#..a`8......m....F....@. 4<....`.M.{.....$C.E..1...1.....\|.^....P.8......n..!.x`.x..6\|......F0........lH=p..d.n.B...r.I.......=..`0..K2........H7.N............H......P.J.]..\!m..r...\|....?p......#.....:..D..B.....>.zv.............Q..%..p...R.Fh....G..9.....A.9d.A..N.8....@..x~......B$4..&E... ...P.....C.q..&..Fa....7.q...7...A.H.:....`.Z.}.$...........3.o......=/.f..2cb<7...X.....J..g.UR..J.n.>......o.bU.V&V.j.....?.h...x,.!.?N..Ie.E...."_...~,.H.U^..B.8Mg==gR}<...".i..,C.{..Z.;i.T$y.W._..y.j.=......Q..q..5.....>MM..K......{.r.Z$...U.....>...?}....6.JC..{.{..S1KW....g.[V.f.dqYj...)~..i.$....$_a..$...M...z.e5.F......t._.r.....+LL.M%..=..b...r\|..U\...f.Lv.....:.lCX.U....7...z..n.S..r..P.i/..q...:T....k....R..7R....q.o.3.%..^..x.+.m.D.E.N5...{.jNj.6...G.V.y}.$y...>}ZY.&O.d..a.0.[

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 214509
Category:	downloaded
Size (bytes):	54035
Entropy (8bit):	7.995733658946422
Encrypted:	true
SSDEEP:	1536:dyc8fhq5kXOz1MoqgohuxsKsBKOyx/2rdFmYUat:dw5qaX9gguxsKGY/0MYvt
MD5:	FA4E2852A5CF3994B9E2CE85DABCAEFC
SHA1:	7C793FE4BA54657564F9FD244550CE554923B469
SHA-256:	809FB282BCEA68CBC7F631C95F310F0ECC547297973547EE509823946216EA9E
SHA-512:	2D573C24E90905F37FF0AD436AA90C146113D90535F31B404B5EC244D088F9B6378087DF0226091126C8E8E268D45A3550F5C5F8BB437A9EE3B4612683456B9C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/19299.9ce6ff847745ede896a5.js
Preview:	............c.H.&.W`.....a.(.Y....k,.wf.Z."!.%.`..d...._Dd&....U.......D....qGc..N.%a/k.6.`x....c.w}0.D.7..$<..a......7................n.?.Xu7w.6v...wumm{.].......Mw{csk.].^].r..V.N.{..ifn..............'...g+.-7..[[..-7..k++-7.6......Z.E....V...`gkg.Y..R..k..-.OO7...[n.....o...............3.....[....Y.W;X....6......5.7.....L.3#`..[..F..;.2....7..s/.+..}.~q..#..=p_...'.........n.}....s.t/'Q/..H .&.{.L.(...d.DY.............M..n...%.............$..Iv.H{I8..I@.$..e..s.F........\...'.=..;......V.U..#3..`....`4q....Ww...]..n5.nv..<ibKi.q3ju..........j}...v. .$...O.DO..U...0...wn4.}.W..Z....$.........7.&....:.6R.gc......o.......E.7.....dA.O..{.f.....}..d.G n.....y...........=9..8s...1...V.. ... M.a..i.........K.6W..v.j.@..m8.~.c.@@0..f.>H..Sm..<...lK.y..S}/c..i...b...p...jM....`..... w...kH.A6.*......y\|.2u....8....G.n3...\...8.;+x.$.X.gu:B.#...M........0....b.6h...i....2..O....SS..>...,..6..ju...`>7<.t.gN.n#....v.a../.?.7...R S.0Q...B....q

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	dropped
Size (bytes):	1838
Entropy (8bit):	5.854832783067556
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:pAxMI5czgk/msuG
MD5:	A3B2F935CEDF98CF2849A74EB50477AF
SHA1:	699479DF6435336BE4AA1D41378148A922CFD8F2
SHA-256:	3609B3C4EC2F9E0E1B6A33987818B09BAB19817A0B978068E10A909F74AA24F2
SHA-512:	301380C10598EE09D07B6C3259A21F73D72DEA17007FD3849FEE77DAE1FA09B8FD02A9FD95E949FFF4FC5329C9F2BB77ED7FD6DFCA1B5BB37474B6ED4DBB7250
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlxnlqomOC7AxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 12042
Category:	dropped
Size (bytes):	4106
Entropy (8bit):	7.94057963290253
Encrypted:	false
SSDEEP:	96:Ms/K70GoX6TzQ1oxD0A3jqZDPTJPpxrg/HiydkSB9:MsCwDyQy50BbT5E/CKkm9
MD5:	8785BF307F5E799B7B733B30D0C2919C
SHA1:	067C6C04AE321639F166E2E105054F3C37B178DD
SHA-256:	30B66B900825F39743AD24031080EEFE1B04A80225B5A0285FBF76C6E6C74C27
SHA-512:	6125C4EE1F435B96A52813FDF430326C8C962F0ADD93E8512CDBB16421FD39090CB3EAB68B5D0FF691E944828314C67A2AFF0D040D70036CDCBE7C94440551B5
Malicious:	false
Reputation:	low
Preview:	...........Z[s..~.......#..S'..q.L.s....I.)R......{?..x..{..<.H\...[.,g.s..L..s..<..s.....x.....L.&L$......]{.t...o..wv:...A..u%.Tx.....H..w..jk.1......=......m.&x<.?.t<...;.;[..B..;.. ........;.;[.>P._...p.;..>>..c.,......3L....3..q.`....S......C<...v^y....{..;...q{..x......&.....z.Q.%..9../.-.....=.W.^.7.-.N...5....D.)>\|...d E............f...<.y2.c.....n2..0...4.....2.q.q.\|..)......21.i..w.#1t.T.u.P.Oy:$..0...M...-.. ..^..........3.f.@y(.r...$.:.}.s.P~...M7.]u..M..;Q....~....;..e.....ds.8e."....<.,4./Bw..b....<.r...B...b..%Q.....bp.J.A......>d.X... MrIx..99..2..U.\g...@.t.C.%.q.a .X...z.....e0.g<.....<.D>er06Kqoahy..8e...{0{...b...pZ...E.........]..E.1(8.\.....[.+C}LE].$ .?.<.$.R..-..<5..S>f;...X..."..x........ep.h...$....;.?..H..-...%.........i..;...h4.sB^<l-..KL;!7.]...,K......{..c.&..I.y.8.P4,....8'j.b.a.*a.).XX..az@?......D,./.>~)N.q>aql..n.E"&./.4.b..s..$JX..'.$......EB.YF..>4.....I..E&.2..!.MR8....Q....rM.D......).......3..b~..P.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 15466
Category:	dropped
Size (bytes):	2643
Entropy (8bit):	7.91982612378452
Encrypted:	false
SSDEEP:	48:XMdzFKUazpZehBDwAMHJsTn5esEt8ELzRrsNCRxfwWP1iFuVAosBIMzT06ZFQJEh:ctwU1XHMHJstePtnVskRxoWPHVAonYT9
MD5:	FA19D74C5004131A92A0740DD51FA769
SHA1:	7949BE60AE023A30183CB21E29D82D53CF8D5747
SHA-256:	066BA6602FDF7F822E9B1FF98232A35AEA1B125E6CC6BA6A957C59312C7C2E23
SHA-512:	D2F785CCF94DEF118C63940C93875421FCD3C746A1CCB90724BEF21EA257614035A16E5E775FEA2F67F40799B44C6C5C422C26F5629068F28F143344476101A8
Malicious:	false
Reputation:	low
Preview:	...........[io.8....B.b.i+h.LNg.L.k..d.......,....@RN...}.R.%;v.4......E...3.....@...'...!...>.....Hts.}.x.......n....>.o.t......I...q..P.o.gB..~.....g..u.w.{`;.....O.m'..ak.._m..q.hw..>..Z..]..xrxr\|d;.\|<8<>..@....?.O.y...&F...'..........L....).XzeH.7..K3...j...._..{.1..3.y...H.fY....eD.,1.^....L.L..$...{....PEO..hlQ..S}...7.}M^}.E....SH.W$!...2.;..g$....vG..t..B=q]......1.tD:.d.......@...(....}2..H...w.b.5.T.,.1.rc\|..o.....~.]g.9....7...c.G9q.".).7....+..>...a6.0.d....8....B...6yn.Sp..!.4..MH)... ,.oS..X{...i2..\qP..aTHn.yj..5.x... .972.\|.$.s....d......0..!d"..H2...g.f.........'S......O......%.\|..<......I..n._t....M..F.0F...vO..f.i.N...~%y..T@...\.#."..;..Y.vvZ.....AX#..U.6.....4./e.%.s.O............P^...(.XL..Xs,..07........9......a.,.ugt...R.."...o\|P.3^j..-}m`.n..........rp.....Q..(....#...(...(M.....j%3Z...z+.hZ..XN)&.^?...Hk...$^GMF.".M.I....Ii...e.O........+D.aN.....*6..d....x.w.S....'.:i.....^..K..n.......F#..$...+.3..SB..Z.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 14954
Category:	downloaded
Size (bytes):	5834
Entropy (8bit):	7.962611733811477
Encrypted:	false
SSDEEP:	96:KAyEsUlhvqg4PgEJA34tgTsGzbUMvvlDq270AKyC1dvDcJJ5MVv5GgWJOpetCyC3:KLElhyPg0b9GfUEtDqQ0AKFdvDce5GgR
MD5:	D9706908D141B51812236CD6B7397A5B
SHA1:	96F09F52A0C264900B0BAC0A530DA81C6078000A
SHA-256:	DF03D0A57A85240934B017789F774734A6D45C9DAF450B6A0E249D56E79AD92F
SHA-512:	FD26BDDB45C568FA2DCA5D71A06328221D0A79B06BE689F73074B50B1BF07DD173C8A4E682DEAC4DC563D81EE55A52F9F9E95C2C28B4EBBBA3FA8A24CB405A4F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/34894.ada184a092746870eefc.js
Preview:	...........[[w.Hr~....-..@......xdMV.....l"+4H4IX ........W...HJ.w3.C...Fw....U.g..Y..i.8.....O....x._...,.M.4...........j.\^n....x...._{[.;[..^wg.....\y.....#=..nt8.....O.._..=.dqUY.%...:.U....\..E.Tg.Y..t..lJ...".K1-J...>.......!.4..8...P......D...x.b2-..y....o{.....X.......,.....).P.....&..2......P.?.3)n......#.O.;.t4......c....=iA....^.$w_..^.9..........v\...W.vv]...[....xCg...=lo.z.@8..z.5.d8..z.<...{.z.=.K8<..;..-...u....6.~...z7xd.q.2!..7.F....[...c...dt(......:'ar..2..2.G:t.e\|.....5Wo...xxhv....<.gY.E....Y..a.C.^D.~..u~?.....TOAE.C&........}u....(W.K..R/.W/..2...E.@...-.E...8... ..x.(...^...A...}......@...A.....N.9e. 9.$E....R.Z.7q6.dWA&.......{...r0&.....D.@<..k._.pMQ.0.h.....2&,c.......r\..V.X........`..F.,T>.q/.....o\|.5/..@...01..t .=....s........5...h... .'`..!....\H~<R.5,......h6.......t......K<.=t_=lo.x<...T$...r3..Y..#EMxS...Yg.;W...u.F..%..>.q.8.K)&Si..J.....V^.>.$l....8...K~.[E.......[<>...X.K\eM`..q\|#

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 122309
Category:	downloaded
Size (bytes):	37333
Entropy (8bit):	7.992131523451113
Encrypted:	true
SSDEEP:	768:ttQZRdXZnd/sTdj0rI89wvn0C5BFr5SuvGDsmsb+FypMx6L14EkSjTT8UwEamkaB:ttObf/sFUzwvnXfFV4Ds5Tpo014EfLv3
MD5:	21894931796CD6B921B959AB2C91F411
SHA1:	9A5236066ECEA3800D2B17572B7725C98A0029CB
SHA-256:	0B698B2FE63DC0E9174C4616DE60A256050D168BCB752F51B3517F7946570708
SHA-512:	3F3D159DC57417BA65BBE4F57386094364818CEC63E7078C811FA25A717CE0FFCFF8E1EBECBB0CBE81089BB80E8F1E3F808A2480B774DFE21EFB86BBE3F9F78E
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/service-worker.js
Preview:	............{....U.\|...q..Y..zeI.k.<.<..~.=8.$.b.FUu7..w._d.u.h.eK..9.d..$2#...?"'.......Ks.\.m.:\|.......,.N..W.......o....{{R..).9...[,.I............T.:....i......sa...]h.^.}.j.....g....7.....=.'.CO....,..6.......>7.....X...=....N.o.7.E%.s...G.....e.........vz...f......\|v.jiW...<..>;a..._4.b.N..............?z^!.+.h......V..y..........f.Zzs.8[.O..ys.Q..W.....qp..M...y.....W.:._v....K_v....\|....d....:899......./<...Y.\1#7.u4].<...ry.(..^.\|..].mG....\......'...u...[...t.~..h.....{...~(...0..>....;v.k...9...zs9/3.o.e.>}{9......W..=k.2.....[........&.lgeg&6....../v.a....z.\.+T...0a.G.........O7..a..<...?..E..,...G^.....,'.C..i.....+{..w.Zy.....c......[....wfV......./W....onF.<h'f.JO.i7m...(<.P..e..8.V.K.u1_..j....../~...na^.&......]..x.._.>.V..8..v....d{.....J...\|...}..J.f.8.l?..q..,..7k...q...oq.bq.X..7.qz&.#....o..;..d..J..R.x......@[..r.]...N.rZM..l..)39....y.._Z........3^*..+.....nF.ts3.....X-.q..)..5n......-_..Sd..

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 43627
Category:	downloaded
Size (bytes):	6358
Entropy (8bit):	7.971588109812953
Encrypted:	false
SSDEEP:	96:zWr0fecl1yEgvjSr6Xz9prT+K8i+PD/5tAmD9GblZsYic0VO7QDYKMao8:6Ue/mrgyKB+j5CmZGHJ007QDBMaB
MD5:	B89A3565211B0D676EFE8B9E2298A094
SHA1:	B653995DEE1874BD4795465D9DC185B6E17D24A6
SHA-256:	F515B2CBAA83266A49F614BEC66DE5EE3962DC5C6A4E9C315EF19A022C1A4663
SHA-512:	407700DA54845F072CE4EC709BBDCADCC78B290C697DE98F6C37F24086CE21ACF14B5A0DF8B1B2B19A4B975FDA7B46F9759F9C167B4D4A3E9F8792A55605DDB6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/59084.04d6b3360a5bc50128d1.js
Preview:	...........=k..F...W...+.H.............p>W......T..'.....bw..7.oe..<.......h..;T..2..._.l..h...............\|u.....w..?T.....?..s...d....).b.^....V.?........`:.Ol.._...hh;!.:..}.vr.....I...d:..N..C.p4..h`>..m{........r.].W.C..i..!8.M.PCwa.9.H^W^F.M..n./G_.A~..j.}........!._.....=).oH.....>.....+(jo.....X[?.u.u.?.!.....E....W.]....I.....pB....u....._.k..U.6.g?...W}.E...z.........?\|..eI.C.[...<\|...2!.4'b.....(a.V.l.gaUY.}M.".uZ...$."R..#..Y.M+/.w.0..6.m..yU[.J.zi.Uo..I..5..V...W...{R..+..J.....@.....Tf}..+.k.s.>\|.K.p....Z\d.x.7...A8....y.z.....~......=..P....2:.u...z.....gQB.zQQ..\....u.4...0...,.@...YfE..>,.4..!.3b.......J....u..E....E.U....g}.+`..w..%/,.X_...P..}...b.L...9..Um.....0.......\|$rZ..m.g......(....-.Z....w..YQ....4.}a.OJ.-.D0..................xUY.i...V..c.5."..x...F#....P..+.9u7..g...;...?yH.......p..%.x.{..L..2.......K........$..l2.9...}4...O''..!#...!..5y...O......}.-.jo.. ..E]....~..!......9wE.X ..V...P..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6349166
Category:	downloaded
Size (bytes):	1636632
Entropy (8bit):	7.999382311500931
Encrypted:	true
SSDEEP:	49152:eUzZp7U6AdO+FZ/3dmcXyNqnOohC1DG0jn:1pTAdOGpdmcXkohC1DGun
MD5:	959417B6DA80521C9978331EA1A05E74
SHA1:	4BE10390173D0776BB4CF75A9376427E1121D8EC
SHA-256:	617D60BEC28CCF01696D811C4486881506CC770FB5BF2C1C50582999508CCB0D
SHA-512:	1F7484B5346779CE86311CAF3E367D48C0CDCB5E7D57D0A9288702772EAA424D7ABD1DE032C4C60A6B1C4A483BDA62FEE328B4E6EE20EFA31BC725BB68AB5220
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/main.57341db7f55d9342c505.js
Preview:	...........m[...6.}...;....c.w...I...`H&.b..n...f.6....sW.JR...g..%...R..^..s.\|.........._.o.......r...V.EA..1;.G.~.k_&...A.2i..L...O.(....%..S.W.....v............2?e...........^..&.....8..D...-.R..ame..V..$7Q..L...OQ.O.....1d%(._'... s.\|.t.$C.In...U..D...].iw3...]...^F.o....)...Ed..I..MD.{..W>c..H.3..$...............\|...?...U;h..e.r.E..3...A...2......t.@F;.o...i^.".%1e.[.....A.._%.=..V...b.....$.r....f7..62..lf...m.T.....'.......n....e.........d.._2...l.........zT.d.Mu......U.m.......]...(Z.z..2..}..D...w..S.....e..m'M.\|..rQB..i..+R..^....N'....[.R.\..Q+.&L.."4a..."...D...N.^3.{g...i...G.g...$.M.3.A...f..O.N.....7....HC...za.p..th ...C...0D..\..#.Lr......0Y...K.A?EU....:a.........n......w..M.[.ov.Q>..:Q.:...$Ob.....fryC....q.......d....%..@t..6/.\| .lR..:......Onz1:.......k...X...?..n.-s....z(fv..R.[.BIt.!......P1..nw.[..C..Oh.......^.3.....K.....21Wr?s;.'...}..;..\|.6Jn.V!...._4....j,..4...Y..<...6.t.....B.7.U[...[..J.uSOYS.....

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 314
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	6.978954722591275
Encrypted:	false
SSDEEP:	6:XtsGKGrj27rf0tWele0HnUG5zUiD6Yi4kIYQtQWNwlSr:XM2jCAI0HUiLD6SOcQWNz
MD5:	B6A9D8D081CC891B1E5AE6E9FFC5F4DA
SHA1:	F88CDF1A4E0BA2C7D2D3B544FE2C96AE1B5A28AD
SHA-256:	0385D1AA058BE36022BDDA4EE04046EFD0043C5487EB23773B04B6C4CE85F51F
SHA-512:	A8732DC9E04594740746BB9DC2CDDB292C0A2506E2C0990682C2361689E2D5A89EE17DA1BAAD9F95D865836FE785854017F42428DEE7F598B807C9B1E21E0EBD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/44288.d69fcc0ea934ea412b4a.js
Preview:	..........\|.AO.@.........f[*QZ...^4z!.y]^.-..vQC.."=....\|.L..v...L..Q...QWO;o...Y.....\|...j.;..8.%I!.Q..$I..c....U.$....g..^.........^.-6....$J"!.....E....`@_.l..Si.....C!..B.k....B.7..m.'.hz..6v.........o.....b.8..cT{VG..........F.I:...

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17409
Category:	downloaded
Size (bytes):	6653
Entropy (8bit):	7.968945719012011
Encrypted:	false
SSDEEP:	192:9gJ+Q+huGM6V5h85ZH2JnTKFpjq5R52Yvl1c:4/+r5/85UM1wR3Tc
MD5:	128B8577BE73F0DBD4104D6ED2843754
SHA1:	DF92B70F21403D3EE8E8209068C9BB104F988CC2
SHA-256:	C9EC52006C7A96F4CCED86E30560848825ADC46E148F9C74DB1401E6D2AB26FD
SHA-512:	C4CC7510D539443F392E4572BEDE0F14ED7C8AB7B9C62A117E7BB8DEC0C0DDD53B6AA35886CC3BB63B6F79728554F532D5DF57FA9FEBEE26AA65DA5977A89E18
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/88687.cca6b938f5ec6b221b34.js
Preview:	...........\Y..F.~._Q.fd...q..dO....y..c..Q.@..i...`.C..u. .my...e.YGV...z.....u..^.6..]w.).WYYM........{.i....$J...V\|O.......6-gm.y7:...VO.q...aVx........EAh.%..$.b...].K.M..8...C..z.c...#.$.".,h~.{.a...u\.0s1.M.1.O}.0..c+san.yc>.wS>}..i.......$.fml....e..f............_w.j.\N...u=...<..............6o.uW7c..>/..Q-.....q..9.......H.p.g.<....F9U.....s....X...\.k....s.Y.1...}..x.r\N....y....h......ci.7..4.C........k..<....?L.e..?t.Z...l..lr...m7....^...-..n....-o._....PY6[.eQ....weu..].e].3......-.K..Y.......qn.g.......,.....>~...w.`.Ey..b:...i.o.5.......G..:..+v.....b....8...y.\f.8..Y......t.....\..X."\.g.W.gO..g........IJ.Zr..[.....@....9h%)R...q-.kc,..X.K.1vGx.\|..^.qKQ. .E/Ja..Q&.".eL5U.5...p....k).....Vv.u0d.Q..}.g.>.F6..........B1#W...l......*..h....$m.A7Bip.`......}=..-..v4.]S..)_..a.9l..PHE@..l....Vh%........#y...............G.H..^..tl7..z....W.E........U$.T...a../x....q..+..e...7..l.:...h2.....t..#-Ye.K...%,........1X..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37348
Category:	dropped
Size (bytes):	11074
Entropy (8bit):	7.980424836726927
Encrypted:	false
SSDEEP:	192:Nx7OvPChMNdzun6JmCWWDWlaYHqht0BmGxvXaGH9qelGBJYR1u+HpoyBIT:TOHwFCWyWlmt0BmUjH9qUGBJYRJey4
MD5:	62DB3FA1A2F24A204DFC1DB94B616B14
SHA1:	CC2CCF288D527590071DC6B4F3915CC0748BF6A1
SHA-256:	696FF7DF9DB8707022D9C4298D13F3F78AB3657C5B17406E5B79516E815E9B13
SHA-512:	B0F352FE757774BBCDDEA8451E7211BAE6BCEF0DDC0D18B7A8922A803934CA7AF7DF0340C251D7BBF6A17862D03C5809B6147967FE9623EDA3779C25FAB94282
Malicious:	false
Reputation:	low
Preview:	...........}k...........6....#j<..x.%..$...A.I".....%....U..4x...$..9....kuuUu..X...,....f..qp...p...t...).-.w.0J...}.pu...E>m^]u...[^....-.....^Sy......,.5.o...&..y...x......K..........W.I.<>:n.'7a........\/....q.."\|.....1.....^..B\|.;.........;-t.....s.!>......>..........}...p....p...z.o..{7.w........B.......y'k.rw9L..p.~3.&..J.<.U2)./.O....i=..........\..0]$....I..E.8...u.lyQ0-f..\\|..\...q.X.V..._D.......,....Q.fy.A-...DE../i\|S..M.G.X....N.d.F......q_8..^S]..B..p..]/.R..a...]WE...M./..u{..c.>...D.&..^va.v..SZ...fjl./.>eV....Y....&....[5..5r.......:)Q.E)....r5(..3t......8...%1&...s&..o7........w.y.^kh`..z..6 ...y.`Eo.(...C.7..4......T........nS.ZL..~.....,.o..@..(.ox.wq0XL.A...U#O...(.4~....4..T..L%.i{......(..r.a..c.:..7..l.F..(.....[..~8,.../.A..i..X.......,...."..Q...7.E..E_.i.M....AX...\|..A..NoU.2.U.uO.`....:J..^.....(TB`......_.\.E..3..o.s.;t..N..._.....t..b..f..%_.^1..@3.a....W@.He......Ek...{..n..d5..E........gyb.%..A.....v.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5289
Entropy (8bit):	5.355591408853993
Encrypted:	false
SSDEEP:	96:XQEZeFZF8ZlFZgxVvxayJvx/KIVSYhjvZvq/quPYpIxG:XQdVZay54IVzvpwPRG
MD5:	AF1A4F433268C77E3AE472DC49E1979C
SHA1:	D24B884454A20234DCB6C5D4F2A46F815CB81AC8
SHA-256:	35D384F7BA5B40CE2F77817A4E954F5B83474E26F456570878E405446EB90E7D
SHA-512:	A103987A5C2F5044D67A7C42BFBC86D09E5DA9E4F444369192108685DE59CDE300253E6A5BBE80EE3E7E33B31621AA8473C72B889A4F1824B32601A4DDDFC347
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/related_comments?limit=5
Preview:	{"data": [{"id": "d-www.google.se-96135651", "type": "comment", "links": {"self": "https://www.virustotal.com/ui/comments/d-www.google.se-96135651"}, "attributes": {"text": "This indicator was mentioned in a report.\n\n\ud83d\udd0e Title: New Widespread Extension Trojan Malware Campaign\n\ud83d\udcd1 Reference: https://reasonlabs.com/research/new-widespread-extension-trojan-malware-campaign\n\ud83d\udcc6 Report Publish Date: 2024-08-06\n\ud83c\udff7\ufe0f Reference ID: #575d4a3e2 (https://www.virustotal.com/gui/search/575d4a3e2/comments for report's related indicators)\n", "date": 1726078525, "votes": {"positive": 0, "negative": 0, "abuse": 0}, "tags": ["575d4a3e2"], "html": "This indicator was mentioned in a report.<br /><br />\ud83d\udd0e Title: New Widespread Extension Trojan Malware Campaign<br />\ud83d\udcd1 Reference: https://reasonlabs.com/research/new-widespread-extension-trojan-malware-campaign<br />\ud83d\udcc6 Report Publish Date: 2024-08-06<br />\ud83c\udff7\ufe0f Reference

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1181)
Category:	downloaded
Size (bytes):	4823
Entropy (8bit):	4.99018506568659
Encrypted:	false
SSDEEP:	96:TmQfjOO4yhuBrpM1ZZ7udRUhEGvmb6AykU31:6QfjONyhuBrpM1ZhugBvmb6AykUF
MD5:	638EC429BA0EE788B7CE5800AC55007B
SHA1:	BCFA0AE9172D840D308B7CFF8E130A86852B30CF
SHA-256:	6926EC5B93FCB1774A4A5A1BD4F9D1296050B12A6E19CDEABDFBF70004F301A4
SHA-512:	006979657102DCFAA7E1257927D4FBCEE9A92DB20A42B25F6583F0A4235801F7A7E6E8DF08E24E37F1DA8924ECF9940E71DB37F232C5450178A8572E28DF98D8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a2308
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>VirusTotal Graph</title><script src="/graph/assets/js/webcomponent-polyfill.js"></script><style>body {. background: var(--bs-body-bg);. }. /* General header /. #main-header {. display: flex;. }.. .logo {. display: inline-flex;. align-items: center;. position: relative;. padding: 6px;. }.. .logo img {. height: 36px;. }.. / Skeletor */. @keyframes skeletor {. 0% {. background-color: var(--bs-tertiary-bg);. }.. 50% {. background-color: var(--bs-secondary-bg);. }.. 100% {. background-color: var(--bs-secondary-bg);. }. }.. .skeletor {. display: flex;. width: 100%;. justify-content: space-between;. }.. .skeletor .item {. width: 100%;. min-height: 300px;.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 28553
Category:	dropped
Size (bytes):	9663
Entropy (8bit):	7.977102958993865
Encrypted:	false
SSDEEP:	192:4ngAjet7FCy2rYJ58EAn/a8xM9To5Za9XdyVkHmcu:4ngb7FCRYzazA+aF0Vqmcu
MD5:	258BF10A6F5A9E040108C7204576E9B7
SHA1:	D4A5F8FA4782C776093622266A0D2C73E5AEC25B
SHA-256:	14B554703713D9BB31E4B36867C25FFB6E0CE0FD216DBE8CF73B0277AD4728FF
SHA-512:	7F2EF8EE2F2F252FD89AC7E89AD66065A7ADD8EA28CCFE028DFF91817DCC265C9980F1958DB73062210ED28132EA50174D67F473EA4D8F3CBB43B5A204662FB1
Malicious:	false
Reputation:	low
Preview:	...........]{w....?....[....d.M.t.N...u.)%.........w.....z8vr..s..&"^..`0....+..{%.p..p.L>^....y.%.'...N.lw..g..i....g.m....C.p.....[s..#/.hR...03. ...^.m;.>.n......V...X.F.N.L.YP...n7.....D.wr...eh.f..H..ErQ.4H.[.b.,.8... ...........,]...y).I.-.4...a>..-3.f..7......y.......2w&i...N.U.......8Gg.x....7....Q.h.V.........".R{.<.... !....R{..b.%..=K.=S....(.z........`..yn..B$.....x.....$M0[..... ..nIa.)fQ....<8=[..0^...o...'.b.b.".V!Z.....&....X..QV..N...<<....../.U......Y.\..%.#.({T.m..g.wQ.t.L....#...sX..B.f....^]..V"...e^.s.6'...NE.F...b.....W.h.Z..`V.c.J..0.._.t.\...).....XL...M...J>7d.=Y.....8..Y....&.."D.!......_.....qA..Gp`.C3..W.$C..=4U.FSM...8.5.b.....5...i..!.#}..'..6O*........y..0..oI$.,...D.-....k.L......(H.n..)..1....d.[.....=.W....f.B...%.1<.tK.V.....".\...t$...}0^dYx..B.....i,.d....m.....m.rr.M.U...d.mmV.+..e..N.J....]..e...d.f.F.{{.x.w....S......}..yy....9..;.......?...>.+.......{..A.A...=....lG...{.v....M..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 35260
Category:	dropped
Size (bytes):	11435
Entropy (8bit):	7.984585819292661
Encrypted:	false
SSDEEP:	192:Wj6Zc/874e9TU9drmW3AlTKJu7Yo0iQV+RwcIbwRi8dlABpfyzGXnQY7RsxVZC:c6ZcZoU9JmrK8kVi5mbwldlKpfmGXDSE
MD5:	FB830B5846B72EF50E3001D0D706401B
SHA1:	F325E2A043414C549B2ABA7725CC9EEADD2AB265
SHA-256:	4A79796C6905B3022B97CF5EE0C8AD95FE4762798060153BEB8C69F63E02CB21
SHA-512:	7FB1CF1525F62D394DF0BE51DF985DDBE2EC9F9BE3003C5D33BCD3B090EABAFF1705AEC812E258534176089DCB159338EFC08B409E2F8279937E6E6CD8A64307
Malicious:	false
Reputation:	low
Preview:	...........]yw.F...>...z.1.S.L.V.....Xr...........H.....n..B...y;.f.Xlt7.....l..\9y.....r5>.?..i4..?.%.......$.......O.p:.G......j.$...{^.. ..O./.................G+~.{.[k.[...x....]....nn.o.A.?7W..V.`.?7V.7..`...................#?.....U......U..P.....z..>...9....h.p.....6......Hh..U~.....kbomM?.XYy.-...5.E.......6.t....w7..3z.......nop.nw........../....>[[..h.S.....;cU8...... x.\|...'..ay..6K.E.&.. ......e.J.<........].Kf.q...w...._...U..c.&K.+.OU>..i.f.mh/..<7.n._.=s..1........C5H..P~.......5.]..e..._hp;+;.~w'.t\|/.........=ZE.%~/}B....?.X...w2U............,N.Y...$..A...w......&...q.~.M.....\|v:......O....Q8...........^.fj:...{.><.\.T..gx..}....8.sG}T2.4<..gcE{u.d..!..g../..r/....9^r.8^$C..e4.'...Y....0N...VL.......^'..<..T....Y..Y.l........Nd.BM..w.hf{.p..e.i}..U.?...c.R.\..n4......x..!..c.....^7H.Y.Ggj....N.=...0.[...YQ......e^L...u......>......ZGY..._]..'.6....<.1....!.....1.#j/4.>.$...jo#....."..N.f.-zM.5.?<...../.....O....,/.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 12552
Category:	dropped
Size (bytes):	5246
Entropy (8bit):	7.9575147056011835
Encrypted:	false
SSDEEP:	96:WCA52yTcRma5t3MbjU8pJJfPxBJvm5eAIPpU19mm/JainpTlc0k9Yiy:WCA52yT3ilMHU8Ge21pRainJl29Yiy
MD5:	9DEEA49CE5CD79544EC27EF2B7D725E3
SHA1:	7DC8AA199A994058A67AD4BE600B4A6C541E606D
SHA-256:	AC35EE83DF32EE5C1EF262D5F7180241AACBBCF32E59553D1310DADF999C92DC
SHA-512:	BE1AC8030E64DDCC59116FA55BE520CA23826C72C4820E6F4D97F32CCA588F0B672DCC27FBECD54975BE57DF2649104889335B5D429DDF31A8D7D9DCC186F2C4
Malicious:	false
Reputation:	low
Preview:	...........[[w..~......f$..E...8N.6...n...EA.m..IP.b.op!)..<......s...."...b....y.\,.F.A...[..C._......~x.....<{.~..u%.,...7.g~r9q..[.Y#..h... ....S$.1..1......K.....v.i.......}....+.3H.."...lV\.D.C..up....k.\|....$.Q..+..^.i,..N+.@.@...0....e...[T.7".Y ..=.....`.T._.. .:,...W.#ub.f..C.^F9..\|.....].>....Z.......~. .(..vT....)m.k.;.l........>.q.......t..wZu......C..3.P....&....<.>x.>...w..Ag...l......lz'.R.^.i .......z..]]o....x..=.w/r..Ju....BL..H.w.E=..mv2(.d9...OL?..3..9.,.gD?.....5.\..>.\.y..t..;Z....j!.ic... n....Z.8.a..o1..h...o.R.;.W.....j..dB.Y..(w<.c..h...O.8..Z-.^...X...=.[....H3.c...K.....Y..<go..h....lucV{.j...Q2....S.(v.M..p..u..`K...V........xO.....K......cP...J?..L.{;;...ESW.r..Y....5.=..lJ..... ..W..J?....oH.+...k'bC.w..vv...&...cY......D+5J....{....#......_...?.Q..~...8.0...y>..A........ez.L......c.]'0........_..._.p..#....[......._..........q<...+...Y.:...k.q...^.%$...u.rv~.. ...<?..8...hpv.....N...g..z.h....-.6j{.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18493
Category:	downloaded
Size (bytes):	6610
Entropy (8bit):	7.967775880024486
Encrypted:	false
SSDEEP:	96:heT8yNUPfDEmgHfWGGBYlNwzfGkOsG+PTbLNm91wBbR6ib5Ubm9CUkYbZU+swTOu:MVNSfDEmM02EHPLNg+R6OUgbHZbh
MD5:	747203310F61F61F18468636A92A4384
SHA1:	F164A90DA0322C2B598E7931B1D66061EB7E638E
SHA-256:	4835EF4F76BC242B172F2CFE77F28A663BD81AB858A2579CEDE79986F130F770
SHA-512:	86602E9956F8359DE9D8A031AB65C557BF1991F3E3C75B857808325D3298BA9B3C5A8AE1DAA56056660CB9AA71C181DA95D08D2AB09E8F3C5BF772A9475D063E
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/94940.0b7c2d9e5c367a9c5362.js
Preview:	...........\.s.F......$2......a....m...%.V..A.I......0..}........MM.5c.....w..1W.3.2....[..g...f~p.r.Jnn..Ut...d.../.?.^.......I.>9iwOFV.0'.'g.[?7.In..N['...k..?..N...^...._;.Nw`;...uN.......uJ.'.^.vBj....{......YM..Y9.......(M.....[.....WK.....d^..l.....U.O&..y:.....Jo....%o.4cy....A.ee.[t.Q:.f....dR>d,..o.,..#Sma..,Hs.d.?...j.c..rfX...LJ.].=N.&.q..M........'..".\|{T....../..m......<1.?:..)C6...N).9..#v>..I..Ea...%aa...<..!q....@/.n..r..._...+../_$v.r2.....V9.....co.i..- ....I.EI...e.".XQ.r....7...4)J#...@.5..f.2....h.'...&;].~\|...w.X...=.?;:b...Z,U...`R.9...Q...........V.0..q$.e..K6....#..#s:w....w....Q.T..i..Q62...2...A...4h..Y.l6.....]_2?.....Zk.$y }..1J.i66>@..(..`...~y.....:..B'.r(.(....N..P.-T...zk......K..LA..&G..;R.x..(...BL1...b.....(Z\q..(.Y>.~.o>.\......v.f?~.V'.~...u.@.pc\q../8r?V7..EQ.A.I..b.....PK35..>.........\|#u.l.-."$...[...A.{.....l.._..." ..e.....z.r..V..MV..g.A4>1._.6...81.~8gF.. .B7....!x.+w..K..?/S(...w,.:.#.g.....v.v.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37544
Category:	dropped
Size (bytes):	10303
Entropy (8bit):	7.977130551213475
Encrypted:	false
SSDEEP:	192:U9ctKyzVtup+TqGzlgROeTiyi8FsCEOcNueUfAfBhYaczOK6lI5ZR5qbMV+hFU:I4K8tWFpTiyi8uiZfAf3Yao6e5ZY8eFU
MD5:	736F026E209AEFF96C0B1E3E1C86C860
SHA1:	8C5E627DCEF8C95E28093BCD349F49CE83B29E2A
SHA-256:	BCFD17A9613068786308FBB18A81AD0222CA3A9842ADB71A0F532685BC84A09E
SHA-512:	E4F0B7C67D14BC663FB9F4D126391B8352DFACEB67F4CFF1451C5512845BE362E710F08EE68761AA27F0C12E3CFD9892377D34DE17CB2E7FB9DF97FFA4308AE7
Malicious:	false
Reputation:	low
Preview:	...........}ys.H....)`..... ..%..5..=.......]?..$.$.....:..w._f.(..$..v#6du.#.++.6V.p.".&Ec..E<..x.N../V.....\|.F..._?~j..U.h~.x.....I...=...{no...?....A.(h..p....:o.N.....l.7.NO.G-7..~......=.u[n4j...iop.rQ....Z-7..^.....iw.;Ei.n...Qk.....Sw..G..E..-F.U2).4..q..&.b.0...ER.~,.y........U..F..,..:.....\..^'...K....D>.e.fMZ_...Y..r..hT..E:s..,F.....V.?..4...F..)2.....6.`4.dT..z.a.b..&..j...c.up...h.i3j.....st....j}.....(VY... :8P...Y...J..6...h..y.B$.....Q.:....$M@X......W@S..}..[,.._DS.w#.=..$}%.0..\\.,n.../.r....h..A....2..}.Ea2..5s..\|qG...F..;......Q2KQM?.l...W...sTL.....l6y.)N.....m,r`E..v3....L..{.j&...&.F..J.Eq...._....7..4.rx.F.q...W.Kg...M.x..1.p..L'......m.YM.8.p.u.._...h.xt..q.. .......l.{G..eu.......S....o.yy.L...a.hn..JD>j.0...`N.U!........VA...v.......8-.$...F...h.....Y....5..Z.6)....Vs-..<{.T.......f......].6.5..1o.....q..xT}..b...~.....o]...?.....u.%Q2...r..Q.../._.....r.z.*..=...O....6o.....:A...p~...;`..~..>V..~m...d[{..

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6226
Category:	dropped
Size (bytes):	2665
Entropy (8bit):	7.924606430921582
Encrypted:	false
SSDEEP:	48:X7lgmnH/Pwa1BS98TFcGkzgG14E6X55EoCfCwN4PmiWM/bNNhit3RxD33Q5bU+kk:emnh1BBTFcGkcS4E6JmKKYhwxDgr
MD5:	092AB35FB71ACEF243808296356F78C5
SHA1:	7095F5EFCBF0731895D31A4F93340C2D99237C14
SHA-256:	0592D118B36DED80D9ACF7F4D7E4F9F1FD3815DF2057D984A8A900090E839FBC
SHA-512:	801C7573171B7C04C9225F79A069F1FEDBD2DF436791D6623C215D9E5308E2CCDF98A46402C6D9BD9F373CEE57E296D63E93DAA3069FFF763345ABA4B076CE34
Malicious:	false
Reputation:	low
Preview:	...........Xms...~..f]..Q.).B.Rr..^...er...P$d1....&.I..}@..lwn:......,..........f.Jf..#.`......8.t......2.y.g....~6'.,V.l..a..n.b._....b<....2..:.q/u..{.)t.]U$J./.%i?8......+.`.f...W.....f...{_.\|...\|..G...a0.].%..L.s.%._.-+.RY.....d)..Q...R..H....]...].E...,..u.7k'..}...+..IV"Rfm.d.,...8..n...`.F.].1.!V+...........b}....$E.'...Evj%.....z..k...B:.L.Iu..h[......+6y....M..iC.v...k...gg..\|..;..4.yksA[..e..$....#..nD.L.)s.~H$.%.x.8..H...9.k{6!.fhCc.#.....2...9.."....7....Q...PM&..:T.0.....E$;T.U.....cGv......`LH.G..&dt6w.....g.........D........cwq...m..ZI.0.~./....DyIs....DK;;+.#...g.......&. ...%.Z....6e4..".rm..jBy..mh.W.P'.i.t[u:..C...b<M...N....:..c.....1.p.....#.G......h77..#...%..Z.....M....4...4...-...[..2.Nr.$...O..-..e. Y......t..iKYs.. *.....u}J...N...........n.G...h....N...H.9.V...../uHp<.c....../...8..5.X.....7.[..O.....Wq....W.p...Ap?.~.K.N.../ny..SDW.3..3..F>T........h..b.p@...s...........h..r.9....:....K.o....1F.i....

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18298)
Category:	downloaded
Size (bytes):	18916
Entropy (8bit):	5.6453273959723
Encrypted:	false
SSDEEP:	384:/K2+nG8EXuGyW8FuKW/00BlP8rbnPrlsi1yKnaeRF+yMfRGcL6ZEm2:/K2d8E+Gzr0uSrjlygaeD3ILaEr
MD5:	87F3F1784464A56B80F04D1C64FAC841
SHA1:	66ED80D249257F5352375A3F12103538963D7CFD
SHA-256:	A7EED1CAFB8953D9B44109950C9C7C48BF6DE295975693894A9D36F7AC9D266A
SHA-512:	6156B8B9CA66D7E360AC2E6201AA78F89D0CDBD1D473EFC6BFF7C6EE8C36C15944FDF60C62DB6FE9099830350F929ED0AEDB225A9082E5F91C4ABB052AFFA344
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/p-7RyvuJU9m0QQmVDJx8SL9t4pWXVpOJSp0296ydJmo.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var z=this\|\|self,L=function(f,b){if(f=(b=null,z).trustedTypes,!f\|\|!f.createPolicy)return b;try{b=f.createPolicy("bg",{createHTML:T,createScript:T,createScriptURL:T})}catch(d){z.console&&z.console.error(d.message)}return b},T=function(f){return f};(0,eval)(function(f,b){return(b=L())&&f.eval(b.createScript("1"))===1?function(d){return b.createScript(d)}:function(d){return""+d}}(z)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var W=this\|\|self,f4=function(f,b,d,T){for(d=(T=B(f),0);b>0;b--)d=d<<8\|g(f);h(T,f,d)},g=function(f){return f.G?bK(f.Y,f):e(8,f,true)},B=function(f,b){if(f.G)return bK(f.Y,f);return b=e(8,f,true),b&128&&(b^=128,f=e(2,f,true),b=(b<<2)+(f\|0)),b},TL=function(f,b,d){if(d=typeof f,d=="object")if(f){if(f instanceof Array)return"array";if(f instanceof Object)return d;if((b=Object.prototy

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18493
Category:	dropped
Size (bytes):	6610
Entropy (8bit):	7.967775880024486
Encrypted:	false
SSDEEP:	96:heT8yNUPfDEmgHfWGGBYlNwzfGkOsG+PTbLNm91wBbR6ib5Ubm9CUkYbZU+swTOu:MVNSfDEmM02EHPLNg+R6OUgbHZbh
MD5:	747203310F61F61F18468636A92A4384
SHA1:	F164A90DA0322C2B598E7931B1D66061EB7E638E
SHA-256:	4835EF4F76BC242B172F2CFE77F28A663BD81AB858A2579CEDE79986F130F770
SHA-512:	86602E9956F8359DE9D8A031AB65C557BF1991F3E3C75B857808325D3298BA9B3C5A8AE1DAA56056660CB9AA71C181DA95D08D2AB09E8F3C5BF772A9475D063E
Malicious:	false
Reputation:	low
Preview:	...........\.s.F......$2......a....m...%.V..A.I......0..}........MM.5c.....w..1W.3.2....[..g...f~p.r.Jnn..Ut...d.../.?.^.......I.>9iwOFV.0'.'g.[?7.In..N['...k..?..N...^...._;.Nw`;...uN.......uJ.'.^.vBj....{......YM..Y9.......(M.....[.....WK.....d^..l.....U.O&..y:.....Jo....%o.4cy....A.ee.[t.Q:.f....dR>d,..o.,..#Sma..,Hs.d.?...j.c..rfX...LJ.].=N.&.q..M........'..".\|{T....../..m......<1.?:..)C6...N).9..#v>..I..Ea...%aa...<..!q....@/.n..r..._...+../_$v.r2.....V9.....co.i..- ....I.EI...e.".XQ.r....7...4)J#...@.5..f.2....h.'...&;].~\|...w.X...=.?;:b...Z,U...`R.9...Q...........V.0..q$.e..K6....#..#s:w....w....Q.T..i..Q62...2...A...4h..Y.l6.....]_2?.....Zk.$y }..1J.i66>@..(..`...~y.....:..B'.r(.(....N..P.-T...zk......K..LA..&G..;R.x..(...BL1...b.....(Z\q..(.Y>.~.o>.\......v.f?~.V'.~...u.@.pc\q../8r?V7..EQ.A.I..b.....PK35..>.........\|#u.l.-."$...[...A.{.....l.._..." ..e.....z.r..V..MV..g.A4>1._.6...81.~8gF.. .B7....!x.+w..K..?/S(...w,.:.#.g.....v.v.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 70200
Category:	dropped
Size (bytes):	19475
Entropy (8bit):	7.99030350023132
Encrypted:	true
SSDEEP:	384:PCkyepKg+mjrJsjUs/NJJIc+GLCI2masI/+S4YS7s5C:P4epHOjUqJJVSmm+S4YSo5C
MD5:	3744CFCD4ADB74EBAAB73528BCE81268
SHA1:	2071598C137A0F2760E8299A46FB4FCDC11AEBAC
SHA-256:	64940DA3B942F8612FF02476EC1780A05260741BD15C6AB9FCBEA65313046118
SHA-512:	DC66711BACE2D48EAC1B5EE4E233412F762BC64514595A29754682A611BFE2E06C29EEB31A32341F5E4BAAA668C6DE60C1AD4021D0B66B44D8DD0B014189DE98
Malicious:	false
Reputation:	low
Preview:	...........}............bx..(Y.)':.-....m..1H.CX$...\L...Y...I.WU..@..%9...........[..`>.......<.m../..Mx.....O.>.U..&..?\|h.......;.3w.m6..A9p.w].>.6q...:.'..K..D.u....Z.7..z..jW..?;.^.Qq}Jm7......F.^qG..Uk....vzu..P.n.]9...3vW..0.>....p.Y..0Z.p.......__l..2..y..Hf.5\|.\|.....\|8.F..../.8.......u...... ...U...4.At.N.......f.DS.]0...'%=.B.7....O..?T.M...q0........j......v..V+.x.\|X.U.<)..2."...A..~`..>.G..._9^..f.t......$...@.R.s...8Z...6...Of....i...ay<...8v..$XNb'...y@..r..fL..l...W.<.@..&.0..~t......k..k..D.?.%.:-._,.....b.......z.'..);,.a[.1@.....o0....<.a.9...y...W....`.C.}S.G.h]).T..C..j..PP.)L.Y.<...5...o.. .+%7.9......w....#5.B...S~.5d...G.8......u.l.k.57.f.b^).>}...?;O'..x0,....O..p=....:.&7..%...<...ok..L.j.Vsf......1....$..l.4...k.2N@._...V...*...p2,..8L.. ...L.j.c....y>.'.`i.L...#.Y.?W......\\|y.Pw.NLW.y.....O......,.....s.N...-.^...,.N..ed.V..^.7f.O.....6Z.#.....V.....kE.(-OC..R......R$.#.....?...+..c..g..]......c_].\n.>.K.?w\-.....W

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30533
Category:	downloaded
Size (bytes):	10419
Entropy (8bit):	7.979179836928558
Encrypted:	false
SSDEEP:	192:IBEi4MXaW0e6WaXfknjtIOMJ5m0TPCvifk4J6nIZrvwPR3gu5:IvXD0e0sm5m0OeJIkkJJ
MD5:	2A587EE083FDCCA95175E181631D765C
SHA1:	F42880A80DBF4E4D1DF44840EF79BE1E0E995445
SHA-256:	7399E4981B3AFB22BC79B09E4F663C7CC790EBD2888AC619566C6FF7119D429E
SHA-512:	FD5B546DE7454F1F51AF6C563C5E4885F51697D917BE056293EDC6E513C19DE527A24F167809895469A68F62883BFEEBA09112C5FF77517DC56867BBFE529DBD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js
Preview:	...........}iw.F......I\|.....N.V..h.m.$.(ze.l..H..@.....S..@..e.9... .Kuu.U....."...}..b:....<..?.,...t...8.o..........9>.......;.........w......;.+...._'..)...}...K..".,L.......x...lm.^.owvw..(...i(......."..q.......r..b&."..".../..{..E?YL.a.f.Y...w1(..(^^&..t......Y</..@&n?;.G..rS;....HG.k1......a.[0..4...j^..=.Sl.....Q(..~. ..v.".w.<...{......"wR........?..O.{..b.%......V9..8.z.........C..Q.[.C!.ane...x2....A..L...{./.)'....WL.<...^lG.-6...4...NW....0N.....4.X@>(.jr.,!w:^.,.<..Go.N.<p.. ....Q4...B5.A..9Y4.>......K...,....".e.s!.o.(/~...l..0.[...eb...vH.......k@V[...M]'.....{.^>M...6./.....!.j...Z..(.y2.m..C..<.E..:.;wI.0.....Y..i....."...+..&...E<....l.S.eo...M.Y.N.".H....a..Z-...b.."\|?...g...[.e.F.(~...d....p.Lr...0.C9....P.jr.._.~A$.."...8.......vH....]68.u...j>ImmS..^.<.....O.=.%\|...`.^:=o...]....s.....j.sM...b1;...=....H.gk..=.{o.....{........+.P.0.5..E^.3%...BlZ...6{.;......R4.tFB......?.s^...n....D.GcA.....fok.x.q...E4}.%.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 62242
Category:	dropped
Size (bytes):	17340
Entropy (8bit):	7.98682506112389
Encrypted:	false
SSDEEP:	384:wI3BC0F5b/8ECJeWnO1MJ87p/vH3OFA5+o:v3oeAJVQMJ87pvHaA5+o
MD5:	D0C969BEB7A18A393E80018DAECBA263
SHA1:	3CDA8E6F246FA6413543921F4134FA5FC01985A3
SHA-256:	0CAB57694D986C128235283516BFE3C53E5ABAE9E331DF50271DF3951AA9707D
SHA-512:	0A9148E047CF39A360F2E1262918214D8A97CF2BD5C0FDAEF74EA63220D5B32BC7075B1A71DC8BA2883CF6DE6574AE138F5A8782430F3F8F0D81A71E94BC003F
Malicious:	false
Reputation:	low
Preview:	...........}.......) FQ....o#J.GR.X[F#;....$A...`.p...}.5...'...... 9...;.\|.l.K.......{..9.F+w\|z8_/O.....p...w.?..PqV.x^~...i6.v....f...Z..[.N.iw..n.}.n5..A9.=...^..g.I...L.}...x.6.T..r..W......~....Z.;.e..i.+v<,.5Z..~.[.......@.^..*....F.......~.Y.'.l..Z...}gY.T.......^.q.j7Z....e...V..AU.3.l..hu.K......V.e....5<..e.Vk..s\...z.b_.e....N....V.4........R.;T)......h..\|.m.y.~..T../.....[..>.....S....~c?...?.../.W...;.;.{..._...?....f.....w;..$.d.0a...p.^..?\..a..#...h.^x.$v.o9K..\|.....,.A0...G....'o.83/y}.\|..+/J..x.8.WI.a... <..R.EK.ar...u.M.\|{.^Iwa.3..a.&^%......^.4..1..r...V.......Z...a.~..r.^9..i.A9...t.>..J...r.y.:ZZx..^t.....KO.R}gG...0.......c.H..$.B.<.<...`d....p.....[,..,0.....w..r2.;.}.`p.7...j.-....L.C..&s?v..1...X5...cV.s..M.....=.....&....;.'y..J...._.q..c9....q.:.g..{?.G.......u?.....d.E.=.E.;.g..$..%...y.I....Jvi...n.U...... ...?I.08....._.....g.oo..._.G?...........S....S.T....+..q.8.......].\......Q.x[......".HR....

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19516
Category:	dropped
Size (bytes):	7082
Entropy (8bit):	7.970534013791315
Encrypted:	false
SSDEEP:	192:mOMgyS6VwrlcwfFZUQbz0Z6YnEe78ql6VhpUED683:mOoSCFwfFZU8Qx+TUG3
MD5:	EFC93C41A0F83151168CD3884906C34E
SHA1:	E13E12F99CCE04BE44DC318C11BC575CF4FA33D2
SHA-256:	864C0E7F5CD89B0D0C373995B2875B2BADAC6588EA5DC4D423CF14CBBE8BA35B
SHA-512:	5DB898F19137887CB5233828D448EF39652432DB947BD0C43F82F49E0ACAC74E46439B415F9199D146F0886097ABBB7BBA135CE236A9F53501BFD57F0F0725FC
Malicious:	false
Reputation:	low
Preview:	...........\kw.8.......x.^...$.L:=.9..>vr..fs...J.S.....Y.}o....#I...Oku;4..B....P.u!....lM.H".Q.V~p.f.N............^^>~...X.?~...v.......t;.no..N...j...V6-.....v.<v...C..x...l..a......N.Jgx.....l'..`t..'.(..I..TL....:..8K.Nf......z)......../...8]'.t:...........1.%.V"/...E..2..4.q6..v+..\|^.,.nE....IK..W.".r...?U....H.......S..u...j...k.....~.ON...M.(.=....<:...l...'.(.yj....?9Q..E..B.R.s..$.....f.e.D.}O>toP.qY...O..#...r...SO>p.2......g....O../.K<."..+.~....e.0..: ..b..h{.W-......g...... ...s..0.".i..-J....+...ND..R,.y..#....n..k{.....h.(....^^..t..u.....?m=.\|po....o]Y..t...).\.j;J...hG...W.64..4..L...).....n........?[y..g.;....=.O.y....'r.ey..c."........uE.._.X...,-.t-,..B.i.J..........3w.<..0w....1..c.....F/..t[..X..h.......j.m'.(>9...v.qnK........2b.Z.(.......4.....N. Ri4.1M.....vY.........?....VP.vK.[K..(9_i.YO..:.w:k..g6....t:o.^.%...~Sn.5...7...q..NV.z.....C...e.....Se.Q...K.r..8.:.s..db....=..O..2.....V.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21631
Category:	downloaded
Size (bytes):	8178
Entropy (8bit):	7.9746321228938095
Encrypted:	false
SSDEEP:	192:HrZJTzO4NfGoUHGVM9KK4xqIYsECiJzQ7WCFvw99rSQ:H1JvOKTUmVMKTAIQCKrp
MD5:	58EDF1EEA65EDDD82F56C4614FD58AF8
SHA1:	519B80D7811346B105E06CA093AAFCE17B4C7A9E
SHA-256:	BE4B6CB44E9C0E9986F6AD849691939A57EE98DECBDB9148491E9C52782FADD0
SHA-512:	ABE6F169ECCE62AF804FC245F6AEFC1771F8239F17F5C62295D7299ADAE2B10DB752A60BB1F2AD0C8B1120CF674DD728136D916DB2D0D7A81D1448BBA1156DD7
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/26044.e227fd5c65cff1753dd6.js
Preview:	...........\is.F......&... ..e.Qfv\.$.v&[.......$X..#4..>o.@...d+V".}......V...6.....nsw.~....y..~....w.Mg.kV.w....C+.".}o...d.Z.....h.0.i.b...q.f.yu..F>..a...i5...q..V..i.i...W5.rZ;.qaZ3.ea....m3.ZP..{.i....?0.[\|....B[..gibZ;\|.#?.LkE.Q.......s=...z...f@......,.M.d..............'...W...[.k....`....-G...r...E....rsO.7@4.owk.i..d..v.....+6...r:......_.unY...._u.eu...k.u.m.zLD..W.r<....t.>mY.4.e....#..I..`..[f.S9.k..b%8..f.x9m%..wU...W.m..f.+....b:&,.pkR........`..?..U..].1..qQ\\H,.lYl..R...'...y.7...[.Y4...f?.6...(a...3v..#.i...q.6o....h..].m...{Q..n..y.g..E..j8.bn....'.b....rg.i.%.~....;_..\|....,.w.V..]q..z*.9f..\|W....... .}U,...f....s.]....^q.V...}-Di$zF`.....E.<...u...ur....O..+....\|.z.6.D>!.S,.Zg[.{P....we;..0.%..:G.3.;..&.4@...r..f...{..-.89g...rt0.s..>....+..zz4\gz..c.....\|..b.Is.y.F`..j~..c......<.:l.c..Sl...^. A....G84~.r~J..a.....w].G.fy{..k.....Q...R`..s.aV......:...B.n.{..l.W.Y.y......x..3...+N8..[....x..b.)...S...n.@....RV.(..t:

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7256), with no line terminators
Category:	downloaded
Size (bytes):	7256
Entropy (8bit):	5.364429588725551
Encrypted:	false
SSDEEP:	192:Fts3pT1cxgyv5AvnHeuAprvC7wtVAanvnvdUhW5QUPjyun7ne9GQ7yTT+T1Uu2:FEpOgyv50nHeuApLC7wtVAavvdKAZ5b/
MD5:	555E4FB74F26AB3ED734AA8EC3A00D57
SHA1:	B29494DC99F7EE1C59D40F4A2BB9ED31AABF2303
SHA-256:	E92363844579340F34313AC6E19C8FD2CCF3762EA8B66A6C7C0FAD4B359017B3
SHA-512:	8F0BEB529FC83B337B0097A151B9138F2D32FA0CD4F5FEA6EBD337C8F4E1B79E01BBEFF1B7D7CDA18973B6F8EF90D91C082A397E43A43EFE7ACAABE88B70902D
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details
Preview:	<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script><script>"virustotal.com"==document.location.host&&(document.location.href=document.location.href.replace("virustotal.com","www.virustotal.com"))</script><meta charset="utf-8"><meta name="generator" content="VirusTotal"><meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes"><title>VirusTotal</title><meta name="description" content="VirusTotal"><base href="/gui/"><script>window.VTConfig=JSON.parse('{"apiUrl":"/api-proxy","apiRoute":"ui","firebaseApiKey":"AIzaSyBC8n5UX1E6olWNYbCk4_49jBW_CXiYtj8","firebaseAuthDomain":"virustotalcloud.firebaseapp.com","captchaSiteKey":"6Le-FTYqAAAAAKhTKMsdty7T9sOWkICH4U

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22257
Category:	dropped
Size (bytes):	7442
Entropy (8bit):	7.977233413704481
Encrypted:	false
SSDEEP:	192:wegUV1VwoKSANTzAt4vck15BYL4PnjVQ8RPugiuJx:wegAXAxwbWMLOVBR2HuJx
MD5:	264C425F19498C59901C5442DE489EA5
SHA1:	0E6EE42A35234DCD14BC8F4E1857AB76D23BDE4F
SHA-256:	17482FEBCF6FFB31F494F96EC8B77206AAA18C957F8067DB8DC098C4FECAFAB3
SHA-512:	37C64E1F9850859E30B2B1E366925DF67C4315ABE6C238B5B5226ABA4E75C6E70A7FD99586510E523FFD21280FCAA6D1582BF784D9462C6F2EF1C615B43C33A3
Malicious:	false
Reputation:	low
Preview:	...........\.v.F..?O.3..H...q.)G..(...N..a@.H"........wk.. e...........j...i..^V;..,.:.l.t.......`.p.h......7......5[......[.~.g.C.cu..v..6...{k=.tZ.a=...........(...{...J..#.:...c...v..eFj.V8.FG.!..F.U.eA......k%..&..EY.,.es+.E...0Z..h4...._..93.....$.%....zI...N....`Z..\|hm4.n.,..gl.b..^M.......7cf:.....C...SlF.rG...n..G..k.f=.e.....^=....I=5...}.....`...R.0a......{{.>...S...t....MS..d,.S#v^......i.f.g.M....us-..7.......>....<N........Q.=7...&..,.g..<H.q..YE.^.:oX.o.#..<[.f.....6..K7:2._....x./..bZb15.Y.,.,.n.5.a.......cd.m.4....h... ..Md..N......Gif..6W.........kp~"..fs...ah.,%..5q......6.{..,.V....YWq...........$.Y.]e.*..........&o..v1.....k/.W...:.c.?.a.u.%.Zm.\.HR..v.....~S.......gA.E...V.........u.l..^o9.#.z.}\|=>.8I...`6..7V....DB...A....[>7.)...p....U.y...5..Zwn.J.',.F.Z.?.,.'.E.]..p.-..f...H.IG.{D.zP...M.X.T../W..).V..2.L.z..j`.G.Z..5...........\|A.3.iM.q...`...93....9.Mk....uEc...Z...3.[..i......... .7.4......n0....0

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14824, version 1.0
Category:	downloaded
Size (bytes):	14824
Entropy (8bit):	7.984080702126934
Encrypted:	false
SSDEEP:	384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs
MD5:	48598BAD30F08E1C3EB3D0E69B420BD5
SHA1:	28C2CF160273C2062F909A875C4B4C0541EE2F84
SHA-256:	CA57B79A870BBF54700730858603A70D79743779C1B059922EC401BFDDC5ADC9
SHA-512:	0033327198BD448927A53EADA9AED51ED4F8DA3C8619EDA3B10948F437213F20270C233F7FD403C8C192A05CAEED6905A02D8C62EC22B3885A6A7D6C018F737C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/ee990a93df71bfdfb3b5.woff2
Preview:	wOF2......9...........9..........................n..6....`..b...P.x..d..6.$..D. ..\|..4.gv%.m....B....y......sB.<....t..:S...@..\..w..x...8AMW.S......Z?.$.......mut....X..@.._.._$..Af'g...'.d.x.q&..T1Q_....n..z.._}...#v"......s.s......PiVBEW.2R.....8g....i...J.+Z.&..6trL.15.L.cn.D..!~N..WZ.DcJBB....$.<..T...ue.}...+..j..;:U..S...}.6a.iS.i.LId....K..`u.%.$...H..8<B.......a.`c.11..m=......l.B9;..?...w.Je^i.8p.5......#........v.Y:.b...,....L.....(........;_.IvQ.K.X"J...(.,...O....[D.\...\.........I.k.;+.....b........Z...)......P.u.(@P....pQ..]...e...6F..v.'.....;..hW.=.B,W..G....d... @...........(..9....R..\T.W)tvSz.4NU..rQu...\|....<B!....H.k.)..!.8..@...............qS...9.k.lE.....I..[.S.}....0...}?.U.......@....a$X......'N....!I. 5.e..(....V...].... ....AVUN..:.s.......5.W.H.I......>....d...b.G.h.##.......q.zu.f^...O..s.]H?....(`..O.,.N;oo...G.4.~.N...C.......'.T.,..0W....z+?w.../\..B{.ebz.....OI.."._...~.211S1...... ........s...N..pC.(.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30780
Category:	dropped
Size (bytes):	9887
Entropy (8bit):	7.974749784794349
Encrypted:	false
SSDEEP:	192:zyicorQj+x+wlOnJIi5oYE9ZbtDob7C3W/x//DotI64wWK2MSx8UnH:8orotwe4YEjtDob7eW/t/iD4wMx5H
MD5:	0BBFD9A5690ED408A669533AD4B2925E
SHA1:	4339B3450313557639E5D6EF76DC4BA6839F3FA2
SHA-256:	83CB6854E93B67A4390ABDCB125AB07CAB3919DCE515D8B96C151E6703C9E090
SHA-512:	A40AA03A2522A087D7DC509ED0FBC0B581A556BC0E68E21FA52D607FC2C9AA5F11174E5FCFDD2399B89455991E4D8D57A229FFB204A547ADE63529D100FAE58F
Malicious:	false
Reputation:	low
Preview:	...........}kw.F.....03Q.Y...;i..0....qN............@]B....Tu7. ){&..{..M....u.j.......M4..,...].a..XGq2.H.....m...yu.......t..kg..p2...v.m.....Y...^..l..........MT.i....+.n1I.B$....=..2+...v..m'...mwl'.7.f....1^s...{...h... ..._.;..)....G+QX3g..g3..W..X...dF.H......9......0..J$7..sD/[..a.]...q.:....]...F.....t#......xS.X3p1LG..H.ic<..7"]X?...}......:o.fi....yYT.;.+ z....d,..n0J^..Q.v3.....>;k..&."o..0zE_.....b.OO.=.D.....gg..Z.\,.D.U.~N.g.n.U..x.>.s+.....E...&.]..v........K...7..J4dA...m.w.}^.Nf.0.bz\..#I..z.$..bryi7...vK..E.n..E...1bX.l.6.)..t......../....m...6v.X.....4.[>6\<=U...a.".)M.Z...P..7]'.4..%...7[. ..D\|.,..^.\_.X.....9.o~.......'[..(o...m5.a.QC........z). .6Q2'..x{..p....t..b.RTg.V.n....q...q.....+I.".rW./..p..E.....^..;+_....I&4^Y4....Uhp~..+..h..,0..........d........L.w...M\|...4Y.7..........UB.........%.V...7`.a."rc`.Ac...Y.ZE..7....A@.[.}...oy..,..b..}......2...n.R.?B<..s.oN....0...\|1.1..b.G..}zQ..l.!}W,E.c.#l..An3

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 35260
Category:	downloaded
Size (bytes):	11435
Entropy (8bit):	7.984585819292661
Encrypted:	false
SSDEEP:	192:Wj6Zc/874e9TU9drmW3AlTKJu7Yo0iQV+RwcIbwRi8dlABpfyzGXnQY7RsxVZC:c6ZcZoU9JmrK8kVi5mbwldlKpfmGXDSE
MD5:	FB830B5846B72EF50E3001D0D706401B
SHA1:	F325E2A043414C549B2ABA7725CC9EEADD2AB265
SHA-256:	4A79796C6905B3022B97CF5EE0C8AD95FE4762798060153BEB8C69F63E02CB21
SHA-512:	7FB1CF1525F62D394DF0BE51DF985DDBE2EC9F9BE3003C5D33BCD3B090EABAFF1705AEC812E258534176089DCB159338EFC08B409E2F8279937E6E6CD8A64307
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/13420.2099364bebdd02277cf9.js
Preview:	...........]yw.F...>...z.1.S.L.V.....Xr...........H.....n..B...y;.f.Xlt7.....l..\9y.....r5>.?..i4..?.%.......$.......O.p:.G......j.$...{^.. ..O./.................G+~.{.[k.[...x....]....nn.o.A.?7W..V.`.?7V.7..`...................#?.....U......U..P.....z..>...9....h.p.....6......Hh..U~.....kbomM?.XYy.-...5.E.......6.t....w7..3z.......nop.nw........../....>[[..h.S.....;cU8...... x.\|...'..ay..6K.E.&.. ......e.J.<........].Kf.q...w...._...U..c.&K.+.OU>..i.f.mh/..<7.n._.=s..1........C5H..P~.......5.]..e..._hp;+;.~w'.t\|/.........=ZE.%~/}B....?.X...w2U............,N.Y...$..A...w......&...q.~.M.....\|v:......O....Q8...........^.fj:...{.><.\.T..gx..}....8.sG}T2.4<..gcE{u.d..!..g../..r/....9^r.8^$C..e4.'...Y....0N...VL.......^'..<..T....Y..Y.l........Nd.BM..w.hf{.p..e.i}..U.?...c.R.\..n4......x..!..c.....^7H.Y.Ggj....N.=...0.[...YQ......e^L...u......>......ZGY..._]..'.6....<.1....!.....1.#j/4.>.$...jo#....."..N.f.-zM.5.?<...../.....O....,/.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/cookie_disclaimer
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 221
Category:	dropped
Size (bytes):	200
Entropy (8bit):	6.841014064623295
Encrypted:	false
SSDEEP:	6:XtqDe7vzqnoDf20BZm/6EIlKTOUgo+F8Rl:XSA2gs/6EIlCLo8Rl
MD5:	751911295BFFBFE07B94E21C19D23E50
SHA1:	CB4BBFB5C73B6A38FDC2DE7E55D32AD984D0106A
SHA-256:	413AC989E713AF6DF5BF755FF4063A782E139E0C8B666836508DCD4C03370EA1
SHA-512:	92F3AF4802BB5F6F208A7F8B68E3BE742231C68CC5DF207D3B6BC0CFC335DF202CEE4C04AE11C74B10ECBCF5B7AAB43C7251DC5E0713F85C30D986DCEACB5CC6
Malicious:	false
Reputation:	low
Preview:	..........L.;..0..w~..u..TPj(.....VJR..J...b..N...G..[...Vafz.k.....{7<.Z...!...l\|.\...Q..3.8....dDPJ...j.z...9....Z_....B3.a..A+<...R@..".....5....,.E..n[0Y..(.$.H.+.}.`].u.N..[.\|.........k?....

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0
Category:	downloaded
Size (bytes):	14712
Entropy (8bit):	7.984524638079703
Encrypted:	false
SSDEEP:	384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM
MD5:	3AFEAE0D768769F5E5F30AC9805C5B70
SHA1:	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D
SHA-256:	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
SHA-512:	71C361AC0D7B72B222D4F087B46D1BEA318ED6652C4D37EC3403F0B0616482B5040232E06F2FCF13109CDF6151DC209E882C0DB40B2C6ACE4E2E0292FCDCDAB5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2
Preview:	wOF2......9x.......8..9..........................n..<....`..b...\|.@..d..6.$..D. ..\|..4..v%.m.... FO.#F"l.d..#......?t..'$.2..n..Ye.1$..]...$s..W.s9.<%.L.1}Yy.6...-. b..[......7!..<K.W\|.ij.f..?.\;.....N.$..T(.}.9."0n..........g)@.WE..@.....ZV..=U...;....}.:.t.H.B..H((2.E%$.@1...s.]..R]T..2..vQ.m.7....bm....T.....To.w..v)...H..).B!@..,.zB.ev.....3..L....[..z...\f[...BUV...^...0..8.....D.......\.$_e;.._../K.0.D..0.@..`...mn.....b......h..#.n?.A..}v.l..]yq.......].#=N..9p..9b.8i.!Hl......(.p.>.....{..`.^}W..Fc.O.~.....f..a.%..k.I..e9@Ov.dH.M......i.T.....K.x\|L1C..j..r.l..#.l/...=.Z...e...,k.<...A.A.I..]..@._...z.o.f2.....8,..?..qDUQ.S....a..L$V........K.d.F=~Ga..`.T.H......e{\...^..4cap...o!`9.-.d......._.k.Na..@.......`>.d..E...N....!.DE....`e.)P.R......Q.H....FA0..[U......I....d.......y{...J^...........]#...kH....0..}..C.\|b}.n.....7$c. ...........y....-.0...}..D..#...>}.Q.....*...=R...?.4....n...5.!93"/<9Ao.v.e..Jw.S..0..RK...L..k..)....-...M.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 28553
Category:	downloaded
Size (bytes):	9663
Entropy (8bit):	7.977102958993865
Encrypted:	false
SSDEEP:	192:4ngAjet7FCy2rYJ58EAn/a8xM9To5Za9XdyVkHmcu:4ngb7FCRYzazA+aF0Vqmcu
MD5:	258BF10A6F5A9E040108C7204576E9B7
SHA1:	D4A5F8FA4782C776093622266A0D2C73E5AEC25B
SHA-256:	14B554703713D9BB31E4B36867C25FFB6E0CE0FD216DBE8CF73B0277AD4728FF
SHA-512:	7F2EF8EE2F2F252FD89AC7E89AD66065A7ADD8EA28CCFE028DFF91817DCC265C9980F1958DB73062210ED28132EA50174D67F473EA4D8F3CBB43B5A204662FB1
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/74278.df011db4b71607f93e04.js
Preview:	...........]{w....?....[....d.M.t.N...u.)%.........w.....z8vr..s..&"^..`0....+..{%.p..p.L>^....y.%.'...N.lw..g..i....g.m....C.p.....[s..#/.hR...03. ...^.m;.>.n......V...X.F.N.L.YP...n7.....D.wr...eh.f..H..ErQ.4H.[.b.,.8... ...........,]...y).I.-.4...a>..-3.f..7......y.......2w&i...N.U.......8Gg.x....7....Q.h.V.........".R{.<.... !....R{..b.%..=K.=S....(.z........`..yn..B$.....x.....$M0[..... ..nIa.)fQ....<8=[..0^...o...'.b.b.".V!Z.....&....X..QV..N...<<....../.U......Y.\..%.#.({T.m..g.wQ.t.L....#...sX..B.f....^]..V"...e^.s.6'...NE.F...b.....W.h.Z..`V.c.J..0.._.t.\...).....XL...M...J>7d.=Y.....8..Y....&.."D.!......_.....qA..Gp`.C3..W.$C..=4U.FSM...8.5.b.....5...i..!.#}..'..6O*........y..0..oI$.,...D.-....k.L......(H.n..)..1....d.[.....=.W....f.B...%.1<.tK.V.....".\...t$...}0^dYx..B.....i,.d....m.....m.rr.M.U...d.mmV.+..e..N.J....]..e...d.f.F.{{.x.w....S......}..yy....9..;.......?...>.+.......{..A.A...=....lG...{.v....M..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22141
Category:	downloaded
Size (bytes):	7439
Entropy (8bit):	7.971452391374528
Encrypted:	false
SSDEEP:	192:SY/hdysLAoKPCGJNR2DRqgPvCUI/jmAxMd8dUmf+piUWVLTEYIve4s:L/hoQw6uMRvCUmmGUA+pirpIYIO
MD5:	AA9305413744D4F3D69A99FBC532D23C
SHA1:	E8E652214B31631AD480CF5D6AF257577479FD2C
SHA-256:	7990E6EE2A4E81EC36DB5C9D786971C0BD502161ED33D2EED406582033FF661A
SHA-512:	12E2621F0542FC3728219EB3264C5B9016D0579D69EDC98196A423D5F1FDC63ACF2483F946A67292A53448B29C4AC548F85CA5E02D02C336615AE1315DEF8596
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/75884.d7767dd34ca82b896517.js
Preview:	...........\{w.F...~..dg!G........3.x3....s..>DH.(.....a...W..%.3y...~V..K.-2aey..y..h.....o....6........#}.?~.n..E6...p..v...%...s[.acp...R+...v..;h..>v..G....a....vX?@.A.a..o...t.......~.aG......v.M.h<l....t:..}hu...X(...~...F...=j.s\|<....Z..f-h.n...5;....2.N...(..x..?.6.#.[.....C......+............~i.........W.s.g................ ...........$.(....,.z.t...8..H.\|..O...~....`.<K..F?.?w'".w...&s.../D..<O.:Q.....z-.. ...dl].q..O..4..}n .$.r..jx.T.{,"0.....A..uZ...y.9N......u..z<..).z..'..0..........q.E.[...$~.D.2..0...j....(.....e...E.d.........O.h,...Sw]..l..a...p..>\.o...I.<._a.A.......V.X~..G...59....+.tP[.Q..}.....c..0..r}>.\....."...M....9..z9.u..EV.c............hv7'.X.$.M..jbB.,..j.,.....,..D.0%.>.W.GW.......8.....Q.0sO.[...q.Z..0JP....u...S/...Ik....A.s..:....y>.."...b8.^ .....`.....g.....7....... .....B........8..s...u._..3...'.9..R......n.f..U&...J.I..8.."...y2'^.& ...x.....{!.."......S..]R..".S.4-Q...l..._$.Q...$..Oh....G......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 24221
Category:	dropped
Size (bytes):	8747
Entropy (8bit):	7.972552235401171
Encrypted:	false
SSDEEP:	192:YNl5OjsKp5HlLRgsT5cg5PceN0+6eZopeoUKePtQIseO:wYs0lL2sTCUcr+DmlUKSQIE
MD5:	DAB175156BAE34B4FDC37A890366CF55
SHA1:	66C25F6EFF89997677A606B557F62DBDD89B416C
SHA-256:	FB24FAFA75893172CB0A2BE87D698BA44DA64AFD898297385C22E81F72426949
SHA-512:	406AD2BCC76B8ADE51857D352658C3511854CF9C9800D62F52E0D1CE8E1D221914C6DE33F12AC9C70548701EC629733D31D2B7575F59CAF3A79A71D417E696D0
Malicious:	false
Reputation:	low
Preview:	............v.F....@..Y.....J.W.V[.#.ZI..Y...B.Xh.m.U.hY....<...H....v.w..X.#......_\|...`e..^.^%...,...........d3....a..0......~.....r.N.......f..k~_..h7...6.....>.....qyq.o...p..F...Tk...n...V\...N.Z[\.7.h.,.ZX..../....,...`..o..^^=m}>..o..........._.h......W.e.Z..1N.U.\/VH..^.O..Yea.V./...x1....)m?....p.,...b.....2{..U..$...1.I..2....O.g..'..W.......g..-..4..lQ.X=..2.......^T....f5.x..g..>.f9...<.g...->=..k...a.z.u<..^.\}..s........I.AGg..z..A2_..ir...y..iz.).,.\._}.D....\|..+D.]$#.......E.....u..V.M?m.#.8:....`..g....7.H%&J:......=.~..dq..Y.......2..,..8...~_K.p...Z.pB.......L..;..H"=l......&]/f/...]=....'.....6...R.S.Wi.v..4c...F.k.k..lB@....%........j...T...>./.....<.)w....<..L........]p......f.^?.w....J#.U.I..L../..cU2p\-..U.....pY.{u..._..4......f{...p=.F../..V..{.o[..U..Q..tk.Z.Y...........[..~..v...V....c.....7.z<.Z...#.i..F/..A.ov......o......e...v..4..Wu...%Dc.4.f..Z>mk4m.c..g.A....i.T.]....{. .o-$w..@.N..V/.L.A.[.....R.q-6[

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14428, version 1.0
Category:	downloaded
Size (bytes):	14428
Entropy (8bit):	7.986645021520641
Encrypted:	false
SSDEEP:	192:FNWNJvsaeIxppXB3wmSqUvvdnLc/f6bcoVP8p/ZJujoIzkVU6wvl+TBRPs4d07uR:wJvsajpdB3rjyg33oipRzl+YBZVdiU
MD5:	48C84C2B8B2B76AD4EA1C5E60FA757A4
SHA1:	51847D11681245526605DBC719A0AC65FB2277F1
SHA-256:	EC190E2F6CA2B272958E593E24827F3E51D2352733B509CBE1E30868B875BB7F
SHA-512:	25B3BE06B12118731A3BB54B2B2D3D1DF11D7FCE5A05223F25F48E6C3113BC2CB834A8C43840FB4A89FD8A60BDFFC7F706F8085FF1786737481EAF6C950F9601
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/c48548105569470b2222.woff2
Preview:	wOF2......8\..........8..........................n.......`..b...\.?..d..6.$..D. .....4..u...q;.....0.a.5.....q .1.:..crC.`......."w..6f.Ei8$X05,D.`JA..Jz..\|..}gK.e....H....a..R.?..u..z..].8.....m&.\u.=..l....$/=..........2.#...O.`............7!.$$$..1...H.R.Y...}......\|..c.1...{..\..s.?.U...6.]......X..b#..0P..0......\|f}..........."......E....TH,.. 0Bs.\|..7@...^q.....6.Sa.d........9...N.f....%s.y?.R.{...s..n...d'.s...^V.K..h_.4....W.kx....a.H.3.LH\|!(..r^..e..<....h...........K.B......r......p0;....._gU......w<..u.x..Kqi.....I_.....H...Vs.P-XV..S...z.1B... .$.(. .pc.?]Z;.....]R%E....../..^.I&.....v........Y!^.:......T...+:...#.&.u....P.7.\|?A....J.56\|......1.j~.....K.s...................+...C.l.?...}.3.u.v../..C..`D,rC)eC..A0.V...@J..Zj.y...v..:...7d...aF..D.1..l.Q...>]....."..dv.>.....*.0...+.}....o.....Kh..7f..V..A........M.B.....K...].!..E.c.V.?7.k...Q....]H..N!.`=.n.....\.m.a./.\|q..,..S.%]......E.UD.G..;A.@......F......[...0Ka...T....:....f#%".(.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	downloaded
Size (bytes):	260705
Entropy (8bit):	5.550011618623141
Encrypted:	false
SSDEEP:	3072:FwizDGHET/tzA055yptcY0/H8+bOQDmKD0C8rT/RVQ6:HGHg/tLY3Wx0C8rT/TL
MD5:	84A5020109D5B0E7990AFC9EA462D4B6
SHA1:	FBD7051916D753B612733A52A3F52E82760C48FF
SHA-256:	C1E195F3FD054E6FDBE19EF148952451F5C4E004C588E07FB01856A72F27AF17
SHA-512:	50C38AF028F824F470567220CE6F7C7C5EAE384D8806B980AE68C24754EC28F5DE7ADF6F16B952B2DE1DE994C5FBA8BC689F4D9FAB61DE05A523C31C7BB5CC4D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6226
Category:	downloaded
Size (bytes):	2665
Entropy (8bit):	7.924606430921582
Encrypted:	false
SSDEEP:	48:X7lgmnH/Pwa1BS98TFcGkzgG14E6X55EoCfCwN4PmiWM/bNNhit3RxD33Q5bU+kk:emnh1BBTFcGkcS4E6JmKKYhwxDgr
MD5:	092AB35FB71ACEF243808296356F78C5
SHA1:	7095F5EFCBF0731895D31A4F93340C2D99237C14
SHA-256:	0592D118B36DED80D9ACF7F4D7E4F9F1FD3815DF2057D984A8A900090E839FBC
SHA-512:	801C7573171B7C04C9225F79A069F1FEDBD2DF436791D6623C215D9E5308E2CCDF98A46402C6D9BD9F373CEE57E296D63E93DAA3069FFF763345ABA4B076CE34
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/99111.8b301b015be7b22d0bc3.js
Preview:	...........Xms...~..f]..Q.).B.Rr..^...er...P$d1....&.I..}@..lwn:......,..........f.Jf..#.`......8.t......2.y.g....~6'.,V.l..a..n.b._....b<....2..:.q/u..{.)t.]U$J./.%i?8......+.`.f...W.....f...{_.\|...\|..G...a0.].%..L.s.%._.-+.RY.....d)..Q...R..H....]...].E...,..u.7k'..}...+..IV"Rfm.d.,...8..n...`.F.].1.!V+...........b}....$E.'...Evj%.....z..k...B:.L.Iu..h[......+6y....M..iC.v...k...gg..\|..;..4.yksA[..e..$....#..nD.L.)s.~H$.%.x.8..H...9.k{6!.fhCc.#.....2...9.."....7....Q...PM&..:T.0.....E$;T.U.....cGv......`LH.G..&dt6w.....g.........D........cwq...m..ZI.0.~./....DyIs....DK;;+.#...g.......&. ...%.Z....6e4..".rm..jBy..mh.W.P'.i.t[u:..C...b<M...N....:..c.....1.p.....#.G......h77..#...%..Z.....M....4...4...-...[..2.Nr.$...O..-..e. Y......t..iKYs.. *.....u}J...N...........n.G...h....N...H.9.V...../uHp<.c....../...8..5.X.....7.[..O.....Wq....W.p...Ap?.~.K.N.../ny..SDW.3..3..F>T........h..b.p@...s...........h..r.9....:....K.o....1F.i....

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37348
Category:	downloaded
Size (bytes):	11074
Entropy (8bit):	7.980424836726927
Encrypted:	false
SSDEEP:	192:Nx7OvPChMNdzun6JmCWWDWlaYHqht0BmGxvXaGH9qelGBJYR1u+HpoyBIT:TOHwFCWyWlmt0BmUjH9qUGBJYRJey4
MD5:	62DB3FA1A2F24A204DFC1DB94B616B14
SHA1:	CC2CCF288D527590071DC6B4F3915CC0748BF6A1
SHA-256:	696FF7DF9DB8707022D9C4298D13F3F78AB3657C5B17406E5B79516E815E9B13
SHA-512:	B0F352FE757774BBCDDEA8451E7211BAE6BCEF0DDC0D18B7A8922A803934CA7AF7DF0340C251D7BBF6A17862D03C5809B6147967FE9623EDA3779C25FAB94282
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/29990.af467ebfc75146d97344.js
Preview:	...........}k...........6....#j<..x.%..$...A.I".....%....U..4x...$..9....kuuUu..X...,....f..qp...p...t...).-.w.0J...}.pu...E>m^]u...[^....-.....^Sy......,.5.o...&..y...x......K..........W.I.<>:n.'7a........\/....q.."\|.....1.....^..B\|.;.........;-t.....s.!>......>..........}...p....p...z.o..{7.w........B.......y'k.rw9L..p.~3.&..J.<.U2)./.O....i=..........\..0]$....I..E.8...u.lyQ0-f..\\|..\...q.X.V..._D.......,....Q.fy.A-...DE../i\|S..M.G.X....N.d.F......q_8..^S]..B..p..]/.R..a...]WE...M./..u{..c.>...D.&..^va.v..SZ...fjl./.>eV....Y....&....[5..5r.......:)Q.E)....r5(..3t......8...%1&...s&..o7........w.y.^kh`..z..6 ...y.`Eo.(...C.7..4......T........nS.ZL..~.....,.o..@..(.ox.wq0XL.A...U#O...(.4~....4..T..L%.i{......(..r.a..c.:..7..l.F..(.....[..~8,.../.A..i..X.......,...."..Q...7.E..E_.i.M....AX...\|..A..NoU.2.U.uO.`....:J..^.....(TB`......_.\.E..3..o.s.;t..N..._.....t..b..f..%_.^1..@3.a....W@.He......Ek...{..n..d5..E........gyb.%..A.....v.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 435
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	6.884155910082872
Encrypted:	false
SSDEEP:	6:XtPo9Wn/d/2r+NB6WDUiL6cl9lgc4sC1ITRlAmidFAvGKb:XhxnVr6Wgirl9TpCoamiw+Kb
MD5:	EE61F048ECBBAF79AB8470F98D11FC0F
SHA1:	CD3DA3A086477CA3C1DC1C0768784A52C418A246
SHA-256:	B9DAFC0024C3F2ECEAA39D9468B1C207BC01529D43407F11373C8D3B4F3D5D37
SHA-512:	EFAAA6A18EB1466F5823003D0CA9B65A5709A6075A762DBBDB22ACC8D115B5332234988551D563538CEEAB70B93AB3C7EDEEB6EDC43F9EFEAA3253C08C370E30
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/manifest.json
Preview:	...............0...<.2..N.A..x1.T..86......u.x"zh......1a..h$.3~T.......x.....C...$M.IR)l5.4B...m.....F.....^l......@y...L5..Jk0.N!.cc..tK5PK..0..g....M.mM.MH.Q=%....%~h...D..E...1..>...v......t...q...'...........x....

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	15293
Entropy (8bit):	5.017859264522401
Encrypted:	false
SSDEEP:	192:8I1hMaeFrQhBVaYb9h+gPkWA1b3N/zJOTWcJBGAOq8BiWkVvJRkrZb12t/p5mRz6:P1GaeWVq9Paf+cn9MNFkSEohDu
MD5:	C492CB50EF09FA91F2C9A33D5116AF7C
SHA1:	1DDF879396A31BD09A5853F3E33DF5854A18EC98
SHA-256:	C24AD67A05E40E1D24838CEDE15DCEC2CCFADB0578C7861AA0E823CC97521DAD
SHA-512:	13A853C39415F8744C19180601B99AB5B7621F37EE683DD1907F4F309BBF5136B5C27B5AC18B41F528777DDFD35D2642C802209154D996367E9AE4119C139ECF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/last_serving_ip_address
Preview:	{"links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/last_serving_ip_address"}, "meta": {"count": 1}, "data": {"id": "82.223.67.146", "type": "ip_address", "links": {"self": "https://www.virustotal.com/ui/ip_addresses/82.223.67.146"}, "attributes": {"regional_internet_registry": "RIPE NCC", "whois_date": 1730204155, "last_https_certificate": {"cert_signature": {"signature_algorithm": "sha256RSA", "signature": "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"}, "ex

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19296
Category:	dropped
Size (bytes):	5980
Entropy (8bit):	7.971059673572338
Encrypted:	false
SSDEEP:	96:E4NAQ9o/Lig0GYTUpv7ty9HJNxpZjfS7mcXo1Xv2kc99XJfpDVGQVBJO/HlliPzm:EZL4fAJ7w9Hv3lfS7mcYleka9LVGQjJ2
MD5:	42FC46104768142F2F90D85B5AC358B9
SHA1:	EEC3F8C8419F0C75E542D1F1BC889A4190375B99
SHA-256:	047067160565CF0C427F8852ED3CF994313DB7C67DA22A42C975B97FE3595950
SHA-512:	9FD9C4FD78ABD63D42E8B3164BC4CFE1F0998F737FA2D567EE4B31443C5F3DB115F6E6ACECD0D70D5EF1B17B3488048476FB4308AEADCEBA9CEDF38C74A854CD
Malicious:	false
Reputation:	low
Preview:	...........\[..6.~._.h6=b.dSTK-Q......d.k{...3.HHb."yH./....+\H....e.)Vb.Q.B.P.....Kf.U...h5.Y.u..&....czs[.............?.N~,....'.b..:y..r...Y..~y....rb.n......jq.^.V.....jfZ.\|.{..gZ%.........&....k:.^..a..[..Z..[;k.../.N.v.=.a.g........`.....,.J'a..c....O.I.^../.....YX9;V.x..g....feX.y..c......x.q..z]=.,..o.6A...b..s".fEP1.\K....w..,........U.r.R.6...x.~0/...zL....o^...h....4?~,.U..c..._\...r....)S.......\|X.IP....X..F.\|.W.$.$x...zs.I$.<BLc.qj.c..q.A.......l"ZX.W....C.5.q.}.Dq...........K...x.Y...0.G...6d.e.Tqh`U..`...B$c..cZ.[...[s.:..s..o...,>Q.X...x},....-.0....\.iFq..U....<...+^giUdI3...I.4..........Cb.....z..m.U.0.Z.G....Uf...=.^./6..s5H..#..H.n,x..I........!(...kjKU.N...-0.uw.&K...U....z..2..P.Z4.4^.i.......Y..<O...t.B./.2-.i.pq.....4..W.;..:g..{...B..Ab..4.r.E..,G.).Yi..e.&.z.?~..I@k..k...q..x.NK[#..DP... (...S++W..1^D..`.%./..@...Kc@.$...n.e..c.@.C".S,a.?..a...;$.;.....g....o.ll1X......Z......v'.aC..L..H...."...i.../..D.y..H.6..=

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 98170
Category:	dropped
Size (bytes):	34325
Entropy (8bit):	7.993229831721479
Encrypted:	true
SSDEEP:	768:PdDmcvAB8wtB3JkPCaqKHm9+nOJS9jwloCRSGiST:PdKcKPkPCsn190FRSJ+
MD5:	F20D8515FEED73A8B92424C2B9C67A6C
SHA1:	01642C9B975538B3B219D95ADDE840C09A40E7D9
SHA-256:	FC6BFC6DE25F96E31C0FA01B6C746EF9035900E6A0A1BBDE6477617310D41A19
SHA-512:	5334172621BB287B692617365A83D5135C6FB258DBA24581DCE0DFBAD7A237830635981B5AA8409DDAC4D1284A09E8C22C022D371A7F7BC0572C7F6F04B92FA5
Malicious:	false
Reputation:	low
Preview:	............z.F..{+4..4A...2%.....8.....h4..I.)@.AK.....{...}).J.[..4$.Q.f.^.<.E......U.U....,i..".....,...........y..}.7O.N.i.....;....\|v....x...h7...a...(i....lR.y.(.Y..H.y.5..t.....".}=.zXne..`Xng#..g....W......Ji#..i#...m.}9M...F..o{L.y....h~.d.7M...x{....yz.....;.#_..a?......+a..ai.o...t+o_.+..Z.`.-....r.g3...N...=.LZ.N.K...(...`.....q:M..+[9u...7jeq.%q........=...A7i.)X.q\\|. ?...WR.lG`......HK..../.vr.1w...o.....<......A{...N.<.$v..`.....\.x4,.."=:.....N%.o..U5..-?e.WI.....qr6l1...G.G.z....^..%.W....~.W.E?>[.Y4>~.W..S..F..^.i...{......z.\|...b..a..~..>}..}.D.......$.NV...it..^...oOM.....4..E.?1..y...Z..y.}...gy..Q...<:N..r..O......'.'..h..D.....R/?...9..l~.D<..V...d.M.....x.....1a.....9..~\4..i....l..I.g..a.%..{qyq..W.'.....r.\.R...]..N.?...7w...K..=)..E/../...V.W..S.0L..M.).Q..b>Y:.u..).I\|y.+.WZ.7.O.....$imD..l~..6A@.m..eO.@1......P{...'p....V...*1uG...E~...'...K.o....^.........+.m..N.'..A.p..W&....G.7C#...h..d...

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	5.182661127905851
Encrypted:	false
SSDEEP:	3:YBECHJ0HyzJVAs2sDVDRySLAXGLQZwjRcDl5CfVHRXzqHSEte1YdVzJJM+QLsExy:Y5JiyzzAhsdLA2ED3CftwZdVPM2j1
MD5:	13A59EA372E6E2B6F3FDDD04F83EE083
SHA1:	2F7B32497B1EAC117AFB79C1BA81A6FFD17AE100
SHA-256:	180970A4679934D341F4DEA0B14A63EEEBEC89A4A75F2C8CEEDDD12AE44C0449
SHA-512:	C78FB76B3B9D40BB21141ADF8645ECEDC489027DC9ACA6EAF66FE657D5DF8E2CE7C8D4988BB090E598B5FBDBDD552A3B72B25E7669DA3C5BDE6665EBAF20B42A
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?relationships=owner&limit=5
Preview:	{"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?limit=5&relationships=owner"}}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19738
Category:	downloaded
Size (bytes):	7828
Entropy (8bit):	7.970978417312552
Encrypted:	false
SSDEEP:	192:Ub4UQAdpaF6VhIqc9dcag0e5foUK3Hyr2mGHrGiQRn7U9LwMn:UkHAdp46VhHc7cagVw3HOXGHFQRnKwM
MD5:	61D37AE2BBF5334EAEDD2CE7ADB81074
SHA1:	1B9C1EC66AA1705D921082B786ECB7FBF02BBA71
SHA-256:	4A0541EE665423AD7E24D7792B58D1B205D81F1C79FBA108386AD739AE692EA6
SHA-512:	CDEAA26DC75DD13E492119970EE62D75519B534BA334425BE5B363DC1CED59354AC661B37DC8517DBFDE5CBE9B0CB6CCA82470AF4958A057489B877A55DF7479
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/static/qrcode.min.js
Preview:	...........\.r.8.~.[[..$..]4.....;.M.{v.q..%q#..........@.....q.vc...}Gw...0;....t...Mr..ib....(.r.>_...-....w/^^../>]....K...a...\|^..:.....?K3.+..."...iP.h..d./.t..Y.n.S...~..3..,.2..n..{fE..$.:....].....x<v.".t'....,.;p:.......q...Ck[...h..c.c4\|..`..N.Q....^..@k ._.p..p..:......{lc..ll..M.[....".xl.L...X.]7.z..r...36...........bDV."....U.vs{.eZ..,K!.,.n....h.DrVh.f...d.\.-..M.C?..x..,".....x.C.J$2.D<..^..J..\|..wGItw..0..z.U.Gv..PI?;._ON....&......ds....,...p...%.........G_...L.wj2/..$_........V. .7....{.W)..){...)...+...k<..4kn.Qv6....\|.%.0.fi<m..<Z........y.5..c......a~...#..i.'.i.....<....L.........m..U".J.h.....V0.;.sD.......h2Q..2........acv..ur.m[sQ.k...(RJQ...,.Y{..[@.1......%. .c.BHv}...P..p..-..Ga0..'.C.u.._\|.....\|.C..v>....-.8...-AB..%.k..t..)M..i2?".)..ys..yJf...#X 9.Q.Z.^*..k..j.2m.]..Q....B..-X9-.{..l....~s...Q.t.M...nEdb.Ny.(...I.....4Cm...^`98.(."^.../%0vQ.3........N.4:...h..y.&.u..S..2........c.%.U~.(l.m..`.^j.xq.ZZ0`....a.o....a.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	downloaded
Size (bytes):	371424
Entropy (8bit):	5.657405043096403
Encrypted:	false
SSDEEP:	6144:JkGxFh1GLgB40o+AzRRSRx0C8rT/N2CUZ9Or24Avo:60FhOc40o+dSmYn
MD5:	6004A512C67B56EDFA50836DA48C5A6D
SHA1:	9307D8DC08ED7D770EBE26515C6D80F634984D0F
SHA-256:	DBA78E38E746498C8079EB7F5E290C57010B83D62E0C91CE4226060B87817A8C
SHA-512:	6B7DD4393CCCAADB901DE3E36204F7D4FD2EDD9DD2723EC55249E4472B74FB3DEC3928123824399B111D29FC4EB2CB070781C4D9B6CA277BC57DB9C81D292F19
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39535
Category:	dropped
Size (bytes):	12218
Entropy (8bit):	7.978613747850689
Encrypted:	false
SSDEEP:	192:CNtagQpzZ/JC7tlwhPncJ9dcxiSXFNpq8dbJ8FqjUvnAFZCQ/iAgGWVW+GFq7K:ca71/JC3wh0JnoiSVNw2fwnAYAviW+nK
MD5:	8EBD6E2CDE3A1BF92D95F856FDF4BDBF
SHA1:	F167050FF1908D57FE20C3464344608A1E91C0FA
SHA-256:	9623B6B441872B5C39C86EEB577FEFA5CA36971814613FE62E4E6C5DDD5D0A79
SHA-512:	7CFFD1D101FF4E4C355A6D7D6B303FFF5BC06628605B298C15599E5DCB9D4BADEDA1FBB25DCB2462C304ECCC0AF2632BD38BA411E860AEC3AA30BEA7C9CA9C30
Malicious:	false
Reputation:	low
Preview:	...........}k{.F.....0.....&..L+......Z..=..#.@..E....%....VU7...N.dw.(..F_......n..r.<...vZ..l..h..7..e\|s._/......<....U.[,.i..N...r.z''.A]...6...n..I.i..?n..n....a.(...k7\..O........q...4...v.{.......p..\|....)....q.GI,-.I.[.P..N.s..7S.$....Y.,....l8.&g.....ro.....i.Pi~...4Z.IZ.N...h\.%..6.......7j<C.Ok...g^..$.s...:{.T.{.f..1....C..m.O....i.l6..P....O...a.z.... zN.@../......o.._....O..O..^.j....R.s..i..Y.L..Z9......q8S..8.....#...).tF..N.K....O..H[.....-GaBsH...E.=r...%~h........Eu..Te.2..Ue....8..<.'.q...\Q...[.o.hH.X..J.../.u..2PSvF.G$..5."D../.3.)3...X.$...%D\|...,...j...(..KnU:..-.h....+..?.(My...1....M-.4...4b3....b..,.#.k....h...^........B.s..X..u..k.....rWc.N....;.KL..'Yb.+X.!...5V...v.p..L.s.....}.,...cD.\|?.......x.f^v;..`!w._p.sd.yqGY2.}K.........;..1..H...7.(.S........Dh0.......... .....I..R..j.%..>Q.Rc.(.....E>Q...3cF...o8'*B.4L.+.M..)5..Dv..LwT+.......2.%.uV.b[(..\|....G\|..\|..M./U<...1/..O.MF....'.52a^O......o.e...h

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17409
Category:	dropped
Size (bytes):	6653
Entropy (8bit):	7.968945719012011
Encrypted:	false
SSDEEP:	192:9gJ+Q+huGM6V5h85ZH2JnTKFpjq5R52Yvl1c:4/+r5/85UM1wR3Tc
MD5:	128B8577BE73F0DBD4104D6ED2843754
SHA1:	DF92B70F21403D3EE8E8209068C9BB104F988CC2
SHA-256:	C9EC52006C7A96F4CCED86E30560848825ADC46E148F9C74DB1401E6D2AB26FD
SHA-512:	C4CC7510D539443F392E4572BEDE0F14ED7C8AB7B9C62A117E7BB8DEC0C0DDD53B6AA35886CC3BB63B6F79728554F532D5DF57FA9FEBEE26AA65DA5977A89E18
Malicious:	false
Reputation:	low
Preview:	...........\Y..F.~._Q.fd...q..dO....y..c..Q.@..i...`.C..u. .my...e.YGV...z.....u..^.6..]w.).WYYM........{.i....$J...V\|O.......6-gm.y7:...VO.q...aVx........EAh.%..$.b...].K.M..8...C..z.c...#.$.".,h~.{.a...u\.0s1.M.1.O}.0..c+san.yc>.wS>}..i.......$.fml....e..f............_w.j.\N...u=...<..............6o.uW7c..>/..Q-.....q..9.......H.p.g.<....F9U.....s....X...\.k....s.Y.1...}..x.r\N....y....h......ci.7..4.C........k..<....?L.e..?t.Z...l..lr...m7....^...-..n....-o._....PY6[.eQ....weu..].e].3......-.K..Y.......qn.g.......,.....>~...w.`.Ey..b:...i.o.5.......G..:..+v.....b....8...y.\f.8..Y......t.....\..X."\.g.W.gO..g........IJ.Zr..[.....@....9h%)R...q-.kc,..X.K.1vGx.\|..^.qKQ. .E/Ja..Q&.".eL5U.5...p....k).....Vv.u0d.Q..}.g.>.F6..........B1#W...l......*..h....$m.A7Bip.`......}=..-..v4.]S..)_..a.9l..PHE@..l....Vh%........#y...............G.H..^..tl7..z....W.E........U$.T...a../x....q..+..e...7..l.:...h2.....t..#-Ye.K...%,........1X..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 14954
Category:	dropped
Size (bytes):	5834
Entropy (8bit):	7.962611733811477
Encrypted:	false
SSDEEP:	96:KAyEsUlhvqg4PgEJA34tgTsGzbUMvvlDq270AKyC1dvDcJJ5MVv5GgWJOpetCyC3:KLElhyPg0b9GfUEtDqQ0AKFdvDce5GgR
MD5:	D9706908D141B51812236CD6B7397A5B
SHA1:	96F09F52A0C264900B0BAC0A530DA81C6078000A
SHA-256:	DF03D0A57A85240934B017789F774734A6D45C9DAF450B6A0E249D56E79AD92F
SHA-512:	FD26BDDB45C568FA2DCA5D71A06328221D0A79B06BE689F73074B50B1BF07DD173C8A4E682DEAC4DC563D81EE55A52F9F9E95C2C28B4EBBBA3FA8A24CB405A4F
Malicious:	false
Reputation:	low
Preview:	...........[[w.Hr~....-..@......xdMV.....l"+4H4IX ........W...HJ.w3.C...Fw....U.g..Y..i.8.....O....x._...,.M.4...........j.\^n....x...._{[.;[..^wg.....\y.....#=..nt8.....O.._..=.dqUY.%...:.U....\..E.Tg.Y..t..lJ...".K1-J...>.......!.4..8...P......D...x.b2-..y....o{.....X.......,.....).P.....&..2......P.?.3)n......#.O.;.t4......c....=iA....^.$w_..^.9..........v\...W.vv]...[....xCg...=lo.z.@8..z.5.d8..z.<...{.z.=.K8<..;..-...u....6.~...z7xd.q.2!..7.F....[...c...dt(......:'ar..2..2.G:t.e\|.....5Wo...xxhv....<.gY.E....Y..a.C.^D.~..u~?.....TOAE.C&........}u....(W.K..R/.W/..2...E.@...-.E...8... ..x.(...^...A...}......@...A.....N.9e. 9.$E....R.Z.7q6.dWA&.......{...r0&.....D.@<..k._.pMQ.0.h.....2&,c.......r\..V.X........`..F.,T>.q/.....o\|.5/..@...01..t .=....s........5...h... .'`..!....\H~<R.5,......h6.......t......K<.=t_=lo.x<...T$...r3..Y..#EMxS...Yg.;W...u.F..%..>.q.8.K)&Si..J.....V^.>.$l....8...K~.[E.......[<>...X.K\eM`..q\|#

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29659
Category:	downloaded
Size (bytes):	7398
Entropy (8bit):	7.974938633609326
Encrypted:	false
SSDEEP:	192:x7Fug9wmm8/uQrKniV9/DBeta+9qo86uc:xFHm8/FroiVNEfZV
MD5:	43255E0723CD9FD4001571FE2CC0FCB0
SHA1:	2C75B74B0AA84550D800C02D8160808F6E97CEAB
SHA-256:	AC20FA90E7AC719489FA00B8D1864DD06D93A88DDD124384462FE3E103723F59
SHA-512:	C2C4F3330A9A1F373AC62AA055F7E54F08FF8DC771060CB186A38C4F5B70DE9DE5F113F7BA5414A26710EC42D6DBBA59563E06788B2E6BB09945CEA43357EC0F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/70520.2084d2d63c64ac00d8ff.js
Preview:	...........]ms.7..~...]....mr9..W.);..d...n...8....JVy....n4...P..\|.E.t7.F...m..U.M...2].....:..6.oV..U.M6^&..hK.?......zS..>~....\|.k.3... .g......Aq...... ..>?>;..N........h.??...%...........h\|q....U.\|<\|}..&?......~....$_..I.>.E.=.s>.....iu.N.".T.....U...a...:.I5.........H.[n.Eg.2M...g..p.on...j.O...._.}..Hn...(.@p....Y...W....>).1.9.n.d.-..d........U/l....r.........c...7...W."M..$...<n._...bSVy.,.y..=K..<-_}....\|......h.<..<.e.....wi1..b:d..f.5[Q=.'E~?-.M1I..H.X....ki...D]..v..kK[.g.r;&4..*.u...G.V(...U....}.X.............4-'E..B.^6..E..L.....o&.H.}j....E.....Z.j.......[l1^.mW..&......1..#?....gk.4[?..P...;Hvu..\|..=.u....$.e..0.c.6..i..G..a.\.....H..")n.......M.)..w5X....q..V........\|...F.M.H.b....k..f.V.y.[...S.r.....L.qza.E...4o0o....8O.H...z0E..h)M.wr....Ra.:.V.......2.))..6.......f.Avf+Hc...%e.ty.N..ZKwW.9l.A.W3........f5].s.]....b.\|.DK>J.h.~7M'...Kd....P.K..UU`.....M....8.g..4.....M.pb"<.p.-.Iv..gS........7......y......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 214509
Category:	dropped
Size (bytes):	54035
Entropy (8bit):	7.995733658946422
Encrypted:	true
SSDEEP:	1536:dyc8fhq5kXOz1MoqgohuxsKsBKOyx/2rdFmYUat:dw5qaX9gguxsKGY/0MYvt
MD5:	FA4E2852A5CF3994B9E2CE85DABCAEFC
SHA1:	7C793FE4BA54657564F9FD244550CE554923B469
SHA-256:	809FB282BCEA68CBC7F631C95F310F0ECC547297973547EE509823946216EA9E
SHA-512:	2D573C24E90905F37FF0AD436AA90C146113D90535F31B404B5EC244D088F9B6378087DF0226091126C8E8E268D45A3550F5C5F8BB437A9EE3B4612683456B9C
Malicious:	false
Reputation:	low
Preview:	............c.H.&.W`.....a.(.Y....k,.wf.Z."!.%.`..d...._Dd&....U.......D....qGc..N.%a/k.6.`x....c.w}0.D.7..$<..a......7................n.?.Xu7w.6v...wumm{.].......Mw{csk.].^].r..V.N.{..ifn..............'...g+.-7..[[..-7..k++-7.6......Z.E....V...`gkg.Y..R..k..-.OO7...[n.....o...............3.....[....Y.W;X....6......5.7.....L.3#`..[..F..;.2....7..s/.+..}.~q..#..=p_...'.........n.}....s.t/'Q/..H .&.{.L.(...d.DY.............M..n...%.............$..Iv.H{I8..I@.$..e..s.F........\...'.=..;......V.U..#3..`....`4q....Ww...]..n5.nv..<ibKi.q3ju..........j}...v. .$...O.DO..U...0...wn4.}.W..Z....$.........7.&....:.6R.gc......o.......E.7.....dA.O..{.f.....}..d.G n.....y...........=9..8s...1...V.. ... M.a..i.........K.6W..v.j.@..m8.~.c.@@0..f.>H..Sm..<...lK.y..S}/c..i...b...p...jM....`..... w...kH.A6.*......y\|.2u....8....G.n3...\...8.;+x.$.X.gu:B.#...M........0....b.6h...i....2..O....SS..>...,..6..ju...`>7<.t.gN.n#....v.a../.?.7...R S.0Q...B....q

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 49635
Category:	dropped
Size (bytes):	14325
Entropy (8bit):	7.983726032171922
Encrypted:	false
SSDEEP:	384:MRewb9zxfTgXMv77ax7j911/q19VE22MT:Mg0fTIMfa9j9mE22i
MD5:	C1839E0127CF8555BD63850E4BCF0882
SHA1:	E7BA29B0DE20563D50D9FC85F4F14BA530F192B4
SHA-256:	46E826AAC449E4D3CAB6722291588E1A8790096A5AE36E6EE5130AD2E797DD80
SHA-512:	0B4D9D524A251F5E706BF59C390676A77C824F01CF2AB1364FE65B144487B4A362D2442CF045B388C4F2F2E73BBB047563DFADCD167127002728DF5E948A5DF7
Malicious:	false
Reputation:	low
Preview:	...........}...F....W.'..,l.'......!_..}..< ..`[^I.ab.....[.<.\6w.-!.3.Z]]]]...:..,O.Q.8mf.\|.\E.U8zw6[/.].o..E./.7.}..........u..wp...u...........Ikp...i3o.I0n...,M..Y.NG..a.".....2...~..3.w..q.s..uz..^:H.....n......:...,.2/z.G.q.lv.48o5.#k.7a.&.....f+}.v.8xws......X+.0...(....:.-?.t.......$@..n....w......wr..c...r\|..G...;8.k.C.x......W...Kc...~.....M..wrp.L7.z..V._P.n...:.G.w.O...~...&..(...l...6.....t...y...4.....y......A. .<.....`....?..J..GQ6J.U.`....4.4..7m....J&.h2G.w...J]0.FI..Qk9P.M...4...'.........=...:.a..j..ux.{...4i.qs..g............a.:M.\|..=....{W.r.M.e.W....-..z ....({.,..2z.....#x......$7Be..G...&[.}. ...[~>...2...A.!.-.1~.J.<R%.y8.f.\|....,.G/.L.F..Nw..a..<.....<.0.,.G#...,.Dg.8".g.C..<.hmS...$4.g.O.L.........y9......^<.4.$....1V......(...K...O.8....q...2o..6x.H"Iu.<.f./...V.....y..k...NT.y.p..G.Ts..........f.x..G.x.N.x..o....2.*.....,.....4T..s..a.o.U.%V.a.!....0.4..2....u.'K/.my.0B{..'.]/.;5.45.Y.x...SDco....A.....K.R....@

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 43627
Category:	dropped
Size (bytes):	6358
Entropy (8bit):	7.971588109812953
Encrypted:	false
SSDEEP:	96:zWr0fecl1yEgvjSr6Xz9prT+K8i+PD/5tAmD9GblZsYic0VO7QDYKMao8:6Ue/mrgyKB+j5CmZGHJ007QDBMaB
MD5:	B89A3565211B0D676EFE8B9E2298A094
SHA1:	B653995DEE1874BD4795465D9DC185B6E17D24A6
SHA-256:	F515B2CBAA83266A49F614BEC66DE5EE3962DC5C6A4E9C315EF19A022C1A4663
SHA-512:	407700DA54845F072CE4EC709BBDCADCC78B290C697DE98F6C37F24086CE21ACF14B5A0DF8B1B2B19A4B975FDA7B46F9759F9C167B4D4A3E9F8792A55605DDB6
Malicious:	false
Reputation:	low
Preview:	...........=k..F...W...+.H.............p>W......T..'.....bw..7.oe..<.......h..;T..2..._.l..h...............\|u.....w..?T.....?..s...d....).b.^....V.?........`:.Ol.._...hh;!.:..}.vr.....I...d:..N..C.p4..h`>..m{........r.].W.C..i..!8.M.PCwa.9.H^W^F.M..n./G_.A~..j.}........!._.....=).oH.....>.....+(jo.....X[?.u.u.?.!.....E....W.]....I.....pB....u....._.k..U.6.g?...W}.E...z.........?\|..eI.C.[...<\|...2!.4'b.....(a.V.l.gaUY.}M.".uZ...$."R..#..Y.M+/.w.0..6.m..yU[.J.zi.Uo..I..5..V...W...{R..+..J.....@.....Tf}..+.k.s.>\|.K.p....Z\d.x.7...A8....y.z.....~......=..P....2:.u...z.....gQB.zQQ..\....u.4...0...,.@...YfE..>,.4..!.3b.......J....u..E....E.U....g}.+`..w..%/,.X_...P..}...b.L...9..Um.....0.......\|$rZ..m.g......(....-.Z....w..YQ....4.}a.OJ.-.D0..................xUY.i...V..c.5."..x...F#....P..+.9u7..g...;...?yH.......p..%.x.{..L..2.......K........$..l2.9...}4...O''..!#...!..5y...O......}.-.jo.. ..E]....~..!......9wE.X ..V...P..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 48105
Category:	downloaded
Size (bytes):	13464
Entropy (8bit):	7.982492833399853
Encrypted:	false
SSDEEP:	192:1p4JO7acb8CTmvnSOWxI9GMXJ6IIRWp9Cuxt+5fNlwCETmm9iAQeNGDvDqT5V503:17bbdyPNAAnBxt+0TmmaUKDq1VD3Nzg/
MD5:	5D4A52C311923CA1EDCA9721F77C2324
SHA1:	48E4C70B624756C26BC7FC85809624881742A4E8
SHA-256:	21A9B7B9C1AD7EB218B8BC4998F7A6C8A424902B37DD628C2CAED550545B4472
SHA-512:	2C8A2DD8BB532CD26B39A7F548F579F0944974373668536271C99FBA2F97F2AF68AC04246AE2D29ADE87AD85F8186FC1DFE2C090717BEA015B327646E800B4D4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/12184.6278fb6ce9aafc359333.js
Preview:	...........}yc.....)`NG!...C'i.V..&....G+.$H"....%14.........nO6.Q;....U.wWm..V... .u.Y.....?...N'...m~3.o.~..............C..<.sZ..C...l.9{.{..N..8h8......wx....[N..l5.fs.x..Yr.N=pr'.{..~je...wt....?...{.....a..l.N.....v..FAn.N..z..U..F.x..I,.u2..M..... .3/..q>AC.........e..._.A...].6MfA./^.. .gy..i........z.\|1...u.."....!..y.`..~..qO..Iz.. .....M(..r.n..>.5.......\|...z..,.zlw.g..ct..?l.....A>Oc..;;....0..q.f).9..:.."?..>..af...e..y8...l.E.du{)..7...?.N...z......\f.O#..~.\.{......~z.....[.......h>.k.,'.V..I..Qp.._...O..7.\|....S.....S.:..;w.Q{.t...../.....4.6..O5..9..........>..[..........[.q}W....V.}O<e...0...W.......x.y.'.(.{..nsw......rW...}.....$.q.z..m'....'.aH..]..m8..N.$.s.L.A:....3..S......CHCYz.....~<..C..?.O}.[..D%..~N..;........B.'...E........;g.N./n^..?..n~.89.....;..9..4..h...I.,..q..y...p>U....;..HU.:S.j>.%iNC/.G.H.u..#...J}.",.......73Z.Qr..j.r.3c.w+...I.V..x..>QtV=...w...0..j5'..E...zA).2.^m&...Al.*.~6N.a...

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29659
Category:	dropped
Size (bytes):	7398
Entropy (8bit):	7.974938633609326
Encrypted:	false
SSDEEP:	192:x7Fug9wmm8/uQrKniV9/DBeta+9qo86uc:xFHm8/FroiVNEfZV
MD5:	43255E0723CD9FD4001571FE2CC0FCB0
SHA1:	2C75B74B0AA84550D800C02D8160808F6E97CEAB
SHA-256:	AC20FA90E7AC719489FA00B8D1864DD06D93A88DDD124384462FE3E103723F59
SHA-512:	C2C4F3330A9A1F373AC62AA055F7E54F08FF8DC771060CB186A38C4F5B70DE9DE5F113F7BA5414A26710EC42D6DBBA59563E06788B2E6BB09945CEA43357EC0F
Malicious:	false
Reputation:	low
Preview:	...........]ms.7..~...]....mr9..W.);..d...n...8....JVy....n4...P..\|.E.t7.F...m..U.M...2].....:..6.oV..U.M6^&..hK.?......zS..>~....\|.k.3... .g......Aq...... ..>?>;..N........h.??...%...........h\|q....U.\|<\|}..&?......~....$_..I.>.E.=.s>.....iu.N.".T.....U...a...:.I5.........H.[n.Eg.2M...g..p.on...j.O...._.}..Hn...(.@p....Y...W....>).1.9.n.d.-..d........U/l....r.........c...7...W."M..$...<n._...bSVy.,.y..=K..<-_}....\|......h.<..<.e.....wi1..b:d..f.5[Q=.'E~?-.M1I..H.X....ki...D]..v..kK[.g.r;&4..*.u...G.V(...U....}.X.............4-'E..B.^6..E..L.....o&.H.}j....E.....Z.j.......[l1^.mW..&......1..#?....gk.4[?..P...;Hvu..\|..=.u....$.e..0.c.6..i..G..a.\.....H..")n.......M.)..w5X....q..V........\|...F.M.H.b....k..f.V.y.[...S.r.....L.qza.E...4o0o....8O.H...z0E..h)M.wr....Ra.:.V.......2.))..6.......f.Avf+Hc...%e.ty.N..ZKwW.9l.A.W3........f5].s.]....b.\|.DK>J.h.~7M'...Kd....P.K..UU`.....M....8.g..4.....M.pb"<.p.-.Iv..gS........7......y......

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 40453
Category:	dropped
Size (bytes):	14520
Entropy (8bit):	7.986606215078307
Encrypted:	false
SSDEEP:	384:ry5GEs/taTFMj/kbL6M/+MgFWC5JGOKSEtjmCWKH:Qs/tay/kbN+NJCOKhjCi
MD5:	37893C0B811FD4E1C7216CFC6B9E19EA
SHA1:	99352023FBDF00CB2722918E51EB036BB38CF438
SHA-256:	98CB13A5D98C26E525BAE541EBD744EA823A9BD763CE9637373D99A742C7C9E1
SHA-512:	02DB2726F559A7A2FE07D91844AE38B7C6FD3AC139AFDECCDC991F2E42E96379669F92E594963E754F3B863C403BE5243D73818754AEA349F35AE4F00ADD9349
Malicious:	false
Reputation:	low
Preview:	...........}k{......4...&D.....q...9.....\(Y.Q....0.h.#q...oUw....Irv....F./.u...Jg.....<....r...>Yd'WI.._yws39...Eu.L&.....p.].{.?x4<_..:+. ....?%e...(..r..(.....Tu.M..'upo..{.q....:.q..Y..u..2O..mY.j.y..\|..1<:....z{Q..}<..$u..'0.7GA....(.....U..S2.1..G.}..g.q8..7.zQ...RoR.uv...o.q.j@...izs..O..<-..U....b.=...N}.U}i.-.`.#.h...1.....^.u.....-_.h..^....ar...k.e...;/.(...$..#..\.(......I. .2J...).V.0..`..~.....=.....$=.q...8...a.e......^?.5.b.e:..~..$......Z2....q.O..[...=..x....$.....@;...W.YV......Y..A.c.V.u+u._...D.....f.@.n.tw....q.L..%.....zv3...K ..#f}'.......>.W.......M.i.(............^.i.u.s.w..'`E\.k.^9.?f..ZV...SW. (.%.dX.Q..;;.[.*..4..A.....bQ=..;`.h...+....,.`f.\..y.\..,.B..XE.,O.,.N....%..lq.......0_.v..r4..O@.....e.?@...t.vt.7.H....6@......)!O...U....<".>.......jaC....P.J.Y.A.N...N>..\......p..;....:1@.@.....W.j.}..8..Y..-x...........5d...6..R.U.\x<..A..y.3.Y._.O.fZ.E.W8..0..f..`..+...Qh.W.....9..........T.2...,Z.w(..{.^

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	5.098325314868938
Encrypted:	false
SSDEEP:	6:xBB0HCc4slsk9ZRcmT/LmTCXVPxbjt8Uy:xBBBk9ZRcklVxCUy
MD5:	7AAE6383F0725382DFE4F0756BCCE354
SHA1:	3DB9482367D2B93391854542C931815F2274A191
SHA-256:	CDBD1372AC9D5E45B066C7170CD34B8557021E3825A89BB71568F5B10426170D
SHA-512:	FDDC4B11A171C4642B7A7292B7B9804F857D56C0C082AD8114F3F4827F14DC28CB5A765E8193E18F5B702D55EA56EFC2981D5EF0E5F27429AB3984C2368BD194
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/3dcfab6d217ae0509cb1.svg
Preview:	module.exports = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1920\" height=\"651.1\" viewBox=\"0 0 1920 651.1\"><path fill=\"#3a4eff\" d=\"M1920.1.8L975.7 649.4-1.1 538.1v114l1922 1z\"/><path fill=\"none\" d=\"M-1.1 5.1h1920V652H-1.1z\"/></svg>\n";

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 23912
Category:	downloaded
Size (bytes):	8769
Entropy (8bit):	7.9739407171910015
Encrypted:	false
SSDEEP:	192:BzMATIl61/PTE5wXVV4xutOEpt6EPglxLix+ot5wNuHTI63Fbh3/:B/S62ew1EptEgdgNus63b/
MD5:	4B05DE09A116BDC04DECD1C5EF857189
SHA1:	0856BF5385A182C8EC93755FEA4DB2B7991075B1
SHA-256:	A72809BA9B63CC2656305E224A93B9CE36A8DEDBE8ED949D9D3708B3DAA67369
SHA-512:	FA9DE40CA98F708ED99CC309A0D4EA8249A417ED4D76AFD2C023530B41954557630410204F26B9ED25164C6A2CEAA5FC285FA0039B462FE3CF93C63E58D5BEB1
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/33274.186e9fb49d3ce6fbe3b3.js
Preview:	...........\k..6....B.Y.+it.dK.g7.$M.$ms....ie...-W....y.R.<c99....!..A... .M)....O{..f......l.Y._T.m..q...I.....}k.).._..<w80F#7..C.......w84</.F.(.1p....Cc.x.#..a`8......m....F....@. 4<....`.M.{.....$C.E..1...1.....\|.^....P.8......n..!.x`.x..6\|......F0........lH=p..d.n.B...r.I.......=..`0..K2........H7.N............H......P.J.]..\!m..r...\|....?p......#.....:..D..B.....>.zv.............Q..%..p...R.Fh....G..9.....A.9d.A..N.8....@..x~......B$4..&E... ...P.....C.q..&..Fa....7.q...7...A.H.:....`.Z.}.$...........3.o......=/.f..2cb<7...X.....J..g.UR..J.n.>......o.bU.V&V.j.....?.h...x,.!.?N..Ie.E...."_...~,.H.U^..B.8Mg==gR}<...".i..,C.{..Z.;i.T$y.W._..y.j.=......Q..q..5.....>MM..K......{.r.Z$...U.....>...?}....6.JC..{.{..S1KW....g.[V.f.dqYj...)~..i.$....$_a..$...M...z.e5.F......t._.r.....+LL.M%..=..b...r\|..U\...f.Lv.....:.lCX.U....7...z..n.S..r..P.i/..q...:T....k....R..7R....q.o.3.%..^..x.+.m.D.E.N5...{.jNj.6...G.V.y}.$y...>}ZY.&O.d..a.0.[

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 86417
Category:	dropped
Size (bytes):	15014
Entropy (8bit):	7.9863875317742306
Encrypted:	false
SSDEEP:	384:pg9gKZWx2oDVhw/Th6UomFiZcHtxq6jxVNXIhbvvufbcXd:+do2oDVQThNXHPhNV9fbcN
MD5:	DEB2A20540089992B969A131BD0E9FD1
SHA1:	3C082C930E68B8C55D50A9464D94B2BFE84B1BE9
SHA-256:	0C2807847A9C72AEA91AEBADADD9AD3B203CFC5690ECC131518497A8DA79250B
SHA-512:	3EBA7CE6C3F58718700C89CC28B70B29F278F0B91259E213D0334F781A9BB35B39A021D9DABBF92A2010B0476DBD4908751FED3A7AEDCFA9B5EF8529FC9B9CF4
Malicious:	false
Reputation:	low
Preview:	...........}.c.....W.L.#S.&..e.ul'u..9+I...\.\..H..@=B...~ff.X<(...E.....;;;.i,c..I..I3V.I.Z......t.\^%.......;..?;ou..x.<;.........A....MZ.'..y\|t.k.\y.......aw.....wp...r.A3i.......ytt\|...;....{;;...L%.........<Q..h0Y........[+.,F.^t... .;3.\$S..x.w.F.`9.....i8x3...%..............E."..&......f#.. .].p.U...>\|.0S(.u.j.F^.Z.@WO?..=Q3...............'.v....lx.z..............st....j...N".,..A....z.c5..eV....7w1..8v.M..q.o...L...Fa.xY.hKZ.x.mjv:.t.qdS?.x3l_\|.xI<Xa......W.?v..,..w....9~...S.........H.q..^.h....`.v.b.(.iv...bo......^.Yk.\......Nxv...T...7..e.a1_..DE.l..NSh........f4...w\|...{..a.....Ur]>.Oq.a:.. .N.B.Yg....l..vbu..E...r_.V...h./nOu.2..nk.%.q:..JC...4..ZM..{..........f..co8SN'..4>]u..g.o....l<.i..7s...4..K.Rcg..sg....8\F#\|.Qc6./T0R.@....O..1~r.Y....M.4.u._.o...O;Z.....L.......e'w.f....n..^p......r.?......J2.B.l'.8.o......]k...\|...K..nT.;P.X%.?.\y..Z.\..P..Z.....2.T~...[0.Z`1.X.-..8.,........g....mf...0..4&..!.....N.aDW$@C..m.W6.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30282
Category:	dropped
Size (bytes):	6114
Entropy (8bit):	7.967188667746753
Encrypted:	false
SSDEEP:	96:KGJooKQOk+zE1RSU1vhkdcjCJDRWfuHtcwuY1J1v+9BITBqKb8MpH:SoK+FvhIEufuYT2yB9pH
MD5:	A3F7841D3E0477EDDC2FAEE619F04545
SHA1:	281A69C5D0011B2C5F37466AF2154F90C7F234FA
SHA-256:	F33B7AA283FA389CDA9C90F85DEF174FAD44B65C29334EB91EA8F8FAC9C5F249
SHA-512:	A2F9322C83E9658447ADD48296915538F6AB4A21E8D7D2C6F4F1C0A7F306F1DF72CAAFCC058F276D5269D6F2401583D600730939AA538427F07081228ABB0D30
Malicious:	false
Reputation:	low
Preview:	...........]ms.F..~...]..2..%.%d`..V...T$'w..@...Q....$......t.@L..%.ba...gfz03.p0\7..i.b..g.&_....u..\|}../o.t].WYQ&=.......z.\.>~<.z....]...l]..G.8.......$....A....2?+.\|9\|....yu68...W.....+.....t._\|.....z.iV....q..U]g.q.t.....~.&.t.....E...a.].Q......r&..m.:.."[.@;nV.".=..e.........1.k@:^T%._/....ppJ.2....]v.)...Or..R.....t..>__.e.(.W.;z9.P..Ee..=..<........:_F...\|..y............B.d@rggX...y.. ^..y{..A-FE.F]+......mT..i9.m7Gw....Pei.......T.5..d.u>->.....l...}.^...A...M..F^....)D.a]W.hxT...O...u;h....\|PV._...\|P@/d."...<.U..!...$"..2..2.7....fp.n..Ev......Q4...j......f\%.v.u.hb[...T'iu.l.....q...t$.*h9.bch..a...I.........\.V.}...{..(.....#..d.6..O.Q..7.62....."...tf4;...#cw.&r.e..&....G...SR..T[.....(.....8M...n..g.z...k.bd....,..7..z.., x$\|Zl639.by.......e.U....".."/.g..8YTu.t..^.y....&...V....%....uU....[.W\|....@i...q7......?F...`VE..x....S.....[V.u.V....p....D..Yw..4I9jG{O...F.D...z..)\u...f...K....]\.......S.........>M?.....O

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39779
Category:	downloaded
Size (bytes):	12236
Entropy (8bit):	7.983705091641009
Encrypted:	false
SSDEEP:	192:Qdxxtj7UXmX5+lPKRQuT6Pwx4NIrxm0DHOx3m0hstexJeKTQMz28sQyDbBJJdkeK:QdN8Xmp+wQe6JNIt9YDsowzDbB3dfudL
MD5:	18F365FA513073B2D6CFF6049ECA738C
SHA1:	FF20A120F43347FAF1AC28A2F71077150F4EE656
SHA-256:	066FC1C9BFFC86156872F8C7A3F7E948BE319ADF96819F66E2CD96CA125CA6DC
SHA-512:	176B0DDC7D785D7FA7D961E8592554CFC31B72E419266AAFB2992204B70CD80E195C74F9CB541D84F637830FEB709FA9EC6E8D302B0A27F537E7E29BBDDD7A73
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/58686.2b5c3fb77a4c9bf80677.js
Preview:	...........}.z.....s.c8Q.g0...4..Z,.Z..v.E.<...X......!.......$%.gy.c&..kuUum].h.S.Y....i3U.ip.F.p...l.\|.>...."...k.>~\|..............=....G.C..=.t}....7...^...\|.G...M.$M..`.T.f.-Wq....e....u..i.-.Q.{...k..x.fQ..>ZR........4Ua2.....L......._).w.sx.{.h...$.1H....>L......qwo.hY...\|..u..z...Hf.^..d...@....Q..f.<9>....}..Z~B.<<.?h.!>....z-.......z..W..JQ.n....J..{.hah..W.v.w...#\|....-...G...a..L....G.U......?.G.M......u.O'.'.G-..>......K..[....tO....1-....uh....n...u:W...?....k...;........?..O...+.?.K.....G.[._..................e.2...O3?..0..?....^v:]/...$....~.~..d......7..fB.....\|..`...6.....{.G./B.6.&.R.W.y..}./.T..J..{...Z61Ekkg^af;.)m.xn5.fQ.G...z..Yz.g\.KO..l.^42wL.Y..V.+l../3........X..Y...f./.6.fI\|..&/...Z.-!h..LW.C.......jy......{.U.........r.j...g.6..%..RIv.H..$Ze1...._.F.f#.. .Z.x.V.9...0 T...I..V2..m...T.!P..L.\........n5cpB..u.N3.4i.1.......L......I.P..w.$w..UN.4Z*.J..O...l0..i.&j9I.a..7,G...p..k.....O\.Dh7.......L_

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 24531
Category:	downloaded
Size (bytes):	9059
Entropy (8bit):	7.975920602662275
Encrypted:	false
SSDEEP:	192:MCtRjBGkBVbr7/GPch1MuaEaDKnH4lNltw+Juwfd:MMXGWVb/Cckuazf/uad
MD5:	D4C7AF8CB71D4708222A387EF16DBC7D
SHA1:	AB8707BCA294E9F06913523F0E6A3ABDA6F73983
SHA-256:	0996D686960A75C9AB831217EA9C73840A88EA30814B5D0EC0CBAB52AC647754
SHA-512:	9D7B2D3B14DA175C994B1B3DEB3B658D511D07B2026C7A69B82602AF471064A00727286ABDCDBFFB8D685C2FC25FFEF8FFBFAD6A328DC9E16151D7F87FF89F1C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/45428.d50e11e1e27c0917ea14.js
Preview:	...........\.s.F..}...N.". .&!."....dkV....I"........}.... .....V.iI`...w}...`FQ..4.Z.Kf.-.W....b.~.)....2.....}.tye..u.h]^.........N..[....<.dn.b.._....[.(a...M..(.x..........7s......'.r.>..0.!.[&i11.e....ooo.......y.(a..8I&.t..,-O.$.....F.MLv....IXQ..d..rA.}d.2.Y...31.i.......].o...1Y.7L..B.{.......s.g{n.?xr{.7.C.3Dn...O.......................M...5.S]....=..Pmx.n..1~.0&.lA..]....F..&.._>X............W.1._c..=w....if.R..'........n.y.w.dm..L9.`.d.v.R..VM...."ZQT.Jr.i...8iw.e@....r.@Z2...k6..F.Kv.,........L......A.o..d.N.e...o...P......,U..K.....g...O.`..$..O...i..Y..6.9.V,/._.b..2......G.ef..9...+..wl......H..s#6..dV1.....#.@......NJI..>J.O...q.V<)/.+..ULZ4..UX~..@../...>}.....<5..pP...QFl..L.R..-.l...5M..0.]..0..<.O.F..).......<..\|k#da6....o.w....O........H..O2.X..\.....r.h....9?.[.Lw.;[.6.ea..R./n.82<?G.U.D.*..v....=.,5..9...F..T...-......f...,..U..Z.......I..\..y.`l..8...m...\....a.F...n..D.\.;].y9.Q.../..}?.~...l.6...'

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 50100
Category:	downloaded
Size (bytes):	12636
Entropy (8bit):	7.981298958893935
Encrypted:	false
SSDEEP:	192:t5ZSijpbSqp0nyu0t0tNLceERCc4aKXX3sUerjqK9/sCqJZLuGlf53nwzLDD:t5RpBpC0t0thcQc438Prjv/GZxlBCD
MD5:	6E187640AC1F62B1536787CFFA48DDE0
SHA1:	9BE1D8DB4F55F82F0B55E2E8B5CD5A1F9D19C899
SHA-256:	3EBDB32D38F8AF5579D407BA2BAD471DC78535B9BFD04CB7F41AA05E06F77439
SHA-512:	AC6B6B13661DDE9C2CF676EB90579D2FAC854FD38FA7224A1013F8B8435E51B60D562C6C3AE346B9DC428D65601A0F6015DEC4E27A5C3D9070D86C4A32AF273C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/90396.306e7eb0c5c689cee651.js
Preview:	...........}{......)`:VH_..c8..)EQ..v..G.s..VG.I.D....8...}.U........<.9c.........Fk.G^^d.h]..(Y...t..>.\.6.......:.7.;.~....N.....w....i..tp2\|...{..`..Q7.L....+&i....w....?==.u.9~....N7...p0.t..9...t.......Nw..'.....e..^.u.l.,.$...b...q..q.E...1F.-w.hS.A.m...c....G...I&.I..y..hV.......,.FYq..(.e.H.6Me\\.v+.-...F..{.-..}.Q....h.fa.u.jn....Q.uY`0..t.)t.....w9..N;.d..;O...I.f....8.F?.c......O?..,v..C..'.'j..h.o"=K....g.&/..d.L.e...@~._..[\.E.e(.y+?.x....t<......Y...@c..x.V.Y......f.{E.]\\|.D.L{."...}..Z.. 0.....8..q.N.h>../.Y...,.^G.8..M'..!/.".yXY..m..)di..E...."z..M.=.^t....xN.U.N:....d....<....I...g..e....g......S4x.c....1....N....68....3..1.PC.......H.J.6..av.e.........xa./7>mT...E......1i.B..FYu_......._.\|.n..L7E..E.Vx%e.......m\`.E.3w..).....<L.s......m...5v.......,...V.Y.Nw..{..:..Pk.u.e.t....9mb.Z+......]..y.n.l..D.F..&......w..l.,.0.....p...v.&i.4..4..R......>..Y#.6..L.....,......?.j...k.._....p....a.U..T'.5.m.&Q.9t.wWTY.T.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30533
Category:	dropped
Size (bytes):	10419
Entropy (8bit):	7.979179836928558
Encrypted:	false
SSDEEP:	192:IBEi4MXaW0e6WaXfknjtIOMJ5m0TPCvifk4J6nIZrvwPR3gu5:IvXD0e0sm5m0OeJIkkJJ
MD5:	2A587EE083FDCCA95175E181631D765C
SHA1:	F42880A80DBF4E4D1DF44840EF79BE1E0E995445
SHA-256:	7399E4981B3AFB22BC79B09E4F663C7CC790EBD2888AC619566C6FF7119D429E
SHA-512:	FD5B546DE7454F1F51AF6C563C5E4885F51697D917BE056293EDC6E513C19DE527A24F167809895469A68F62883BFEEBA09112C5FF77517DC56867BBFE529DBD
Malicious:	false
Reputation:	low
Preview:	...........}iw.F......I\|.....N.V..h.m.$.(ze.l..H..@.....S..@..e.9... .Kuu.U....."...}..b:....<..?.,...t...8.o..........9>.......;.........w......;.+...._'..)...}...K..".,L.......x...lm.^.owvw..(...i(......."..q.......r..b&."..".../..{..E?YL.a.f.Y...w1(..(^^&..t......Y</..@&n?;.G..rS;....HG.k1......a.[0..4...j^..=.Sl.....Q(..~. ..v.".w.<...{......"wR........?..O.{..b.%......V9..8.z.........C..Q.[.C!.ane...x2....A..L...{./.)'....WL.<...^lG.-6...4...NW....0N.....4.X@>(.jr.,!w:^.,.<..Go.N.<p.. ....Q4...B5.A..9Y4.>......K...,....".e.s!.o.(/~...l..0.[...eb...vH.......k@V[...M]'.....{.^>M...6./.....!.j...Z..(.y2.m..C..<.E..:.;wI.0.....Y..i....."...+..&...E<....l.S.eo...M.Y.N.".H....a..Z-...b.."\|?...g...[.e.F.(~...d....p.Lr...0.C9....P.jr.._.~A$.."...8.......vH....]68.u...j>ImmS..^.<.....O.=.%\|...`.^:=o...]....s.....j.sM...b1;...=....H.gk..=.{o.....{........+.P.0.5..E^.3%...BlZ...6{.;......R4.tFB......?.s^...n....D.GcA.....fok.x.q...E4}.%.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 61400
Category:	downloaded
Size (bytes):	16579
Entropy (8bit):	7.987454663763108
Encrypted:	false
SSDEEP:	384:R5SNqKFSg62e1EPiQz0oad32tc8+JQAK20SUSB894y/v:HSqCPe11McT3nnuDX
MD5:	BC50471BCB96B192003500BA7C29A5CE
SHA1:	86026AAF0C37B8BF9E76FA163BB60675DC7BD401
SHA-256:	ABFEC913B0E3B58A04194DD5ED6DC83C9BACE5C604175CC2E666A0E105C6304A
SHA-512:	97B91803202D60F32C6C5E90F911F2B626DF2716D3E7EAE5063F07F293B6F3D90AE6649B0F0BD8112C0AB70AA3B037D68C3510A214EE6EDA11646DE40623EC2B
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/30192.1c015be440de00e9b531.js
Preview:	...........}.v.F.....0'.M.4I..P..Gvf.b'...5.^.H."b... eE.Z.5..'9_U_P.P......q.K@./..u.....4K.I.8j.~8.\..7yw2_E....8[xA4....o.:.U:o.y.......^....v...`.....^.........Ak..j.%N:..;...A.....~w..z.....;h..5...C..?...v.-7...~..r..v...i...x.w0.g+...`......k.Kz:...f......E..c4<.....}\|..v{.=.a........s.6..u...3v..{.....+....}.....3......=u......k.{.'.......;.[._.7.G..QvD...h..&Y.G.Dn.b........~.....9..=.9....G.Qz..~...O....p....K?.....$..Y.4....(.5.17m.F...g.K.......f..w..?../.[.H7...\|....4.`..p...{G.Q.(l.[.x......o&.&."n&....~..]..?.Z.>$....VI........z.S..D.Y...M6G.8J3..7..:M.g....q...Y.xQ.bAS...m..]..9.MB/M..}.G..;..i...\. .jB`m].+....t....l...,.B..h...^... LO.kl....F.z.......2..6x...!..~{..z...F..L..@f`D.po4j..u..:.....r9.#Z..N.L...f.}.z..x..`.t.P.\|.t..c.W...........p...U.0..x.hl..e....4..~u...i,...K...[..%.%.g.?..8\|.d... .....6....+.,........h."../.'...=B......u.....#BR...%.q..K...z'`..Z.8.....;,......4..D...B^...=..E..s@.....<....I..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 48105
Category:	dropped
Size (bytes):	13464
Entropy (8bit):	7.982492833399853
Encrypted:	false
SSDEEP:	192:1p4JO7acb8CTmvnSOWxI9GMXJ6IIRWp9Cuxt+5fNlwCETmm9iAQeNGDvDqT5V503:17bbdyPNAAnBxt+0TmmaUKDq1VD3Nzg/
MD5:	5D4A52C311923CA1EDCA9721F77C2324
SHA1:	48E4C70B624756C26BC7FC85809624881742A4E8
SHA-256:	21A9B7B9C1AD7EB218B8BC4998F7A6C8A424902B37DD628C2CAED550545B4472
SHA-512:	2C8A2DD8BB532CD26B39A7F548F579F0944974373668536271C99FBA2F97F2AF68AC04246AE2D29ADE87AD85F8186FC1DFE2C090717BEA015B327646E800B4D4
Malicious:	false
Reputation:	low
Preview:	...........}yc.....)`NG!...C'i.V..&....G+.$H"....%14.........nO6.Q;....U.wWm..V... .u.Y.....?...N'...m~3.o.~..............C..<.sZ..C...l.9{.{..N..8h8......wx....[N..l5.fs.x..Yr.N=pr'.{..~je...wt....?...{.....a..l.N.....v..FAn.N..z..U..F.x..I,.u2..M..... .3/..q>AC.........e..._.A...].6MfA./^.. .gy..i........z.\|1...u.."....!..y.`..~..qO..Iz.. .....M(..r.n..>.5.......\|...z..,.zlw.g..ct..?l.....A>Oc..;;....0..q.f).9..:.."?..>..af...e..y8...l.E.du{)..7...?.N...z......\f.O#..~.\.{......~z.....[.......h>.k.,'.V..I..Qp.._...O..7.\|....S.....S.:..;w.Q{.t...../.....4.6..O5..9..........>..[..........[.q}W....V.}O<e...0...W.......x.y.'.(.{..nsw......rW...}.....$.q.z..m'....'.aH..]..m8..N.$.s.L.A:....3..S......CHCYz.....~<..C..?.O}.[..D%..~N..;........B.'...E........;g.N./n^..?..n~.89.....;..9..4..h...I.,..q..y...p>U....;..HU.:S.j>.%iNC/.G.H.u..#...J}.",.......73Z.Qr..j.r.3c.w+...I.V..x..>QtV=...w...0..j5'..E...zA).2.^m&...Al.*.~6N.a...

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 50100
Category:	dropped
Size (bytes):	12636
Entropy (8bit):	7.981298958893935
Encrypted:	false
SSDEEP:	192:t5ZSijpbSqp0nyu0t0tNLceERCc4aKXX3sUerjqK9/sCqJZLuGlf53nwzLDD:t5RpBpC0t0thcQc438Prjv/GZxlBCD
MD5:	6E187640AC1F62B1536787CFFA48DDE0
SHA1:	9BE1D8DB4F55F82F0B55E2E8B5CD5A1F9D19C899
SHA-256:	3EBDB32D38F8AF5579D407BA2BAD471DC78535B9BFD04CB7F41AA05E06F77439
SHA-512:	AC6B6B13661DDE9C2CF676EB90579D2FAC854FD38FA7224A1013F8B8435E51B60D562C6C3AE346B9DC428D65601A0F6015DEC4E27A5C3D9070D86C4A32AF273C
Malicious:	false
Reputation:	low
Preview:	...........}{......)`:VH_..c8..)EQ..v..G.s..VG.I.D....8...}.U........<.9c.........Fk.G^^d.h]..(Y...t..>.\.6.......:.7.;.~....N.....w....i..tp2\|...{..`..Q7.L....+&i....w....?==.u.9~....N7...p0.t..9...t.......Nw..'.....e..^.u.l.,.$...b...q..q.E...1F.-w.hS.A.m...c....G...I&.I..y..hV.......,.FYq..(.e.H.6Me\\.v+.-...F..{.-..}.Q....h.fa.u.jn....Q.uY`0..t.)t.....w9..N;.d..;O...I.f....8.F?.c......O?..,v..C..'.'j..h.o"=K....g.&/..d.L.e...@~._..[\.E.e(.y+?.x....t<......Y...@c..x.V.Y......f.{E.]\\|.D.L{."...}..Z.. 0.....8..q.N.h>../.Y...,.^G.8..M'..!/.".yXY..m..)di..E...."z..M.=.^t....xN.U.N:....d....<....I...g..e....g......S4x.c....1....N....68....3..1.PC.......H.J.6..av.e.........xa./7>mT...E......1i.B..FYu_......._.\|.n..L7E..E.Vx%e.......m\`.E.3w..).....<L.s......m...5v.......,...V.Y.Nw..{..:..Pk.u.e.t....9mb.Z+......]..y.n.l..D.F..&......w..l.,.0.....p...v.&i.4..4..R......>..Y#.6..L.....,......?.j...k.._....p....a.U..T'.5.m.&Q.9t.wWTY.T.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 62242
Category:	downloaded
Size (bytes):	17340
Entropy (8bit):	7.98682506112389
Encrypted:	false
SSDEEP:	384:wI3BC0F5b/8ECJeWnO1MJ87p/vH3OFA5+o:v3oeAJVQMJ87pvHaA5+o
MD5:	D0C969BEB7A18A393E80018DAECBA263
SHA1:	3CDA8E6F246FA6413543921F4134FA5FC01985A3
SHA-256:	0CAB57694D986C128235283516BFE3C53E5ABAE9E331DF50271DF3951AA9707D
SHA-512:	0A9148E047CF39A360F2E1262918214D8A97CF2BD5C0FDAEF74EA63220D5B32BC7075B1A71DC8BA2883CF6DE6574AE138F5A8782430F3F8F0D81A71E94BC003F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/16339.77d3ab69801aa191ff1b.js
Preview:	...........}.......) FQ....o#J.GR.X[F#;....$A...`.p...}.5...'...... 9...;.\|.l.K.......{..9.F+w\|z8_/O.....p...w.?..PqV.x^~...i6.v....f...Z..[.N.iw..n.}.n5..A9.=...^..g.I...L.}...x.6.T..r..W......~....Z.;.e..i.+v<,.5Z..~.[.......@.^..*....F.......~.Y.'.l..Z...}gY.T.......^.q.j7Z....e...V..AU.3.l..hu.K......V.e....5<..e.Vk..s\...z.b_.e....N....V.4........R.;T)......h..\|.m.y.~..T../.....[..>.....S....~c?...?.../.W...;.;.{..._...?....f.....w;..$.d.0a...p.^..?\..a..#...h.^x.$v.o9K..\|.....,.A0...G....'o.83/y}.\|..+/J..x.8.WI.a... <..R.EK.ar...u.M.\|{.^Iwa.3..a.&^%......^.4..1..r...V.......Z...a.~..r.^9..i.A9...t.>..J...r.y.:ZZx..^t.....KO.R}gG...0.......c.H..$.B.<.<...`d....p.....[,..,0.....w..r2.;.}.`p.7...j.-....L.C..&s?v..1...X5...cV.s..M.....=.....&....;.'y..J...._.q..c9....q.:.g..{?.G.......u?.....d.E.=.E.;.g..$..%...y.I....Jvi...n.U...... ...?I.08....._.....g.oo..._.G?...........S....S.T....+..q.8.......].\......Q.x[......".HR....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 40453
Category:	downloaded
Size (bytes):	14520
Entropy (8bit):	7.986606215078307
Encrypted:	false
SSDEEP:	384:ry5GEs/taTFMj/kbL6M/+MgFWC5JGOKSEtjmCWKH:Qs/tay/kbN+NJCOKhjCi
MD5:	37893C0B811FD4E1C7216CFC6B9E19EA
SHA1:	99352023FBDF00CB2722918E51EB036BB38CF438
SHA-256:	98CB13A5D98C26E525BAE541EBD744EA823A9BD763CE9637373D99A742C7C9E1
SHA-512:	02DB2726F559A7A2FE07D91844AE38B7C6FD3AC139AFDECCDC991F2E42E96379669F92E594963E754F3B863C403BE5243D73818754AEA349F35AE4F00ADD9349
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/stackdriver-errors.3069a6025a2308368f46.js
Preview:	...........}k{......4...&D.....q...9.....\(Y.Q....0.h.#q...oUw....Irv....F./.u...Jg.....<....r...>Yd'WI.._yws39...Eu.L&.....p.].{.?x4<_..:+. ....?%e...(..r..(.....Tu.M..'upo..{.q....:.q..Y..u..2O..mY.j.y..\|..1<:....z{Q..}<..$u..'0.7GA....(.....U..S2.1..G.}..g.q8..7.zQ...RoR.uv...o.q.j@...izs..O..<-..U....b.=...N}.U}i.-.`.#.h...1.....^.u.....-_.h..^....ar...k.e...;/.(...$..#..\.(......I. .2J...).V.0..`..~.....=.....$=.q...8...a.e......^?.5.b.e:..~..$......Z2....q.O..[...=..x....$.....@;...W.YV......Y..A.c.V.u+u._...D.....f.@.n.tw....q.L..%.....zv3...K ..#f}'.......>.W.......M.i.(............^.i.u.s.w..'`E\.k.^9.?f..ZV...SW. (.%.dX.Q..;;.[.*..4..A.....bQ=..;`.h...+....,.`f.\..y.\..,.B..XE.,O.,.N....%..lq.......0_.v..r4..O@.....e.?@...t.vt.7.H....6@......)!O...U....<".>.......jaC....P.J.Y.A.N...N>..\......p..;....:1@.@.....W.j.}..8..Y..-x...........5d...6..R.U.\x<..A..y.3.Y._.O.fZ.E.W8..0..f..`..+...Qh.W.....9..........T.2...,Z.w(..{.^

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37544
Category:	downloaded
Size (bytes):	10303
Entropy (8bit):	7.977130551213475
Encrypted:	false
SSDEEP:	192:U9ctKyzVtup+TqGzlgROeTiyi8FsCEOcNueUfAfBhYaczOK6lI5ZR5qbMV+hFU:I4K8tWFpTiyi8uiZfAf3Yao6e5ZY8eFU
MD5:	736F026E209AEFF96C0B1E3E1C86C860
SHA1:	8C5E627DCEF8C95E28093BCD349F49CE83B29E2A
SHA-256:	BCFD17A9613068786308FBB18A81AD0222CA3A9842ADB71A0F532685BC84A09E
SHA-512:	E4F0B7C67D14BC663FB9F4D126391B8352DFACEB67F4CFF1451C5512845BE362E710F08EE68761AA27F0C12E3CFD9892377D34DE17CB2E7FB9DF97FFA4308AE7
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/8633.4c341e20fe5574616256.js
Preview:	...........}ys.H....)`..... ..%..5..=.......]?..$.$.....:..w._f.(..$..v#6du.#.++.6V.p.".&Ec..E<..x.N../V.....\|.F..._?~j..U.h~.x.....I...=...{no...?....A.(h..p....:o.N.....l.7.NO.G-7..~......=.u[n4j...iop.rQ....Z-7..^.....iw.;Ei.n...Qk.....Sw..G..E..-F.U2).4..q..&.b.0...ER.~,.y........U..F..,..:.....\..^'...K....D>.e.fMZ_...Y..r..hT..E:s..,F.....V.?..4...F..)2.....6.`4.dT..z.a.b..&..j...c.up...h.i3j.....st....j}.....(VY... :8P...Y...J..6...h..y.B$.....Q.:....$M@X......W@S..}..[,.._DS.w#.=..$}%.0..\\.,n.../.r....h..A....2..}.Ea2..5s..\|qG...F..;......Q2KQM?.l...W...sTL.....l6y.)N.....m,r`E..v3....L..{.j&...&.F..J.Eq...._....7..4.rx.F.q...W.Kg...M.x..1.p..L'......m.YM.8.p.u.._...h.xt..q.. .......l.{G..eu.......S....o.yy.L...a.hn..JD>j.0...`N.U!........VA...v.......8-.$...F...h.....Y....5..Z.6)....Vs-..<{.T.......f......].6.5..1o.....q..xT}..b...~.....o]...?.....u.%Q2...r..Q.../._.....r.z.*..=...O....6o.....:A...p~...;`..~..>V..~m...d[{..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
Reputation:	low
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22141
Category:	dropped
Size (bytes):	7439
Entropy (8bit):	7.971452391374528
Encrypted:	false
SSDEEP:	192:SY/hdysLAoKPCGJNR2DRqgPvCUI/jmAxMd8dUmf+piUWVLTEYIve4s:L/hoQw6uMRvCUmmGUA+pirpIYIO
MD5:	AA9305413744D4F3D69A99FBC532D23C
SHA1:	E8E652214B31631AD480CF5D6AF257577479FD2C
SHA-256:	7990E6EE2A4E81EC36DB5C9D786971C0BD502161ED33D2EED406582033FF661A
SHA-512:	12E2621F0542FC3728219EB3264C5B9016D0579D69EDC98196A423D5F1FDC63ACF2483F946A67292A53448B29C4AC548F85CA5E02D02C336615AE1315DEF8596
Malicious:	false
Reputation:	low
Preview:	...........\{w.F...~..dg!G........3.x3....s..>DH.(.....a...W..%.3y...~V..K.-2aey..y..h.....o....6........#}.?~.n..E6...p..v...%...s[.acp...R+...v..;h..>v..G....a....vX?@.A.a..o...t.......~.aG......v.M.h<l....t:..}hu...X(...~...F...=j.s\|<....Z..f-h.n...5;....2.N...(..x..?.6.#.[.....C......+............~i.........W.s.g................ ...........$.(....,.z.t...8..H.\|..O...~....`.<K..F?.?w'".w...&s.../D..<O.:Q.....z-.. ...dl].q..O..4..}n .$.r..jx.T.{,"0.....A..uZ...y.9N......u..z<..).z..'..0..........q.E.[...$~.D.2..0...j....(.....e...E.d.........O.h,...Sw]..l..a...p..>\.o...I.<._a.A.......V.X~..G...59....+.tP[.Q..}.....c..0..r}>.\....."...M....9..z9.u..EV.c............hv7'.X.$.M..jbB.,..j.,.....,..D.0%.>.W.GW.......8.....Q.0sO.[...q.Z..0JP....u...S/...Ik....A.s..:....y>.."...b8.^ .....`.....g.....7....... .....B........8..s...u._..3...'.9..R......n.f..U&...J.I..8.."...y2'^.& ...x.....{!.."......S..]R..".S.4-Q...l..._$.Q...$..Oh....G......

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 10374
Category:	dropped
Size (bytes):	3187
Entropy (8bit):	7.9364260320783515
Encrypted:	false
SSDEEP:	48:XgjdDiBXHw8bdatjbaWZ6ULFbfw9sqG4D2Ebro3zv5Jcj6Ve/LFmJ/WSK3e2/:wdY33RatKW4p9k4pbU38maJmJeSMem
MD5:	C43946ABB837D7BBCE0BADF60EB51D1D
SHA1:	C1BA5ABAEE8927C1838DC5028C5DD7A610D19B37
SHA-256:	8525373619A443494A06D781B3775F51A8E63DB56EF73D3E1345712E4C131C32
SHA-512:	F80C0880692F92C19D2F3A6A3330B94E6404A4F53B7EE7DE3D0A370BAA5A0C6E3EE35D2B07228F72FBA5F04FBA46CFF1371AC996BC72B89DB525E32E3D49A79A
Malicious:	false
Reputation:	low
Preview:	...........Zks.6......v4.,IK........$..Y..H.BM.\........$E.a'.z./.$.....{.=.]...d...NN.qpGG..n/&.......L...#.... +.su...v....~..[.........'..l!..Q.....?.t.3"-....?.?p...x.._(.!.=.;..H1......%Z{/.._HB.-I..&.g.9...).s.....G....X..G.).....H....cJ..M....%.....=...D."..Oo...Q5.'.[..).2^0..e.7..1..Ke....k"oK.~..i.Z.8...KET6xW..e.......?.[..8Z......\...q...R{....Q...8.~...1....q....6...a...E<....{.....wr...S...+..y.o.....[&...X..=.....3...S.U...'j......j..4..P....4RAB.Ow.g)2....I.A.p.....[..v..yF..zK.).v:v-..7xO$.k.j.z..wHS.1&..!...{..,..S.w......t..:z..a. ?............J...-\|.tX.S.2.c.i....F...C.U.[.7Ey.[y....).J\...7..u.y.M9A....zj.j2.ih..?..n.h\|..Bo{....Y.I....}.bh.........VMm.4...)...+.:4.6]...`..}..}.]....n~i.?0..&../...Xo=.....^.h.`..R.....Q5.\|.........SY."..>.4.n.)...6o`k...+(.{.zp%.]....n...[.`...r)aQX.]...t.<..i.:...S.....,...=.M8Dl.{...7....].l........d.y..x...z..9..w.H..}...\|....,.hU...^S.L)he!.....wf.S./k....v,.mOz...:d..n.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19738
Category:	dropped
Size (bytes):	7828
Entropy (8bit):	7.970978417312552
Encrypted:	false
SSDEEP:	192:Ub4UQAdpaF6VhIqc9dcag0e5foUK3Hyr2mGHrGiQRn7U9LwMn:UkHAdp46VhHc7cagVw3HOXGHFQRnKwM
MD5:	61D37AE2BBF5334EAEDD2CE7ADB81074
SHA1:	1B9C1EC66AA1705D921082B786ECB7FBF02BBA71
SHA-256:	4A0541EE665423AD7E24D7792B58D1B205D81F1C79FBA108386AD739AE692EA6
SHA-512:	CDEAA26DC75DD13E492119970EE62D75519B534BA334425BE5B363DC1CED59354AC661B37DC8517DBFDE5CBE9B0CB6CCA82470AF4958A057489B877A55DF7479
Malicious:	false
Reputation:	low
Preview:	...........\.r.8.~.[[..$..]4.....;.M.{v.q..%q#..........@.....q.vc...}Gw...0;....t...Mr..ib....(.r.>_...-....w/^^../>]....K...a...\|^..:.....?K3.+..."...iP.h..d./.t..Y.n.S...~..3..,.2..n..{fE..$.:....].....x<v.".t'....,.;p:.......q...Ck[...h..c.c4\|..`..N.Q....^..@k ._.p..p..:......{lc..ll..M.[....".xl.L...X.]7.z..r...36...........bDV."....U.vs{.eZ..,K!.,.n....h.DrVh.f...d.\.-..M.C?..x..,".....x.C.J$2.D<..^..J..\|..wGItw..0..z.U.Gv..PI?;._ON....&......ds....,...p...%.........G_...L.wj2/..$_........V. .7....{.W)..){...)...+...k<..4kn.Qv6....\|.%.0.fi<m..<Z........y.5..c......a~...#..i.'.i.....<....L.........m..U".J.h.....V0.;.sD.......h2Q..2........acv..ur.m[sQ.k...(RJQ...,.Y{..[@.1......%. .c.BHv}...P..p..-..Ga0..'.C.u.._\|.....\|.C..v>....-.8...-AB..%.k..t..)M..i2?".)..ys..yJf...#X 9.Q.Z.^*..k..j.2m.]..Q....B..-X9-.{..l....~s...Q.t.M...nEdb.Ny.(...I.....4Cm...^`98.(."^.../%0vQ.3........N.4:...h..y.&.u..S..2........c.%.U~.(l.m..`.^j.xq.ZZ0`....a.o....a.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6349166
Category:	dropped
Size (bytes):	1636632
Entropy (8bit):	7.999382311500931
Encrypted:	true
SSDEEP:	49152:eUzZp7U6AdO+FZ/3dmcXyNqnOohC1DG0jn:1pTAdOGpdmcXkohC1DGun
MD5:	959417B6DA80521C9978331EA1A05E74
SHA1:	4BE10390173D0776BB4CF75A9376427E1121D8EC
SHA-256:	617D60BEC28CCF01696D811C4486881506CC770FB5BF2C1C50582999508CCB0D
SHA-512:	1F7484B5346779CE86311CAF3E367D48C0CDCB5E7D57D0A9288702772EAA424D7ABD1DE032C4C60A6B1C4A483BDA62FEE328B4E6EE20EFA31BC725BB68AB5220
Malicious:	false
Reputation:	low
Preview:	...........m[...6.}...;....c.w...I...`H&.b..n...f.6....sW.JR...g..%...R..^..s.\|.........._.o.......r...V.EA..1;.G.~.k_&...A.2i..L...O.(....%..S.W.....v............2?e...........^..&.....8..D...-.R..ame..V..$7Q..L...OQ.O.....1d%(._'... s.\|.t.$C.In...U..D...].iw3...]...^F.o....)...Ed..I..MD.{..W>c..H.3..$...............\|...?...U;h..e.r.E..3...A...2......t.@F;.o...i^.".%1e.[.....A.._%.=..V...b.....$.r....f7..62..lf...m.T.....'.......n....e.........d.._2...l.........zT.d.Mu......U.m.......]...(Z.z..2..}..D...w..S.....e..m'M.\|..rQB..i..+R..^....N'....[.R.\..Q+.&L.."4a..."...D...N.^3.{g...i...G.g...$.M.3.A...f..O.N.....7....HC...za.p..th ...C...0D..\..#.Lr......0Y...K.A?EU....:a.........n......w..M.[.ov.Q>..:Q.:...$Ob.....fryC....q.......d....%..@t..6/.\| .lR..:......Onz1:.......k...X...?..n.-s....z(fv..R.[.BIt.!......P1..nw.[..C..Oh.......^.3.....K.....21Wr?s;.'...}..;..\|.6Jn.V!...._4....j,..4...Y..<...6.t.....B.7.U[...[..J.uSOYS.....

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18981
Category:	downloaded
Size (bytes):	6658
Entropy (8bit):	7.970684268514322
Encrypted:	false
SSDEEP:	192:bXV5D9/IRR20FYq/jLMdb32ewh8QmJC1rmUAS6SvH:55D9m20Wq3MAyRIrl56Sv
MD5:	2E54D383A81C50EB46E0C5FEF3E1F031
SHA1:	CDD442B25A5FCC769B0AE1C4974529FFC4475BEB
SHA-256:	E2FB54E1E177EC74BD10FD32A0D67F9EAFABFF76DDA71C9A90D8D395693A2C79
SHA-512:	EE7181D46B0E3D898F9BB3C16550B6E60E6ADB124C3FDC1B76B2F190EB60866315383F3566D0BA11AD8FE75D6B913293ADA7268F3C3570C169470257531C217F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/67920.83f748ec82f4e379de06.js
Preview:	...........\}w.F.......z.G......:..........B.@..XI.q..}.........<.[...;........Y...Q-.......\.N...Mq...f~..?.......7_...w..~...Y..A.p......?..aTk.z.v......6.N>.E.~..;Q...v..$.7..v.....m..Zu'..^.....F.Z-jFc..E#.t.Z..?B...a....?..q...^..;S\|l7.}\|\P.N...}..{.u...V.X.1..C.1..k4.36.l....:t;.&.}..:.n.(..u.\;.8W.s.<wN.7.s.9O.........y.<s^:.;......_.......qqD$..p.H."J.IJ'.3)3...&..H..E2). Z....$.8.....t.z....o"...,....{. ..E..;..(.....aq7...:...c..l.....E.f~!..Pu/.J\|.D.!.c1.?,..n..?.6.\|..a..._..%...".%.A~L...._$..O...Q&.E.X...%{{j...G..T.d..e..~.[.C!.0..^.,.4../."E}./@...y%e.N1.r/.F.\|...-..].i\D.K.6.O.`=.c.a..,Q.V.G.Q.g.-.MQqw....h^i\|...v".....(..2h.],r`&....pro...X.^\.k.h....L...w..~...`JX+......y.X.Dfc_3....l.(....w4w.l.D..&.<PN....n.(......lA..)..Xe...N..4M...9Q..#.`.....(.f~\..>b.Y...Z.m4._.v..w~T.(f{{.d....Lo.8.C\|.G .U....".....f.$.@.d.p.L.E.....,V+.X.....YR.m....U.r#..0...,..n?}................N...L^A.........8\...n.w...z.&.!.i.f.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17630
Category:	dropped
Size (bytes):	5811
Entropy (8bit):	7.967036072983005
Encrypted:	false
SSDEEP:	96:Ppu3Bgb7OjYnEJ+IKIqgag/6VclnnS/Iw3WjKcUAgc07cHt1wWFG3UhHEEUeFkBV:huxsiuEJ3zdD6VUS/v3WeAgOCsFEViUV
MD5:	618E767D6D994BB6BB005B72DAA09FCA
SHA1:	5576FDF89C0EFE5EB07697681D14F60D9A2CA06E
SHA-256:	FA76BFAB54228ED6EA9F09664B58954193A217D5AC8BF5F796901CE339D4753F
SHA-512:	36EF9241EC95D315653E4F1AC8DBF1169083329DB3610A145FC2DDCABEFFD278D51CED1C84D82D46F55D381CA7FD8B6B9D02152E931C91108FF43D6904D32250
Malicious:	false
Reputation:	low
Preview:	...........\..6...OA+...!..R.(.I.I..L23'.......J.S..I..Q...w.n.d.. )u;.=g..F...B.n.2:......j\.<..,..7.C....!......._.}.....z;~.nz7Y.wN.g0...a.........z.+.Y......k;5.N....D......SP.\|6..N.......v;..Nl'...?.j...y:.........g..;{g.l...[...%...I....,.sNc........cES{9+6...D.f_VAq...z.\|.......a._...r....V.U.o.jL...U..G%G.......Ks.}.r.X.....e.6....]7i~W,.......d....k....=.......X.i......5}...~._l.._.{U..P.../_./_.Y&,...f).9.y.B.`\...).l.....#..~`)~....<~......t..r\.yX...."..............S}.P......f..^..a..d.b". ."+6.d..%]?....y.=Hkt,mF.U....y.Q\.(.<...D..F...X^ ..Y.4E..XU.).E.......Vt#......8..E.)...<..T.{.1g5d!.e......y.........@O..hl..k..9....{....../.UA..CUAR?C....k......b....Ay..)z..9b.+...y........F..Vt.-f.2.Dq.l/..x;.c7sv.y...3....\Z..U........Q[.....7.jJ.Sm...!..uS6a...n.c.5$.y.....3..U...LF.}.R......4y...Wc......vFo...$.....U..[t.bc.....r$9..O...A.gPMX%...H+c......8....X..}XX\|;.G[.O...{wj%0LIy,.a..UaV.Qth....U.g..._O.yd.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 16:52:16.615201950 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.615242004 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:16.615304947 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.615459919 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.615483999 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:16.615533113 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.615840912 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.615853071 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:16.616121054 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:16.616137028 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.256580114 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.258625984 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.297142982 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.297168970 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.297312975 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.297344923 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.298290968 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.298381090 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.298430920 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.298458099 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.301960945 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.302047968 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.302397966 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.302489996 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.302704096 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.302716017 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.356189966 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.356205940 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.356623888 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.404474020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.460728884 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.460783958 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.460824966 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.460829020 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.460855961 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.460896969 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.461150885 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.461677074 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.461724043 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.461730957 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.469562054 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.469634056 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.622930050 CET	49736	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.622963905 CET	443	49736	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.658420086 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.666954994 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:17.667001963 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:17.667072058 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:17.667309046 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:17.667325974 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:17.703331947 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.791618109 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.791680098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.791766882 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.791796923 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.791949987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.791995049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.792002916 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.792365074 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.792395115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.792408943 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.792416096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.792454004 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.798043013 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.798136950 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.798191071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.798199892 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.841357946 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.908740044 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909013987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909069061 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.909085989 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909871101 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909905910 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909931898 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909933090 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.909945011 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.909969091 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.915545940 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.915585041 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.915612936 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:17.915625095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:17.915664911 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.218082905 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.218168974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.218211889 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.218230963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.218950987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.218985081 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.219021082 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.219032049 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.219069004 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.219896078 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.219952106 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.219995022 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.220002890 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.221167088 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.221209049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.221215963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.222549915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.222584963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.222587109 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.222598076 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.222659111 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.223020077 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225151062 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225177050 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225194931 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.225203037 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225233078 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225240946 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.225253105 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225291014 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.225291967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225305080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.225349903 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.225358009 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.261595964 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.261651993 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.261671066 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.262147903 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.262192011 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.262202978 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.263036966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.263070107 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.263075113 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.263082027 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.263113976 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.263119936 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.267405033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.267452002 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.267460108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.309917927 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.310286045 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.356322050 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.356334925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.401473999 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.401510000 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.401523113 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.401537895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.401578903 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.402950048 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.402996063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.403026104 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.403043032 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.403053999 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.403088093 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.403225899 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.428083897 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.428127050 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.428139925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.428167105 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.428205013 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.428214073 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.480796099 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.495944977 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.496014118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.496083021 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.496103048 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.496392012 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.496433020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.496443987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.497369051 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.497412920 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.497421980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.497859001 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.497895956 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.497905016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.502521038 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.502566099 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.502576113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.522869110 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.523264885 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.523292065 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.523798943 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.523813009 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.523864031 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.523886919 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.523947001 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.524513006 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.526781082 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.526859999 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.527151108 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.527170897 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.543668985 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.549278975 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.549349070 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.549384117 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.549401045 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.576543093 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.592598915 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.615788937 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.615858078 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.615890980 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.615911007 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.615943909 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.615982056 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.615991116 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.616512060 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.616566896 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.616574049 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.620512962 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.620560884 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.620573044 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.666209936 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.666270971 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.666302919 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.666515112 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.666557074 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.666565895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.716135979 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.733232021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.733289957 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.733340025 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.733360052 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.733814001 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.733855009 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.733863115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.734750032 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.734800100 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.734808922 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.734966993 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.735008001 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.735016108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.737771988 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.737814903 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.737823963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.779064894 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.786545038 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.786607027 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.786648035 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.786674023 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.786839008 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.787623882 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.787655115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.787672043 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.787683964 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.787729025 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.827899933 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.827922106 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.828438997 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.828489065 CET	443	49738	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:18.828537941 CET	49738	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:18.850573063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.851073980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.851103067 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.851119041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.851130962 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.851161003 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.851767063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.852473021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.852500916 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.852516890 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.852524996 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.852562904 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.852570057 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.855330944 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.855376959 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.855384111 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.904442072 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.904483080 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.904496908 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.904773951 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.904808044 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.904818058 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.951019049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.968195915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.968367100 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.968432903 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.968447924 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.968959093 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.969010115 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.969018936 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.969578981 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.969623089 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.969630003 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.970125914 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.970166922 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.970172882 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.972613096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:18.972656965 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:18.972665071 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.013427973 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.021795988 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.021955013 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.021998882 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.022015095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.022711992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.022751093 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.022758961 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.023355961 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.023406982 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.023415089 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.077707052 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.085716009 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.086220980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.086252928 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.086261034 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.086275101 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.086314917 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.086699009 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.087460995 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.087486982 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.087512970 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.087522984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.087558031 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.089732885 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.139106989 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.139159918 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.139179945 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.139199972 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.139342070 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.139590979 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.182775974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.182832003 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.182847977 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.203454971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.203511953 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.203528881 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.203572035 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.203780890 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.203789949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.204082966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.204138041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.204145908 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.204504967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.204554081 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.204570055 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.205310106 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.205415010 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.205424070 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.211345911 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.211412907 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.211422920 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.252753973 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.258330107 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.258388042 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.258446932 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.258465052 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.258850098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.258894920 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.258903980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.299463987 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.300507069 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.320394039 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:19.320502043 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:19.320853949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.320894957 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:19.320897102 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.320915937 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.320924997 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.320976973 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.321320057 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:19.321357965 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:19.321419001 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.321645021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.321768045 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.322010040 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.322053909 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.322947979 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.322992086 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.323031902 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.323048115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.323184967 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.323627949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.325146914 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.325345039 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.325360060 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.326786041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.335354090 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:19.335376024 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:19.335505962 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:19.339349031 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:19.339392900 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:19.373828888 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.375237942 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.375394106 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.375427961 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.375443935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.375797033 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.416064024 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.438080072 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.438231945 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.438235044 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.438261032 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.438723087 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.438733101 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.438816071 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.439069986 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.439080000 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.439301968 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.439774036 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.439783096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.439894915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.440319061 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.440326929 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.440687895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.440731049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.440741062 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.442297935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.442749023 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.442763090 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.493668079 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.494051933 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.494137049 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.494168043 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.494191885 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.533394098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.533531904 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.533914089 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.533931971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.534353971 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.555870056 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.555991888 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.556050062 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.556071997 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.556590080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.556770086 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.556780100 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.558474064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.558507919 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.558545113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.558650970 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.558660984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.558805943 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.559283972 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.559336901 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.559461117 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.559474945 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.559606075 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.560370922 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.606648922 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.606667042 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.608834028 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.608938932 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.608966112 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.611145020 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.611645937 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.611660957 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.652152061 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.652574062 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.652600050 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.676362038 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.676395893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.676516056 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.676544905 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.676733971 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.676781893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.677571058 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.677607059 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.677637100 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.677656889 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.677665949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.677707911 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.679672003 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.679704905 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.679733992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.679789066 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.679802895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.679846048 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.681268930 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.682054043 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.682074070 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.726361036 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.726541042 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.726562023 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.726636887 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.728713036 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.728755951 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.728805065 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.728813887 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.728966951 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.769074917 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.769382954 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.769397974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.793231964 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.793554068 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.793582916 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.793678999 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.793678999 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.793714046 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.794297934 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.794342995 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.794390917 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.794399977 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.794616938 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.795201063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.795691967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.795723915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.796025991 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.796036005 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.796338081 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.796535015 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.841185093 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.841490984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.843530893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.843561888 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.844002008 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.844019890 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.844192982 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.844254971 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.844264030 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.844608068 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.845967054 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.887084007 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.887111902 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.887177944 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.887207985 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.887341022 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.910624981 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911227942 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911266088 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911818981 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911844015 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911860943 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.911885023 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.911919117 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.912906885 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.913403034 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.913433075 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.913436890 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.913448095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.913501024 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.913501024 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.913512945 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.953691959 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.953723907 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.961065054 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.961095095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.961601973 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.961657047 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.961671114 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.962075949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.962115049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.962136030 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.962945938 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.963833094 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:19.970509052 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:19.970563889 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.004386902 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.004631042 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.004657984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.030462980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.030499935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.030637026 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.030679941 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.030992985 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031488895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031512022 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031526089 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.031539917 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031579971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031603098 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.031678915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031713963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031727076 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.031734943 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.031780005 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.032627106 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.032883883 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.032902956 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.033078909 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.078651905 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079169989 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079197884 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079636097 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079673052 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079680920 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.079708099 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.079794884 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.080250978 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.080451965 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.080461979 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.081207037 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.084431887 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.084440947 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.088905096 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.121536016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.146939993 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.147074938 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.147103071 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.147177935 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.147201061 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.147259951 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.147644043 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.148003101 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.148015976 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.148562908 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.148597002 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.148720026 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.148729086 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.148823023 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.149499893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.149547100 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.149573088 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.149960041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.149979115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.150257111 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.150465012 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.188982010 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.196264982 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.196433067 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.196496964 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.196989059 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.197236061 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.197256088 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.197453976 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.197484016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.197524071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.197541952 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.198342085 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.198410988 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.198415995 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.198795080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.198995113 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.199003935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.200623989 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:20.201188087 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:20.201212883 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:20.202699900 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:20.202879906 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:20.204118967 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:20.204236984 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:20.205413103 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.208700895 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.208707094 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.209404945 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.209427118 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.209520102 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.209520102 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.209525108 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.209714890 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.210114002 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.210556030 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.210614920 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.210711956 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.210721970 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.225471020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.238630056 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.238831043 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.238846064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.247534037 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:20.247565031 CET	443	49747	142.250.185.132	192.168.2.4
Nov 1, 2024 16:52:20.261485100 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.263932943 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.263971090 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.264019012 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.264039993 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.264585972 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.264594078 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.264799118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.265131950 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.265175104 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.265197039 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.265206099 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.265218973 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.265269041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.265269041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.266024113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.266073942 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.266263008 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.266278982 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.266443968 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.268527031 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.268537045 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.294420004 CET	49747	443	192.168.2.4	142.250.185.132
Nov 1, 2024 16:52:20.309617043 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.313555956 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.313654900 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.313698053 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.313709974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.314321995 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.314353943 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.314371109 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.314378977 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.314430952 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.315120935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.316864967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.316915989 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.316922903 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.356225967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.356255054 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.356287003 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.356301069 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.356379032 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.402527094 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.402682066 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.402738094 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.402748108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.404071093 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.404098988 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.404113054 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.404122114 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.404155016 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.405355930 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.405399084 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.405443907 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.405452013 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.406394958 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.406445980 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.406454086 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.407356024 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.407387972 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.407409906 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.407413006 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.407421112 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.407466888 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.431030035 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.431086063 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.431262016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.431695938 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.431782961 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.431793928 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.432995081 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.433023930 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.433039904 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.433048010 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.433130026 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.433727026 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.434288025 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.434319019 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.434331894 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.434340000 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.434372902 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.434818029 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.466989994 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.469933987 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.469981909 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.469990969 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.479513884 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.479525089 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.511420012 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.511425972 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.520747900 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.520778894 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.520798922 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.520811081 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.520891905 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.521421909 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.522241116 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.522269011 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.522290945 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.522300005 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.522362947 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.522799969 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.523520947 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.523577929 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.523586035 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.524650097 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.524693012 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.524701118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.525130033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.525165081 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.525197029 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.525206089 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.525276899 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.548544884 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.549532890 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.549556971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.549587965 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.549609900 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.549676895 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.550229073 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.550749063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.550796032 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.550805092 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.551745892 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.551803112 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.551812887 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.552567005 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.552592039 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.552620888 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.552639008 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.552679062 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.553445101 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.560005903 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.593657970 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.593931913 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.593977928 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.622064114 CET	49748	443	192.168.2.4	216.58.206.67
Nov 1, 2024 16:52:20.622073889 CET	443	49748	216.58.206.67	192.168.2.4
Nov 1, 2024 16:52:20.632973909 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.633117914 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.633137941 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.637710094 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.637862921 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.637882948 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.638261080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.638299942 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.638314009 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.638897896 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.638938904 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.638952971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.639841080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.639884949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.640043020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.640053034 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.640172958 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.640774012 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.640816927 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.640861034 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.640872955 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.641566992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.641593933 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.641611099 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.641623020 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.641743898 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.665597916 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.665846109 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.666275978 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.666289091 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.667061090 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.667084932 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.667212009 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.667222023 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.667330980 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.667889118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.668669939 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.668800116 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.668808937 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.669656992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.669697046 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.669713020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.669728041 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.669924021 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.670684099 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.671204090 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.671252966 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.671261072 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.754915953 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.755014896 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.755032063 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.755376101 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.755431890 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.755440950 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.756561041 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.756589890 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.756624937 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.756633997 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.756678104 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.757092953 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.757980108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.758043051 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.758050919 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.758667946 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.758712053 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.758729935 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.759474993 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.759565115 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.759572983 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.760262966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.760354996 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.760363102 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.784882069 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.784935951 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.784948111 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.785099030 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.785135984 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.785147905 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.786437988 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.786463022 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.786497116 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.786505938 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.786541939 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.787467003 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.787913084 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.787935019 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.787955046 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.787976027 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.788034916 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.788367987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.788908958 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.788980961 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.788989067 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.789654016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.789710999 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.789717913 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.839783907 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.857970953 CET	49750	443	192.168.2.4	184.28.90.27
Nov 1, 2024 16:52:20.858023882 CET	443	49750	184.28.90.27	192.168.2.4
Nov 1, 2024 16:52:20.858098030 CET	49750	443	192.168.2.4	184.28.90.27
Nov 1, 2024 16:52:20.867711067 CET	49750	443	192.168.2.4	184.28.90.27
Nov 1, 2024 16:52:20.867737055 CET	443	49750	184.28.90.27	192.168.2.4
Nov 1, 2024 16:52:20.868797064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.872245073 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.872294903 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.872311115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.872900963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.872968912 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.872977972 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874104023 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874134064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874207973 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.874217033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874255896 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.874872923 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874922037 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.874974012 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.874982119 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.875861883 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.875890970 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.875916004 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.875931978 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.875998020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.876786947 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.876863956 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.876914978 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.876921892 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.902061939 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.902160883 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.902188063 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.902199030 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.902240038 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.902501106 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.903047085 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.903094053 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.903105974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.903465033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.903517962 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.903525114 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.904103041 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.904141903 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.904159069 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.904166937 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.904222965 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.905066013 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.905592918 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.905658960 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.905668974 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.906249046 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.906384945 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.906393051 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.949706078 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.949717999 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.986109972 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.986171961 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.986182928 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.989993095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.990020990 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.990045071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.990053892 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.990103006 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.990686893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.992172956 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.992197990 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.992227077 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.992235899 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.992292881 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.992455959 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.993253946 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.993282080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.993303061 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.993311882 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.993351936 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.994218111 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.994259119 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.994287014 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.994307995 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.994318008 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:20.994369030 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:20.995126963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.019443035 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.019495010 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.019505024 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.020173073 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.020198107 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.020222902 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.020231009 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.020272970 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.020912886 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.021764994 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.021815062 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.021822929 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.022507906 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.022576094 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.022583008 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.023276091 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.023327112 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.023339033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.024322033 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.024346113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.024368048 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.024384022 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.024491072 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.025175095 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.065021992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.065073013 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.065085888 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.104171991 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.104212999 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.104234934 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.108304024 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.108325958 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.108364105 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.108371973 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.108433962 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.108968019 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.109812975 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.109838963 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.109874010 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.109888077 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.109932899 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.110625982 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111203909 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111228943 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111280918 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.111289978 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111329079 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.111869097 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111905098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.111949921 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.111958027 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.112879038 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.112903118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.112963915 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.112972021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.113157988 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.136878014 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.137382984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.137407064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.137434959 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.137448072 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.137557983 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.138130903 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.138448000 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.138506889 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.138514996 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.139834881 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.139861107 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.139880896 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.139899015 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.139906883 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.139945030 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.140542984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.140635014 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.140642881 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.141417980 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.141470909 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.141478062 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.141907930 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.142000914 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.142010927 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.181313992 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.181421041 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.181435108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.222402096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.222480059 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.222512960 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.225733995 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.225788116 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.225800037 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.226022959 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.226088047 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.226097107 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.227438927 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.227471113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.227488995 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.227499962 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.227546930 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.227832079 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.228514910 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.228543997 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.228564978 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.228573084 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.228615999 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.228622913 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.229334116 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.229378939 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.229387045 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.230149984 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.230178118 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.230207920 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.230211020 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.230221987 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.230281115 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.257023096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.257087946 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.257102966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.257488966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.257543087 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.257550955 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.258130074 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.258188963 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.258196115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.259038925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.259069920 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.259094000 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.259103060 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.259145021 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.259658098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264219999 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264252901 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264266968 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.264276028 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264375925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264388084 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.264394999 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.264467001 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.264473915 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.298633099 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.298671007 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.298724890 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.298737049 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.298929930 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.299052000 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.339338064 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.339432001 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.339445114 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.345630884 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.345771074 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.345779896 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.346389055 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.346416950 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.346443892 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.346471071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.346479893 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.346553087 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.347084045 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.347140074 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.347148895 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.347898960 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.347928047 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.347959042 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.347990990 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.348000050 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.348011971 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.348695040 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.348810911 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.348819971 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.349519014 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.349541903 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.349611998 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.349622011 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.349859953 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.350461960 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.373884916 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.374001980 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.374013901 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.374136925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.374476910 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.374485016 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.374722004 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.374778032 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.374785900 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.375857115 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.375890017 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.375933886 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.375943899 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.376168013 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.376511097 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.377228975 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.377276897 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.377295017 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.377305031 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.377587080 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.377856970 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.378520966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.378643990 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.378652096 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.379229069 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.379290104 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.379298925 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.416286945 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.416364908 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.416373968 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.416891098 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.416965961 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.416975021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.457031965 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.457067966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.457168102 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.457181931 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.457339048 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.463001966 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.463159084 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.463484049 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.463495970 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.464030981 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.464087963 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.464095116 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.465158939 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.465192080 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.465215921 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.465230942 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.465512037 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.465727091 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.465775967 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.466007948 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.466016054 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.467080116 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.467109919 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.467264891 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.467272043 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.467421055 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.467731953 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.468450069 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.468477011 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.468519926 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.468532085 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.472454071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.472466946 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.491497040 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.491868973 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.491888046 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.492347002 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.492453098 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.492461920 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.493017912 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.493143082 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.493150949 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.493478060 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.493621111 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.493629932 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.494190931 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.494316101 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.494327068 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.495628119 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.495666027 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.495695114 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.495711088 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.495851994 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.496368885 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.497129917 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.497157097 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.497198105 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.497206926 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.497406960 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.534077883 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.534533978 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.534568071 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.534601927 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.534612894 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.534636021 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.534743071 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.535490036 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.535593033 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.535602093 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.574369907 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.574459076 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.574471951 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.580557108 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.580692053 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.580701113 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.581161976 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.581583977 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.581618071 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.581646919 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.581655979 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.581717014 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.582151890 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.582181931 CET	443	49735	74.125.34.46	192.168.2.4
Nov 1, 2024 16:52:21.582201004 CET	49735	443	192.168.2.4	74.125.34.46
Nov 1, 2024 16:52:21.582207918 CET	443	49735	74.125.34.46	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 16:52:16.598841906 CET	192.168.2.4	1.1.1.1	0xd7b3	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:16.599147081 CET	192.168.2.4	1.1.1.1	0xa2a7	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 1, 2024 16:52:17.659142971 CET	192.168.2.4	1.1.1.1	0xdb54	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:17.659310102 CET	192.168.2.4	1.1.1.1	0xe5a4	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:52:19.310619116 CET	192.168.2.4	1.1.1.1	0x3837	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:19.310619116 CET	192.168.2.4	1.1.1.1	0x9f47	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 16:52:19.325198889 CET	192.168.2.4	1.1.1.1	0x8712	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:19.326430082 CET	192.168.2.4	1.1.1.1	0xb373	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:52:22.666726112 CET	192.168.2.4	1.1.1.1	0x89b3	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:22.667078972 CET	192.168.2.4	1.1.1.1	0x51ee	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 1, 2024 16:52:23.067112923 CET	192.168.2.4	1.1.1.1	0xe694	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:23.067112923 CET	192.168.2.4	1.1.1.1	0xf5a2	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:52:24.305288076 CET	192.168.2.4	1.1.1.1	0x7aed	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:24.305449963 CET	192.168.2.4	1.1.1.1	0x445e	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:52:25.164797068 CET	192.168.2.4	1.1.1.1	0x9c9c	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:25.165009022 CET	192.168.2.4	1.1.1.1	0x9d9c	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:52:31.784508944 CET	192.168.2.4	1.1.1.1	0x7307	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:31.784693956 CET	192.168.2.4	1.1.1.1	0x85ba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 16:52:33.209346056 CET	192.168.2.4	1.1.1.1	0xf036	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:33.209479094 CET	192.168.2.4	1.1.1.1	0xc12e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 16:53:30.357763052 CET	192.168.2.4	1.1.1.1	0x46bf	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 1, 2024 16:53:30.357763052 CET	192.168.2.4	1.1.1.1	0x2293	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:32.051973104 CET	192.168.2.4	1.1.1.1	0x864	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:32.052128077 CET	192.168.2.4	1.1.1.1	0x741d	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 1, 2024 16:53:32.768439054 CET	192.168.2.4	1.1.1.1	0x9f44	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:32.768981934 CET	192.168.2.4	1.1.1.1	0x49b6	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 1, 2024 16:53:33.060302019 CET	192.168.2.4	1.1.1.1	0xbc4e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.060857058 CET	192.168.2.4	1.1.1.1	0x1e75	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 1, 2024 16:53:34.788302898 CET	192.168.2.4	1.1.1.1	0x3a7f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.788933039 CET	192.168.2.4	1.1.1.1	0x3649	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 1, 2024 16:53:37.176656008 CET	192.168.2.4	1.1.1.1	0xccbf	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.176778078 CET	192.168.2.4	1.1.1.1	0xe3d8	Standard query (0)	www.youtube.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 16:52:16.606709957 CET	1.1.1.1	192.168.2.4	0xd7b3	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:16.606709957 CET	1.1.1.1	192.168.2.4	0xd7b3	No error (0)	ghs-svc-https-c46.ghs-ssl.googlehosted.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:16.607343912 CET	1.1.1.1	192.168.2.4	0xa2a7	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:17.666106939 CET	1.1.1.1	192.168.2.4	0xdb54	No error (0)	www.recaptcha.net		216.58.206.67	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:19.318176985 CET	1.1.1.1	192.168.2.4	0x9f47	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 16:52:19.318198919 CET	1.1.1.1	192.168.2.4	0x3837	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:19.333152056 CET	1.1.1.1	192.168.2.4	0x8712	No error (0)	www.recaptcha.net		216.58.206.67	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:22.674314022 CET	1.1.1.1	192.168.2.4	0x89b3	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:22.674314022 CET	1.1.1.1	192.168.2.4	0x89b3	No error (0)	ghs-svc-https-c46.ghs-ssl.googlehosted.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:22.674556017 CET	1.1.1.1	192.168.2.4	0x51ee	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:23.074017048 CET	1.1.1.1	192.168.2.4	0xe694	No error (0)	recaptcha.net		142.250.74.195	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:24.312194109 CET	1.1.1.1	192.168.2.4	0x7aed	No error (0)	recaptcha.net		142.250.185.131	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:25.171773911 CET	1.1.1.1	192.168.2.4	0x9c9c	No error (0)	recaptcha.net		142.250.185.131	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:28.772856951 CET	1.1.1.1	192.168.2.4	0xa4ef	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:28.772856951 CET	1.1.1.1	192.168.2.4	0xa4ef	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:30.829297066 CET	1.1.1.1	192.168.2.4	0x89f4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:30.829297066 CET	1.1.1.1	192.168.2.4	0x89f4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:31.793665886 CET	1.1.1.1	192.168.2.4	0x7307	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:31.793680906 CET	1.1.1.1	192.168.2.4	0x85ba	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 16:52:33.397491932 CET	1.1.1.1	192.168.2.4	0xc12e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 16:52:33.397504091 CET	1.1.1.1	192.168.2.4	0xf036	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:52:43.600271940 CET	1.1.1.1	192.168.2.4	0x8a70	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:52:43.600271940 CET	1.1.1.1	192.168.2.4	0x8a70	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:05.845244884 CET	1.1.1.1	192.168.2.4	0x91c9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:05.845244884 CET	1.1.1.1	192.168.2.4	0x91c9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:30.365122080 CET	1.1.1.1	192.168.2.4	0x2293	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:30.365122080 CET	1.1.1.1	192.168.2.4	0x2293	No error (0)	ghs-svc-https-c46.ghs-ssl.googlehosted.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:30.420106888 CET	1.1.1.1	192.168.2.4	0x46bf	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:32.059482098 CET	1.1.1.1	192.168.2.4	0x864	No error (0)	recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:32.776364088 CET	1.1.1.1	192.168.2.4	0x9f44	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:32.776364088 CET	1.1.1.1	192.168.2.4	0x9f44	No error (0)	ghs-svc-https-c46.ghs-ssl.googlehosted.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:32.792568922 CET	1.1.1.1	192.168.2.4	0x49b6	No error (0)	www.virustotal.com	ghs-svc-https-c46.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.067698956 CET	1.1.1.1	192.168.2.4	0xbc4e	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:33.068883896 CET	1.1.1.1	192.168.2.4	0x1e75	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:33.068883896 CET	1.1.1.1	192.168.2.4	0x1e75	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:34.795834064 CET	1.1.1.1	192.168.2.4	0x3a7f	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183813095 CET	1.1.1.1	192.168.2.4	0xccbf	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183944941 CET	1.1.1.1	192.168.2.4	0xe3d8	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 16:53:37.183944941 CET	1.1.1.1	192.168.2.4	0xe3d8	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:17 UTC	741	OUT	GET /gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:17 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:52:17 GMT Expires: Fri, 01 Nov 2024 15:53:17 GMT Cache-Control: public, max-age=60 ETag: "b_UujA" X-Cloud-Trace-Context: ee9556153cea53ce9527c508cb043f65 Content-Type: text/html Server: Google Frontend Transfer-Encoding: chunked Connection: close
2024-11-01 15:52:17 UTC	1107	IN	Data Raw: 63 39 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6e 2c 67 29 7b 65 5b 6e 5d 3d 65 5b 6e 5d 7c 7c 5b 5d 2c 65 5b 6e 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 6d 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 5b 30 5d 2c 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 3b 72 2e 61 73 79 6e 63 3d 21 30 2c 72 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 Data Ascii: c92<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gt
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 67 65 6e 74 49 64 22 3a 22 32 31 36 36 65 35 37 30 2d 38 31 37 33 2d 34 63 39 34 2d 38 32 37 30 2d 36 64 35 35 39 66 65 64 36 33 62 30 22 2c 22 62 61 73 65 22 3a 22 2f 67 75 69 2f 22 2c 22 65 72 72 6f 72 53 65 72 76 69 63 65 22 3a 22 76 69 72 75 73 74 6f 74 61 6c 2d 75 69 2d 6d 61 69 6e 22 2c 22 63 6f 6e 73 6f 6c 65 50 72 6f 6d 70 74 22 3a 66 61 6c 73 65 2c 22 67 61 4b 65 79 22 3a 22 55 41 2d 32 37 34 33 33 35 34 37 2d 32 22 2c 22 72 65 63 61 70 74 63 68 61 56 33 53 69 74 65 4b 65 79 22 3a 22 36 4c 64 6a 67 64 30 6b 41 41 41 41 41 49 54 6d 37 69 70 57 46 37 6f 37 6b 50 4c 5f 38 31 53 61 53 66 64 49 4e 69 4f 63 22 2c 22 62 75 69 6c 64 49 6e 66 6f 22 3a 7b 22 62 72 61 6e 63 68 22 3a 22 68 65 61 64 73 2f 6d 61 73 74 65 72 2d 30 2d 67 62 65 31 32 65 39 34 22 Data Ascii: gentId":"2166e570-8173-4c94-8270-6d559fed63b0","base":"/gui/","errorService":"virustotal-ui-main","consolePrompt":false,"gaKey":"UA-27433547-2","recaptchaV3SiteKey":"6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc","buildInfo":{"branch":"heads/master-0-gbe12e94"
2024-11-01 15:52:17 UTC	710	IN	Data Raw: 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 33 66 35 31 62 35 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 74 79 6c 65 20 63 75 73 74 6f 6d 2d 73 74 79 6c 65 3d 22 22 20 63 73 73 2d 70 6f 6e 79 66 69 6c 6c 3d 22 22 3e 3a 72 6f 6f 74 7b 2d 2d 76 74 2d 75 69 2d 64 65 74 65 63 74 69 6f 6e 73 2d 6c 69 73 74 2d 62 6f 64 79 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 76 74 2d 75 69 2d 6b 65 79 2d 76 61 6c 2d 74 61 62 6c 65 2d 70 72 6f 70 65 72 74 79 Data Ascii: n-TileColor" content="#3f51b5"><meta name="msapplication-tap-highlight" content="no"><meta name="referrer" content="origin"><style custom-style="" css-ponyfill="">:root{--vt-ui-detections-list-body-color:var(--bs-body-color);--vt-ui-key-val-table-property
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 66 63 36 0d 0a 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 2d 6c 69 73 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 76 74 2d 75 69 2d 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 2d 6c 69 73 74 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 72 69 6d 61 72 79 29 3b 2d 2d 76 74 2d 75 69 2d 73 69 6d 70 6c 65 2d 65 78 70 61 6e 64 61 62 6c 65 2d 6c 69 73 74 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d 2d 76 74 2d 75 69 2d 6b 65 79 2d 76 61 6c 2d 74 61 62 6c 65 2d 70 72 6f 70 65 72 74 79 2d 6c 69 73 74 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d Data Ascii: fc6ndable-detail-list-color:var(--bs-body-color);--vt-ui-expandable-detail-list-link-hover-color:var(--bs-primary);--vt-ui-simple-expandable-list-font-size:var(--bs-body-font-size);--vt-ui-key-val-table-property-list-font-size:var(--bs-body-font-size);-
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 2d 62 61 63 6b 64 72 6f 70 2c 69 72 6f 6e 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 64 72 6f 70 7b 7a 2d 69 6e 64 65 78 3a 31 30 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2a 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 2e 63 61 70 74 63 68 61 43 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 37 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 7d 2e 63 61 70 74 63 68 61 43 6f 6e 74 Data Ascii: dropdown-backdrop,iron-overlay-backdrop{z-index:101!important}*{-webkit-tap-highlight-color:transparent}</style><style>.captchaContainer{display:none;position:absolute;background:rgba(255,255,255,.7);z-index:10000;width:100%;height:100%;top:0}.captchaCont
2024-11-01 15:52:17 UTC	1229	IN	Data Raw: 67 65 3d 21 31 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 76 69 65 77 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 2f 72 65 63 61 70 74 63 68 61 2f 65 6e 74 65 72 70 72 69 73 65 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 69 61 6c 6f 67 66 6c 6f 77 2d 63 6f 6e 73 6f 6c 65 2f 66 61 73 74 2f 64 66 2d 6d 65 73 73 65 6e 67 65 72 2f Data Ascii: ge=!1</script><noscript>Please enable JavaScript to view this website.</noscript><script src="https://www.recaptcha.net/recaptcha/enterprise.js" async="" defer=""></script><script async="" src="https://www.gstatic.com/dialogflow-console/fast/df-messenger/
2024-11-01 15:52:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:17 UTC	553	OUT	GET /gui/main.57341db7f55d9342c505.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:17 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 61afe00092ffa4b9a49c8b26e9416631 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:19:01 GMT Expires: Fri, 31 Oct 2025 12:19:01 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99196 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:17 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 31 0d 0a bd 0d 0a 30 66 66 34 0d 0a 6d 5b 1b b9 b2 36 fa 7d ff 0a c7 3b 87 cb 1e 1a 63 9b 77 93 0e db 80 49 98 01 cc 60 48 26 c3 62 b3 0c 6e c0 13 e3 66 ec 36 81 01 fe fb 73 57 a9 4a 52 fb 8d cc 9c 67 9d f3 25 d7 95 98 ee 52 a9 f4 5e 2a dd 2a a9 73 b9 7c f8 fe e9 be d9 cb 9c 9f 7f 8b 2e ee 9a 97 5f cf 6f e3 d6 a0 13 f5 cf cf c3 a7 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001010ff4m[6};cwI`H&bnf6sWJRg%R^**s\|._o
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 72 3f 73 3b e8 27 99 9b e6 7d 84 c1 3b d2 d0 b9 7c e6 36 4a 6e e2 56 21 9b 7f c9 e5 5f 34 bb 19 93 7f 6a 2c a3 dc b2 34 bc ba d7 59 d4 b1 e9 3c 91 aa b7 36 97 74 dd f4 b9 a7 97 42 12 37 98 55 5b bf d0 a7 d1 9f 5b 0d e6 4a f9 75 53 4f 59 53 b5 10 16 f6 d0 fd 0a 97 e8 dd 5c e4 18 af e8 39 29 4a a1 db bc 45 2b 67 f7 9b 77 1c e1 f9 39 db 88 12 7e dc 30 2a f7 aa 17 df 22 9b 95 6c b5 77 3d b8 8d ba 49 5f 18 e7 ff 37 b7 51 39 69 3f ef e6 bb 09 9e 56 9f 4b cb cf 0b e5 3c 1e b7 3a cd db bb a8 95 37 12 de ce 17 12 54 3a 3a e4 86 29 4d e5 3e 46 9b 14 5f 5c 7d 18 fa 13 0f 02 d4 c1 f3 73 f2 3e 92 7e 47 7d 32 41 9e 4d 2f cc af 53 f7 35 b5 51 0c ba a1 99 0d d0 31 7b ef 92 f5 de ec 6c be 7b da 3b 0b 23 fc 48 65 64 ba 2f bd 42 2b 97 04 4f d5 db 0a 4d 52 e7 c1 4e 95 1f 36 Data Ascii: r?s;'};\|6JnV!_4j,4Y<6tB7U[[JuSOYS\9)JE+gw9~0*"lw=I_7Q9i?VK<:7T::)M>F_\}s>~G}2AM/S5Q1{l{;#Hed/B+OMRN6
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 1c bf ca 46 b3 65 cb 96 aa 09 9b fc 94 0a 44 4c 28 88 97 f5 1f 88 ce 0f 44 e7 3f 86 e8 5c 76 9a c0 93 3a 40 96 92 a8 db ea 67 d8 7c 34 7a 8f 70 01 98 72 f9 a7 fe 00 60 51 ae 50 28 34 75 cd 2b 83 9b 56 cb 61 76 9b 8d 97 cd 66 3f 5a 5e 34 76 03 0b c9 be bc 98 a5 58 2b b5 3c 13 f4 62 9c d1 42 e6 90 2e 54 fb 85 61 63 29 09 00 b6 00 f2 c8 03 35 b9 eb 34 b1 cc 9f ff 57 61 fe 3a 60 db ec 32 95 06 c1 2e 8a 92 a4 66 52 98 6d 24 c4 02 36 94 c1 b8 13 15 22 03 90 5c 70 19 4c 79 32 57 4d a0 97 ad 4a 26 1b 60 18 8a 34 9a 53 5e 1f 90 e5 f2 0f 88 f5 07 c4 fa 0f 21 d6 ff 32 83 06 eb 18 80 31 af a9 fe 1f 3d ed 07 98 ff 8f c1 fc ff b2 3a 98 01 85 71 a8 7d 3f ea 5c 29 f6 4a cf 64 fa 8e e3 fb d6 ee b6 e2 6f ca 69 de 26 f1 5e 77 e2 8b 66 47 79 cd db ba c3 ab 05 bf 38 e9 f2 9e Data Ascii: FeDL(D?\v:@g\|4zpr`QP(4u+Vavf?Z^4vX+<bB.Tac)54Wa:`2.fRm$6"\pLy2WMJ&`4S^!21=:q}?\)Jdoi&^wfGy8
2024-11-01 15:52:17 UTC	367	IN	Data Raw: de 62 8d ff 82 35 fe cb fc f5 8f ad a2 1f ce bf ff 39 e7 5f 1d 1a 19 5e df 91 97 8f 0c 48 72 94 8e f2 40 d6 8c ab a5 a7 0f 6e 9a fd fa b7 2e b4 0e 36 90 92 47 f1 d2 44 0f 16 5c 0b 4e bc 66 99 f8 a6 e8 a6 9a b7 c6 b7 06 e2 22 4c 94 89 b2 ea b4 d2 0b 25 95 af d1 63 1f 5a 01 c3 d8 27 c0 f9 91 72 46 ea 3a 0e 8b 18 63 3d f8 f2 b5 75 27 3b 26 8f 3f 93 eb 5e d8 3e 8d d9 f1 e5 4d 17 13 cd 65 67 00 5f 58 ac 44 35 bd 92 4c 63 ec e0 71 46 ee 48 34 ce 91 ab 9d 5c 13 16 cd 4e ae 9f 37 7e 58 6f 73 f0 4c 76 d1 ac 4f 4b 13 a6 42 df 4a 7b d1 5c 35 91 ab 7e d8 5d 6f be 53 5f e2 f5 a6 cb 55 14 f6 4f 9b 26 57 3d 97 2b eb df 8f 89 69 b4 c2 76 dc 72 3b 43 78 19 99 28 b0 38 86 ad 91 d7 8f 06 fc d8 4d f8 81 3f fd 73 fc e9 c7 9a f8 c7 9a f8 3f 75 ee c4 ad 89 cf 7d 43 50 9c 4d d5 Data Ascii: b59_^Hr@n.6GD\Nf"L%cZ'rF:c=u';&?^>Meg_XD5LcqFH4\N7~XosLvOKBJ{\5~]oS_UO&W=+ivr;Cx(8M?s?u}CPM
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 30 30 30 30 30 31 0d 0a c2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3c 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001~0000000100000001<0000000100000001000000010000000100000001000000010000000100000001
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: d8 0f 7c 86 37 b1 7c 6d 61 e9 b4 85 8b 6d ba c9 11 5d db 82 fd 7c 8a 5a 2d ec ed 42 50 e1 5b bb 95 dc e4 e7 a3 42 7c 75 85 ed ec cf f4 fa fc 5c c2 02 c9 63 ba 89 e8 aa 23 c7 f5 91 df c1 a6 eb f0 12 cc 15 b8 09 d0 9f 2e 59 b6 c1 35 45 6f 15 aa 9c d7 2b 7a e9 d2 4b 14 dc 62 35 18 dc 84 4f 58 b4 c7 9d ce 5e 74 95 d0 c9 74 7e 39 8e ef 2a 45 98 94 e1 d3 03 68 8f 78 16 f1 39 78 c0 bc b9 83 a7 4c 8f 2e eb c8 65 2f e2 d6 23 ee c1 21 a9 7d 93 04 66 d9 62 70 49 cf d7 79 e2 b9 09 71 34 3d a1 ab 5f 40 6f 13 7d 40 64 ad bf 41 7e c3 cf 40 ee 22 1c 00 bd b3 39 f2 f2 73 21 64 e4 ed a5 82 f8 b1 91 95 0f ac ac 04 37 4c e4 ee 6d 09 f9 4c 55 be f0 30 1b 92 03 05 d5 3a 95 31 b8 2f 3c 3a 0a 84 e5 2b d7 c8 cf 7d e1 81 22 76 24 e3 f9 00 25 bf 82 01 7b 95 cc de 78 f9 99 03 1f ea Data Ascii: \|7\|mam]\|Z-BP[B\|u\c#.Y5Eo+zKb5OX^tt~9*Ehx9xL.e/#!}fbpIyq4=_@o}@dA~@"9s!d7LmLU0:1/<:+}"v$%{x
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 5f 6f 3e 34 ca 9c 6d c5 a3 38 4e 0e e0 e2 0b 60 93 0c 1e 7d 05 e0 8e ea 31 53 1f ee 46 ed 63 d5 62 c1 73 0a a1 05 18 ad 5a 0e ae 69 24 6b 77 4e d6 5b f1 13 42 63 5a 79 b6 fb 0d a8 27 92 8d 9b 9c 5c e4 18 fd 16 07 54 31 f9 52 10 6c c7 c2 0d ce 51 be 7c bb 81 17 3e 18 1d f4 fe 12 f0 0a f3 bb ca 8c c6 b6 eb 52 53 66 72 1b e0 65 e4 f0 aa 94 ee c2 5d f1 2c 79 58 cf 66 13 ce da 5b 84 d3 93 8e f1 30 fa f4 7a 93 f6 41 26 2d 1f 3b c0 95 5b 21 2e 0b 95 0a a2 05 29 df ec d9 21 f5 ef 56 91 ef 8b cc 10 f3 42 b3 3f 71 a1 d9 b2 b1 cc aa 72 28 9a 59 c7 8c 59 7a 9a ea c0 85 65 dc 4a ce a8 e1 d5 1e 8c 1a 73 86 22 5f b8 6f f7 07 cd ce a7 76 f4 ed 2e ee 25 b0 cb de 20 42 93 f4 2d 56 84 3d 3a da 4c a0 34 56 5c b9 2a 90 dd 8d 4b 29 82 59 99 e6 f3 f3 1d 1c a8 05 0b 2d bd d2 1c Data Ascii: _o>4m8N`}1SFcbsZi$kwN[BcZy'\T1RlQ\|>RSfre],yXf[0zA&-;[!.)!VB?qr(YYzeJs"_ov.% B-V=:L4V\*K)Y-
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: 0b 01 a5 72 59 db 21 65 1c 18 4d 9b 26 7a a3 7f 61 de 0e e5 27 af c7 44 7b 9c 33 82 1e 90 1f 9e ee 81 ac 57 c3 e6 06 ae 81 56 4c f6 72 68 35 c6 3b 42 9a fd 36 ae ef 07 be 9c 87 57 23 f6 ee 34 4a d5 5a 48 cd 8d 41 65 a0 e4 96 2d 66 95 fd 5c 30 0a b0 7d f5 4a 5b 6e 9b 2d de eb a0 76 c8 ba e5 31 f8 b0 cf 0f b5 60 6f 87 1f 6e 82 bd 0f fc b0 15 ec 9b 1b fa b7 83 fd 2e 53 ba 41 dd 30 77 82 7a 87 29 b7 c1 91 e1 19 04 b8 39 9d ee c2 da 0c 3e 9b 1b fa ab c1 f9 01 53 2e 83 cb 36 3f 5c 05 6d 73 c9 fe b7 a0 6d ee e1 bf 0b be 1a 5d d7 0c ba 86 07 2b 49 33 50 1f 82 3b 93 8d 76 f0 a7 b9 cf bf 1f f4 cd d7 00 e2 e0 1e f3 3e d2 ba 0f 1e ae f8 e1 c2 f6 cd 2c d6 95 74 d2 db ee 48 b5 c3 2c 2f 32 b3 68 c5 2c ad 2c b3 f0 97 cc d2 00 c9 62 f3 e4 54 be 02 72 06 db 99 8c d5 1e 82 Data Ascii: rY!eM&za'D{3WVLrh5;B6W#4JZHAe-f\0}J[n-v1`on.SA0wz)9>S.6?\msm]+I3P;v>,tH,/2h,,bTr
2024-11-01 15:52:17 UTC	1408	IN	Data Raw: a1 e5 ce 93 61 7d 85 40 f6 33 8c 90 fb fa 3e d4 4e 6e 00 7c a6 45 4e 96 a4 f1 d8 11 90 57 63 17 f9 00 d6 e4 23 c1 80 d7 1b d5 02 56 11 5c 66 98 94 96 06 93 9e aa 20 78 44 9d 72 b6 f0 2b 13 f3 e9 d5 d9 ec 28 f1 fa 6c ee ee 14 3f 1a 62 f4 07 78 83 87 30 15 e0 e4 5c 9f c1 3c 45 a6 31 ad e5 73 c8 d3 66 b8 bd a1 39 d8 16 0f 45 b3 b5 f1 fc 5c ac 28 e5 b3 71 03 2d c2 0f b3 16 3e ce 97 e7 1e e6 cb c1 d7 f0 e6 74 eb 2c 78 1b 6e ce dd 23 cd b9 9b d3 6f 67 c1 4e b8 89 60 7a 9f 2f cf d6 82 73 b3 fa 1b e4 73 5f 83 9d e0 6d 3e d8 0d af d7 87 7a cc 69 fb 0c bb 76 09 b9 91 9d ee 9e 85 e7 50 72 38 e7 0f 1b dc f4 a1 f0 7c 6e 07 8b 53 0c b0 ef d0 e6 b6 af 6a 3f 4d fb 9e 65 4f c9 97 61 ce d4 d3 1c eb c4 b3 2c 3c aa 68 35 8b 5b 85 30 8f e9 45 6f b6 91 01 fe e2 c3 85 4e f3 a9 Data Ascii: a}@3>Nn\|ENWc#V\f xDr+(l?bx0\<E1sf9E\(q->t,xn#ogN`z/ss_m>zivPr8\|nSj?MeOa,<h5[0EoN
2024-11-01 15:52:17 UTC	1405	IN	Data Raw: 29 fa c9 33 6c fb 8c 28 13 92 84 db b7 4d 92 cd 7d 83 84 0e 99 fb 82 2d 10 58 68 91 4a 02 c2 c7 0d b0 c9 e0 c2 84 39 cf c0 0c 64 9a e1 c8 52 4a fb c2 31 bc 70 de ff da c6 5a 5f 1d ac b0 50 c1 81 87 76 b7 8a 93 62 18 27 76 50 f1 78 03 c0 5b 68 76 12 0e bb 70 61 83 e7 e7 01 c3 14 57 f2 ed 84 43 5d 50 f4 09 f2 b5 ab 75 1c 7a c3 96 25 56 05 cd de 23 96 08 34 95 c6 e6 c0 24 11 6e 8c 70 3e 40 49 ef f7 78 a7 3a f8 a4 13 66 3f b5 66 c0 77 54 b0 64 a0 fc 60 97 3a 6a 55 b1 b5 e2 25 fb 88 f5 a4 62 8c 56 3b 62 2d a1 b6 d7 63 1e 8b 74 1c 72 cc 3d c0 06 7c c4 61 c7 ad 8d d3 38 f7 88 ef 7b 3a 73 90 bd 60 34 42 94 07 e3 65 e1 cf df c5 6b 08 a7 f1 a8 b5 12 be 62 46 60 c7 53 de be 4d 02 f2 6c 3e 7b 81 34 5a 6b 9c 3e da cd d8 ed b1 00 dc 98 a3 38 9a 28 ee e8 35 89 0e 1b a9 Data Ascii: )3l(M}-XhJ9dRJ1pZ_Pvb'vPx[hvpaWC]Puz%V#4$np>@Ix:f?fwTd`:jU%bV;b-ctr=\|a8{:s`4BekbF`SMl>{4Zk>8(5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	216.58.206.67	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:18 UTC	542	OUT	GET /recaptcha/enterprise.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:18 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 01 Nov 2024 15:52:18 GMT Date: Fri, 01 Nov 2024 15:52:18 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:18 UTC	629	IN	Data Raw: 37 32 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-11-01 15:52:18 UTC	1216	IN	Data Raw: 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d Data Ascii: rial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksIm
2024-11-01 15:52:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	216.58.206.67	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:20 UTC	364	OUT	GET /recaptcha/enterprise.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:20 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 01 Nov 2024 15:52:20 GMT Date: Fri, 01 Nov 2024 15:52:20 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:20 UTC	629	IN	Data Raw: 37 32 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-11-01 15:52:20 UTC	1216	IN	Data Raw: 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d Data Ascii: rial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksIm
2024-11-01 15:52:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 15:52:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=89600 Date: Fri, 01 Nov 2024 15:52:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 15:52:23 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=89656 Date: Fri, 01 Nov 2024 15:52:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-01 15:52:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	374	OUT	GET /gui/main.57341db7f55d9342c505.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:23 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 50c7589e9642f590cfcd3d61f401f624 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:20:24 GMT Expires: Fri, 31 Oct 2025 12:20:24 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99119 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:23 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 66 66 38 0d 0a 02 ff ec bd 6d 5b 1b b9 b2 36 fa 7d ff 0a c7 3b 87 cb 1e 1a 63 9b 77 93 0e db 80 49 98 01 cc 60 48 26 c3 62 b3 0c 6e c0 13 e3 66 ec 36 81 01 fe fb 73 57 a9 4a 52 fb 8d cc 9c 67 9d f3 25 d7 95 98 ee 52 a9 f4 5e 2a dd 2a a9 73 b9 7c f8 fe e9 be d9 cb 9c 9f 7f 8b 2e ee 9a 97 5f cf 6f e3 d6 a0 13 f5 cf cf c3 a7 72 b9 b4 bc 56 c9 45 41 12 f4 88 31 3b e8 47 99 7e d2 6b 5f 26 d9 f5 ab 41 f7 32 69 c7 dd 4c 97 18 f2 4f bd 28 19 f4 ba Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000ff8m[6};cwI`H&bnf6sWJRg%R^**s\|._orVEA1;G~k_&A2iLO(
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: bc ba d7 59 d4 b1 e9 3c 91 aa b7 36 97 74 dd f4 b9 a7 97 42 12 37 98 55 5b bf d0 a7 d1 9f 5b 0d e6 4a f9 75 53 4f 59 53 b5 10 16 f6 d0 fd 0a 97 e8 dd 5c e4 18 af e8 39 29 4a a1 db bc 45 2b 67 f7 9b 77 1c e1 f9 39 db 88 12 7e dc 30 2a f7 aa 17 df 22 9b 95 6c b5 77 3d b8 8d ba 49 5f 18 e7 ff 37 b7 51 39 69 3f ef e6 bb 09 9e 56 9f 4b cb cf 0b e5 3c 1e b7 3a cd db bb a8 95 37 12 de ce 17 12 54 3a 3a e4 86 29 4d e5 3e 46 9b 14 5f 5c 7d 18 fa 13 0f 02 d4 c1 f3 73 f2 3e 92 7e 47 7d 32 41 9e 4d 2f cc af 53 f7 35 b5 51 0c ba a1 99 0d d0 31 7b ef 92 f5 de ec 6c be 7b da 3b 0b 23 fc 48 65 64 ba 2f bd 42 2b 97 04 4f d5 db 0a 4d 52 e7 c1 4e 95 1f 36 83 5d 4c 49 a0 ec 06 bb 26 e8 6b f0 cb 80 29 47 c1 b1 09 ba 0b 8e ff 60 ca 45 70 62 1e 5a c1 6f 26 fa 6d f0 fb af 1c 74 Data Ascii: Y<6tB7U[[JuSOYS\9)JE+gw9~0*"lw=I_7Q9i?VK<:7T::)M>F_\}s>~G}2AM/S5Q1{l{;#Hed/B+OMRN6]LI&k)G`EpbZo&mt
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: ea 67 d8 7c 34 7a 8f 70 01 98 72 f9 a7 fe 00 60 51 ae 50 28 34 75 cd 2b 83 9b 56 cb 61 76 9b 8d 97 cd 66 3f 5a 5e 34 76 03 0b c9 be bc 98 a5 58 2b b5 3c 13 f4 62 9c d1 42 e6 90 2e 54 fb 85 61 63 29 09 00 b6 00 f2 c8 03 35 b9 eb 34 b1 cc 9f ff 57 61 fe 3a 60 db ec 32 95 06 c1 2e 8a 92 a4 66 52 98 6d 24 c4 02 36 94 c1 b8 13 15 22 03 90 5c 70 19 4c 79 32 57 4d a0 97 ad 4a 26 1b 60 18 8a 34 9a 53 5e 1f 90 e5 f2 0f 88 f5 07 c4 fa 0f 21 d6 ff 32 83 06 eb 18 80 31 af a9 fe 1f 3d ed 07 98 ff 8f c1 fc ff b2 3a 98 01 85 71 a8 7d 3f ea 5c 29 f6 4a cf 64 fa 8e e3 fb d6 ee b6 e2 6f ca 69 de 26 f1 5e 77 e2 8b 66 47 79 cd db ba c3 ab 05 bf 38 e9 f2 9e 0c 20 ea 4e 0c 75 8d 9d 0b 8e 26 48 b3 41 90 0b e7 e7 3b bb 47 35 82 82 ce 01 03 55 4f f6 8e 1b e7 e7 58 f1 f3 f6 9b 37 Data Ascii: g\|4zpr`QP(4u+Vavf?Z^4vX+<bB.Tac)54Wa:`2.fRm$6"\pLy2WMJ&`4S^!21=:q}?\)Jdoi&^wfGy8 Nu&HA;G5UOX7
2024-11-01 15:52:23 UTC	327	IN	Data Raw: 0f 6e 9a fd fa b7 2e b4 0e 36 90 92 47 f1 d2 44 0f 16 5c 0b 4e bc 66 99 f8 a6 e8 a6 9a b7 c6 b7 06 e2 22 4c 94 89 b2 ea b4 d2 0b 25 95 af d1 63 1f 5a 01 c3 d8 27 c0 f9 91 72 46 ea 3a 0e 8b 18 63 3d f8 f2 b5 75 27 3b 26 8f 3f 93 eb 5e d8 3e 8d d9 f1 e5 4d 17 13 cd 65 67 00 5f 58 ac 44 35 bd 92 4c 63 ec e0 71 46 ee 48 34 ce 91 ab 9d 5c 13 16 cd 4e ae 9f 37 7e 58 6f 73 f0 4c 76 d1 ac 4f 4b 13 a6 42 df 4a 7b d1 5c 35 91 ab 7e d8 5d 6f be 53 5f e2 f5 a6 cb 55 14 f6 4f 9b 26 57 3d 97 2b eb df 8f 89 69 b4 c2 76 dc 72 3b 43 78 19 99 28 b0 38 86 ad 91 d7 8f 06 fc d8 4d f8 81 3f fd 73 fc e9 c7 9a f8 c7 9a f8 3f 75 ee c4 ad 89 cf 7d 43 50 9c 4d d5 01 3e d6 99 00 ab a0 5e 1b da 9c dc 09 de c5 aa fc c9 21 5e 94 3f 30 ce 5c 0c 7d 1e 94 f3 98 22 a2 d3 e2 19 3b f2 95 ce Data Ascii: n.6GD\Nf"L%cZ'rF:c=u';&?^>Meg_XD5LcqFH4\N7~XosLvOKBJ{\5~]oS_UO&W=+ivr;Cx(8M?s?u}CPM>^!^?0\}";
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 30 30 30 30 30 31 0d 0a c2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3c 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001~0000000100000001<0000000100000001000000010000000100000001000000010000000100000001
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 19 95 c4 96 05 b2 4f d8 0f 7c 86 37 b1 7c 6d 61 e9 b4 85 8b 6d ba c9 11 5d db 82 fd 7c 8a 5a 2d ec ed 42 50 e1 5b bb 95 dc e4 e7 a3 42 7c 75 85 ed ec cf f4 fa fc 5c c2 02 c9 63 ba 89 e8 aa 23 c7 f5 91 df c1 a6 eb f0 12 cc 15 b8 09 d0 9f 2e 59 b6 c1 35 45 6f 15 aa 9c d7 2b 7a e9 d2 4b 14 dc 62 35 18 dc 84 4f 58 b4 c7 9d ce 5e 74 95 d0 c9 74 7e 39 8e ef 2a 45 98 94 e1 d3 03 68 8f 78 16 f1 39 78 c0 bc b9 83 a7 4c 8f 2e eb c8 65 2f e2 d6 23 ee c1 21 a9 7d 93 04 66 d9 62 70 49 cf d7 79 e2 b9 09 71 34 3d a1 ab 5f 40 6f 13 7d 40 64 ad bf 41 7e c3 cf 40 ee 22 1c 00 bd b3 39 f2 f2 73 21 64 e4 ed a5 82 f8 b1 91 95 0f ac ac 04 37 4c e4 ee 6d 09 f9 4c 55 be f0 30 1b 92 03 05 d5 3a 95 31 b8 2f 3c 3a 0a 84 e5 2b d7 c8 cf 7d e1 81 22 76 24 e3 f9 00 25 bf 82 01 7b 95 cc Data Ascii: O\|7\|mam]\|Z-BP[B\|u\c#.Y5Eo+zKb5OX^tt~9*Ehx9xL.e/#!}fbpIyq4=_@o}@dA~@"9s!d7LmLU0:1/<:+}"v$%{
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: b1 b7 46 93 25 98 96 5f 6f 3e 34 ca 9c 6d c5 a3 38 4e 0e e0 e2 0b 60 93 0c 1e 7d 05 e0 8e ea 31 53 1f ee 46 ed 63 d5 62 c1 73 0a a1 05 18 ad 5a 0e ae 69 24 6b 77 4e d6 5b f1 13 42 63 5a 79 b6 fb 0d a8 27 92 8d 9b 9c 5c e4 18 fd 16 07 54 31 f9 52 10 6c c7 c2 0d ce 51 be 7c bb 81 17 3e 18 1d f4 fe 12 f0 0a f3 bb ca 8c c6 b6 eb 52 53 66 72 1b e0 65 e4 f0 aa 94 ee c2 5d f1 2c 79 58 cf 66 13 ce da 5b 84 d3 93 8e f1 30 fa f4 7a 93 f6 41 26 2d 1f 3b c0 95 5b 21 2e 0b 95 0a a2 05 29 df ec d9 21 f5 ef 56 91 ef 8b cc 10 f3 42 b3 3f 71 a1 d9 b2 b1 cc aa 72 28 9a 59 c7 8c 59 7a 9a ea c0 85 65 dc 4a ce a8 e1 d5 1e 8c 1a 73 86 22 5f b8 6f f7 07 cd ce a7 76 f4 ed 2e ee 25 b0 cb de 20 42 93 f4 2d 56 84 3d 3a da 4c a0 34 56 5c b9 2a 90 dd 8d 4b 29 82 59 99 e6 f3 f3 1d 1c Data Ascii: F%_o>4m8N`}1SFcbsZi$kwN[BcZy'\T1RlQ\|>RSfre],yXf[0zA&-;[!.)!VB?qr(YYzeJs"_ov.% B-V=:L4V\*K)Y
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 0a b0 66 ec ad 0f 2d 0b 01 a5 72 59 db 21 65 1c 18 4d 9b 26 7a a3 7f 61 de 0e e5 27 af c7 44 7b 9c 33 82 1e 90 1f 9e ee 81 ac 57 c3 e6 06 ae 81 56 4c f6 72 68 35 c6 3b 42 9a fd 36 ae ef 07 be 9c 87 57 23 f6 ee 34 4a d5 5a 48 cd 8d 41 65 a0 e4 96 2d 66 95 fd 5c 30 0a b0 7d f5 4a 5b 6e 9b 2d de eb a0 76 c8 ba e5 31 f8 b0 cf 0f b5 60 6f 87 1f 6e 82 bd 0f fc b0 15 ec 9b 1b fa b7 83 fd 2e 53 ba 41 dd 30 77 82 7a 87 29 b7 c1 91 e1 19 04 b8 39 9d ee c2 da 0c 3e 9b 1b fa ab c1 f9 01 53 2e 83 cb 36 3f 5c 05 6d 73 c9 fe b7 a0 6d ee e1 bf 0b be 1a 5d d7 0c ba 86 07 2b 49 33 50 1f 82 3b 93 8d 76 f0 a7 b9 cf bf 1f f4 cd d7 00 e2 e0 1e f3 3e d2 ba 0f 1e ae f8 e1 c2 f6 cd 2c d6 95 74 d2 db ee 48 b5 c3 2c 2f 32 b3 68 c5 2c ad 2c b3 f0 97 cc d2 00 c9 62 f3 e4 54 be 02 72 Data Ascii: f-rY!eM&za'D{3WVLrh5;B6W#4JZHAe-f\0}J[n-v1`on.SA0wz)9>S.6?\msm]+I3P;v>,tH,/2h,,bTr
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 3f 1f 14 80 51 51 3d a1 e5 ce 93 61 7d 85 40 f6 33 8c 90 fb fa 3e d4 4e 6e 00 7c a6 45 4e 96 a4 f1 d8 11 90 57 63 17 f9 00 d6 e4 23 c1 80 d7 1b d5 02 56 11 5c 66 98 94 96 06 93 9e aa 20 78 44 9d 72 b6 f0 2b 13 f3 e9 d5 d9 ec 28 f1 fa 6c ee ee 14 3f 1a 62 f4 07 78 83 87 30 15 e0 e4 5c 9f c1 3c 45 a6 31 ad e5 73 c8 d3 66 b8 bd a1 39 d8 16 0f 45 b3 b5 f1 fc 5c ac 28 e5 b3 71 03 2d c2 0f b3 16 3e ce 97 e7 1e e6 cb c1 d7 f0 e6 74 eb 2c 78 1b 6e ce dd 23 cd b9 9b d3 6f 67 c1 4e b8 89 60 7a 9f 2f cf d6 82 73 b3 fa 1b e4 73 5f 83 9d e0 6d 3e d8 0d af d7 87 7a cc 69 fb 0c bb 76 09 b9 91 9d ee 9e 85 e7 50 72 38 e7 0f 1b dc f4 a1 f0 7c 6e 07 8b 53 0c b0 ef d0 e6 b6 af 6a 3f 4d fb 9e 65 4f c9 97 61 ce d4 d3 1c eb c4 b3 2c 3c aa 68 35 8b 5b 85 30 8f e9 45 6f b6 91 01 Data Ascii: ?QQ=a}@3>Nn\|ENWc#V\f xDr+(l?bx0\<E1sf9E\(q->t,xn#ogN`z/ss_m>zivPr8\|nSj?MeOa,<h5[0Eo
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: d4 b2 3b e3 25 ef ed 29 fa c9 33 6c fb 8c 28 13 92 84 db b7 4d 92 cd 7d 83 84 0e 99 fb 82 2d 10 58 68 91 4a 02 c2 c7 0d b0 c9 e0 c2 84 39 cf c0 0c 64 9a e1 c8 52 4a fb c2 31 bc 70 de ff da c6 5a 5f 1d ac b0 50 c1 81 87 76 b7 8a 93 62 18 27 76 50 f1 78 03 c0 5b 68 76 12 0e bb 70 61 83 e7 e7 01 c3 14 57 f2 ed 84 43 5d 50 f4 09 f2 b5 ab 75 1c 7a c3 96 25 56 05 cd de 23 96 08 34 95 c6 e6 c0 24 11 6e 8c 70 3e 40 49 ef f7 78 a7 3a f8 a4 13 66 3f b5 66 c0 77 54 b0 64 a0 fc 60 97 3a 6a 55 b1 b5 e2 25 fb 88 f5 a4 62 8c 56 3b 62 2d a1 b6 d7 63 1e 8b 74 1c 72 cc 3d c0 06 7c c4 61 c7 ad 8d d3 38 f7 88 ef 7b 3a 73 90 bd 60 34 42 94 07 e3 65 e1 cf df c5 6b 08 a7 f1 a8 b5 12 be 62 46 60 c7 53 de be 4d 02 f2 6c 3e 7b 81 34 5a 6b 9c 3e da cd d8 ed b1 00 dc 98 a3 38 9a 28 Data Ascii: ;%)3l(M}-XhJ9dRJ1pZ_Pvb'vPx[hvpaWC]Puz%V#4$np>@Ix:f?fwTd`:jU%bV;b-ctr=\|a8{:s`4BekbF`SMl>{4Zk>8(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49755	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	662	OUT	GET /gui/2121f4aabac6fbe523ec.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:23 UTC	316	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5b9f3ab7c2789d609f8b7da4571879b0 Server: Google Frontend Date: Fri, 25 Oct 2024 15:45:18 GMT Expires: Sat, 25 Oct 2025 15:45:18 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: font/woff2 Content-Length: 14712 Age: 605225 Connection: close
2024-11-01 15:52:23 UTC	1092	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 39 78 00 0d 00 00 00 00 88 38 00 00 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 3c 1c 90 1c 06 60 00 84 62 0a 81 87 7c eb 40 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b b5 76 25 ca 6d 17 05 9c 07 20 46 4f f2 23 46 22 6c c5 64 b5 a8 23 03 c1 c6 01 82 84 3f 74 f0 ff 27 24 1d 32 06 f3 6e 83 93 59 65 10 31 24 a0 b0 5d dd bd d9 c3 24 73 a7 ae 57 b7 73 39 a8 3c 25 d3 4c b5 31 7d 59 79 06 36 91 82 88 2d a4 20 62 e1 be 10 5b f9 9d b4 d0 eb 0c 37 21 09 19 3c 4b dd 57 7c be 69 6a f3 87 66 9c cd 3f cd a4 5c 3b b1 ee d0 1a 1b 4e f0 24 f5 08 54 28 14 7d f4 39 eb 22 30 6e e1 a3 e6 d4 cb f3 ff 8d 85 de f7 67 29 40 ac 57 45 11 95 40 03 a3 8c 2e b9 5a 56 b1 95 3d 55 c0 e8 ca 3b c3 Data Ascii: wOF29x89n<`b\|@d6$D \|4v%m FO#F"ld#?t'$2nYe1$]$sWs9<%L1}Yy6- b[7!<KW\|ijf?\;N$T(}9"0ng)@WE@.ZV=U;
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 95 e9 04 c1 10 8b 45 12 09 a6 a2 a2 24 95 12 aa 24 ac a6 26 91 cb 55 14 0a 48 ab 36 52 bb 76 58 87 0e 52 a7 4e 58 97 2e 52 b7 6e a9 1e 3d 14 7d fa 10 fd fa 51 03 06 84 06 0d 32 0d 19 52 33 6c ac d8 38 e3 94 2d b4 84 66 a9 a5 98 15 d6 11 d6 db 0c db 62 ab 8a 5d 76 93 f6 38 04 3b e1 24 d3 99 d9 e3 25 ae 0b e4 ba 5e 3c 63 20 33 a1 cc 1d 54 75 57 fb 26 77 bb 87 ed 5e e2 ee 23 cb fd c4 3d d0 de f2 a0 87 64 5e bf a2 0e e4 76 01 0c 48 00 92 28 42 0f bb 06 20 4e 15 84 e4 1c a0 fd 81 ff 19 73 c7 c6 a9 ea 06 d2 4b 64 c0 b6 06 d1 a8 68 ce 3f c7 7b 35 60 f7 38 3f da 73 0d a4 7c 0e 0b 27 1e d3 d1 7c 39 32 91 83 a1 0b 9d d6 3e bd 92 cd 14 d3 da b1 86 3f b7 13 b5 2c cd 7c c8 2b 23 f9 d3 98 71 6a 22 0d 05 ad c7 47 48 1e 39 bf d1 56 31 7a f9 f2 e7 c3 e8 fe 49 fe a6 2f ce Data Ascii: E$$&UH6RvXRNX.Rn=}Q2R3l8-fb]v8;$%^<c 3TuW&w^#=d^vH(B NsKdh?{5`8?s\|'\|92>?,\|+#qj"GH9V1zI/
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: cf 83 c6 c7 d1 91 93 c7 7b 4f f5 bd f7 07 24 27 fb 5b 2f 1f a0 56 2e 80 67 52 d8 1c 54 2a 65 aa ca 31 0d 05 d7 b0 99 7c 0b 2c d0 b0 c2 4e 85 43 0e 1b 71 c6 59 a3 bd ef 7d 63 21 d8 7b 3a 00 d5 00 a0 03 6d 20 6e 5f af 58 3b 87 e0 f2 a4 7c 75 21 a0 eb 68 1e 69 00 7a b4 01 58 a9 6e e1 66 97 d9 9a c5 92 75 3c d0 aa c3 07 2a 73 28 8b 05 bd 21 c8 07 1d a3 15 05 34 8c 16 e8 ec 58 6c 01 74 43 06 d0 da 27 ba cb 70 00 01 c8 f9 eb da 01 69 80 51 61 4a e0 2c 9f 32 20 c8 b7 6a 20 93 43 1b 03 34 43 05 f0 5b 48 da bc 07 96 c3 30 44 e1 15 d5 03 41 9d 0c 94 38 83 2c a6 38 cd f7 2c 55 48 d1 34 a0 91 3b 2c 52 64 68 8b bb 75 22 42 7d 54 35 c1 e4 4a 4f b1 f6 dc 54 33 38 66 92 65 01 e9 d6 11 b1 7e 40 b1 61 03 45 e6 d9 0e 41 c4 61 32 9d 21 d7 59 a2 de af b1 77 17 32 a8 1d df 8d Data Ascii: {O$'[/V.gRTe1\|,NCqY}c!{:m n_X;\|u!hizXnfu<s(!4XltC'piQaJ,2 j C4C[H0DA8,8,UH4;,Rdhu"B}T5JOT38fe~@aEAa2!Yw2
2024-11-01 15:52:23 UTC	188	IN	Data Raw: ba c2 d4 f2 ff 8f ea ad 0d 13 1e e4 3f d5 fb 02 8a b6 6d 5c 5f 20 b7 03 e3 41 fc ab ed fa 80 64 fd fb 73 8c 21 0e bb 0a 08 34 06 61 20 0e 81 d0 c9 4d 90 10 28 0f c1 ee f0 e6 a5 e1 fb d6 c0 0c 10 ca a1 4d 9a f3 d3 3f 68 f4 6f 9e 5b a9 53 79 af 5d b6 98 0f 03 54 e1 5b 11 81 65 68 7a 3a ed 8c b3 ce 39 ef 82 8b 2e b9 ec 8a ab ae b9 ee 06 04 04 08 04 78 c7 33 10 c7 b7 22 19 8a 5f 57 68 e4 20 1f 16 0e 51 34 0a 7a 10 14 16 76 50 c8 46 9e 48 51 08 48 c8 68 73 5e 58 b4 0d 09 2b 6c 62 37 84 78 23 6f 1b dd 28 48 b3 24 08 94 81 0a fd 40 21 92 46 c7 fa 09 d0 15 05 9a 02 Data Ascii: ?m\_ Ads!4a M(M?ho[Sy]T[ehz:9.x3"_Wh Q4zvPFHQHhs^X+lb7x#o(H$@!F
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 62 68 48 08 31 b0 20 72 c0 d1 22 88 b6 d3 ae 00 9f 1e 94 9e 90 20 64 90 88 4c d6 26 40 ab b9 b9 ce 1b 80 5f 7d 11 d6 91 00 90 0b 15 c2 a3 80 38 52 82 6a 77 1b 74 92 16 61 d6 5a b6 b2 bd 65 05 c0 30 79 ed 6e b9 ed 8e bb ee b9 ef 81 87 1e 79 ea 99 c7 9e 40 40 ea 6e ff a8 01 21 b6 d9 1e 10 01 08 07 61 78 30 a9 96 b0 d5 cd 02 01 45 2a 04 52 17 41 94 6e 56 f0 02 c1 2d e4 7c e0 76 88 a8 d6 50 7b 9a 42 b4 de 10 88 84 4a d1 e8 44 c6 fc b4 28 38 62 c5 90 cb d6 fe 71 0e 04 b2 17 f4 63 c7 45 21 22 2b 83 48 10 04 a6 8b 68 c4 26 b0 15 4c f4 41 50 09 59 46 05 38 96 26 c1 0a 4b 6b 88 44 62 43 0e 33 91 8b 45 36 6a 26 0b 15 8d 19 c0 c8 70 30 42 d2 51 fb 09 41 91 f0 f2 a1 9d 18 40 05 0f c1 32 24 0b 10 5c 80 64 c0 4e 1c 10 0b a1 49 52 10 68 8c 5c 76 f9 0a 1d 88 30 82 87 f9 Data Ascii: bhH1 r" dL&@_}8RjwtaZe0yny@@n!ax0E*RAnV-\|vP{BJD(8bqcE!"+Hh&LAPYF8&KkDbC3E6j&p0BQA@2$\dNIRh\v0
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 0a 69 24 6a 07 66 a6 96 3f 32 5f 3e 75 f1 ab a1 0c 68 f8 eb 73 64 38 67 7b 4a 0f 60 f4 46 fc a1 fb 25 90 99 d4 56 ab b6 41 9d 5d 07 da a2 b4 09 81 4e 60 ca 02 db 5b 0e 3d 76 76 ea 51 f8 32 e8 40 7e 92 25 f1 a0 9e 17 f9 ce c1 c0 f4 45 71 71 4c 8b f1 5d 10 a9 f3 b1 80 02 e4 78 ec 1a d9 a1 62 88 6f cb 07 84 27 c7 ce 8f b2 28 ee d5 e3 4b 07 94 1b a9 51 16 06 87 a0 38 38 53 1d 93 90 bf 66 23 b6 9e 37 94 9e 5b 8f 81 6a 90 32 fa e6 22 48 e0 25 29 65 59 1a 82 7c 40 3e 4b 8e bd b0 a1 12 e5 fe 12 c1 7b 7d 40 52 a4 75 10 d5 82 3e 5a 62 5f 49 0d dd 4f 54 97 57 48 d0 90 db 53 bb ff 13 fa 52 06 0d 4c 7e f4 ae d3 a4 64 f2 db cc 6f af 58 a3 48 1a 08 16 8a a9 fa 3b 8b 47 e8 5c 96 a9 54 44 4f 28 d3 eb 9e ae d7 9e a4 96 b2 78 c6 80 a8 c5 6e 3b 46 4a 66 48 88 00 a2 4e 7a 55 Data Ascii: i$jf?2_>uhsd8g{J`F%VA]N`[=vvQ2@~%EqqL]xbo'(KQ88Sf#7[j2"H%)eY\|@>K{}@Ru>Zb_IOTWHSRL~doXH;G\TDO(xn;FJfHNzU
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: db 17 45 79 c1 51 0b 5b 8f 2e a2 27 24 5f 86 85 fc b0 26 f9 dd f2 b2 63 23 80 04 59 9c c2 da 3a 66 8e e5 bd d6 26 8f c7 f5 a9 6a 61 ed 19 f9 cc 7b c2 29 8b f3 3a c1 86 96 17 aa a7 e5 b5 d1 cb 19 66 e7 5c 51 48 7f 96 43 2c f8 d5 32 ec 9b 55 ff 3c 61 45 cc cd 6f c2 37 1b 36 ab 7a 5f cc 4f b5 bd fe 6b eb a8 4a aa a8 f2 f5 0b 4b ca 4f 0b 83 ca b3 f5 19 a6 1c 6e 79 d4 c7 bc 8f cd cc 4d 4f 0d f9 c0 e6 3b 3b 9a ba 77 5c a6 19 99 7d 82 ee b5 8b 8a 59 25 54 9c 77 8b ff 72 f7 8b ef 59 52 62 74 3e af 4b f0 80 72 8f 75 26 ab 6f 8f 0e 77 c8 7b 6f 23 d8 78 de 13 6c 64 94 65 66 be 38 84 02 c7 f4 d3 3e 2b 42 50 85 75 dd 99 b8 43 6c 20 99 56 ee 33 31 99 fc 19 56 88 15 b9 6e 62 09 5d 19 73 46 2f f5 bc ef c9 5a f7 3c f9 ed 0c 59 09 f4 0a 2e 26 8f 12 bf c6 a1 3e e4 9f ac 81 Data Ascii: EyQ[.'$_&c#Y:f&ja{):f\QHC,2U<aEo76z_OkJKOnyMO;;w\}Y%TwrYRbt>Kru&ow{o#xldef8>+BPuCl V31Vnb]sF/Z<Y.&>
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: e1 02 7d 0b 96 99 a8 4b 4b 17 19 40 0c 2a 6d f8 30 6d 8b d3 a1 6b a9 4d 4d 49 2b 48 15 d5 18 22 13 08 bc 01 a3 54 92 98 25 ce cd 2b a4 2c 48 de c5 2b 17 30 7c 20 7f 94 ae 5e 0b 47 27 32 b3 ed 32 3d 35 e5 37 52 ed c9 7e 74 f4 55 4e 4c 5e 4b de 28 f0 6d 65 21 b1 43 a0 32 c5 c2 82 75 d4 e8 6f 63 e0 d9 5c 7d 9c 2a d9 56 18 9b 28 40 ed ae b5 d7 8c c3 26 cb d2 73 98 0a ca bb 18 5c 64 38 2f ab a0 58 a9 97 e9 b3 46 0a d3 cf 52 aa 79 b1 7e 0a a5 8a cb ab e6 d6 49 7f 21 e2 1b d9 32 22 62 e7 3a 22 f9 22 d0 1e ea db 1c 98 bb 37 83 2f 75 98 6b 0a 13 fa e8 f2 33 34 72 67 bb 1d 68 0f cd 9c 03 2f 3e b9 7c cb 85 fd cc 65 8d 47 53 4d 5d e0 0c ca a2 cc cf 64 f6 f1 f0 50 b0 b6 29 2b bc 6e d0 04 b4 5f 3b 97 c1 9f 8d 02 49 a2 86 1f 0b a5 8b 25 59 19 db ad 65 ff 6f ff c8 7f b1 Data Ascii: }KK@m0mkMMI+H"T%+,H+0\| ^G'22=57R~tUNL^K(me!C2uoc\}V(@&s\d8/XFRy~I!2"b:""7/uk34rgh/>\|eGSM]dP)+n_;I%Yeo
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 59 89 d4 a0 2e 94 24 e4 0f 4b 54 36 78 1b 12 9b 07 71 63 bb c1 77 d6 3a 49 ac be e0 82 91 c9 8d 6f 67 91 f7 a6 47 19 fd 9e ff 38 f4 56 0e a3 fe 5e 7a de ee 12 be b2 b4 33 df 25 91 1b d9 70 a3 c9 92 9a a2 71 d6 f0 c1 b2 21 93 aa a8 70 56 28 fc fa c0 7d c9 ec f9 91 15 6f 46 0d b6 a4 37 a5 cf 07 3f d8 6a 65 6e 6d c1 39 3d 8b 2b 99 2d 11 0f 17 90 ad c7 b4 bc 70 8d bf fb 5d 48 7b 18 47 91 cf 53 78 0c 26 4d 59 b5 0c 44 b0 88 02 49 70 46 27 9d fe 54 2e 7d 47 11 0f ab d7 18 a6 36 76 98 e7 b5 9a f5 6a af e0 b1 25 e7 5b 0d 99 d9 cf f0 20 d2 67 9a 19 14 67 8d af 42 97 ec f3 c9 c0 b2 80 6a fa 3a e3 82 14 27 a5 7b 7f be 5c a7 6b 63 75 0d 9d 89 2c 00 81 6c 62 59 5c b2 4d a6 4c 4d 3f 03 67 c6 a7 49 e5 32 9b 97 97 92 53 ed b3 8b 24 a6 00 f8 07 b5 55 2d 55 d8 cb 85 d1 a3 Data Ascii: Y.$KT6xqcw:IogG8V^z3%pq!pV(}oF7?jenm9=+-p]H{GSx&MYDIpF'T.}G6vj%[ ggBj:'{\kcu,lbY\MLM?gI2S$U-U
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 03 86 18 30 71 71 16 2f a0 15 8e b5 b0 3f e5 ec 92 f7 fe 31 e9 9d d2 a4 cc 01 fb 51 35 89 36 8d 94 5b 49 24 7e 27 50 04 04 ea da 27 98 63 1f bd f3 b2 8f 8f 0f 4a c8 d0 a7 28 dd 56 70 74 5b cc 81 74 59 54 e4 5e 72 22 ef 80 dd d3 58 58 e8 6b c9 e1 8f 08 e3 e9 ee ff 87 8d 9b a7 91 c4 27 69 75 49 b1 a9 2f 40 9b 0a 5f 2c c8 8f d8 9a cf 51 fe 2c aa 08 af 45 6a c1 01 94 ce a5 11 31 4e 6c 85 c7 85 c4 48 ed 49 49 4a 5b 92 94 1c 57 0f 5f 99 c0 16 b9 b4 e2 3f 27 93 22 5b 23 30 2d 98 a8 c0 21 6f e2 1e 46 e2 27 5e c2 31 a2 1e 82 f1 21 89 32 66 77 ba 14 17 b9 97 24 8d ab 0e e3 e9 ee fd 3f 6b 8b f8 52 71 ad 2f 62 b3 b2 1b 0b 0b 8b 5a c0 82 3c be 36 7e 5c 7e 1e 9b 5c 6a a3 92 e9 dd 7a 3d d6 a5 80 e6 3c 3b 95 22 4c 91 97 12 be 56 34 2e 2f 9f a6 83 aa 21 d1 32 72 74 62 b4 Data Ascii: 0qq/?1Q56[I$~'P'cJ(Vpt[tYT^r"XXk'iuI/@_,Q,Ej1NlHIIJ[W_?'"[#0-!oF'^1!2fw$?kRq/bZ<6~\~\jz=<;"LV4./!2rtb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	662	OUT	GET /gui/1402accbefdec6a25762.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:23 UTC	316	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7121e1923a350fcd7843e68330ed0723 Server: Google Frontend Date: Fri, 25 Oct 2024 16:09:22 GMT Expires: Sat, 25 Oct 2025 16:09:22 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: font/woff2 Content-Length: 14892 Age: 603781 Connection: close
2024-11-01 15:52:23 UTC	1092	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 2c 00 0d 00 00 00 00 88 7c 00 00 39 d3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 42 1c 90 1c 06 60 00 84 62 0a 81 88 4c eb 34 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 66 07 8c 34 1b 99 76 25 8c db 8f 02 ba 03 bc 98 bc 94 cc 8c 44 d8 ab c5 aa 64 64 a0 64 6f 9e 9c fd ff d7 04 3a 64 08 dd 4d 01 a7 ea 03 45 10 26 88 ea 4a 83 0b 47 11 2e 1c c3 9c 33 1d 4d 78 70 aa b3 ca 14 69 b6 c5 19 f6 56 17 92 75 24 0b 5b 4f e7 3b 4d 55 c7 93 3a 6a 0b 3f 8a 85 7b 2b 2f 3c da ad 98 f7 a8 73 c5 c5 97 09 a3 5e 5b fe 11 64 ae 64 c3 af 1e d1 99 cc 87 d5 8d 74 20 41 90 80 d4 9d ec 60 b1 8f 7a 06 b6 8d fc 49 4e 5e 9e 87 9f eb f3 dc f7 32 c9 fc cc 12 b0 da 6d 59 01 6b 46 85 0a 00 5c ed fa 96 55 59 55 02 Data Ascii: wOF2:,\|9nB`bL4d6$D f4v%Ddddo:dME&JG.3MxpiVu$[O;MU:j?{+/<s^[ddt A`zIN^2mYkF\UYU
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 7a 34 03 03 0d 23 23 96 19 07 b3 b2 d2 b3 b1 31 70 72 42 3c bc 38 3e 3e 98 9f 1f 27 20 00 0b 0a e2 84 84 18 85 85 11 62 c5 a2 44 44 08 c4 89 a3 12 2f 9e 48 82 04 56 89 d2 e8 a4 4b a7 95 2f 8a a7 81 06 68 8d b5 c4 6a a5 00 d6 4e 7b 06 85 ba e0 74 55 0c eb a7 3f 91 41 fd c6 d3 2b 6b 72 e2 32 33 95 5c 0c 30 99 e0 26 8b b8 d9 92 70 8b a5 96 91 58 ce 19 2b b8 d8 4a ce 58 15 2e b6 da 1a 26 07 66 2b 85 2c a4 84 81 11 30 26 40 e1 eb 67 06 54 a4 42 b0 5b 9f 3b bc ea 7d ff 35 86 48 a7 33 0b 01 cd 1a c0 86 01 50 f2 49 bb bd 24 75 a6 83 4c b7 14 76 39 cc d2 e2 88 41 3b b6 a6 f2 3b 8b a4 a4 98 e6 4b 57 07 ad 2d 10 56 1e 1e f5 3c 3c 14 41 fb 47 d2 84 bf 8f 65 f6 1b d1 e1 30 5e 6e 1b f5 68 e3 3f 7a d3 09 3e 38 f9 d2 33 08 61 7f bc d5 33 dd b9 bf 6d 15 5f 7d 0f c8 58 51 Data Ascii: z4##1prB<8>>' bDD/HVK/hjN{tU?A+kr23\0&pX+JX.&f+,0&@gTB[;}5H3PI$uLv9A;;KW-V<<AGe0^nh?z>83a3m_}XQ
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: a8 56 0d 9a 10 73 3e 8c ec 56 0d fc 89 0d b6 c8 83 64 2b ee 7f a4 d1 fb 18 e3 8b f5 71 cb 1d 91 40 4b 84 20 21 25 98 5d 40 34 13 1b 9a 83 93 4c a2 1a 14 f2 e4 09 6f ac f3 8d 15 eb 25 c9 20 83 a5 0c df 7b fe 20 d8 71 15 58 08 30 4b d6 81 c7 d6 31 bb f5 a4 f4 64 e4 cc 14 38 2a 60 e3 56 d0 70 81 51 2a 01 b0 4d bb 55 9a 25 19 c1 d2 18 77 b2 f0 51 2b 3b 9a ad ed cb af 98 9e 2b 80 71 5e b3 1b 5c cc 03 01 a3 7b 5d b0 18 2c 00 a1 cd 34 db 0e 03 a0 03 6a 97 7c 7e a0 ef 19 29 8c 38 d0 91 16 10 42 a1 2d c4 03 5d d3 11 4e 03 ab 81 b9 60 76 6b d8 01 36 c1 6c 30 0c 21 b8 14 49 40 51 3e 17 12 70 86 90 8b 89 94 b4 e0 9e 98 19 9c 60 59 c2 c3 cd ad 54 40 69 2a 51 b2 49 93 22 ca cf 93 32 e5 14 99 cb e1 8c 2a aa 93 aa c1 c5 f2 38 5f 4b 4e 69 b5 84 d0 7a ea a4 b4 27 51 0c 4e Data Ascii: Vs>Vd+q@K !%]@4Lo% { qX0K1d8`VpQMU%wQ+;+q^\{],4j\|~)8B-]N`vk6l0!I@Q>p`YT@iQI"28_KNiz'QN
2024-11-01 15:52:23 UTC	188	IN	Data Raw: fb 1e c5 08 39 b7 e3 cf 9e 45 3d 90 b6 f4 3f 51 7d bd 91 78 3b ff d6 a5 73 01 e2 6e 58 d4 be 3b 62 18 28 db f1 f7 be 3d 4a 10 5e fe 98 0e 33 c2 e0 99 02 c1 50 01 a5 28 1f c4 c3 2b 01 11 5a 81 50 8f 56 2e 49 c6 5f ef b2 07 4c 14 1f f9 2e 6e ce 18 f4 dd cf 56 19 a0 ba ff 5c b5 44 6b 36 08 08 01 cc 41 9a 70 67 9d 73 de 05 17 5d 72 d9 15 57 5d 73 dd 0d 37 dd 82 61 08 02 de f1 17 14 f6 a1 18 d1 0a 0d 6a 0a 92 22 05 15 0d 1d 03 13 6b e8 6d 91 06 d1 48 82 e4 94 d4 83 fd c4 8c b8 ae ae 1c a6 95 a0 22 19 3c 04 16 36 38 b6 5a 0d 45 a8 70 1c b0 c6 bc 7f 53 50 44 30 64 Data Ascii: 9E=?Q}x;snX;b(=J^3P(+ZPV.I_L.nV\Dk6Apgs]rW]s7aj"kmH"<68ZEpSPD0d
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 84 89 40 0b 54 2d c5 60 10 30 33 15 24 11 08 30 13 86 9c 75 0d 08 94 70 04 c4 08 51 38 31 1f 05 f9 99 63 2f 78 0b f8 d5 3b 12 23 0b 48 23 6f 78 e2 4b 88 a7 42 d5 7b 44 39 c6 ba 24 72 0a 29 51 d2 12 2f b0 7d b8 b7 dd 71 d7 3d f7 3d f0 d0 23 8f 3d 51 e6 2f 4f 3d 83 11 b9 86 3f 66 2e 91 6d b6 fb 22 03 76 b1 c8 7e 0b 2c bd 23 c4 81 02 8a 08 11 22 17 8e a4 ea 0c dc 7d 10 96 0d 7d c0 63 50 54 2a a2 d5 41 c1 20 97 27 ae 67 e1 06 56 6e 64 ff aa 4c 5c dc cc 12 35 52 f2 82 0b 66 54 8a 79 9b e3 ae 70 b8 da c3 51 86 90 72 ef 15 7e 5b c5 0e 08 6a 0d e9 2b 47 09 70 e1 e8 a9 48 e2 09 47 cd bd f5 b0 67 2e e3 e0 12 e4 e2 62 e4 9c 9c 06 92 91 86 8c 28 fe 3a ad 17 f0 54 5e 1f f0 71 1a 50 46 8e 95 89 1a 15 24 99 41 6a c3 7a b6 4b 15 ac 58 b2 56 a8 75 b4 33 a4 39 17 42 54 81 Data Ascii: @T-`03$0upQ81c/x;#H#oxKB{D9$r)Q/}q==#=Q/O=?f.m"v~,#"}}cPT*A 'gVndL\5RfTypQr~[j+GpHGg.b(:T^qPF$AjzKXVu39BT
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 00 68 aa a3 22 26 4a 9b 83 fd c0 64 31 18 66 36 71 63 f9 d9 ac d7 44 cd 89 27 c5 15 fc dc a9 5b 5c 3d 67 20 2a 3a 88 d7 36 7a fd b1 b5 26 fe b8 ab ca c7 06 f5 1b b6 56 51 3b 44 c2 10 f3 43 bd 6c 07 62 91 cf 21 c0 6d 06 3e 98 d8 6f c4 d9 b6 41 e3 29 4c de c0 dd b8 8b f6 ba dc c4 a7 b6 27 70 35 ae a6 b5 25 af f7 d7 04 38 47 49 00 96 40 45 82 73 1d 94 07 d4 52 5c 5c 2d 27 2e 91 04 75 b0 51 06 0b 6a 25 82 e3 ae b0 1d d9 16 41 63 86 7c a7 c5 6d b6 cd 66 52 43 6b 40 33 8d a7 a0 a1 a9 e7 10 c8 db 66 41 8d ee 07 e5 45 61 7e 3b c5 04 9f e3 5a 80 53 1e 32 51 6a d9 d2 3a 9c cd ff 10 db 38 75 76 7b 6d 87 d1 1e 48 5d bc 6c da ac 72 37 af 46 37 5c 9c 5b e4 17 67 a2 49 e9 76 18 73 5f 60 dd 11 72 ba 07 e2 8e 3d 10 79 34 81 d3 a1 19 86 b7 0b bb d6 b1 9a 21 18 ca 6c e4 87 Data Ascii: h"&Jd1f6qcD'[\=g *:6z&VQ;DClb!m>oA)L'p5%8GI@EsR\\-'.uQj%Ac\|mfRCk@3fAEa~;ZS2Qj:8uv{mH]lr7F7\[gIvs_`r=y4!l
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 04 09 f4 71 e0 5c 1a 15 21 fd 0e bf 76 aa a0 a5 09 94 c4 be 3f b9 0e 35 7d 4d 27 5c f7 6a 01 2b d7 2f 6c 9b d7 39 97 06 f1 ac ba d7 f9 3c 3a 83 e3 a0 9e 1f c4 6c 9b 6a e4 9b c2 21 aa 37 c5 0e b8 7d 09 5c aa 12 8d f4 7a 03 a9 6c 84 f4 b0 e1 3d c3 74 57 31 74 c5 27 53 d0 46 52 b7 c9 ce b9 ed ba 9f d2 63 56 89 fe 16 14 ee 4b cd a9 f1 e1 e7 48 64 47 65 e8 15 2e e9 b1 f0 8b e2 68 88 11 74 26 51 06 ce d9 41 07 aa 72 c3 63 3c 1d ac 80 9e d4 75 ac 87 f3 bd 1c 04 74 c3 a4 c6 db e2 b7 3f 33 c8 67 aa c7 50 37 fd e0 ec a5 65 66 fc 7d 0c 05 8b d4 1e c5 c8 cd ed a9 b8 b4 3b 3f 88 0d da 10 a8 ce d4 9a e4 ba 12 27 a0 37 69 a9 d9 cb ef 72 23 c1 4e d6 c6 bd af 81 e2 d2 f1 af ef 5c 41 4c be 88 53 41 30 e4 9f e6 6e 31 40 89 83 0d cd b6 9f 0f fe 28 45 80 3d 0f a7 bc 26 26 96 Data Ascii: q\!v?5}M'\j+/l9<:lj!7}\zl=tW1t'SFRcVKHdGe.ht&QArc<ut?3gP7ef};?'7ir#N\ALSA0n1@(E=&&
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: ea 4a 2c 57 f1 98 68 c0 a0 29 56 d2 0b a2 c0 38 e1 3f 1b 15 9e e2 a6 31 ca 2a 16 34 07 94 ed a5 1a 13 a2 76 d7 16 7a 95 95 26 e2 3f e1 d7 cf 01 52 68 7d 9d 4a d5 ec f5 eb 9b 1b 55 5a 3e 42 5e b8 da f8 1b 81 83 70 69 41 79 c0 5f 0b 53 36 05 a4 53 3c 24 f0 98 6e 31 7d b0 db a3 6c 29 d7 c8 58 b7 9e a2 a2 a7 02 13 48 3d ea 94 83 91 89 e8 55 c6 57 77 c7 65 d3 1f e4 fa e5 61 53 25 c0 d0 86 06 b5 a6 d9 e3 d5 36 57 69 64 25 d5 bd f5 53 e3 58 2b e4 cc 2f 32 53 df de 7a e1 17 37 e1 4a 2e 64 d7 3a 15 22 af 1b 94 8f 19 b5 06 c8 65 47 f2 6d 19 eb 1e 65 ef c6 23 a5 ae 3a b8 6e 0c fc ff ac d9 4c 58 47 8c 44 43 fa 21 3c 91 c0 81 5a 69 30 5b 22 70 05 98 02 b4 f4 fc 4e 5d 75 52 35 51 cc 73 78 18 42 7a f2 15 1c 3a c3 25 28 0d 05 a5 9a 3c 95 63 3a d7 71 80 75 43 22 39 c5 66 Data Ascii: J,Wh)V8?1*4vz&?Rh}JUZ>B^piAy_S6S<$n1}l)XH=UWweaS%6Wid%SX+/2Sz7J.d:"eGme#:nLXGDC!<Zi0["pN]uR5QsxBz:%(<c:quC"9f
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: fc 37 17 4f de 51 85 f9 61 3c 1d c6 3a 73 7a 0d 25 8c 83 27 65 76 83 94 72 f7 f8 d3 48 55 4e d6 0b f8 4e b7 6d da b3 75 5b d3 78 79 59 d3 f8 b6 ad 4d 7b 4a 0d 72 78 60 e9 52 b8 47 2e 47 7a 96 2e 45 06 80 07 59 f9 65 9b e4 98 1e b3 45 a7 1c 44 00 23 b6 ac 6c c1 b0 a9 4d 24 53 99 34 0c 98 f3 c1 83 de 42 b1 b6 a0 a6 36 a4 36 f6 b4 2d 74 b8 df 6c c5 9e b0 80 bb b4 b3 46 fa ef dc eb ae 3c b9 d2 a6 93 d0 ea 23 44 a7 0e 71 13 d3 c9 bc ed 22 86 91 7a ed b0 b1 80 23 0f 4c 0b ba 94 3a 9b 08 da e4 f1 1b e5 32 5f 29 1b d4 fd 33 71 00 87 b2 c4 41 7b 37 7e 29 bc 7a 80 28 4d 5e 5b bc 34 6c 0c 1f 00 7f d0 ce 2a 09 68 bf ea e0 c8 55 5e 37 6c b4 d9 b4 e4 5f ce 9e 42 0b 75 96 c7 c9 a7 a7 dd 22 c8 22 2c 49 d8 64 52 97 57 08 00 54 83 68 a1 7f 17 5b 6c ae d0 f0 74 4e 9d 56 69 Data Ascii: 7OQa<:sz%'evrHUNNmu[xyYM{Jrx`RG.Gz.EYeED#lM$S4B66-tlF<#Dq"z#L:2_)3qA{7~)z(M^[4l*hU^7l_Bu"",IdRWTh[ltNVi
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 50 59 9d 33 0a 69 3c f7 7d 29 cf 49 a3 53 84 fe 3e 77 83 3d f1 21 56 f4 21 ad 78 21 10 3b 0b 7d 25 b5 1c 5a 2f 15 3b 1c eb af 30 32 19 2a b3 4e 9b 9b 8b e8 2d 1b b6 cb c0 61 9a 67 67 95 6f c5 65 13 49 9f 51 28 ff a6 30 85 9d d9 f8 0a 12 a6 07 55 b1 e9 53 86 d0 26 15 52 ca 6e c5 92 e8 52 9f 16 34 ad 9e 69 46 35 41 02 af e0 71 e1 21 f2 d8 0b eb df 4a ae b2 1e 1c a5 c5 56 56 f9 56 d6 2b 1b f5 c3 5c c6 ad 9c 0c f2 cb ff e4 a7 be 90 6f 4d 28 fd e2 49 8a c4 0e eb d4 5e 3b 78 ff 0c a6 a5 ce f6 34 87 d4 44 a5 16 11 3f 31 f9 ea 8b 67 54 34 5a 29 67 9e 6f fa 66 2a 9a ad b5 40 b6 71 99 4a 8b c8 73 b3 46 c1 7c 02 c6 4e 17 d4 b6 5f 96 a5 e4 dc 15 cd 48 6f 41 c1 e0 08 ad 71 e8 39 b9 5f 7d 00 cd 89 23 f2 cc 32 a1 c4 22 e3 51 fa 35 50 72 39 95 e7 d6 53 ff f4 4a d2 70 25 Data Ascii: PY3i<})IS>w=!V!x!;}%Z/;02N-aggoeIQ(0US&RnR4iF5Aq!JVVV+\oM(I^;x4D?1gT4Z)gof@qJsF\|N_HoAq9_}#2"Q5Pr9SJp%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	662	OUT	GET /gui/ee990a93df71bfdfb3b5.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:23 UTC	316	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6d4898cb11f1d600ac6298856e2a916a Server: Google Frontend Date: Fri, 25 Oct 2024 15:44:57 GMT Expires: Sat, 25 Oct 2025 15:44:57 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: font/woff2 Content-Length: 14824 Age: 605246 Connection: close
2024-11-01 15:52:23 UTC	1092	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 39 e8 00 0d 00 00 00 00 88 08 00 00 39 92 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 36 1c 90 1c 06 60 00 84 62 0a 81 87 50 ea 78 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b 67 76 25 ca 6d 17 c5 dd aa 92 42 f0 a4 97 91 81 c0 79 04 d0 8a fc a6 91 08 73 42 e6 3c f8 ff 8f 07 74 0c 11 3a 53 90 e9 fe 40 82 83 5c ed b4 bb 1a 77 13 d5 78 c6 ef 99 e9 38 41 4d 57 ea 53 95 8b 98 1d 2e e7 5a 3f 12 24 f3 e4 dd 12 10 17 b5 6d 75 74 ad f3 b7 f9 f2 58 82 9c 40 cd fa 5f fe e7 9f 5f 24 81 02 41 66 27 67 af a9 f3 27 10 64 08 78 86 71 26 90 dc ae 54 31 51 5f 94 98 9d 9d 6e 85 e3 a6 8a 7a 85 d7 5f 7d 06 b8 93 23 76 22 f2 f0 ff fe fd bf 73 ed 73 2e 9e fd ad f6 07 50 69 56 42 45 57 e9 32 52 Data Ascii: wOF299n6`bPxd6$D \|4gv%mBysB<t:S@\wx8AMWS.Z?$mutX@__$Af'g'dxq&T1Q_nz_}#v"ss.PiVBEW2R
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 46 46 3a 26 26 2c 33 33 3d 0b 0b 81 8d 08 b3 b3 33 71 70 30 73 73 43 bc 02 88 02 05 c2 82 04 11 05 0b 86 85 08 21 0a 15 ca c2 c7 87 08 17 8e 16 21 02 23 52 24 ad 28 51 e4 a2 45 b3 8b 91 c8 28 49 12 83 86 b2 49 e4 c8 c1 ca 57 40 d0 5c 6b 58 1b 6d 99 15 ea 44 54 a4 07 ac 9f fe e4 06 cd 9e d0 64 a2 13 95 29 a6 56 06 d6 3c 62 35 57 6c e6 e7 fa 5b 60 21 85 45 c2 59 2c 7e 96 08 67 69 ae 9f 65 96 b3 da f3 5a 95 90 39 34 30 d0 00 da 18 34 a9 db 2c a0 42 19 42 c7 1c 48 75 de fe df d8 d3 cb 26 65 13 0a 82 29 79 06 d6 6b 93 54 dd e9 6e 5c a3 75 e5 9b 68 ff d1 1a 14 a6 92 e3 7a 1c c0 8d 69 a5 59 0c 6d de dc 60 68 bb 52 63 a7 1d 66 8b 55 6a ae 57 c5 db 43 a5 b8 e0 c3 91 5c 1d 3b 5d 1e 23 0d b9 d7 7b 70 84 ec 85 91 72 a7 be f5 f6 b9 97 dd d3 1f 27 ad ff 8f d6 bf de 9f Data Ascii: FF:&&,33=3qp0ssC!!#R$(QE(IIW@\kXmDTd)V<b5Wl[`!EY,~gieZ9404,BBHu&e)ykTn\uhziYm`hRcfUjWC\;]#{pr'
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 80 53 72 da 1a ea fa 66 81 7d db e6 e0 11 3a b4 c7 e3 c1 9f 15 33 5a 40 e8 f4 51 00 16 f7 4b 16 e8 42 07 06 9a f0 97 95 7f 01 45 bc 2c cb 57 26 05 34 c9 11 0a 4a 0c 0b 0b 39 1b 07 96 8b 9b 4a 8c ba 78 99 32 b9 e4 eb c8 ad 87 9e 62 0d 32 58 bc 23 8e 48 84 60 87 e9 80 31 80 9f b3 10 84 71 1f b7 88 92 49 db 56 73 e3 f9 d3 02 4b 6f 5c df 9f da b2 3e 53 56 89 56 cd 55 09 14 eb 58 b1 8c 89 36 01 74 64 2e 0c 67 08 99 89 c0 54 e7 81 0f 97 ab 25 0f de 14 ec d5 da 60 e2 53 82 0d d0 6b 05 fd e1 c3 01 b4 40 8f 95 0a 1a 35 ad a9 60 c4 b9 a4 88 21 83 21 ea 25 01 e5 1e 64 59 60 1e 86 20 9a cf e1 87 cb 60 cb c5 30 84 20 46 11 68 4a 45 86 11 8e 4c fc c8 4d d9 7c f3 13 16 12 fe 32 5e 42 dc 61 c9 90 a5 c2 54 5b 27 11 a5 55 4a 8a ea 99 d6 d0 5c 4e 4d 75 28 d5 15 3f 99 22 55 Data Ascii: Srf}:3Z@QKBE,W&4J9Jx2b2X#H`1qIVsKo\>SVVUX6td.gT%`Sk@5`!!%dY` `0 FhJELM\|2^BaT['UJ\NMu(?"U
2024-11-01 15:52:23 UTC	188	IN	Data Raw: 4c 46 f5 9e ff 78 87 80 f8 b7 a7 21 0c 25 3d 3b af fd 31 06 2d 0a 3a a2 6a 56 ec 8c e3 e5 ce 9a bd 81 7c af b7 0b ab ed fa 9f a8 ee 67 56 32 d0 67 5f 7b 96 b7 de 6d 3c b3 cc 9d 50 07 f2 7e 2e 4f 74 43 78 fd 7d ae 30 42 62 33 81 c0 91 21 4d 29 fc b4 aa 23 39 d6 42 16 34 4e 2e a5 c6 4f bb ea 21 93 f4 78 8a dd dd f4 71 e8 97 27 96 1a a0 a5 17 2e 9a af 05 07 04 04 06 e6 a2 0c 5f 27 9d 72 da 19 67 9d 73 de 05 17 5d 72 d9 15 57 5d 83 61 08 02 5e f5 18 e2 58 15 2d 58 85 06 95 8b 94 88 57 0a 09 03 87 80 12 c2 72 71 87 40 0a a4 56 a2 0c 1a 16 1e 79 ce 9b cb cf 12 5a Data Ascii: LFx!%=;1-:jV\|gV2g_{m<P~.OtCx}0Bb3!M)#9B4N.O!xq'._'rgs]rW]a^X-XWrq@VyZ
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 8a fa 62 98 cf e0 91 b5 1b 82 e4 53 41 50 19 65 46 34 79 4d d5 e1 c6 03 79 ad a0 52 20 0c 87 c0 6c b4 90 18 60 a4 0f ce 9e 74 09 84 28 7c dd 7b 42 2c 10 de 3a 69 06 52 e5 a4 6b b5 ef 7c a4 c8 d9 a9 00 14 a0 4c 3c 88 55 27 09 d0 ec 3b 14 ba da 06 14 da 16 75 75 fa 76 c9 80 e3 83 5e 77 c3 4d b7 dc 76 c7 5d f7 dc f7 40 b9 c7 1e 7a 04 23 b2 73 af 35 83 dc 26 9b 63 55 00 97 b0 e2 f1 28 16 3c 17 e2 42 03 45 04 39 22 4b 90 84 20 56 f0 3c 64 2d 74 e9 f0 ee 84 6f d4 d0 d6 69 0a b3 ce 38 31 f1 17 33 bb 58 38 bf 93 95 47 35 36 31 f2 b4 bf e6 81 59 c8 b8 f7 39 5e 08 87 58 5b 38 34 21 94 1a 81 93 31 86 23 5b 90 16 48 7a 75 b4 60 1e 22 13 2d 45 78 c3 a1 53 61 87 a0 05 51 29 17 05 f2 88 1f 72 37 67 81 62 a1 a7 22 8f a0 3c 32 e1 64 19 2b 1d 81 c2 02 1a ab 86 d6 8c 16 83 Data Ascii: bSAPeF4yMyR l`t(\|{B,:iRk\|L<U';uuv^wMv]@z#s5&cU(<BE9"K V<d-toi813X8G561Y9^X[84!1#[Hzu`"-ExSaQ)r7gb"<2d+
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: e5 2d 7f 72 41 5b 7e 9a 8d b9 ca 39 a9 f4 95 8d f8 7a ef 2b b2 64 29 08 41 8c ce 53 a6 96 87 ef 27 0e 66 d9 ab c1 38 f3 9d 6b 90 20 df 03 a9 87 43 a5 cd 61 ad 29 84 11 50 6d 2d fc 0f f0 af d3 7b 2b 40 cc ba 85 b3 27 f9 40 2e c8 c1 4e 6b 62 0a e7 46 c6 96 6a a2 dc 31 51 4b 07 50 9d d1 5c 8e e5 60 ae 3f ef 17 aa 54 cb 64 c9 1e ca 0f a0 9d 6c 3f a3 a1 62 d0 a3 bc 86 8f 65 5d 7e e0 d8 96 c2 08 36 47 20 de ce 86 7a 2c 24 0f 33 2c 71 37 2f d4 39 88 aa 60 93 ee 68 44 80 be 96 f7 2b 54 4f 23 0a e6 b2 ce 0c e6 f5 2c c1 c5 76 c2 9d 58 9a 4b 8d 54 41 bc 4c 2b ed 91 76 86 db d1 20 b2 8a e0 2f 44 17 25 69 92 34 ec 66 8a 8f 10 ca 71 2a 26 e5 90 50 31 d6 d5 2e f5 36 57 aa 57 30 46 84 fc 8a 9b 78 2e 1d 12 de 70 44 63 41 b6 9a 15 ba ee 30 ad 67 f5 e5 61 7b 76 40 8d 2d 57 Data Ascii: -rA[~9z+d)AS'f8k Ca)Pm-{+@'@.NkbFj1QKP\`?Tdl?be]~6G z,$3,q7/9`hD+TO#,vXKTAL+v /D%i4fq*&P1.6WW0Fx.pDcA0ga{v@-W
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: d0 a1 ab 46 f5 cf ef a9 fe 17 3e 2d 2b 8b c3 c8 5f d4 27 cd e7 e4 70 44 ae 16 1c 88 c1 d9 c0 2b e5 f1 aa 01 13 c1 9a 8c 9c da 99 f6 40 c1 5c 59 c5 2a a3 4f 75 d3 f1 59 df 19 b6 78 af 19 3d 1d fc 44 2d 0b a0 5e 7d 65 43 6c f1 ca 17 01 49 2c 94 55 af c3 53 b5 68 f5 4b 95 62 8f 64 a7 4f 6c 9d 25 e3 2a de 80 7f 20 58 26 87 e4 73 57 1d 95 7a 08 55 b1 d6 90 49 bb 9c bd 32 9a 25 ab 35 28 f9 86 71 af 99 fd df f9 90 44 24 24 be 1c 74 68 4e b3 ca a4 fe 6a 8b 80 b2 a7 80 69 e3 86 43 79 8c 0b 55 d1 2f 8f 3f 6d be ea 72 c3 c5 1c c8 8e 40 b5 7b 53 6e 63 98 1e 23 72 04 ef 1d 0c ab dc 6f 65 42 7b 80 76 f7 c3 43 eb 04 7f 76 92 c0 f1 78 03 a7 89 0a 1f 3a 03 33 38 b6 01 e9 64 94 72 d8 9f 15 ba 69 c1 54 88 70 10 7e 4d 77 44 8c 02 81 e6 6f 2b 96 70 f9 be 75 8c d7 fb 0a ae 3f Data Ascii: F>-+_'pD+@\YOuYx=D-^}eClI,UShKbdOl% X&sWzUI2%5(qD$$thNjiCyU/?mr@{Snc#roeB{vCvx:38driTp~MwDo+pu?
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 95 81 6f 21 1d 92 3b c8 49 94 da 51 e3 b0 db 6a 54 04 a6 9e e7 24 04 09 e0 1b 17 f4 ae 1c f1 a9 52 8d 1a 69 e5 d1 0b 59 9e d3 a9 9b 8d 69 e8 7f 56 3a a2 41 fe db 17 63 d4 18 be 31 e4 f6 2a 83 00 8b 30 f7 56 e9 92 7e 9f 3e d5 ae 51 9a 6a 54 dc 0e 4b b9 49 31 5b ef b6 aa c9 89 3d 0c 2b 23 4c 38 c5 ff 40 29 d4 8b d8 46 2d 68 3e 69 8c 18 20 71 86 33 11 c5 fe f9 5b 16 9e c2 69 83 d2 a6 ba a6 49 f0 f3 ff 09 31 9c 8d ad b1 b0 21 f6 58 22 21 df 03 2d 67 98 d8 4a a9 bb 9a 29 2e 85 3f 3f 99 57 7b f5 2f 93 4c e8 08 d2 25 85 65 d9 47 6e 15 95 55 70 a3 35 b5 0a bd 40 e7 19 e2 da af d0 4a f8 bc cc 72 57 11 9f 5f c2 1f 54 db f9 24 c2 ad 4a 13 f3 50 ac 9c 62 2a 07 f5 6f a6 ce 65 35 7c e3 e4 88 bc d6 d6 7a 49 8a ae 11 b2 c8 f9 df 46 81 fd e6 e0 c5 ac b3 9f 2c 3e fc fc 05 Data Ascii: o!;IQjT$RiYiV:Ac10V~>QjTKI1[=+#L8@)F-h>i q3[iI1!X"!-gJ).??W{/L%eGnUp5@JrW_T$JPboe5\|zIF,>
2024-11-01 15:52:23 UTC	1408	IN	Data Raw: 47 1d ef 8f d3 77 3d c3 fb 5d 88 33 2f 3b e0 0d fe 7d d6 0e aa b8 39 3d b5 77 6f fa 60 73 14 0e ce 79 2a 51 43 9a c1 76 d6 d6 62 db ff 22 11 ff c2 b5 db 37 0a ae 73 06 a4 37 4c ec 1b b2 3d b4 a0 5f 8f 10 17 35 00 86 a9 3a bc 74 cc d2 27 10 d5 89 e9 77 76 54 1d ac 17 19 62 3d 9d 35 0a 6d ba 63 44 6b 5c b6 01 b5 23 01 be 47 b8 3b 24 a5 32 fb 4b 76 a6 40 a2 17 71 29 a0 11 c6 1e 6a b0 2a 39 4c 3c 87 fe da 5d 15 3c 1a 63 2b 63 83 11 bf 54 65 13 43 8b 9d 5e 9d aa ca df c2 06 a3 2a 56 95 e1 b3 9c 08 68 f7 ee f7 45 c7 0e 60 3c 7f 8f 8f 5f e2 ab f1 1d 00 3f 8c dd 93 2a b1 df b5 fe 2a 91 5a 74 2a e5 bf 52 d2 e4 cd 44 b1 32 14 ff 21 77 8e b2 0b 23 af 61 c9 a2 16 8b 36 de 2a 06 6c b4 f9 e4 e1 39 21 9d 93 c7 ec 53 29 6c 15 06 6d a7 41 3b de bd 10 de 32 68 35 a8 82 ac Data Ascii: Gw=]3/;}9=wo`syQCvb"7s7L=_5:t'wvTb=5mcDk\#G;$2Kv@q)j9L<]<c+cTeC^VhE`<_?ZtRD2!w#a6*l9!S)lmA;2h5
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 2c b7 1a 2d 63 40 20 08 c0 0d cd 4c 0a 9d 84 8c 65 13 a6 5b 99 95 5a 87 51 2b b1 c6 64 6b ec e0 1c 2b cc 64 a5 6a 24 72 7c 2f 9e d0 27 11 b3 0b f0 86 bf 71 a5 d6 4f 71 af fe 18 24 75 29 44 94 dc 57 fe bc e4 2e 4f 1b 08 60 e0 d6 46 39 34 00 71 32 d9 3f 35 6e e3 6c fe ab f0 9d 4a ad 6a 04 17 58 49 03 d6 68 0d eb 12 81 d0 41 a2 0e 11 4b bf 7b d4 55 f4 cc 27 8e 1d b3 ed ef a3 a5 76 a3 56 ed 77 82 6b 7b 99 3f eb 37 e2 31 c5 24 e2 cf a8 e7 1c a1 9e 58 6b 53 bf 97 41 cf 43 bd f9 57 cb f6 ba c3 52 95 ce a4 60 70 6f 82 62 1d ba 9d df 24 be 6c c7 f3 df 17 74 96 f4 67 19 c1 05 56 ef d1 73 69 cf 9e a0 96 e6 90 c2 9c 0a a9 c2 21 17 92 5c f5 d0 7f cf 45 7c bf 9e f5 63 9e 68 78 88 2c 7b af 14 f3 64 ce 75 9c 1f 45 60 f1 8e b0 51 22 d0 2b 97 48 88 3c 9f 2a 3c 4e c0 14 31 Data Ascii: ,-c@ Le[ZQ+dk+dj$r\|/'qOq$u)DW.O`F94q2?5nlJjXIhAK{U'vVwk{?71$XkSACWR`pob$ltgVsi!\E\|chx,{duE`Q"+H<*<N1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	836	OUT	POST /ui/signin?relationships=groups%2Cderived_from HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTEzNzg1Mjg1NjItWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzQyLjY1NQ== sec-ch-ua-platform: "Windows" Origin: https://www.virustotal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:23 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-11-01 15:52:24 UTC	802	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 26e14764042d1c881738c5a9fd89aa08 Date: Fri, 01 Nov 2024 15:52:23 GMT Server: Google Frontend Content-Length: 85 Connection: close
2024-11-01 15:52:24 UTC	85	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 4e 6f 20 75 73 65 72 20 69 73 20 73 69 67 6e 65 64 20 69 6e 22 7d 7d Data Ascii: {"error": {"code": "AuthenticationRequiredError", "message": "No user is signed in"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	142.250.74.195	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	547	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:24 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 01 Nov 2024 15:52:24 GMT Date: Fri, 01 Nov 2024 15:52:24 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:24 UTC	629	IN	Data Raw: 36 64 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 Data Ascii: 6d2/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recap
2024-11-01 15:52:24 UTC	1124	IN	Data Raw: 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 Data Ascii: +gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookie
2024-11-01 15:52:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49761	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	756	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTAxODE2ODUyNzItWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzQyLjY1Ng== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:24 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: f298ffe00d8941e11983591a4d79a387 Date: Fri, 01 Nov 2024 15:52:24 GMT Server: Google Frontend Content-Length: 13134 Expires: Fri, 01 Nov 2024 15:52:24 GMT Cache-Control: private Connection: close
2024-11-01 15:52:24 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 32 30 32 34 30 31 31 30 30 39 33 36 32 31 2d 65 76 65 72 79 6f 6e 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 32 30 32 34 30 31 31 30 30 39 33 36 32 31 2d 65 76 65 72 79 6f 6e 65 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 69 6e 6b 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 72 69 67 68 74 74 61 6c 6b 2e 63 6f 6d 2f 77 65 62 63 61 73 74 2f 31 38 32 38 32 2f 36 30 34 33 36 39 3f 75 74 6d 5f 73 6f 75 72 63 65 3d Data Ascii: {"data": [{"id": "20240110093621-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20240110093621-everyone"}, "attributes": {"link_url": "https://www.brighttalk.com/webcast/18282/604369?utm_source=
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 31 31 74 68 3c 2f 62 3e 20 66 6f 72 20 61 20 6e 65 77 20 3c 62 3e 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 6c 69 76 65 20 73 65 73 73 69 6f 6e 3c 2f 62 3e 20 77 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 68 6f 77 20 74 6f 20 68 75 6e 74 20 74 68 72 6f 75 67 68 20 3c 62 3e 53 69 67 6d 61 20 72 75 6c 65 73 3c 2f 62 3e 20 77 69 74 68 20 74 68 65 20 6c 61 74 65 73 74 20 66 65 61 74 75 72 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 6f 6e 20 6d 61 63 4f 53 20 61 6e 64 20 4c 69 6e 75 78 2c 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 68 6f 77 20 3c 62 3e 43 72 6f 77 64 73 6f 75 72 63 65 64 20 41 49 3c 2f 62 3e 20 61 6e 61 6c 79 73 69 73 20 63 6f 6d 70 61 72 65 73 20 74 6f 20 61 6e 64 20 63 6f 6d 70 6c 65 6d 65 6e 74 73 20 74 68 65 20 69 64 65 Data Ascii: 11th</b> for a new <b>Threat Hunting live session</b> where we will cover how to hunt through <b>Sigma rules</b> with the latest features we have added on macOS and Linux, and explore how <b>Crowdsourced AI</b> analysis compares to and complements the ide
2024-11-01 15:52:24 UTC	486	IN	Data Raw: 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 74 68 72 65 61 74 73 2e 3c 2f 64 69 76 3e 22 2c 20 22 64 61 74 65 22 3a 20 31 36 39 32 33 34 39 34 39 34 2c 20 22 74 61 72 67 65 74 5f 74 61 67 73 22 3a 20 5b 22 65 76 65 72 79 6f 6e 65 22 5d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 20 66 61 6c 73 65 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 32 30 32 33 30 33 32 33 31 36 35 31 30 30 2d 65 76 65 72 79 6f 6e 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 Data Ascii: the most common threats.</div>", "date": 1692349494, "target_tags": ["everyone"]}, "context_attributes": {"user_read_notification": false}}, {"id": "20230323165100-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/us
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 62 64 65 64 36 35 36 34 33 38 63 38 30 63 31 38 37 39 38 62 31 36 35 33 65 31 31 33 32 34 32 34 61 36 62 38 38 37 63 32 38 61 32 65 32 36 36 31 34 39 63 62 31 61 32 65 34 34 36 34 37 61 38 65 65 38 32 64 35 63 39 65 33 65 64 62 66 35 32 62 36 38 36 65 62 64 62 36 66 33 36 64 64 62 62 33 39 39 33 66 38 36 34 36 34 39 61 35 37 33 62 30 33 65 64 66 36 39 30 31 31 66 34 65 63 37 31 66 39 61 30 30 30 65 35 33 37 33 39 31 61 31 65 61 36 32 61 63 38 30 38 39 39 36 64 64 32 34 33 62 65 34 61 30 32 65 39 64 30 31 36 32 33 61 66 66 65 62 65 37 37 37 66 30 66 63 36 39 31 37 62 36 63 61 34 37 66 30 31 31 34 66 31 33 63 33 61 66 64 64 33 30 64 64 30 30 36 32 33 62 61 64 32 30 33 66 62 62 32 34 36 66 33 35 61 34 38 37 35 34 30 38 36 65 32 32 31 32 34 31 63 65 37 31 34 Data Ascii: bded656438c80c18798b1653e1132424a6b887c28a2e266149cb1a2e44647a8ee82d5c9e3edbf52b686ebdb6f36ddbb3993f864649a573b03edf69011f4ec71f9a000e537391a1ea62ac808996dd243be4a02e9d01623affebe777f0fc6917b6ca47f0114f13c3afdd30dd00623bad203fbb246f35a48754086e221241ce714
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 22 3a 20 22 57 61 6e 74 20 74 6f 20 6c 65 76 65 6c 20 75 70 20 79 6f 75 72 20 73 6b 69 6c 6c 73 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 27 73 20 41 50 49 3f 20 4a 6f 69 6e 20 6f 75 72 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 20 6c 69 6b 65 20 61 20 70 72 6f 21 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 39 31 62 30 34 61 35 36 65 33 31 36 65 65 39 39 66 63 35 39 36 39 36 31 62 30 32 34 61 38 66 35 65 35 32 32 33 35 62 38 66 31 30 65 36 31 62 39 65 36 61 32 32 39 65 32 39 35 35 62 31 35 39 37 61 30 65 64 64 65 33 61 62 32 63 35 64 31 37 61 61 62 30 64 66 33 62 64 31 32 32 64 31 36 37 63 30 38 66 37 35 36 Data Ascii: ": "Want to level up your skills with VirusTotal's API? Join our session and learn how to use it like a pro! <a href=\"https://www.virustotal.com/go/utm/91b04a56e316ee99fc596961b024a8f5e52235b8f10e61b9e6a229e2955b1597a0edde3ab2c5d17aab0df3bd122d167c08f756
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 35 31 37 61 30 33 61 39 34 66 65 62 36 35 65 38 66 63 38 31 66 30 34 34 33 63 32 63 37 35 34 34 62 32 30 62 36 65 35 34 35 39 33 32 38 34 39 34 37 62 32 31 65 32 32 62 61 39 62 37 65 64 37 39 31 30 62 37 36 34 32 33 65 66 32 37 35 31 37 38 61 64 38 66 64 34 66 30 64 37 32 30 61 61 62 31 36 37 39 33 62 36 36 32 33 39 30 36 37 64 61 30 37 39 66 35 38 62 63 39 31 34 64 32 31 62 37 32 33 37 37 66 38 35 33 63 66 38 64 62 39 32 33 37 34 36 65 38 66 35 62 63 35 38 37 66 63 65 33 33 33 31 38 64 34 34 62 61 38 34 31 38 36 61 64 62 31 62 61 63 66 38 65 37 39 61 34 65 32 63 35 33 62 34 37 31 39 38 37 61 38 63 36 35 31 31 35 34 61 65 37 65 63 36 64 61 32 31 35 31 37 61 33 34 35 66 30 63 32 64 39 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 68 65 72 Data Ascii: 517a03a94feb65e8fc81f0443c2c7544b20b6e54593284947b21e22ba9b7ed7910b76423ef275178ad8fd4f0d720aab16793b66239067da079f58bc914d21b72377f853cf8db923746e8f5bc587fce33318d44ba84186adb1bacf8e79a4e2c53b471987a8c651154ae7ec6da21517a345f0c2d9\" target=\"_blank\">her
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 6c 61 6e 6b 3e 68 65 72 65 3c 2f 61 3e 22 2c 20 22 64 61 74 65 22 3a 20 31 36 37 37 35 31 37 39 31 30 2c 20 22 74 61 72 67 65 74 5f 74 61 67 73 22 3a 20 5b 22 65 76 65 72 79 6f 6e 65 22 5d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 20 66 61 6c 73 65 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 32 30 32 33 30 32 32 31 2d 72 65 6d 69 6e 64 65 72 2d 66 65 62 2d 32 32 2d 74 68 72 65 61 74 2d 68 75 6e 74 69 6e 67 2d 73 65 73 73 69 6f 6e 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f Data Ascii: lank>here</a>", "date": 1677517910, "target_tags": ["everyone"]}, "context_attributes": {"user_read_notification": false}}, {"id": "20230221-reminder-feb-22-threat-hunting-session", "type": "user_notification", "links": {"self": "https://www.virustotal.co
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 75 73 20 74 6f 20 6c 65 61 72 6e 20 61 62 6f 75 74 20 68 6f 77 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 62 65 39 31 61 65 31 36 33 62 30 62 37 30 32 30 34 65 39 61 37 33 63 63 35 64 30 35 39 30 66 65 38 37 64 34 63 38 66 36 61 35 62 31 30 37 33 62 36 65 34 31 34 31 39 31 36 64 33 37 33 64 38 38 35 39 39 30 35 64 65 66 34 63 63 61 65 38 38 36 30 65 39 61 61 63 32 34 30 63 31 31 30 61 33 35 31 30 36 35 33 39 37 61 37 64 65 65 38 32 36 63 34 34 32 30 35 64 31 36 31 65 62 33 61 63 32 64 32 34 36 37 64 64 61 66 37 66 63 63 30 35 62 38 31 36 63 31 38 37 38 34 35 39 63 65 61 66 35 66 66 63 37 33 35 31 35 39 66 61 33 33 66 62 65 33 36 65 61 34 30 33 62 35 36 62 38 65 39 Data Ascii: us to learn about how <a href=\"https://www.virustotal.com/go/utm/be91ae163b0b70204e9a73cc5d0590fe87d4c8f6a5b1073b6e4141916d373d8859905def4ccae8860e9aac240c110a351065397a7dee826c44205d161eb3ac2d2467ddaf7fcc05b816c1878459ceaf5ffc735159fa33fbe36ea403b56b8e9
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 33 62 36 65 34 31 34 31 39 31 36 64 33 37 33 64 38 38 35 39 39 30 35 64 65 66 34 63 63 61 65 38 38 36 30 65 39 61 61 63 32 34 30 63 31 31 30 61 33 35 62 62 65 34 34 38 38 32 32 37 38 64 33 37 30 66 62 31 65 35 65 33 31 63 66 34 63 35 64 37 37 35 38 64 31 35 37 31 38 33 39 38 63 35 33 63 32 39 35 66 36 36 65 62 66 64 64 63 31 39 35 38 39 65 34 38 31 34 35 62 36 39 66 30 37 62 64 66 37 38 64 65 62 31 36 64 36 37 62 62 33 39 38 62 35 38 36 35 33 39 38 63 39 63 36 61 31 34 61 38 63 38 63 66 38 31 37 64 33 64 31 66 61 36 32 61 66 35 65 34 39 63 65 34 33 64 62 30 36 38 61 36 39 65 30 30 31 34 63 30 31 66 37 37 61 32 61 33 31 37 37 35 32 35 36 64 37 32 61 63 39 62 62 35 64 34 31 34 33 32 65 62 66 34 64 39 64 34 65 39 38 34 34 65 63 37 37 33 30 36 35 37 37 31 33 Data Ascii: 3b6e4141916d373d8859905def4ccae8860e9aac240c110a35bbe44882278d370fb1e5e31cf4c5d7758d15718398c53c295f66ebfddc19589e48145b69f07bdf78deb16d67bb398b5865398c9c6a14a8c8cf817d3d1fa62af5e49ce43db068a69e0014c01f77a2a31775256d72ac9bb5d41432ebf4d9d4e9844ec7730657713
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 65 37 37 66 35 33 64 37 64 30 34 31 37 66 39 61 64 37 34 22 2c 20 22 74 69 74 6c 65 22 3a 20 22 49 64 65 6e 74 69 66 79 20 6d 61 6c 77 61 72 65 20 61 62 75 73 69 6e 67 20 79 6f 75 72 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 22 2c 20 22 62 6f 64 79 22 3a 20 22 41 6e 79 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 27 73 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 6d 69 67 68 74 20 69 6e 61 64 76 65 72 74 65 6e 74 6c 79 20 62 65 20 61 62 75 73 65 64 20 62 79 20 61 74 74 61 63 6b 65 72 73 20 61 73 20 70 61 72 74 20 6f 66 20 61 20 6d 61 6c 69 63 69 6f 75 73 20 63 61 6d 70 61 69 67 6e 2e 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 63 64 37 37 63 38 64 66 36 62 63 36 65 Data Ascii: e77f53d7d0417f9ad74", "title": "Identify malware abusing your infrastructure", "body": "Any organization's infrastructure might inadvertently be abused by attackers as part of a malicious campaign. <a href=\"https://www.virustotal.com/go/utm/cd77c8df6bc6e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:23 UTC	755	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTU3NDczMDU5OTctWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzQyLjY2NA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:24 UTC	879	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 739b42be400f51e031ffa347fceda88d Date: Fri, 01 Nov 2024 15:52:24 GMT Server: Google Frontend Content-Length: 25 Expires: Fri, 01 Nov 2024 15:52:24 GMT Cache-Control: private Connection: close
2024-11-01 15:52:24 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49763	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:24 UTC	567	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:24 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bc836c8198408082d372bceccd828fe2 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:10:20 GMT Expires: Sat, 25 Oct 2025 16:10:20 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603724 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:24 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff d4 7d 6b 7b db c8 b1 e6 f7 fd 15 34 e3 d5 00 26 44 89 be 9b 14 cc 71 1c db f1 39 13 db c7 f2 e4 5c 28 59 0b 51 90 84 0c 05 30 00 68 8f 23 71 7f fb be 6f 55 77 a3 c1 8b ed 49 72 76 9f cd 93 b1 c0 46 a3 2f d5 75 af ea ee a0 4a 67 e7 fd cf e9 e9 3c 99 fe f2 fc 72 91 ff f2 a9 3e 59 64 27 57 49 96 c7 5f 79 77 73 33 39 0e fb f3 45 75 19 4c 26 f7 1f df df 7f 70 1c 5d df 7b b4 3f 78 34 3c 5f e4 d3 3a 2b f2 20 8d f2 a8 0e af 3f 25 65 a7 8c 8a 28 1b dd 72 af aa 28 09 af bb 8b 2a ed 54 75 99 4d eb ee a8 88 27 Data Ascii: 000000010000000100000001000000010000000100000010ffa}k{4&Dq9\(YQ0h#qoUwIrvF/uJg<r>Yd'WI_yws39EuL&p]{?x4<_:+ ?%e(r(*TuM'
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: fa f4 ef 54 d3 32 9b d7 1d 2c 5a 96 77 28 d2 0e 7b e1 5e a6 ab 67 e6 e9 cd 05 0b 39 39 c6 ba dd 8d aa b8 ec eb c0 47 d9 41 35 ca 7a f1 5d 15 aa 09 b8 86 70 e8 72 92 1d 87 a3 64 67 a7 50 89 4f 31 42 62 b5 d4 99 70 35 bc f5 4a b8 5e 86 1c f9 ed 32 0c 97 86 1d 17 fe b4 06 fb 7f ef bc 28 46 3a af f3 8e e5 17 20 21 cc 96 62 5b 27 dc 08 65 7f 7d ec 9c f7 ff 81 39 1b e5 46 b8 52 e2 49 a2 06 7b ff 6e 68 0c 1a 68 40 6d 32 00 ab ff 4e f9 95 83 1d 38 61 b6 f7 51 a4 7e 67 5a a6 49 9d 9e 75 92 7a ef 2b ec 4b 70 4b f0 c6 e0 0b 78 0b 40 b7 91 c2 cb fe bc 98 07 e0 47 10 06 fd ea 32 3b af 83 f0 e6 a6 db 05 84 33 27 58 f6 1a 79 e0 56 2c 18 62 cd 3e 73 cd 9e 42 aa dd be eb cb ae a3 60 f2 11 22 f1 c8 08 43 2b 61 46 99 15 62 47 81 d6 08 51 05 f3 0c 6a bf b3 8f 10 a8 c7 3d af Data Ascii: T2,Zw({^g99GA5z]prdgPO1Bbp5J^2(F: !b['e}9FRI{nhh@m2N8aQ~gZIuz+KpKx@G2;3'XyV,b>sB`"C+aFbGQj=
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 4e fb b4 fa cc a3 7a 64 da 23 a3 e5 07 c5 a2 58 03 b9 b3 c9 3b f0 4c a9 75 1a a7 51 35 ae e0 f1 6c 54 4d 59 42 55 36 49 b5 ff f1 a7 9f fe d8 10 91 5d f0 ba 0f 57 2b e0 f0 ee ed e1 07 8c 0e 7c 05 2c 11 14 5b 1b 62 fb 63 9a 00 39 e1 f1 a4 ec ca eb dd 0f d0 5c b0 18 54 ac 33 25 aa bd bf 80 4b 8d 3a d3 4b ba 7a eb f8 e7 0f 2f 77 1f c3 e4 61 97 86 bd 78 c8 92 46 25 68 09 1c 1c cc ed ec 0b 80 57 a7 f8 30 bf 48 1b 86 25 dc ea 3e ed 07 72 c0 b3 2f 87 ac a4 fc 16 66 14 b5 a6 7a 01 43 fb 3c 28 9e c6 77 f7 f7 a1 cf 1e dc db df 0f 61 52 1b 50 0c a1 2d 2b 50 e0 a1 49 67 70 93 a3 f2 fd bb 4f d0 64 11 96 4d b5 ee 5f 17 45 9d 50 0b 2a d1 03 fc 46 57 d0 98 b0 a4 ca d4 8a 5c d7 f6 ac 84 7b 17 55 44 c0 62 81 e9 5b eb 12 90 68 f1 65 f2 4b 2a 18 d1 35 3d 5d 97 1e 83 0c 8a 71 Data Ascii: Nzd#X;LuQ5lTMYBU6I]W+\|,[bc9\T3%K:Kz/waxF%hW0H%>r/fzC<(waRP-+PIgpOdM_EPFW\{UDb[heK5=]q
2024-11-01 15:52:24 UTC	301	IN	Data Raw: 33 c4 1e f6 1f 3d 79 bc 81 a4 1e 0f 1e 3c 7e 08 47 4a 3f cd 99 9c b0 0e 62 88 30 c4 88 3c cf 72 43 fa e9 c1 fe 78 d0 0b 76 d3 83 83 41 38 dc ef 05 f2 00 2b 32 1c 9d 15 d7 79 7c 6f b0 53 44 b0 9c 9e 3e 8d 1f 84 4f 01 9e 20 bf 89 ef dd 85 54 ec 01 17 b4 43 32 89 cf 97 d0 15 50 6f df a7 97 bc 7f 96 ae 8c a8 49 52 32 8a 28 a4 16 c4 ab 44 7a a3 29 c8 91 82 04 3d 03 07 f2 a7 f1 c2 e3 a5 46 8d 83 7b 1f 6e 25 00 f6 aa 28 d3 ce 19 14 5c c4 92 b0 cc a7 50 e2 3b 0f ef 77 fe fc d3 bf 75 a0 36 2c 52 e3 87 96 20 3d 12 9b 4a 33 16 84 74 68 00 3c 07 a0 60 04 e4 a0 76 fc 6f 6d 21 5f e7 68 03 59 51 6c 15 8d 4a 37 30 d7 61 23 18 eb 21 df 1d c0 77 55 c0 65 19 dc bb bb 93 85 d1 b4 87 f4 a9 1d c0 2b 3c 38 98 45 b3 5e fc c0 c2 04 2a 66 5f 46 14 07 49 1c 54 f1 34 7c fa 74 10 0d Data Ascii: 3=y<~GJ?b0<rCxvA8+2y\|oSD>O TC2PoIR2(Dz)=F{n%(\P;wu6,R =J3th<`vom!_hYQlJ70a#!wUe+<8E^*f_FIT4\|t
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a e4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 32 38 61 36 0d 0a 96 9e 5f 5c 66 7f f9 65 76 95 17 f3 bf 96 55 bd Data Ascii: 00000001}0000000100000001o000000010000000100000001?0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001t0000001z28a6_\fevU
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: ce cf 61 57 82 e8 da ac 81 63 5d e3 0b 3a 70 03 b5 83 4a 02 79 b0 cb a1 25 e9 33 83 52 0c dd 32 cb 7a c3 80 15 ea 1d ed b1 f1 62 17 25 42 6d 4c 30 84 e2 8d 14 f0 dd 02 34 3b 53 66 40 eb c7 44 63 a1 45 44 8d 4e f4 56 46 3d 6c 0a 44 49 82 37 72 4d 4b 2a 7a 03 b8 4a a1 30 20 61 af 14 fe ba 80 68 36 ac 09 f3 07 a1 c0 59 89 bc b9 70 b9 50 87 aa ec be f8 53 32 f7 04 8e 53 f9 8d cf d5 56 a1 0b 3a 5a 78 fe 94 13 c3 6f e2 7b ed e2 13 47 51 68 58 d8 9c 92 8b 71 b4 c0 fc 01 bc ad d3 28 f0 5a 8c ba eb 9f 76 09 88 da 77 78 1b 18 29 3a ad 7f 60 7d 27 22 98 ec 00 8c 32 84 f9 cb 78 94 a0 1b fe 62 59 d7 7a 6b 80 d5 ca e4 2c 1b b0 4d 7f ff dc 56 bf fc d6 d4 56 eb ff 43 33 5b 6d 6c 6d 62 b4 92 5f 57 66 56 87 29 c0 c7 64 0b 0f 2f e8 8d 23 49 49 fa 93 06 e4 9c ab ad 3b 92 6c Data Ascii: aWc]:pJy%3R2zb%BmL04;Sf@DcEDNVF=lDI7rMK*zJ0 ah6YpPS2SV:Zxo{GQhXq(Zvwx):`}'"2xbYzk,MVVC3[mlmb_WfV)d/#II;l
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 1d 03 cf 56 df 00 b4 ba 32 4f ef cb 40 84 07 9c a1 f6 fd e3 e8 8c c3 b8 7f 0c b2 3f 55 f8 83 e3 ae ed 45 6b 1a 24 ff d9 d9 79 6e ab 2e 93 e0 d4 e7 03 4e 79 70 5a d4 1f 52 0d 55 6c 37 a9 e3 d3 28 09 9e fb ad bc 5d 55 c5 dc c7 16 06 8e 67 3f 5f e1 32 9e 56 d8 22 4e c4 71 4a 46 10 35 4d 12 c1 01 38 e7 3d bc f2 82 a2 9c a1 cb f3 b9 40 3a 32 2c 22 64 20 20 dd 10 be 26 ec 46 40 ea 1e 36 3f 0c a2 ce 05 76 3f 22 9c 8c b6 04 cf 98 6b 82 60 5a 63 62 79 6d ea 02 7d bb d5 fd a6 d5 12 ad 1a e6 55 98 78 a0 38 fd 39 87 f6 9c a9 c1 c2 2d ab 7d 1c ce 13 ec 00 b2 0e 74 f8 39 2d 4f 4a c9 2c 4c 5e 84 e3 01 16 8c 96 70 7b 48 73 10 59 67 63 5d 6b 35 19 4b 06 07 48 7b 83 6f b4 a5 ed 98 a4 c2 75 31 3c 41 0b d2 d2 4a 08 0d c4 ea 91 18 d7 82 a7 47 6c d0 4b fd 6a 3a 75 04 72 a0 3b Data Ascii: V2O@?UEk$yn.NypZRUl7(]Ug?_2V"NqJF5M8=@:2,"d &F@6?v?"k`Zcbym}Ux89-}t9-OJ,L^p{HsYgc]k5KH{ou1<AJGlKj:ur;
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 1b 6a 3a f4 52 74 f2 db d0 92 6f b6 02 64 5d e9 78 ec 79 06 56 fb f5 b0 b6 ad d7 2e 9c 40 e7 d8 dd 3b 37 2c 8b 75 5a a0 d1 78 28 d1 db f0 55 55 8c f9 06 67 e6 bc d5 91 35 73 d6 c2 1b b6 01 b8 38 b7 f5 e1 fb 2c 5f 6d f5 bf 20 72 6a 5b b0 73 b0 94 e3 37 f0 76 cd e9 09 b2 c5 66 92 07 9b 4e 9a 32 19 bb a0 a2 c0 ec c6 5b 4b ea 95 cc fc b0 ff ae c9 e4 e5 c9 b9 d7 38 ec 24 48 11 69 b0 46 b0 e4 46 72 bd 24 2f 16 bc 91 05 d6 a7 e1 a3 35 69 04 88 dc 54 6c 28 63 a5 3a 8e 43 f9 33 b7 de 48 1e 49 fb 93 d6 ab 6e 74 0b bc d1 ef 03 79 6e b2 a9 4f cb 04 fb 5b 25 57 2e 7f 0c d5 aa f6 a7 56 92 6b 8a 65 d2 e8 d7 7e e8 29 f9 4a 96 1b 69 8b 3b 87 9b 79 31 86 8a 8e 12 3d b9 11 2a 07 61 63 ce 69 24 38 78 74 aa 55 b1 70 b0 42 93 19 d4 56 0d d8 70 e9 ed 69 18 aa 81 e8 a9 79 82 f1 Data Ascii: j:Rtod]xyV.@;7,uZx(UUg5s8,_m rj[s7vfN2[K8$HiFFr$/5iTl(c:C3HIntynO[%W.Vke~)Ji;y1=*aci$8xtUpBVpiy
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: ad 21 39 4b 85 f6 e3 55 32 87 9f d6 da 76 2a 88 b4 6b 2a 09 04 a5 26 a5 36 65 96 6f fb eb 61 34 4f 6b 04 89 05 bd fa 7e 45 d6 58 30 49 17 46 fe 98 32 c3 3d 36 e3 8c db 56 51 39 e9 c4 ee 80 7f 38 12 cd e7 67 f6 c8 30 1f c6 06 3b 57 38 a6 8c 54 17 04 47 76 b7 32 9c 9d d2 16 27 38 b5 e1 c9 93 fb 0f 36 ec 3b 16 df 45 d8 a4 45 bb 8f 64 2b b2 73 5b ec 05 47 e5 f8 28 c7 b5 19 55 dc bd 7d fb 76 56 29 35 bc c1 f1 1e f8 d9 6d f9 2f 84 cd e2 54 03 7b ba 21 8e 2c 39 2b d3 dc 39 27 15 62 16 88 4c a8 94 59 50 f2 88 6a cb d3 26 b8 9a 90 01 f2 62 2a 36 b7 79 95 eb 2b 13 de d1 a6 cc ab da 6c f5 d0 af 88 4a e6 45 a1 2f 0a 79 01 2f 24 0f 32 50 74 a1 e5 4a 76 4f 1f 21 ac 55 e3 79 90 e3 1c ff 1d 7a ac 4e 12 32 a5 59 08 e8 42 9e 3e 4d c7 03 40 02 e4 81 aa 2b b9 30 8b a6 aa e3 Data Ascii: !9KU2vk&6eoa4Ok~EX0IF2=6VQ98g0;W8TGv2'86;EEd+s[G(U}vV)5m/T{!,9+9'bLYPj&b*6y+lJE/y/$2PtJvO!UyzN2YB>M@+0
2024-11-01 15:52:24 UTC	1408	IN	Data Raw: 10 77 9c f1 3e 5b 04 a9 93 21 ae f7 8c fa 3d dc 60 6b 3d 7b 9d 02 d4 2e 21 25 ea 49 f6 62 59 cb 80 f2 f1 b5 e6 61 0f e5 ae d5 64 51 5f e2 09 9b b6 2e 8b 0a 31 61 ee c1 e2 01 4c 78 c2 fe 2a e6 52 e3 e9 c1 f1 52 dd 1e ae 0b de 32 6b ba 68 78 1b f4 63 93 e1 8d 73 2d a9 5f cb 2f 1e 9a 0d 41 0d b7 db de 1e af 93 60 8f d4 ed 59 83 cf bd 2e 2f 9c 4b fb ec df 96 f3 99 65 1c 89 96 f1 fc 6d fd 2d e5 18 97 ad 2b f9 de 51 be 74 63 ab ec d8 78 cc 1d 02 1e f8 49 1b 4a 7d c5 b7 10 aa c1 c7 76 09 53 5e 8a 2a 25 62 8d 91 5b e3 0e 1e f8 d2 bc 13 a3 30 92 05 ed 3f b1 64 b1 46 bd 3d 26 cd f0 a4 50 7b 42 3d b4 94 19 b5 d0 19 b4 d0 6e 9f 67 86 60 53 c6 82 47 4d 8f 91 be c3 60 4f 1a cc 22 9c 6f da ed cb db 6a 0c 72 e6 89 8e 98 43 97 d5 ab 31 f3 7c 4c 45 1c 85 23 3e 40 70 16 af Data Ascii: w>[!=`k={.!%IbYadQ_.1aLxRR2khxcs-_/A`Y./Kem-+QtcxIJ}vS^%b[0?dF=&P{B=ng`SGM`O"ojrC1\|LE#>@p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:24 UTC	456	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	879	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: b4465d47eb3c5bb5935e59f87d361cd4 Date: Fri, 01 Nov 2024 15:52:25 GMT Server: Google Frontend Content-Length: 25 Expires: Fri, 01 Nov 2024 15:52:25 GMT Cache-Control: private Connection: close
2024-11-01 15:52:25 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:24 UTC	648	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: da6b08e9f2954b60c20459d0068cb21d Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:11 GMT Expires: Fri, 31 Oct 2025 12:18:11 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99253 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 66 66 33 0d 0a 7a db 46 b2 b0 7b 2b 34 97 e3 87 34 41 8a d4 c9 32 25 88 cb b1 93 b1 93 38 c9 c4 ce c1 a3 68 34 14 05 49 b0 29 40 01 41 4b 8a ac ef f7 f7 7b df cb be 81 7d 29 fb 4a f6 5b d5 07 34 24 ca 51 b2 66 d6 5e df 3c c9 8c 45 1c ba 1b d5 d5 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000ff3zF{+44A2%8h4I)@AK{})J[4$Qf^<E
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 40 c1 6d 98 a4 65 4f f9 40 31 9f 00 f0 83 07 c0 50 7b d2 cb c6 27 70 ad e6 cb f1 a9 56 f8 f0 a1 f9 2a 31 75 47 a6 07 87 45 7e c2 87 86 cd 27 8e b9 db 82 4b 7f 6f 8d 86 df a7 1f 5e b4 b3 92 ab 8d 0f 83 f5 0f 2b cb 6d 2e 9f 4e c7 27 a7 c9 41 db b4 70 7f a9 57 26 b3 b2 95 b4 47 a6 37 43 23 12 ae ae 68 16 b4 64 00 f9 e0 41 33 9b 9f ec 27 45 80 02 cb a5 da 97 f4 a2 55 c6 49 5b b1 50 c4 fd 28 ad f0 d8 be bc b2 3c e9 72 36 4c a3 ac 62 38 9e 14 0a a4 99 6d 6b 74 79 90 67 c9 f0 5e ff 6a 68 af 06 d1 fb f1 74 9e 0c e1 64 9d ce ee d5 55 94 54 2d 30 36 e5 71 91 9f 35 ca ab e8 70 98 5e 5d 99 bb 2c 39 6b bc 66 98 3e 2b 8a bc 68 35 5f 64 b4 80 88 1b 97 65 72 72 5a 36 ca bc 61 e8 21 69 64 79 d6 d5 eb fd 69 d2 48 91 3e e3 6c 92 f4 7e ce 5e 64 8d bc 38 48 0a 29 bb cf 1b 21 Data Ascii: @meO@1P{'pV*1uGE~'Ko^+m.N'ApW&G7C#hdA3'EUI[P(<r6Lb8mktyg^jhtdUT-06q5p^],9kf>+h5_derrZ6a!idyiH>l~^d8H)!
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: f5 99 96 fc 77 91 51 a6 37 5e 46 31 70 a8 bc 7f ba cf fe 74 9f 05 ee 33 43 23 ff 22 7d c5 cd bf c6 7d e2 1b 9c 48 d7 a5 95 f7 c5 65 37 74 15 a2 5d a4 88 73 cf 21 ee fb 9b 05 2e 3a 1c ae ed 64 a7 d8 ad 2a 70 e3 db 49 f1 f3 e6 71 b2 49 50 8f 5d 68 6e a6 54 50 ad 43 d6 bf cf 5a f9 4e ba 5b 29 1e b7 b9 bd 0c 94 99 77 7c 95 3d 91 21 b0 d8 6a ad fa 31 c7 15 be 5f df e9 b7 01 a7 2c d5 df fa 26 1e 44 2f e2 e5 e8 f3 78 25 7a 1e af 46 df c4 83 a4 bb 5e 85 16 7c 55 d5 68 96 c5 38 9b 4d c7 68 11 cd 4e d9 69 46 fd 76 b3 6a fa db 85 05 fb 91 16 0d 0b fe 5a 15 24 94 69 bb 23 51 46 55 33 bf 18 c6 68 75 a2 2c 7e 39 2e 8f 7b 27 e3 73 95 6a fb e3 ec e0 2c 3d 28 8f 5b ed ee f2 c3 ac bd b4 8c a8 2b 72 02 1e 5a b2 be b7 a5 cd 83 0c 19 91 68 f3 49 bb 13 08 8b 9f 7c 5c cb 3d 55 Data Ascii: wQ7^F1pt3C#"}}He7t]s!.:d*pIqIP]hnTPCZN[)w\|=!j1_,&D/x%zF^\|Uh8MhNiFvjZ$i#QFU3hu,~9.{'sj,=([+rZhI\|\=U
2024-11-01 15:52:25 UTC	388	IN	Data Raw: 2f f0 b3 d2 ce 31 82 10 89 32 ce 33 62 f8 5a ee 59 d1 19 b4 51 6a 8a 64 fc ce 77 98 b9 7a cf 84 e6 ea 26 90 4b 01 72 98 d9 40 d4 04 13 6b 79 f5 45 ef b4 c8 cb 5c b0 16 7f 19 5c 87 a6 c4 e1 17 51 1e c4 bb aa 9d c8 da 64 c5 f3 a6 fc 92 25 14 de bc 34 42 fe 32 6e 48 f7 f4 04 55 6d 76 3a 45 7d 5b fa fb 87 9f 67 9d a5 36 0b 84 d3 80 d5 82 7b 23 53 9b 4d 08 a4 ec a1 91 27 e7 18 7d 9a 04 99 8a 39 39 d9 8e fb ba 5c 70 5d 4c e8 62 0d 0b 78 0d 23 4c 48 f7 0a 31 9b 7d 73 96 59 5b 33 21 97 0b 08 84 6d 33 59 7e 96 d5 08 44 f7 ba 5c 2a c9 d0 2b c5 0e 96 67 5a 9d 13 98 c3 ea a1 5a 11 12 6d 7d 63 5b c3 d6 72 5b 7d b7 c2 13 ef c5 08 fe a6 23 a1 2a a4 3b 5b 40 a9 19 96 6f e2 78 25 b0 7a 9f 1d 3d 42 ad 98 00 85 dc 20 ab f9 d6 78 53 28 8b 1d 1f 65 9c ef cc a1 2d 81 af 9d 6a Data Ascii: /123bZYQjdwz&Kr@kyE\\Qd%4B2nHUmv:E}[g6{#SM'}99\p]Lbx#LH1}sY[3!m3Y~D\+gZZm}c[r[}#;[@ox%z=B xS(e-j
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 90 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a 06 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a b5 0d 0a 30 30 30 30 30 30 30 31 0d 0a da 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a 98 0d 0a 30 31 0d 0a 4e 0d 0a 35 66 66 33 0d 0a db 19 12 dc b7 0b be 6d 8c 9a 7e ad 46 20 56 a4 6b be 5a 4f 85 3f d0 57 bb e6 fd 2f 00 25 08 09 20 62 9e 8a 95 a3 70 80 61 ec 80 d6 52 22 97 d3 eb 80 25 58 2c d4 8e 99 95 f1 97 15 53 c7 b6 4b 08 bc 23 f0 06 ab a4 4a 17 71 7a 47 12 6c c3 f1 ca 91 62 e5 97 79 Data Ascii: 00000001R0000000100000001`00000001/00000001W0000000100000001'00000001000000010000000100000001a0000000101N5ff3m~F VkZO?W/% bpaR"%X,SK#JqzGlby
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 1f 6e 29 2c b0 dc 28 fc 1d 0f 03 ad 22 20 0c a2 08 16 9a 56 46 bf 96 c3 5f ca f6 82 b6 3e 15 43 83 f2 4f f1 ea 3d c5 1f 88 a9 02 f1 58 a1 e3 6f b7 80 76 a3 52 19 90 ca 8f b7 54 92 31 11 79 ba 10 ca cd 1b 4d 5a 7b eb a8 d9 c4 c9 57 81 f4 17 0f 74 2a 1e a8 e7 af 5f 7e 55 03 f9 cb 5b be ae ed 57 55 42 80 bf b8 a5 ca 1d 00 ae 1a bc 05 dc bf 7a 70 c5 56 f2 2a dd 47 db 39 82 39 33 b0 a1 93 3b d0 43 75 a0 02 92 2c 89 52 31 a3 74 5a 10 43 93 cf 67 b7 b6 12 6a a1 76 bc af 7d 47 8d 52 aa ee 06 5f c8 c4 87 be 80 5a 6d ff a5 89 9a cc 11 5f 82 3c f4 2a 19 f6 a1 4d a7 41 61 0d 38 c7 63 20 11 36 46 12 59 13 58 ad b4 16 22 c2 66 82 33 a5 4c 6c 09 80 20 30 a7 f6 08 51 89 ea 12 72 ec e4 16 58 ed e7 15 ae 1a b0 37 1a fc 88 46 54 68 e3 a6 db aa 34 da 5e 31 b5 54 7b 1a 25 d9 Data Ascii: n),(" VF_>CO=XovRT1yMZ{Wt_~U[WUBzpVG993;Cu,R1tZCgjv}GR_Zm_<*MAa8c 6FYX"f3Ll 0QrX7FTh4^1T{%
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: b3 b7 6b 6c 2b 7b db f1 3e bc 8f ad 08 18 c0 c9 32 71 16 bf df d9 17 5e d1 e9 ec 53 a3 bd 79 82 b0 96 c0 00 0c 92 ba 22 b2 d1 72 2d 83 30 24 cd 58 ba d1 db 43 11 22 04 74 4a fa 89 3d d9 84 10 c3 4f c8 4d 28 0f 2b 72 f0 83 20 20 8b 90 53 16 aa 85 b0 6f ea 8d 61 7e 1a fa 76 ea 35 83 8a c9 4a d3 bf d9 1e 65 ee d8 9c 28 13 55 73 56 d3 37 6a a2 82 a3 a0 11 77 6e 94 7c 47 79 66 93 85 65 90 d5 6c f6 8a 63 89 8f 3e 96 bd 9d e2 62 28 d0 1a 0d e7 91 3d 00 b8 e6 e5 81 b1 10 98 e0 3f bb 71 9b 78 38 93 98 4a 6b a5 68 fd 61 2d 2d 24 16 f2 dc 07 c3 0f 93 96 e4 fc 23 7e 7e 54 d8 1d 0e a9 df 0c 22 b1 c1 ba 99 22 e8 5d 65 4c 53 47 48 e2 b6 a5 b0 86 76 d7 6c 4b 29 9d 41 60 cf ca 21 b1 de ba eb 14 85 d5 52 76 15 1d 45 f4 9f d9 cf 84 62 46 16 14 32 90 04 e4 9a ca 5c ea 6f 4e Data Ascii: kl+{>2q^Sy"r-0$XC"tJ=OM(+r Soa~v5Je(UsV7jwn\|Gyfelc>b(=?qx8Jkha--$#~~T""]eLSGHvlK)A`!RvEbF2\oN
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 68 48 8e 2e d5 d5 de 67 f1 41 56 19 95 4f 58 6f bb 29 71 f3 5c 8b 91 5d 92 07 76 e3 eb 61 89 18 8e 6f 37 2a e3 ed 35 6a f6 0e c2 d1 58 98 91 56 9c 91 70 96 c5 97 93 f1 a9 a4 6f e4 7c 87 e8 94 c4 6a e9 7b 2e 07 41 4c df 9e 82 26 1e 85 44 1c 2a cf 4c 9c 13 eb 6e 89 e1 c9 4f 5f 9c 9c 24 07 29 be 65 89 c9 19 1f 49 c2 09 d4 cc ca fc bd 4f 75 25 34 fc 6b 4c 53 bb 3d 2f 34 69 8b 27 50 c1 31 f9 db c2 dd 8b e7 5a d9 29 6a 26 c9 a5 f5 ee 60 b8 f1 cd 55 8b 1c 4e 20 e0 bc 27 93 21 45 dc 96 8e 25 06 09 a0 5f 8a 3d 5e 77 88 3c c9 e2 de a3 e8 55 16 0f 96 9e 64 d1 eb 2c 6e fe fc f3 ec 61 6b a7 d3 dd 1d fd fc f3 41 a7 2d b7 cd e8 5d ed 05 27 75 f0 ee e1 cf 3f f7 da 5a 88 fb 9d e4 b3 dd aa d2 c8 56 7b fa 7b ab 7d 62 3e f7 75 16 2f fd fd 3f 5a 3b fd ee e3 71 f7 70 f7 72 25 Data Ascii: hH.gAVOXo)q\]vao75jXVpo\|j{.AL&DLnO_$)eIOu%4kLS=/4i'P1Z)j&`UN '!E%_=^w<Ud,nakA-]'u?ZV{{}b>u/?Z;qpr%
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 08 2c ba 28 72 78 8f 10 7c 7f 59 aa e6 93 c9 78 86 e7 c5 3c 59 7e 1c 65 e3 f7 e3 b7 b9 9b c7 4c c5 75 e8 96 87 10 0d 42 88 f9 8c d8 93 06 60 c5 6b 6b f2 40 54 48 99 93 2b 50 bd de 1d 70 52 d7 f0 51 7f 95 f3 3a 1f 63 b0 77 2c 19 d6 c6 84 37 f7 0a 3e 3c e1 f1 0a 82 d4 e1 76 75 85 99 cc d0 9f 92 ab c6 53 3a 53 6f 7d ed d1 80 f1 d5 c7 ca f2 61 b2 cb 4c 27 f3 a8 c2 d3 60 00 4b 65 2c b4 64 80 a6 d5 95 0d 58 cd 0a 8f 4f c7 17 63 7a 76 aa bd 5d e9 3f 7a 14 9d ca 9a f5 74 7e 78 28 8f e4 7f 14 4b 8a b9 f0 8b f5 0d d8 7e e4 e6 c6 fa a0 0f 0d 9d 4e 59 a7 22 a3 97 57 d7 57 a8 9c 9f c1 1c 1c dd 22 23 98 89 96 24 84 ca 1e 31 93 61 b9 09 18 b6 4f d7 d7 21 09 c4 af ed 3e a4 44 27 18 90 0b ab 0f 2c 23 53 d7 10 35 45 7e 31 36 f3 81 79 86 04 58 8b 66 84 f5 4c 61 df a2 36 30 Data Ascii: ,(rx\|Yx<Y~eLuB`kk@TH+PpRQ:cw,7><vuS:So}aL'`Ke,dXOczv]?zt~x(K~NY"WW"#$1aO!>D',#S5E~16yXfLa60
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: df c3 52 5c 10 0f 4b 3b 36 ad d6 a0 bb f2 90 2e 3c cc bb f3 f6 43 3e b6 da 5d 7f 98 73 cf 5d d2 69 0d b8 32 6f f5 49 d1 99 3f 64 64 d7 af 30 09 bf cc a2 6f 38 dd 5b 93 f1 fa a9 d6 b0 06 5e b1 42 13 80 26 94 a8 ac 2b 30 0e 2b db 53 d7 b2 b8 06 a6 68 ef 84 ec 2f d4 ac 6a ef 71 65 26 e7 c3 cf 33 31 65 9c a8 be 55 bb d9 f0 ae 80 85 4d f9 4a 1b 12 de 60 ef 66 81 67 d4 f1 8a 86 4c 51 98 ad d7 eb 66 d3 aa c6 77 47 fb c3 e7 70 70 cb 37 b8 26 69 1d a8 f8 25 8b 7e cd 22 2c dd e0 e4 12 73 0c 6b 6d f6 c8 54 48 31 69 7f 84 db be ca 0c f7 63 95 d1 7a 45 4b 95 a4 53 06 cf e8 28 ba 8e dc c5 be bb 70 4c 40 fc 6a c5 bb 5b 5a 7f 12 b4 8e 39 fc 8f b4 ae dc c0 c9 65 81 45 1d f1 27 a7 15 56 ad 20 14 86 6a 84 52 e4 2e 09 a7 74 97 fb ed e8 ba e0 11 97 e0 82 01 ef f6 d6 b6 8c b7 Data Ascii: R\K;6.<C>]s]i2oI?dd0o8[^B&+0+Sh/jqe&31eUMJ`fgLQfwGpp7&i%~",skmTH1iczEKS(pL@j[Z9eE'V jR.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bb563f1c44400e4c66eb54709569d70b Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:20:40 GMT Expires: Sat, 25 Oct 2025 19:20:40 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 592305 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 66 66 64 0d 0a 00 00 00 00 00 02 ff cc 5d 6d 73 db 46 92 fe 7e bf 82 e6 5d a9 88 32 17 11 25 f9 25 64 60 af d7 56 bc da 8d e5 54 24 27 77 e7 f3 a1 40 12 92 10 51 80 0a 00 e5 a8 24 fe f7 ed c1 bc f5 74 cf 40 4c ce c9 25 1f 62 61 fa e9 ee 67 66 7a 30 33 0d 70 30 5c 37 f9 a0 69 eb 62 d1 0e 67 a3 26 5f 9d c5 9f f3 f9 75 b6 b8 7c 7d b1 2e 2f 6f da 74 5d a4 57 59 51 26 3d b2 fb fb 8f 9f a2 f8 7a dd 5c 8c 3e 7e 3c f8 7a ef d9 de a7 f1 5d f7 ef f4 6c 5d 2e da a2 2a 47 c5 38 1b b7 d1 9d be 1e a4 a2 24 ba bb c9 ea 41 9b 0c d7 e5 32 3f 2b ca 7c 39 7c 94 b4 b7 d7 79 75 36 38 b9 bd 9a 57 ab 9d 9d e2 a3 fc 2b 2e da bc ce da aa fe 74 7f 5f 7c 1c Data Ascii: 000000010000000100000001000ffd]msF~]2%%d`VT$'w@Q$t@L%bagfz03p0\7ibg&_u\|}./ot]WYQ&=z\>~<z]l].*G8$A2?+\|9\|yu68W+.t_\|
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: ed f0 f8 e8 ad 4f 49 0a a4 ce 73 57 e7 c3 f1 9b c3 d3 c3 d7 a7 87 6f bc ce b4 50 ea 4e f6 5c e5 93 0f 27 df 1f bd 3e 7a ff e1 c4 a3 6c 85 4a f9 a9 ab fc ee d5 77 41 5d 23 9b e9 10 34 0d f1 e1 f8 87 c3 d7 ef df 1e 1f fd f7 e1 1b 34 9e 16 9e 46 65 ad a6 9a 93 35 b3 24 68 e1 b2 bd 28 5a 35 2f 05 db 16 a4 0a 56 32 a4 4a b6 71 a8 92 95 30 25 d3 2a 54 c7 08 86 a4 bd 86 3a 90 50 4b 89 69 8e 86 9f ad ba 52 50 1e 06 bb 94 b8 d3 34 83 03 2a b6 55 d6 16 9e 53 88 ad a0 86 4c f6 28 c6 54 c8 40 9e 92 9a 89 89 d5 8c a8 b5 a7 4a 6a 44 9d 1c c2 c8 39 3a fd 2f 36 a4 56 31 15 49 12 6a 4c 19 e1 f1 fb e3 43 13 dd 48 49 94 4b 0d 35 a2 8c c6 77 ef 7f f2 29 40 b1 c4 eb 51 64 14 de 1d be 39 fa f0 ce a7 23 25 4a 4d 8d 1f a3 f6 f7 a3 b7 7f f7 29 89 72 da 5a ab 38 30 6e 6e 3c 4d 87 Data Ascii: OIsWoPN\'>zlJwA]#44Fe5$h(Z5/V2Jq0%T:PKiRP4USL(T@JjD9:/6V1IjLCHIK5w)@Qd9#%JM)rZ80nn<M
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 8e b1 ec 8b 69 b3 9c c5 96 d1 6c df ab 63 2c e3 f0 30 eb 60 6c 31 30 cb 1b ac b1 b4 d5 c2 19 5b 46 53 fc 56 ba 90 75 d8 8c 97 b9 5c 5d 8b 87 b0 72 21 09 cf 28 cd e3 32 78 fe 6a d7 cd 3f e4 19 3c 36 83 07 30 e2 19 1c 2d 86 05 e5 4c ac cf 53 f5 04 02 16 72 d9 cb 56 2c d1 a7 6d 7c 5d 35 8f 33 b5 07 cf 13 f5 c8 26 6b 1a d8 3c 8c ee 36 e3 73 f9 30 29 77 17 be c9 c7 4f e3 1c 2d 45 e1 7a d6 99 fa 26 75 16 bd 6a b1 1b cd f4 b3 8b 17 2f 5e ec ab e7 17 93 29 2c 95 e9 8e 1f 1e 8d c9 5b 4b 34 9b c3 1e e0 52 66 ea f6 14 94 ac cc fd e0 7d 00 3b ab 74 f9 d4 bb d5 b7 1b 78 be 82 4c 1f 00 da 2e a9 7b a1 4f 00 8a 96 bf e0 bd bb 63 38 e6 9e 4a 8c 19 f7 62 b5 eb 05 3e 23 40 bc d8 93 eb 5a af da 73 a2 c6 16 a0 5e ad af 89 16 76 06 d3 85 4c 69 78 35 27 bb 44 95 2e 1c fd 5a a2 Data Ascii: ilc,0`l10[FSVu\]r!(2xj?<60-LSrV,m\|]53&k<6s0)wO-Ez&uj/^),[K4Rf};txL.{Oc8Jb>#@Zs^vLix5'D.Z
2024-11-01 15:52:25 UTC	268	IN	Data Raw: 14 40 bc 51 71 d0 11 cb 37 31 4f 0c 41 5c 31 79 d0 17 4b 0f 31 5f 0c 41 7c 31 79 8f 2f 9e c1 f1 b8 e3 20 e6 91 43 82 4e 79 ca 85 b9 e4 10 e2 90 03 82 ee 54 2e 85 f9 d0 39 16 77 08 eb 84 0c be 41 ca 5b 84 cd bb 98 7b 88 2e 92 e4 50 1a 85 92 f1 27 51 8c 1d 9e e7 d0 f7 25 26 f1 58 b6 29 0a 5d 47 70 67 0b 0d 39 5b e4 31 a2 b6 88 fa 77 17 c8 12 91 18 73 a4 dc b1 89 d6 17 c0 c5 dd d3 43 ad c3 62 b0 1e 16 86 5c 98 db 63 9f 23 2f c8 75 e7 85 3c e8 54 b5 43 d7 62 88 bb 31 a6 e4 01 57 4a ea 78 41 1b ea ce 2a ba 06 2b e8 ca d1 32 0e cd 6e 1b 5a 9a 16 82 3e 2d 72 8c f8 36 b3 1d 07 9f 00 8c f9 8a 1d 83 78 c2 d1 7b 5b 1d 5c 86 89 16 80 41 1f 3e 68 50 ed 5d e5 38 32 d6 e4 86 d3 35 25 77 a6 64 50 1b 0d bc 0b 64 e4 b0 90 10 c4 22 4a b2 67 9b a6 5d f4 40 a4 a3 1e 00 75 d7 Data Ascii: @Qq71OA\1yK1_A\|1y/ CNyT.9wA[{.P'Q%&X)]Gpg9[1wsCb\c#/u<TCb1WJxA*+2nZ>-r6x{[\A>hP]825%wdPd"Jg]@u
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 37 65 31 0d 0a 34 bc 01 d2 1e c3 08 e9 2e 2c 77 7c f9 c6 15 da 40 b9 b7 14 d3 ad 06 01 be 7a 2d 38 be 70 04 9a 7d 8b ae 8f b1 6d 24 aa d9 d8 86 c5 b1 b9 d5 ea bf f3 b1 15 12 7c 6e 85 eb de 0d 15 2f a2 7c 9f d5 6d 91 89 c3 6e fe 6c ef a2 78 5e 42 81 1d 01 db da b8 e9 3d ef 8e c5 64 b0 3c 52 d8 44 78 4a a1 19 3d a5 ca 7d b7 29 b1 3f 30 75 09 38 3b 16 b4 cd 74 ca 7f ff 77 4f 1e fe 3d d8 9f e7 9d 13 87 eb ef f5 ae 89 5e 36 c9 1f f4 ba 5b 3d 37 81 80 47 f9 6f 78 c5 84 cc 2e e2 a7 c2 6e e6 b5 db 1d 86 5d e2 7d 8e de 0c 9a 00 c6 dc 38 10 62 b9 1f 40 ee 48 dc 02 a1 ca 01 3d 19 20 b6 29 44 d1 8f 69 31 1c a1 cd e4 84 35 93 13 d2 4c de c3 19 57 10 d6 5b 7a 7b fa 60 7b 1b 2c e1 ee b5 47 f8 7b 31 a4 0e 5e 4c 4f 3d e8 76 Data Ascii: 000000010007e14.,w\|@z-8p}m$\|n/\|mnlx^B=d<RDxJ=})?0u8;twO=^6[=7Gox.n]}8b@H= )Di15LW[z{`{,G{1^LO=v
2024-11-01 15:52:25 UTC	632	IN	Data Raw: 23 40 b2 c1 81 d2 63 41 9f 60 03 8d e9 3d c1 a6 f4 9d 60 d3 7a 3b 94 cf 36 aa a7 d0 24 a3 4a e0 2c 39 dd 8b e6 77 75 aa 20 82 13 e6 b4 cc cd c5 f2 5b 08 32 cc 85 e2 bc 3a 76 6f b5 33 18 97 09 cf bc d4 4d 4b 03 33 79 9f 32 e9 57 55 22 6b a4 3e 2e 84 c2 48 4c 4d e2 bc 7f b8 05 2a a4 aa 60 07 95 3b 4f fc 3a a2 0e 29 54 35 5d 04 2e f4 9f 24 e0 90 13 8d 10 5e f4 df ea 10 3f ec c6 17 7e c8 a5 4f 0c ee 7d c5 81 a0 45 94 7c 5a 82 9e af dc 43 15 87 36 a2 88 8b 81 1a be e4 03 00 b1 c1 40 c1 02 5f 6b ef 70 93 a4 bf bd 69 e1 b3 05 9e f5 94 8a 54 58 ad d8 a8 ed 7a 5a 4c ef ce 8c c4 23 ab 53 e2 c5 90 eb e2 85 8e 29 13 84 d2 69 17 49 26 bc 60 d9 86 c2 4f 57 c3 06 9f 0c 39 c7 9e 8e 93 8e 90 be 00 1a fa 4f 69 f2 44 cf a1 c6 a6 96 47 ea 2b 74 8e 51 5f ef 76 0e 7c 02 95 df Data Ascii: #@cA`=`z;6$J,9wu [2:vo3MK3y2WU"k>.HLM*`;O:)T5].$^?~O}E\|ZC6@_kpiTXzZL#S)iI&`OW9OiDG+tQ_v\|
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/25924.b3a6356de76617e73c99.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 00ed36f221797d7344b30f7d5af550c3 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:28:23 GMT Expires: Sat, 25 Oct 2025 19:28:23 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591842 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff bc 5b 5b 77 db b6 b2 7e ef af 90 b8 b3 b5 c8 18 66 24 a7 cd 45 0a aa e3 38 4e 9a 36 a9 d3 d8 6e d2 ca aa 16 45 41 12 6d 9a 94 49 50 8e 62 e9 bf 9f 6f 70 21 29 c7 ee be 3c ec 87 c8 e0 00 18 00 73 9f 01 e2 e6 22 9e fa d7 62 bc 08 c2 8b 83 79 91 5c 2c e5 a8 88 46 97 41 94 f0 bf e9 5b af 07 43 cf 5f 14 f9 dc 1d 0c f6 7e 78 be f7 fd 90 dd 3c 7b d2 7e ba d7 75 25 13 2c f3 f8 8f 37 92 67 7e 72 39 71 a5 d7 5b 06 59 23 e1 ce 68 14 a7 93 20 9f 8f e6 f4 53 24 13 31 8d 12 31 19 8d 1c 16 f1 0e 4b f9 1e 0b f8 f3 76 fb 69 e7 f9 f3 bd 1f be 7f fa 7d fb f9 f3 0e 2b b8 33 48 c7 e7 22 94 8d fd 6c 56 5c 8a 44 e6 43 87 e5 75 70 16 ac 00 Data Ascii: 00000001000000010010ffd[[w~f$E8N6nEAmIPbop!)<s"by\,FA[C_~x<{~u%,7g~r9q[Y#h S$11Kvi}+3H"lV\DCup
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 86 1e 21 7a d0 c1 08 c7 db 71 1e 38 e0 9b e4 0f fa 07 be b6 a7 dd 65 1a 4d 1a 6d 96 48 7e e0 eb 93 b0 88 da 95 29 62 29 9d 05 6c 50 34 7a 9b 1f 26 70 96 59 30 8e 05 0b 24 ff c3 cf 17 71 14 0a 56 48 9e c8 7e 22 cb 53 9f 04 33 8b 3d 97 96 4b 33 21 6b 04 d7 0b e6 2c 84 53 97 fd 4c 42 23 b6 b7 15 4b ee 7e b2 73 89 0b ec 8d f9 62 95 70 42 86 b4 ca 7f 72 df 40 10 bd 8d c7 a6 92 bf 95 ee 01 73 ac 87 c0 b9 e7 16 06 ff 82 cf a5 fd 04 f7 c9 fd 01 b4 b0 20 78 35 7c 8e ec a7 71 4a 00 4d 14 48 1b 2f e6 84 99 80 7f 07 78 25 f9 2b e9 4e a5 c7 c6 aa 35 47 6b a6 5a 4b b4 ce 55 6b 81 d6 b5 6a 8d d0 ba b4 d4 2a c5 db d2 6a 5f f2 4b d9 bf 94 fe 32 88 0b 71 34 35 f0 ca 3e 1c c9 5b da 76 87 69 20 e3 41 06 d0 0f 11 93 64 ae 07 5b 21 5e 64 3d ad fd 09 97 03 31 ec a9 fe 5c 48 37 Data Ascii: !zq8eMmH~)b)lP4z&pY0$qVH~"S3=K3!k,SLB#K~sbpBr@s x5\|qJMH/x%+N5GkZKUkj*j_K2q45>[vi Ad[!^d=1\H7
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: dc 15 9c fc df 16 21 11 a1 dd 71 64 c4 6c 59 95 84 ae d7 3f 31 b8 37 9e 58 fb 10 13 4e 25 52 da 69 46 7c 30 54 92 45 42 93 d2 fe ca 88 c1 2b ed 40 8a a5 b7 b8 d5 e4 88 95 22 1d f0 a4 a5 75 8a aa ad 6f f9 a3 42 cb 45 ae 74 32 84 74 94 ba 28 b6 75 10 85 9a a6 8b 0c 37 fe 31 ac 14 49 6d 76 8a b0 af b2 a3 d0 55 fd 59 29 d2 d4 2a d2 9c 6a 0a ca 7f 2e b0 5e da 27 7f 72 2c cb ec 05 ea 5c 54 5a a6 9b 4a cb ea 8a 35 82 62 cd 87 a8 6a 0a a3 ec 5a a7 56 3c 87 4e 4d d8 88 cd 95 4e 15 a4 53 23 36 c1 27 09 4b a1 74 4a 6b 14 48 be 52 9e 7d e5 41 15 64 94 14 50 f3 4a 91 c0 d3 85 76 fc ef 5d c1 ca 04 5a f9 81 1b 74 46 5c b0 e6 82 ca 02 6e 44 a2 32 a2 c8 0e 01 2d 56 93 ca 42 16 a5 a5 69 2c 34 1b 8c 03 89 50 bf 00 b9 ab a5 36 22 86 a3 27 0d c5 9e 26 20 30 21 99 58 24 5b 23 Data Ascii: !qdlY?17XN%RiF\|0TEB+@"uoBEt2t(u71ImvUY)*j.^'r,\TZJ5bjZV<NMNS#6'KtJkHR}AdPJv]ZtF\nD2-VBi,4P6"'& 0!X$[#
2024-11-01 15:52:25 UTC	261	IN	Data Raw: 10 1b 75 5b fc 2e d4 2f 4a 5a 68 9f 57 62 f4 13 31 c5 9c e1 5b 59 87 44 df 92 6f 1e 54 73 55 fd c1 30 d7 6a 87 5d d7 c8 3c 69 50 aa 9e df 20 89 41 49 bc 5e 43 80 a2 da 73 36 14 f5 2c 29 cb b9 d5 54 8b 7e 43 49 d6 6f 92 bf bb cb 40 59 6c 28 b9 59 54 54 7e c3 eb 83 77 f5 22 75 d9 69 58 46 24 30 46 97 98 d5 3c 19 28 49 1d d6 28 fe b9 46 25 95 17 35 6d 91 04 93 6d ec 49 93 c1 1a 54 fa e9 86 cb eb aa 8a 8a e6 c9 46 96 ef 2b ca 4d d6 b5 57 5f 2c 60 a7 ec d9 de e3 67 3f d4 5e 7e 39 05 12 6a 8a a7 42 e9 f4 32 7f 82 00 f8 e6 8f 3f bb 2e 5e 85 15 46 6a a1 35 ee b3 bd 67 8f 9f 78 95 88 44 64 1c 54 de 1d 31 55 a7 24 db 42 b4 2b 60 67 d3 a1 1b 20 48 43 95 43 5d b7 56 76 c6 88 b2 8a f6 29 dd dd 20 23 4f 13 d1 17 6e ee 75 cd 95 71 69 12 72 14 92 e6 22 41 66 1c d5 18 99 Data Ascii: u[./JZhWb1[YDoTsU0j]<iP AI^Cs6,)T~CIo@Yl(YTT~w"uiXF$0F<(I(F%5mmITF+MW_,`g?^~9jB2?.^Fj5gxDdT1U$B+`g HCC]Vv) #Onuqir"Af
2024-11-01 15:52:25 UTC	1342	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a 18 0d 0a 30 30 30 30 30 30 30 31 0d 0a 80 0d 0a 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 31 0d 0a e8 0d 0a 34 36 65 0d 0a 6b 0f 30 12 96 ea 89 f0 0d 3e 0a c3 f1 0a 87 c7 9d 9d 45 db 28 68 ad 08 1e 03 23 a9 72 cd 9c 44 7c 91 78 87 50 db 0f e5 87 db 63 e4 3c 4b af d5 a0 Data Ascii: 0000000100000001j00000001-000000010000000100000001'000000010000000100000001R0000000100000001J00000001a0000000100000001000000012146ek0>E(h#rD\|xPc<K
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49772	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/99111.8b301b015be7b22d0bc3.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 49951e388e478cad6b825162209c806c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:10:59 GMT Expires: Sat, 25 Oct 2025 16:10:59 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603686 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 31 0d 0a 8b 0d 0a 61 36 37 0d 0a 08 00 00 00 00 00 02 ff ec 58 6d 73 db b8 11 fe 7e bf 82 66 5d 0f 11 51 14 29 d9 92 42 1a 52 72 ce a5 93 5e ae c9 e4 65 72 ad a2 bb 50 24 64 31 a1 00 1d 08 26 d1 49 fc ef 7d 40 90 b2 6c 77 6e 3a d3 ce cd f4 c5 1f 2c 00 04 16 8b c5 b3 bb cf c2 2e 0b 66 15 4a 66 89 b2 23 a7 60 f9 d2 fb c2 16 9b 38 f9 74 b5 2a f9 a7 cf ea e7 32 fb 79 1d 67 9c fe c6 b7 fd 7e 36 27 de a6 2c 56 ce 6c f6 f0 61 10 04 6e ff 62 e8 5f cc dd dd f0 62 3c bc 08 1d e5 32 97 13 3a d9 71 2f 75 98 bb 7b f9 29 74 d0 5d 55 24 4a 04 2f 94 25 69 3f 38 1f 9d 8f 07 c3 f3 91 2b e8 60 e8 66 b4 f7 d3 57 de ed f6 dc 9c f6 66 ef bf f6 bf 7b 5f 0e 7c bf ff be 7c fa d4 47 fb e9 d3 61 30 ef 5d bb 25 dd 89 cf 4c 2e 73 f1 25 b4 Data Ascii: 00000001001a67Xms~f]Q)BRr^erP$d1&I}@lwn:,.fJf#`8t*2yg~6',Vlanb_b<2:q/u{)t]U$J/%i?8+`fWf{_\|\|Ga0]%L.s%
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 8f af 5f 3e f9 b1 fb dc 4c ee 3e 4b 19 57 d9 32 63 32 b4 be 7d fd a4 3b e8 5e e5 31 f2 18 26 c2 d7 c9 7e 7f a3 87 0e 95 da 04 9c f2 32 cf 29 55 53 fd 1b da 25 5c 79 99 71 96 da 27 54 6d 37 4c 2c ad d7 db f5 42 00 14 6a 66 5a 5e a6 98 8c 95 90 f3 fd 5e cd ec 47 8f da be 3d d7 e8 d4 72 4e 28 42 55 6d 61 57 b8 99 9b 23 5c 20 98 c4 f4 c4 77 0b 7a 12 44 4a 6e b5 1d 32 ea 60 7f 2f 89 73 98 0b 71 91 b3 af 4a a3 91 42 39 7c 7e b1 f8 c8 12 1d 24 4e 28 e4 19 1b 45 10 12 54 2c 47 72 ae 63 ef 89 13 53 04 f2 cc 08 e1 10 92 0a ae 5d cb 29 4d 0c 91 1e 32 51 c9 88 5b 36 d0 87 30 c4 47 ad 0b 89 aa 24 56 c9 4a df 0a d4 f2 71 a7 aa c2 e1 a1 ce 76 d7 a8 78 12 9f 9d 35 27 42 18 d7 51 1d a2 73 28 6d 3a 0e 71 1b 2d 73 ad 65 de 5e e5 41 0c 8e 51 10 93 be 44 55 35 f7 5c 56 55 0d Data Ascii: _>L>KW2c2};^1&~2)US%\yq'Tm7L,BjfZ^^G=rN(BUmaW#\ wzDJn2`/sqJB9\|~$N(ET,GrcS])M2Q[60G$VJqvx5'BQs(m:q-se^AQDU5\VU
2024-11-01 15:52:25 UTC	225	IN	Data Raw: 6c 5d 22 27 5e 01 4d 4e 9c 92 26 1e c7 8b 49 ad c9 e1 c5 4c d1 d2 14 c8 51 b3 19 d8 bd c6 89 26 9d 4b 68 0d 7f d1 3c 1f 78 bf e3 c1 02 ba ac f1 78 f5 52 0a d4 0e 6a 8b 39 a1 c0 e2 fa 3d 01 bc f0 50 59 27 9e 5e 7f 50 38 f1 96 ba 66 d2 8a d5 ef db 75 10 3a b0 72 86 77 58 75 f4 8c 80 f2 a2 55 25 4e f1 0c d4 3e d7 71 7a af 44 06 fe 99 a7 2b 9c 77 99 5a a1 e8 8e ee 68 0c f3 4d 85 66 ef 37 1a bb 7c 8a c7 ac fa 61 c9 47 c1 1c 90 10 31 6d 1a 87 08 27 e6 2c ec 50 b2 4b 2f 41 81 8a 73 e1 75 f7 9b 5e ef 0f 56 21 4a 99 30 c4 e3 0d 0a f5 b7 af 9e d3 fa 79 df 1b 2f 06 7e b0 f0 83 8b 05 1b 2d fa fd d4 5f 24 03 ef 63 e1 ad e3 cd df 01 00 00 ff ff 03 00 01 0e 1e 6b 52 18 00 00 0d 0a Data Ascii: l]"'^MN&ILQ&Kh<xxRj9=PY'^P8fu:rwXuU%N>qzD+wZhMf7\|aG1m',PK/Asu^V!J0y/~-_$ckR
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	142.250.185.131	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	369	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:25 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 01 Nov 2024 15:52:25 GMT Date: Fri, 01 Nov 2024 15:52:25 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	629	IN	Data Raw: 36 64 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 Data Ascii: 6d2/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recap
2024-11-01 15:52:25 UTC	1124	IN	Data Raw: 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 Data Ascii: +gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookie
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7f340708e3a92b41864ebae74b22b748 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 09:02:54 GMT Expires: Sat, 25 Oct 2025 09:02:54 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 629371 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 31 0d 0a 92 0d 0a 30 66 65 66 0d 0a ff ff 3e 05 82 6c bc 44 96 80 00 50 7c 81 a6 bc b6 ec ca b9 2e 71 b6 22 3b 5b b5 3e 57 82 c7 80 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001{00000001s0000000100000001F00010fef>lDP\|.q";[>W
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 0a 2f cb 0c f2 68 6b 56 d0 99 89 5f 6c 75 ef 0b bb cf c7 cb 4d 18 42 fc 31 e2 88 91 65 9e 11 3a 43 fe 1c f9 d9 82 14 74 60 2f c5 ec b8 fa e0 e2 03 c5 57 bc 6f e3 fe 30 c7 76 72 b0 7d 10 80 1c a3 7f 1c 5f 23 3a 0a 4e 7e ba cf c4 58 8b 97 82 50 5c ef 93 18 8b fd ff 16 87 5f f8 d1 82 1c b0 58 f2 f3 8f 13 b3 7e 35 3f 2d 2c c1 e2 98 08 61 b4 25 40 f8 59 11 1f fc 74 44 78 8e eb 1e 95 35 d5 7b bd 59 ca 18 c3 47 0e 45 a7 0f c0 11 f1 e6 52 75 7c a3 96 54 71 bc 8a 4c fd 8e 1b d5 cf 81 e3 94 74 fa fc fb 54 8d 6a 7b e1 17 dc 90 32 31 a9 d5 00 b5 a8 c5 ac bc 4d aa 70 f9 47 4a eb 2e f4 a9 c7 7a da e5 80 81 d1 61 76 7b a6 19 94 42 06 0c 7d 16 c0 2a 5f cf 4e ac 6d f8 d2 5a cc 78 63 06 8b be 56 e3 e3 43 8c ed 64 b5 5e fa 65 52 1a 9f c2 ce 99 d1 c2 2c 18 52 af 84 cf e5 6f Data Ascii: /hkV_luMB1e:Ct`/Wo0vr}_#:N~XP\_X~5?-,a%@YtDx5{YGERu\|TqLtTj{21MpGJ.zav{B}*_NmZxcVCd^eR,Ro
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: e4 79 14 32 01 0e 28 0d 88 a1 3d 05 e2 ea 3e c4 55 83 18 f3 4e a6 d7 2b 89 bd 12 d8 61 c6 d2 53 66 2c a4 66 2c 35 66 ab 4f 9a b1 ad 6a c6 9a 9b 37 26 68 3b 97 48 8e 99 20 66 7e a8 dd d9 c2 ee b0 ba d7 11 bb 33 99 0e cf c7 ac a2 66 65 bd 92 d7 d3 06 13 d4 cb 58 3d 0d 63 be d1 43 b5 a8 67 18 b3 40 94 ed 88 95 44 fd 3f 9f 7d fd c5 7f 67 da d7 1a ec 65 05 87 01 52 ad dd 0c ad 81 e5 6a bd 65 55 ad 4b ef ec 0c 92 16 48 a8 15 e6 ab 33 83 ad b8 cc d7 db 82 86 14 9a 6b 3b 8e e9 da ee 40 7b bb 24 0a a6 e7 9b 6a 99 17 25 9b fd 6d 02 87 bf 44 d0 4b 3d ee 42 fb ee f5 5b 65 83 a4 5a 6e e0 59 03 75 75 1b 94 67 f5 6e 67 41 9a 07 67 b4 16 79 86 ea d2 ab 37 57 af d8 d6 67 5e 81 f3 ec 58 ba 27 80 14 78 da 97 76 70 1e 45 fe 8c 0d 25 59 94 2c 72 0c 8e 46 8e 1d bb 7c 70 bd 29 Data Ascii: y2(=>UN+aSf,f,5fOj7&h;H f~3feX=cCg@D?}geRjeUKH3k;@{$j%mDK=B[eZnYuugngAgy7Wg^X'xvpE%Y,rF\|p)
2024-11-01 15:52:25 UTC	430	IN	Data Raw: ed bf ee 7f ed 79 01 c1 4c 42 bf 83 b9 24 c5 2e c8 41 c5 e4 57 ea 89 8b 55 18 d9 ff 75 45 a2 c4 ef ad 91 24 21 05 08 45 22 3c 8c c8 5c e5 b4 81 8f 6a 09 93 83 48 16 a2 c9 88 87 7d e8 c1 cc d3 d4 0c c8 d2 bf 49 f2 c2 2b 57 08 06 97 fb 3d ab 08 f5 2d f6 cf ae a9 24 59 93 f1 90 ac f6 c8 90 ef a0 63 a8 c5 4e 4d 56 ea f4 56 28 6d a5 64 ef 79 d8 ef 57 58 47 ca 2a 56 65 db ad fd 88 36 f8 79 a8 02 0b 97 84 56 51 3d aa b4 e8 74 b4 cb 5e 27 15 42 af 0a 1e c0 8a 98 b8 43 65 c6 b4 e7 b1 34 69 62 08 6d 83 fd 53 d3 a8 5f 7c 12 b8 4a b2 4d 45 4e 82 97 70 4d f8 3e 27 a7 44 3e ec 3c 3d c9 c9 19 f0 39 aa e5 27 e6 6c a9 f3 c1 d0 34 a4 50 2e ce 4b 91 b4 24 69 06 9b aa ca b3 9d 30 f8 b4 f4 ac cc 2b 59 7e ca 6c f4 fe 4e 92 8e d2 c8 87 22 84 5f d4 21 2a 37 ad e5 ad 8f a6 12 49 Data Ascii: yLB$.AWUuE$!E"<\jH}I+W=-$YcNMVV(mdyWXGVe6yVQ=t^'BCe4ibmS_\|JMENpM>'D><=9'l4P.K$i0+Y~lN"_!7I
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a a2 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 24 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a 25 0d 0a 30 30 30 30 30 30 30 31 0d 0a bf 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 31 0d 0a 51 0d 0a 35 66 66 0d 0a 78 3d 93 2f b8 59 d4 be 8b a1 98 ae 16 e4 0e 85 a9 ba 0a dd 59 5d 03 c4 1c 71 b7 63 b3 38 08 b5 1b c5 1d 76 66 fc d6 9d f9 6c d0 98 b1 80 99 2b 26 5e 1a 9f f1 88 86 47 0f 3c cb 3c eb 68 Data Ascii: 00000001d00000001000000010000000100000001\0000000100000001H0000000100000001$0000000100000001%0000000100000001000000011Q5ffx=/YY]qc8vfl+&^G<<h
2024-11-01 15:52:25 UTC	322	IN	Data Raw: 36 0e 3d 36 0e 21 e1 c8 15 86 08 38 1f 1b 87 1e 1b 87 1e 1b 87 c4 63 e0 51 ae 6c c2 ff bf 6a 1c f2 f1 bf 17 e1 a3 b8 5e 3b bd c6 1a 0f 19 a0 9b 72 62 10 91 13 64 e9 0d 5e bb 6f da 5c 78 4f 8b ef b1 b6 45 9e ee 6a 63 53 ca cd 0c d0 e9 6f 34 f6 3e 2b 0d bc a7 1f 1e fb 60 f0 ef d9 67 14 11 cf 9f 06 89 fd f8 65 64 1b 0c cb 29 74 8f f6 d8 0c 25 9a b6 1e 9b a1 fe b5 66 a8 7f fb 5e 27 a5 fa de b4 31 3c bc a5 45 59 de ae 52 df 5f bc 3f b2 ec f3 8b d0 4a 53 ce ff 97 4a 31 2b 45 f2 96 a6 1d fb 9e 76 4d 42 cd b1 4f d5 36 c5 c0 7f a5 3c 79 6f 31 8f 7e ee 56 29 d8 a1 1b 20 ec 39 96 cb 3a 90 b4 bf 68 d6 e0 e6 b6 9d 80 66 5a 54 1c f8 de ba ef 63 81 8d 45 c7 b2 84 70 a4 c0 76 58 1a c1 7f fc 81 b6 44 d4 46 3a 6c 41 a7 44 a7 d2 2a a8 fb b9 75 84 df ad 3e f0 07 26 ea f7 1f Data Ascii: 6=6!8cQlj^;rbd^o\xOEjcSo4>+`ged)t%f^'1<EYR_?JSJ1+EvMBO6<yo1~V) 9:hfZTcEpvXDF:lAD*u>&
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49775	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	457	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: c68577ea18204ff7e1480f6b0082ae1f Date: Fri, 01 Nov 2024 15:52:25 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:25 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49774	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	482	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: eec0225c04ecf03ae5fe3fc5ead2b7ac Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:12:20 GMT Expires: Sat, 25 Oct 2025 15:12:20 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607205 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 66 66 34 0d 0a 6b 7b db c8 b1 e6 f7 fd 15 34 e3 d5 00 26 44 89 be 9b 14 cc 71 1c db f1 39 13 db c7 f2 e4 5c 28 59 0b 51 90 84 0c 05 30 00 68 8f 23 71 7f fb be 6f 55 77 a3 c1 8b ed 49 72 76 9f cd 93 b1 c0 46 a3 2f d5 75 af ea ee a0 4a 67 e7 fd cf e9 e9 3c 99 fe f2 fc 72 91 ff f2 a9 3e 59 64 27 57 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000001}0ff4k{4&Dq9\(YQ0h#qoUwIrvF/uJg<r>Yd'W
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 84 a1 ee 36 b7 c6 52 a6 55 95 5c 78 3c 8c ec 41 96 a9 79 e7 33 8e 59 9a 5f d4 97 4f fd 66 5a 8c 45 df 8f 57 38 fc 13 30 e0 a1 f9 66 f5 dd 60 c0 97 2b 1f 0c f6 51 68 90 57 e6 f2 a4 99 0c d8 cf 39 f8 b7 b2 87 bd 9f 1c fa f4 ef 54 d3 32 9b d7 1d 2c 5a 96 77 28 d2 0e 7b e1 5e a6 ab 67 e6 e9 cd 05 0b 39 39 c6 ba dd 8d aa b8 ec eb c0 47 d9 41 35 ca 7a f1 5d 15 aa 09 b8 86 70 e8 72 92 1d 87 a3 64 67 a7 50 89 4f 31 42 62 b5 d4 99 70 35 bc f5 4a b8 5e 86 1c f9 ed 32 0c 97 86 1d 17 fe b4 06 fb 7f ef bc 28 46 3a af f3 8e e5 17 20 21 cc 96 62 5b 27 dc 08 65 7f 7d ec 9c f7 ff 81 39 1b e5 46 b8 52 e2 49 a2 06 7b ff 6e 68 0c 1a 68 40 6d 32 00 ab ff 4e f9 95 83 1d 38 61 b6 f7 51 a4 7e 67 5a a6 49 9d 9e 75 92 7a ef 2b ec 4b 70 4b f0 c6 e0 0b 78 0b 40 b7 91 c2 cb fe bc 98 Data Ascii: 6RU\x<Ay3Y_OfZEW80f`+QhW9T2,Zw({^g99GA5z]prdgPO1Bbp5J^2(F: !b['e}9FRI{nhh@m2N8aQ~gZIuz+KpKx@
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 3a 75 6a ac bc 78 ee f9 3b f8 2a 84 63 e5 2f 45 96 07 9e b3 ac 53 9a 22 9a b1 70 82 34 0e 2e 10 90 42 62 d2 15 20 74 8c 57 07 2b 05 0f 2c 94 b2 8e 78 30 87 98 4b 1e d1 49 06 36 de 40 41 4b 64 ba 98 41 4a ff 59 2a a3 4e fb b4 fa cc a3 7a 64 da 23 a3 e5 07 c5 a2 58 03 b9 b3 c9 3b f0 4c a9 75 1a a7 51 35 ae e0 f1 6c 54 4d 59 42 55 36 49 b5 ff f1 a7 9f fe d8 10 91 5d f0 ba 0f 57 2b e0 f0 ee ed e1 07 8c 0e 7c 05 2c 11 14 5b 1b 62 fb 63 9a 00 39 e1 f1 a4 ec ca eb dd 0f d0 5c b0 18 54 ac 33 25 aa bd bf 80 4b 8d 3a d3 4b ba 7a eb f8 e7 0f 2f 77 1f c3 e4 61 97 86 bd 78 c8 92 46 25 68 09 1c 1c cc ed ec 0b 80 57 a7 f8 30 bf 48 1b 86 25 dc ea 3e ed 07 72 c0 b3 2f 87 ac a4 fc 16 66 14 b5 a6 7a 01 43 fb 3c 28 9e c6 77 f7 f7 a1 cf 1e dc db df 0f 61 52 1b 50 0c a1 2d 2b Data Ascii: :ujx;c/ES"p4.Bb tW+,x0KI6@AKdAJYNzd#X;LuQ5lTMYBU6I]W+\|,[bc9\T3%K:Kz/waxF%hW0H%>r/fzC<(waRP-+
2024-11-01 15:52:25 UTC	373	IN	Data Raw: 9f 1d 00 bd ff c3 ca 80 12 4f c5 34 e2 fa 69 0c eb 20 3d f0 c1 a5 98 d1 ee 5b d0 90 59 17 ab bd 77 e1 37 4d 67 29 e3 1b 90 fc 48 d4 40 f0 e7 f4 4b 07 f2 6b a5 ef ba 58 c1 4e 87 3f 7e df 15 2c 26 28 a6 cb 28 ef 3f 8f 33 c4 1e f6 1f 3d 79 bc 81 a4 1e 0f 1e 3c 7e 08 47 4a 3f cd 99 9c b0 0e 62 88 30 c4 88 3c cf 72 43 fa e9 c1 fe 78 d0 0b 76 d3 83 83 41 38 dc ef 05 f2 00 2b 32 1c 9d 15 d7 79 7c 6f b0 53 44 b0 9c 9e 3e 8d 1f 84 4f 01 9e 20 bf 89 ef dd 85 54 ec 01 17 b4 43 32 89 cf 97 d0 15 50 6f df a7 97 bc 7f 96 ae 8c a8 49 52 32 8a 28 a4 16 c4 ab 44 7a a3 29 c8 91 82 04 3d 03 07 f2 a7 f1 c2 e3 a5 46 8d 83 7b 1f 6e 25 00 f6 aa 28 d3 ce 19 14 5c c4 92 b0 cc a7 50 e2 3b 0f ef 77 fe fc d3 bf 75 a0 36 2c 52 e3 87 96 20 3d 12 9b 4a 33 16 84 74 68 00 3c 07 a0 60 04 Data Ascii: O4i =[Yw7Mg)H@KkXN?~,&((?3=y<~GJ?b0<rCxvA8+2y\|oSD>O TC2PoIR2(Dz)=F{n%(\P;wu6,R =J3th<`
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 31 0d 0a e7 0d 0a 32 38 61 66 0d 0a 7f ff 8f ff fc af e4 74 7a 96 9e 5f 5c 66 7f f9 65 76 95 17 f3 bf 96 55 bd f8 f4 f9 d7 2f 7f db 1f dc bd 77 ff c1 c3 47 8f 9f f4 f6 ba 56 0b 81 c0 d9 88 24 00 f6 fe 41 8c 30 11 70 df ac 85 c3 f8 36 9e 37 02 ad fb 27 a3 4a c3 d3 f4 39 45 3e d3 3e 94 ea b3 ce c3 7b 02 26 41 da b5 c5 77 58 fe f0 81 e9 2e 7e b2 3f 4e 77 1f 3e 18 3e 79 64 4b 06 77 ef a2 e8 c9 a3 de dd 87 c3 fb 8f 6d e9 83 47 28 bc ff b8 f7 e0 ee Data Ascii: 00000001}0000000100000001o000000010000000100000001?000000010000000100128aftz_\fevU/wGV$A0p67'J9E>>{&AwX.~?Nw>>ydKwmG(
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 87 aa ec be f8 53 32 f7 04 8e 53 f9 8d cf d5 56 a1 0b 3a 5a 78 fe 94 13 c3 6f e2 7b ed e2 13 47 51 68 58 d8 9c 92 8b 71 b4 c0 fc 01 bc ad d3 28 f0 5a 8c ba eb 9f 76 09 88 da 77 78 1b 18 29 3a ad 7f 60 7d 27 22 98 ec 00 8c 32 84 f9 cb 78 94 a0 1b fe 62 59 d7 7a 6b 80 d5 ca e4 2c 1b b0 4d 7f ff dc 56 bf fc d6 d4 56 eb ff 43 33 5b 6d 6c 6d 62 b4 92 5f 57 66 56 87 29 c0 c7 64 0b 0f 2f e8 8d 23 49 49 fa 93 06 e4 9c ab ad 3b 92 6c 50 c4 0e 22 79 58 41 94 d6 5a ac 34 b9 26 d1 0e 17 a7 53 28 b6 55 6a a8 c6 51 75 e7 a4 d5 0e 77 e0 2c fa af 5e bc 79 f1 1e b6 d6 1f 4e de be ff c3 8b f7 54 bc fa 6f df bf 7e f5 fa cd b3 9f 4c d1 5d 56 db 6c 90 2d 36 1a 64 1e 4a f6 53 18 0f 06 28 ad 81 43 11 17 68 40 c5 64 36 0c d9 fe a8 fa 9c c9 96 a4 9b 9b b5 71 85 d7 53 7a 3b d6 ca Data Ascii: S2SV:Zxo{GQhXq(Zvwx):`}'"2xbYzk,MVVC3[mlmb_WfV)d/#II;lP"yXAZ4&S(UjQuw,^yNTo~L]Vl-6dJS(Ch@d6qSz;
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 32 2c 22 64 20 20 dd 10 be 26 ec 46 40 ea 1e 36 3f 0c a2 ce 05 76 3f 22 9c 8c b6 04 cf 98 6b 82 60 5a 63 62 79 6d ea 02 7d bb d5 fd a6 d5 12 ad 1a e6 55 98 78 a0 38 fd 39 87 f6 9c a9 c1 c2 2d ab 7d 1c ce 13 ec 00 b2 0e 74 f8 39 2d 4f 4a c9 2c 4c 5e 84 e3 01 16 8c 96 70 7b 48 73 10 59 67 63 5d 6b 35 19 4b 06 07 48 7b 83 6f b4 a5 ed 98 a4 c2 75 31 3c 41 0b d2 d2 4a 08 0d c4 ea 91 18 d7 82 a7 47 6c d0 4b fd 6a 3a 75 04 72 a0 3b 21 9d 7b 91 2e 97 9b bf 19 ec 21 6e d8 e2 e7 16 a1 2c be be dc 68 7d ad b8 da 9c ca 0c 17 1a b9 05 ac 2d 07 28 1d 4b a3 55 a3 ca d4 70 23 e4 6b 6e b0 5d 10 c3 12 1b c2 b5 60 17 65 4d c9 6f 94 7e ed a4 65 be bc b2 7c dd ce a4 b2 94 07 ca 6a 3c 7e a7 59 02 a9 ba d9 ff 81 6c 08 2c 6d ed ac 9b ad ae 08 a0 3c 6b 16 2b c2 84 51 74 37 0b 5d Data Ascii: 2,"d &F@6?v?"k`Zcbym}Ux89-}t9-OJ,L^p{HsYgc]k5KH{ou1<AJGlKj:ur;!{.!n,h}-(KUp#kn]`eMo~e\|j<~Yl,m<k+Qt7]
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: ff ae c9 e4 e5 c9 b9 d7 38 ec 24 48 11 69 b0 46 b0 e4 46 72 bd 24 2f 16 bc 91 05 d6 a7 e1 a3 35 69 04 88 dc 54 6c 28 63 a5 3a 8e 43 f9 33 b7 de 48 1e 49 fb 93 d6 ab 6e 74 0b bc d1 ef 03 79 6e b2 a9 4f cb 04 fb 5b 25 57 2e 7f 0c d5 aa f6 a7 56 92 6b 8a 65 d2 e8 d7 7e e8 29 f9 4a 96 1b 69 8b 3b 87 9b 79 31 86 8a 8e 12 3d b9 11 2a 07 61 63 ce 69 24 38 78 74 aa 55 b1 70 b0 42 93 19 d4 56 0d d8 70 e9 ed 69 18 aa 81 e8 a9 79 82 f1 53 8d de 7b c5 8a ea cb a5 e1 5b 76 68 70 dc 58 b5 da 0d d7 a6 55 fb ef 8a c6 84 cd 81 69 3a 2f f0 b0 d2 11 40 6c 47 62 11 b3 3d 10 5b 6a c6 61 fa 48 85 6f 49 47 5c 21 0c 81 7f c8 1b b9 e7 d2 a0 36 14 0a ea a4 76 c8 95 cb 82 69 dc 44 26 7d 4c b6 61 0b e3 6c 14 20 d8 d2 66 ce 3c 30 17 ee ef fa d0 af 81 f4 6d 6d 1e 1b 3a fd 85 6e ba 6f Data Ascii: 8$HiFFr$/5iTl(c:C3HIntynO[%W.Vke~)Ji;y1=*aci$8xtUpBVpiyS{[vhpXUi:/@lGb=[jaHoIG\!6viD&}Lal f<0mm:no
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: b2 73 5b ec 05 47 e5 f8 28 c7 b5 19 55 dc bd 7d fb 76 56 29 35 bc c1 f1 1e f8 d9 6d f9 2f 84 cd e2 54 03 7b ba 21 8e 2c 39 2b d3 dc 39 27 15 62 16 88 4c a8 94 59 50 f2 88 6a cb d3 26 b8 9a 90 01 f2 62 2a 36 b7 79 95 eb 2b 13 de d1 a6 cc ab da 6c f5 d0 af 88 4a e6 45 a1 2f 0a 79 01 2f 24 0f 32 50 74 a1 e5 4a 76 4f 1f 21 ac 55 e3 79 90 e3 1c ff 1d 7a ac 4e 12 32 a5 59 08 e8 42 9e 3e 4d c7 03 40 02 e4 81 aa 2b b9 30 8b a6 aa e3 0a 48 df d0 3b 04 7a 81 7b e4 89 6d 58 af 29 e4 10 8e 62 61 b6 33 d9 80 59 64 9c 1e b2 cd 4f 01 76 a2 43 8f e7 2a 21 82 e9 81 e7 8d 20 73 35 0e f3 3c 46 42 69 c5 db 69 fa 7a 82 5a c0 bd e8 16 33 cf 0c 4f 85 bf d2 74 ca aa cc 5e 90 c3 19 81 aa eb 35 31 d2 b5 e2 e8 32 98 43 23 92 23 db 83 79 9c 86 4b 16 2c 78 79 c2 14 e9 af 98 db 92 ee Data Ascii: s[G(U}vV)5m/T{!,9+9'bLYPj&b6y+lJE/y/$2PtJvO!UyzN2YB>M@+0H;z{mX)ba3YdOvC! s5<FBiizZ3Ot^512C##yK,xy
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 2f 9c 4b fb ec df 96 f3 99 65 1c 89 96 f1 fc 6d fd 2d e5 18 97 ad 2b f9 de 51 be 74 63 ab ec d8 78 cc 1d 02 1e f8 49 1b 4a 7d c5 b7 10 aa c1 c7 76 09 53 5e 8a 2a 25 62 8d 91 5b e3 0e 1e f8 d2 bc 13 a3 30 92 05 ed 3f b1 64 b1 46 bd 3d 26 cd f0 a4 50 7b 42 3d b4 94 19 b5 d0 19 b4 d0 6e 9f 67 86 60 53 c6 82 47 4d 8f 91 be c3 60 4f 1a cc 22 9c 6f da ed cb db 6a 0c 72 e6 89 8e 98 43 97 d5 ab 31 f3 7c 4c 45 1c 85 23 3e 40 70 16 af 34 c2 99 a7 53 b4 6f cd 52 f9 0e 86 ec c2 58 5d 7b 30 bb d0 5c 1d 27 63 24 ac a3 27 00 b5 1c 23 d6 ce e9 c6 70 ef 02 00 08 d7 2d 73 97 d0 8f 23 e3 e4 c7 2b c3 22 e1 98 44 90 c1 9e a8 15 e3 f4 0a 69 ba 45 2b b8 49 81 e3 15 27 52 2c 7d c8 6f fa e7 72 f9 6d d0 bb 40 10 1c 70 b4 b0 c7 01 01 30 e1 60 fa 60 2c 92 a8 0f fa e7 76 0c 83 22 76 Data Ascii: /Kem-+QtcxIJ}vS^*%b[0?dF=&P{B=ng`SGM`O"ojrC1\|LE#>@p4SoRX]{0\'c$'#p-s#+"DiE+I'R,}orm@p0``,v"v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49776	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/34894.ada184a092746870eefc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f5916520a5b2de1d0de74f0a31441274 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:04:32 GMT Expires: Sat, 25 Oct 2025 16:04:32 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 604073 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 66 66 36 0d 0a dc 5b 5b 77 db 48 72 7e cf af 80 11 1f 2d b0 03 40 a4 2e b6 04 19 d2 78 64 4d 56 bb f6 c8 c7 92 f7 6c 22 2b 34 48 34 49 58 20 c0 05 9a ba 84 e2 7f cf 57 d5 dd 00 48 4a 96 77 33 c9 43 ce 9c b1 c1 46 77 a1 aa ba ee 55 b6 67 95 b0 2a 59 a6 03 69 1f 38 95 c8 86 c1 ad e8 4f e3 c1 f5 f1 78 96 5f df c8 de 2c ed 4d e2 34 8f be f3 ee e1 e1 f2 ca 0d a6 b3 6a ec 5c Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010ff6[[wHr~-@.xdMVl"+4H4IX WHJw3CFwUg*Yi8Ox_,M4j\
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: dc 3e cd 71 a5 38 11 4b 29 26 53 69 c9 c2 4a 00 90 0c e5 ac 14 56 5e e4 3e 8b 24 6c 9f 95 82 d6 38 1f 88 e0 4b 7e 9a 5b 45 99 88 92 f6 f7 f1 86 a4 18 5b 3c 3e 10 93 e2 58 05 4b 5c 65 4d 60 84 ad 71 7c 23 ac d8 5a 93 7a c7 b5 26 42 8e 8b 24 b0 dd 85 e3 2e 8c 52 59 8a 9a 39 6b 00 84 ec e1 41 1c 4a 2d 74 24 90 02 9c 56 22 e8 1e 90 ec 2a f5 eb 78 65 a4 b4 15 52 99 bf 11 07 f9 4f 3f b9 e5 65 7e 15 49 fc a1 af d0 2a 17 b4 fb 2c 32 df 52 0e c5 2b 95 96 41 c7 a2 d8 dc 86 fe 06 6c 5a fa 66 fb 48 84 4a bf a3 f2 a8 8c 94 20 04 23 21 cf 6e f3 8f 25 1c 49 29 ef df 89 6a 50 a6 53 f2 31 e4 a3 c2 92 94 d8 56 9c c0 cd 6a 01 fc 24 86 e4 10 36 36 6c 83 c2 da bb 20 11 83 02 86 41 b8 71 a4 b7 d7 4b 35 be 07 b5 ea 12 41 55 cd 12 bf 7b 50 1d 46 9d 83 ca f7 5d 07 7a 78 59 5d 11 Data Ascii: >q8K)&SiJV^>$l8K~[E[<>XK\eM`q\|#Zz&B$.RY9kAJ-t$V"xeRO?e~I,2R+AlZfHJ #!n%I)jPS1Vj$66l AqK5AU{PF]zxY]
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: f5 4e 9f bd 8e 7d 78 5e af 54 66 bf 32 78 4c 6e 0b b2 8a 3a 97 28 29 9f bd d8 b2 91 82 32 2a 21 4c 19 19 e6 1e 25 6a 6d a2 b1 ad d4 c9 41 fb 86 ef 40 ec dd 2a b1 d3 7b bf 63 4d ef fc 5d 6b 42 7f b4 30 b4 8a 1b 51 0e b3 e2 d6 1f a7 49 22 f2 e6 fe f5 77 7d fa ae b1 a1 93 ca 8f 67 b2 80 15 55 fe ba 16 0a 59 c8 38 fb a4 30 fd 15 07 ea 17 1a 0a ad bd 4f 2b c4 8f c4 64 bb 16 98 f6 47 8c d0 80 89 54 34 60 49 e6 e8 d0 33 66 ad 78 9c 77 2d 1b 57 18 1b 57 40 7b 10 af d6 47 e3 67 8f c6 e6 68 bc cc 72 32 ea 4a ab 44 3e 43 c2 4d 21 10 f2 e4 99 e6 fd 61 a7 cd fd 5b 70 ff 76 95 fb 14 e2 0b 3f 29 64 e5 d3 41 cd e2 95 55 8b 81 2e f1 67 65 87 e1 0f 29 55 8d 85 1b b6 c2 af 97 f8 fa 4b 7c fd 2b 82 39 a0 bd 60 16 40 c0 2f 54 64 43 41 a7 2e 59 e8 a4 0a ba 54 a6 88 b2 df ba d0 Data Ascii: N}x^Tf2xLn:()2!L%jmA@{cM]kB0QI"w}gUY80O+dGT4`I3fxw-WW@{Gghr2JD>CM!a[pv?)dAU.ge)UK\|+9`@/TdCA.YT
2024-11-01 15:52:25 UTC	350	IN	Data Raw: cf 7e b3 bd 41 75 f3 c4 fb e3 f3 bf a2 c7 24 d3 bb 27 de 9f 5f 9c fe 0d fd 21 43 a2 75 4a 14 90 29 17 0d 53 4c a2 ba d5 aa 98 d4 1d a2 cb ad ab a3 f6 8f f0 58 f3 d0 a9 57 cd f9 ee a3 e7 bb ed f3 dd ab f0 d2 26 72 6d cf 06 51 f8 93 70 b7 31 5d c3 e9 65 1e 1d 3a 73 f8 4c 2a ed 87 d2 2b d8 83 86 b9 97 c5 7d 0c 7b 08 24 74 10 7d 4e b3 6a 82 2e 88 20 c5 49 4e 65 a8 ec 8f 1b 47 52 a3 72 5a 4a 80 a0 c4 28 69 62 13 14 19 56 10 33 29 08 2e 21 8e dc 09 27 ef fc 6f 65 31 9b 56 de 04 2b e8 99 50 44 9f 78 c3 28 53 48 d1 38 46 fd a4 79 27 03 8d 25 7f 4a e1 49 e3 04 28 8c 02 53 fe 9e 01 64 d8 85 c6 6f a0 9a 20 03 78 ae 41 74 57 37 41 30 a7 e3 a3 87 cd d9 c4 72 5f c3 42 55 35 f6 15 f8 3a eb 30 80 cd 82 ee a2 a8 5d 48 6c 38 75 6e ca e6 42 65 5f e9 10 7d 2d 1a f4 70 d1 88 Data Ascii: ~Au$'_!CuJ)SLXW&rmQp1]e:sL*+}{$t}Nj. INeGRrZJ(ibV3).!'oe1V+PDx(SH8Fy'%JI(Sdo xAtW7A0r_BU5:0]Hl8unBe_}-p
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 36 63 34 0d 0a ba c0 c5 7c 0a ad 7d b3 52 57 f4 89 13 94 e9 51 0e 58 65 05 8a 4b c0 71 34 12 ad 22 26 aa a6 b2 50 30 78 b7 49 5b 12 24 23 3e 8a 9e f7 b6 6a 34 e2 28 25 32 98 43 18 e5 a1 05 28 63 79 60 51 7f 2d 8b ef 43 ab 9f 15 03 f4 a4 48 c4 ac a0 2f 90 12 0b 92 3b 0a f3 4c 56 aa 6f 45 d1 ae be 5a d7 6b 5a 08 e2 04 f7 c2 0c 1e dc e5 4c ac 9a b4 e5 eb 35 65 55 f3 1a 10 d5 07 b4 f0 af 37 88 54 f3 4a 31 66 09 25 7d e2 90 8a 47 48 af 50 1e a3 41 35 8c 85 20 bd 32 12 17 a2 7d 87 d6 2d 04 02 e9 a4 f0 86 4a 2b 38 a0 82 Data Ascii: 00000001k0000000100000001O000000010000000100000001S00006c4\|}RWQXeKq4"&P0xI[$#>j4(%2C(cy`Q-CH/;LVoEZkZL5eU7TJ1f%}GHPA5 2}-J+8
2024-11-01 15:52:25 UTC	413	IN	Data Raw: 68 58 61 fd 49 aa 03 1a 86 5a a1 dd e8 b4 85 0c 2c 97 da 02 70 bf 71 4d 1b 96 09 62 58 3c 4e c7 60 2b 4b 8e 15 e8 76 42 8a 06 82 46 c8 34 53 e7 4b ce a1 56 ef a7 ef 10 88 ad e8 74 eb 56 6a d1 ec f0 15 30 53 78 3b 5c cb 2d 58 c2 0b 18 be 59 d1 71 88 52 9a 1b db d1 b8 00 cc 5d 20 2b 50 54 68 59 53 33 93 c6 79 10 67 4d 63 93 54 3c 5f b7 d5 f1 10 30 14 08 ed 42 42 eb 0f 0f 7f 60 44 96 9d 88 f1 47 66 55 8b 75 a3 0d ad de 26 9b 59 8c ce 29 c0 4f c9 cf a3 32 f2 3d a1 5a 91 9f dd 46 7e 68 4e cf 30 a2 b6 b2 db 1d e3 19 34 77 90 49 c2 26 2f f9 55 df 70 4c 2d 13 c7 da 53 3b 4f 5c ff 77 ae f8 7b 92 f1 94 55 37 2c fd 61 6f dd 46 b1 85 af 9a 9b 52 7c 60 f5 b8 e5 91 3a 14 56 8a cc 08 36 5a ba f5 10 9a da b9 ee 1e 9e c2 f3 7b b4 19 8b 5f c3 e7 a1 40 b1 16 12 41 dc 64 4a Data Ascii: hXaIZ,pqMbX<N`+KvBF4SKVtVj0Sx;\-XYqR] +PThYS3ygMcT<_0BB`DGfUu&Y)O2=ZF~hN04wI&/UpL-S;O\w{U7,aoFR\|`:V6Z{_@AdJ
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/59084.04d6b3360a5bc50128d1.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 0672529f068264f9214edaaf920518ab Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:45:32 GMT Expires: Sat, 25 Oct 2025 15:45:32 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605213 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 66 66 35 0d 0a 3d 6b 93 db 46 8e df ef 57 d0 ca c5 2b e6 48 0e f5 96 a8 c8 89 d7 c9 d5 a5 d6 d9 bd 8a 93 fb 70 3e 57 96 8f 96 c4 1d 8a 54 91 d4 8c 27 b2 fe fb 01 fd 62 77 8b d2 8c 37 1b 6f 65 8b 9e 3c c6 0d f4 0b 8d 06 d0 68 80 dd 3b 54 c4 aa ea 32 8d eb de b2 5f 91 6c ed dd 93 68 1f c6 b7 af b6 87 fc f6 ae fe f9 90 fe Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000ff5=kFW+Hp>WT'bw7oe<h;T2_lh
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 39 8e ca 98 03 7d 34 d8 c5 c9 b6 4f 27 27 f3 aa fa 21 23 d5 8a b2 f4 21 af c2 35 79 f5 e6 8d dd 4f bd 97 b6 93 d9 cb 7d ff 2d 80 6a 6f cf c5 20 8c 05 45 5d c0 a4 c7 c9 7e e7 dc 21 ac 2e b0 d4 e9 89 95 eb 39 77 45 9a 58 20 a9 ef 56 a2 89 f8 50 d5 c5 8e 8b 0e bb df 53 c6 e7 d6 e1 c6 95 75 b1 51 fb e4 4c e6 b3 f1 6f a0 44 40 87 8c fd 09 28 9c 4c d7 27 fe 6c 36 e4 fa 04 b4 89 b3 6f f4 c9 5d a7 4f fe 41 fa e4 b0 02 61 79 45 9f 50 6d 51 1e 62 d4 b2 f6 b1 3a 80 e6 ed 7b 9e 27 95 36 df 56 c0 2d 6f 90 6d 57 cf 06 27 a9 82 50 51 96 a8 94 99 22 4a 48 1d a6 b0 63 fe 33 dc a5 d9 83 ae 8e 0a a6 70 74 14 54 4a 68 04 3c 5b ad fa e5 2a f5 fe fc 93 17 1f 4a 68 be fe a9 22 25 68 59 c6 d1 00 2e 9f 3f 2f bd 4d 9d 7e 43 ee 5e c6 31 a9 aa 0f 1f a4 26 ea 01 9c 6e 36 a3 f1 a7 eb Data Ascii: 9}4O''!#!5yO}-jo E]~!.9wEX VPSuQLoD@(L'l6o]OAayEPmQb:{'6V-omW'PQ"JHc3ptTJh<[*Jh"%hY.?/M~C^1&n6
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 0c 93 14 dc 8b 81 05 17 40 70 07 e1 8a 02 b8 db 84 45 d9 38 16 88 90 b0 2f 66 c6 e7 e8 7b 03 b8 37 6d 07 81 ba 67 5a 12 1d 2d 74 40 ec 84 1e 58 e0 1c ed 53 90 41 81 b3 0a 55 fa 0b 09 06 25 d9 99 2d dd 13 dc c6 81 05 5b 5f 01 e1 c8 dd 2d 07 0d 3c a1 df b0 7f 38 77 15 28 72 c1 52 00 15 ac d4 a1 00 b6 38 23 10 a9 28 00 c7 63 05 1e 6d a0 96 d4 84 d4 69 04 db 83 89 d3 f3 a5 16 02 50 f6 27 45 93 0e 69 e1 86 46 6a 88 b1 8e a6 a3 78 2c 44 a8 dc 56 ca 80 27 63 c7 9a 02 3f cd b8 26 6c 9a 60 a3 5e ac c3 75 c4 e6 a2 82 f8 e8 c7 a0 0c 86 13 a8 3e 9c 70 93 44 78 c3 e4 e8 a7 c3 69 3c e7 d4 d0 81 ac 8d c5 1c f4 89 8f ff 11 4a 43 62 d1 11 90 98 90 b5 59 5f 92 0f 69 3d 1c 41 ed a1 a0 f8 96 00 13 c2 05 23 a7 40 9a c3 05 58 5a b3 19 e0 bd a4 00 68 cb d8 00 d8 a0 cc 65 a4 70 Data Ascii: @pE8/f{7mgZ-t@XSAU%-[_-<8w(rR8#(cmiP'EiFjx,DV'c?&l`^u>pDxi<JCbY_i=A#@XZhep
2024-11-01 15:52:25 UTC	366	IN	Data Raw: 0c 65 d3 b5 41 c5 b6 38 83 3d 66 1f 32 7b d1 3e 52 49 a7 8c 94 aa 12 2a ff 34 63 4a 9b 9c 72 e4 04 8a 5d a5 03 df e1 40 0d 95 ce fa 12 9d 4b 01 9b 0d 80 ed 36 6e 61 71 13 f5 13 0f 64 29 cd 3a 98 80 20 b6 3e 7c 53 8a d8 27 6a 2c 21 61 dd 78 4b e2 5b fb 3f f0 f7 00 2e a3 d2 3b e2 d0 df d7 69 59 d5 00 4d b3 44 2d a7 91 ac 6d 13 65 75 19 a3 3d 46 72 8e 1b 5d a5 b9 40 52 d8 eb fa b8 75 73 f7 d2 2c 5a b0 e8 9c f4 f2 e3 d3 49 49 a9 25 c4 38 ed d5 13 7f 6b a3 93 80 09 4a 71 83 d8 25 77 20 9b 2a 26 61 ae 33 ac 6c e1 3a fd 1a 34 95 82 4b a1 67 34 2e 95 b8 1c ca b8 9b 46 aa 37 36 06 15 ee 42 fb 37 7e 41 e4 21 e6 fb 93 4d 82 60 e6 9e 24 45 93 3e a6 e3 79 23 ad 5a 5b d9 ce 57 8e 65 4a 67 e7 1b f6 82 81 a1 b2 ed d3 9a 6e e1 cb 0b 6d 4b aa 9a f4 d1 01 ca b0 25 40 13 45 Data Ascii: eA8=f2{>RI4cJr]@K6naqd): >\|S'j,!axK[?.;iYMD-meu=Fr]@Rus,ZII%8kJq%w &a3l:4Kg4.F76B7~A!M`$E>y#Z[WeJgnmK%@E
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a c1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 38 63 33 0d 0a Data Ascii: 00000001W0000000100000001s000000010000000100000001\000000010000000130000000100000001V00000001b00000001"000000010000000170000000100000001C00000001g000000019000000010008c3
2024-11-01 15:52:25 UTC	1092	IN	Data Raw: fc 9c c5 4f 35 5a e2 a3 79 b2 e9 12 22 30 0b 58 3b 15 77 09 11 5d 42 04 30 05 3a a4 ba 84 88 32 d0 23 40 a9 fc a0 82 85 c7 7e 4a 2f 3c 85 70 a7 5e 97 10 d1 25 44 60 00 7f 97 10 a1 27 77 74 09 11 22 e8 59 c9 dc 10 e9 14 8a 13 aa 49 70 e8 12 22 e0 03 bd 3c 1f ba 4b 88 30 52 37 b4 f8 c4 eb 0e 71 76 3c c5 0b 07 e9 b3 16 17 50 e0 1a ee 12 22 94 23 68 97 10 21 0e 04 ec b6 e1 e2 f5 2d 30 93 76 72 78 2c 2a 1d 6f b0 e8 4d 50 97 10 41 63 32 45 bc 8b 79 e3 a3 dc 14 2a b7 68 78 35 0e 29 04 ec aa ac 4b 88 d0 6f 63 1f 63 3d 71 2b d9 25 44 40 88 24 cb 10 ee 12 22 b8 7f 48 b9 9c 6e b4 64 7b c4 b1 e9 3d e2 e1 b9 ed 1b f6 fa 05 39 ef 5c 3f 3e 2a bd 2a 4d 0b e6 55 84 c1 85 b6 a5 6e 37 5b d7 01 4a db 12 c0 25 f9 35 9a 28 f7 ef 5d 42 04 cd 6c c7 74 60 33 eb 41 44 e6 62 40 1a Data Ascii: O5Zy"0X;w]B0:2#@~J/<p^%D`'wt"YIp"<K0R7qv<P"#h!-0vrx,oMPAc2Eyhx5)Kocc=q+%D@$"Hnd{=9\?>**MUn7[J%5(]Blt`3ADb@
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49781	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/30592.64f38a11064ff2dd4b23.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 45996912951e27a14a9ec520e910a245 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:30:31 GMT Expires: Sat, 25 Oct 2025 19:30:31 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591714 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 31 0d 0a db 0d 0a 30 66 66 31 0d 0a 46 d2 e6 f7 fd 15 30 93 38 a4 03 c2 24 75 27 4d 2b 8e ed 39 f1 79 9d 49 d6 97 9c 9d d5 68 65 90 04 25 c4 14 c1 01 40 5d 42 f1 bf ef 53 97 6e 34 40 52 92 93 cc 7b 66 f7 28 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001w000010ff1F08$u'M+9yIhe%@]BSn4@R{f(
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: f2 f4 9a 66 9b f5 eb 69 3f 0d 86 e1 64 42 73 0d a6 38 59 7e 0b 7c 07 93 43 b5 9c c9 7a da 78 d4 07 3c 59 49 0f 40 da 4b cb 0f 7a 8f ea 93 7e 3d e9 67 02 24 05 90 51 32 8d 88 0b 84 c2 62 93 e0 22 9c cc a3 86 1f 2a d3 00 b0 1c 8c 12 73 69 f4 96 c3 30 1f 9e 11 ee 30 2d 1c 83 7e b4 c4 e2 31 9d eb 85 4e f1 11 16 ae 2b 0a 64 06 cc 60 40 bc cc 3f ea 0d 5f 67 39 a5 59 4e 0d c2 2d 18 2c 63 d0 c8 cf 40 0e 5e bc c4 99 67 a6 13 2e b1 1d d8 81 ea 86 a0 b1 6c 63 8d ee 98 e9 69 c1 2d 23 b3 91 21 77 64 c6 9e f6 17 cb 20 4f e4 a4 1a 24 06 d9 24 1e 46 f5 7d bf d9 36 3c ae 26 33 04 b0 7e 8a 5d 0c f8 64 a5 f3 21 76 10 6b 49 c1 4d 9d 92 60 1a 9e 03 59 b5 9f c2 19 77 b8 b9 a9 bd 8f 72 fe f1 50 88 6b 0c 6a c6 34 bb b5 17 e6 f2 d0 86 4f ff 4f fd b0 fb 31 be 79 d3 98 e6 f8 69 ff Data Ascii: fi?dBs8Y~\|Czx<YI@Kz~=g$Q2b"*si00-~1N+d`@?_g9YN-,c@^g.lci-#!wd O$$F}6<&3~]d!vkIM`YwrPkj4OO1yi
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 10 52 1d 92 e5 2f 13 a6 25 68 2e 11 aa 14 ad 5b ab 3b ae 73 2c 55 83 33 02 61 31 ae d9 8d f2 26 b2 6d 6c 51 37 f3 25 ed 56 a7 0e a1 35 ed e7 b8 88 b3 84 d9 1c a1 09 46 41 b4 48 8f f2 e3 06 fe 23 a5 84 16 67 05 9a c2 ec 62 e0 91 32 ae f0 e4 10 14 f2 0a 77 dd cc dc 61 67 14 3d 9d db 19 d2 59 9e 54 d9 87 5a c9 bc fc 19 a9 a3 b5 49 72 19 a5 a4 51 62 1f cd e4 20 6e 7d 9c e9 af 2e 26 69 b1 50 50 e7 33 48 db d5 2e 2a a2 69 2f 67 fb 68 fd 8d 65 45 cc c4 24 36 df 0d a4 7a 45 3d 22 2a 55 ed fa 75 15 28 dd 2d 84 36 2f 7a 2c cd fd 50 7e ec 1a 34 5a 54 13 6d c8 f9 93 2d 5f b9 35 a5 52 ee 68 17 bc 61 7c 74 ed 9c 0c c9 a2 f5 4b 49 06 c7 29 26 fe 1a b1 6a d9 d3 f9 55 4e 63 90 9d c5 63 9c f7 1e 4e 3c 9b d7 a0 92 ca e5 ed 62 b5 97 c3 a6 0a bc dd c2 a5 85 6c dc e9 81 a2 1c Data Ascii: R/%h.[;s,U3a1&mlQ7%V5FAH#gb2wag=YTZIrQb n}.&iPP3H.i/gheE$6zE="Uu(-6/z,P~4ZTm-_5Rha\|tKI)&jUNccN<bl
2024-11-01 15:52:25 UTC	407	IN	Data Raw: ca db df e9 b4 10 96 13 22 ac a2 ce e1 63 d0 4a eb 5b 9d dd 3d c4 8b 21 5a 8c e3 68 1a 7c 0d 1e 6c ed 6f a3 d3 00 37 22 c7 e5 50 2c 0f ee 49 8a 7b 69 e0 52 44 e9 ee c1 fe 5e c3 9f e1 47 8d 45 39 a3 d2 9d dd 7d dc a9 73 6a 2b 77 ea 29 7e dc df 39 d8 46 db 73 fc b8 bb bb d5 da 95 eb 75 ec 5f f8 d7 fe a5 7f e5 7f f6 4f fc f7 fe 6b ff a5 ff b5 ff c6 ff e0 bf f0 7f f6 7f f7 7f f3 df fa ef fc 57 fe 2f fe af fe 0f c5 35 fc a3 ff f1 e1 22 fe 0b 2e e2 b2 8f 3b f8 71 0e 82 9c 9e e2 0a 91 1f e0 e8 0e de cf 07 d0 07 11 c5 07 2f 68 d6 af 65 ee af f0 7a ff 08 d6 fc a3 78 bd c1 2c 10 10 f1 53 7f a1 bd 4f d2 39 22 dc a2 bc 1b 06 d7 61 1a 12 ef c5 99 07 4f cb 4f 42 ba 34 51 ce ff 72 05 98 21 5d a5 18 04 c5 c5 2f 6e 27 8a fe ea 0e 02 13 04 06 4f 4d 9e 26 34 d6 c9 6f c9 00 Data Ascii: "cJ[=!Zh\|lo7"P,I{iRD^GE9}sj+w)~9Fsu_OkW/5".;q/hezx,SO9"aOOB4Qr!]/n'OM&4o
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a b7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 31 0d 0a b5 0d 0a 32 62 31 30 0d 0a 11 f9 3c 71 35 b0 d7 33 63 c3 07 cc 7d 12 26 55 6b 91 4d 97 e7 86 28 83 10 e4 26 9e 7f 6e 4c 1b f0 63 14 22 9c a7 08 b4 14 2c 9d 4c c8 65 79 8b 9c b8 12 8f 79 74 1a bc f0 cf 83 17 c7 1c 95 c9 76 e0 77 d1 2c 49 f3 9f Data Ascii: 00000001;000000010000000100000001X00000001`00000001000000010000000100000001000000010000000100000001{00000001Q0012b10<q53c}&UkM(&nLc",Leyytvw,I
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: cd cf cf c3 f4 ba b2 cc 94 15 0e 38 7d a6 9f 9b 97 69 c8 11 2d 66 9d a5 5d c6 46 c2 95 98 27 d3 9a 47 92 7c 33 17 b1 bb 09 2e cd e1 cc fd 5a 4a 91 d3 95 5a 12 91 f5 80 79 df 9f 27 78 c6 88 c8 c4 d4 1c 39 63 7c 15 c0 5e 0c a1 cb 0b 06 11 ee ad 88 c4 79 52 ba 6d e7 21 de 97 7c 36 bf c9 0c 0a d8 30 63 ca 49 17 48 30 3e b2 fd d8 fc 23 d7 ac b3 9c 3c 3c cd d6 10 a4 95 3e 04 e3 a2 8c bd 05 6a c0 32 81 de 29 a2 f8 a0 5d d1 2b a5 86 44 41 0c 93 d9 b5 a3 7f 38 2a 97 96 fa 13 e1 19 53 e8 2d b3 6b 35 3d 40 9e 39 c9 10 44 43 6b fc 90 bc 9c c4 b3 41 12 a6 23 bd cb a4 90 01 db 2a c3 b2 65 5e b0 9f c8 49 2e 17 7f c0 a2 c0 b5 fd da a8 89 a7 28 11 1e 89 20 e8 90 5e c2 91 59 81 a4 4e 91 73 59 2a 0f ac bd e1 30 32 cf 60 4e 48 f4 f8 25 99 d1 0e 59 21 f5 0e 01 00 41 e4 d4 bc Data Ascii: 8}i-f]F'G\|3.ZJZy'x9c\|^yRm!\|60cIH0>#<<>j2)]+DA8S-k5=@9DCkA#e^I.( ^YNsY*02`NH%Y!A
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 4d 3f 85 b1 8a c2 74 10 c0 63 7c d1 4d 5a 3e 97 09 c5 78 a4 3f 21 98 f9 b2 19 ce f3 a4 46 29 4b 04 10 62 84 61 d0 1b fd 6c 6c ff 38 71 bc 6f e5 61 b4 95 87 5b 14 a7 2a 23 f7 cd b9 74 6c 52 91 83 d0 5f 81 b1 5f 99 99 40 11 d6 a0 1d b5 c9 28 e7 e4 7f 08 9f 36 b0 47 b4 68 60 77 18 5c 1e 90 a2 44 91 f3 3f a7 af f8 d9 30 14 4d e2 fd 9b 2a 29 e8 be c6 4e d6 8f b7 87 df c0 eb ce e9 7a d8 22 7b ec ff cb 8d c4 51 d7 73 11 0b b3 09 56 11 89 53 ea 2f a7 ee ee ee 26 be f7 96 a9 a8 75 f5 2f 81 65 b5 ef 7b 43 a3 18 a3 d2 ca 5c a9 eb 8f 43 71 5d 18 b7 41 a9 8e be d6 4b b1 0a 80 23 1a 91 96 e7 ab b2 ed 9f 62 92 4a 8b a9 54 9b 44 3f 4b 7f ef e0 60 67 4d d4 d2 ff e2 58 a5 cb 7b c6 2a 21 2a 69 bb 75 70 b0 4b c1 48 12 80 24 61 4b 1a 60 54 8a d4 a5 b6 94 26 87 da ee ee b4 10 Data Ascii: M?tc\|MZ>x?!F)Kball8qoa[#tlR__@(6Gh`w\D?0M)Nz"{QsVS/&u/e{C\Cq]AK#bJTD?K`gMX{!iupKH$aK`T&
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 44 87 24 23 b9 bc 30 30 c1 84 90 e5 8a 84 ab 69 c0 19 ef 8c b0 96 06 63 88 6e bc 2d 92 66 e2 5d 72 69 03 67 35 5f 85 a1 9f f7 7a 16 d0 21 9e c2 6a 87 b0 01 7d 60 62 08 07 f9 3e 6e 9b 2f 3c fb 3c 5f d8 75 4b f3 35 f7 5a 24 f3 ee d9 30 48 58 6c cd 22 9c 25 e4 e5 25 e4 7f 68 09 94 87 a8 44 8d 66 95 ba 95 1b 89 55 d0 64 5a 17 38 59 ac 85 26 63 38 bb 67 8d 18 64 45 31 8b 23 2f 35 5d a0 24 23 01 97 0c e9 0e c6 44 cd f1 cc 2d c5 23 37 49 a1 03 be 04 30 38 8c 66 4a 3c 45 e8 d3 85 dc 60 42 4e 70 0c 44 79 af 17 6e 6c 7a 54 78 45 f9 4b 78 f0 15 89 05 81 15 14 87 5c 94 83 70 9c cc 97 dd 54 8e 8d b3 d0 a3 e4 d8 2c 8f 74 0d f6 51 ca fe ca cd 5d 96 4d 94 1b 6f a6 38 9c aa 19 d2 9f 53 58 09 bd 14 00 96 84 6a d4 47 80 eb ef 2d ce f0 0b 24 11 be ce e2 ec 07 a4 64 51 4a d4 Data Ascii: D$#00icn-f]rig5_z!j}`b>n/<<_uK5Z$0HXl"%%hDfUdZ8Y&c8gdE1#/5]$#D-#7I08fJ<E`BNpDynlzTxEKx\pT,tQ]Mo8SXjG-$dQJ
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: af 70 53 7c c8 26 97 45 aa da 47 79 85 d6 2f 94 9e 56 bb 48 9c 21 77 02 2e d3 ae b7 33 bb f2 5a 8c 3d 3b 02 82 be ae b8 44 5f 69 cb 53 ec ae d7 46 d3 2c a1 0f ed 38 7b 43 1f d0 71 01 e3 f1 cc e9 54 94 9e ae 27 17 ff ca 14 75 47 c8 e2 14 49 92 24 8a 84 95 89 4b 28 4d d7 cb 42 7c bb 87 c2 d9 90 e2 8f f7 d1 59 a2 e9 4f 52 ba 3e 7e ab 20 29 9e e2 e1 5c 24 c9 b1 6e e9 3e 69 6a ac 5f 35 8c 77 41 84 86 2c 1e 43 e8 d2 58 f8 0a 08 6f ed dc f1 74 bb 99 c5 bf 33 5e 55 ce 05 f5 12 2e 41 87 01 f6 86 53 90 65 32 57 26 63 c6 56 05 4f 20 75 a4 14 90 46 76 9b 5a 5e bb 35 93 5d a1 ed 91 39 79 78 2c 5f 8c 68 77 4b 9a d9 f0 45 7a 3d d8 f5 38 c1 58 f3 12 ef ee 31 1d cf 93 6d c2 6d 37 5e 3f fa 7c 22 13 c0 e9 80 d9 a9 ab 24 52 4c 47 d7 04 a1 78 68 ce d6 5a 90 9e 27 d9 47 bb de Data Ascii: pS\|&EGy/VH!w.3Z=;D_iSF,8{CqT'uGI$K(MB\|YOR>~ )\$n>ij_5wA,CXot3^U.ASe2W&cVO uFvZ^5]9yx,_hwKEz=8X1mm7^?\|"$RLGxhZ'G
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: e9 20 ac b7 db bb 3e d4 19 f3 57 2b d8 97 4d c7 c2 3d 6f ef 36 00 64 40 f2 d6 c2 70 20 20 a7 fe 97 cf c1 f6 c7 24 9c d5 65 9f e1 8a 41 62 aa 66 89 ff 3a f0 37 df 18 96 71 19 0a e0 e5 41 59 b2 f8 d9 dc 57 13 49 da 49 79 20 b7 7b 75 5c 37 68 65 45 30 7e 46 af 90 b5 b5 ba 5d cc 19 10 ff 74 de 15 49 81 12 e6 fd a3 de dc 6b 01 e7 1b 26 b2 be 8b db be 3c f6 18 79 62 df ac 0c 5c e1 50 8c 26 77 b9 45 7d b0 c7 cc 01 2d d6 c1 7d ff 85 2b eb 80 45 ca c2 1c 3b a9 c8 76 2b 73 b8 63 a5 0e 00 12 89 3c ef b6 29 7e 9c dd 0f f5 ff cd f3 9b 0e 37 9c 63 67 ed 19 ee 81 68 6b 54 6f e3 fc e2 7f 25 b2 f8 06 7a 98 e7 75 0a 32 5d d3 0f 47 1d 2c 5e ff 6a 20 b3 07 7d ac 00 f0 5a 28 65 90 cd 9d 51 a4 da 3c ef c1 56 4b c0 e2 d8 30 78 70 07 fe f7 e0 d6 61 da 41 07 d0 f4 af 75 c3 54 46 Data Ascii: >W+M=o6d@p $eAbf:7qAYWIIy {u\7heE0~F]tIk&<yb\P&wE}-}+E;v+sc<)~7cghkTo%zu2]G,^j }Z(eQ<VK0xpaAuTF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/71254.89ea96287cbc8b900860.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d1a5b6c7e81a716de1307a1bae681ccf Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:42:55 GMT Expires: Sat, 25 Oct 2025 15:42:55 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605370 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff ec 5c e9 76 db 46 96 fe 3f 4f 01 33 89 9a 48 03 10 17 71 95 29 47 96 97 28 f1 d6 92 9c 4e e2 f6 61 40 a0 48 22 02 01 06 00 b5 84 e6 bb cf 77 6b 01 0a 20 65 d9 93 a4 a7 e7 9c b1 12 89 ac f5 d6 dd 97 02 6a ab 94 19 69 96 04 5e 56 3b ac a7 2c 9c 3a d7 6c b2 74 bd cb 93 f9 2a ba bc ca c6 ab 60 bc 70 83 68 f4 91 be 0f 1f de bd 37 9d e5 2a 9d d7 df bd eb 35 5b 9d 03 eb e0 a0 d9 ee 5b dd 7e bb 67 e1 43 a3 63 75 1b cd 76 cb ea 36 bb dd f6 7b 6b 3d e8 74 5a fd 61 3d b3 98 15 98 a3 a3 f5 95 9b 18 f1 28 a8 1f f4 7b 8d 03 d3 4a Data Ascii: 000000010000000100000001000000010000000110ffa\vF?O3Hq)G(Na@H"wk eji^V;,:lt`ph75[[~gCcuv6{k=tZa=({J
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 9b 07 fd 03 d3 b4 6e 30 a0 d3 eb f7 30 76 8c 8f ed f6 a0 79 20 ac c2 a5 75 6d 7d 69 5d 58 27 d6 a9 75 66 bd b1 9e 58 c7 d6 b9 f5 d6 7a 61 7d 6f bd b6 9e 5a 8f ad 5f ad df ad 67 d6 73 eb a5 f5 ca fa d9 fa d6 fa c9 fa ce fa cd fa c1 fa 47 61 4b fe f9 ff b6 e4 4f b2 25 3f 56 6c c9 d4 c9 3c a1 23 93 15 c9 17 6c 40 ba 82 a9 ad 3b 8e 93 5b 69 a9 c3 bd 78 79 7b 11 c7 61 16 2c 2f 60 8b 46 b5 13 34 18 7e 4c 3e 88 91 c5 86 17 06 cb 49 ec 26 7e 4d e8 7c 98 a7 20 bb bd 80 9e 1c d5 c4 a8 52 c7 db 24 cc db 37 77 9b 31 52 c7 91 b3 8a 52 77 ca 4e ce cf cd fa 3b 82 d9 11 c6 ce ba 71 8e ad b1 73 fc de 7c bf 19 c3 06 3e 73 af 02 e8 aa 37 c1 55 9c 91 74 c2 04 48 6b 68 cc 9c 9f fb e4 4d 9c 33 37 f1 e6 d8 bc be 16 00 0e 73 e0 e8 20 63 9a 3f f6 e7 6e 3a 1f 66 1b 93 af fa 04 7e Data Ascii: n00vy um}i]X'ufXza}oZ_gsGaKO%?Vl<#l@;[ixy{a,/`F4~L>I&~M\| R$7w1RRwN;qs\|>s7UtHkhM37s c?n:f~
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 53 e0 1c 14 38 ff 0f a5 c0 dc d1 13 85 7f 02 f2 77 60 e4 5e fc 07 f7 e8 08 9d fd 83 bd 3d e4 62 95 9e d8 29 cc 3a ee df 02 f7 6f ff 43 71 bf 74 f4 a4 ef 9f 80 fb 0a 36 ee c5 7b fc 19 78 8f f7 f6 e2 02 ef 85 66 d4 91 fd 02 c8 7e f1 1f 8a ec 2b 07 30 97 b2 c9 7f 02 c2 09 0d 77 61 d9 84 22 b2 23 24 e1 61 25 e6 70 0f 7f 87 01 75 c3 9a 4a ba c0 a4 c2 86 68 a6 54 da cb 60 c4 55 15 14 de f3 2c 38 87 7f 5c f2 36 65 55 e1 50 28 bc dc 1a 49 dd 48 e1 27 56 b4 20 23 3b ac d5 f3 8b 53 83 2f 48 66 0b f6 98 91 fb 1d da 29 ed 51 b2 5a df 83 8c df 73 32 52 c6 e6 e1 2c 0b c4 20 c3 81 ff 82 90 8f 0a 5d 85 77 99 77 c3 ed 51 19 9e 40 05 38 39 84 dc 5e e6 e8 87 95 44 e0 a0 52 fb 70 71 0b 70 8a d6 12 4c af 01 d3 eb 1c 26 e5 c5 16 83 6d 14 0f 83 18 61 05 70 ac 7c e1 a2 57 b5 48 Data Ascii: S8w`^=b):oCqt6{xf~+0wa"#$a%puJhT`U,8\6eUP(IH'V #;S/Hf)QZs2R, ]wwQ@89^DRpqpL&map\|WH
2024-11-01 15:52:25 UTC	295	IN	Data Raw: 39 f5 0d 2b 07 13 a2 2f 37 73 d5 e9 01 55 d7 58 a4 76 b3 66 24 31 55 ab 44 5e ba 52 7a c6 76 fa ca db 47 79 b8 0f 5d ab 30 27 62 54 5e ce 94 0e 0d 92 da 45 b9 92 00 21 3c f3 15 95 9a e7 b5 7b 6a e5 ba 9f ae ec 8e 6a d7 81 9f cd 87 70 5b 96 37 e8 b9 80 75 36 4e e3 13 03 17 65 a1 72 52 e3 a7 e3 b3 63 23 01 e1 81 2c 89 d7 c9 11 9c 1f e4 77 10 cd fb 06 77 cb ca 9d 34 1a 6c e2 28 ff a0 d0 b3 12 f9 02 74 80 21 15 6f 35 c4 22 43 02 d1 aa d3 75 d3 75 ec cc 0f e0 99 a0 fe 47 35 2f f5 a9 9e 38 df bd 75 4e 5f 9f 8c cf 2f ce 9e 1e bf c4 ad d9 f1 63 e7 d9 e9 8b 8b a7 67 e3 c7 3f e1 eb e9 a9 73 fe fa ed d9 c9 d3 f1 c9 eb 17 6f 5f be 1a 9f bd 7d f1 f4 fc e9 c5 f8 d5 f1 cb a7 e8 0f 9f e3 82 29 19 5a 15 fa eb ea 8d eb 97 94 f3 39 6e 34 90 b1 ad ff f2 e5 1a 17 96 ad a9 f3 Data Ascii: 9+/7sUXvf$1UD^RzvGy]0'bT^E!<{jjp[7u6NerRc#,ww4l(t!o5"CuuG5/8uN_/cg?so_})Z9n4
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 31 0d 0a 15 0d 0a 64 30 64 0d 0a 80 fa 03 f9 46 c8 a6 65 b8 dc 16 2f e9 32 b8 3b e3 21 37 b5 91 c7 16 47 42 ec 9f 30 10 3e 54 48 a9 e1 69 00 5e 89 92 34 af e1 62 3c c7 48 7e 05 96 5f 7f 7d 96 c4 8b f3 df 56 b8 f4 c4 b1 54 93 59 24 54 fa 99 4a 11 8a d5 53 99 7a 21 e5 b2 e3 ba d8 77 50 2d df 69 2a 5d e6 a7 fe 32 21 a0 7a 3e af e5 2f 57 93 30 48 11 50 50 2d 3f 9b 83 df 73 d9 c6 45 f6 4b 83 7e d9 cb 04 57 b6 e0 19 95 fc a6 0c 37 19 19 7c ac f1 24 74 23 f8 5d 42 41 40 8e 25 4b 93 0b 01 57 c3 c8 8b 84 f9 16 a2 5c 6a f0 52 af 2e 7c 96 71 3d 0f bc b9 71 1b af f0 7c 40 88 a8 43 49 da 5d 82 06 Data Ascii: 00000001m00000001b00000001v000000010000001d0dFe/2;!7GB0>THi^4b<H~_}VTY$TJSz!wP-i*]2!z>/W0HPP-?sEK~W7\|$t#]BA@%KW\jR.\|q=q\|@CI]
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 45 aa c9 cc c6 95 6f 3c 5a 44 a4 9c fa fe 54 8a 5d 81 14 7d 04 6b d0 4f 19 21 a5 7e 6f 3a 60 4c f4 73 82 96 3a 3b d3 b6 92 46 45 52 bd 1f a2 da 62 52 9e 25 51 4b dd 2e 6b aa bd 05 02 4a bd de 14 3f 62 67 7e 78 bd 53 17 c0 fc e0 a2 c2 90 1f 7e e0 4f fa 53 75 b4 9c 23 64 1d 22 1f e5 b5 e8 a7 82 80 ca 4a 93 86 cf 26 52 55 09 24 54 06 0c 06 9e 3b 95 07 cd 11 51 19 33 ed 78 bd 81 64 3d 85 8c ca 10 d6 77 7b ae 94 1e 89 90 ca 08 5d 4d 09 a4 54 06 e8 2a 88 6b 4c 29 63 1d 88 57 4b fe 12 87 e5 0a 36 97 4f 88 a8 44 95 f0 d3 dd 28 b5 53 96 04 d3 a1 51 13 f1 a0 71 8e 36 03 29 99 9a 65 9c c5 48 9d c4 ea 2f 1e ed 99 66 96 f1 2d 0b af 18 39 23 96 71 9c 04 6e 68 19 69 be 8a d8 92 2f 8d 90 3d 46 36 d0 03 7f aa 95 4f 10 3b ca 95 f3 5e 31 63 96 b8 7e 00 e7 79 48 a9 0d 14 a2 Data Ascii: Eo<ZDT]}kO!~o:`Ls:;FERbR%QK.kJ?bg~xS~OSu#d"J&RU$T;Q3xd=w{]MT*kL)cWK6OD(SQq6)eH/f-9#qnhi/=F6O;^1c~yH
2024-11-01 15:52:25 UTC	596	IN	Data Raw: 4d f0 d8 78 6a e0 0d 5c c8 ae a5 a9 3d 01 c1 e9 1d 79 4b 96 ae 1b 5f ad 27 c8 9b cd 12 7a 6d 48 fe bc 84 7d 23 f4 ba 3e 9d 58 00 f2 82 0b 79 a4 70 d6 59 bc 2e 24 1d ef f6 82 7c d4 db 5d 0a b1 50 99 d2 76 55 d3 b0 c3 35 ed 56 4c 4a 91 85 66 f5 86 b9 e9 a0 59 d9 ee e6 61 31 80 73 8b be 16 5e c1 e6 b1 39 b7 23 36 ee 3b 5e af f5 99 4e 03 af 22 d3 36 d6 07 5f bb 57 6c 8d 74 de 57 39 53 2e dc 14 85 6f f9 de 8d 21 32 af 8d af 8c c6 57 b0 6d bb 9a 37 1b 87 9b 20 99 38 90 36 ea ec f9 e3 63 7a c9 9d a8 60 a9 a4 02 d9 8c 8f 19 28 8d 7b 0e 15 db 56 0c 83 f4 3d 3e 7d 7d 9e 0f e6 7a 59 37 85 fa 4e 7f f9 0e 65 0c 09 f3 67 95 b0 26 ec 90 8e 3b 04 6e 5d c4 aa cd 1e e2 bf 1c 8f 1c d1 77 1d e3 13 10 76 f7 a2 7f 08 4b 7f 60 d9 8d 23 6e 60 e5 4a 84 aa 90 87 f4 cb 16 ef 53 21 Data Ascii: Mxj\=yK_'zmH}#>XypY.$\|]PvU5VLJfYa1s^9#6;^N"6_WltW9S.o!2Wm7 86cz`({V=>}}zY7Neg&;n]wvK`#n`JS!
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	469	OUT	GET /gui/25924.b3a6356de76617e73c99.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:25 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: abfe75486a0b52407866eaced3e03fd5 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:47:06 GMT Expires: Sat, 25 Oct 2025 15:47:06 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605119 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:25 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 66 66 39 0d 0a 00 02 ff bc 5b 5b 77 db b6 b2 7e ef af 90 b8 b3 b5 c8 18 66 24 a7 cd 45 0a aa e3 38 4e 9a 36 a9 d3 d8 6e d2 ca aa 16 45 41 12 6d 9a 94 49 50 8e 62 e9 bf 9f 6f 70 21 29 c7 ee be 3c ec 87 c8 e0 00 18 00 73 9f 01 e2 e6 22 9e fa d7 62 bc 08 c2 8b 83 79 91 5c 2c e5 a8 88 46 97 41 94 f0 bf e9 5b af 07 43 cf 5f 14 f9 dc 1d 0c f6 7e 78 be f7 fd 90 dd 3c 7b d2 7e ba d7 75 25 13 2c f3 f8 8f 37 92 67 7e 72 39 71 a5 d7 5b 06 59 23 e1 ce 68 14 a7 93 20 9f 8f e6 f4 53 24 13 31 Data Ascii: 00000001000000010000000100000001000000010000000100000001000ff9[[w~f$E8N6nEAmIPbop!)<s"by\,FA[C_~x<{~u%,7g~r9q[Y#h S$1
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 38 08 85 fb 68 70 76 f6 d7 03 ff e1 4e df f5 06 67 c3 9b cd 7a f8 68 c6 9c b3 b3 07 2d a7 36 6a 7b b7 eb 92 3f 9e ff b0 ef f6 f9 d9 d9 99 eb ad 1b 60 5f 03 06 50 03 86 1e 21 7a d0 c1 08 c7 db 71 1e 38 e0 9b e4 0f fa 07 be b6 a7 dd 65 1a 4d 1a 6d 96 48 7e e0 eb 93 b0 88 da 95 29 62 29 9d 05 6c 50 34 7a 9b 1f 26 70 96 59 30 8e 05 0b 24 ff c3 cf 17 71 14 0a 56 48 9e c8 7e 22 cb 53 9f 04 33 8b 3d 97 96 4b 33 21 6b 04 d7 0b e6 2c 84 53 97 fd 4c 42 23 b6 b7 15 4b ee 7e b2 73 89 0b ec 8d f9 62 95 70 42 86 b4 ca 7f 72 df 40 10 bd 8d c7 a6 92 bf 95 ee 01 73 ac 87 c0 b9 e7 16 06 ff 82 cf a5 fd 04 f7 c9 fd 01 b4 b0 20 78 35 7c 8e ec a7 71 4a 00 4d 14 48 1b 2f e6 84 99 80 7f 07 78 25 f9 2b e9 4e a5 c7 c6 aa 35 47 6b a6 5a 4b b4 ce 55 6b 81 d6 b5 6a 8d d0 ba b4 d4 2a Data Ascii: 8hpvNgzh-6j{?`_P!zq8eMmH~)b)lP4z&pY0$qVH~"S3=K3!k,SLB#K~sbpBr@s x5\|qJMH/x%+N5GkZKUkj*
2024-11-01 15:52:25 UTC	1408	IN	Data Raw: 9a 97 3a 20 01 33 de b8 e9 36 7f a6 cf f5 da ee b7 d6 d7 fc dc 6a 7d 26 79 91 e4 e6 e0 cb dc 3f 69 6c 5f c8 ee a1 e7 4b 91 4b 17 b1 3b a5 0d 76 72 e3 a3 c2 0d e2 66 dc 15 9c fc df 16 21 11 a1 dd 71 64 c4 6c 59 95 84 ae d7 3f 31 b8 37 9e 58 fb 10 13 4e 25 52 da 69 46 7c 30 54 92 45 42 93 d2 fe ca 88 c1 2b ed 40 8a a5 b7 b8 d5 e4 88 95 22 1d f0 a4 a5 75 8a aa ad 6f f9 a3 42 cb 45 ae 74 32 84 74 94 ba 28 b6 75 10 85 9a a6 8b 0c 37 fe 31 ac 14 49 6d 76 8a b0 af b2 a3 d0 55 fd 59 29 d2 d4 2a d2 9c 6a 0a ca 7f 2e b0 5e da 27 7f 72 2c cb ec 05 ea 5c 54 5a a6 9b 4a cb ea 8a 35 82 62 cd 87 a8 6a 0a a3 ec 5a a7 56 3c 87 4e 4d d8 88 cd 95 4e 15 a4 53 23 36 c1 27 09 4b a1 74 4a 6b 14 48 be 52 9e 7d e5 41 15 64 94 14 50 f3 4a 91 c0 d3 85 76 fc ef 5d c1 ca 04 5a f9 81 Data Ascii: : 36j}&y?il_KK;vrf!qdlY?17XN%RiF\|0TEB+@"uoBEt2t(u71ImvUY)*j.^'r,\TZJ5bjZV<NMNS#6'KtJkHR}AdPJv]Z
2024-11-01 15:52:25 UTC	316	IN	Data Raw: de 32 8d 75 e8 be 53 e0 a2 0c 59 50 25 9c 25 74 c3 de 48 73 d9 1b e5 8a 2f 4a f9 fe 90 3c 84 84 7d b3 05 14 67 2b a9 55 b9 3c 09 96 ae 00 94 55 20 85 c1 d0 d9 ba 1d 10 1b 75 5b fc 2e d4 2f 4a 5a 68 9f 57 62 f4 13 31 c5 9c e1 5b 59 87 44 df 92 6f 1e 54 73 55 fd c1 30 d7 6a 87 5d d7 c8 3c 69 50 aa 9e df 20 89 41 49 bc 5e 43 80 a2 da 73 36 14 f5 2c 29 cb b9 d5 54 8b 7e 43 49 d6 6f 92 bf bb cb 40 59 6c 28 b9 59 54 54 7e c3 eb 83 77 f5 22 75 d9 69 58 46 24 30 46 97 98 d5 3c 19 28 49 1d d6 28 fe b9 46 25 95 17 35 6d 91 04 93 6d ec 49 93 c1 1a 54 fa e9 86 cb eb aa 8a 8a e6 c9 46 96 ef 2b ca 4d d6 b5 57 5f 2c 60 a7 ec d9 de e3 67 3f d4 5e 7e 39 05 12 6a 8a a7 42 e9 f4 32 7f 82 00 f8 e6 8f 3f bb 2e 5e 85 15 46 6a a1 35 ee b3 bd 67 8f 9f 78 95 88 44 64 1c 54 de 1d Data Ascii: 2uSYP%%tHs/J<}g+U<U u[./JZhWb1[YDoTsU0j]<iP AI^Cs6,)T~CIo@Yl(YTT~w"uiXF$0F<(I(F%5mmITF+MW_,`g?^~9jB2?.^Fj5gxDdT
2024-11-01 15:52:25 UTC	1220	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 34 37 39 0d 0a 27 18 80 52 9d 4a 61 81 89 32 e8 6b 0f 30 12 96 ea 89 f0 0d 3e 0a c3 f1 0a 87 c7 9d 9d 45 db 28 68 ad 08 1e 03 23 a9 72 cd 9c 44 7c 91 78 87 50 db 0f e5 87 db 63 e4 3c 4b af d5 a0 c2 d5 79 0d 39 8c cd e6 bb 47 0f 1f 7e d7 78 d8 f8 3f ba d9 4f 72 41 ed 83 74 b1 ca a2 d9 5c 36 f6 da 9d a7 8d 37 69 3a 8b 45 e3 dd bb 03 ea 3c fe f0 ea f3 ee 3b 3d 78 f7 ed 04 57 7b d1 34 12 59 b7 f1 f2 f8 d5 ee e3 5d bc 5c 02 ef 30 f0 91 b2 74 8d 80 9b 47 13 b8 44 88 83 3c 6f 14 37 08 59 1a 32 c8 2f 0e d2 cb 05 dd 62 e1 79 8d 35 e7 e4 c9 61 08 5c f8 15 ed d6 a3 Data Ascii: 0000000100000001j00000001-0000000100000001000479'RJa2k0>E(h#rD\|xPc<Ky9G~x?OrAt\67i:E<;=xW{4Y]\0tGD<o7Y2/by5a\
2024-11-01 15:52:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49782	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	469	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bb563f1c44400e4c66eb54709569d70b Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:20:40 GMT Expires: Sat, 25 Oct 2025 19:20:40 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 592305 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 31 0d 0a 92 0d 0a 30 66 65 66 0d 0a fe 7e bf 82 e6 5d a9 88 32 17 11 25 f9 25 64 60 af d7 56 bc da 8d e5 54 24 27 77 e7 f3 a1 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001m00000001s0000000100000001F0000010fef~]2%%d`VT$'w
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: fc 26 af 8b f6 56 8a 7f cc eb 25 dc 14 e1 e2 75 55 c2 e0 9f af 5b b8 57 7c 9b 89 01 dd 40 69 a3 d0 a7 d5 71 37 84 9c a2 7f 9c bc 3f 46 05 df c2 60 56 45 c8 09 78 13 1e 90 01 53 a2 c0 ea 1a a9 5b 56 d7 75 d5 56 f3 f5 d9 f7 70 ab ce ce f3 44 8e ee 59 77 db 19 34 49 39 6a 47 7b 4f f6 9f ef 46 11 44 a7 b8 fa 7a 7f ff 29 5c 75 c3 b9 1e af 66 ba c9 07 4b d1 e8 cd e7 a2 5d 5c 88 bf 16 19 cc 08 bb 53 f1 cf f0 c7 c3 1f de 1c bd 3e 4d 3f 1c ff f3 f8 fd 4f c7 c3 a9 ea 9b 3a 26 92 59 a7 75 e0 6a fd ed f0 f8 e8 ad 4f 49 0a a4 ce 73 57 e7 c3 f1 9b c3 d3 c3 d7 a7 87 6f bc ce b4 50 ea 4e f6 5c e5 93 0f 27 df 1f bd 3e 7a ff e1 c4 a3 6c 85 4a f9 a9 ab fc ee d5 77 41 5d 23 9b e9 10 34 0d f1 e1 f8 87 c3 d7 ef df 1e 1f fd f7 e1 1b 34 9e 16 9e 46 65 ad a6 9a 93 35 b3 24 68 e1 Data Ascii: &V%uU[W\|@iq7?F`VExS[VuVpDYw4I9jG{OFDz)\ufK]\S>M?O:&YujOIsWoPN\'>zlJwA]#44Fe5$h
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 18 21 58 63 09 4d 8a 80 c2 4b 07 6c 0e b2 6d 7a 74 84 15 7c 36 cd 8d 2a 68 d9 b6 3c b2 ec 55 eb b5 af ea 87 49 3f b3 fd e1 33 ad 34 f4 dc 87 96 41 d8 c8 73 e8 0d 3d 6f 22 88 d6 32 44 d5 72 09 ab 7e 0d 7d a0 55 29 2e 1a 0f e1 f1 10 cc 13 be c5 15 32 b2 b7 0b 46 f4 fc e7 05 9b 56 f1 2d c7 1c 4b b6 a5 7d 50 af 9d 6e f9 86 8d 88 35 80 e7 fe de e1 bc 16 f0 5a 0f 1b da 73 a2 dc 34 0f 86 63 7b ee 7a cb 59 1f 62 ab f0 f4 08 d1 eb 51 c2 b6 7b 57 96 d8 ba 3b 7b f7 aa 61 fb e1 55 a9 63 dc e9 9e b0 8e b1 ec 8b 69 b3 9c c5 96 d1 6c df ab 63 2c e3 f0 30 eb 60 6c 31 30 cb 1b ac b1 b4 d5 c2 19 5b 46 53 fc 56 ba 90 75 d8 8c 97 b9 5c 5d 8b 87 b0 72 21 09 cf 28 cd e3 32 78 fe 6a d7 cd 3f e4 19 3c 36 83 07 30 e2 19 1c 2d 86 05 e5 4c ac cf 53 f5 04 02 16 72 d9 cb 56 2c d1 a7 Data Ascii: !XcMKlmzt\|6*h<UI?34As=o"2Dr~}U).2FV-K}Pn5Zs4c{zYbQ{W;{aUcilc,0`l10[FSVu\]r!(2xj?<60-LSrV,
2024-11-01 15:52:26 UTC	432	IN	Data Raw: 53 1c 27 8e cd 2f 34 07 68 56 61 d9 5b f1 d3 3e 9e d3 f5 bd 15 19 e1 d9 49 d8 21 99 56 63 89 94 2b 5b a4 34 82 57 c1 9d cc 28 34 a4 73 0d 6a ce 35 cc de d7 23 f8 3d ea 0b c8 9a 42 db 38 32 91 ed c6 ef 2e 8a 4e 31 af 6c 83 21 7b 41 ac 58 01 49 98 43 a0 c1 62 58 25 2c a1 85 d0 35 d8 43 57 4e ab e0 f0 94 39 48 a9 6a 06 70 f7 c0 b6 d3 77 8a 82 46 70 b2 48 27 13 89 49 0e 91 04 8d 03 0e 08 ba 63 89 b6 ae 4f 71 ad 18 82 38 63 f2 a0 2f 4c 0b d6 9a f2 29 31 f3 e7 45 11 9f 5e 4c d0 2f 4d 61 31 97 14 40 bc 51 71 d0 11 cb 37 31 4f 0c 41 5c 31 79 d0 17 4b 0f 31 5f 0c 41 7c 31 79 8f 2f 9e c1 f1 b8 e3 20 e6 91 43 82 4e 79 ca 85 b9 e4 10 e2 90 03 82 ee 54 2e 85 f9 d0 39 16 77 08 eb 84 0c be 41 ca 5b 84 cd bb 98 7b 88 2e 92 e4 50 1a 85 92 f1 27 51 8c 1d 9e e7 d0 f7 25 26 Data Ascii: S'/4hVa[>I!Vc+[4W(4sj5#=B82.N1l!{AXICbX%,5CWN9HjpwFpH'IcOq8c/L)1E^L/Ma1@Qq71OA\1yK1_A\|1y/ CNyT.9wA[{.P'Q%&
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 34 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 37 64 66 0d 0a 01 d2 1e c3 08 e9 2e 2c 77 7c f9 c6 15 da 40 b9 b7 14 d3 ad 06 01 be 7a 2d 38 be 70 04 9a 7d 8b ae 8f b1 6d 24 aa d9 d8 86 c5 b1 b9 d5 ea bf f3 b1 15 12 7c 6e 85 eb de 0d 15 2f a2 7c 9f d5 6d 91 89 c3 6e fe 6c ef a2 78 5e 42 81 1d 01 db da b8 e9 3d ef 8e c5 64 b0 3c 52 d8 44 78 4a a1 19 3d a5 ca 7d b7 29 b1 3f 30 75 09 38 3b 16 b4 cd 74 ca 7f ff 77 4f 1e fe 3d d8 9f e7 9d 13 87 eb ef f5 ae 89 5e 36 c9 1f f4 ba 5b 3d 37 81 80 47 f9 6f 78 c5 84 cc 2e e2 a7 c2 6e e6 b5 db 1d 86 5d e2 7d 8e de 0c 9a 00 c6 dc 38 10 62 b9 1f 40 ee 48 dc 02 a1 ca 01 3d 19 20 b6 29 44 d1 8f 69 31 1c a1 cd e4 84 35 93 13 d2 4c de c3 19 57 10 Data Ascii: 00000001000000014000000010007df.,w\|@z-8p}m$\|n/\|mnlx^B=d<RDxJ=})?0u8;twO=^6[=7Gox.n]}8b@H= )Di15LW
2024-11-01 15:52:26 UTC	656	IN	Data Raw: 28 ea 20 92 9a 26 c8 1e 52 7d 02 aa be c0 00 33 be 60 7a c8 dc 53 30 87 23 40 b2 c1 81 d2 63 41 9f 60 03 8d e9 3d c1 a6 f4 9d 60 d3 7a 3b 94 cf 36 aa a7 d0 24 a3 4a e0 2c 39 dd 8b e6 77 75 aa 20 82 13 e6 b4 cc cd c5 f2 5b 08 32 cc 85 e2 bc 3a 76 6f b5 33 18 97 09 cf bc d4 4d 4b 03 33 79 9f 32 e9 57 55 22 6b a4 3e 2e 84 c2 48 4c 4d e2 bc 7f b8 05 2a a4 aa 60 07 95 3b 4f fc 3a a2 0e 29 54 35 5d 04 2e f4 9f 24 e0 90 13 8d 10 5e f4 df ea 10 3f ec c6 17 7e c8 a5 4f 0c ee 7d c5 81 a0 45 94 7c 5a 82 9e af dc 43 15 87 36 a2 88 8b 81 1a be e4 03 00 b1 c1 40 c1 02 5f 6b ef 70 93 a4 bf bd 69 e1 b3 05 9e f5 94 8a 54 58 ad d8 a8 ed 7a 5a 4c ef ce 8c c4 23 ab 53 e2 c5 90 eb e2 85 8e 29 13 84 d2 69 17 49 26 bc 60 d9 86 c2 4f 57 c3 06 9f 0c 39 c7 9e 8e 93 8e 90 be 00 1a Data Ascii: ( &R}3`zS0#@cA`=`z;6$J,9wu [2:vo3MK3y2WU"k>.HLM*`;O:)T5].$^?~O}E\|ZC6@_kpiTXzZL#S)iI&`OW9
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49785	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	648	OUT	GET /gui/58686.2b5c3fb77a4c9bf80677.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 554f244e17c37f323b4ce734cde1636c Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:19:02 GMT Expires: Fri, 31 Oct 2025 12:19:02 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99203 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 31 0d 0a ec 0d 0a 30 66 66 35 0d 0a 7d e9 7a 1b c7 d1 ee ff 73 15 63 38 51 00 67 30 02 c0 1d 34 a4 c8 5a 2c c5 5a 1c 91 76 16 45 0f 3c 00 1a c4 58 00 06 99 19 88 a2 21 dc d8 f7 f3 bb b2 ef ad aa ee 9e 9e 05 24 25 db 67 79 9e 63 26 14 d8 6b 75 55 75 6d 5d dd 68 ac 53 e5 a5 59 12 8d b3 c6 69 33 55 f3 69 70 a9 46 ab 70 fc ee e1 6c bd 7c f7 3e 1b ae a3 e1 22 8c Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000010ff5}zsc8Qg04Z,ZvE<X!$%gyc&kuUum]hSYi3UipFpl\|>"
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 8f 49 cb 50 0a f5 77 ee 24 77 ee e8 55 4e d4 34 5a 2a b3 4a dd cf 4f b6 cc eb b3 6c 30 9e 87 69 ea 81 26 6a 39 49 bd 61 90 8d 37 2c 47 93 f5 98 70 d1 da a4 6b e0 a7 19 04 81 e5 89 96 4f 5c 12 44 68 37 b8 0a a6 d1 9c a5 a0 2e 4c 5f c7 97 8f 14 36 92 7a 00 4e 7f af 06 5f 74 a5 66 1c af ae ce e3 78 9e 45 ab 73 4c 37 68 3c 44 81 77 f6 f4 41 ef e0 d0 cb 62 6f 3c 8f 56 a3 38 4c 26 20 3b 0d 0f ee 8b b2 ab 73 e0 7d d0 a0 39 0a c5 3f 24 f3 42 69 94 3e 8a 2f 97 f3 38 9c 44 cb 8b 27 68 8d 69 b7 69 06 e9 3f f6 40 67 a8 ae ab b9 4a b1 1a 61 e7 37 cd 8e 9f 06 eb 65 1a 4e d5 c3 b3 b3 56 f3 0d 2d 3c 90 56 fe bb e0 81 ff 87 e0 c1 db d6 db ed 7a 35 01 25 27 c4 a0 59 30 0b d3 66 43 c0 6a 10 55 18 cc 61 ba 8c 56 2b 95 a5 0f 67 e1 f2 82 9a e6 c0 07 43 51 29 b6 8d bb b2 60 08 Data Ascii: IPw$wUN4Z*JOl0i&j9Ia7,GpkO\Dh7.L_6zN_tfxEsL7h<DwAbo<V8L& ;s}9?$Bi>/8D'hii?@gJa7eNV-<Vz5%'Y0fCjUaV+gCQ)`
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 68 dd aa cb 6f 52 bd b9 66 ce e2 55 ad 5a 3e c7 e6 17 23 7e 12 ab 94 48 cd d6 24 99 19 04 68 22 fe 85 b1 30 d7 70 4e ae 3c 63 24 c3 8b 44 c0 c3 d3 c6 3e fb 17 0d 63 2d e8 8d 56 55 f7 05 b1 57 b0 33 08 0d b5 e6 7e 09 15 ba cd 6f 8d 09 f6 75 52 e0 20 59 2f 3d d8 1c b4 37 3d 44 7b fe 94 79 ab 24 7e 1f 4d 94 f5 0a 1c cc 7c ea 82 8d d5 c1 84 df b1 23 99 56 da 74 13 3c 16 1a de 60 4f 15 11 ac e7 33 86 89 56 2f 65 47 f9 e3 47 47 d2 54 3d e5 8f 1f 29 9c f3 c5 60 d0 d4 6e a5 1e a6 ba 7d e0 a7 4b fc 08 8d e1 48 3a dd 02 6d de 0f 09 79 a5 66 59 a0 d9 fb 7e a3 d1 6f c0 5b 20 0d 53 0c 4c 54 7c fb 5b 83 ac 7d cc 5b 81 0c 6b c6 80 ac 06 6a 27 c8 68 a6 2c c8 8c b9 61 0a 63 eb 7b d9 ac fd 8a d6 58 c0 99 2e c5 ba 7d 33 8f 76 27 05 3c 17 2f 70 19 23 52 cb e9 50 ef b7 21 18 Data Ascii: hoRfUZ>#~H$h"0pN<c$D>c-VUW3~ouR Y/=7=D{y$~M\|#Vt<`O3V/eGGGT=)`n}KH:myfY~o[ SLT\|[}[kj'h,ac{X.}3v'</p#RP!
2024-11-01 15:52:26 UTC	359	IN	Data Raw: c2 61 94 16 0d 8e ff 6e c8 a8 4f 2f 40 84 1a c6 3a 8b 7e 29 c9 84 94 4b 9c cd f2 12 3d 5f 0a f9 1c 31 5e b0 95 ad 4c 77 1a 58 31 50 91 c2 5a 2e 0c 69 26 d7 8a bb 08 2e 4f 10 ab 58 c0 6a ff 05 11 fc b9 22 e0 0a e8 a5 1e 56 0c 16 d9 f3 49 94 20 8b 2f 85 35 01 f6 a4 7f 58 57 4e a5 c0 59 cd 0f 58 cd 0f b2 9a f5 1c b4 9d 47 f8 c5 ac ef 48 b0 ba 92 bb dc f2 2e 3a 41 be 31 a8 c4 08 d1 42 bd 4a 1e e1 ac bd 00 e7 94 80 19 b2 55 93 a6 38 51 1c c2 4e 57 d8 35 f8 0d 1f e5 f3 3a 67 98 aa 41 8b c7 b9 22 1f 93 3b d1 5e 04 63 d9 d0 d2 5e 11 92 4c 1a 6e f0 99 a7 2f b5 a9 11 6b 1f 3f 36 68 12 70 e6 62 75 73 6b 58 ce 35 fc f4 1c 4c 5e a1 02 92 96 88 2c 0e 15 be 01 15 be f9 bd a9 c0 bb e8 33 89 50 df d7 d0 e0 77 24 82 78 22 c2 db 2f 38 a7 74 f2 ca 9c ac 33 be 77 6b d5 0a c9 Data Ascii: anO/@:~)K=_1^LwX1PZ.i&.OXj"VI /5XWNYXGH.:A1BJU8QNW5:gA";^c^Ln/k?6hpbuskX5L^,3Pw$x"/8t3wk
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 09 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 44 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 31 66 63 30 0d 0a 5c 4a 85 18 d2 68 6e ac 93 23 b3 49 78 39 5c 4c 0e dc b8 c5 bf 30 e4 bf 64 e5 90 59 c6 86 67 58 52 a8 82 39 03 c8 ee 7d 9b c6 e5 3f 29 78 e1 c8 e5 92 e0 fe 3a 5a 5c 78 69 32 1e 34 66 59 b6 4a fb 77 ef 22 a3 25 81 ed 12 5c c4 f1 c5 5c 85 2b 04 5b 90 a5 02 ed c8 8b bf 2b ea Data Ascii: 0000000100000001o0000000100000001L000000010000000100000001B0000000100000001D0000000180000000100000001001fc0\Jhn#Ix9\L0dYgXR9}?)x:Z\xi24fYJw"%\\+[+
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 66 74 70 5e fd d1 bf 5d 4d ed 18 b8 19 4c 4b 31 a3 ec 82 11 10 d4 76 2f 80 40 10 bc ae bd cd a5 b9 a9 7e 8c db 23 4a 03 cb 8e c3 2e 48 09 88 5c 8c f3 d1 a5 7b a2 7b 23 36 72 31 2d 27 ac bb e6 01 2c cb f5 62 84 30 92 bd 6c 5d 4b a3 f2 78 10 10 ce 39 ad b3 01 21 41 be c2 ee ac 39 ad 75 1a c1 40 89 9f 44 1f 70 6d b7 47 9a 4b f3 ee 0c 69 71 3a 53 81 da 1a 77 31 ba b8 50 89 e6 6f 58 22 c8 eb 68 fe 84 c3 e1 3e 0e 3a 61 01 71 fa 40 40 22 65 db f8 29 1f cc 4d 7b b8 69 30 1e a8 68 27 44 b8 85 9b d0 85 28 19 14 b7 02 aa 40 18 10 6f b0 5c f4 ea e8 8e 07 40 2f d8 2f ee e5 45 e7 4e a3 ac 89 0c 88 d6 96 ef 03 20 09 8f 72 0f 58 99 ab 89 83 22 be 49 62 a4 bf 9b 20 6a 12 29 a8 1b 36 05 ae 27 18 4c 2d 80 30 c3 ee cf 26 a0 c3 19 16 c7 59 87 b9 32 20 e2 3e 48 92 f0 2a 27 d9 Data Ascii: ftp^]MLK1v/@~#J.H\{{#6r1-',b0l]Kx9!A9u@DpmGKiq:Sw1PoX"h>:aq@@"e)M{i0h'D(@o\@//EN rX"Ib j)6'L-0&Y2 >H*'
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 91 39 92 be cc de b5 a2 ac b4 75 b1 3b 2d d6 6b 1d c8 1c 96 86 8f 08 17 de fb 50 c1 3c 44 42 19 c5 9e e8 5f 72 3c 50 ac c9 f5 30 5e e0 fe 95 ab 5b fc 65 8d 76 49 88 60 49 ae 5d 20 2c 1c d1 51 79 90 a1 22 a7 7f 67 45 e2 e8 3b ab 2c 72 9f 85 d3 5c 4d 16 81 9b 09 60 ce ca 6f 96 41 d8 d3 08 b5 6a 3f 41 24 14 85 1f 9f ea a4 5d f8 db 08 f3 d2 b3 30 2c d3 c4 3f 75 f7 99 be 27 81 e7 0e d1 0a bf 34 25 f8 af e5 fd 09 39 68 f2 7c d8 cb 78 a2 1f d3 94 0b 5b 08 a4 bb 99 91 a5 dd 15 81 58 7d 4a 51 d2 2f 21 51 30 c8 f5 b3 42 22 5b f8 7f 7a 9f d5 68 aa 1c e4 dd 5b 00 5a 4c 0c 09 93 17 a1 45 04 b9 6f 76 0f 68 54 3a 2f 6b 18 ce b6 a1 c0 9c b9 6b 18 7b 4e 18 42 4e 9f 31 9b 4a 8c ad 3d d2 49 1b ef 18 7e b8 de 6a f8 9d 0d 26 b0 f8 a7 c0 56 30 68 ae 33 95 8c 7c a1 0b 87 c6 04 Data Ascii: 9u;-kP<DB_r<P0^[evI`I] ,Qy"gE;,r\M`oAj?A$]0,?u'4%9h\|x[X}JQ/!Q0B"[zh[ZLEovhT:/kk{NBN1J=I~j&V0h3\|
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: da 02 cc a5 35 69 ec 4f d9 fb 5a 3a ca a0 85 1d 53 98 47 16 e5 62 f2 66 96 b6 fb b2 02 b5 17 70 82 83 0c 7a bd 80 d0 8a 47 33 76 8e b0 22 74 7c 12 6f 3d 1b 01 53 4b 90 9a c9 21 9f e8 ae 98 97 8b 2a bf 8c 57 1c ad e9 46 1b ab fc 2a 30 38 32 c5 3c 40 5b bc ad 22 0b d4 28 16 32 ba 2b e0 4b 72 05 89 ae e9 e8 4a 62 f2 7e 44 12 5b 71 6f 45 7c ad 6c b6 f2 b7 9d 0b 68 6d 55 51 3c 8f d7 53 e6 17 6b 89 68 65 6f ad 30 7a b7 1a 5c 01 fd 22 16 b5 b5 d6 ab d6 f4 ad 81 21 cc c2 83 6c eb 64 74 17 49 7d 6f 1f 53 41 49 9b ff 6b 01 84 e6 b0 f4 c9 b3 d6 b6 ae 6b fe ca 00 d6 1b 30 22 b8 d2 47 fc 26 63 c4 31 1e b4 a7 d6 e6 28 7f da f7 90 20 81 19 3d e3 0d 60 e5 02 c0 7f ff 97 a7 ef c2 3b 30 14 c7 83 3d 49 c7 76 3c ec 35 b0 48 be 0a 1d fb 14 5f e2 e1 7e c2 b8 1d af 0b bf 38 67 Data Ascii: 5iOZ:SGbfpzG3v"t\|o=SK!WF082<@["(2+KrJb~D[qoE\|lhmUQ<Skheo0z\"!ldtI}oSAIkk0"G&c1( =`;0=Iv<5H_~8g
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: f1 6e a5 bb 01 ed c2 e5 f8 47 4c 7e 0c 7f 32 19 1d 4f cd d2 4c 60 59 bb 0d da 31 20 14 f5 e8 a7 84 80 d2 48 a3 ce 44 8d b4 a8 12 24 94 1a 9c 9c 8c c3 a9 5e a8 45 44 a9 cd f4 60 7c 74 a2 59 cf 20 a3 d4 44 1d 87 47 a1 de 3d 1a 21 a5 16 ae 98 62 8e d0 b1 14 bb 68 57 04 89 99 c4 db a8 77 80 ed 65 7e c9 62 59 c0 da fd 89 2d aa 51 25 b6 27 4e 37 11 fc 4d 22 44 7f 1b 92 ad e3 9d a1 8c be 41 b5 e1 7b af 63 c4 d0 62 f3 ef a3 24 9c 66 be f7 54 e1 2b 5b c9 64 f6 bd 07 09 4c 7f 1f 6f 2d 9b 51 64 4a 1e da 1e d3 e6 23 3f 44 86 95 1e d9 d6 4a 8f 8b 04 df 87 09 1f 1a 46 27 ce 98 c2 a4 6d 0a 9a 88 72 4c d4 85 ef 61 79 21 be 8a d7 59 1e 56 12 74 f1 85 bf f5 55 c8 8a 10 2d 49 79 d4 0c 50 fd 69 72 0e 7b a5 03 07 f3 ba 64 97 97 46 32 47 5c d8 fa 4e 55 21 21 a1 1b 18 fd 46 f3 Data Ascii: nGL~2OL`Y1 HD$^ED`\|tY DG=!bhWwe~bY-Q%'N7M"DA{cb$fT+[dLo-QdJ#?DJF'mrLay!YVtU-IyPir{dF2G\NU!!F
2024-11-01 15:52:26 UTC	1254	IN	Data Raw: 10 e3 84 8f 95 f2 b0 3e ff 69 54 aa 9c 92 f0 d0 65 50 3f b4 be 0a 60 84 98 96 39 0c 3b 1a 3a ab 2f b7 b8 6a 6d ff f2 4e 5d 4d 13 7a e8 82 be 36 13 21 d5 34 6d 8f b0 79 11 9c 8e 56 2a dd 74 fe b8 c9 13 28 ec f7 97 82 12 ac cc b7 78 98 24 c6 6b 63 2b 21 93 f9 86 71 a4 cc 4e 28 67 1f 8e 92 66 25 53 93 2f d7 73 e8 6f 6a cd 9a d0 d5 35 a1 cb d5 44 70 d7 00 37 f5 b2 d2 be 27 fc 66 4a 73 b5 d4 21 cb c1 72 8f a9 17 c5 9b db 09 da e1 d5 16 b5 69 45 0e 8b 45 5f ee 46 97 5b 15 34 ac db c1 d1 bc a5 3e 8e 29 aa 3d 5f 33 27 5f c6 cc 2d d9 e3 0a e8 d2 c0 1c fc 74 82 7d 6a f1 0b 74 10 61 df 42 6b 86 13 aa b4 4e cd 56 91 13 17 8d b4 4a 6b 29 6f 15 34 bd 6d 24 38 b5 11 18 dd ca 28 39 7c 0b ed 5c fa 69 7b 8e 62 16 ae 2d 40 81 0a 36 00 e4 f8 93 8f c2 9c bf 71 1d 26 c9 6a ad Data Ascii: >iTeP?`9;:/jmN]Mz6!4myV*t(x$kc+!qN(gf%S/soj5Dp7'fJs!riEE_F[4>)=_3'_-t}jtaBkNVJk)o4m$8(9\|\i{b-@6q&j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49786	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:25 UTC	469	OUT	GET /gui/99111.8b301b015be7b22d0bc3.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 49951e388e478cad6b825162209c806c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:10:59 GMT Expires: Sat, 25 Oct 2025 16:10:59 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603687 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 31 0d 0a ff 0d 0a 61 35 66 0d 0a ec 58 6d 73 db b8 11 fe 7e bf 82 66 5d 0f 11 51 14 29 d9 92 42 1a 52 72 ce a5 93 5e ae c9 e4 65 72 ad a2 bb 50 24 64 31 a1 00 1d 08 26 d1 49 fc ef 7d 40 90 b2 6c 77 6e 3a d3 ce cd f4 c5 1f 2c 00 04 16 8b c5 b3 bb cf c2 2e 0b 66 15 4a 66 89 b2 23 a7 60 f9 d2 fb c2 16 9b 38 f9 74 b5 2a f9 a7 cf ea e7 32 fb 79 1d 67 9c fe c6 b7 fd 7e 36 27 de a6 2c 56 ce 6c f6 f0 61 10 04 6e ff 62 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000011a5fXms~f]Q)BRr^erP$d1&I}@lwn:,.fJf#`8t*2yg~6',Vlanb
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: e8 be 80 97 f5 9a e2 68 c1 e8 62 f0 70 40 10 8a b9 73 1e 0c 83 00 f7 86 e6 c8 ef 8f 07 00 68 1b b6 72 13 39 9a a3 b4 c3 3a 96 e1 02 1f 4b 19 6f bd ac a8 7f 31 46 9a 69 aa fa a6 f7 e0 c1 37 d6 03 eb 91 3e 2d 2f 98 6e 5f 89 cd 56 66 d7 2b 65 f5 fd 60 64 fd 49 88 eb 9c 59 cf 9f 5f e9 8f af 5f 3e f9 b1 fb dc 4c ee 3e 4b 19 57 d9 32 63 32 b4 be 7d fd a4 3b e8 5e e5 31 f2 18 26 c2 d7 c9 7e 7f a3 87 0e 95 da 04 9c f2 32 cf 29 55 53 fd 1b da 25 5c 79 99 71 96 da 27 54 6d 37 4c 2c ad d7 db f5 42 00 14 6a 66 5a 5e a6 98 8c 95 90 f3 fd 5e cd ec 47 8f da be 3d d7 e8 d4 72 4e 28 42 55 6d 61 57 b8 99 9b 23 5c 20 98 c4 f4 c4 77 0b 7a 12 44 4a 6e b5 1d 32 ea 60 7f 2f 89 73 98 0b 71 91 b3 af 4a a3 91 42 39 7c 7e b1 f8 c8 12 1d 24 4e 28 e4 19 1b 45 10 12 54 2c 47 72 ae 63 Data Ascii: hbp@shr9:Ko1Fi7>-/n_Vf+e`dIY__>L>KW2c2};^1&~2)US%\yq'Tm7L,BjfZ^^G=rN(BUmaW#\ wzDJn2`/sqJB9\|~$N(ET,Grc
2024-11-01 15:52:26 UTC	319	IN	Data Raw: a9 ca 5d 86 a8 82 6e 5e f3 7e 9b d4 9b ba f2 77 26 f4 fa ca 32 30 53 94 83 ba d4 bc b1 ca 91 45 8e 8a d6 ea b6 ad f4 6a d8 b8 ae 64 41 20 db 7a 0f 96 d3 16 73 61 81 db 86 a9 4b e2 0c 65 27 2c 73 b4 81 2e 3e c1 77 8d 1b b5 b5 26 fa 87 aa f3 b8 be 8c 9b 60 91 55 f8 33 0c 1b 30 ae 6b 6c 5d 22 27 5e 01 4d 4e 9c 92 26 1e c7 8b 49 ad c9 e1 c5 4c d1 d2 14 c8 51 b3 19 d8 bd c6 89 26 9d 4b 68 0d 7f d1 3c 1f 78 bf e3 c1 02 ba ac f1 78 f5 52 0a d4 0e 6a 8b 39 a1 c0 e2 fa 3d 01 bc f0 50 59 27 9e 5e 7f 50 38 f1 96 ba 66 d2 8a d5 ef db 75 10 3a b0 72 86 77 58 75 f4 8c 80 f2 a2 55 25 4e f1 0c d4 3e d7 71 7a af 44 06 fe 99 a7 2b 9c 77 99 5a a1 e8 8e ee 68 0c f3 4d 85 66 ef 37 1a bb 7c 8a c7 ac fa 61 c9 47 c1 1c 90 10 31 6d 1a 87 08 27 e6 2c ec 50 b2 4b 2f 41 81 8a 73 e1 Data Ascii: ]n^~w&20SEjdA zsaKe',s.>w&`U30kl]"'^MN&ILQ&Kh<xxRj9=PY'^P8fu:rwXuU%N>qzD+wZhMf7\|aG1m',PK/As
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	142.250.185.131	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	855	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=h5acdqhznrsa HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:26 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 01 Nov 2024 15:52:26 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-r5KGQ12VdUwwgiSwIlxNSg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	217	IN	Data Raw: 35 37 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57c0<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 72 35 4b 47 51 31 32 56 64 55 77 77 67 69 53 77 49 6c 78 4e 53 67 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 Data Ascii: ext/javascript" src="https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js" nonce="r5KGQ12VdUwwgiSwIlxNSg"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 49 47 36 4f 58 65 53 59 68 4d 31 71 64 50 31 59 47 57 5f 33 2d 59 6a 4b 44 34 31 30 32 46 47 4f 77 79 56 41 48 54 78 6e 31 51 64 49 6c 76 54 33 51 72 6b 70 51 4d 2d 41 36 52 35 6b 33 48 6c 7a 42 67 43 4e 45 51 47 49 49 35 39 4e 7a 4d 4a 4b 77 4a 6a 4e 35 51 61 67 4c 51 5a 6d 73 32 6e 34 71 4e 43 39 69 66 57 77 54 4b 51 5f 4b 56 52 6d 6b 69 56 69 74 6e 53 2d 36 49 49 4c 33 33 30 66 74 51 72 70 6a 5a 4d 37 6f 73 52 48 4f 64 52 36 77 6e 65 47 64 41 39 51 6f 43 45 58 4f 61 37 67 77 41 33 71 62 44 79 44 67 4a 51 6b 6f 4e 71 37 4b 47 4a 5a 76 37 57 36 4d 63 59 4f 50 53 35 37 68 57 67 34 2d 4a 42 47 6f 50 69 44 38 5a 77 71 30 34 67 38 6d 35 68 32 38 67 6d 71 5a 4c 43 6c 50 54 5f 2d 57 4e 63 38 68 49 68 54 6c 4d 36 77 4f 65 78 6b 4f 43 53 2d 48 69 59 41 74 38 6c Data Ascii: IG6OXeSYhM1qdP1YGW_3-YjKD4102FGOwyVAHTxn1QdIlvT3QrkpQM-A6R5k3HlzBgCNEQGII59NzMJKwJjN5QagLQZms2n4qNC9ifWwTKQ_KVRmkiVitnS-6IIL330ftQrpjZM7osRHOdR6wneGdA9QoCEXOa7gwA3qbDyDgJQkoNq7KGJZv7W6McYOPS57hWg4-JBGoPiD8Zwq04g8m5h28gmqZLClPT_-WNc8hIhTlM6wOexkOCS-HiYAt8l
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 5a 59 4b 31 42 76 4e 6c 4a 58 52 6d 78 6c 51 30 5a 49 63 7a 64 35 4d 57 70 68 64 33 68 31 59 58 42 54 55 57 56 4c 64 45 31 44 65 56 46 59 53 47 64 7a 65 48 42 77 62 30 74 6d 63 46 70 72 63 6d 4e 54 54 6b 70 53 51 6d 63 33 53 6a 51 78 52 47 56 45 65 56 70 53 51 57 4e 77 4d 6c 5a 36 53 79 38 33 4b 32 56 57 4e 30 52 79 4e 48 56 48 54 32 46 4b 5a 6b 39 4d 55 7a 41 34 4d 6b 52 6f 5a 44 4a 51 4e 47 46 4f 53 55 4e 68 4b 30 74 61 57 58 4e 75 57 54 68 6d 53 54 4a 4f 61 6a 52 71 63 45 6c 4d 52 6a 56 6d 55 7a 42 6a 57 47 64 53 4c 7a 6b 31 63 57 70 71 4c 33 68 77 62 32 4e 4a 65 6c 42 30 4d 6d 70 69 51 57 31 34 52 30 46 48 59 57 31 31 62 30 68 4b 63 30 31 72 59 6e 52 4d 64 6d 4a 74 52 6e 70 6d 61 58 42 75 59 6d 46 42 4e 57 46 32 61 55 31 68 65 47 52 77 54 57 39 31 4e Data Ascii: ZYK1BvNlJXRmxlQ0ZIczd5MWphd3h1YXBTUWVLdE1DeVFYSGdzeHBwb0tmcFprcmNTTkpSQmc3SjQxRGVEeVpSQWNwMlZ6Sy83K2VWN0RyNHVHT2FKZk9MUzA4MkRoZDJQNGFOSUNhK0taWXNuWThmSTJOajRqcElMRjVmUzBjWGdSLzk1cWpqL3hwb2NJelB0MmpiQW14R0FHYW11b0hKc01rYnRMdmJtRnpmaXBuYmFBNWF2aU1heGRwTW91N
2024-11-01 15:52:26 UTC	1378	IN	Data Raw: 61 47 35 46 55 44 4d 72 4b 32 70 42 52 6a 42 6f 4f 45 4a 61 63 58 56 54 64 47 31 71 52 6d 56 58 4e 56 5a 6b 51 32 46 4b 61 58 70 61 4e 6b 46 76 53 48 46 74 54 30 78 45 53 58 5a 50 61 48 6f 32 4e 55 6b 78 57 45 74 59 64 53 39 72 4d 33 49 35 52 30 4a 50 4d 44 56 77 63 30 4a 78 64 44 68 70 56 30 68 59 61 58 56 78 53 6d 39 6f 64 58 46 35 51 6e 4a 76 61 6a 52 46 4d 30 51 7a 55 6e 56 4a 56 48 4a 68 55 7a 42 57 56 56 59 77 51 53 74 72 54 48 4e 59 53 45 52 35 56 55 5a 4d 4f 47 77 34 4e 56 56 52 55 6c 63 76 65 56 64 79 63 32 4a 71 53 7a 64 6c 54 53 73 30 56 32 35 6f 4f 56 4e 4b 4f 54 4e 49 65 6e 45 72 5a 54 5a 75 4d 47 74 51 55 55 59 33 4b 30 4d 7a 52 58 46 5a 53 6b 70 4a 52 6d 46 78 4d 57 46 31 52 48 68 36 55 31 56 4f 56 30 45 76 5a 7a 5a 6a 59 56 68 54 4d 47 4e Data Ascii: aG5FUDMrK2pBRjBoOEJacXVTdG1qRmVXNVZkQ2FKaXpaNkFvSHFtT0xESXZPaHo2NUkxWEtYdS9rM3I5R0JPMDVwc0JxdDhpV0hYaXVxSm9odXF5QnJvajRFM0QzUnVJVHJhUzBWVVYwQStrTHNYSER5VUZMOGw4NVVRUlcveVdyc2JqSzdlTSs0V25oOVNKOTNIenErZTZuMGtQUUY3K0MzRXFZSkpJRmFxMWF1RHh6U1VOV0EvZzZjYVhTMGN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49787	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	648	OUT	GET /gui/70520.2084d2d63c64ac00d8ff.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 953e6e0c144c398eca206f31a855c242 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:17:23 GMT Expires: Sat, 25 Oct 2025 15:17:23 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 606903 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 66 66 62 0d 0a 00 00 00 02 ff b4 5d 6d 73 1b 37 92 fe 7e bf 02 e1 5d e5 a4 2a 2e e3 f5 6d 72 39 bb b4 57 0a 29 3b aa b5 64 95 a4 f8 6e cf 95 e2 8e c8 a1 38 1b 92 c3 9d 19 4a 56 79 f5 df ef e9 6e 34 06 c0 cc 50 a4 ec 7c b1 45 bc 74 37 80 46 a3 df 80 e9 6d ca d4 94 55 91 4d aa de eb 83 32 5d cc 06 f7 e9 cd 3a 99 fc 36 9c 6f 56 bf dd 55 e3 4d 36 5e 26 d9 ea 68 4b dd 3f ff f9 f1 d7 c3 c1 7a 53 ce 0f 3e 7e fc cf 17 df bf 7c f1 6b ff 33 ff ff ea 20 ed 67 fd ea f0 e8 cf 9f ab 41 71 90 1d f6 ab c1 f4 20 eb 7f 3e 3f 3e 3b 19 8f 4e ae 86 e3 b3 e3 8b 8b d3 f3 b7 Data Ascii: 00000001000000010000000100000001000000010000ffb]ms7~]*.mr9W);dn8JVyn4P\|Et7FmUM2]:6oVUM6^&hK?zS>~\|k3 gAq >?>;N
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: a4 c5 d9 ab 79 99 16 e3 e4 16 1b 6f 9f 5e eb a4 2c b1 c9 f6 18 0f 08 03 26 ff fc 7c 72 0e a6 f9 fd 6a 91 27 cc 6f 3b 13 57 77 da 7f 60 41 df e7 91 ba f7 c4 2c b3 72 b2 d7 9a 49 87 fd 07 e7 fa ed 35 30 ee b5 f7 a0 b0 c5 f2 87 bd 46 65 7b ec 3f ac f4 13 64 42 55 40 6c e5 ab bd 30 86 1d bf 14 31 fa ef 35 af 01 f6 fd e7 f7 36 19 43 6b d9 7d fb 4d 57 25 3a 14 38 49 77 de 48 d4 3c 9b 6c 51 c6 23 89 55 a4 b7 a4 42 3d 8c 7f 4b 9d 82 fe e4 16 77 9d ee 92 c5 66 77 5c e9 dd 3e f2 6a 9d ad 77 07 bd dc 54 e9 a7 9d 27 69 96 2f a6 7b cc 29 1d 5f 3b c3 5e 17 f9 04 4a 20 f4 38 52 12 c7 55 52 c0 f6 db b9 37 9f 71 f9 5e 8b 01 15 78 0d 45 0b c7 2c f4 c5 12 67 c2 ce c8 a0 26 55 e3 75 5e ec 4e de b4 c8 d7 6b 7b a0 ef 8c c6 ef 04 75 b0 9a ef dc 93 ad ab f1 3c 29 bb bb 78 6a c4 Data Ascii: yo^,&\|rj'o;Ww`A,rI50Fe{?dBU@l0156Ck}MW%:8IwH<lQ#UB=Kwfw\>jwT'i/{)_;^J 8RUR7q^xE,g&Uu^Nk{u<)xj
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 b1 50 da 68 3d 36 3c ed d2 21 6e eb a4 9f 56 70 fc af 16 72 f0 f1 21 dc 53 9f ca da 2c 19 d0 34 db 50 da 78 91 53 5c 08 c1 54 1b a6 96 5a 98 90 9c 87 40 10 5a 0e 1b ad 2e c7 55 5e 77 44 43 b2 e0 ec aa b7 74 4b 4a 87 a6 87 bf 41 6a 02 23 ef 7e e5 89 77 2d 40 dd 24 df d0 81 a6 f0 7b f6 37 d5 40 8c 97 e3 44 6b 74 f2 a4 f8 a6 bd 78 12 17 eb 71 ec 84 17 66 d9 f1 8e 82 8c 1b 79 3e 9b 9e ed c8 ca cf e3 e3 af fd d5 11 12 39 0e 3e bb 44 06 de cd bd 2b c9 6b 88 6c 76 97 34 21 76 5b 49 66 de 0c c1 28 8a 4e 97 30 0a b1 61 30 4e 89 ab 0b 9c 6b c4 d8 43 20 7f a3 22 84 42 11 da 5a 22 30 5c f7 87 a1 4d 61 4a f3 6f 9f d3 c7 bf d5 4e 22 81 33 7a c0 ff 9e 51 69 66 50 5d 29 64 4e 3e 17 73 20 2e a4 c3 10 53 6f c7 4e ad 66 85 45 7b f2 93 b9 10 eb 23 1a 46 6f e4 55 71 98 0e Data Ascii: 0Ph=6<!nVpr!S,4PxS\TZ@Z.U^wDCtKJAj#~w-@${7@Dktxqfy>9>D+klv4!v[If(N0a0NkC "BZ"0\MaJoN"3zQifP])dN>s .SoNfE{#FoUq
2024-11-01 15:52:26 UTC	293	IN	Data Raw: a1 18 1a e1 2f 6f e0 af 7a c7 75 f5 73 11 7a 10 48 02 d4 a8 5b c2 69 01 ee 21 05 ff 49 b3 d4 20 f2 1e 8c 69 47 eb 40 8c 6c 1c da 61 a7 6d 6a 03 74 01 52 de be 1c 8c fe 02 b4 22 03 28 fc e7 f0 e1 06 a5 17 ed 0b 50 9e 5d 19 4b 2e b7 79 e6 3c 43 a5 86 b5 a0 32 16 7f c7 17 db e4 9a 58 80 f9 af 88 99 98 4b aa 10 b7 51 2d f8 e1 06 94 3b 62 90 17 d0 5f 70 23 89 fd 06 b8 ed 52 3d 28 47 0d 3d 1c a6 06 85 21 53 6f 96 35 f5 8d 9e 00 ef 48 f2 55 04 29 cb 76 d7 83 b0 91 30 b2 7e 4f 39 08 b2 ca dc 27 b4 0b 49 c3 17 cf 5b 82 16 7c 1f 10 89 a3 77 59 91 af c8 db e1 28 53 fc 7a 5b 09 34 05 77 b7 9e a0 06 d7 2e f8 ae 8a 5e 6e 50 6a 14 fe e9 ca 5c 83 c6 ff c1 21 e8 61 70 63 40 6c 08 4e 81 00 07 2e 4b b9 6b 3a 3b 0f fb 19 e3 f5 2f 65 61 d0 ce 59 ed ae 18 05 54 35 d7 c1 cb 74 Data Ascii: /ozuszH[i!I iG@lamjtR"(P]K.y<C2XKQ-;b_p#R=(G=!So5HU)v0~O9'I[\|wY(Sz[4w.^nPj\!apc@lN.Kk:;/eaYT5t
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a d3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 63 64 34 0d 0a 86 97 80 01 5f 74 e9 2a c0 47 62 be 34 Data Ascii: 00000001Z00000001000000019000000010000000120000000100000001\|0000000100000001>000000010000000100000001500000001000000010000000100000001}0000000100000001000cd4_t*Gb4
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 2d 27 16 88 24 79 98 6f aa 5b 4e d0 44 52 b8 b3 d1 9d cc a6 b1 02 03 27 16 07 70 e1 3f ce 57 f9 32 df 94 e6 ea 01 97 6a 96 e6 9c 03 f6 db 78 a8 5e 08 cf 1f 7d 7c 75 ce 08 34 4f 39 c0 f2 9e 72 97 35 03 a7 89 12 dc 47 67 39 ce 1d 5d 58 a7 cf 74 e0 32 0c 11 08 5d f2 73 80 8f 53 0b 0a 5c 5b db 7b 18 d2 f3 81 20 63 0f 70 f2 74 00 d9 a7 87 b4 45 6e 65 8e 0d bf 51 e3 54 a3 21 f5 35 c7 0e 0a 72 ad 77 80 f2 53 2b 94 9f 1c 14 a4 66 ef 00 65 d8 0a 65 08 28 9d 6f c4 89 08 be ce d7 d8 0e e4 a4 37 74 e1 92 9e 8f 8b 24 72 13 06 f7 b4 22 dc eb 4f c5 2d 7d a3 cb b3 82 f6 02 53 45 ef e8 90 5e 07 89 19 75 d3 5a 6c 22 72 e2 5a 6f b2 be 16 62 10 e2 a6 57 f5 50 43 22 90 58 bc f9 ac 9c a0 b9 b2 ee 65 58 e4 fc dc 5c 84 07 e9 79 d5 32 59 13 8f aa 23 da b5 04 2f 78 ae f1 e8 5d 39 Data Ascii: -'$yo[NDR'p?W2jx^}\|u4O9r5Gg9]Xt2]sS\[{ cptEneQT!5rwS+fee(o7t$r"O-}SE^uZl"rZobWPC"XeX\y2Y#/x]9
2024-11-01 15:52:26 UTC	712	IN	Data Raw: 39 82 6a 51 cb c0 fc e3 66 2f 96 08 5e 0c 47 50 4d f7 c8 89 f7 00 7a db c0 1b f5 fb 8c 3f 44 da d8 29 21 ec fd 66 c3 07 fd 95 26 05 04 f8 fb a5 41 1d 55 46 12 cd 1d d4 f5 32 7d 7d c2 e2 4d 13 10 b6 c7 9e f9 2a 94 4d dd db f1 96 95 df 1e d3 9d 32 a4 85 06 f1 b5 11 8a a1 37 4f d5 e5 b4 93 7e e9 3f 33 6f a1 23 6f 02 cb 02 65 3d 56 85 28 3d c4 d6 ec c3 91 d4 85 9f a5 17 f8 57 f2 33 06 ae c5 70 57 d3 27 5b e8 7d 13 a8 7a 88 3a d1 15 9c 3d 94 0c df 9f ad 1b 2e f0 9d 47 b3 16 d4 99 cd 9a 4c b1 bd 66 d0 21 e4 14 8a 36 94 ff ce 19 63 cd 60 a1 8f da b5 d9 67 ac f6 51 7d 99 d7 13 7a 61 3f 9e 55 29 dc 07 a6 3c bd 2f 20 2f f0 0c 7f 0c 91 cb f6 01 c8 f1 12 9d 16 1b 82 89 d6 c0 96 ee 03 55 9f f1 17 42 df f0 a3 fe 31 a9 b6 54 4d e1 ef 64 71 c9 e5 4d 8e ef 9d b6 07 19 ec Data Ascii: 9jQf/^GPMz?D)!f&AUF2}}M*M27O~?3o#oe=V(=W3pW'[}z:=.GLf!6c`gQ}za?U)</ /UB1TMdqM
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49788	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	469	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c8deaf532eccddf265b730ac7479f89a Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:34 GMT Expires: Fri, 31 Oct 2025 12:18:34 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99232 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec bd eb 7a db 46 b2 b0 7b 2b 34 97 e3 87 34 41 8a d4 c9 32 25 88 cb b1 93 b1 93 38 c9 c4 ce c1 a3 68 34 14 05 49 b0 29 40 01 41 4b 8a ac ef f7 f7 7b df cb be 81 7d 29 fb 4a f6 5b d5 07 34 24 ca 51 b2 66 d6 5e df 3c c9 8c 45 1c ba 1b d5 d5 d5 55 d5 55 d5 d5 cd f9 2c 69 cc ca 22 9d 94 cd cd d6 2c 99 1e f6 ce 92 fd d3 f1 e4 dd d3 e3 79 f6 ee 7d b9 37 4f f7 4e c6 69 16 7f e4 dd 87 0f 3b bb ed de e9 7c 76 dc da d9 d9 78 b4 b2 fa 68 37 ba d4 df 61 ab 8c b2 28 69 c7 db 97 87 f3 6c 52 a6 79 d6 28 e4 59 fb b2 48 ca 79 91 35 b2 f9 74 1a c7 e5 87 0f e6 22 1b 7d 3d fe 7a 58 6e 65 a3 ee 60 58 6e 67 23 f9 1b Data Ascii: 000000010000000100000001000ffdzF{+44A2%8h4I)@AK{})J[4$Qf^<EUU,i",y}7ONi;\|vxh7a(ilRy(YHy5t"}=zXne`Xng#
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 55 c6 49 5b b1 50 c4 fd 28 ad f0 d8 be bc b2 3c e9 72 36 4c a3 ac 62 38 9e 14 0a a4 99 6d 6b 74 79 90 67 c9 f0 5e ff 6a 68 af 06 d1 fb f1 74 9e 0c e1 64 9d ce ee d5 55 94 54 2d 30 36 e5 71 91 9f 35 ca ab e8 70 98 5e 5d 99 bb 2c 39 6b bc 66 98 3e 2b 8a bc 68 35 5f 64 b4 80 88 1b 97 65 72 72 5a 36 ca bc 61 e8 21 69 64 79 d6 d5 eb fd 69 d2 48 91 3e e3 6c 92 f4 7e ce 5e 64 8d bc 38 48 0a 29 bb cf 1b 21 27 8a 44 5a 61 2c 74 d3 c8 75 0c 67 8d 93 39 32 eb 78 fc 3e 69 8c 1b 37 c8 af d5 6e 9c 24 e5 71 7e d0 6b b6 af 84 7e f3 68 1e df eb 47 e3 f8 de a0 c2 8a a7 39 30 19 27 8e 70 ae ea b8 92 da e0 b8 97 25 e7 65 cb b3 f9 39 98 13 8c 45 60 a0 8e 18 3e 21 52 5b 31 13 7c a0 2c 2e 2e e7 4e 3b 49 7a 46 5a 7c f8 e0 ae 5a ed 2b e6 16 94 7b 21 54 3f 6e 1b 84 e6 57 fc e7 1a Data Ascii: UI[P(<r6Lb8mktyg^jhtdUT-06q5p^],9kf>+h5_derrZ6a!idyiH>l~^d8H)!'DZa,tug92x>i7n$q~k~hG90'p%e9E`>!R[1\|,..N;IzFZ\|Z+{!T?nW
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: e9 b7 01 a7 2c d5 df fa 26 1e 44 2f e2 e5 e8 f3 78 25 7a 1e af 46 df c4 83 a4 bb 5e 85 16 7c 55 d5 68 96 c5 38 9b 4d c7 68 11 cd 4e d9 69 46 fd 76 b3 6a fa db 85 05 fb 91 16 0d 0b fe 5a 15 24 94 69 bb 23 51 46 55 33 bf 18 c6 68 75 a2 2c 7e 39 2e 8f 7b 27 e3 73 95 6a fb e3 ec e0 2c 3d 28 8f 5b ed ee f2 c3 ac bd b4 8c a8 2b 72 02 1e 5a b2 be b7 a5 cd 83 0c 19 91 68 f3 49 bb 13 08 8b 9f 7c 5c cb 3d 55 d7 f6 f6 c6 e7 e9 ac 02 e0 87 50 18 60 a2 28 62 11 29 18 02 f4 27 8f d7 31 a8 af 33 7a 2b 18 2f 16 d9 46 ce d2 ec 20 3f 7b f0 c0 fc 22 b1 de 13 dd f0 6d 7a 9e 4c bf 1b 13 0e b7 3d 20 2c ad b7 86 d1 43 62 a9 de 98 90 aa e7 12 b8 36 20 12 44 9e 3d 37 cf 5e 8c 9a e7 cd 61 f3 a2 19 1d 86 45 3f 1f 7d 35 fc b6 1a 9e e3 d6 b1 21 a8 53 85 8f 20 ad 51 d6 2b d3 c9 bb 99 Data Ascii: ,&D/x%zF^\|Uh8MhNiFvjZ$i#QFU3hu,~9.{'sj,=([+rZhI\|\=UP`(b)'13z+/F ?{"mzL= ,Cb6 D=7^aE?}5!S Q+
2024-11-01 15:52:26 UTC	267	IN	Data Raw: 91 27 e7 18 7d 9a 04 99 8a 39 39 d9 8e fb ba 5c 70 5d 4c e8 62 0d 0b 78 0d 23 4c 48 f7 0a 31 9b 7d 73 96 59 5b 33 21 97 0b 08 84 6d 33 59 7e 96 d5 08 44 f7 ba 5c 2a c9 d0 2b c5 0e 96 67 5a 9d 13 98 c3 ea a1 5a 11 12 6d 7d 63 5b c3 d6 72 5b 7d b7 c2 13 ef c5 08 fe a6 23 a1 2a a4 3b 5b 40 a9 19 96 6f e2 78 25 b0 7a 9f 1d 3d 42 ad 98 00 85 dc 20 ab f9 d6 78 53 28 8b 1d 1f 65 9c ef cc a1 2d 81 af 9d 6a 8c 69 d9 92 5f 96 53 02 2c ba f2 a6 c4 69 36 28 6e 58 7f d6 96 56 78 90 35 d2 c5 35 00 d5 5b 1b 65 e4 ae ae 7d f6 c6 77 19 81 24 fe 6b f8 59 f0 e3 88 fc 2a 92 a5 41 15 c8 6c 46 b4 64 6a 8b c9 5d 09 c3 af b3 15 2a d0 21 fd c8 f8 e3 e4 85 d3 9d cc f4 84 b9 44 82 98 aa 4d 25 37 33 d5 3c 7b 70 6b 96 e5 f6 76 5f bb 5c 91 63 65 01 d0 3d 32 fd cd 5c 79 4c 0e 3a f2 d0 Data Ascii: '}99\p]Lbx#LH1}sY[3!m3Y~D\+gZZm}c[r[}#;[@ox%z=B xS(e-ji_S,i6(nXVx55[e}w$kYAlFdj]!DM%73<{pkv_\ce=2\yL:
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 90 0d 0a 30 30 30 31 0d 0a 60 0d 0a 31 66 66 64 0d 0a 2f 57 06 27 81 b5 da 61 98 4e db 19 12 dc b7 0b be 6d 8c 9a 7e ad 46 20 56 a4 6b be 5a 4f 85 3f d0 57 bb e6 fd 2f 00 25 08 09 20 62 9e 8a 95 a3 70 80 61 ec 80 d6 52 22 97 d3 eb 80 25 58 2c d4 8e 99 95 f1 97 15 53 c7 b6 4b 08 bc 23 f0 06 ab a4 4a 17 71 7a 47 12 6c c3 f1 ca 91 62 e5 97 79 52 5c bc d2 85 23 18 13 bb bd 6f 49 d6 77 d6 f6 0e af f6 8f f3 45 1f 48 ef f6 01 59 7d d6 be 31 0f 1b 73 9f f0 9f b5 9b dd 34 e2 db 2c c3 05 e6 c8 53 1b 1a bc d7 a8 5c 84 06 db 8f b2 50 0f 62 2a 2a 33 0b 3a 26 cc d9 f5 ac 71 f3 a3 8a 17 96 f2 93 63 71 8d 85 18 99 2e ac 88 94 74 e6 16 18 69 55 4d 3e 3b 29 ad 2e e9 99 39 4a 76 76 50 8d 1e bb 22 7c 75 fd Data Ascii: 00000001R000000010001`1ffd/W'aNm~F VkZO?W/% bpaR"%X,SK#JqzGlbyR\#oIwEHY}1s4,S\Pb**3:&qcq.tiUM>;).9JvvP"\|u
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 2a dd 47 db 39 82 39 33 b0 a1 93 3b d0 43 75 a0 02 92 2c 89 52 31 a3 74 5a 10 43 93 cf 67 b7 b6 12 6a a1 76 bc af 7d 47 8d 52 aa ee 06 5f c8 c4 87 be 80 5a 6d ff a5 89 9a cc 11 5f 82 3c f4 2a 19 f6 a1 4d a7 41 61 0d 38 c7 63 20 11 36 46 12 59 13 58 ad b4 16 22 c2 66 82 33 a5 4c 6c 09 80 20 30 a7 f6 08 51 89 ea 12 72 ec e4 16 58 ed e7 15 ae 1a b0 37 1a fc 88 46 54 68 e3 a6 db aa 34 da 5e 31 b5 54 7b 1a 25 d9 30 cb 24 9c b8 a2 47 a2 34 3c ee 84 06 aa 37 73 79 23 8d a1 32 d6 87 61 13 04 11 af a5 32 56 07 e3 fa 98 8f af 55 9d 4c f1 dc 4b 34 44 eb 1e 0e 1a 6b f8 af 62 24 1c f2 33 50 5a a7 01 6b c8 ab 48 af 16 ef 3b bd fd 33 fd 7f e2 67 26 b7 8c 59 40 5f 7b 7b 79 26 1e a9 90 7d 5b a7 20 cc 9b d4 16 8e 79 93 b0 02 bb 57 d1 c6 15 0f cb 45 ad 15 d7 cd 83 07 89 fe Data Ascii: G993;Cu,R1tZCgjv}GR_Zm_<MAa8c 6FYX"f3Ll 0QrX7FTh4^1T{%0$G4<7sy#2a2VULK4Dkb$3PZkH;3g&Y@_{{y&}[ yWE
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 77 6e 94 7c 47 79 66 93 85 65 90 d5 6c f6 8a 63 89 8f 3e 96 bd 9d e2 62 28 d0 1a 0d e7 91 3d 00 b8 e6 e5 81 b1 10 98 e0 3f bb 71 9b 78 38 93 98 4a 6b a5 68 fd 61 2d 2d 24 16 f2 dc 07 c3 0f 93 96 e4 fc 23 7e 7e 54 d8 1d 0e a9 df 0c 22 b1 c1 ba 99 22 e8 5d 65 4c 53 47 48 e2 b6 a5 b0 86 76 d7 6c 4b 29 9d 41 60 cf ca 21 b1 de ba eb 14 85 d5 52 76 15 1d 45 f4 9f d9 cf 84 62 46 16 14 32 90 04 e4 9a ca 5c ea 6f 4e b7 64 b6 4c fd ca 46 82 30 92 9d e9 2e 11 18 85 fc 1c 13 e0 60 1b 3e 85 e2 a7 21 c5 b3 6f e2 82 26 2e b6 24 48 82 fd bf 93 78 b6 73 41 8a d7 43 fe 0a 86 4f f9 8d 27 86 ea f9 90 04 9b 4e db da 86 7c e1 9a 1c 1b df 22 b7 19 9c 0a 55 9e 4e 85 08 ae 22 dd 60 13 be 75 92 d7 da 02 1c 76 32 b1 4d 4a 68 a6 e9 09 70 48 c0 ae ef b3 ae 15 25 b3 75 ee 97 74 94 9f Data Ascii: wn\|Gyfelc>b(=?qx8Jkha--$#~~T""]eLSGHvlK)A`!RvEbF2\oNdLF0.`>!o&.$HxsACO'N\|"UN"`uv2MJhpH%ut
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 53 bb 3d 2f 34 69 8b 27 50 c1 31 f9 db c2 dd 8b e7 5a d9 29 6a 26 c9 a5 f5 ee 60 b8 f1 cd 55 8b 1c 4e 20 e0 bc 27 93 21 45 dc 96 8e 25 06 09 a0 5f 8a 3d 5e 77 88 3c c9 e2 de a3 e8 55 16 0f 96 9e 64 d1 eb 2c 6e fe fc f3 ec 61 6b a7 d3 dd 1d fd fc f3 41 a7 2d b7 cd e8 5d ed 05 27 75 f0 ee e1 cf 3f f7 da 5a 88 fb 9d e4 b3 dd aa d2 c8 56 7b fa 7b ab 7d 62 3e f7 75 16 2f fd fd 3f 5a 3b fd ee e3 71 f7 70 f7 72 25 da b8 6a df 5f 8a be 67 07 3e a3 f8 5d 72 f4 d9 f9 69 eb 1f 7f 2f 8e f6 7f fe b9 75 ff f2 35 1b b3 83 bf 3f ff dc be ff 8f 76 f4 ec 96 d2 4f b5 b4 ff 6b 4b 7f 76 b3 f4 78 51 e3 7c e8 5d 76 65 2b dd bf ad 92 6f 9d e2 e6 ba aa f4 f6 5a a5 e3 d9 54 3f 44 09 5f 9a 3a f6 13 6f 6e 96 36 70 5d 2b 5e 83 eb 05 44 cd a6 c4 49 b2 2f 39 f9 06 6b 8f 1e 2f af 6c ac Data Ascii: S=/4i'P1Z)j&`UN '!E%_=^w<Ud,nakA-]'u?ZV{{}b>u/?Z;qpr%j_g>]ri/u5?vOkKvxQ\|]ve+oZT?D_:on6p]+^DI/9k/l
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: f3 a8 c2 d3 60 00 4b 65 2c b4 64 80 a6 d5 95 0d 58 cd 0a 8f 4f c7 17 63 7a 76 aa bd 5d e9 3f 7a 14 9d ca 9a f5 74 7e 78 28 8f e4 7f 14 4b 8a b9 f0 8b f5 0d d8 7e e4 e6 c6 fa a0 0f 0d 9d 4e 59 a7 22 a3 97 57 d7 57 a8 9c 9f c1 1c 1c dd 22 23 98 89 96 24 84 ca 1e 31 93 61 b9 09 18 b6 4f d7 d7 21 09 c4 af ed 3e a4 44 27 18 90 0b ab 0f 2c 23 53 d7 10 35 45 7e 31 36 f3 81 79 86 04 58 8b 66 84 f5 4c 61 df a2 36 30 ba cc 86 47 3c 13 8d 03 c0 57 69 67 63 99 fb ec c0 b5 b4 de 5f a1 e6 2a fe 78 2b c5 e0 9f 3c a2 52 32 9e 1d c3 56 15 05 f4 62 03 1b 73 92 65 b0 76 0a ac 3f 82 5c d1 0b de 0b cb 83 f5 2f 0b d7 a8 cd 6f 34 13 9d c3 da 69 7a d3 ef af db 27 66 b2 af 30 a6 0c 69 30 cf dd 93 4c 18 39 64 b7 f6 98 b1 9c 85 44 bf b6 da e7 ab 9e 05 ac ae a3 44 80 17 4e 82 13 3e Data Ascii: `Ke,dXOczv]?zt~x(K~NY"WW"#$1aO!>D',#S5E~16yXfLa60G<Wigc_*x+<R2Vbsev?\/o4iz'f0i0L9dDDN>
2024-11-01 15:52:26 UTC	1192	IN	Data Raw: 66 81 67 d4 f1 8a 86 4c 51 98 ad d7 eb 66 d3 aa c6 77 47 fb c3 e7 70 70 cb 37 b8 26 69 1d a8 f8 25 8b 7e cd 22 2c dd e0 e4 12 73 0c 6b 6d f6 c8 54 48 31 69 7f 84 db be ca 0c f7 63 95 d1 7a 45 4b 95 a4 53 06 cf e8 28 ba 8e dc c5 be bb 70 4c 40 fc 6a c5 bb 5b 5a 7f 12 b4 8e 39 fc 8f b4 ae dc c0 c9 65 81 45 1d f1 27 a7 15 56 ad 20 14 86 6a 84 52 e4 2e 09 a7 74 97 fb ed e8 ba e0 11 97 e0 82 01 ef f6 d6 b6 8c b7 8a 50 3b d3 e2 16 d4 df 5b 7b f0 a0 7a e5 36 01 1e dd 7c 45 74 a5 d6 da 77 af fa b6 39 8b 31 fb da de 6d c5 03 43 48 3f 85 84 14 de 2c 20 a4 3b cb 60 95 ce 3a 75 ad b4 13 04 b9 91 43 f0 29 a0 ee 5e 44 b6 a5 44 a1 ab 1f 02 ba fa 01 ba 52 c2 fa 12 05 dc cd e7 1b 52 69 a1 de a3 12 46 95 15 cf f7 42 65 05 7a fd e3 64 2a 2d 4a 8f 10 4e f2 83 7c 92 9f e9 3f Data Ascii: fgLQfwGpp7&i%~",skmTH1iczEKS(pL@j[Z9eE'V jR.tP;[{z6\|Etw91mCH?, ;`:uC)^DDRRiFBezd*-JN\|?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49789	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	469	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3e381ef0040defb00c90865c025dd6fd Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 09:01:39 GMT Expires: Sat, 25 Oct 2025 09:01:39 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 629447 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 5c 7b 73 db 46 92 ff ff 3e 05 82 6c bc 44 96 80 00 50 7c 81 a6 bc b6 ec ca b9 2e 71 b6 22 3b 5b b5 3e 57 82 c7 80 44 04 02 5c 00 94 c4 d0 fc ee f7 9b 17 30 00 49 59 f1 26 77 5b 57 b2 fc 90 a6 67 7a 66 ba 7b fa 4d eb 9b 92 68 65 55 24 61 a5 cf 7a 25 49 63 eb 96 04 6b 3f bc be 5c 6e b2 eb 9b ea a7 4d f2 d3 ca 4f b2 f9 3d b0 8f 1f df 7f 30 ac f5 a6 5c f6 de bf 77 5d 77 e0 7e e8 ef dc b1 3b b6 bd 1e e9 17 fd ca 98 5f ec 2a 2b ea 15 fd dd 8d d7 c3 4f 9b bd 31 bb f1 0b ad 9c 57 bd f3 29 a6 1a fd 9c 7e 3b 19 db e7 46 df c7 b7 ce 68 74 3e 34 fa 01 be 1d b9 93 01 26 24 f4 db d1 c4 19 18 fd 8c 4e 18 0e 5c 7c 1b e1 Data Ascii: 00000001000000010000010ffd\{sF>lDP\|.q";[>WD\0IY&w[Wgzf{MheU$az%Ick?\nMO=0\w]w~;_*+O1W)~;Fht>4&$N\\|
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 54 8d 6a 7b e1 17 dc 90 32 31 a9 d5 00 b5 a8 c5 ac bc 4d aa 70 f9 47 4a eb 2e f4 a9 c7 7a da e5 80 81 d1 61 76 7b a6 19 94 42 06 0c 7d 16 c0 2a 5f cf 4e ac 6d f8 d2 5a cc 78 63 06 8b be 56 e3 e3 43 8c ed 64 b5 5e fa 65 52 1a 9f c2 ce 99 d1 c2 2c 18 52 af 84 cf e5 6f d2 aa 35 67 5d 24 2b e8 4b 43 df 0b 35 5f 34 3c f8 91 da fb 93 cf 54 bc a4 46 fe 4f 68 57 29 16 8d be 15 7b 72 85 fb 6f c1 4b f1 c6 14 4d f9 70 56 8a b5 cd 13 bb 7f a9 e4 93 58 26 a9 43 1f 8d 58 58 b3 49 4c 91 e4 a2 53 1a 2e 15 70 25 e1 2a 4a db df b3 fb b9 b5 ac 56 a9 d1 4b 3f 7e ec a5 f3 ed cf da d3 28 b9 d1 98 eb 39 d7 8b 7c 83 f9 91 b6 36 07 da d2 84 bd d7 6e ca 0a f1 97 b6 f0 d7 a6 ab fd b2 81 ff 1a 6f 4d e8 60 f8 a8 95 19 e2 2f 52 68 f0 50 16 99 99 54 64 55 ca 21 e8 2d a6 a5 4a 38 25 59 Data Ascii: Tj{21MpGJ.zav{B}_NmZxcVCd^eR,Ro5g]$+KC5_4<TFOhW){roKMpVX&CXXILS.p%JVK?~(9\|6noM`/RhPTdU!-J8%Y
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: e7 9b 6a 99 17 25 9b fd 6d 02 87 bf 44 d0 4b 3d ee 42 fb ee f5 5b 65 83 a4 5a 6e e0 59 03 75 75 1b 94 67 f5 6e 67 41 9a 07 67 b4 16 79 86 ea d2 ab 37 57 af d8 d6 67 5e 81 f3 ec 58 ba 27 80 14 78 da 97 76 70 1e 45 fe 8c 0d 25 59 94 2c 72 0c 8e 46 8e 1d bb 7c 70 bd 29 d6 29 9d 39 8a cf dd d0 11 83 49 76 4d 17 b3 5f 7c a8 20 11 46 c2 a1 7b ee da 7c 04 85 3a a4 a4 31 48 86 e3 81 2d 06 b7 24 4d f3 5b 0c c6 21 99 8e c6 7c e6 a2 20 24 c3 d8 60 ea 87 e7 21 1f ab 88 9f 62 c8 b5 c3 e9 54 4c 0b b7 3e 9d e5 4e c6 41 30 e4 b3 82 14 e1 3f c6 70 10 3e 70 bb 44 a0 8f 81 38 8e 25 6e 7f 8b 9f 47 ec 57 33 84 74 57 41 17 0e d8 2f 65 1c ea 83 2e 9f d2 2f 65 18 1e 07 1d 76 e9 97 32 8c 7b 61 98 8c e8 97 32 7c ce 86 43 f6 4b 19 1e b2 e1 60 40 bf 94 e1 11 1b 3e 38 e1 98 0d 9f 47 Data Ascii: j%mDK=B[eZnYuugngAgy7Wg^X'xvpE%Y,rF\|p))9IvM_\| F{\|:1H-$M[!\| $`!bTL>NA0?p>pD8%nGW3tWA/e./ev2{a2\|CK`@>8G
2024-11-01 15:52:26 UTC	264	IN	Data Raw: fd 53 d3 a8 5f 7c 12 b8 4a b2 4d 45 4e 82 97 70 4d f8 3e 27 a7 44 3e ec 3c 3d c9 c9 19 f0 39 aa e5 27 e6 6c a9 f3 c1 d0 34 a4 50 2e ce 4b 91 b4 24 69 06 9b aa ca b3 9d 30 f8 b4 f4 ac cc 2b 59 7e ca 6c f4 fe 4e 92 8e d2 c8 87 22 84 5f d4 21 2a 37 ad e5 ad 8f a6 12 49 cc a3 87 40 65 82 98 9b 35 cd e7 cb 53 50 a6 7b b5 c1 12 5c 52 b6 e2 87 c5 01 d9 5a 74 37 a3 97 30 47 4d 95 df e1 81 ab 51 92 40 9c 5f 96 5d 69 0a d0 a4 02 63 05 01 51 92 13 b4 05 65 9d 27 a8 6a de 51 25 2e 4c 48 33 4a 55 f7 70 3c aa 8d 4b 03 59 21 0d 31 1e d1 6a 3d 57 da 0d 84 6a ae e9 14 c5 97 03 08 d3 e5 88 f0 8f 81 18 0c 51 da fa 6e 6f b1 e2 e7 8e e3 a5 75 50 53 c8 bb 79 47 d5 cf 08 cf 45 a0 6e 01 99 6e 1a 74 80 cd 3b b3 51 b0 6d 2f 64 b0 43 2f 91 21 15 0a 4d b1 1f 70 10 69 2d 4e 39 95 78 Data Ascii: S_\|JMENpM>'D><=9'l4P.K$i0+Y~lN"_!*7I@e5SP{\RZt70GMQ@_]icQe'jQ%.LH3JUp<KY!1j=WjQnouPSyGEnnt;Qm/dC/!Mpi-N9x
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a a2 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 31 0d 0a a7 0d 0a 36 30 38 0d 0a 48 8e 24 19 25 bf 89 94 51 78 3d 93 2f b8 59 d4 be 8b a1 98 ae 16 e4 0e 85 a9 ba 0a dd 59 5d 03 c4 1c 71 b7 63 b3 38 08 b5 1b c5 1d 76 66 fc d6 9d f9 6c d0 98 b1 80 99 2b 26 5e 1a 9f f1 88 86 47 0f 3c cb 3c eb 68 30 29 73 52 4d 09 52 75 36 68 d1 d1 10 ec f7 e0 0c 57 db 9d 24 1e 7b 85 7f bd 26 db b8 f0 57 a4 d4 a4 94 9b 01 34 01 f2 82 c9 9a 94 3b fb ab 5d 80 3c d5 82 95 cd cd 75 5e 26 54 4d 43 6a a8 03 b1 df d3 34 27 7f 1a 8c 89 f2 a7 26 1a a8 cd 7e 0d aa 29 ea 51 f1 39 84 53 af ac be 8d ea 3f 0b 41 a9 11 b5 ee a8 ac 69 8d 1f 2e Data Ascii: 00000001d00000001000000010000000100000001\01608H$%Qx=/YY]qc8vfl+&^G<<h0)sRMRu6hW${&W4;]<u^&TMCj4'&~)Q9S?Ai.
2024-11-01 15:52:26 UTC	215	IN	Data Raw: 29 74 8f f6 d8 0c 25 9a b6 1e 9b a1 fe b5 66 a8 7f fb 5e 27 a5 fa de b4 31 3c bc a5 45 59 de ae 52 df 5f bc 3f b2 ec f3 8b d0 4a 53 ce ff 97 4a 31 2b 45 f2 96 a6 1d fb 9e 76 4d 42 cd b1 4f d5 36 c5 c0 7f a5 3c 79 6f 31 8f 7e ee 56 29 d8 a1 1b 20 ec 39 96 cb 3a 90 b4 bf 68 d6 e0 e6 b6 9d 80 66 5a 54 1c f8 de ba ef 63 81 8d 45 c7 b2 84 70 a4 c0 76 58 1a c1 7f fc 81 b6 44 d4 46 3a 6c 41 a7 44 a7 d2 2a a8 fb b9 75 84 df ad 3e f0 07 26 ea f7 1f 8c d9 7f 9c 9d 7d 89 fe 17 fa 39 24 fc 47 33 68 9e 59 bc fb e1 db 39 fb 2f 27 f0 59 1f 12 0f 07 36 89 02 db 71 47 93 30 26 e3 c0 fa a5 b4 56 fe fa 7f 00 00 00 ff ff 03 00 a5 5d 1d f8 d9 57 00 00 0d 0a Data Ascii: )t%f^'1<EYR_?JSJ1+EvMBO6<yo1~V) 9:hfZTcEpvXDF:lAD*u>&}9$G3hY9/'Y6qG0&V]W
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49790	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	648	OUT	GET /gui/75884.d7767dd34ca82b896517.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6cfcebc523a80fde8e080b70f5398dd8 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:47:05 GMT Expires: Sat, 25 Oct 2025 15:47:05 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605121 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a e2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 66 65 64 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001{00000001w0000000100000001F00000001000000010000000100000fed
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 3e 1f a6 22 9b 83 86 62 38 15 5e 20 d2 ec d9 c8 bd eb b9 60 b6 99 97 03 bd 67 84 1c b9 c0 95 37 c9 e4 b2 0a a1 bb 17 f9 20 91 1a e7 0e 89 42 ed fa e3 c7 cf db fc 03 38 81 f7 73 08 e2 da 75 a3 5f b0 0c 33 10 c3 e6 27 b3 39 a8 f4 52 f2 05 01 b5 c1 17 6e 8e 66 d6 9e 8d 55 26 bc d4 9f be 4a d2 b7 49 fe 8a 38 00 a7 22 1c e6 c0 79 32 27 5e f7 26 20 0f f4 03 78 d5 9d a7 e2 16 c7 7b 21 c6 de 22 ca d1 04 81 8f eb 53 f7 df 5d 52 01 17 22 08 53 88 34 2d 51 93 0b d7 6c ee 04 e1 5f 24 8b 51 04 b0 fc 24 10 12 4f 68 84 9a ab 0d 47 91 17 df d4 1a ab 14 72 23 d2 0b 31 4f d2 fc 75 18 df 14 6c 60 72 9b e6 53 66 85 69 3e 8b 1a f5 c9 c7 8f f5 c9 e0 1f 3f 3d f5 ac 69 2a c6 83 da 57 cb e6 aa 06 49 81 38 0e 00 07 a8 1c 78 e9 83 95 f2 ca 4e 84 a5 6b 56 18 b0 68 38 a5 c6 6f 20 5d Data Ascii: >"b8^ `g7 B8su_3'9RnfU&JI8"y2'^& x{!"S]R"S4-Ql_$Q$OhGr#1Oul`rSfi>?=i*WI8xNkVh8o ]
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: c3 7c 86 a6 80 79 f0 91 b8 4c 11 2f 51 54 c9 21 c8 ef 4c 8a 6c a5 b1 76 41 b7 76 da f5 3a 92 f9 d2 9f a1 80 67 1d ec 30 0f 96 84 b3 cc 56 58 b6 ea 06 19 fc 88 14 b0 0b ff 6c 5a a4 62 a4 79 31 32 19 72 69 d9 2c fd 26 a4 ac 02 27 4e 62 51 a4 ac a4 35 a2 b4 a5 4e 7b 20 3e 03 25 c2 01 6f 0d 4e f9 36 0f 2f e1 ed a9 c4 97 3c 62 e3 38 54 3c 5f b6 69 df 5e 9d 5b 3c 18 c6 cd c7 50 41 8e 62 e4 64 34 bf 64 d9 2e c1 f7 97 da b2 9d 3c 9d e4 a1 1c 64 b9 48 7c 21 6a a3 dc bd 0e e5 9f ee 15 dd b0 fb 3a f8 0e 35 d2 cb 10 bc 10 39 cc 16 32 08 19 40 08 8a 2f 96 01 cd ba b5 04 d2 0b 80 f4 a2 00 49 e7 0f d6 83 1d 24 f3 c3 04 fe 6f ee 21 35 4d 86 05 ba bd d8 40 b7 28 e3 08 ef 1b 07 4f d2 6c 8b 77 2c b9 79 9e cc 65 be 62 bd 86 b2 15 aa c7 c8 85 8c 12 a4 4a 66 64 8b 55 5a 65 3d Data Ascii: \|yL/QT!LlvAv:g0VXlZby12ri,&'NbQ5N{ >%oN6/<b8T<_i^[<PAbd4d.<dH\|!j:592@/I$o!5M@(Olw,yebJfdUZe=
2024-11-01 15:52:26 UTC	462	IN	Data Raw: f5 1f cf e3 d4 21 92 30 79 48 35 44 1b 4b 91 d6 d6 b6 93 d2 8e 3a ad 28 b5 b9 32 40 5a b5 97 34 c6 d3 0d 25 53 06 65 4b 26 91 cc a3 b9 61 05 1a a9 aa d5 66 9e 01 d5 a1 35 cb 48 ca cb 77 10 d5 ed cc 95 37 8f 42 75 50 da ae a9 ec 0a df 9b b2 e5 be c7 0d a6 bb ce 29 12 20 05 ac da db 29 0c 3c bb 40 54 e8 37 a8 dd 85 41 3e ed c3 09 9f df 63 fc 15 5d 9b 9e 27 67 16 78 12 26 22 b3 7e 3c bd 38 b5 52 10 de 7a 3a 52 d7 10 b0 fd b4 23 d8 09 f7 a8 5c 88 58 ee a4 d1 60 13 17 e6 49 fa 1b 85 5d 55 c8 97 b9 13 1c 45 f7 97 89 c2 ad d0 6f 74 f1 b6 4c dc e9 01 dc 6c dc 5e d2 ad 9d fe 54 cf dc 7f bc 77 cf df 9d 0d 2f af 2e 5e 9e be b1 33 77 f8 dc 7d 75 fe fa ea e5 c5 f0 f9 8f f8 7a 7e ee 5e be 7b 7f 71 f6 72 78 f6 ee f5 fb 37 6f 87 17 ef 5f bf bc 7c 79 35 7c 7b fa e6 25 fa Data Ascii: !0yH5DK:(2@Z4%SeK&af5Hw7BuP) )<@T7A>c]'gx&"~<8Rz:R#\X`I]UEotLl^Tw/.^3w}uz~^{qrx7o_\|y5\|{%
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 64 30 62 0d 0a ee a6 a1 3f b5 1e 92 05 6a ad 23 04 cf 5a c4 d6 9e 6b 59 c2 20 44 05 ca b5 79 28 55 88 ae 61 a9 d9 54 52 d4 c0 ef c8 43 60 8e 42 53 fe 8b ba 58 6a 56 06 e0 2c 99 cd 34 3f 14 c5 df 9b 16 e0 47 50 eb 47 6d 01 d6 1a 8b 4b fd 1e d3 78 ff 17 ca 9e 34 5f f9 e6 b7 14 c5 91 c2 2a d4 92 d2 5e f4 47 bb 5b 9f 56 14 90 3c c4 e5 aa 1c 4e aa 11 b2 ea df 2d 66 5e 1c fe 0a b3 89 47 14 80 d2 d2 bd 83 29 61 cf b9 9e 10 d8 a5 51 f8 a5 c8 c0 df 92 67 74 8f 17 c7 d0 85 22 78 8b 40 2c 23 b1 ea cb 54 35 2a 81 cd 1c 5e 45 ae 42 3c 56 40 95 e4 ac 48 c1 7b 54 e8 6f ba ae bf 80 66 bf fc 77 25 6c 8b 29 59 Data Ascii: 000000016000000010000000100000001000d0b?j#ZkY Dy(UaTRC`BSXjV,4?GPGmKx4_^G[V<N-f^G)aQgt"x@,#T5^EB<V@H{Tofw%l)Y
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 4d 86 2a d6 25 da 2c 3c ee 58 b3 ad 8b 04 99 82 44 ff c5 33 41 e3 dc b6 be 13 d1 ad c0 65 ab 67 5b a7 69 e8 45 b6 b5 5e 45 6e c9 4b 23 42 4d 94 c3 a3 57 a6 3b 2b b5 72 d1 2b 67 4c 52 2f 08 e1 7f f7 d9 ef f0 52 47 37 d4 5b 5d 10 65 62 5b 38 9e 57 d7 27 53 67 6c ba 2d 3c 12 be bd 0b 5e b6 b4 92 54 ef c8 00 8d bd 59 18 c1 92 a0 32 ad ce 5d 15 0c 6c 4c c8 10 27 f6 5b a9 98 55 57 ba 53 6e 11 44 df e8 2a 79 4c 2d 57 db 37 da 1f 3e 6a 42 2a 17 9e 02 4c b0 31 87 3b 24 71 f6 a1 52 49 01 1e 1c 18 fd 23 d2 de 85 25 e4 04 2c c4 63 17 a9 b5 4a 29 f6 2b 54 53 b9 67 0b 37 ac b5 86 86 75 ff 70 df 3f d0 2a b4 10 2b 03 e0 ce 81 6d 1d 82 9f 8e 94 25 5c 2f 21 a1 ee 8d bd f1 48 9e c5 ec 52 d0 1f c0 18 b4 3b 98 de ee 28 97 44 67 96 0b e8 f1 46 01 bf ab b0 51 ee 94 6b f4 ba b0 Data Ascii: M%,<XD3Aeg[iE^EnK#BMW;+r+gLR/RG7[]eb[8W'Sgl-<^TY2]lL'[UWSnDyL-W7>jBL1;$qRI#%,cJ)+TSg7up?+m%\/!HR;(DgFQk
2024-11-01 15:52:26 UTC	585	IN	Data Raw: b7 e0 8b 29 9b 50 07 05 ba 77 4b 73 a6 db 6c 95 36 36 07 df 79 b7 62 49 c9 fd 82 7b 67 5e 86 2b 6e f5 42 13 30 3d 25 fe 9b 7f 83 59 df d6 bc 5a b9 6c 16 55 ce 44 99 e7 8b 6f 9f 9f d2 ab c1 64 f8 ab f3 29 30 da 8f da 66 83 7b 8e 35 7f 57 6c a2 72 bb 3e 7f 7d 4e 85 b3 fe 37 bd 00 73 a7 bf 7c 87 32 86 a4 e5 b7 4b 58 93 f6 ce c4 1d 62 d6 43 84 e9 ad 23 84 be 05 1e 19 d1 bb 8e f1 19 08 db bd e8 1f c2 d2 1f 58 76 e5 ca c7 35 0b 25 42 57 90 c7 f4 cb 91 af b5 22 17 15 d2 71 cc 1e 86 ba 2b 93 8f 51 a9 26 7a 57 61 1f 12 2b a0 50 57 2e d3 52 57 9d 2d 8b 7b 2d 75 ad c5 bd 45 63 71 05 66 5e 99 c9 1b b3 95 ab aa c7 0b b8 b8 96 dc e0 1a 1a 41 32 58 0c a8 6a 3f b7 f0 c0 e9 11 38 ed f2 28 d7 b7 a0 a8 1a c4 71 4b 63 4d 68 d3 aa 6f 36 b3 0d 69 94 80 a1 82 52 d3 09 97 91 6a Data Ascii: )PwKsl66ybI{g^+nB0=%YZlUDod)0f{5Wlr>}N7s\|2KXbC#Xv5%BW"q+Q&zWa+PW.RW-{-uEcqf^A2Xj?8(qKcMho6iRj
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49791	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	648	OUT	GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: e07dd4457fe0392d9c74f6ce158c1d57 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:17:00 GMT Expires: Sat, 25 Oct 2025 15:17:00 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 606926 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 66 66 35 0d 0a 5c 7d 77 da 46 d6 ff ff f9 14 aa da 7a a1 47 92 01 03 06 1c 9c 3a 8e 9b a6 cd db b1 9d 9e d3 cd e6 b8 42 1a 40 b5 90 58 49 d8 71 08 df 7d 7f f7 ce 8c 18 01 8e db dd f4 3c 8d 5b 1b cf 9d 97 3b f7 fd de 99 b1 bd c8 85 95 17 59 14 14 f6 51 2d 17 f1 d8 bb 15 a3 b9 1f 5c 9f 4e 17 c9 f5 4d 71 b5 88 ae 66 7e 94 0c 3f Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000ff5\}wFzG:B@XIq}<[;YQ-\NMqf~?
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 92 1c 8b 59 52 b3 6d c7 0e d2 d8 55 9b 72 23 da b1 ed 30 b3 a7 c5 2c ae d7 6e 3f 7d aa dd 0e ff f9 9b f5 cd b2 b1 da fc f6 1b ac a5 e2 4e f1 00 91 4c 5e 41 b1 8b 87 08 f5 d8 c0 e1 1a 38 5c 13 0e 8f 6e 0a 77 11 b9 a0 7a 91 26 16 21 0b 69 87 66 0d ed 1c 5c 8b 6d cb 1b 09 68 bb 20 dd 20 36 0f 6d c2 da b6 20 92 be 5b 48 bd 71 89 7b 3b 01 f3 34 8f c8 dc 0d ed 2c 9a 4c 0b db fa 7e 96 c2 49 a5 37 22 53 fd 8f 1f ed 9b 18 1c 5b 20 c0 c8 0b e2 74 11 3e 55 ec a6 65 89 7e b1 17 8d 9f b2 51 08 eb 52 e2 a1 55 a7 52 76 4e 4a d1 31 74 59 76 92 42 e6 d8 9b d2 63 c3 d6 df 78 3f ff ec e5 d3 f4 56 8d aa 0f c0 3e 4d ff aa 76 00 89 0d 21 35 e9 2f f6 f6 c4 9a fe f7 0a 9f c9 82 6f c0 82 6f fe 8e 2c 00 07 a6 de 7c 9a 26 e2 f5 82 79 fe 05 88 bf 83 22 0f d2 3f fa 13 f2 1f ed ed 45 Data Ascii: YRmUr#0,n?}NL^A8\nwz&!if\mh 6m [Hq{;4,L~I7"S[ t>Ue~QRURvNJ1tYvBcx?V>Mv!5/oo,\|&y"?E
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: de 5d 85 73 09 e6 d9 e5 73 8b 67 a2 5a 0c db 3a c4 24 b1 9b d3 e4 95 52 cc 13 d0 e8 09 d3 88 cc d6 a3 49 11 c9 4e 16 04 24 47 f1 8f 0a b2 da 82 3c da 2f c1 50 12 36 73 d8 b2 d0 62 54 62 c8 18 94 29 05 4a 3f f6 da 1a 59 06 36 46 2b 1b 32 65 94 cd 4a d1 5b a0 f7 b6 44 ef 5e c3 f8 79 d3 a7 59 5b da cd 1d 55 18 19 0f ce d3 b9 ac cc ac 51 53 d1 a0 82 b8 eb 48 51 fa 30 92 95 cf d8 55 22 92 16 8b bf a5 f6 5c 51 ed e7 8d dc b6 66 a4 8a 12 41 fa 1d 92 75 02 17 95 a4 54 c4 b2 2e ee f2 42 cc c0 5e 58 0e e9 8a 34 07 79 9c 52 03 00 4d a5 fc 88 69 3f 6e d9 44 33 f1 b2 36 c2 44 e9 8f fe 0a eb f7 d5 06 9e 15 63 76 bf 39 34 62 a5 d7 d8 cd eb 52 3e 5d a9 15 08 a5 95 6d aa aa 84 32 26 48 ce 42 4a 7e 95 7d b8 9f 72 aa 83 49 bd 67 58 ef 59 b9 9e d6 07 e9 57 4c 1a 96 81 89 74 Data Ascii: ]ssgZ:$RIN$G</P6sbTb)J?Y6F+2eJ[D^yY[UQSHQ0U"\QfAuT.B^X4yRMi?nD36Dcv94bR>]m2&HBJ~}rIgXYWLt
2024-11-01 15:52:26 UTC	364	IN	Data Raw: af c4 b2 c2 28 9f e3 c4 69 60 71 ad f6 e8 5f c9 ea 5f 89 c7 47 74 12 0e 12 a6 d9 c0 c2 cd 97 9a eb 8e f2 32 8a 92 35 ca 3a 06 58 b0 26 28 d6 e6 90 ce 81 d5 44 14 a0 26 91 c1 22 57 91 8f b1 cc 0d b9 5e 59 94 41 cd 95 62 df 5c ae 40 a5 df 81 d5 b0 9a 16 d5 47 3f 37 78 9d b6 6f 8e ec 3d b0 2c 57 46 36 07 35 29 64 b9 6f 3d 4a 7a 97 bc b9 12 bd e6 e1 67 fa ab 1c 69 6b 4c eb 9e 31 1e f8 bb 9b 0a 87 ed dd 58 a1 34 c6 c9 8e 0b cb bf 89 59 a3 b3 7b 8c 26 3b 91 7b 73 d0 e1 7a 0c 6d d6 f7 64 9e c9 53 73 50 4a b5 92 31 dc c4 c0 12 31 ce ea 50 f4 03 b1 2c f2 22 85 70 61 78 03 f0 5b d6 ce b9 7d dd 5d 66 49 dc b8 53 bc 48 d2 2d 5f e2 53 76 88 12 38 43 21 8f 0c 30 14 62 b8 ff 1d 87 89 28 82 f3 bd 9d dc fa 6e 1f b2 f9 e5 c5 0a b4 e1 fd 4a 99 94 ca 28 e3 eb 77 d4 f4 5e 22 Data Ascii: (i`q__Gt25:X&(D&"W^YAb\@G?7xo=,WF65)do=JzgikL1X4Y{&;{szmdSsPJ11P,"pax[}]fISH-_Sv8C!0b(nJ(w^"
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 31 0d 0a 6a 0d 0a 61 30 31 0d 0a 11 ce f8 73 ee fd 22 42 79 28 47 a4 83 23 1b 91 59 2f 9f 5f 1a 0b 44 c5 74 81 5b 4f 98 ba b8 1d e5 fb e5 6a fb b0 3a a3 7d 92 87 fd 17 cf 4f cf 5e 5d 9c f1 d2 fb 83 0c f8 2c d9 e0 8c e2 05 e4 ec eb c6 a8 1d 86 fe 11 37 45 49 18 4d 52 34 76 bb cd c6 b8 25 1b e7 8b 6c 1e 53 cf ee b8 dd 0a 9a aa 11 f1 15 0d e6 7f b2 29 13 21 5a 02 5c 96 6d 35 64 8b 3c 01 44 a3 e8 1c 1e 34 54 e3 1d 64 9e 44 ff eb 71 20 fa dd 43 d9 13 c7 a1 22 41 db 41 df 0f da 81 6c 2b 84 0f 21 f8 ba d5 08 fa 7d d5 2d b8 f3 a9 57 ab 77 38 1a 75 64 2f 44 71 81 c2 44 36 b0 16 d1 f4 e3 b1 9e 9b ac 30 b6 44 ff d6 4d 2e 1d 31 a2 fd 80 ff 19 ed b0 5e 34 bc 4f 5f 46 33 f2 30 6a 6e d1 97 d1 8c 7d a1 59 74 e9 cb 68 6e 73 73 c0 ff 8c e6 0e 37 8f 0e e8 cb 68 ee 72 f3 Data Ascii: 01ja01s"By(G#Y/_Dt[Oj:}O^],7EIMR4v%lS)!Z\m5d<D4TdDq C"AAl+!}-Ww8ud/DqD60DM.1^4O_F30jn}Ythnss7hr
2024-11-01 15:52:26 UTC	1167	IN	Data Raw: 8c b4 77 c5 07 bd 8e c7 3f 24 9c dd ab d7 3b ec 60 2d 1f 4f f8 a8 9c c6 6c 2e 55 8b 2d 20 03 c8 f6 c1 d3 57 21 4a 70 60 ff e1 ec 39 ea 36 ec 2c 99 d9 95 8f 7a 1e aa 0c 4b b6 5f d5 d9 0c 0d de 65 68 eb 18 8b 82 66 ed 1d 1d 3d bc af cb cf 5c df 46 45 e2 7e 90 5a 4f 6e 46 3b 90 9d a8 e1 98 da 41 a9 64 09 f4 28 96 8a 5d 88 ef 24 19 cc 70 53 38 16 2b 2e 4e 2f 75 09 c8 ac 00 ad 64 01 06 52 65 d8 2b 22 3a 97 b7 07 ac 39 8c ad fc e8 de 44 79 84 4b 5f f5 65 ba 28 88 f5 65 57 c5 5c 30 d6 8c 8e 34 ce 52 6e a8 72 a9 5b 68 f0 a6 dc 28 5c 78 83 6c dd 49 47 b0 3a 48 ff 8e 8f 63 65 87 f7 cb 60 91 e5 60 ef 3c 8d e8 fe a9 42 16 77 80 51 0e 1e ea 3e 2e 9e 2c 5f 47 b8 dc 3a 9f 23 02 f4 21 f7 03 09 d2 7b 23 7e 0c 40 13 ba c4 86 13 95 ca 68 b9 e5 12 b8 b9 e0 60 00 cd fa 88 38 Data Ascii: w?$;`-Ol.U- W!Jp`96,zK_ehf=\FE~ZOnF;Ad(]$pS8+.N/udRe+":9DyK_e(eW\04Rnr[h(\xlIG:Hce``<BwQ>.,_G:#!{#~@h`8
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49792	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	648	OUT	GET /gui/88687.cca6b938f5ec6b221b34.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cbf00695bade67910c35f496f4390bc7 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:28:00 GMT Expires: Sat, 25 Oct 2025 19:28:00 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591866 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 31 0d 0a 59 0d 0a 30 66 66 33 0d 0a 93 db 46 92 7e df 5f 51 a6 66 64 c2 0b a0 71 1f ec a6 64 4f cb 11 ea 08 79 c6 e1 63 1f ac 51 f4 80 40 b1 89 69 12 e0 02 60 1f 43 f1 bf ef 97 75 80 20 d9 6d 79 b4 da b7 15 65 11 59 47 56 de 95 95 05 7a dc f2 e5 dc be e7 b3 75 96 df 5e 2e 36 d5 ed Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\000001Y0ff3F~_QfdqdOycQ@i`Cu myeYGVzu^.6
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 47 90 48 08 93 5e 03 f6 74 6c 37 da d5 86 7a 9b 83 de b9 a0 57 12 45 82 af b2 15 d1 01 a5 0d 55 24 ad 54 88 1e a8 61 8b 9f 2f 78 b3 b0 f3 0c 71 b5 c8 9a 2b 84 09 65 9e 9a c3 37 10 83 6c 1a 3a fe eb d1 68 32 90 f3 0d e8 be 11 74 f7 e2 23 2d 59 65 d1 4b b0 b7 b9 25 2c 9e b5 88 a6 b4 e0 e3 81 e1 31 58 1b e2 88 16 aa d2 8f 34 30 29 cd de e9 4a cc 27 23 78 9a 6f 5a fc d7 66 69 98 8a 74 e9 a3 af 0f cc 67 d2 43 b0 bf de c5 94 3f 1e 78 58 1f 03 87 aa 7a 04 cb 8f c7 a6 45 bc b5 a4 2c 69 2f b3 4d d7 d5 d2 9a 66 5d 65 09 3c 7c c4 88 76 66 cf 38 36 0a fe 0b 82 34 49 5d f1 cc 16 f5 1d 6f 2c 3e 9f 63 3f 62 df e6 cb 32 bf ed c5 a1 5d 4f a2 1d 1a 54 61 cf ca 6a a0 3c b9 d2 4f fc bf 37 bc ed 84 73 6d d6 64 cf c5 98 ab e0 6f ef 1b 4c 6e 2f b2 76 3c 12 06 4f fb 92 10 cc f5 Data Ascii: GH^tl7zWEU$Ta/xq+e7l:h2t#-YeK%,1X40)J'#xoZfitgC?xXzE,i/Mf]e<\|vf864I]o,>c?b2]OTaj<O7smdoLn/v<O
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: d3 c2 20 92 61 0a 38 92 ff 31 c2 e5 e9 5d e0 35 95 d1 41 82 eb 06 3b 73 f3 68 b2 17 5e 1c 7b c5 0c 36 2d 8c 2c b3 fb fa 9b 44 2f 6b 71 bd de 5f 90 af 53 f9 87 29 b9 3d c5 06 48 7c 21 f6 0b 7c d3 86 81 9a 8b 44 d6 7b 47 6f 8e d9 b2 bc a9 2c 1a 04 d3 c8 91 c2 0a 79 c1 69 16 68 b3 90 11 e4 9c 24 4b d5 56 49 a0 2d ea 19 12 9d 32 4a 6b c9 e7 50 b4 b2 2b 35 40 aa 50 a4 1b b2 36 61 fe bd 52 5d f6 5d dd f1 56 a2 a8 b1 42 d9 c1 5f a5 99 f7 04 96 15 99 ab b5 f7 62 a1 ee ae c9 aa 16 25 92 d5 40 db a2 ad a4 1c 6a c2 14 36 e6 d8 1e 4a dd 59 cb 2d 78 57 bd e9 0e 48 57 cb 4b 02 55 39 66 4b 3e 76 24 ea e7 18 b1 d7 65 55 f1 e2 98 1f d5 7c c4 96 2b 97 96 b1 43 9a 8d c1 9e c3 0c 94 4f 0e 7c 52 60 0a f3 0b b5 ef eb 82 f8 81 66 26 cc 73 b4 9f 1d 0f 7c 2f 32 c4 0f 47 e3 43 e5 Data Ascii: a81]5A;sh^{6-,D/kq_S)=H\|!\|D{Go,yih$KVI-2JkP+5@P6aR]]VB_b%@j6JY-xWHWKU9fK>v$eU\|+CO\|R`f&s\|/2GC
2024-11-01 15:52:26 UTC	384	IN	Data Raw: f1 11 52 29 00 06 c1 a0 7f 86 b2 c9 7e 27 14 e9 12 dc e3 39 55 eb 30 a9 f3 2c da de 25 b2 c3 9e 27 ac 61 1f 35 54 0a f9 c2 8f fc 3c d0 21 b4 77 ab 01 c1 61 60 b2 08 f6 14 ab 9d 70 8f 42 52 9d ce b3 f9 4c 2e 3f ec 52 d4 07 d8 0c bc 10 d3 bd 50 a5 24 87 c5 1b f0 1d 79 51 9e 28 69 1c 76 4a 1c 69 82 fd c4 a1 7f f4 a6 d1 8f 12 14 f0 9c f3 f9 f1 fc 5e 7c 24 6b cf c7 6c 4f 4b 9c aa 5f d8 2f b5 f4 ca 6a 01 c7 e8 24 07 e2 4c a3 45 33 54 e3 be 43 12 75 ac 46 d1 7f 52 eb 11 a6 29 ba 06 35 16 b0 3c dc e7 8f bb 25 fe 93 cd 39 87 53 69 92 0f f2 b9 05 f6 1a 19 5d 9e a2 7b df 2b b5 c5 e7 33 ae 14 a1 62 8d ae 8a e1 dc a3 3c 89 5e ad c2 55 0d de 8a 9b c8 c3 dc 41 87 5e 85 87 3c d5 f1 58 a1 92 56 23 ca 1d cb 0d 95 6a 26 d2 69 29 1a c9 bf b6 1b 87 bd 03 8a 75 28 22 6c b0 e3 Data Ascii: R)~'9U0,%'a5T<!wa`pBRL.?RP$yQ(ivJi^\|$klOK_/j$LE3TCuFR)5<%9Si]{+3b<^UA^<XV#j&i)u("l
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 31 0d 0a 03 0d 0a 39 65 61 0d 0a db 87 d5 60 b4 12 Data Ascii: 0000000100000001000000010000000150000000100000001000000010000000100000001000000001@00000001Z000000010000000100000001W00000001Y000000010000000100000001000019ea`
2024-11-01 15:52:26 UTC	1381	IN	Data Raw: da d3 5d 7e 60 47 81 ef d2 04 31 51 c3 1a 71 0f a7 b0 cb d4 67 be 63 47 91 97 32 1f f6 45 eb e3 f2 28 0a 22 86 61 89 ef c7 ef 00 07 9e 0f 18 ed 7e 7a 09 10 b7 07 18 0d f7 c5 63 1c 00 41 64 47 5e 22 66 e2 1b 30 a2 85 ef 44 34 34 8a 93 84 e0 30 4d c5 f8 18 d5 73 e6 23 aa 04 89 4b f3 35 ec 09 c4 1a 8a 61 09 02 bb 1b 84 cc 07 99 69 ec 13 ec 46 e0 1c b0 ef a5 fe 25 2c 22 f1 10 b3 00 87 11 05 97 c0 f6 13 47 f4 47 0e e8 07 bb 69 1a 60 75 c8 26 80 88 c8 1d 22 74 27 88 2d 08 79 88 25 11 5e 77 22 e2 54 04 4b 92 94 d8 42 a4 0b 85 55 3b 49 0a ec 01 68 87 64 43 db 8b 70 3d e6 7b 76 ec 78 f0 7d df 86 cb a3 1b 58 10 ca 2e 5d cf f6 e2 08 44 20 a0 46 b1 d0 84 54 26 d0 05 49 4a 6a 1a 2a f7 b7 1f 7a fd 05 38 ff 91 95 e2 ed 2c 8f b9 04 09 e4 64 09 08 87 7e 48 d1 18 8b 1d 58 Data Ascii: ]~`G1QqgcG2E("a~zcAdG^"f0D440Ms#K5aiF%,"GGi`u&"t'-y%^w"TKBU;IhdCp={vx}X.]D FT&IJj*z8,d~HX
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49793	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	469	OUT	GET /gui/34894.ada184a092746870eefc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: dca78171221048f79a8c2ec580166afd Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:42:09 GMT Expires: Sat, 25 Oct 2025 15:42:09 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605417 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 31 0d 0a 5b 0d 0a 30 66 66 33 0d 0a 77 db 48 72 7e cf af 80 11 1f 2d b0 03 40 a4 2e b6 04 19 d2 78 64 4d 56 bb f6 c8 c7 92 f7 6c 22 2b 34 48 34 49 58 20 c0 05 9a ba 84 e2 7f cf 57 d5 dd 00 48 4a 96 77 33 c9 43 ce 9c b1 c1 46 77 a1 aa ba ee 55 b6 67 95 b0 2a 59 a6 03 69 1f 38 95 c8 86 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001[00001[0ff3wHr~-@.xdMVl"+4H4IX WHJw3CFwUg*Yi8
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 82 f0 72 33 90 b0 59 b8 d7 23 45 4d 78 53 a4 89 d5 59 67 8a 3b 57 9c cb c5 ad 75 01 46 9c 94 25 ee dc 3e cd 71 a5 38 11 4b 29 26 53 69 c9 c2 4a 00 90 0c e5 ac 14 56 5e e4 3e 8b 24 6c 9f 95 82 d6 38 1f 88 e0 4b 7e 9a 5b 45 99 88 92 f6 f7 f1 86 a4 18 5b 3c 3e 10 93 e2 58 05 4b 5c 65 4d 60 84 ad 71 7c 23 ac d8 5a 93 7a c7 b5 26 42 8e 8b 24 b0 dd 85 e3 2e 8c 52 59 8a 9a 39 6b 00 84 ec e1 41 1c 4a 2d 74 24 90 02 9c 56 22 e8 1e 90 ec 2a f5 eb 78 65 a4 b4 15 52 99 bf 11 07 f9 4f 3f b9 e5 65 7e 15 49 fc a1 af d0 2a 17 b4 fb 2c 32 df 52 0e c5 2b 95 96 41 c7 a2 d8 dc 86 fe 06 6c 5a fa 66 fb 48 84 4a bf a3 f2 a8 8c 94 20 04 23 21 cf 6e f3 8f 25 1c 49 29 ef df 89 6a 50 a6 53 f2 31 e4 a3 c2 92 94 d8 56 9c c0 cd 6a 01 fc 24 86 e4 10 36 36 6c 83 c2 da bb 20 11 83 02 86 Data Ascii: r3Y#EMxSYg;WuF%>q8K)&SiJV^>$l8K~[E[<>XK\eM`q\|#Zz&B$.RY9kAJ-t$V"xeRO?e~I,2R+AlZfHJ #!n%I)jPS1Vj$66l
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: aa 7e f0 76 80 50 6d c9 2b f5 41 74 7f 95 e8 6a d6 a7 40 b9 2f 4a 36 a0 64 af c8 3e 19 cb d5 36 e2 f5 4e 9f bd 8e 7d 78 5e af 54 66 bf 32 78 4c 6e 0b b2 8a 3a 97 28 29 9f bd d8 b2 91 82 32 2a 21 4c 19 19 e6 1e 25 6a 6d a2 b1 ad d4 c9 41 fb 86 ef 40 ec dd 2a b1 d3 7b bf 63 4d ef fc 5d 6b 42 7f b4 30 b4 8a 1b 51 0e b3 e2 d6 1f a7 49 22 f2 e6 fe f5 77 7d fa ae b1 a1 93 ca 8f 67 b2 80 15 55 fe ba 16 0a 59 c8 38 fb a4 30 fd 15 07 ea 17 1a 0a ad bd 4f 2b c4 8f c4 64 bb 16 98 f6 47 8c d0 80 89 54 34 60 49 e6 e8 d0 33 66 ad 78 9c 77 2d 1b 57 18 1b 57 40 7b 10 af d6 47 e3 67 8f c6 e6 68 bc cc 72 32 ea 4a ab 44 3e 43 c2 4d 21 10 f2 e4 99 e6 fd 61 a7 cd fd 5b 70 ff 76 95 fb 14 e2 0b 3f 29 64 e5 d3 41 cd e2 95 55 8b 81 2e f1 67 65 87 e1 0f 29 55 8d 85 1b b6 c2 af 97 Data Ascii: ~vPm+Atj@/J6d>6N}x^Tf2xLn:()2!L%jmA@{cM]kB0QI"w}gUY80O+dGT4`I3fxw-WW@{Gghr2JD>CM!a[pv?)dAU.ge)U
2024-11-01 15:52:26 UTC	383	IN	Data Raw: 03 a9 c2 02 d9 17 9a 95 d6 71 34 ff 56 61 e6 02 fd 28 35 2f 61 a1 0c 69 9d 16 c7 95 15 57 d6 9f cf cf 7e b3 bd 41 75 f3 c4 fb e3 f3 bf a2 c7 24 d3 bb 27 de 9f 5f 9c fe 0d fd 21 43 a2 75 4a 14 90 29 17 0d 53 4c a2 ba d5 aa 98 d4 1d a2 cb ad ab a3 f6 8f f0 58 f3 d0 a9 57 cd f9 ee a3 e7 bb ed f3 dd ab f0 d2 26 72 6d cf 06 51 f8 93 70 b7 31 5d c3 e9 65 1e 1d 3a 73 f8 4c 2a ed 87 d2 2b d8 83 86 b9 97 c5 7d 0c 7b 08 24 74 10 7d 4e b3 6a 82 2e 88 20 c5 49 4e 65 a8 ec 8f 1b 47 52 a3 72 5a 4a 80 a0 c4 28 69 62 13 14 19 56 10 33 29 08 2e 21 8e dc 09 27 ef fc 6f 65 31 9b 56 de 04 2b e8 99 50 44 9f 78 c3 28 53 48 d1 38 46 fd a4 79 27 03 8d 25 7f 4a e1 49 e3 04 28 8c 02 53 fe 9e 01 64 d8 85 c6 6f a0 9a 20 03 78 ae 41 74 57 37 41 30 a7 e3 a3 87 cd d9 c4 72 5f c3 42 55 Data Ascii: q4Va(5/aiW~Au$'_!CuJ)SLXW&rmQp1]e:sL*+}{$t}Nj. INeGRrZJ(ibV3).!'oe1V+PDx(SH8Fy'%JI(Sdo xAtW7A0r_BU
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 31 0d 0a 0a 0d 0a 36 62 66 0d 0a ad 7d b3 52 57 f4 89 13 94 e9 51 0e 58 65 05 8a 4b c0 71 34 12 ad 22 26 aa a6 b2 50 30 78 b7 49 5b 12 24 23 3e 8a 9e f7 b6 6a 34 e2 28 25 32 98 43 18 e5 a1 05 28 63 79 60 51 7f 2d 8b ef 43 ab 9f 15 03 f4 a4 48 c4 ac a0 2f 90 12 0b 92 3b 0a f3 4c 56 aa 6f 45 d1 ae be 5a d7 6b 5a 08 e2 04 f7 c2 0c 1e dc e5 4c ac 9a b4 e5 eb 35 65 55 f3 Data Ascii: 00000001k0000000100000001O000000010000000100000001S00000001000000010000000100000001\|0016bf}RWQXeKq4"&P0xI[$#>j4(%2C(cy`Q-CH/;LVoEZkZL5eU
2024-11-01 15:52:26 UTC	464	IN	Data Raw: 7d 10 8d 4a 9a f8 53 1f be 1d 43 10 7d 16 91 10 4d bc db 32 9e b2 88 b0 ce 98 b9 86 d0 12 59 86 1e 60 5a f1 bb 66 59 cd 3b f0 22 6b a5 1a f3 c1 d5 06 db 68 58 61 fd 49 aa 03 1a 86 5a a1 dd e8 b4 85 0c 2c 97 da 02 70 bf 71 4d 1b 96 09 62 58 3c 4e c7 60 2b 4b 8e 15 e8 76 42 8a 06 82 46 c8 34 53 e7 4b ce a1 56 ef a7 ef 10 88 ad e8 74 eb 56 6a d1 ec f0 15 30 53 78 3b 5c cb 2d 58 c2 0b 18 be 59 d1 71 88 52 9a 1b db d1 b8 00 cc 5d 20 2b 50 54 68 59 53 33 93 c6 79 10 67 4d 63 93 54 3c 5f b7 d5 f1 10 30 14 08 ed 42 42 eb 0f 0f 7f 60 44 96 9d 88 f1 47 66 55 8b 75 a3 0d ad de 26 9b 59 8c ce 29 c0 4f c9 cf a3 32 f2 3d a1 5a 91 9f dd 46 7e 68 4e cf 30 a2 b6 b2 db 1d e3 19 34 77 90 49 c2 26 2f f9 55 df 70 4c 2d 13 c7 da 53 3b 4f 5c ff 77 ae f8 7b 92 f1 94 55 37 2c fd Data Ascii: }JSC}M2Y`ZfY;"khXaIZ,pqMbX<N`+KvBF4SKVtVj0Sx;\-XYqR] +PThYS3ygMcT<_0BB`DGfUu&Y)O2=ZF~hN04wI&/UpL-S;O\w{U7,
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49794	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	469	OUT	GET /gui/59084.04d6b3360a5bc50128d1.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 1c7c1295a758bd418f0d5ad4e9a28af3 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:29:29 GMT Expires: Sat, 25 Oct 2025 19:29:29 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591777 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec 3d 6b 93 db 46 8e df ef 57 d0 ca c5 2b e6 48 0e f5 96 a8 c8 89 d7 c9 d5 a5 d6 d9 bd 8a 93 fb 70 3e 57 96 8f 96 c4 1d 8a 54 91 d4 8c 27 b2 fe fb 01 fd 62 77 8b d2 8c 37 1b 6f 65 8b 9e 3c c6 0d f4 0b 8d 06 d0 68 80 dd 3b 54 c4 aa ea 32 8d eb de b2 5f 91 6c ed dd 93 68 1f c6 b7 af b6 87 fc f6 ae fe f9 90 fe bc 0b d3 7c 75 05 f6 e1 c3 db 77 b6 b7 3f 54 db fe db b7 93 85 3f 1f bf 73 8e b3 f1 64 e6 07 fd d2 29 1c 62 af 5e 1c ef c2 d2 8a 56 a4 3f 9e cf fc b1 ed d4 f0 eb 60 3a 1d 4f 6c a7 82 5f a7 c3 f9 68 68 3b 21 fc 3a 9f 0c 7d df 76 72 c4 9d 0c c7 03 db 49 e0 d7 c5 64 3a 9f db 4e ba ea 43 f1 70 34 04 0c 68 60 3e 18 8e 6d 7b 99 91 da ca 9c d8 d9 ac ca d5 8b 72 89 5d ed 57 eb 43 1e d7 69 91 Data Ascii: 0010fff=kFW+Hp>WT'bw7oe<h;T2_lh\|uw?T?sd)b^V?`:Ol_hh;!:}vrId:NCp4h`>m{r]WCi
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 5d a7 4f fe 41 fa e4 b0 02 61 79 45 9f 50 6d 51 1e 62 d4 b2 f6 b1 3a 80 e6 ed 7b 9e 27 95 36 df 56 c0 2d 6f 90 6d 57 cf 06 27 a9 82 50 51 96 a8 94 99 22 4a 48 1d a6 b0 63 fe 33 dc a5 d9 83 ae 8e 0a a6 70 74 14 54 4a 68 04 3c 5b ad fa e5 2a f5 fe fc 93 17 1f 4a 68 be fe a9 22 25 68 59 c6 d1 00 2e 9f 3f 2f bd 4d 9d 7e 43 ee 5e c6 31 a9 aa 0f 1f a4 26 ea 01 9c 6e 36 a3 f1 a7 eb b4 33 2d 64 b4 94 26 17 d4 97 50 a8 df 87 19 a8 0d c2 75 58 4b 6d 9c e5 b9 26 db 80 26 db ac f6 bf 89 26 63 da e8 5f 4d 4d ed 18 a1 ad 35 65 b1 9b aa 58 d7 48 78 0b 35 f1 6d 5a ff 9e b5 97 a9 7f 7a 67 b6 48 2f 60 fb 4c ec 45 a7 a7 1a 27 e7 50 68 20 2a 92 07 30 4f ca 3a 0d cb 87 1e d3 49 46 75 44 31 20 a0 ef 7a 9c a5 39 a5 ad 1b 49 62 d4 64 bd 0b 1a d5 e0 7c b6 4a 57 34 6b d1 a2 59 8b Data Ascii: ]OAayEPmQb:{'6V-omW'PQ"JHc3ptTJh<[Jh"%hY.?/M~C^1&n63-d&PuXKm&&&c_MM5eXHx5mZzgH/`LE'Ph 0O:IFuD1 z9Ibd\|JW4kY
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 45 93 0e 69 e1 86 46 6a 88 b1 8e a6 a3 78 2c 44 a8 dc 56 ca 80 27 63 c7 9a 02 3f cd b8 26 6c 9a 60 a3 5e ac c3 75 c4 e6 a2 82 f8 e8 c7 a0 0c 86 13 a8 3e 9c 70 93 44 78 c3 e4 e8 a7 c3 69 3c e7 d4 d0 81 ac 8d c5 1c f4 89 8f ff 11 4a 43 62 d1 11 90 98 90 b5 59 5f 92 0f 69 3d 1c 41 ed a1 a0 f8 96 00 13 c2 05 23 a7 40 9a c3 05 58 5a b3 19 e0 bd a4 00 68 cb d8 00 d8 a0 cc 65 a4 70 7e cd 0d 37 5e 81 95 17 39 97 b3 14 b4 c5 1b 49 d9 b2 aa e7 4d 30 6b ff 4c 39 c7 b0 a9 9a fa 8a 3d b7 05 26 65 d2 45 2c a9 ca 7e 0d 94 ad 16 59 47 84 2f 04 17 9d f7 69 52 6f c1 1a d8 bf 17 0c 49 ef 6a e9 25 59 60 55 45 96 72 a3 86 e3 8b 5e c8 84 2c 84 3c 56 41 2e d8 d8 79 95 1d c0 1a 86 bd 43 f7 33 4a 23 f6 8f 37 98 4d e4 06 a4 fd a0 44 38 54 81 e5 7b a3 d9 44 d9 84 0a d0 ad 76 08 1f Data Ascii: EiFjx,DV'c?&l`^u>pDxi<JCbY_i=A#@XZhep~7^9IM0kL9=&eE,~YG/iRoIj%Y`UEr^,<VA.yC3J#7MD8T{Dv
2024-11-01 15:52:26 UTC	237	IN	Data Raw: f7 d2 2c 5a b0 e8 9c f4 f2 e3 d3 49 49 a9 25 c4 38 ed d5 13 7f 6b a3 93 80 09 4a 71 83 d8 25 77 20 9b 2a 26 61 ae 33 ac 6c e1 3a fd 1a 34 95 82 4b a1 67 34 2e 95 b8 1c ca b8 9b 46 aa 37 36 06 15 ee 42 fb 37 7e 41 e4 21 e6 fb 93 4d 82 60 e6 9e 24 45 93 3e a6 e3 79 23 ad 5a 5b d9 ce 57 8e 65 4a 67 e7 1b f6 82 81 a1 b2 ed d3 9a 6e e1 cb 0b 6d 4b aa 9a f4 d1 01 ca b0 25 40 13 45 97 4c 23 b9 d9 d1 20 80 1f bc ea 6c 4c 32 d3 10 08 ac 29 38 ce a7 e0 93 84 5b ad d6 13 27 95 07 b8 76 c6 5e 60 c3 97 ab 4b a5 06 ae b8 c2 25 4f 93 c4 27 4f 26 0f 60 dc 3c 63 2d 59 04 ee 83 84 a0 01 2b a7 21 41 70 62 12 2e 96 41 e3 5f 92 60 61 b2 40 65 4e 80 33 10 1a bf 8c 36 12 44 3d f7 e0 b2 d6 9c 36 12 4a b9 9d 5a 2f be 37 0d 0a Data Ascii: ,ZII%8kJq%w *&a3l:4Kg4.F76B7~A!M`$E>y#Z[WeJgnmK%@EL# lL2)8['v^`K%O'O&`<c-Y+!Apb.A_`a@eN36D=6JZ/7
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 38 64 36 0d 0a 57 bc 73 12 c1 5c d4 33 c3 56 62 22 e7 37 d4 43 67 39 ee 5c ea 72 68 70 94 4d aa 61 53 43 97 f6 75 a1 ca 93 4c 59 b3 9f 27 18 d4 b2 0a 3b 07 6a b6 45 00 39 1b 59 8c c9 4a ec 9a 41 03 da 96 ab 4e 57 b1 d4 cd 19 24 e9 5d 8a b9 31 06 81 2e 4f 59 54 60 8e 0b d7 38 d1 c8 11 2b c2 9b da ca 78 e8 79 c4 f1 28 eb 36 b2 4b 5b 06 71 c3 61 4e 81 a2 b7 8b a7 cb 0c a1 54 d2 a6 ae f8 f6 5b fb b9 20 ac 1e e9 48 08 2c 95 0b 1f eb 49 0a 22 93 cb 75 80 39 4a 4c 09 92 07 08 dc ca d2 17 2c e9 ab a1 d0 05 6c dd 5d 78 51 d1 5c 1a 28 8c 76 69 21 78 05 45 14 b4 74 6e 20 35 fc b3 2f b8 19 1c 46 e0 f5 07 ef cc f2 17 b0 80 51 1c c9 ae e5 0c 98 9c 6a 8e 54 68 8f 2e 1b 09 75 5e 41 c2 20 bf 86 bb 9c ce 91 c4 c0 d5 63 97 ec 52 00 df db 4b dd 67 a7 1f af 24 be Data Ascii: 00008d6Ws\3Vb"7Cg9\rhpMaSCuLY';jE9YJANW$]1.OYT`8+xy(6K[qaNT[ H,I"u9JL,l]xQ\(vi!xEtn 5/FQjTh.u^A cRKg$
2024-11-01 15:52:26 UTC	865	IN	Data Raw: 01 4a db 12 c0 25 f9 35 9a 28 f7 ef 5d 42 04 cd 6c c7 74 60 33 eb 41 44 e6 62 40 1a e3 27 19 33 d0 25 44 5c c8 5b 30 e8 a4 86 5d 89 40 df 2e 21 82 3f 21 62 ca 20 35 5a 48 5e 8b 98 79 03 4a 25 2d 28 49 8d 1f 31 16 81 56 e1 a2 c7 14 27 5d 42 04 bc e5 62 e4 3a b4 67 63 18 48 5d 42 04 cb 8c 63 b1 e2 5d 42 04 9c 03 ba 84 88 ca 95 1a b2 45 f2 9b 61 ec 32 28 b8 4b 88 50 09 d7 25 44 b4 24 40 a9 3a ec 3c 33 e3 d1 a8 d0 4f 11 fc d9 64 a7 74 09 11 9b 66 09 f5 b4 07 35 67 4f 87 40 ee 52 13 e4 2a 0f 53 0c 47 02 ba 84 88 2e 21 e2 53 26 44 1c 69 cc 20 cd 7a 90 4e 76 91 5e a3 5f 27 8b 94 06 28 55 3f ae a7 56 b5 f5 0c 05 0a 42 fb fb e9 9d 34 d6 ba 79 67 7d a5 1f 88 29 a2 f5 c4 09 81 75 07 a5 ca 8c 94 3c 1a 76 42 d0 27 27 aa 42 fa b9 d9 71 d3 8e 31 3d 00 08 9a 74 f9 20 22 Data Ascii: J%5(]Blt`3ADb@'3%D\[0]@.!?!b 5ZH^yJ%-(I1V']Bb:gcH]Bc]BEa2(KP%D$@:<3Odtf5gO@R*SG.!S&Di zNv^_'(U?VB4yg})u<vB''Bq1=t "
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	469	OUT	GET /gui/71254.89ea96287cbc8b900860.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	354	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 08f3a8959265d0ee7e6926266054bb16;o=1 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:23:48 GMT Expires: Sat, 25 Oct 2025 19:23:48 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 592118 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1054	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 66 66 32 0d 0a db 46 96 fe 3f 4f 01 33 89 9a 48 03 10 17 71 95 29 47 96 97 28 f1 d6 92 9c 4e e2 f6 61 40 a0 48 22 02 01 06 00 b5 84 e6 bb cf 77 6b 01 0a 20 65 d9 93 a4 a7 e7 9c b1 12 89 ac f5 d6 dd 97 02 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\0000000100000001v00000ff2F?O3Hq)G(Na@H"wk e
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 90 58 ea 54 13 ea 2f 57 aa 2e 29 d5 56 bf dd 32 a1 4c 83 7a bf d3 6a 60 96 47 b3 5a ad 16 35 a3 b1 db ea a2 11 eb 90 ae a6 0f 82 e4 c4 7c 41 9d 33 94 69 4d f0 71 d0 ee 1f 60 c6 12 1f 39 33 98 d6 1c 1f 39 1d 4d 6b 85 8f 1c ef a6 75 45 63 81 18 d3 5a d0 a7 ee a0 df 33 ad 5b 1a da 69 1d 00 d2 19 ef ef f6 b1 d7 94 20 e9 37 9a 34 18 f3 9b 07 fd 03 d3 b4 6e 30 a0 d3 eb f7 30 76 8c 8f ed f6 a0 79 20 ac c2 a5 75 6d 7d 69 5d 58 27 d6 a9 75 66 bd b1 9e 58 c7 d6 b9 f5 d6 7a 61 7d 6f bd b6 9e 5a 8f ad 5f ad df ad 67 d6 73 eb a5 f5 ca fa d9 fa d6 fa c9 fa ce fa cd fa c1 fa 47 61 4b fe f9 ff b6 e4 4f b2 25 3f 56 6c c9 d4 c9 3c a1 23 93 15 c9 17 6c 40 ba 82 a9 ad 3b 8e 93 5b 69 a9 c3 bd 78 79 7b 11 c7 61 16 2c 2f 60 8b 46 b5 13 34 18 7e 4c 3e 88 91 c5 86 17 06 cb 49 ec Data Ascii: XT/W.)V2Lzj`GZ5\|A3iMq`939MkuEcZ3[i 74n00vy um}i]X'ufXza}oZ_gsGaKO%?Vl<#l@;[ixy{a,/`F4~L>I
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: ea 49 2e d5 5c b4 8b 5f 60 8b dd 9e f0 36 92 b6 bc e2 7b 10 a5 fb c8 c7 80 e1 58 e3 6c dd c1 94 46 9f ab 16 30 f1 6e 77 b3 e4 4f 7e ba a3 b9 ad ce 2b 4e 23 ce ef 6f 27 ce 08 7d a1 13 4c 9f f0 14 ac 8f e4 22 b1 0f 42 3a c9 80 c7 39 e7 68 b1 af ae 10 10 ee 55 98 a7 06 73 bb 65 05 94 93 45 81 48 d9 c9 fa 38 fa 29 49 59 f0 e9 9d bc a7 53 e0 1c 14 38 ff 0f a5 c0 dc d1 13 85 7f 02 f2 77 60 e4 5e fc 07 f7 e8 08 9d fd 83 bd 3d e4 62 95 9e d8 29 cc 3a ee df 02 f7 6f ff 43 71 bf 74 f4 a4 ef 9f 80 fb 0a 36 ee c5 7b fc 19 78 8f f7 f6 e2 02 ef 85 66 d4 91 fd 02 c8 7e f1 1f 8a ec 2b 07 30 97 b2 c9 7f 02 c2 09 0d 77 61 d9 84 22 b2 23 24 e1 61 25 e6 70 0f 7f 87 01 75 c3 9a 4a ba c0 a4 c2 86 68 a6 54 da cb 60 c4 55 15 14 de f3 2c 38 87 7f 5c f2 36 65 55 e1 50 28 bc dc 1a Data Ascii: I.\_`6{XlF0nwO~+N#o'}L"B:9hUseEH8)IYS8w`^=b):oCqt6{xf~+0wa"#$a%puJhT`U,8\6eUP(
2024-11-01 15:52:26 UTC	406	IN	Data Raw: ed 15 8a 58 ee 95 1b 84 74 a8 3c 8c 3f 5b 21 3b 8d 5b 2c 28 66 79 88 d4 f9 2d 5d 79 c5 45 53 66 3f 01 ef 3f 71 bc 93 86 91 7a 83 8b 2c a2 bd 88 92 fa 24 4b 1a 87 95 0b b0 47 a5 aa 1c 9f 37 89 fd 5b 1b 21 7c 16 40 f1 08 e9 d7 97 e2 72 2b f7 99 a6 76 a7 26 05 50 48 b7 e4 68 25 ea da be 80 62 4b 1a be d1 ef 40 60 80 76 84 39 1c 56 a1 39 f5 0d 2b 07 13 a2 2f 37 73 d5 e9 01 55 d7 58 a4 76 b3 66 24 31 55 ab 44 5e ba 52 7a c6 76 fa ca db 47 79 b8 0f 5d ab 30 27 62 54 5e ce 94 0e 0d 92 da 45 b9 92 00 21 3c f3 15 95 9a e7 b5 7b 6a e5 ba 9f ae ec 8e 6a d7 81 9f cd 87 70 5b 96 37 e8 b9 80 75 36 4e e3 13 03 17 65 a1 72 52 e3 a7 e3 b3 63 23 01 e1 81 2c 89 d7 c9 11 9c 1f e4 77 10 cd fb 06 77 cb ca 9d 34 1a 6c e2 28 ff a0 d0 b3 12 f9 02 74 80 21 15 6f 35 c4 22 43 02 d1 Data Ascii: Xt<?[!;[,(fy-]yESf??qz,$KG7[!\|@r+v&PHh%bK@`v9V9+/7sUXvf$1UD^RzvGy]0'bT^E!<{jjp[7u6NerRc#,ww4l(t!o5"C
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 80 0d 0a 30 30 30 30 30 30 30 31 0d 0a fa 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 00000001m00000001b00000001v00000001000000010000000100000001000000010000000100000001F000000010000000100000001e00000001000000010000000100000001/0000000100000001200000001
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: 2d b8 07 bc b9 e9 d2 8f 18 2d 3d 7c c0 a7 13 39 5d 79 1e 6e 0a a0 55 c7 76 10 4d 89 f0 8d 46 6f a2 0e 72 ed 26 11 57 22 25 fa f9 94 b5 85 11 2f 51 5a ee 64 27 b3 09 c4 b6 69 19 bd 9e 65 b4 9a 7d 01 87 dc 51 f4 76 d0 d3 ec b5 30 44 e2 8b 76 16 5d 0d f4 b4 da 98 d8 96 bc 22 21 10 bd ad d6 00 fd cd 8e 65 c8 5e 01 89 dc 73 80 65 db 5d fc af b8 56 44 37 c2 f2 b2 c5 12 b1 51 40 67 6e 74 5b 93 9e a4 6b aa b2 c3 5b a3 5a 03 fa 29 43 cf 6d b8 b6 52 ab d1 6d b4 72 c1 c1 19 aa 03 1a 8d 83 83 7e e5 24 d5 31 fd 06 38 a5 7c 9e ea 90 ae df 3c 68 ca 53 41 79 cf b3 ad 8d 74 0e 21 ae fe e8 00 45 aa c9 cc c6 95 6f 3c 5a 44 a4 9c fa fe 54 8a 5d 81 14 7d 04 6b d0 4f 19 21 a5 7e 6f 3a 60 4c f4 73 82 96 3a 3b d3 b6 92 46 45 52 bd 1f a2 da 62 52 9e 25 51 4b dd 2e 6b aa bd 05 02 Data Ascii: --=\|9]ynUvMFor&W"%/QZd'ie}Qv0Dv]"!e^se]VD7Q@gnt[k[Z)CmRmr~$18\|<hSAyt!Eo<ZDT]}kO!~o:`Ls:;FERbR%QK.k
2024-11-01 15:52:26 UTC	790	IN	Data Raw: ff 64 dd 35 8c f0 71 67 27 6e 67 e3 d1 ba 3b bb e7 28 e2 8a 7d ee 1c e2 bb 70 48 09 92 3b 47 c0 39 ce e6 f7 8c b9 25 2f 99 2f 53 a0 62 53 9c 88 23 c9 4e 97 48 56 0a 2a ac a5 67 4a 19 74 6d 9c bc f5 55 48 de 5a a1 4e a3 63 05 a9 42 08 d3 6b 2a d9 2b 64 ee 04 82 df 18 5c 2d e9 7d 4e 0a 0a 62 cc 9c 27 77 6c 25 59 66 38 e4 73 91 aa e4 65 f8 cf 9c fd 4e dc 91 7c 9f 4b 20 1d c0 78 10 2c e8 dd 20 6e 94 6d f4 2c 1a 2e 2a 5f 72 c6 b6 6f c8 db 90 3e 48 d1 4a 3e 46 a7 47 99 4c e1 9d 14 3d 0b e4 cb 7a dd fe 8e 1e 32 b1 83 01 25 73 ab 73 b8 d3 c1 6f 3f 6c 77 f1 3e c4 14 4b 58 87 4b 76 3b 4d f0 d8 78 6a e0 0d 5c c8 ae a5 a9 3d 01 c1 e9 1d 79 4b 96 ae 1b 5f ad 27 c8 9b cd 12 7a 6d 48 fe bc 84 7d 23 f4 ba 3e 9d 58 00 f2 82 0b 79 a4 70 d6 59 bc 2e 24 1d ef f6 82 7c d4 db Data Ascii: d5qg'ng;(}pH;G9%//SbS#NHVgJtmUHZNcBk+d\-}Nb'wl%Yf8seN\|K x, nm,.*_ro>HJ>FGL=z2%sso?lw>KXKv;Mxj\=yK_'zmH}#>XypY.$\|
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49796	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	648	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4706df381de1af7687ad3239aae2abbd Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:04:21 GMT Expires: Sat, 25 Oct 2025 16:04:21 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 604085 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 31 0d 0a fd 0d 0a 63 66 30 0d 0a be bf 82 e6 76 3d e4 16 cb da 8e ed d8 f2 b2 6e 1a c7 69 d2 34 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Z00000001k00000001s0000000100000001600000001001cf0v=ni4
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: af ac f9 7e 80 c4 38 18 e9 c4 4a c6 b6 b9 b6 19 22 04 04 52 c5 aa 92 36 a2 ae ac ef a9 91 28 2e 1c f8 b2 3f 9f 33 0d 41 16 a1 c7 af 1a 3a 9c 77 a0 c3 f6 a3 47 eb c0 0b 1a 3a 6c ec ac 6f 19 e8 f0 e8 d1 2e cd 12 74 b0 d8 82 a0 c3 f6 da c6 a3 47 3e 8b 09 45 3c 5e df c0 b0 c2 f0 f1 da da 16 60 c6 08 c3 47 8f d7 b7 d6 7c 36 c0 d0 e2 90 84 d6 6a c4 c1 4a 1a 6e 6c 6c 6e fb 6c 42 0b 08 1c 75 70 08 64 46 38 44 a7 df f0 6a 7e d8 03 d7 76 06 32 7c 73 91 bf 15 45 c9 85 9a 1e 4f c7 fd 22 93 e6 ad b4 7e 6b e9 1a 68 64 8f 60 4a 1a a6 88 4a 99 e2 c2 f3 6a 58 e1 e1 dc ab 89 e9 ea 16 07 5c 0e 44 5a aa 42 68 1a 03 9e 03 7a 88 b8 9f 21 5d 13 3e d1 0e 15 c4 65 99 4d 3d b8 9a 3f b7 9b 75 80 4b 44 6f 02 05 da 73 3c 1e 36 87 23 84 10 d3 dd 19 12 04 78 76 0b 8d b2 dc 95 50 4d 4b Data Ascii: ~8J"R6(.?3A:wG:lo.tG>E<^`G\|6jJnllnlBupdF8Dj~v2\|sEO"~khd`JJjX\DZBhz!]>eM=?uKDos<6#xvPMK
2024-11-01 15:52:26 UTC	1082	IN	Data Raw: 6d f8 35 18 b6 ae 65 6e 6a ad af ae 36 4b a9 d1 0e 8b 2b 82 72 e2 43 4e 7e a7 d1 de 56 36 e0 01 88 e4 c4 bd 1e 9e 5d e6 12 e1 d1 a2 4d 21 74 a1 df e6 b3 37 16 4e c3 3e 5f 24 a1 b2 18 37 be a8 63 da 2f 71 19 52 81 8a bf 1d fc cb 93 6e 1d 25 c3 13 5a 82 2e 34 89 4a ef e4 9f b2 3a 86 f1 5b 9d 17 f5 f2 0a 6f fb ea b6 36 b6 19 4a 84 7a 47 70 77 55 39 d2 43 11 1b 90 b2 bc 6e 4b 67 06 e1 e3 26 08 19 ce ca 97 6e 0a e8 27 64 18 44 67 45 95 27 b5 2e 54 d8 3e 49 13 14 e2 20 7c 51 c5 6f a9 2e c0 5d 0d 98 4b 83 27 90 30 55 2b a6 40 41 65 6a 92 69 d0 94 12 d2 6c b3 c4 54 42 6b e3 dc d8 b8 2a 54 9c 3d cb 87 28 aa a5 09 ca e0 f0 5d 67 d2 e3 d7 12 09 75 a4 24 34 d5 59 03 9f b0 25 cb d2 2d da c7 37 6d 46 ec d6 5a 3e 40 f2 69 b6 59 6c 37 5f 27 07 32 d5 c6 a3 c5 96 17 2a 3d Data Ascii: m5enj6K+rCN~V6]M!t7N>_$7c/qRn%Z.4J:[o6JzGpwU9CnKg&n'dDgE'.T>I \|Qo.]K'0U+@AejilTBkT=(]gu$4Y%-7mFZ>@iYl7_'2=
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49797	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:26 UTC	647	OUT	GET /gui/8405.86474e95af8bef65079f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3958eaeb848435e3e52ce35c57b08b47 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:45:50 GMT Expires: Sat, 25 Oct 2025 15:45:50 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605196 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 61 34 65 0d 0a 00 00 00 02 ff ec 5b 69 6f db 38 1a fe be bf 42 d1 62 0b 69 2b 68 9c 4c 4e 67 d5 4c d1 6b 07 e8 64 82 a4 ed 02 13 18 86 2c d3 16 a7 ba 40 52 4e 0d c7 ff 7d 1f 52 94 25 3b 76 e2 34 95 e1 16 ed 97 ca 14 45 be f7 1d 33 e7 c4 e0 82 d1 40 98 a7 16 27 d1 c0 bd 21 bd cc 0f 3e bf 0a f3 e4 f3 48 74 73 da 8d 7d 9a 78 f7 bc bb bd bd ee d8 6e 96 f3 d0 ba be 3e de 6f 1d 74 9c c9 ee fe f1 ee 49 db 12 0e 71 a8 ed bd 98 50 b7 6f 11 67 42 db 16 7e 8d a7 f6 e9 c8 67 06 f3 a8 75 b2 77 bc 7b 60 3b 09 1e f7 f6 8e 4f f6 6d 27 c5 e3 61 6b ef d7 5f 6d 87 e3 71 ff 68 77 Data Ascii: 00000001000000010000000100000001000000010a4e[io8Bbi+hLNgLkd,@RN}R%;v4E3@'!>Hts}xn>otIqPogB~guw{`;Om'ak_mqhw
2024-11-01 15:52:26 UTC	1408	IN	Data Raw: ac 9d 53 42 03 93 5a f8 32 69 e1 1c 5a 39 ab 99 c7 44 40 a2 8f af 39 24 79 b0 fa 30 f5 84 0e c9 64 58 5b c5 99 32 a0 9c f4 ac 54 61 c9 1d df 31 13 38 78 18 cc 1a 3c fe 9d 3d 2a 06 52 9b b8 8e ab 94 9f d0 31 c2 78 21 46 d8 45 8c 00 77 31 e7 d3 11 95 e2 54 7b de 8f b8 7d 5f f8 ca 99 e0 f5 4b ce d3 80 16 4e 5f 63 2f 3c 89 7d 89 f1 b0 c2 f3 df d8 a0 fc 0f 9c bd 8c cc b8 9b 27 96 70 69 bf 8c 9b 8c 31 25 51 df 90 94 af e2 08 fe 4a c6 0e a4 ef 2c 2c bb 08 74 66 57 c3 ff 59 f6 b4 ee dc 40 30 c5 8a d3 c2 c7 09 db 21 0a ae c2 c9 04 be ff 2a 4d 04 88 f8 b2 f4 55 17 3e f3 63 ee 4d 06 91 3f 6c 03 ce 28 8f 93 73 3f 26 6d f3 2d 56 cc a9 23 16 d7 3f 14 cb 22 9a df fe e1 c3 7b d3 89 68 f2 b9 0d 72 86 ee 5f c7 2e e8 74 45 7c 16 84 1f 59 64 4d 10 71 51 31 6e 9b 85 03 34 1d Data Ascii: SBZ2iZ9D@9$y0dX[2Ta18x<=R1x!FEw1T{}_KN_c/<}'pi1%QJ,,tfWY@0!MU>cM?l(s?&m-V#?"{hr_.tE\|YdMqQ1n4
2024-11-01 15:52:26 UTC	245	IN	Data Raw: 82 e9 c3 b3 37 e5 50 44 73 53 1a 5f 8f 65 09 5b 39 b0 f1 55 08 56 6d f1 e6 3a f5 5f 8f 62 05 5d 57 37 ed e7 91 5c 52 1f ac 3e d9 c4 54 c5 37 41 ed ee 80 c5 83 58 56 e3 68 db 28 99 15 74 4f 92 cd 98 c4 29 1b 5f a8 39 c1 04 83 c7 b2 f6 bf 65 1e a2 00 b1 9b 15 30 e2 7f 05 e4 52 67 f1 b0 b1 41 5c 53 eb d4 c5 cb 46 c2 cb 4e dd db 0b ab 16 88 36 d1 b0 6b b6 65 a0 f5 a6 6c fc 3c c2 6b d5 ba 07 5a 4b 1e d3 3d 50 31 fa d2 9e 01 fe d6 4d f5 0c ca e0 1e ad 03 f0 e3 c1 c1 fd a5 5c 2a 07 f7 c1 25 0c ee cf 4e 2c 87 fd 9f 38 bf 8f 96 46 c7 3e fd c7 2f bf fc d3 e0 69 ce 02 f2 07 fe 3e 15 f3 39 1f 2f df 7b f2 ef 7e dd 63 34 3c f6 c9 c9 81 3f 38 ee 91 c1 e1 41 eb e8 64 e0 fe 8d c1 78 3f fb 3f 00 00 00 ff ff 03 00 b4 ee 92 58 6a 3c 00 00 0d 0a Data Ascii: 7PDsS_e[9UVm:_b]W7\R>T7AXVh(tO)_9e0RgA\SFN6kel<kZK=P1M\*%N,8F>/i>9/{~c4<?8Adx??Xj<
2024-11-01 15:52:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49800	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:27 UTC	648	OUT	GET /gui/71288.1829e1a8db7a3e06e295.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.530598666.1730476344; _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0
2024-11-01 15:52:27 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 22f531f34873c091064fb82d6a81794f Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:12:22 GMT Expires: Sat, 25 Oct 2025 15:12:22 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607205 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:27 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 66 66 33 0d 0a 97 db 36 92 7e df 5f c1 68 36 3d 62 96 64 53 54 4b 2d 51 96 13 8f 93 ec e6 9c 64 b2 6b 7b f6 c5 eb 33 a1 48 48 62 9a 22 79 48 aa 2f 91 f5 df f7 2b 5c 48 f0 d2 dd ce 65 f7 29 56 62 ab 51 85 42 a1 50 a8 1b 80 1e 1d 4b 66 94 55 11 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001[00000ff36~_h6=bdSTK-Qdk{3HHb"yH/+\He)VbQBPKfU
2024-11-01 15:52:27 UTC	1408	IN	Data Raw: 63 40 80 24 99 9e e8 6e b1 65 c2 1b 63 17 40 ba 43 22 e4 53 2c 61 ee a0 3f ef e2 2a 61 ba f2 86 e0 3b 24 be 3b bc 19 fb 86 aa 67 fc 8c ed 14 6f 1f 6c 6c 31 58 98 ca de b0 ea 8e b1 94 d4 5a eb d7 ea c2 15 17 76 27 0d 61 43 09 b1 4c b2 ca 48 83 03 b4 bf 22 2e a0 e2 b0 69 f7 a3 97 2f 2e 09 44 18 79 90 2a f9 48 ed 36 b6 a5 3d 17 9b 40 a3 25 a4 79 49 f8 43 84 ab 2c 4b aa 38 d7 28 0b 01 f7 59 28 8f db 16 0b 92 30 2d c7 80 f4 47 24 7e 7b cf 02 6c 41 03 0a 0b 5d 7e 20 ad e5 02 ae 95 d6 1a 6d b2 02 18 d8 9d d8 f0 07 23 1f 56 ec de aa b4 8d ae be 46 09 d6 28 e1 ba 65 c0 46 f5 ad 47 5e da 9e 30 33 6d 5b d0 a8 d4 e0 6c 74 3b 23 27 a1 ec dd af d9 78 d4 87 6f bb d2 c9 59 1a c6 c9 77 d0 12 6d d3 68 5f fb 06 81 4b 74 93 45 0f 10 13 94 b7 2d 49 70 c1 1b ea ed 0a 17 ca 1b Data Ascii: c@$nec@C"S,a?a;$;goll1XZv'aCLH".i/.DyH6=@%yIC,K8(Y(0-G$~{lA]~ m#VF(eFG^03m[lt;#'xoYwmh_KtE-Ip
2024-11-01 15:52:27 UTC	1408	IN	Data Raw: d2 47 6b 46 20 4b cd 1e 7d b4 66 cc 0b cd 6c 4e 1f ad f9 8a 37 87 fc 8f d6 8c e8 19 d8 9b 29 7d b4 e6 39 6f ee 71 78 cd 9b af 22 fa 68 d8 0b de dc e3 7b c9 9b 27 01 7d 04 b6 2c 6f 62 44 7d 91 cb 63 18 b2 b2 44 ab 2e ed 38 dd d2 c2 bb ee f5 46 4d e4 2e 28 52 c4 22 68 d5 d7 2f a2 35 2d d0 a8 af b4 1c c9 2e 76 1b df 98 4c 2c e3 fa da 32 bc c9 42 f0 21 47 14 d0 19 20 93 6b 0f 28 52 5e 34 b2 00 b9 80 78 53 74 9c 4a 5d 91 1c 08 a8 e7 2d 01 9f cc 2c 43 42 05 27 72 cc 25 c8 4e e7 f8 5f 69 ad a8 2d db bc 44 07 4b bd 0f ca 98 e6 ec ce bd cd b5 5c 57 98 d7 2c 85 1a 20 d1 a1 0a b4 86 e5 2d e9 d3 e6 be 87 e3 ce 5d af de 38 98 43 17 01 99 d2 d5 a2 33 93 2e ce c2 85 a6 b4 e7 d3 45 99 47 93 ab 89 9c 55 42 56 a3 37 90 ae 21 a4 d5 4f 22 a8 a5 da ec ec f2 b8 41 8d 92 96 72 Data Ascii: GkF K}flN7)}9oqx"h{'},obD}cD.8FM.(R"h/5-.vL,2B!G k(R^4xStJ]-,CB'r%N_i-DK\W, -]8C3.EGUBV7!O"Ar
2024-11-01 15:52:27 UTC	390	IN	Data Raw: 0e d5 16 5c f1 b2 1e 43 23 79 3c 0a 3c c4 29 4e 4e 1f 05 ef 11 c5 8a 71 1e 45 89 02 84 84 c4 c9 a3 18 08 4f ab fd 33 38 0f 14 a7 72 32 8d 28 ce cd 8c b8 90 ec 32 c7 b6 94 1a 27 63 43 ba 70 a5 e1 95 20 13 ee b5 eb 53 27 25 3a 6d 1d 3b 42 e5 fa 6f 97 77 74 49 4c 09 73 90 89 6d 8c 3b 2c c7 9c 8e 18 15 17 a4 98 b5 4e 0e 0c 25 55 c6 f7 79 5f 5c d4 c4 99 75 86 8b 22 fc 66 d8 e9 53 7b 6b 65 aa 82 05 37 5c 6f ed 7b 72 e7 32 98 68 5a c9 89 cf ae e7 75 98 d1 40 0e 28 48 5d cf 17 03 10 f2 61 cb 25 3c 50 8f 1a f7 ea a8 f5 0c 81 38 0c 41 7b 7e 7f 46 c9 8d ae 4b 9c 70 24 7f ef c3 ff 1a b4 2a 2b e1 a9 50 40 fa fc ec e0 aa 9b b0 6b 74 e7 4d ea ba 7d 8f 90 a1 15 6f 68 30 ee c1 b4 60 03 20 dd 30 18 92 55 d5 dc cd 2e 54 bb 4a 2e 50 6a 6a 7a e8 b6 03 1c a8 dc 02 7d 84 29 6c Data Ascii: \C#y<<)NNqEO38r2(2'cCp S'%:m;BowtILsm;,N%Uy_\u"fS{ke7\o{r2hZu@(H]a%<P8A{~FKp$*+P@ktM}oh0` 0U.TJ.Pjjz})l
2024-11-01 15:52:27 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a a9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 31 0d 0a 52 0d 0a 37 34 62 0d 0a 0b 4b 03 98 2b b1 36 2d b8 d4 32 ee bc 84 87 a5 d0 9e e1 e2 f4 90 df 5d b5 5d d8 4a 99 1e dc Data Ascii: 00000001Z00000001000000010000000100000001f0000000100000001!00000001000000010000000100000001#00000001000000018000000010000000100000001000001R74bK+6-2]]J
2024-11-01 15:52:27 UTC	685	IN	Data Raw: c6 c4 e4 1a 99 c9 1f 26 b0 c7 89 fe 2e 29 fd 0e b2 67 47 3c 58 ad f7 ce 90 2b 86 91 58 f1 02 9c 0d 9d 3f 94 be 2c c3 89 26 fa 55 0b 3e 0c 17 c3 59 c1 d9 11 ef 70 fb d4 fc da 61 0d bb f9 21 5a 5c 2f d4 8b d7 13 c5 1c 5b ba 19 ba c7 31 1b 4b 45 3c 5d 37 e2 d2 28 2e 35 c7 e5 4a 5c 56 12 17 83 d2 8c 0e 82 90 58 09 33 2e 7c 85 32 ea 5d cf d1 76 1a f5 92 cb 66 7e f6 a4 d9 77 d9 2c 7c 96 b6 6d ce ce 23 cf 84 4f 9d 76 9f b3 a8 1e 11 b7 28 c8 47 f3 f2 fc cf 4e d8 b6 f2 f9 2b fa 66 77 c2 94 d9 5e ed 9b f9 15 84 16 09 3c 24 ad a1 e4 33 da 40 3c 33 57 50 9c a0 d3 55 a3 2e 85 95 8a 53 f9 e0 5d 28 46 c7 c3 df 0e 89 ce 30 6d 0a 1d 20 08 e0 d1 70 4d 80 8e 95 bb 63 d4 fd e5 3a 75 e1 20 81 37 f4 2d 12 6e 7b 96 78 10 5c 83 1f 99 06 3d 17 f7 4e f8 bb 37 fc d9 e1 4f c9 39 ac Data Ascii: &.)gG<X+X?,&U>Ypa!Z\/[1KE<]7(.5J\VX3.\|2]vf~w,\|m#Ov(GN+fw^<$3@<3WPU.S](F0m pMc:u 7-n{x\=N7O9
2024-11-01 15:52:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49802	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:27 UTC	689	OUT	GET /gui/11405.39ee0be00408314d19fe.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:27 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 06c949d15fd8e539b5f334489d428eca Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99248 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:27 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 63 37 30 0d 0a 00 00 00 00 00 02 ff ec 5a 6b 73 db 36 16 fd be bf 82 e1 76 34 e4 2c 49 4b b6 e5 87 14 da cd ba d9 d6 d3 24 ed e4 b1 9d 59 8f c7 81 48 88 42 4d 01 5c 10 94 ab 95 f5 df f7 00 24 45 ea 61 27 db 7a 93 2f fd 24 8a c4 e3 e2 de 8b 7b cf 3d 80 5d e4 d4 ca 95 64 91 b2 87 4e 4e d3 71 70 47 47 19 89 6e 2f 26 05 bf 9d a9 9b 82 dd 4c 09 e3 e1 23 df ee ef af ae dd 20 2b f2 89 73 75 d5 eb 1d 76 fb de fe e9 7e f7 da 5b 1c 1e f7 0e 0f 06 0e f5 94 27 dc f0 6c 21 82 d8 51 de e2 c5 c0 c1 3f be 74 87 33 22 2d 19 0a a7 d7 3f d8 3f 70 87 91 e0 b9 b2 78 b8 b0 5f 28 05 21 ac 3d eb 3b 0a f1 8a 48 31 c1 ed 81 0c e2 e6 ef 25 5a 7b 2f f3 0c 5f 48 42 f1 Data Ascii: 000000010000000100000001c70Zks6v4,IK$YHBM\$Ea'z/${=]dNNqpGGn/&L# +suv~['l!Q?t3"-??px_(!=;H1%Z{/_HB
2024-11-01 15:52:27 UTC	1408	IN	Data Raw: 8c 15 60 2b 68 2f 86 54 41 9e b2 88 42 91 07 ae 27 7e 5f 5f 64 a0 2d 73 64 30 47 06 73 b4 ad 31 69 ac b1 bf 53 cf 13 bf d7 d5 b6 31 ba 6d 29 58 eb 37 98 92 cc 71 10 31 cd 9a d6 d4 3b c7 ce 83 df 88 2a e2 9c b7 bc 62 06 31 66 5a 8c 3c 23 bc f6 8a 11 89 13 6a c1 51 e1 4b b1 9f 61 03 5b 24 65 09 87 c5 d3 b1 1f 41 37 54 5a a3 04 36 87 17 e0 59 31 ed 04 2b c7 b0 ad 6f a7 02 00 40 cc a8 0c 6d 2d 26 44 fe 5b 25 ae 9e e7 0c f2 ae 24 45 86 a9 1b 23 56 8a 96 9c ee a0 dc 9f 1b 8e a1 57 63 fc 42 69 bf 78 46 af ba d7 95 91 2b 0b 0b 04 d1 ee f5 b6 ca 27 58 eb 44 af 95 d5 0b 2d 15 be 4b 5e 2d 6d 87 8f f2 6c f8 7c 8f 19 79 11 14 8c 66 db f2 2a ef 8a 5e 43 62 ed 9c cf c2 10 81 03 68 41 6f e0 4e a7 14 1d 2f 15 32 51 1a a8 3b f1 3d 25 d2 e0 06 77 d9 1e 03 20 c6 5d 90 e0 9f Data Ascii: `+h/TAB'~__d-sd0Gs1iS1m)X7q1;b1fZ<#jQKa[$eA7TZ6Y1+o@m-&D[%$E#VWcBixF+'XD-K^-ml\|yf^CbhAoN/2Q;=%w ]
2024-11-01 15:52:27 UTC	763	IN	Data Raw: 87 ec 8a 75 90 06 ec 95 c3 7d 8a 6a e0 6b 87 20 d3 af 0f de 4c 08 2b a1 d8 4a 21 35 d8 5a bd f8 04 c3 50 b5 5b d3 d1 67 b3 0b 55 e7 07 99 85 f5 ef 6d 56 a1 d6 65 09 63 a6 4f 06 9c 76 9e 60 94 62 6c 33 0a b5 10 65 96 85 10 5f 95 51 a8 0e 3b 3e 71 7e b1 5a 8b 3e 05 7d 56 a1 0d 53 d8 98 5c 26 e7 25 70 79 16 9a 77 d2 ec 00 77 fd 68 03 a0 19 50 08 d1 5c ce 6f 58 2e f6 0d 07 2d 3c d9 bc be bf a7 41 d9 b5 82 ba 56 1a 30 8d de 2e ca 6e ef 26 60 ec de a0 16 72 94 7b 2e f4 31 41 ad ca 92 9c 81 2a 67 ca 2f 98 3f 4e 49 62 05 98 a4 c6 9b cf f7 9a 0f 1a 5c 28 a4 5e dc e5 d0 d7 05 34 61 2a 03 25 5e 09 40 b9 0b 92 53 07 b0 09 30 aa 35 3a 16 e7 cc c3 29 72 7e 77 69 90 89 b9 55 a1 81 1c ce 4f 64 a7 23 34 76 aa 45 19 a3 f1 18 8d 37 11 ee 1f 3f a9 c1 31 7f 6b 9e 04 f3 24 7a Data Ascii: u}jk L+J!5ZP[gUmVecOv`bl3e_Q;>q~Z>}VS\&%pywwhP\oX.-<AV0.n&`r{.1Ag/?NIb\(^4a%^@S05:)r~wiUOd#4vE7?1k$z
2024-11-01 15:52:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49805	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/45428.d50e11e1e27c0917ea14.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bcefb13f63e0c962ae8b7738b5104b2e Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:12:10 GMT Expires: Sat, 25 Oct 2025 15:12:10 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607218 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 31 0d 0a 96 0d 0a 30 66 65 66 0d 0a fe 7d fe 0a 18 4e 14 22 01 20 f0 26 21 d3 8e 22 cb b3 aa 91 ed ac ad 64 6b 56 ab 92 01 a2 49 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\0000000100000001s0000000100000001F000010fef}N" &!"dkVI
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 65 61 0d c5 52 e5 2f 6e b2 38 32 3c 3f 47 95 55 8b 44 ec 2a c8 0b 76 96 96 a0 a3 3d b0 2c 35 e4 0f 39 d1 f6 cd 46 d4 0b 54 bd c0 fd 2d 8b d3 16 da 85 94 f8 66 c3 b6 d6 87 ed 2c ce 8b f2 97 55 84 e5 89 5a d6 06 d3 b2 8c 0b e6 06 49 d2 ba cc 5c d6 1a 79 de 60 6c d9 f4 38 ec f6 87 6d 0b 1a a3 5c b0 b4 95 b9 61 9c 46 ad cc ee 8d bd 6e df 92 a9 44 d4 a6 5c c4 85 3b 5d 04 79 39 a1 51 95 ee af e5 2f f1 09 7d 3f 0f 7e bf b7 eb 6c 97 36 d1 84 7f a7 27 3d 07 04 05 22 87 9e f4 9c 6c 45 1b bd 10 99 f2 8b c8 cf d9 7f ae 99 1a 4d cb da 42 18 ae e5 c8 4a c1 10 0c ba 72 8d dd ed d6 e9 76 e9 2e 82 a2 65 12 01 26 f6 8d fc 4a bd 6a 5f 65 3f 58 0e 6c be 8a e0 83 03 fe 48 65 e5 a3 2c 27 bf f1 39 50 15 f8 97 af 37 62 c9 be 2d 39 7f bc 75 90 2f b6 08 f8 9a 7d fa c4 dc 9d 19 c1 Data Ascii: eaR/n82<?GUD*v=,59FT-f,UZI\y`l8m\aFnD\;]y9Q/}?~l6'="lEMBJrv.e&Jj_e?XlHe,'9P7b-9u/}
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: a2 b2 0c 35 c3 60 4d e7 93 dc 05 5a 04 b4 a7 d5 52 7d 63 81 94 45 fb 60 37 9a 33 4b 2e 9b cb 52 38 c5 79 10 26 70 82 30 71 19 47 c1 dc 60 b5 4a ee e1 d2 e4 24 97 b8 ef 98 6d 55 0f c6 6f e8 7f a3 1c 54 36 69 1f b1 67 95 64 95 ce ea 11 fb e1 07 31 92 8c fb 6c 4f 6a ef fb 92 5d bd a8 8a e3 8b bf d9 1e b1 6f 3b 2f de cb 69 69 65 96 fd c4 b3 5c 74 70 1a c0 1d 6c 8c ec 57 e1 26 a3 1a 39 35 fe 67 46 58 bc 90 05 1a 9e 6e 0c d9 5e da 9f ab 0a 32 2c 5f a3 e9 11 82 1e ea e0 9e 13 f9 99 0e 30 b9 0c 72 81 3b 22 7c 82 cb 7a 82 e5 28 d5 42 42 2a aa b9 a7 99 a7 5d a5 a7 90 e3 ad 01 12 4f 14 20 51 7e fa f4 a4 94 ee b6 21 cc 8f 0c b0 81 d8 43 6e 99 fd 9c 13 44 08 29 ca 3d 73 61 b6 3d 99 4c 32 b5 03 33 77 4a ce 2f 76 c9 a7 4f 26 66 30 58 27 a5 c9 f7 af c2 3e aa ae 72 d5 4d Data Ascii: 5`MZR}cE`73K.R8y&p0qG`J$mUoT6igd1lOj]o;/iie\tplW&95gFXn^2,_0r;"\|z(BB*]O Q~!CnD)=sa=L23wJ/vO&f0X'>rM
2024-11-01 15:52:28 UTC	431	IN	Data Raw: 9f 21 fb 3c 12 45 c1 0b 0d 67 98 21 6f 86 bc 3f 46 5b 2a 80 27 78 4e 50 09 e9 5f a1 40 17 d9 2d d7 ab 77 e5 6b 98 ae 42 81 96 f6 1c ce 05 08 f3 b5 7e 96 e8 67 49 fd 80 dd d2 e7 44 09 60 18 7a 44 7b e4 8c 3c 38 3a 6e 00 f0 bd 16 c5 28 0c be 3f bd 01 1b f3 63 ba 13 01 ad f2 ef 26 d5 76 f4 a9 77 f8 3c d8 9b 88 95 41 9c f8 1b fa 4a 06 0c e4 00 3d 9e 45 3e db c2 bc 5e ae b2 82 45 64 5a 87 eb 10 e2 b3 e0 96 35 19 00 29 8c a3 92 fd 8d dd 43 0a 02 8e 23 13 1b d4 90 fe dd 63 ba e2 ed 8c 9a 6e 6e 0a 98 2c c5 7a b9 0c f2 7b 18 7f 82 5f 34 3e 95 55 a0 a5 ab 83 45 8a d6 c0 7c cd dd 37 c7 af 4f af 5f 9e be 3f b9 7e 7d fc f3 cf 67 6f fe 2a 51 24 ad 3a ef 0e 95 1b d2 42 99 0a a5 4b 3a 07 d0 b0 12 36 ec bf d5 2e 53 ed 32 5d 6f 02 da d8 95 3d f5 98 a4 90 d4 56 ff 1e ab 7f Data Ascii: !<Eg!o?F['xNP_@-wkB~gID`zD{<8:n(?c&vw<AJ=E>^EdZ5)C#cnn,z{_4>UE\|7O_?~}goQ$:BK:6.S2]o=V
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 04 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 31 0d 0a 93 0d 0a 31 33 35 39 0d 0a b2 bc 77 3a d4 42 8f d2 05 3d 00 88 1c 18 cd 04 e9 62 49 14 4e 08 b4 42 a2 ad c0 4c 1f 28 48 e4 8b a9 53 7f 44 a1 7a 75 89 bb 33 98 0e 09 c4 eb 2c 7b bb 2e 01 d5 b2 33 90 05 63 42 9c 52 bb 38 20 59 51 1c 40 20 55 bf d4 73 ba 1f 10 93 4d 0e 0d e2 ca f1 9c c0 47 e0 8d 44 35 a7 6a 76 8b f0 1b 38 00 86 60 8d 50 4a 69 9c 84 ec 28 4b b5 61 45 78 c0 0a 48 38 3a 80 03 73 70 Data Ascii: 00000001000000010000000160000000120000000100000001000000010000000100000001j00011359w:B=bINBL(HSDzu3,{.3cBR8 YQ@ UsMGD5jv8`PJi(KaExH8:sp
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 8c 6e 4d b0 20 80 ff 69 f9 70 9d 7b 78 a3 af e8 9c f2 e1 ec 1b 9c a9 e1 9f 5d 60 54 28 03 e9 23 39 99 54 e8 3c 23 78 8a 8f ab f0 79 30 90 3b 43 ec 79 2b 80 f9 96 03 34 d7 e6 c7 8e f2 e0 f6 27 ce d4 be 10 14 38 e2 b3 11 85 ff f1 9c df 68 f0 3d cc 20 be a1 0b 00 fd 60 73 92 43 ff 7d 66 51 c6 01 dc 12 ba 8c 04 bd 0c 48 c3 df d0 52 fb ed 36 0d ec fe 4b 06 54 00 86 e0 07 4f 04 f5 fd 7f 19 1a ad 9b 65 23 1e 48 33 c1 be 81 3e fe a6 d6 c7 ba 38 90 92 5a d7 ff 27 28 7d 82 d2 0a e6 a9 81 99 af 01 bb fd 29 c0 4d 01 56 c2 c6 db 0d f1 db 87 ba 2a 2b 4f b8 89 5f 0d 72 13 e0 f3 23 60 99 e8 8b 8b 25 43 5c 16 90 41 87 5c 73 28 1b 12 87 37 84 f1 29 8c 4c c4 6e 4e 4c 21 c7 f9 38 bf 3d aa a1 4a 61 d8 50 f4 9e d6 fa 67 dc e0 cc ae 84 f2 57 05 87 21 d4 33 5c 4b 80 e8 9b b2 d6 Data Ascii: nM ip{x]`T(#9T<#xy0;Cy+4'8h= `sC}fQHR6KTOe#H3>8Z'(})MV*+O_r#`%C\A\s(7)LnNL!8=JaPgW!3\K
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 0f 5e cf d4 19 b0 1a 38 c7 92 ea c1 8f 23 dc da 56 43 ab 76 84 70 56 ea 52 d3 0e 7d 76 26 60 a7 a5 d0 8b 58 28 45 95 98 84 9d 02 e3 f1 34 98 c9 81 56 13 b1 53 66 d6 9f 0e c7 72 eb a9 c9 d8 29 c2 46 c1 30 90 dc 23 27 64 a7 84 2e a6 c4 a4 ec 14 d0 45 10 97 98 92 c7 fa 60 af 8e fc 25 06 cb 05 6c c5 9f 60 51 39 55 84 87 39 30 7e 0a b8 54 79 3c 03 08 f8 9e c7 3f 1b 00 1a 0b 03 e8 b9 69 1b ef b2 10 17 a5 d5 df 97 79 30 2b 6d e3 5f 58 72 c3 80 d8 05 b6 71 9c e3 e0 df 36 ea 56 44 97 bc e9 65 96 66 f0 b5 10 21 5b b5 7c 02 bb 50 b6 5c e5 8a 1a f3 3c 88 62 20 f9 3e e0 a5 14 f1 c9 8e 4a 68 b5 47 58 94 b9 6d f0 77 62 a8 91 c9 31 e2 35 31 78 7d ca c3 59 30 35 84 96 a4 93 42 4e d0 2c 58 c6 09 34 09 6c 98 16 cf da 99 81 bd 0a 02 2b cc d9 72 b7 a5 5b 01 4d 1b 60 7d 2d 8b Data Ascii: ^8#VCvpVR}v&`X(E4VSfr)F0#'d.E`%l`Q9U90~Ty<?iy0+m_Xrq6VDef![\|P\<b >JhGXmwb151x}Y05BN,X4l+r[M`}-
2024-11-01 15:52:28 UTC	863	IN	Data Raw: 8f c7 98 f1 bd d6 b8 05 c4 59 63 3f 8b e7 c1 c1 c1 42 fd 88 4b 1e b3 9c 8e 27 f1 de 83 0c 50 5f 51 d0 0b 57 60 09 e2 05 93 ac d8 78 df 6e ea 70 2a 47 dd 69 71 ee 7c b2 ae b6 5b 84 c7 f2 db 2e 42 65 c8 2f 0e f4 21 8e d8 60 81 79 0a 62 51 39 08 5b 53 7c ab d1 a6 72 a5 b8 40 eb b0 00 6a d3 6e 37 5b 9a 13 95 b9 a5 f2 a5 94 36 c4 80 55 6a 2d 65 f0 e2 57 cd da 54 f9 d2 08 a9 74 a5 74 c4 a4 f9 a1 4a 91 21 dd 2c c2 eb ed 96 6a 68 1a bd 82 a6 81 76 ea 68 26 92 f4 c8 54 9f 01 de 55 71 ab a6 0b c4 ef 0d 58 14 50 6e 29 5e ae 4a 25 e4 01 a7 5f 51 ab 9a 13 ab 62 1d a9 f0 26 ae 23 8f e4 a4 ed 95 16 e9 56 43 e3 55 85 c4 9c 56 f8 82 2c a5 b4 42 be 0c 12 51 4f 5a 2d e4 4b eb c2 9c 1c 68 ae e5 85 22 e7 5a 43 fb 8e 73 20 c4 b6 f1 84 5a 6c 70 55 29 12 a5 69 4d 42 43 24 70 e7 Data Ascii: Yc?BK'P_QW`xnp*Giq\|[.Be/!`ybQ9[S\|r@jn7[6Uj-eWTttJ!,jhvh&TUqXPn)^J%_Qb&#VCUV,BQOZ-Kh"ZCs ZlpU)iMBC$p
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49806	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/94940.0b7c2d9e5c367a9c5362.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7bd05d5383759c044fc6a6e4cd0dd8e5 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:10:26 GMT Expires: Sat, 25 Oct 2025 16:10:26 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603722 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 66 66 62 0d 0a 00 00 00 02 ff ec 5c e9 73 db 46 96 ff be 7f 05 8c 24 32 90 00 10 0f 91 e2 61 ca f1 d8 9a 1a 6d 9c 19 97 25 cf 56 ad e3 92 41 a0 49 c2 02 01 0c 00 ea 30 cd ff 7d 7f af 0f b0 01 92 96 93 4d 4d ed 87 35 63 8b ea d7 e7 eb 77 bf d7 31 57 05 33 8a 32 8f 82 d2 1c 5b 05 8b 67 de 1d 9b 66 7e 70 f3 72 b1 4a 6e 6e cb eb 55 74 bd f4 a3 64 f2 15 d8 97 2f ef 3f d8 5e b6 2a 16 d6 fb f7 c3 93 e1 49 eb 83 b3 3e 39 69 77 4f 46 56 e9 30 27 b7 27 67 eb 5b 3f 37 d2 49 6e 9d 0c 4e 5b 27 b6 13 e1 6b bb df 3f e9 d9 4e 81 af 83 5e a7 d5 b2 1d 1f 5f 3b 83 4e 77 Data Ascii: 00000001000000010000000100000001000000010000ffb\sF$2am%VAI0}MM5cw1W32[gf~prJnnUtd/?^*I>9iwOFV0''g[?7InN['k?N^_;Nw
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 8c 67 c7 fe 99 f1 d1 76 b0 76 e1 45 b3 57 5c 6e 86 b6 55 7a b4 ac ed 94 9e c4 ea 9e 1e 72 1d 68 36 ef 97 5f bc 62 91 de 5d 09 b6 c5 28 a2 46 db b6 37 1b 27 f0 8a f2 21 66 c5 84 1f 6f 95 14 fe 8c bd bc bc b4 ad d0 7b 61 3b 81 3d 86 8e 05 08 c8 97 3a c9 b6 d6 a4 77 46 42 94 6f ec 0f ce 9c 60 65 4a ad 8e a9 b1 b6 e9 08 9e b6 9d f9 44 cd 12 ac 8a 32 5d 4a 51 6e 5b 7a 77 88 9a e5 d2 cf 1f dc d2 9f 17 26 cd 6b 6f 1c ae dd 35 ad 4e 2a 78 d8 16 2c 70 58 bb f7 3b 83 2e 34 36 69 77 a9 e8 93 89 45 8a 1c 26 82 ed d0 97 fe b0 67 0b 45 df ee 75 3b 5d a1 e8 87 fd e1 e0 54 28 7a 69 09 04 5b 4b 20 c3 d7 76 b7 d3 c6 bc 2b 7c 85 4d 00 b3 82 2b ac 85 33 77 66 ce ad b3 74 1e 9c 3b e7 de b9 71 ae 9d ef 9d 5f b6 b6 c1 e5 ff db 06 7f 92 6d 70 31 b1 16 5f b3 0d b8 ee cc 57 24 b4 Data Ascii: gvvEW\nUzrh6_b](F7'!fo{a;=:wFBo`eJD2]JQn[zw&ko5N*x,pX;.46iwE&gEu;]T(zi[K v+\|M+3wft;q_mp1_W$
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 22 82 7a c5 99 1a f1 39 10 ba 60 f0 f3 07 76 48 da 2d b6 42 09 18 e7 58 2e 16 51 56 8b d7 2d b6 de c5 62 b2 f0 12 56 de a5 f9 cd 75 9c 0a 85 a5 db 30 8d ae 4b 08 ec 06 78 81 f3 c1 4b d2 49 ea 0e 24 75 c7 49 4a 33 95 35 99 d3 16 e1 cd ca 9c e3 46 ec d7 4c 9d 30 a5 14 85 54 75 df 6c ec 3c 62 1a 7f 4d f0 d5 d5 e4 be 38 12 b7 9a 5f f1 7d fd 59 86 b3 90 67 a4 88 f7 c9 2f 53 22 81 5b 24 e4 ed 5e 1e ba 69 cd 9d bd 54 c4 75 b9 73 cb 1e d9 17 30 e0 84 41 4b 13 5e 7c c3 84 17 6a c2 8b 83 13 6e a5 53 d3 86 23 8d 4c 0b bd fd 86 85 de aa 85 de 1e 5e 88 9b 27 9c d5 4b 95 f8 10 2c bd cf fc 53 8b 6f 1d 6e af ce 20 1a da 4a b5 38 22 77 0d e6 a8 d0 06 76 6c ca 0f f0 a7 b2 1b 75 31 ac 0c 91 ab 43 c7 d6 ac c7 ab 2d 6b 5e 4d ae 84 c5 81 04 ca 2d 0f 42 64 d7 7e 18 c2 cd af 31 Data Ascii: "z9`vH-BX.QV-bVu0KxKI$uIJ35FL0Tul<bM8_}Yg/S"[$^iTus0AK^\|jnS#L^'K,Son J8"wvlu1C-k^M-Bd~1
2024-11-01 15:52:28 UTC	293	IN	Data Raw: ab 46 62 5a 8e c4 58 29 23 63 10 82 54 72 a9 f1 00 3a 88 16 d3 1c 83 f9 2d fa 05 42 7c 9c 3f 53 84 33 ce 7f 9a b4 55 35 5d 4a 89 f6 85 9f bf 28 c1 3d e3 e2 2e 22 d5 83 0a cd c0 2f 98 f9 cc 1c b1 9f 26 e6 51 5c 8e cd f1 14 35 65 37 63 de 7e 26 db e7 8d f6 23 d9 ee 2f b3 fa 80 63 09 f8 ee be f3 d7 1a e4 a9 f9 54 2c f1 af 55 da 98 ec e9 76 cc 69 35 06 f5 91 fe 2a 2e 69 4c ba 51 95 48 6c 03 b4 48 9e cf b9 7c 78 cb e6 e7 f7 99 65 fe f6 db 8f 53 36 8f 92 eb 05 22 ce 90 a4 8b 12 2d a6 63 ce 4d 94 4e 21 29 ad 64 5e fe 88 ac ab 09 1f 6d 72 84 2f 1e 9b 3a d5 a4 62 25 97 88 22 ab 69 12 b9 21 49 20 fa be 22 0c 9e e6 c7 10 a8 ce fb 35 39 1d 23 b6 f9 00 d2 e7 d5 b6 9a d1 a3 2c 9b c1 b0 77 82 3a 1d 94 f4 7a 30 04 44 41 6f 77 80 3a 1e 5e f2 83 b6 c2 b6 50 a9 0a aa 82 ea Data Ascii: FbZX)#cTr:-B\|?S3U5]J(=."/&Q\5e7c~&#/cT,Uvi5*.iLQHlH\|xeS6"-cMN!)d^mr/:b%"i!I "59#,w:z0DAow:^P
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 98 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a 04 0d 0a 30 30 30 30 30 30 30 31 0d 0a cb 0d 0a 30 30 30 30 30 30 30 31 0d 0a f2 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 39 63 38 0d 0a e6 23 28 bc 86 c4 f9 a2 34 3a ad 76 db ed b4 3a 5d 94 c8 31 6d a6 17 ab 72 81 3a 44 de fb 75 14 30 54 3e 84 06 55 80 e5 c6 af 17 57 da 02 51 b9 58 4d f9 d4 e5 dd b4 38 ae 56 3b 9e c6 e9 f4 98 02 8b c7 af 2f 5e 9e ff fd f2 9c 2f 7d 3c ca b1 9f b5 eb 4e 0b 77 0a bb 69 64 7c d7 9a 9e 84 a1 3f e6 4d 90 8b d1 3c 45 63 bf df 6e cd 3a a2 31 5b e5 19 e4 09 1a Data Ascii: 0000000100000001000000010000000100000001*00000001(00000001000000010000000100000001009c8#(4:v:]1mr:Du0T>UWQXM8V;/^/}<Nwid\|?M<Ecn:1[
2024-11-01 15:52:28 UTC	1235	IN	Data Raw: 91 f9 34 aa 43 63 22 d1 6f f3 a3 f3 e3 68 34 65 e8 c9 e8 1b d4 25 cb d7 d3 14 58 8c 3e 03 13 23 39 0a 2d 9b 9f 97 78 f2 e5 5b 19 5e ee a0 1c 1e f5 88 21 18 23 74 97 a8 cd 14 52 02 49 0b 02 51 20 d4 5e 0b b7 0f ef 3f d3 38 76 a7 6c e1 df 46 50 28 c5 12 ce e0 62 b3 f1 d7 02 4b 1c 49 15 61 d6 25 13 f4 64 1d 22 d1 0e e9 09 55 c9 6d 56 4d 4a 91 90 da f8 23 2e 9c d6 5c 59 d6 67 d3 e8 7f 9f 98 b2 31 16 e1 35 eb 3d d5 cd 7c b0 c5 77 1e 53 fd 00 af fc 20 48 ae 27 0e a3 c4 ef de ad 15 b7 f3 35 0a 9e c8 0a 89 91 8c 44 a4 73 b4 8c 42 d4 e2 6e 46 23 e0 f0 33 34 3e 91 5f 94 e0 c1 dd 3a 43 61 02 61 bf 35 96 f8 e7 05 da d8 05 ce 88 ee 78 72 8c 47 8a 70 27 4b 58 35 28 93 c7 bd 94 ee 8c 42 d2 85 7b 87 b0 00 9e 8d 38 87 ba d1 e6 0e 02 51 00 8e 5a b0 83 e0 05 cc 2d b1 ce c1 Data Ascii: 4Cc"oh4e%X>#9-x[^!#tRIQ ^?8vlFP(bKIa%d"UmVMJ#.\Yg15=\|wS H'5DsBnF#34>_:Caa5xrGp'KX5(B{8QZ-
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49804	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/26044.e227fd5c65cff1753dd6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: dbd7fc8ada43e0953a4bde5ab3d26926 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:11:48 GMT Expires: Sat, 25 Oct 2025 16:11:48 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603640 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a be 0d 0a 30 30 30 66 65 64 0d 0a Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001i00000001s0000000100000001F000000010000000100000001000fed
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: d5 ff ca eb 7c dd 8c f7 62 a5 49 73 80 79 13 46 60 9c 7f 6a 7e fe f1 63 ee d4 ac ac f2 c5 d8 3c c0 3a 6c be 63 0f ff 53 6c 16 d5 83 80 5e 89 20 41 dd c3 f6 c0 47 38 34 7e bc 72 7e 4a c9 be bc 61 8b a2 86 bd f8 77 5d 8e 47 ed aa 66 79 7b 03 99 6b e6 f9 96 8d ac 51 8f ee c8 52 60 d6 00 73 f4 61 56 e6 9b bb 91 d8 fd f5 e6 9b 3a 7f 80 16 42 07 6e 9d 7b be 83 6c e9 57 18 59 ad 79 18 f0 80 13 9a c1 78 8c 14 33 a0 10 ed 2b 4e 38 02 b2 5b 96 99 13 de 78 a2 c3 62 ec 29 fb c4 f0 53 c2 98 07 f0 6e 01 40 05 83 b9 b7 52 56 89 28 ff d9 74 3a 6e 4f 28 7f 71 21 74 14 bd b0 ab 2d 57 54 61 bb 94 0d ff f8 51 cd 86 44 92 ed e9 e9 06 e3 d8 cd 06 ae cc 29 9a 1b f0 0d 76 e8 15 37 29 ab 76 5d 9a e3 a7 8f 1f c7 4f d3 d7 3f bf 58 14 f7 06 b7 78 d3 d1 83 ed b9 ae 51 16 4d 6b df d6 Data Ascii: \|bIsyF`j~c<:lcSl^ AG84~r~Jaw]Gfy{kQR`saV:Bn{lWYyx3+N8[xb)Sn@RV(t:nO(q!t-WTaQD)v7)v]O?XxQMk
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: ce d5 87 e9 78 33 9d 0b 00 b4 c9 1b 74 2b 4b 33 32 3e 1a a3 93 4d b5 05 16 58 e0 8c 53 d7 0d de e2 e2 62 a1 d6 d3 7c fc af 60 d0 af 60 d0 5b 99 de 2f 0c 62 15 8f a5 25 7f 64 40 a7 1c 09 8f 9f 3b 36 cc 15 99 ce ee 2f e3 2a 4a bb 50 a1 23 63 03 53 73 6a 12 be 01 0c df 00 86 df 12 91 ce ac 7c 4a 4a 7a ff 49 d6 14 3e 48 f0 bd 9b 2b 58 df 3a 4b 64 5f df e5 6b 86 64 9d 91 ab 10 4c 21 45 15 02 36 ef 95 b3 51 ec d1 24 4d d3 20 11 5f ea b4 ae 5f d5 13 d7 b4 bd 57 23 0b 7c 1b 21 69 25 ab de 09 8d b2 c2 bd b3 3b 36 c4 5d 56 4f 0e 6c 60 71 9d 0e 91 a1 f1 fd f8 91 39 22 3d 97 e6 9b 04 12 61 c6 35 bc 0d 15 9f c6 aa 18 a6 f1 fe 5b d0 fd 5b 4e f7 4f 04 6b c3 70 69 a0 97 3c e0 21 7a 8f ce 6b 36 8c 7a c3 d6 c5 0c f1 f2 f9 90 a9 4f cf 44 a0 d4 45 2b 88 7e 24 1f 29 7d 1c 84 Data Ascii: x3t+K32>MXSb\|``[/b%d@;6/*JP#cSsj\|JJzI>H+X:Kd_kdL!E6Q$M __W#\|!i%;6]VOl`q9"=a5[[NOkpi<!zk6zODE+~$)}
2024-11-01 15:52:28 UTC	460	IN	Data Raw: c3 51 73 9f 7e 8e 08 70 34 66 e6 2e d8 4c 9a 2a 41 84 a3 01 59 36 cf 97 12 d1 8e 10 47 63 96 d1 3c c9 a4 e8 29 62 1c 0d 61 69 9e e4 52 7b 24 41 8e 46 e8 66 4a 10 e5 68 80 6e 82 b8 c5 94 3a 16 41 bd 7c f9 4b 20 cb 0d 6c a7 9f 50 51 49 aa 25 ca e9 36 2a 0d 0d 32 bb ba 58 4e 8c d1 db 6a 57 cf 99 f1 16 6d 06 ae 54 20 e3 7d 53 cd 10 8d a8 bf 38 96 5d b6 96 f1 0f 56 de 33 9c 15 e6 16 8e 5d 70 a8 67 19 fd 2a 62 4b be f4 ba da 54 a8 30 cc 21 9f 6a e5 eb 6a c1 e4 ca 5d af 98 01 1b bf 28 10 10 4c 70 66 c9 83 4c d5 30 c6 99 c9 82 dd 5a 06 2c 53 3e 56 98 49 1c 5d c7 c3 fd 9f f3 5d 70 f7 c2 4b 52 89 91 03 b4 cc d7 45 09 63 2a 4e 3f e1 40 8f 28 70 32 a1 c1 b9 ca c4 ab d9 fa 78 a5 07 1e b3 4e 0c a8 be d6 45 90 db 22 9c 85 0d 75 94 7f a3 fd 91 8a 54 64 72 11 29 c0 05 6b Data Ascii: Qs~p4f.LAY6Gc<)baiR{$AFfJhn:A\|K lPQI%62XNjWmT }S8]V3]pgbKT0!jj](LpfL0Z,S>VI]]pKREcN?@(p2xNE"uTdr)k
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 66 66 30 0d 0a 19 21 4d a7 3a b4 c4 91 a5 d4 24 61 51 e9 6e d3 c4 68 aa 12 f7 65 f4 0e b5 0b 8b 58 a6 ec b1 5c 4a 48 0d 62 ec 4d 53 ee 28 dd 9a 08 a5 25 6b 24 fe 73 bc 24 ea 14 90 ef 43 16 61 07 8f ef 3a 41 12 69 4a a8 75 e2 06 01 f5 fb cf 75 97 d0 1e d7 79 ae f7 11 d1 a9 ae dd fa c2 8f d4 e9 3f b3 ab 4f 9d 9d 15 91 28 0a 70 6d 4c 3c 87 86 4d 59 fe c4 88 5c 6d c9 47 bb 59 e5 b8 76 03 18 25 94 1c 9c 53 ca f4 84 51 53 04 e2 98 e5 71 dc 15 0d 4e a6 ba 1a 51 bb b9 9c 2a 62 ab 00 e0 9c 4c d2 39 d1 4d 2a 90 c1 80 6b fc 0f e0 f5 b6 8f 86 8f ff b9 55 d6 b8 d8 6f b8 ac 90 e9 d9 35 e9 93 14 a4 01 a3 b4 ee 0a 4e 02 d7 08 04 27 85 44 69 bd 52 aa f8 46 9a ec 43 6a c0 77 49 6a dc 34 Data Ascii: 00000001300000001&000ff0!M:$aQnheX\JHbMS(%k$s$Ca:AiJuuy?O(pmL<MY\mGYv%SQSqNQbL9MkUo5N'DiRFCjwIj4
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 7b 8f c7 08 74 e4 32 36 17 8b 97 e2 8a 7b 5b 8b 40 1f 5c d0 24 4d a3 b4 a6 ea 02 13 4d 0a 07 d2 09 44 a4 d5 38 42 5d 49 a1 42 43 bb a1 bf a7 db 81 4b 1c 70 c1 cb 70 93 a7 82 8b ae 5d 24 61 14 33 b6 d5 6e be 3a 38 fc 38 5f c0 ca 3f 22 dc e7 31 25 f9 29 d7 89 91 82 09 95 19 76 f2 7c 37 38 ea ec e3 6d d7 a1 dc 4d 9f c8 fb 4e 2b 8f 74 97 e0 c4 c4 74 81 05 a7 a0 d8 58 8a 8a 0c 14 7a 69 18 b4 9b 9d 07 2d 36 3c d4 c7 31 e4 fc 4e 79 19 2d 40 e1 db 2a 44 9f 4c 6d b9 41 cf a3 29 f2 0a 5e 4a ed b8 20 00 ea 90 95 63 24 6e e7 46 89 2e bc 4c a9 65 1f 1e 6e 47 51 55 f5 68 3c 6f 94 29 ab c8 c5 c8 4e b3 fa 4a 54 c9 45 45 7a 53 f1 88 e0 c8 76 cc f0 0a 1d ed a0 0c c8 49 4c c5 51 1b d2 4b b2 7f 02 fb dc 3e 75 91 22 8f 74 ff 72 c7 9e 96 78 49 0b ef bb e0 50 1f 27 a4 0d ce 6c Data Ascii: {t26{[@\$MMD8B]IBCKpp]$a3n:88_?"1%)v\|78mMN+ttXzi-6<1Ny-@*DLmA)^J c$nF.LenGQUh<o)NJTEEzSvILQK>u"trxIP'l
2024-11-01 15:52:28 UTC	1300	IN	Data Raw: 80 cb 44 fc 8f 9f 19 41 e8 00 e0 ec 1a 48 45 71 82 4f 04 aa 1a 85 4f 7c 1e fe 02 7f 74 ab 51 be 9c e7 5f ab 95 d0 82 d5 e5 28 b1 df a7 71 e8 f5 69 86 2b 5c 74 27 17 57 82 3e 81 44 96 71 46 e8 bc 19 f0 ac 67 63 02 f2 47 29 78 95 a6 8e 8b 69 61 e6 c4 01 b8 e5 39 69 1a 02 85 7f f8 de 8f 5e 94 39 59 12 5e 07 19 ee 49 e0 2d 77 2f c5 24 5c d5 8e 13 07 df f7 84 e7 8e f5 7f 2e 16 61 22 c8 0d 98 88 0f 20 77 d4 91 9b 3e 11 b9 e9 af 20 a4 1a e5 1b 62 9e 7f 1d 62 00 b1 09 2d 90 2f 39 0a 9f 68 1e b5 08 f6 aa 51 c0 5d ec f7 e7 22 a1 09 7c 08 5b 92 fa fe 75 04 95 08 bd cc 88 3d 27 49 41 3f d7 80 72 24 11 af 30 5e 43 5f bd 14 c1 87 a1 46 79 90 1a df 83 dc 77 9a f3 69 00 bb eb 9d ea 5e 2b 04 66 11 2c 92 e5 f2 13 02 03 22 b8 60 f3 40 ef 02 d0 27 4a 00 47 9a ba 11 14 1d 60 Data Ascii: DAHEqOO\|tQ_(qi+\t'W>DqFgcG)xia9i^9Y^I-w/$\.a" w> bb-/9hQ]"\|[u='IA?r$0^C_Fywi^+f,"`@'JG`
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49803	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/92285.13a9b4319a138ac2aab7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 966d7a90e4a5c77204f3349235cbb3b7 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:19:55 GMT Expires: Fri, 31 Oct 2025 12:19:55 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99153 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a b5 0d 0a 30 30 31 0d 0a 7e 0d 0a 30 66 65 65 0d 0a ef af 80 d9 8c 87 9c 01 19 df 23 cb a6 bd 53 27 99 b8 71 9b Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Z00000001[00000001s000000010000000100000001001~0fee#S'q
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: a4 49 0a 79 0e 38 91 50 34 2c 0e 03 86 89 38 27 6a f1 62 ed 2a 61 e3 2a 61 8d 29 e4 58 58 fa 8b 61 7a 40 3f 8d ee fd 1c b6 97 44 2c bb 2f e8 3e 7e 29 4e c8 71 3e 61 71 6c e7 b4 0c 6e 10 45 22 26 99 2f d3 34 96 62 ea ab f1 a1 73 05 9d 24 4a 58 04 ff 27 a9 24 ec 0e da cc fa ea 45 42 d2 59 46 a6 b3 3e 34 9d c0 f6 01 e5 84 49 a2 18 45 26 a9 32 a4 c0 21 bf 4d 52 38 0b c5 da d0 51 87 06 81 7f 72 4d c8 44 1f 0c 07 d4 c2 b1 b2 29 14 8f 0e 02 91 0c d3 33 91 0d 62 7e 0e b6 50 16 7c f8 00 55 4a e7 57 e6 68 5e b7 22 bb 17 90 dd 0b c8 6e 8d 14 76 40 ef 31 23 59 1a f3 d0 81 aa ca 34 71 2c 47 9f 94 30 19 67 7c 58 1c 99 fc a6 c1 c0 fe 32 6c e6 b9 14 51 e8 64 e9 5c 9b aa 2f a2 52 e7 18 36 ad a8 6b 45 2b 76 c8 30 f7 f7 1b 3a 9b cf 0c 5c af 27 d5 ac 00 69 b4 10 52 93 f7 59 Data Ascii: Iy8P4,8'jbaa)XXaz@?D,/>~)Nq>aqlnE"&/4bs$JX'$EBYF>4IE&2!MR8QrMD)3b~P\|UJWh^"nv@1#Y4q,G0g\|X2lQd\/R6kE+v0:\'iRY
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 55 79 ea 1a 9b a7 3c 51 85 ab 22 1e ae c3 2d 2d ca 5e dd 4a c5 2b 4a e1 5d 11 fc a2 b6 05 93 87 17 53 30 95 61 5f 24 21 fa 1d 92 96 19 2a 6c f7 44 5b 00 3c 37 2a 26 ca 91 19 14 25 08 d7 51 90 5b 50 4d 6e 62 c0 cb 8f 2d 7a 2d 49 1e c5 69 ff 59 e4 b6 e1 5f 49 f7 eb 84 c5 f7 39 28 46 8d 91 80 40 a5 7c 24 4a f5 01 a6 59 7a 27 22 24 3a 86 88 ea 41 2c 7d b9 18 25 0c 85 74 be a4 cb 52 fa c9 64 02 74 0d 33 37 36 f8 92 08 7e 7a 73 55 2d 18 aa 45 c1 96 fe 3d e2 6c be b8 a9 32 17 ec d7 a4 2d f7 cd 9d c5 b5 2d 16 97 e5 db 2b c4 30 57 3a 5a 6a af 87 6d eb 40 b6 8c 80 6d b5 56 04 13 36 75 91 66 9e 54 6a 7d 67 58 ec 4c 05 44 4f 87 c6 2a 12 6a a4 81 26 ec 35 1f 5a 2a 9a ea 83 ae 4e 98 10 36 0b 74 9d f9 1f 6c ea b9 0f 4e 19 d9 39 5d b8 e7 42 09 17 08 4e 83 42 e9 a8 cb 71 Data Ascii: Uy<Q"--^J+J]S0a_$!lD[<7&%Q[PMnb-z-IiY_I9(F@\|$JYz'"$:A,}%tRdt376~zsU-E=l2--+0W:Zjm@mV6ufTj}gXLDOj&5ZN6tlN9]BNBq
2024-11-01 15:52:28 UTC	440	IN	Data Raw: cc 39 45 44 b5 42 1b d5 55 57 9c 0b 4b 02 6e a6 d1 49 96 07 17 1f 02 a5 9a ae 83 ee 02 fb 4d 37 e6 e4 68 e2 8a 58 8c 84 19 17 13 c8 88 78 f4 16 45 6b 89 90 a9 ab 0b 51 d5 5d 16 d7 30 b8 c6 3d bf e2 93 2c 82 69 dd f8 87 ab fd c1 ed a9 9e c6 b0 d2 a7 74 3a 9b fe 0d c5 96 5b 9e e5 17 68 30 41 f1 40 f5 1c a2 e3 d1 f6 2d 9d 27 6f 32 36 e7 d9 7b dd 96 98 61 c5 b2 07 6e a5 e1 ed 1d 7c c6 bb f0 d3 cd b1 4a 45 fd ba f9 10 5d 92 b4 7d 48 fa c0 48 f0 ec 6f 55 a6 c3 c5 13 9f f8 8a 59 b5 b7 a6 1f 14 3d 4a f6 ed 6f 7a 75 4d e9 f2 55 8d 6d ab 6f d1 c1 51 bc 3c 39 7e d9 42 1c 3a 39 98 ee a5 51 5c 51 29 f5 6c ea f7 0b be 38 64 2c 50 3a 4e 48 e3 e6 b3 1a 81 60 55 1d 92 2f 05 42 2d 52 d6 80 55 ed dc 80 54 0b 69 cb 99 40 4e a3 98 0d 59 16 da 5a a8 e3 3b ac 54 7f 03 65 7a f6 Data Ascii: 9EDBUWKnIM7hXxEkQ]0=,it:[h0A@-'o26{an\|JE]}HHoUY=JozuMUmoQ<9~B:9Q\Q)l8d,P:NH`U/B-RUTi@NYZ;Tez
2024-11-01 15:52:28 UTC	82	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 31 0d 0a ff 0d 0a 34 0d 0a 0a 2f 00 00 0d 0a Data Ascii: 000000010000000100000001/00000001000000010014/
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49807	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/76194.9a49eca4de4d4a1bd1bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 677636860bfac24c3af1da0e97178cf9 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:04:10 GMT Expires: Sat, 25 Oct 2025 16:04:10 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 604098 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 7d 6b 77 db 46 92 f6 f7 fd 15 30 33 51 88 59 00 02 c0 3b 69 da f1 30 99 8d ce c4 71 4e e4 c9 9e 1d ad d6 01 c9 a6 88 11 09 f0 05 40 5d 42 f1 fd ed fb 54 75 37 d0 20 29 7b 26 9b 0f 7b f6 d8 b2 4d a2 af d5 d5 75 eb aa 6a a8 99 8b d5 c2 bb 17 d3 4d 34 bb 9d 2c b7 c9 ed 5d f1 61 1b 7f 58 47 71 32 fe 48 dd d3 d3 d5 b5 ed 6d b6 f9 b2 79 75 d5 eb 06 83 b6 d3 e9 74 fb 9d 6b 67 c7 9f c3 a6 70 32 a7 b0 c7 af 76 8d 6d 2e ac bc c8 e2 59 d1 18 15 5e d6 cc 6c a7 f0 e6 cd cc d9 bd b9 b9 c9 c4 4d 54 c4 69 92 bf 8f a6 2b f1 6e 31 49 93 42 24 c5 b0 89 ae db bd 3d ba 8b 32 2b 1d 17 cd 76 bf e7 b7 6d 27 c7 d7 a0 db 6d 77 6c 27 1a 37 Data Ascii: 00000001000000010010ffd}kwF03QY;i0qN@]BTu7 ){&{MujM4,]aXGq2Hmyutkgp2vm.Y^lMTi+n1IB$=2+vm'mwl'7
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 54 d8 52 42 28 a6 2f c6 4d cd b7 d9 18 db 35 f5 7e 78 f3 f6 db 0f df 7c 7b 39 f9 f0 f6 cd 8f 3f 5e fc f0 6f 76 d3 06 7d 98 7c 9c 69 3e ce 58 3e a1 2a f2 ee 07 5e 91 32 6e 27 51 2e 20 81 1b 1f 4a 3e 36 c8 e0 06 64 70 c3 64 10 1d 50 b2 66 a2 b9 3b 5d a5 b3 db 06 d8 86 f8 64 ba 05 27 24 8a 0a 0e 76 96 77 db c0 86 de a7 da ae 95 1c 12 31 2f e4 8e 50 82 b4 86 68 7b 6f db f6 b0 d1 a0 8f 7d 1d e3 4d 08 03 96 18 b5 1d 83 2e 99 6d 33 c8 97 e2 3d 64 b6 80 f6 06 99 42 a8 7a 0a c6 bd b9 91 34 04 89 5a a8 93 91 f0 36 99 b8 43 bf 6f c4 22 da ae 20 85 1d e1 e5 90 02 a4 3c 22 a9 f9 9b b6 da 9e 94 65 32 a8 a3 99 7d 6a 42 28 30 29 5d d1 1a 72 13 6b 81 65 40 7b 4b bd 8b 67 7b 1b e8 33 47 28 5e 17 18 61 c4 eb 9e c7 f9 26 2a 66 cb 6f 09 ea 66 22 ee ad c9 16 00 af e5 73 43 2e Data Ascii: TRB(/M5~x\|{9?^ov}\|i>X>^2n'Q. J>6dpdPf;]d'$vw1/Ph{o}M.m3=dBz4Z6Co" <"e2}jB(0)]rke@{Kg{3G(^a&fof"sC.
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 3d 9d 00 50 37 8f 56 b3 ed 0a 53 5c aa 8d 95 28 3d 81 17 db 79 71 e4 a7 b1 78 e0 52 06 9d 9d bd 38 9e c9 74 17 6c 80 b6 cd 78 52 3a 5b f2 5b f8 a0 70 10 84 ff 84 45 03 bb 4f 5e 69 7f 87 ae 7d 85 43 77 e2 fd ea fd 20 c4 3c ff 3e ce 8b 4b d5 cd 1e ca f9 8e 37 47 52 ad 77 2b 1e 95 5f e8 b0 89 ad 78 e7 14 6e 5e f3 22 a4 93 c9 c4 63 d3 1e 1a 67 de 35 d6 b2 36 d7 b2 11 b3 38 5a b9 7c 10 c9 2d 2f 5e 83 f8 7e 8a ee d5 f1 15 6e 1c 9c b7 12 75 3c 66 77 44 e3 d5 0f 29 7c 37 06 d9 c0 a9 09 93 f7 e5 39 b5 ac fc 3e 79 6d 64 3e ef c6 cd d2 c9 55 87 90 2c 55 b5 09 c7 84 a0 ad 56 b6 b9 2c 01 79 3b 52 88 c2 d9 26 03 d9 3e bf f9 1e a4 d1 b7 11 ac 53 18 0e da 91 54 8c b3 2b ff 1a 76 6a 76 15 5c 8f c8 40 20 5f 43 ea 49 d7 d0 16 f8 d9 02 3f b4 a7 da 71 a7 8f 6f 68 ea 41 9c c1 Data Ascii: =P7VS\(=yqxR8tlxR:[[pEO^i}Cw <>K7GRw+_xn^"cg568Z\|-/^~nu<fwD)\|79>ymd>U,UV,y;R&>ST+vjv\@ _CI?qohA
2024-11-01 15:52:28 UTC	261	IN	Data Raw: 1f 7e bc f8 f9 dd fb 4b 1d 28 2c 85 73 73 67 18 de 10 c4 06 39 b0 cd 3e 54 4b 66 80 05 f9 e5 d7 79 cd 92 82 97 13 e7 1f da 6b d0 31 10 40 c7 5a 1c 2a 49 c9 e2 9f 13 7b 39 e4 05 4c 7e 56 2d 08 13 7a f7 51 96 34 1b 7f 85 8d 8e 3c 8b 78 11 23 da 5e b3 7c 1b c8 e2 50 46 9c 3a 84 6b c5 2e 0f 18 c9 5c 1d 2f 0c c0 11 8e 50 21 3a a0 47 00 98 e3 93 c3 f8 0a 29 1b c7 c5 0e 4a 63 65 04 22 ce 84 68 17 80 ae a1 92 cc 46 91 cb e3 a3 82 44 66 79 40 8d 48 b3 56 c3 27 5b 6a bf 8c 3a 7a 03 18 73 b8 1a 01 98 15 39 db 9a fb f4 a4 71 4b ae 02 1d 94 d4 dc 48 87 26 29 39 4c e6 c8 ce ce 32 8f ac 79 52 c4 15 eb 92 0b fe b8 31 a4 0f a2 0c 68 7c 31 57 50 7f 22 7e 78 fa e0 60 c4 11 f5 cc 48 1b 51 52 4d 97 38 72 9e 7a c5 c5 7c ef 60 f3 37 60 df f9 10 d1 91 e9 76 0a ee cd f1 15 db 80 Data Ascii: ~K(,ssg9>TKfyk1@Z*I{9L~V-zQ4<x#^\|PF:k.\/P!:G)Jce"hFDfy@HV'[j:zs9qKH&)9L2yR1h\|1WP"~x`HQRM8rz\|`7`v
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a e4 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 31 0d 0a 74 0d 0a 31 36 39 30 0d 0a 5a 54 41 c1 e7 86 90 74 7d 34 82 41 ff 39 bb 60 ca 98 e4 3f 39 d0 01 4d eb c8 a6 1e 85 1d 0a 1c d9 ac 2d 40 91 d2 6f 06 5f 5a 4a bf b9 7b e9 4c 3c 1e e1 19 80 4d 7c c9 Data Ascii: 00000001000000010000000100000001J00000001A00000001I00000001Q00000001B000000010000000100000001w00000001f0000000100000001000001t1690ZTAt}4A9`?9M-@o_ZJ{L<M\|
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: ae 00 9b 7b ab 2b 6a db 58 55 48 a0 0e b7 91 eb d5 7d 14 e4 bd 0c 29 33 4b c9 59 ae 5a a6 48 30 28 47 36 f5 fc 61 b5 1c ff 48 39 cf c0 54 55 7f c3 9e 5b 82 12 a5 74 d1 5b 6a 92 5f 55 2b 77 4b 2c a6 42 6d 84 12 9d 32 d4 60 05 9b 07 4d 90 74 03 01 91 69 dc 26 19 5a 79 8a 74 b5 5a 85 9e 45 74 c4 40 cb 63 35 94 a4 1a d8 d8 49 be da c2 1a 06 83 30 3f 93 34 92 7f bd a0 d7 29 19 90 e7 21 89 b0 85 c6 f7 bd 56 af 63 30 a1 51 e9 e6 6b aa 0f 9f ab 5e 81 7b 7c ef b9 da 07 58 a7 26 77 9b 03 3f 50 65 f8 cc ac 21 55 96 52 44 2d 51 82 eb a2 e3 a9 65 b0 3b 7a 68 75 7c 63 c8 07 dc 95 21 af 2c 60 54 50 32 38 c7 98 a9 10 a3 bb c8 85 a3 57 c0 6b d7 38 38 ea ea 1b 48 2d fb 32 56 e4 54 2d 80 73 d4 c9 dc 89 b2 13 8e 69 02 bb c6 1f 80 17 44 61 85 f8 77 b8 8b d5 84 0b dc 12 ca 5d Data Ascii: {+jXUH})3KYZH0(G6aH9TU[t[j_U+wK,Bm2`Mti&ZytZEt@c5I0?4)!Vc0Qk^{\|X&w?Pe!URD-Qe;zhu\|c!,`TP28Wk88H-2VT-siDaw]
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 0a d2 57 28 52 ad 7c 85 ee 4a 2c 8a 21 ca 50 24 63 5f 50 33 f4 12 c2 a1 0a 40 ef 8d 41 2d e3 3b f8 1c 17 c9 76 78 cb 42 54 0c 69 10 dd 9d 07 74 79 44 b3 af 6a af b2 73 34 98 b0 ff 86 16 7b c1 37 7c d1 67 84 17 80 92 92 43 70 f9 16 41 28 19 5e 0e 00 9b 8a b3 d0 57 05 26 5d c0 41 9c 18 05 07 d1 42 54 8c 4e c4 40 68 37 47 2c 78 0c ce e0 c2 c3 e7 23 d7 6f e9 ab ad f0 0b c0 f1 56 a6 2a 9a c0 97 f9 87 a7 1b ba 5c 59 6b 9e 09 84 f3 0a 08 69 44 87 e9 9b 39 94 0e 4c 0c 29 9b 42 64 66 15 a7 2d 21 31 12 ee de 44 45 e8 aa 39 95 7b 9b 71 66 cb 24 8e ca 91 ac 2a d9 f7 8c a3 98 0a e4 21 ef 0e 51 4e 19 79 8a e6 7f c7 6b 84 86 e2 01 6f 47 c4 9d 19 04 9d dd 5a d1 73 6d 8f 37 59 ca 23 be 25 78 7d e0 8b 47 10 e3 b8 fd 10 33 c6 08 5a 68 a8 e4 dd ea e1 94 f3 b0 13 44 71 9a 03 Data Ascii: W(R\|J,!P$c_P3@A-;vxBTityDjs4{7\|gCpA(^W&]ABTN@h7G,x#oV\YkiD9L)Bdf-!1DE9{qf$!QNykoGZsm7Y#%x}G3ZhDq
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: f8 b0 8f 2e 3f 21 3d 7e b7 54 44 b6 ba 94 e8 a9 db 8d 64 5e f7 c9 c5 b8 37 df 55 98 2b 3d ca 47 50 56 a6 2e ae cc 20 6b 17 28 56 99 e3 75 ed 6f 1a 0e ac fb f1 d2 88 0c 1b aa 1a 5b 5f 1c be 63 0e be 0a 99 d0 0b ab 02 91 88 c7 11 7e d9 12 72 7f f9 55 63 d2 71 21 29 92 5f b0 b6 97 6f 9f d9 91 5f 54 16 f7 28 83 b8 9e ef c8 af d7 1f d2 cb 78 84 87 df fa 82 e4 d7 7c fc d5 4b 44 77 2c 7a 77 c9 9f 52 fc 62 12 76 17 0d fa 56 30 e8 37 2c 38 41 56 e3 06 59 99 0d eb 61 bd c2 2f eb 69 d0 db 06 f0 b2 81 fb fb 7b ef be e5 a5 d9 cd 39 b2 6f fd 73 8c d1 78 85 37 08 58 2f f1 1b 16 96 f4 c5 b2 f0 da bc b7 18 06 29 d0 13 fa 08 3a 2d af db eb 56 9f 5c 45 13 4d ba 2d 30 52 8b 27 b5 5a a1 d7 1e b4 7a b8 b6 3d f0 5a 83 10 cd f1 37 f0 da 41 ff e7 56 38 c1 53 d8 f2 82 6e ab 6d 85 Data Ascii: .?!=~TDd^7U+=GPV. k(Vuo[_c~rUcq!)_o_T(x\|KDw,zwRbvV07,8AVYa/i{9osx7X/):-V\EM-0R'Zz=Z7AV8Snm
2024-11-01 15:52:28 UTC	345	IN	Data Raw: ee c4 14 84 e9 1e 04 23 9e 50 da 09 d0 1a 12 90 c4 28 71 04 3a 01 18 bc 91 09 cf cc 11 12 4d 8a 1f 34 96 ca 3a 89 a4 92 1f 14 92 34 4f d0 67 3b d4 3c 01 66 80 24 f6 21 37 88 29 7a 3e 3d 9b 60 63 19 80 a8 43 12 1e 62 28 68 93 76 81 1d 41 56 33 d6 a1 78 9a 29 0f cb 08 a1 bd a9 58 3e 43 49 61 d5 10 7d f5 6a f0 3a 2d 97 7a d3 02 81 dd 36 2d 90 47 c7 ba 7d f0 0a 71 30 3e 7d 9e 15 f4 c8 b3 01 2a 88 06 39 3c 7d f2 33 13 3a 49 0a f9 88 45 80 79 58 86 a2 bb c4 a6 01 3b 2d a6 e7 f9 3e 38 1f 38 f0 7b 7d 74 27 e9 07 e1 09 8b bc d3 27 7c 63 58 9c 48 a0 49 49 96 ea d9 d4 33 a0 83 9c f3 d1 bc ac a7 bd 03 eb 72 77 22 9d 01 99 5f 3c 7a 87 16 0f a5 07 79 43 04 d8 03 c6 b1 c6 2e ec 9f 3e 14 32 14 bc 1a 1d 7a 28 f4 5a 5d 1c 02 88 9c 21 30 54 3d 6d 36 b4 5e 10 c8 ee 24 a1 eb Data Ascii: #P(q:M4:4Og;<f$!7)z>=`cCb(hvAV3x)X>CIa}j:-z6-G}q0>}*9<}3:IEyX;->88{}t''\|cXHII3rw"_<zyC.>2z(Z]!0T=m6^$
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49809	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/33274.186e9fb49d3ce6fbe3b3.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 58356d7580f0179559a776da1a5f4967 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:12:26 GMT Expires: Sat, 25 Oct 2025 16:12:26 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603602 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 66 66 35 0d 0a 5c 6b 9b db 36 ae fe be bf 42 d5 b6 59 bb 2b 69 74 b1 64 4b 13 67 37 99 24 4d da 24 6d 73 eb ee f6 e4 69 65 99 b6 d5 91 2d 57 92 e7 92 89 ff fb 79 01 52 b2 3c 63 39 39 fb 9c a4 a9 21 10 04 41 f0 06 82 20 f5 4d 29 b4 b2 2a d2 a4 d2 4f 7b a5 c8 66 d6 a5 98 ac e3 e4 fc 6c b1 59 9d 5f 54 bf 6d d2 df 96 71 ba 1a 1f Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000ff5\k6BY+itdKg7$M$msie-WyR<c99!A M)*O{flY_Tmq
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 7f b6 0b 97 52 a1 e8 37 52 fa e7 a8 ec 1e 71 bf 6f ec 33 17 25 b1 a7 5e f4 d5 78 dc 2b c6 6d ce a2 44 d2 45 9e 4e 35 1b 89 c5 bd 7b 85 6a 4e 6a bb 36 e1 9e 08 aa 47 f6 56 b7 79 7d fa 24 79 a1 bb ae 3e 7d 5a 59 e8 26 4f e2 64 d1 eb 61 04 30 b7 5b 72 e7 7d fc d9 16 68 41 b4 d0 9e 0e 17 d5 32 eb f7 b2 4f 9f 7a d9 78 f9 bb f6 f5 8d bd fd 7d bf d9 1a 89 fe c1 4a 97 19 26 c8 30 41 86 fb d3 f4 42 e3 1e 32 d6 17 68 ae e4 5c 4b a9 57 98 45 7e a9 3f 60 76 da fd 13 10 3d 00 57 d5 df ce c5 75 79 b8 ce 7d 6b 19 af 7b a8 85 51 60 be 68 15 f7 1c c5 3d bf 55 1c 7a 94 56 e4 1b 54 69 6a 26 69 91 64 42 9b 9a e9 2a 43 5f 36 31 04 af b4 38 4b e7 2b 73 99 4e a7 48 9a cc cd 49 3e bd 66 89 ee 08 86 92 2a 8b 6b f1 32 5e f7 7b 37 bb ee 19 7d f5 15 eb 73 87 31 f4 b5 e9 e8 35 5e f5 Data Ascii: R7Rqo3%^x+mDEN5{jNj6GVy}$y>}ZY&Oda0[r}hA2Ozx}J&0AB2h\KWE~?`v=Wuy}k{Q`h=UzVTij&idBC_618K+sNHI>fk2^{7}s15^
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 04 63 43 4e d5 fd 89 f1 e8 4f e8 6e 04 fa ee 30 04 f9 9f 04 07 f8 03 92 ef 08 46 87 09 51 93 ef 09 c6 5e 35 04 fd cf 04 83 cb 08 34 bf 10 ec b9 01 b5 ca bf 08 76 ed 11 4a fa 37 93 60 a6 01 fa 3f 4c e2 60 fb 8f 7e 57 80 64 18 62 10 a0 df 11 8c 0d 2e d5 7c 45 30 2a 4b 52 c2 a0 22 a5 0d a8 4f 25 04 07 e8 5e a8 6d 45 b0 33 0a 47 e0 59 12 8c 1d 2d 75 9e 94 60 6c ce b9 df 11 ec c3 2f 00 fc 94 61 df f6 91 37 23 d8 f3 b1 1f 46 27 24 38 08 7c 9a ad 9e 13 0c f7 0b 75 ce 35 d3 d3 f8 5b 30 85 3f 22 e9 97 4c 31 44 c3 a1 0b 12 0c e7 0b 8d b6 0d d3 d8 18 b1 e8 82 4c e3 c0 e5 81 2e 48 f0 00 9b 75 e0 2f 09 c6 30 47 41 d7 04 0e 43 0c 65 f4 40 82 5d cc 03 68 b6 73 49 02 87 0e 7a 20 c1 23 1f 4a 46 0f 54 34 3e 68 de 10 3c 84 83 c0 ae 97 a1 17 c5 f8 46 c7 22 05 fb fb 4a 8f 84 Data Ascii: cCNOn0FQ^54vJ7`?L`~Wdb.\|E0*KR"O%^mE3GY-u`l/a7#F'$8\|u5[0?"L1DL.Hu/0GACe@]hsIz #JFT4>h<F"J
2024-11-01 15:52:28 UTC	364	IN	Data Raw: f4 6f c2 ab 0f 95 54 55 18 a2 65 f4 1f 4a 91 b0 4c 80 45 26 a2 1c 6e 2f 02 24 2a 9d 2f e3 a8 00 8a 00 85 e2 51 15 ad 08 c9 60 1b 2d ed 8d 5f 6a 59 de d4 43 10 56 08 93 e9 25 f4 67 3a 66 08 d3 15 0c f0 e1 84 32 3f 69 58 48 94 a2 ac e2 82 16 f4 8c 26 ea 12 29 f8 7e ca 9f 32 03 3e a3 4a a2 55 86 cd 44 19 00 29 d0 9b 09 88 6b 4d 6f 26 d3 b4 80 42 f2 e2 da 94 86 af 32 f6 62 a6 6c 12 e1 8b cb 2f 5b 76 5f 79 19 af cd 45 5e a4 1f f5 68 0a 52 7c 3e a3 2f 2e b0 4a 97 82 d6 91 28 2b ac 1a 6e 12 30 d6 a2 89 c4 03 94 02 12 51 6b 00 ad 65 f2 de 08 62 92 e8 b9 4a 91 dc 0a ac e0 d1 02 28 02 24 ea 32 ad b0 50 44 4b 20 25 28 0b d8 60 11 c8 6a d3 61 5e e0 b4 87 be 77 b6 83 4a 97 b6 c3 a6 4e df 19 0f 9b 35 4d da cd 84 78 01 0a c6 b4 a6 44 89 88 66 75 92 2a b8 c8 4c 5a bb b8 Data Ascii: oTUeJLE&n/$/Q`-_jYCV%g:f2?iXH&)~2>JUD)kMo&B2bl/[v_yE^hR\|>/.J(+n0QkebJ($2PDK %(`ja^wJN5MxDfuLZ
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 4b 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a e2 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 31 32 33 30 0d 0a 4d 61 d1 af cc c1 cb a5 ea 6b 6a 6b a2 d6 50 ee 63 cd f6 04 46 f5 4a aa Data Ascii: 00000001K000000010000000100000001X0000000100000001d00000001J000000013000000010000000100000001>000000010000000100000001:00000001.000000010000000100001230MakjkPcFJ
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 1c 61 25 8f 11 94 64 f5 a9 c2 01 91 38 38 e4 08 1f ac 26 7b 7e 93 86 e3 ed 84 43 bc 29 d8 e4 38 ef 76 af d9 1d 74 1c e0 85 5b 03 a3 6e 2b 7c ef 2c a4 16 b1 7d 3e 72 80 23 87 bc 74 4b b7 3b 44 e9 6e 8e 12 7e fb 95 28 9e e6 9b a2 62 07 21 f6 8b 14 3c 73 84 eb de ae be 3e 95 39 20 1d 07 de 74 f2 a9 4f 6f ba 45 13 ab 0b 91 e1 14 45 4e 31 01 85 ee 74 73 db 9d fb 74 33 84 69 f3 72 47 07 e3 86 a2 7e ba 59 d6 87 44 aa 31 9a 43 a3 03 55 1d 50 cc d0 11 4e ea 6c a9 e1 a4 be 0f 70 e2 88 a3 6e 4e 77 0f a2 6a 9e 77 53 0e 70 e7 18 a6 4e ee fb 27 58 cc f8 bf b5 ea be c0 74 fb ff f4 91 91 59 41 56 80 6f e1 be 8c 35 7a ef 5b 4e 62 9b e4 ea b2 ad 81 e9 e0 ff 23 d3 59 f8 89 6d f9 86 4d 5f f8 07 88 3c 60 30 19 86 ec e7 02 8f da c4 80 a3 6f 5d b3 84 47 0d d7 8e 6c cb 7b e6 38 Data Ascii: a%d88&{~C)8vt[n+\|,}>r#tK;Dn~(b!<s>9 tOoEEN1tst3irG~YD1CUPNlpnNwjwSpN'XtYAVo5z[Nb#YmM_<`0o]Gl{8
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 32 03 29 b0 54 db 0a 79 8d 3b 41 f9 25 90 b3 44 84 c1 50 52 ce 39 cc 5e fb ab 17 c6 c9 20 91 b8 4a c4 19 c8 5c 3b 09 43 45 96 5c 23 1a 19 a8 d1 70 32 f1 25 d5 04 37 c7 95 24 12 71 b9 c0 d1 19 b1 9f cd 6a de 88 2e a6 2a d1 9f 1d ca c4 75 24 ca 88 07 6f f0 a7 85 c7 b3 33 94 3d a4 bf 2d 34 62 c2 08 ed d2 df 16 1a f5 02 5a 04 f4 b7 85 1e 30 3a e1 3f 2d b4 cf e8 89 47 7f 5b e8 80 d1 77 24 1c 32 7a 30 a5 bf 2d 6a 3a b6 38 20 37 6e 02 02 ed c4 f4 57 52 e3 ba 0b a2 1e a8 f2 ed 46 2e 37 49 82 a8 22 62 d1 d2 36 5f 1d a0 06 1d 4e ea 8a d4 b1 92 fb ed 37 a5 36 2d 90 bb dd d2 aa 24 b3 98 4f 22 84 9f 19 1a 9e 08 d2 5c 67 24 e5 50 25 ca 54 3c 76 a3 39 78 f6 46 1b 2a 7d 71 e8 25 67 b4 91 82 77 7a 34 18 3d 32 a3 92 40 66 c4 05 59 a4 23 c6 4d 53 a9 52 12 55 26 5e 55 d2 bc Data Ascii: 2)Ty;A%DPR9^ J\;CE\#p2%7$qj.u$o3=-4bZ0:?-G[w$2z0-j:8 7nWRF.7I"b6_N76-$O"\g$P%T<v9xF}q%gwz4=2@fY#MSRU&^U
2024-11-01 15:52:28 UTC	665	IN	Data Raw: b0 b4 95 47 2e 9e b8 7f 88 bb a2 b5 32 0f 0a 41 11 bd a6 ba c7 a7 a4 20 63 25 6a 96 24 d5 4a ad a2 24 19 0a e3 bc f2 b2 68 5e d4 75 f8 d2 dc 2d ef 02 ee 4d 9c f3 55 27 f3 8a 66 61 b5 06 ec b0 34 f7 e2 19 a1 66 75 d8 a5 2c e1 47 80 a7 f2 40 0a 4d 3d 78 97 ea 40 0a 4f c6 d8 a2 1f 4a e2 34 d8 5a 6b 8c 1a bc 89 32 c3 e5 41 51 6a b8 83 0c af 43 89 40 5d b4 27 bd b0 b6 16 e5 8d fd cd cd 2e 52 d8 ac 9f 03 34 af d8 8c db b6 b3 ab 70 2b 84 f9 d2 90 bc a9 f2 1b 5e 9e 68 90 63 b0 d1 49 21 3d 75 03 d3 b3 7f 30 1b 62 91 2f a9 b4 5d a6 92 2e c4 e1 fd b9 ad 0f 74 3d a7 39 a7 3b 02 1e 61 6d 11 f8 d1 bc 05 47 a4 9a 78 88 e0 f2 a6 9d d3 b2 9d bd 82 db c4 97 b8 7d 7c 03 37 c7 37 4d 9f 5b c6 e5 79 53 dd 08 1e 29 fb 1b cd fe e6 f4 30 7a bb b5 e4 93 95 37 d3 14 cf f2 c1 bb 42 Data Ascii: G.2A c%j$J$h^u-MU'fa4fu,G@M=x@OJ4Zk2AQjC@]'.R4p+^hcI!=u0b/].t=9;amGx}\|77M[yS)0z7B
2024-11-01 15:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49811	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	510	OUT	GET /gui/30592.64f38a11064ff2dd4b23.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6ca9b55ecfbd324918080c3654862c4c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:04:11 GMT Expires: Sat, 25 Oct 2025 16:04:11 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 604097 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 31 0d 0a 6b 0d 0a 30 66 66 33 0d 0a 77 db 46 d2 e6 f7 fd 15 30 93 38 a4 03 c2 24 75 27 4d 2b 8e ed 39 f1 79 9d 49 d6 97 9c 9d d5 68 65 90 04 25 c4 14 c1 01 40 5d 42 f1 bf ef 53 97 6e 34 40 52 92 93 cc 7b 66 f7 28 9e b1 a5 be 54 77 57 57 57 d7 ad 0b b5 79 16 79 59 9e c6 c3 bc d6 ab 67 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00001k0ff3wF08$u'M+9yIhe%@]BSn4@R{f(TwWWWyyYg
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 43 b5 9c c9 7a da 78 d4 07 3c 59 49 0f 40 da 4b cb 0f 7a 8f ea 93 7e 3d e9 67 02 24 05 90 51 32 8d 88 0b 84 c2 62 93 e0 22 9c cc a3 86 1f 2a d3 00 b0 1c 8c 12 73 69 f4 96 c3 30 1f 9e 11 ee 30 2d 1c 83 7e b4 c4 e2 31 9d eb 85 4e f1 11 16 ae 2b 0a 64 06 cc 60 40 bc cc 3f ea 0d 5f 67 39 a5 59 4e 0d c2 2d 18 2c 63 d0 c8 cf 40 0e 5e bc c4 99 67 a6 13 2e b1 1d d8 81 ea 86 a0 b1 6c 63 8d ee 98 e9 69 c1 2d 23 b3 91 21 77 64 c6 9e f6 17 cb 20 4f e4 a4 1a 24 06 d9 24 1e 46 f5 7d bf d9 36 3c ae 26 33 04 b0 7e 8a 5d 0c f8 64 a5 f3 21 76 10 6b 49 c1 4d 9d 92 60 1a 9e 03 59 b5 9f c2 19 77 b8 b9 a9 bd 8f 72 fe f1 50 88 6b 0c 6a c6 34 bb b5 17 e6 f2 d0 86 4f ff 4f fd b0 fb 31 be 79 d3 98 e6 f8 69 ff a6 bd 7b b3 d5 69 e0 c7 97 93 f0 7c 16 8d 1a 02 e1 eb a7 41 1e 65 39 f6 Data Ascii: Czx<YI@Kz~=g$Q2b"*si00-~1N+d`@?_g9YN-,c@^g.lci-#!wd O$$F}6<&3~]d!vkIM`YwrPkj4OO1yi{i\|Ae9
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 02 61 31 ae d9 8d f2 26 b2 6d 6c 51 37 f3 25 ed 56 a7 0e a1 35 ed e7 b8 88 b3 84 d9 1c a1 09 46 41 b4 48 8f f2 e3 06 fe 23 a5 84 16 67 05 9a c2 ec 62 e0 91 32 ae f0 e4 10 14 f2 0a 77 dd cc dc 61 67 14 3d 9d db 19 d2 59 9e 54 d9 87 5a c9 bc fc 19 a9 a3 b5 49 72 19 a5 a4 51 62 1f cd e4 20 6e 7d 9c e9 af 2e 26 69 b1 50 50 e7 33 48 db d5 2e 2a a2 69 2f 67 fb 68 fd 8d 65 45 cc c4 24 36 df 0d a4 7a 45 3d 22 2a 55 ed fa 75 15 28 dd 2d 84 36 2f 7a 2c cd fd 50 7e ec 1a 34 5a 54 13 6d c8 f9 93 2d 5f b9 35 a5 52 ee 68 17 bc 61 7c 74 ed 9c 0c c9 a2 f5 4b 49 06 c7 29 26 fe 1a b1 6a d9 d3 f9 55 4e 63 90 9d c5 63 9c f7 1e 4e 3c 9b d7 a0 92 ca e5 ed 62 b5 97 c3 a6 0a bc dd c2 a5 85 6c dc e9 81 a2 1c 1a 3e 8a 54 c3 a9 a0 b9 b1 e4 2d 55 64 7f 64 49 1f c6 c2 92 bc a6 ab fb Data Ascii: a1&mlQ7%V5FAH#gb2wag=YTZIrQb n}.&iPP3H.i/gheE$6zE="Uu(-6/z,P~4ZTm-_5Rha\|tKI)&jUNccN<bl>T-UddI
2024-11-01 15:52:28 UTC	383	IN	Data Raw: 5a 8c e3 68 1a 7c 0d 1e 6c ed 6f a3 d3 00 37 22 c7 e5 50 2c 0f ee 49 8a 7b 69 e0 52 44 e9 ee c1 fe 5e c3 9f e1 47 8d 45 39 a3 d2 9d dd 7d dc a9 73 6a 2b 77 ea 29 7e dc df 39 d8 46 db 73 fc b8 bb bb d5 da 95 eb 75 ec 5f f8 d7 fe a5 7f e5 7f f6 4f fc f7 fe 6b ff a5 ff b5 ff c6 ff e0 bf f0 7f f6 7f f7 7f f3 df fa ef fc 57 fe 2f fe af fe 0f c5 35 fc a3 ff f1 e1 22 fe 0b 2e e2 b2 8f 3b f8 71 0e 82 9c 9e e2 0a 91 1f e0 e8 0e de cf 07 d0 07 11 c5 07 2f 68 d6 af 65 ee af f0 7a ff 08 d6 fc a3 78 bd c1 2c 10 10 f1 53 7f a1 bd 4f d2 39 22 dc a2 bc 1b 06 d7 61 1a 12 ef c5 99 07 4f cb 4f 42 ba 34 51 ce ff 72 05 98 21 5d a5 18 04 c5 c5 2f 6e 27 8a fe ea 0e 02 13 04 06 4f 4d 9e 26 34 d6 c9 6f c9 00 bd ec ef d4 69 d9 93 30 bc 7f d9 40 bc f9 fd 05 0c 98 6d e1 fd a1 20 a2 Data Ascii: Zh\|lo7"P,I{iRD^GE9}sj+w)~9Fsu_OkW/5".;q/hezx,SO9"aOOB4Qr!]/n'OM&4oi0@m
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 32 62 31 65 0d 0a 3b ba db 58 60 de e1 08 d1 ae b7 7b 51 b5 11 f9 3c 71 35 b0 d7 33 63 c3 07 cc 7d 12 26 55 6b 91 4d 97 e7 86 28 83 10 e4 26 9e 7f 6e 4c 1b f0 63 14 22 9c a7 08 b4 14 2c 9d 4c c8 65 79 8b 9c b8 12 8f 79 74 1a bc f0 cf 83 17 c7 1c 95 c9 76 e0 77 d1 2c 49 f3 9f 21 59 e0 d0 58 87 9b 30 f5 e0 64 4c d6 36 20 0a a6 f5 3c 99 fd 82 d0 c9 f0 94 3d 8a 70 f8 47 b8 c0 e0 a2 9d e6 af a2 71 38 9f 50 08 c3 8c 1c 4f 44 1c 6f a6 af d2 10 e6 6d b6 68 09 2a 0d 48 0e af 14 c3 05 df 1c 41 3c 02 5e a8 d3 bb 68 c2 b0 6d 67 18 17 ef 37 b0 15 70 a3 40 d4 46 50 4e 1e 18 5c 4a ac d3 9b 11 4c 85 d5 42 8a b5 ea 6d 98 75 02 c3 11 ed c0 4b 12 9f ae f2 17 46 11 87 45 26 99 e4 f1 ec 03 0a c5 3c 07 1b e6 23 58 4c 1f 45 f8 7f bd 86 83 4b ed 4f ac e6 9e d5 e2 a9 67 23 14 ad Data Ascii: 2b1e;X`{Q<q53c}&UkM(&nLc",Leyytvw,I!YX0dL6 <=pGq8PODomh*HA<^hmg7p@FPN\JLBmuKFE&<#XLEKOg#
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 6b 35 3d 40 9e 39 c9 10 44 43 6b fc 90 bc 9c c4 b3 41 12 a6 23 bd cb a4 90 01 db 2a c3 b2 65 5e b0 9f c8 49 2e 17 7f c0 a2 c0 b5 fd da a8 89 a7 28 11 1e 89 20 e8 90 5e c2 91 59 81 a4 4e 91 73 59 2a 0f ac bd e1 30 32 cf 60 4e 48 f4 f8 25 99 d1 0e 59 21 f5 0e 01 00 41 e4 d4 bc 74 fb 17 d7 75 e9 16 17 75 be bb d0 2e 50 a6 44 39 b4 8a a1 56 f8 52 6c eb 7d e1 bd 72 4b c9 cf be 21 3a db a8 0a c4 04 d9 73 68 f3 09 d4 46 46 04 6f 25 c5 61 18 54 9c 05 ff 7b 9f 02 d6 df b3 f1 f4 63 3a a9 2f 56 47 23 ad d4 47 64 51 37 5f 22 10 04 ad 3f 00 a5 93 d7 a2 5f 88 ca 09 42 85 4a 92 b2 a8 73 73 b3 a0 c7 6c a2 a4 75 21 8b cc b3 59 3c 8c 41 fb f8 05 4f f8 ce 21 ca d0 8f b0 06 99 e2 65 03 cf 34 4d 97 ef a0 58 d8 2e f8 c5 74 51 35 a5 76 9a 24 a3 4b 70 46 70 8e 3a 54 5c bc 0e 09 Data Ascii: k5=@9DCkA#e^I.( ^YNsY02`NH%Y!Atuu.PD9VRl}rK!:shFFo%aT{c:/VG#GdQ7_"?_BJsslu!Y<AO!e4MX.tQ5v$KpFp:T\
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: b5 ef 7b 43 a3 18 a3 d2 ca 5c a9 eb 8f 43 71 5d 18 b7 41 a9 8e be d6 4b b1 0a 80 23 1a 91 96 e7 ab b2 ed 9f 62 92 4a 8b a9 54 9b 44 3f 4b 7f ef e0 60 67 4d d4 d2 ff e2 58 a5 cb 7b c6 2a 21 2a 69 bb 75 70 b0 4b c1 48 12 80 24 61 4b 1a 60 54 8a d4 a5 b6 94 26 87 da ee ee b4 10 c1 e4 04 ed fa 33 ff 0c 41 48 9c e2 ca a4 72 f0 e0 a6 27 89 93 5c 89 a9 49 5a f5 39 ba a6 07 31 c4 41 85 30 e9 ec 38 69 ac 24 a1 4d 26 bd 36 a4 ba d2 36 04 06 6c 1b b9 66 92 40 a4 c1 7a dd 8c 8d 3c 46 e6 16 5e 3b 8c 93 2d 8b e6 18 44 53 3c 6c e6 e4 23 10 5c b1 42 36 a4 06 30 fa 4d ae eb 29 bd 9b d3 2b 3d 2d 72 8b 20 e5 8a 18 b1 a5 0a be 1c 3b 38 18 12 fb 4f 9d 12 42 04 d6 6c 12 72 d9 54 3e e4 8a b7 a9 64 24 3d 18 ac 01 26 c3 49 9e fc 92 c6 e7 b0 22 5e 44 fc 64 c8 5a c5 4d 32 1f 9b ab Data Ascii: {C\Cq]AK#bJTD?K`gMX{!iupKH$aK`T&3AHr'\IZ91A08i$M&66lf@z<F^;-DS<l#\B60M)+=-r ;8OBlrT>d$=&I"^DdZM2
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 70 0c 44 79 af 17 6e 6c 7a 54 78 45 f9 4b 78 f0 15 89 05 81 15 14 87 5c 94 83 70 9c cc 97 dd 54 8e 8d b3 d0 a3 e4 d8 2c 8f 74 0d f6 51 ca fe ca cd 5d 96 4d 94 1b 6f a6 38 9c aa 19 d2 9f 53 58 09 bd 14 00 96 84 6a d4 47 80 eb ef 2d ce f0 0b 24 11 be ce e2 ec 07 a4 64 51 4a d4 b0 1a c1 86 18 b3 10 92 55 eb 45 01 8e d0 eb 10 69 88 39 e8 37 ff ae 0f 5b 7b 04 1b 11 c5 cd b3 c7 60 e9 35 61 5e 67 16 07 7b cb f2 9f d3 4f 14 26 31 e5 57 25 1b 5c fd 88 35 c8 7f 29 42 88 0a c2 96 f5 13 ff 21 34 aa 95 7e f5 d1 f3 a7 23 b8 82 bf c5 cb 88 40 a7 bd 54 68 df 1e 7f 82 ee 06 a2 04 de f1 1e 2a 37 2f 4b 18 5c 69 89 8e 0e d4 60 2e c1 9c a4 8f e4 cf cf 6c 60 a5 d2 38 27 73 63 96 2f 3e 97 47 45 a0 25 6c 29 4e 14 47 7e dc 85 36 9e 7f d3 39 3c 2d b2 43 fb c8 e4 5c e0 d0 68 79 64 Data Ascii: pDynlzTxEKx\pT,tQ]Mo8SXjG-$dQJUEi97[{`5a^g{O&1W%\5)B!4~#@Th*7/K\i`.l`8'sc/>GE%l)NG~69<-C\hyd
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 86 53 90 65 32 57 26 63 c6 56 05 4f 20 75 a4 14 90 46 76 9b 5a 5e bb 35 93 5d a1 ed 91 39 79 78 2c 5f 8c 68 77 4b 9a d9 f0 45 7a 3d d8 f5 38 c1 58 f3 12 ef ee 31 1d cf 93 6d c2 6d 37 5e 3f fa 7c 22 13 c0 e9 80 d9 a9 ab 24 52 4c 47 d7 04 a1 78 68 ce d6 5a 90 9e 27 d9 47 bb de d6 d6 37 3c 32 3f da 64 62 e2 5f 75 d6 93 68 9c df 8b c2 08 93 c5 f3 d7 05 ad a5 02 d1 0e 68 10 f6 47 86 d0 4d 78 ee 3d 11 3c ac 5d 1c cd 45 48 fc 96 2d bd 05 d7 19 3e 75 28 6f 5b 78 1d b7 30 b6 5b 59 22 a6 a1 7a 01 22 3b 9b e1 69 22 b3 69 36 cb a5 72 4a 37 32 56 25 d1 23 ce b7 70 ec 41 51 5b 47 86 60 01 e0 18 d8 39 3b e8 4a 5a b8 f2 e8 22 dd e3 18 30 a3 60 56 0c 6a 52 52 36 53 d4 46 cc e4 9b 8c 06 6d e8 30 1a 97 7f 31 e2 35 db 92 0c 27 74 da 54 32 92 29 5a ca e8 98 f1 cc 99 e8 7a c2 Data Ascii: Se2W&cVO uFvZ^5]9yx,_hwKEz=8X1mm7^?\|"$RLGxhZ'G7<2?db_uhhGMx=<]EH->u(o[x0[Y"z";i"i6rJ72V%#pAQ[G`9;JZ"0`VjRR6SFm015'tT2)Zz
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 3c ef b6 29 7e 9c dd 0f f5 ff cd f3 9b 0e 37 9c 63 67 ed 19 ee 81 68 6b 54 6f e3 fc e2 7f 25 b2 f8 06 7a 98 e7 75 0a 32 5d d3 0f 47 1d 2c 5e ff 6a 20 b3 07 7d ac 00 f0 5a 28 65 90 cd 9d 51 a4 da 3c ef c1 56 4b c0 e2 d8 30 78 70 07 fe f7 e0 d6 61 da 41 07 d0 f4 af 75 c3 54 46 d9 56 a8 bb fa ef fe 9f 83 5e 5d 84 4b cc 6b 90 52 45 26 16 5e 66 df fc 7d 9f bf d0 2f f3 ed d3 27 8f b0 57 4f 3c f8 ed 72 bc a1 0c 67 d0 3a 77 82 ad a0 e3 d5 cf f2 7c 96 75 9f 3e 45 ec cc c0 d4 e2 66 3c 7f da e0 1e 14 f3 c2 86 2c 6c 74 bb dd ec b4 3a 5b de 07 48 05 05 a4 17 f3 1c 19 08 33 6e fd 16 19 3a a6 48 b4 ea 51 06 b2 d4 fb e9 cd 07 67 00 64 92 9e 0f 18 74 7e 39 c8 9e da d1 9e c2 20 36 78 4a c6 8c a7 6f df bc 7c fd f7 f7 af 79 e8 a7 dd 14 f3 59 88 3b 8d 1e 06 78 5f b5 06 db a3 Data Ascii: <)~7cghkTo%zu2]G,^j }Z(eQ<VK0xpaAuTFV^]KkRE&^f}/'WO<rg:w\|u>Ef<,lt:[H3n:HQgdt~9 6xJo\|yY;x_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49812	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	510	OUT	GET /gui/58686.2b5c3fb77a4c9bf80677.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bb044b5304273839e54df11191fd7c6f Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99249 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001z000000010000000100000001000000010000000100000001
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 25 16 b5 52 49 76 f5 48 a5 e3 24 5a 65 31 c4 0c 96 d0 5f 9e 46 d3 66 23 e6 a6 8d c1 20 bb 5a a9 78 ea bd 56 d3 39 fa de b9 d3 30 20 54 ea 82 89 1a c7 49 98 a9 56 32 d0 cd 6d 91 85 f7 54 cd 21 50 a7 98 4c 93 5c 83 db ee 9e 86 f7 06 9d d3 b0 dd 6e 35 63 70 42 f8 b6 75 e7 4e 33 19 34 69 15 31 b8 a2 9f de a3 0f 80 11 4c d3 e7 0f ad d6 c7 8f 49 cb 50 0a f5 77 ee 24 77 ee e8 55 4e d4 34 5a 2a b3 4a dd cf 4f b6 cc eb b3 6c 30 9e 87 69 ea 81 26 6a 39 49 bd 61 90 8d 37 2c 47 93 f5 98 70 d1 da a4 6b e0 a7 19 04 81 e5 89 96 4f 5c 12 44 68 37 b8 0a a6 d1 9c a5 a0 2e 4c 5f c7 97 8f 14 36 92 7a 00 4e 7f af 06 5f 74 a5 66 1c af ae ce e3 78 9e 45 ab 73 4c 37 68 3c 44 81 77 f6 f4 41 ef e0 d0 cb 62 6f 3c 8f 56 a3 38 4c 26 20 3b 0d 0f ee 8b b2 ab 73 e0 7d d0 a0 39 0a c5 3f Data Ascii: %RIvH$Ze1_Ff# ZxV90 TIV2mT!PL\n5cpBuN34i1LIPw$wUN4Z*JOl0i&j9Ia7,GpkO\Dh7.L_6zN_tfxEsL7h<DwAbo<V8L& ;s}9?
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: ce 41 96 73 67 ab 7d 06 5d 58 31 7b ae fe bc 2d 89 44 a5 bb 3d 6f 4f ad 42 af 4f a5 9a 57 47 b6 69 60 c3 38 05 8e 66 a1 f8 21 1b 86 19 62 6d d0 40 8a f1 6b 0d 98 61 34 91 e6 62 a1 bc 74 0c 93 56 bf 01 e1 0b 95 cc 24 8a a6 a8 7b 21 d2 ae e9 48 bb d7 20 c1 6b 87 04 b4 18 52 29 c4 3c 29 a9 63 96 81 54 5a b1 19 45 c5 ae e2 95 28 4b e3 f6 68 dd aa cb 6f 52 bd b9 66 ce e2 55 ad 5a 3e c7 e6 17 23 7e 12 ab 94 48 cd d6 24 99 19 04 68 22 fe 85 b1 30 d7 70 4e ae 3c 63 24 c3 8b 44 c0 c3 d3 c6 3e fb 17 0d 63 2d e8 8d 56 55 f7 05 b1 57 b0 33 08 0d b5 e6 7e 09 15 ba cd 6f 8d 09 f6 75 52 e0 20 59 2f 3d d8 1c b4 37 3d 44 7b fe 94 79 ab 24 7e 1f 4d 94 f5 0a 1c cc 7c ea 82 8d d5 c1 84 df b1 23 99 56 da 74 13 3c 16 1a de 60 4f 15 11 ac e7 33 86 89 56 2f 65 47 f9 e3 47 47 d2 Data Ascii: Asg}]X1{-D=oOBOWGi`8f!bm@ka4btV${!H kR)<)cTZE(KhoRfUZ>#~H$h"0pN<c$D>c-VUW3~ouR Y/=7=D{y$~M\|#Vt<`O3V/eGGG
2024-11-01 15:52:28 UTC	471	IN	Data Raw: fd 1f c0 f4 9f 1c 26 23 3f f2 d6 72 66 0b d9 9f 85 38 9f 17 8d 14 e4 d5 a6 48 8b 35 68 3a 88 c1 38 a9 0b 82 97 42 2c f9 18 37 99 65 90 6a 5a d2 e5 7d 04 2c aa 71 b9 7a 08 c9 7f 4e 90 3e 5e 5e e0 28 25 2d 58 26 59 82 03 41 35 19 c2 1c 9e 20 e9 ad 20 06 70 86 85 08 1d 9d 44 c3 78 1e 52 96 41 da 62 f7 b9 6a b7 d4 35 ad b7 62 c0 46 d1 38 c2 61 94 16 0d 8e ff 6e c8 a8 4f 2f 40 84 1a c6 3a 8b 7e 29 c9 84 94 4b 9c cd f2 12 3d 5f 0a f9 1c 31 5e b0 95 ad 4c 77 1a 58 31 50 91 c2 5a 2e 0c 69 26 d7 8a bb 08 2e 4f 10 ab 58 c0 6a ff 05 11 fc b9 22 e0 0a e8 a5 1e 56 0c 16 d9 f3 49 94 20 8b 2f 85 35 01 f6 a4 7f 58 57 4e a5 c0 59 cd 0f 58 cd 0f b2 9a f5 1c b4 9d 47 f8 c5 ac ef 48 b0 ba 92 bb dc f2 2e 3a 41 be 31 a8 c4 08 d1 42 bd 4a 1e e1 ac bd 00 e7 94 80 19 b2 55 93 a6 Data Ascii: &#?rf8H5h:8B,7ejZ},qzN>^^(%-X&YA5 pDxRAbj5bF8anO/@:~)K=_1^LwX1PZ.i&.OXj"VI /5XWNYXGH.:A1BJU
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 31 0d 0a cc 0d 0a 31 66 63 62 0d 0a 6f 09 4c 02 0e 42 c3 44 38 8b 91 5c 4a 85 18 d2 68 6e ac 93 23 b3 49 78 39 5c 4c 0e dc b8 c5 bf 30 e4 bf 64 e5 90 59 c6 86 67 58 52 a8 82 39 03 c8 ee 7d 9b c6 e5 3f 29 78 e1 c8 e5 92 e0 fe 3a 5a 5c 78 69 32 1e 34 66 59 b6 4a fb 77 ef 22 a3 25 81 ed 12 5c c4 f1 c5 5c 85 2b 04 5b 90 a5 02 ed c8 8b bf 2b ea 39 9c c3 8a a0 91 4b fe 81 b5 22 18 fd 3b 45 3f 0d e5 8a 7e 97 58 16 21 81 46 40 c1 1d fe 19 18 f8 f9 76 18 a0 d4 b7 db 60 80 03 66 c2 40 fc f1 73 17 45 f3 55 16 c5 94 ad e7 33 93 3a 13 8f a0 eb 7e 8c d4 a5 e3 6b 4a f6 8e 23 31 ff 8e 75 ff 5d d6 2d c4 64 fa a6 1c 8f 6f 8b 4c c0 01 2c 8d d4 06 a3 7a f7 91 8c 3e 7e a7 ec 51 71 a0 ff d6 e9 86 25 93 6a 14 27 c8 e1 69 4b d8 c8 9b b4 47 88 cf bf 33 41 af 74 1e 83 d6 30 b9 90 Data Ascii: 11fcboLBD8\Jhn#Ix9\L0dYgXR9}?)x:Z\xi24fYJw"%\\+[+9K";E?~X!F@v`f@sEU3:~kJ#1u]-doL,z>~Qq%j'iKG3At0
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: fa 40 40 22 65 db f8 29 1f cc 4d 7b b8 69 30 1e a8 68 27 44 b8 85 9b d0 85 28 19 14 b7 02 aa 40 18 10 6f b0 5c f4 ea e8 8e 07 40 2f d8 2f ee e5 45 e7 4e a3 ac 89 0c 88 d6 96 ef 03 20 09 8f 72 0f 58 99 ab 89 83 22 be 49 62 a4 bf 9b 20 6a 12 29 a8 1b 36 05 ae 27 18 4c 2d 80 30 c3 ee cf 26 a0 c3 19 16 c7 59 87 b9 32 20 e2 3e 48 92 f0 2a 27 d9 9b ec ed f6 d6 09 8c 3a 2f 12 f2 15 87 59 37 de ed 25 f9 2e 31 2f dc 8f 85 f9 6c 54 81 35 2b 14 82 af d1 7c 02 43 fc 4d e7 ad bf 44 42 b6 fd bb fb 96 5e d3 08 f0 86 00 6e 71 fe 3d 9a e0 e5 01 3c a9 21 c9 6c 4b 93 ab b6 74 eb 29 61 0d af 13 30 73 5d 63 da 93 75 41 12 3c a5 4b bb d3 66 fc e7 f4 cf 26 49 2e 31 e3 26 e5 71 5b f7 00 5b 3c c5 a1 69 c6 b0 e4 59 e4 45 eb 85 b8 35 75 8f 2b 1c 77 24 f7 3e a2 f2 55 ed 2f a9 9f 77 Data Ascii: @@"e)M{i0h'D(@o\@//EN rX"Ib j)6'L-0&Y2 >H*':/Y7%.1/lT5+\|CMDB^nq=<!lKt)a0s]cuA<Kf&I.1&q[[<iYE5u+w$>U/w
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: d8 cb 78 a2 1f d3 94 0b 5b 08 a4 bb 99 91 a5 dd 15 81 58 7d 4a 51 d2 2f 21 51 30 c8 f5 b3 42 22 5b f8 7f 7a 9f d5 68 aa 1c e4 dd 5b 00 5a 4c 0c 09 93 17 a1 45 04 b9 6f 76 0f 68 54 3a 2f 6b 18 ce b6 a1 c0 9c b9 6b 18 7b 4e 18 42 4e 9f 31 9b 4a 8c ad 3d d2 49 1b ef 18 7e b8 de 6a f8 9d 0d 26 b0 f8 a7 c0 56 30 68 ae 33 95 8c 7c a1 0b 87 c6 04 d0 f6 03 59 02 7c 1b 90 05 0d 5c 71 be c7 dc 6c 44 f1 18 c1 27 15 2e 1a fe 4f 70 ce 55 7a 5f 62 64 03 d9 18 f0 6d fb f0 56 b1 63 58 4b 23 66 21 0f 6c b1 ca 80 16 fc a4 21 f9 55 0a 0c 07 23 80 86 83 9a d9 9e 8e b2 26 bd 48 98 40 eb c9 63 94 f0 18 c8 2f e8 cb 1b 8e db d6 5b 7f 86 b3 d5 24 c6 c5 0a 14 fb 8d 08 db ab e1 9b 0d b5 b3 fb 37 f0 c7 71 75 b6 a6 7f f9 99 96 5b 0c f6 92 a3 b3 d5 b1 aa 27 29 35 83 d1 25 09 05 3b a7 Data Ascii: x[X}JQ/!Q0B"[zh[ZLEovhT:/kk{NBN1J=I~j&V0h3\|Y\|\qlD'.OpUz_bdmVcXK#f!l!U#&H@c/[$7qu[')5%;
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 01 fd 22 16 b5 b5 d6 ab d6 f4 ad 81 21 cc c2 83 6c eb 64 74 17 49 7d 6f 1f 53 41 49 9b ff 6b 01 84 e6 b0 f4 c9 b3 d6 b6 ae 6b fe ca 00 d6 1b 30 22 b8 d2 47 fc 26 63 c4 31 1e b4 a7 d6 e6 28 7f da f7 90 20 81 19 3d e3 0d 60 e5 02 c0 7f ff 97 a7 ef c2 3b 30 14 c7 83 3d 49 c7 76 3c ec 35 b0 48 be 0a 1d fb 14 5f e2 e1 7e c2 b8 1d af 0b bf 38 67 94 7c 21 bb 3a 1b 6f 4c 3f cd 23 40 d8 0d 2a ee 9e 2c c4 59 85 33 98 fb b0 89 74 ce 21 39 ba 01 90 5c c0 95 7b de b4 04 7e ea a4 dc 09 92 99 79 90 b6 6d ed c2 73 6d 95 c3 78 72 43 1f 7e b6 a1 3a 13 6c 9c eb b0 c2 cf 0c 90 64 a8 c0 a1 d3 49 da 38 98 28 d3 ad 73 c3 a0 10 f4 fc 34 15 2e a5 97 ba 1e 8b fb b1 73 e1 e4 f0 97 fb 1c e5 b3 c9 55 1e be 9e 06 7f 4a 1a ba ca d8 5a 30 bb 3d 57 56 78 2c d4 a4 fb 0e 05 28 7b 8f 13 2b Data Ascii: "!ldtI}oSAIkk0"G&c1( =`;0=Iv<5H_~8g\|!:oL?#@*,Y3t!9\{~ymsmxrC~:ldI8(s4.sUJZ0=WVx,({+
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 9c 66 be f7 54 e1 2b 5b c9 64 f6 bd 07 09 4c 7f 1f 6f 2d 9b 51 64 4a 1e da 1e d3 e6 23 3f 44 86 95 1e d9 d6 4a 8f 8b 04 df 87 09 1f 1a 46 27 ce 98 c2 a4 6d 0a 9a 88 72 4c d4 85 ef 61 79 21 be 8a d7 59 1e 56 12 74 f1 85 bf f5 55 c8 8a 10 2d 49 79 d4 0c 50 fd 69 72 0e 7b a5 03 07 f3 ba 64 97 97 46 32 47 5c d8 fa 4e 55 21 21 a1 1b 18 fd 46 f3 6b 27 14 ba 10 ca 55 f3 7a 7e b6 23 c4 d9 83 48 25 01 b8 bf ef 8c 39 22 e9 6d 35 21 77 c1 f6 d8 45 6a 23 26 ed 7c 56 34 15 6b 6a b8 21 97 1a 06 d6 bd c3 bd f1 be 11 a1 76 5b 71 ad f4 3f d8 f7 bd 43 f0 d3 91 d6 84 f9 10 02 f5 c9 34 9c 8e 64 2d 6e 95 86 7e 1f ca a0 77 80 ee bd 03 6d 92 98 64 77 0b 3d be 97 79 7c ac b1 51 ac 94 31 4e 8e a1 4f 3a f4 cb 28 0d db 8a 21 50 63 a5 a6 e5 fe 16 7d 84 eb de 1e 7a f7 0c c6 67 8a bf Data Ascii: fT+[dLo-QdJ#?DJF'mrLay!YVtU-IyPir{dF2G\NU!!Fk'Uz~#H%9"m5!wEj#&\|V4kj!v[q?C4d-n~wmdw=y\|Q1NO:(!Pc}zg
2024-11-01 15:52:28 UTC	1113	IN	Data Raw: da e1 d5 16 b5 69 45 0e 8b 45 5f ee 46 97 5b 15 34 ac db c1 d1 bc a5 3e 8e 29 aa 3d 5f 33 27 5f c6 cc 2d d9 e3 0a e8 d2 c0 1c fc 74 82 7d 6a f1 0b 74 10 61 df 42 6b 86 13 aa b4 4e cd 56 91 13 17 8d b4 4a 6b 29 6f 15 34 bd 6d 24 38 b5 11 18 dd ca 28 39 7c 0b ed 5c fa 69 7b 8e 62 16 ae 2d 40 81 0a 36 00 e4 f8 93 8f c2 9c bf 71 1d 26 c9 6a ad 33 29 d4 2e 0c c9 33 29 28 da 11 a7 78 ff 8c a4 05 e5 f1 52 28 7a 49 4f a8 ce 4f 2f 41 9b f6 88 04 97 2d 71 d2 7d dd 46 a5 8e 0c b9 74 e4 43 ba 9c a1 2c 3e 0c 8a 6d 55 4b a6 23 f1 d3 e7 ae 6d 9a fe d4 d0 ba b3 35 6f 41 ca c6 d1 e7 e4 ed 7c e3 1c e9 8d 63 6a dc 8d 93 cb 61 53 6b e7 ed 17 79 dc d4 17 b8 d7 0d 8c 68 5e b4 ed 84 7f b5 f3 64 97 a7 8d 18 2e ae ef 51 dd 44 cc f0 5c 5c df c3 b8 da e5 49 b4 4f 3b 47 12 2f 8b 7e Data Ascii: iEE_F[4>)=_3'_-t}jtaBkNVJk)o4m$8(9\|\i{b-@6q&j3).3)(xR(zIOO/A-q}FtC,>mUK#m5oA\|cjaSkyh^d.QD\\IO;G/~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49814	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/21928.84211e4ee5e5aa330648.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ec20bd5a1cb5d8f117a20523b7a4c247 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:45:09 GMT Expires: Sat, 25 Oct 2025 15:45:09 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605239 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 66 66 30 0d 0a 92 ee f7 fd 15 30 93 f1 92 09 08 f1 26 89 a2 4c 2b 8a e2 9c f8 ac 13 cf 5a 9e dd 3d eb d1 23 83 40 93 84 45 02 1c 00 14 25 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001{0000000100000001F0ff00&L+Z=#@E%
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 8c cb 49 9e ec 96 52 96 b4 6a 82 25 a5 87 3e 51 10 52 63 e1 88 28 0e b9 f7 a1 1a 45 3e 51 15 2a aa 15 33 63 46 f5 c6 fa 6f 38 27 2a 42 a6 34 4c 88 2b f8 4d 8d 85 29 35 10 e6 44 76 b8 e2 4c 77 54 2b 94 06 fd a6 c5 87 bf c9 32 9f 25 09 75 56 f1 62 5b 28 88 08 7c 8b f5 df f9 47 7c 19 cf 7c f9 9d 4d f9 2f 55 3c 8e 89 da 31 2f 89 89 4f 94 4d 46 d4 8b 89 a2 06 27 11 35 32 61 5e 4f a8 8a 89 8c db f4 6f f4 65 9a cf a9 ed 68 84 96 89 5f 51 c0 c2 26 0a 68 de 45 01 27 8d a9 82 28 0e a9 b6 68 31 4d 62 a2 2a ca 28 c7 07 9f 1a fa b0 a0 3e 7d a0 cc 1f 78 68 6f 14 c9 a8 1b ae fa 86 e9 9e f1 28 ce 12 ca 38 5b 52 1f e6 dd 25 fd ee f1 e7 1e f5 63 8e 95 47 95 ce 7d 62 da 9c d9 3f 0f a9 f1 39 4f a1 79 44 7d 9b 27 9c 77 d1 a5 cf 8b 1e ff e6 3a 98 88 79 46 2d cc 33 9a 03 b1 16 Data Ascii: IRj%>QRc(E>Q3cFo8'B4L+M)5DvLwT+2%uVb[(\|G\|\|M/U<1/OMF'52a^Ooeh_Q&hE'(h1Mb*(>}xho(8[R%cG}b?9OyD}'w:yF-3
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 7f 40 2b 5c e1 46 23 50 e6 39 65 ee 80 7a 64 3d ac ed a1 79 94 84 f7 cd 20 99 25 29 51 4c 35 3e 3b a0 b2 1b d5 1d 4c 48 69 11 f2 d0 3e 72 43 b7 73 44 ff 37 db 5d fe 97 9a a5 fd 2a 8a 6f ca a5 6d 29 54 1e 8e 11 86 63 44 c3 81 ad 19 21 24 d0 bb c3 1a 80 92 e4 46 59 4c 1c 61 33 a3 d2 82 24 e7 ae 6d 7a 7c d7 31 9f ee 4d 5a 85 3d f7 c5 f3 b9 9f 62 c7 d4 84 e4 67 59 5e ff ca 4f d3 64 85 41 7e 76 40 6d 4b 57 52 74 26 33 94 6b a5 4b 8a 46 c4 11 89 cb 4f 9f 20 e6 78 4d da 7a 53 0b dc c4 8b 13 3c 8b 27 5a 56 a9 61 f7 a8 75 b0 99 db cd b7 2a 78 36 ec 7c fa b4 99 ef 4f 9d e1 b0 75 06 86 1e 0e 5a 5a 08 97 f3 78 01 c6 2d 88 71 60 a3 a3 e7 ca 71 0b 03 6b a6 4a f7 10 5f c8 fa 10 45 51 8e 1d 66 3e 25 c7 10 b9 59 ad 4c 76 78 d2 5b cc a3 71 2f be 3e c3 60 97 5f 20 02 b3 f2 Data Ascii: @+\F#P9ezd=y %)QL5>;LHi>rCsD7]om)TcD!$FYLa3$mz\|1MZ=bgY^OdA~v@mKWRt&3kKFO xMzS<'ZVaux6\|OuZZx-q`qkJ_EQf>%YLvx[q/>`_
2024-11-01 15:52:28 UTC	422	IN	Data Raw: f5 7a 55 82 a6 90 4b d6 a3 c7 f5 86 07 8c 22 b6 01 1b a6 a3 d2 1e ac c5 ed c4 e1 13 1b c8 91 d1 b0 a1 1c 48 af 02 c5 91 be 55 ea d4 78 9d c5 c9 ed 94 fa 03 15 f9 59 83 7f 95 e2 d0 1e 66 ea e4 f8 0c 51 07 c4 b1 5e 47 bf 48 96 36 db 00 03 60 5a 82 8b 4b 41 84 0e 5b 2d 3b 49 a4 9c 3a 5d 7a 4b 42 05 92 34 27 89 44 1a 94 a4 97 66 f3 cf 51 08 b7 ea 0a 1e 53 56 08 98 12 f6 10 99 09 60 d0 b0 8d 91 7b 97 5e 0d 73 8f e0 44 c6 cf 60 d8 02 39 84 14 56 e9 db e4 25 aa ad d7 c9 58 dd 53 e3 ae 76 64 08 36 5a 21 2d 5a 40 a1 6c 6b 12 10 ca 83 a1 35 b9 21 6f 6b ca 09 81 54 46 46 27 55 7f 5b aa 2c ff 0b 43 c4 75 b8 41 ac d5 4a 93 88 ec 78 00 47 55 a6 58 f3 0a 0e 64 72 c4 8f d0 b3 d4 74 6c 17 2b 21 6c a1 f1 40 37 84 6e 65 75 fc e4 93 17 3b a5 c9 ca fd af 3c c4 68 0a 1e ec b1 Data Ascii: zUK"HUxYfQ^GH6`ZKA[-;I:]zKB4'DfQSV`{^sD`9V%XSvd6Z!-Z@lk5!okTFF'U[,CuAJxGUXdrtl+!l@7neu;<h
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 31 0d 0a cc 0d 0a 31 66 62 32 0d 0a 14 93 37 d9 ca 9b 94 15 91 d1 3a 07 34 6f b7 87 c7 09 3a 09 d4 d0 4c 37 9a a7 7b 24 d3 a7 4f 44 09 ed f3 28 03 19 39 e8 99 19 ca 8b a9 0a 6e b0 09 d3 78 46 75 98 0d bb 11 5f 41 7d b1 a4 4d 66 78 2d 0e 19 5a c6 0c 8e 17 d3 83 59 ef 16 68 b4 e9 e9 4e d6 95 0f f3 ad 9e 32 67 b9 a7 67 13 6f 75 e2 4d 97 73 3f 8e 3e aa 0b ea 7c 31 1f 84 d9 52 d8 a2 d2 82 b7 b9 8a c6 00 48 e0 5a dd 2d 30 f3 c9 24 d1 33 c1 9a 01 64 ad 19 d1 bb 73 aa 68 c3 0d Data Ascii: 00000001>00000001}0000000100000001000000010000000100000001_00000011fb27:4o:L7{$OD(9nxFu_A}Mfx-ZYhN2ggouMs?>\|1RHZ-0$3dsh
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 36 fa 0a 60 8e 8d 62 90 b5 54 4d a9 b1 9d 78 8f d5 05 ed 6b 6c c6 57 7c e2 c0 84 8c 69 0a 10 c3 08 69 4c 76 8e 28 a9 7d 14 d5 6b d8 4a f8 69 30 6d 22 a6 06 91 3d 59 93 02 20 28 e6 47 f6 54 a5 26 b1 01 4f e6 83 6c d8 66 10 d8 b3 e1 54 eb 13 6d 86 ef aa b2 12 f0 67 e9 16 58 20 46 9d 6b dc d4 74 ac 20 82 60 0c b3 45 d6 10 20 61 5a b0 07 c5 cb 5a c0 1c a4 49 60 91 59 91 88 44 98 68 12 d2 9f d8 e8 70 5f 49 49 34 c9 53 f0 1d 8e 9c 60 3a 34 a1 f6 c0 00 66 be 2a b6 31 de ee 79 63 76 77 7a 18 8d 58 86 2f 0b 36 bc 89 42 71 58 21 20 fe 4d 15 01 2a 67 01 a1 03 65 f5 df 2d 92 05 85 c9 6f 37 0c 7f 05 6f d8 76 3c d1 75 98 f8 c3 8a ec c7 5e 74 57 27 79 bf c2 d8 22 cf 4d e9 31 d0 56 2c 01 da 52 50 98 e2 5a db a1 3b 3b 0c 7f 18 07 ba 28 4f 37 2e 92 ff 1a 61 66 7f 96 1e 94 Data Ascii: 6`bTMxklW\|iiLv(}kJi0m"=Y (GT&OlfTmgX Fkt `E aZZI`YDhp_II4S`:4f1ycvwzX/6BqX! Mge-o7ov<u^tW'y"M1V,RPZ;;(O7.af
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 4b 0b c6 0a 27 3d 1d ed 85 67 9b 4e 32 62 77 05 bf 31 38 40 57 95 f8 13 b6 32 cb 1d 17 03 82 6f 38 c2 ee 35 0e b1 22 b2 47 6c 3d ab 6a 40 b1 ae 09 8c b4 92 3d ba 7a c2 e5 f3 c3 3f 80 21 0d a2 f7 2d c6 c8 d4 6d 67 d5 b1 67 0b 1a 8d 6b 90 67 6c 3e 82 c7 8c cc 40 48 51 7d b2 29 33 46 7e 38 51 4e 4a e1 47 d8 5d 2d e0 e0 72 46 93 26 45 9d 00 d0 cc 85 bf c5 37 8b f5 6d 67 de 94 23 44 ce 8f 30 38 12 9c d3 9d 98 a8 07 66 39 98 3c f3 46 b8 23 e5 47 d4 89 e3 c4 90 2f b8 01 c6 1c f0 fa fb 1b 00 b6 35 2a 2c 95 db 5c 52 35 01 4f 6d 3e 8e c1 c7 31 f3 31 9a cb 59 30 3a e4 59 73 8a c8 90 99 ff f1 1e 82 86 a4 1a 8b 2b 73 be ac d3 ab 09 a6 6b b0 59 7b 61 6d 2f 1e 8a 11 61 aa 30 ee 3f a2 05 88 c9 ed a9 43 21 16 34 31 38 fc 0a 5e 82 29 02 9b 7e c1 bc d9 ca 89 63 46 70 41 e2 Data Ascii: K'=gN2bw18@W2o85"Gl=j@=z?!-mggkgl>@HQ})3F~8QNJG]-rF&E7mg#D08f9<F#G/5*,\R5Om>11Y0:Ys+skY{am/a0?C!418^)~cFpA
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 12 2a d4 53 76 cf d3 a7 4f 65 46 6f 3c fe 4b 2c 09 28 1e 6e 20 0f 62 25 95 f9 e5 93 35 f0 17 14 83 8d 82 6c 2c 95 f9 84 65 97 a6 1f 5b 8f 89 66 ab d9 19 ae 2e 44 64 ca 1b f2 ff c1 90 49 56 af d4 98 6f 1e b3 36 a4 ba 0e a0 22 72 56 ec 02 d7 e6 ce f5 d5 64 bc f4 ec 49 2b 80 1a cb 8c ea 42 90 b2 b2 0c 70 0a ad 84 bd ac 8f d2 92 36 7e 0c cf a8 09 ed 2f 3e 7b 87 bb 16 e9 16 02 b6 b9 ea 87 8d 2b 39 50 41 aa da 92 5b 02 46 31 0d a9 59 0e 7c c7 d7 14 60 34 02 03 27 80 e6 30 c0 cf f2 d0 3c 2d 17 3e 07 95 eb 25 64 95 71 56 cd 36 6e 42 22 8b 59 1f 5f ca 59 7e d8 35 ec c2 d1 71 27 cf e2 0e 17 5e e9 68 f5 5f 5d f1 01 49 26 b0 c9 66 54 11 cf 69 dd f5 64 23 45 d6 b9 0c be 2f 88 70 59 92 ee 3b 65 bb 00 1b c2 a3 1d ac a0 85 84 bb 93 f4 e5 59 b8 0f d5 76 0c 68 14 99 38 20 Data Ascii: *SvOeFo<K,(n b%5l,e[f.DdIVo6"rVdI+Bp6~/>{+9PA[F1Y\|`4'0<->%dqV6nB"Y_Y~5q'^h_]I&fTid#E/pY;eYvh8
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 0a a2 c2 fc 9f 24 e1 a2 7b a4 04 b8 15 b4 d3 92 14 c4 12 c4 13 2a a9 0e 8f a1 87 24 f1 1e 0b 85 24 c4 57 e3 40 9d 1c 1d 4b e2 24 45 20 07 d2 ba 27 7e d0 0b 24 2d 57 3e 6e e3 fe aa d3 0a f0 9e 2c 49 0a ee 7d ca d5 e9 1f 8f 46 87 92 84 0b f7 03 4d 89 24 b0 b0 a1 ea c7 63 49 c0 81 76 c8 09 74 89 fe 2b 93 f0 22 84 94 0a 76 f9 3f 2b 1d 12 81 8a 9f d0 8f 95 8c 95 48 c9 1d fa b1 92 d1 2f 24 ab 23 fa b1 92 21 da 91 1c f0 7f 56 32 44 35 92 47 5d fa b1 92 8f 38 79 8b 42 48 64 e4 ee 85 f4 63 e5 ee 73 f2 16 dd 27 9c dc f6 e9 47 72 d3 ed 90 b8 79 07 75 d8 83 9c 2d 39 a8 1a a9 36 b7 29 d0 8a 32 b6 8e 47 a6 23 b8 7c 8d 62 c6 90 6a 8f 5f 48 63 8a 15 58 19 69 dd 52 33 9d 8c a0 03 db ae 73 7c ec 3a 9d 76 5f e8 d0 2d ca d3 43 3c 69 1f 77 90 45 f3 8b 43 bc b8 60 0b 4f 3a 5d Data Ascii: ${*$$W@K$E '~$-W>n,I}FM$cIvt+"v?+H/$#!V2D5G]8yBHdcs'Gryu-96)2G#\|bj_HcXiR3s\|:v_-C<iwEC`O:]
2024-11-01 15:52:28 UTC	1185	IN	Data Raw: a0 20 0d 98 4d 33 9c 8e c1 f1 ab 81 84 fd 20 ae 93 62 29 1e 34 36 d7 12 92 34 dd a6 97 25 99 26 05 7c 55 06 87 d4 69 a6 26 66 09 cb 5a 9a b1 e0 2e 06 4b 37 52 d2 2b 07 c1 74 fa 00 c8 0d 47 7b 3c 98 b5 d8 5e 0f 06 98 8b 1f 61 39 d1 32 8e 62 00 38 0f 0b dc eb 41 b3 b8 75 aa e7 31 83 fe d2 00 b2 e3 ad da 37 51 4e ef 27 84 75 88 c3 61 98 df 74 77 22 2e e5 cc cc 89 41 77 5f 36 a2 79 ef 43 84 d9 e0 bd 70 7b 1f e3 1e 68 60 c3 d4 ce de 2c a1 0f 1b f0 b3 39 30 27 70 bd ec e7 f3 dc 93 0b 97 b3 94 ac 20 3e e9 8e 33 93 80 92 02 1a 97 60 98 07 6d 0c 12 08 6c e5 d3 97 40 95 eb e9 c1 d4 40 a7 2a 7d 60 2e 80 59 79 d4 ca ba 79 32 35 b3 15 5d d4 6e 98 b9 93 08 be 5a 6a 89 9b 05 71 11 ad a6 82 26 cf c0 cc 9b 1d 4d 49 36 10 c8 65 65 a6 c0 28 fd 6d a5 df 09 02 7c f5 60 40 40 Data Ascii: M3 b)464%&\|Ui&fZ.K7R+tG{<^a92b8Au17QN'uatw".Aw_6yCp{h`,90'p >3`ml@@*}`.Yyy25]nZjq&MI6ee(m\|`@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49815	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/11358.3abf8514c0ca6feab7cf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 607ccd991bed92af254384e8e9705b60 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:11 GMT Expires: Fri, 31 Oct 2025 12:18:11 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99257 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 31 0d 0a 9b 0d 0a 30 66 66 32 0d 0a d3 46 f2 e7 ef f7 57 08 27 cb da 89 2c 6c cf bb 27 86 90 81 dd e5 02 21 5f 06 f2 7d f6 c8 3c 20 db b2 ad 60 5b 5e 49 9e 61 62 fc bf df a7 aa ba 5b dd 92 3c 0c 5c 36 77 cf 2d 21 09 33 fd 5a 5d 5d 5d 5d af ad c6 3a 8b bc Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001010ff2FW',l'!_}< `[^Iab[<\6w-!3Z]]]]:
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: b5 f7 dd bd b0 32 c0 2a 8d 2e e3 e8 ca 2c 13 00 d7 0f f1 b3 34 54 83 dc 73 97 8b 61 09 6f 0a 55 1a 25 56 11 61 b3 21 90 03 0f 8b 30 1f 34 86 8d 32 94 0a 87 c3 75 9e 27 4b 2f 06 6d 79 c1 30 42 7b a6 83 27 f8 5d 2f e8 3b 35 bf 34 35 d8 a7 59 f2 78 e5 85 cb 18 53 44 63 6f 1c cd c3 eb 41 a3 d3 b8 ff 03 88 4b f7 52 cd d0 ed 1e 40 74 61 af 01 34 fe 53 01 7d 92 87 d8 ba cf 04 75 fd a7 82 fa 8a ce d6 1c 1c e5 73 31 fb af 75 42 f4 5f 22 d6 7f 27 19 fc 17 cd e8 0d e7 c9 e8 dd 67 a2 78 04 e6 f5 a7 82 7c 86 09 3f 02 b1 22 e3 1a 6a 06 ff 04 d3 5a e6 90 83 a2 94 d8 54 ae 38 aa f0 38 f5 8b 39 fd 74 36 b9 7d 9a cc bd 61 92 62 7f db 1d 6f d5 ee 34 3c cd c3 85 45 7d 1f 2f 57 6b 1c 62 f9 cd 61 df 52 f4 00 ec 7b 1c 59 07 56 4f ac 8e 1b b1 58 c5 7b 1e c5 97 06 00 c3 8e 2a fd Data Ascii: 2.,4TsaoU%Va!042u'K/my0B{']/;545YxSDcoAKR@ta4S}us1uB_"'gx\|?"jZT889t6}abo4<E}/WkbaR{YVOX{
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: c2 66 93 5e 7b 8b ac 1d ae f3 a4 e1 b9 1a 60 d9 48 70 ce fb 05 0b 8e 31 01 39 4a 30 34 c4 ea a6 4b 91 43 1d aa 68 9e 84 63 dc 3d ea 37 87 16 5a e0 ae e7 37 72 57 9f cc 7b 31 e0 88 fa ac b4 c0 ce 07 ea 21 da 6d 10 e3 3d b3 19 af b3 8d 05 2b 3b 1b e8 29 ea 59 99 26 1a de 48 1a b3 b5 f5 bb 27 87 dd 5e 8d d9 9e 1d 17 e2 4a 80 5d bf 0b b3 3b d9 ed 95 09 9f ec f6 ca 84 5f b2 db 9f f4 0e bb b0 cb 93 dd be 7b b0 d7 43 37 32 dc 9f ec 77 8f c4 6e bf 4f 6e 02 63 b7 3f 54 cc 73 ed cf 60 9e 67 6b bc 36 82 7b 97 da b2 ed c3 08 0f c3 f4 26 4f af 59 9a 85 69 fb 75 76 01 bb 35 1c 05 a1 16 ad 49 67 20 31 46 c8 d8 e3 2b 29 41 c1 36 0c c6 c9 32 7a 90 37 e7 ad 3e 4c d6 8b 38 23 b9 33 4b e6 97 11 8a 82 7c 16 2d 59 56 d8 92 d5 7c fa 85 6f ff 41 7c 7b 32 68 ae 4b ac 3b b3 6c fe Data Ascii: f^{`Hp19J04KChc=7Z7rW{1!m=+;)Y&H'^J];_{C72wnOnc?Ts`gk6{&OYiuv5Ig 1F+)A62z7>L8#3K\|-YV\|oA\|{2hK;l
2024-11-01 15:52:28 UTC	391	IN	Data Raw: 31 3b da 34 a5 2f 72 02 a2 e1 2d 93 78 f9 4e 21 a5 1c c2 01 fc 88 c7 f3 cd 9c dc 77 05 86 2c d8 2b cb 1c ab 60 bf d2 ba 86 58 d7 90 10 59 b3 2c 77 c7 bc 62 29 69 3c 9d e5 7a 0b 6b a0 63 d1 ca 9a b0 d5 6f 34 e8 bf 12 35 d9 f8 5d 01 8e 15 e3 77 75 ff 25 f4 2d 44 8b 09 99 c7 d9 f2 af b9 97 ac f2 78 01 fd 65 cc 62 ac 50 36 c2 9e 2e 63 44 32 7c 77 6f 45 5b dc ea 5b c4 b7 c6 70 6b 1e 2e 9b 27 b9 b7 84 bf 71 d0 88 96 10 cb b5 a0 d6 b8 0f ea 40 1d 77 75 dc c5 5a c9 d7 44 6f a9 f7 6f f8 90 b1 7a 2f f2 e3 1b dd 48 b4 37 fd 9b a2 27 69 4e a6 b5 c5 8d a6 35 b2 9f 5d da 97 ae 9c 11 73 d7 7e 62 6f 0b f3 c5 15 b7 6b 8c 1f 10 4b 10 85 10 ae 0b eb 9e e1 1d 6c d8 73 00 d3 0b ac 8e 5b 5c b4 4e 07 83 a0 6a 8f d5 4e 27 8e 33 02 9f 87 5b a2 c2 5e 05 f5 c3 29 93 10 57 50 7d 75 Data Ascii: 1;4/r-xN!w,+`XY,wb)i<zkco45]wu%-DxebP6.cD2\|woE[[pk.'q@wuZDooz/H7'iN5]s~bokKls[\NjN'3[^)WP}u
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 78 0d 0a 30 30 30 30 32 37 66 33 0d 0a b4 d7 3d b6 a4 1e 05 f0 2f 1c f3 fd 9b 05 30 d6 d5 81 c5 95 62 be 7b bd e3 13 15 60 7d 70 88 60 6b 0a b0 46 24 b4 08 4a da 78 2b a1 d6 ca 7a cb a1 d6 07 bd 0e 9a 92 c9 56 59 6f 39 d6 5a ac b7 14 6b 7d d8 3d ea a1 01 c5 5a 77 0f 60 17 96 58 eb 93 c3 93 63 18 75 67 d4 8d cd bb 14 5f ad cc bb 97 54 08 10 10 b7 3d a5 52 09 cb 86 4d 10 81 dd 47 c7 1d 0e cb 46 78 fa 3e 80 a5 a8 ee 2e 86 6f f9 d7 54 cd 51 e4 54 7a 7c 8c 15 70 35 19 a8 e9 07 96 03 e9 87 bd e3 bd 13 8c 8c 1f 0e f7 0e 79 88 1e 24 44 f9 a1 7b d2 3b c6 58 57 3c 55 f7 58 aa 0f bb 18 ff 14 f8 39 39 2e bc 75 fe b9 7f e6 7f ed bf f4 5f f8 af fc 27 fe 63 ff a1 ff dc 7f e3 3f f3 7f f7 7f f4 7f 2e 19 Data Ascii: 0000000100000001x000027f3=/0b{`}p`kF$Jx+zVYo9Zk}=Zw`Xcug_T=RMGFx>.oTQTz\|p5y$D{;XW<UX99.u_'c?.
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 35 83 1c cb 74 33 85 28 80 84 6d 0e 6f 21 79 60 92 ac c1 1b 85 a8 e2 14 d6 4e 30 d4 12 b1 e8 d9 3f 91 4e 9e 80 4e 9e 30 9d e0 36 e6 31 84 38 16 31 65 1f cc bd 80 78 dd f3 89 40 af 89 e5 7b 69 68 67 93 7a df d3 2e b7 9d 22 be ac cf 28 e5 94 64 16 7d f8 21 68 38 53 31 fd 6c 88 16 85 21 3a 0b d9 0a 05 c1 25 0f 19 9b 81 e0 f1 ec d2 57 98 57 0a eb 09 4c c6 2b 68 4b 8f af 99 ed fe 6e b2 52 5d 25 bc 22 3b dd 49 55 4c 37 ec e4 3a 3f 2b 28 44 b3 91 5f 92 9c 38 80 44 96 56 28 80 d4 0a a4 8d 73 6f 0f 52 1f f9 7d c1 71 e0 b1 20 06 22 84 80 34 dd 05 b6 db bd 76 ac c3 fe 18 9b f8 58 6f 22 f2 8d 79 30 75 c8 f9 67 8d 7b ad 9b 14 0d 8a d3 cb 65 8a cf d4 1d 54 ae 2f d0 a8 9a 6b 2c ee 6d 2f d4 dd a4 a2 12 71 10 28 aa 4b 9d 43 8d 0b dc 9a 7c bb 97 ee a4 87 f3 39 73 48 be f8 Data Ascii: 5t3(mo!y`N0?NN06181ex@{ihgz."(d}!h8S1l!:%WWL+hKnR]%";IUL7:?+(D_8DV(soR}q "4vXo"y0ug{eT/k,m/q(KC\|9sH
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 90 99 bc df 45 24 14 2d c3 54 40 c6 53 9b c4 98 b3 6a 78 31 5a dc 0b ab 70 5a 22 1f e2 d1 ee 84 25 0f da 87 0f 08 97 d6 cb 9c 57 bb 5b cb 9c df bd 3b 77 96 09 22 6e ae 1e 08 39 16 47 be 7e a5 2b df 32 69 96 56 63 f7 45 48 10 53 d9 0b c3 42 9a 3a 45 85 8e ab 4e 28 91 ac 95 47 45 60 3a 45 fd b3 77 51 9d 64 3b 49 63 0c c7 43 d9 27 88 87 55 34 d2 28 2b 83 c4 37 2c 47 b8 36 a4 be 52 b5 6d da 2f 1e b6 73 58 8b 95 b8 61 92 34 ac 25 23 8b 93 fd a1 f4 6c 08 8e 25 5b 79 21 48 8e eb bd 8e 83 1c 07 51 1d 31 1b 3b b5 34 74 5b cc d2 d9 be 83 20 2b bd db 08 a0 2d fb 5c ad dd 9e dc bd 3b 71 76 5b 33 1e d7 6e 55 07 d1 da 6f 38 dc 1d d7 32 ac 56 74 48 d9 78 92 e9 53 ad 8d 20 75 63 58 cd e9 44 6b 23 88 73 0a 74 7f ac cb ca 58 3a 8f 72 98 fe f1 14 22 29 3e a4 9d bd 40 c2 7b Data Ascii: E$-T@Sjx1ZpZ"%W[;w"n9G~+2iVcEHSB:EN(GE`:EwQd;IcC'U4(+7,G6Rm/sXa4%#l%[y!HQ1;4t[ +-\;qv[3nUo82VtHxS ucXDk#stX:r")>@{
2024-11-01 15:52:28 UTC	1408	IN	Data Raw: 41 45 2e 25 c7 23 7b b5 89 1b 09 fd d1 45 a6 38 00 29 1d a7 ec 97 82 ca c4 4e a9 66 83 ca 90 32 d4 da 96 9d e5 b5 23 b0 02 47 31 70 c9 e0 ed 2c cf 57 59 ff de bd cb 38 a5 27 b3 a0 f8 90 04 7e 8f 9b dc 8b 20 87 8c e9 fd ba 2d 89 7a d1 0f fc 0c f3 a0 0b ab 3a 5e fb 1e 90 ca 05 fe 16 67 8f 10 69 c8 4f 21 42 db c2 3b ab ef a0 70 c1 ec 88 b4 a7 ed db d3 49 f0 f4 c7 00 6f a8 2f f5 1b 5c f1 84 5e 34 84 80 38 0e e7 a0 56 11 c9 cc e2 04 34 db 59 23 ed e1 77 83 4f 84 c6 a1 9f 6a bd 72 dc 95 91 00 6c 9e fe c4 59 44 63 95 34 fb 9b 9d 31 24 fc a3 c8 43 b9 a1 a9 63 f0 b9 55 0f 86 02 3e bf 5b 35 56 2c f2 b6 cd 99 a2 6f 39 b4 6d be b8 15 2c ae 7d a1 dc 25 24 04 c2 eb 92 5f eb 77 e4 6a 92 a1 c4 61 d3 80 ad 99 9f c1 e7 37 3a 2f 7c 07 f7 ba 89 c8 bc 2d 5f 70 5f 1d bd 78 a5 Data Ascii: AE.%#{E8)Nf2#G1p,WY8'~ -z:^giO!B;pIo/\^48V4Y#wOjrlYDc41$CcU>[5V,o9m,}%$_wja7:/\|-_p_x
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 93 56 df 7a 4c 9f 43 d1 bb 19 e3 83 04 f2 be 9c 8d 3d c6 2c df 47 32 a4 ec b6 bd 59 7a af d5 49 99 e3 02 51 87 50 6e 73 83 e2 b0 1e 08 fe 5a 8d 21 2b b5 af ea 7b 71 b0 1c f6 21 11 f3 2d 5d 77 61 02 eb 21 ae 78 9c 95 fa b1 d5 63 ca c2 3a 78 1f 6a 06 c6 20 ee 7d c0 df db fb 37 dd 07 46 1c 30 0c 90 7e 68 8b 49 8b 97 0b 54 80 c5 0b b6 21 0f 6b d9 45 16 68 ba 13 52 bc 3b 31 c2 ea d2 3c 5c 2a 9a fa 8a 04 18 7c ac 4d da 52 f0 29 65 77 2f c7 e5 83 37 9c 0a 46 64 9f c0 81 6e c3 79 cd d4 06 f2 d2 cb 86 78 bb 0f 9f 9d 8c da c3 28 bf 82 71 57 56 60 40 ba 0f 87 0f 3e 02 27 a0 21 d7 c6 48 4c 86 a9 56 27 50 ac ba ed 1c 61 6c 57 65 50 19 bc 84 a2 e2 22 33 2c 1f 37 06 b3 5b af 03 e8 48 9c 23 b1 b1 ef 41 8e f4 40 a6 5e 1b 88 e0 0a 2d 34 d8 a2 d9 27 21 cb 5c 43 f4 3d a3 5b Data Ascii: VzLC=,G2YzIQPnsZ!+{q!-]wa!xc:xj }7F0~hIT!kEhR;1<\*\|MR)ew/7Fdnyx(qWV`@>'!HLV'PalWeP"3,7[H#A@^-4'!\C=[
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: af 6c 34 b8 0b 71 b9 2a 5a 2f 94 1d d9 9c 3d b0 54 62 80 fb fb d6 98 43 d8 72 8b 9b 90 bb e0 78 30 97 76 70 21 5d 34 73 33 f3 19 d6 e4 d6 d4 50 43 c1 35 34 ac 78 98 72 b4 af 59 a8 39 56 5c 2b fd 0f f6 7d ef 10 f4 74 a4 6e c2 62 08 81 fa 64 12 4e 86 02 98 5d a5 a0 df c7 65 d0 3b 40 f7 de 81 12 49 e0 00 c9 63 3c e1 67 a0 3f ec 1d 8e 8e 15 36 dc 4a 19 e3 e4 18 f7 49 87 fe a7 2f 0d d3 8a 21 88 46 51 34 29 f7 37 e8 23 5c f7 f6 d0 bb a7 31 4e 8f da c1 56 ad e7 d7 ee 02 26 23 6c ee 3b 5d e1 6c 63 51 21 40 95 b7 91 eb 2b 26 a7 62 4c 36 5d 99 91 ed 7b 9e 7b 5a d5 32 7e e5 72 a6 6f 82 16 fd 2d 79 6e 06 77 94 70 17 bd a5 36 f9 15 b5 b2 5b d1 64 18 a9 8d 50 bc 46 6b 5a d0 c3 d4 49 62 4b 3c 7f 3a 00 86 1e 32 d3 3b 15 7a 96 e8 20 3a d1 fc 58 0d 25 54 c3 ae ab 39 92 5d Data Ascii: l4q*Z/=TbCrx0vp!]4s3PC54xrY9V\+}tnbdN]e;@Ic<g?6JI/!FQ4)7#\1NV&#l;]lcQ!@+&bL6]{{Z2~ro-ynwp6[dPFkZIbK<:2;z :X%T9]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49817	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/74278.df011db4b71607f93e04.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:28 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cd0672f9d9f66a7b15f86f545b5ff553 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:20:26 GMT Expires: Fri, 31 Oct 2025 12:20:26 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99122 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:28 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 31 0d 0a Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001{00000001w0000000100000001000000010000000100000001000001
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 01 31 3c 86 74 4b 2e 56 f6 99 b3 a4 b2 22 a5 5c c7 ac 91 d3 74 24 db d9 ce 7d 30 5e 64 59 78 b3 05 42 11 e2 e1 e6 df a6 69 2c c2 64 0b 80 9e bd 6d 08 ff bd 14 d9 8d 6d 99 72 72 cc 4d e4 55 f6 16 de b4 64 85 6d 6d 56 97 2b be ea 65 19 e8 81 4e e4 4a 92 d2 05 fd 5d 16 8d 65 d4 00 98 64 1a 66 d3 46 ad 7b 7b e5 78 cd ae 77 df de 11 b9 53 c8 b1 db 17 bd a1 85 7d e5 c8 79 79 c2 1f d7 ce bb 39 7f 1c 3b ff b9 e0 8f 13 e7 e7 9c 3f 2e 9d ff 3e e7 8f 2b e7 fa df f8 03 93 c4 7b 09 ed 41 dd 41 b7 e9 c9 3d c8 f7 fb 03 6c 47 b4 07 f5 7b ad 76 cf c6 fe 81 4d ca f7 db 5d db 09 69 67 ea f6 3b 1d 7b c4 b2 d1 88 83 53 f3 3c 8a 0b 91 99 8e 19 47 f3 a8 30 cf 9c c9 76 a6 63 a6 19 96 29 0a 67 28 84 64 89 8a 9b 0f 71 94 a3 fa 48 ef 23 c6 94 36 07 2d 33 0c 9d 4d 92 14 1b 11 33 85 Data Ascii: 1<tK.V"\t$}0^dYxBi,dmmrrMUdmmV+eNJ]edfF{{xwS}yy9;?.>+{AA=lG{vM]ig;{S<G0vc)g(dqH#6-3M3
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 35 b6 cb 5d 78 24 cf fa 17 b5 d3 fe 87 b5 43 3e 8b 49 a8 4c 74 ee 87 71 46 a8 7d 02 da b0 00 64 ac 7b 28 c3 e7 d0 bc 63 7b 24 ad 01 7c 06 5a 5e da 96 45 a8 46 2e 1d 09 f2 ef 68 c8 c7 7a c4 e0 96 b9 75 2b a9 3c cc 1d 06 33 4c 56 b0 5d 94 08 da 8e 6f 3b 74 b8 83 aa b8 5a 49 24 8f 35 92 16 fa 48 dd c2 a3 3e 24 7e 98 83 2d 0c b3 12 43 c2 95 b5 01 85 eb 84 d4 76 25 56 a1 78 67 24 c8 73 c8 65 d6 da f9 48 f9 e4 09 69 de be 7d ea 9d 01 a7 8d 83 a6 2c 52 d3 8d 63 bb 38 6d 9e ad 86 38 a7 0b 54 5f 99 bf 42 16 bb bf a5 51 62 99 86 69 43 11 ce b1 37 96 da bd b3 04 b9 72 67 66 3b 8b 4d 14 96 7f 14 0a 37 41 7c a0 26 e2 47 91 bd 62 64 78 0e 30 0b 44 75 07 7f eb e9 08 09 7b e6 12 3e 5a f3 1e a1 86 aa 74 1d c9 a2 1b 4c 8d 95 28 99 95 14 fa bb 3b 29 b1 a8 a6 70 61 22 fa 20 Data Ascii: 5]x$C>ILtqF}d{(c{$\|Z^EF.hzu+<3LV]o;tZI$5H>$~-Cv%Vxg$seHi},Rc8m8T_BQbiC7rgf;M7A\|&Gbdx0Du{>ZtL(;)pa"
2024-11-01 15:52:29 UTC	467	IN	Data Raw: c0 cb 2d a6 87 50 cc c7 88 e0 c0 4e c7 07 75 72 04 6c 96 48 ff 26 2b 36 2f 21 6f 0b ea 93 b8 92 12 b2 8c b2 32 48 51 91 e1 34 16 5c 45 c9 34 bd 22 f5 5b 67 c9 53 7f 29 94 75 63 e9 85 af 0f 05 7a 3f c9 34 1a 96 65 37 a4 3f 9e 14 2a dd 6f 55 c8 7a 10 2d 84 ef a2 6b 31 b5 3c d2 63 bd 66 13 cb 4a 36 4f 97 a4 c5 e3 08 01 07 02 42 0f d6 30 7c f6 6c 02 c7 67 89 b0 b5 5d 83 a0 0d 44 c7 5e c1 17 ba 83 22 8a 56 bb 0b 9d 07 81 ef 22 9a dc 7c 64 49 9d 22 66 d3 6d 2a af fa fa 0c c8 06 30 b6 7d 3a 82 20 fc 75 7f d6 7a be 9f c7 69 01 1f 3a ff b0 0f 3b df df 43 be b1 2f 5d ab 30 96 5d e0 9c 4b 46 40 c4 2b 88 6c 0e 17 58 21 d0 60 bd b8 0c 05 a8 61 48 4e 6e 9c ed d8 c0 43 47 63 e9 e8 9d d4 9d da b5 da 95 b7 17 e7 20 d5 6a b7 b7 57 35 22 27 f3 04 5e de 7e af 7d af 8c d3 b2 Data Ascii: -PNurlH&+6/!o2HQ4\E4"[gS)ucz?4e7?oUz-k1<cfJ6OB0\|lg]D^"V"\|dI"fm0}: uzi:;C/]0]KF@+lX!`aHNnCGc jW5"'^~}
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 31 0d 0a ac 0d 0a 30 66 66 37 0d 0a eb c3 34 5e ce 13 0a 8c e1 2a 63 aa 10 60 27 85 63 06 a1 43 b0 fc 70 f6 1c fe 6c 04 31 04 b7 47 af be 3b 19 7a 5e d3 79 f7 fd bf bd 96 5f df be 3d 39 79 fb 66 d8 6e 3a 27 6f 7f c4 0f ce 79 a4 ee 5c 1f 93 8d 50 82 fa 71 91 97 a0 6e 6a f9 f3 f6 5f ab 7c ff 9e 82 eb 17 d7 51 2e e1 c4 bd 3e 1c a3 15 74 28 5f d1 e4 63 8e 8d d2 c1 19 af f1 d3 31 1d 90 26 ee bf ff bb ab 55 08 71 c4 a6 4a cb 3e 30 9f ce f7 9e 4e Data Ascii: 00000001C0000000100000001+0000000100000001600000001000000010000000100010ff74^*c`'cCpl1G;z^y_=9yfn:'oy\Pqnj_\|Q.>t(_c1&UqJ>0N
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 41 b9 d1 de 1a 5b b5 c8 6b d2 8f 80 ec d3 40 0d 28 5b 71 60 4e 96 19 0c fd c5 24 8d d3 cc 7c ae 9c 97 fb 7b 54 63 7d 58 75 19 29 77 c2 3d ff 6b bf e9 60 a3 82 bf f8 fc a5 bc d9 a3 ce b9 50 3c 29 30 ee 48 5c 40 ed 3c a2 4b 80 27 92 c6 27 80 0b 83 38 9d e5 69 8a 55 ee 67 c9 87 0b 30 c1 c5 a3 99 80 38 e0 1f 83 0d 36 c4 03 4d d4 ff 15 1b d4 7c d3 0f b1 82 94 0e 58 6a bc b2 1f 64 8c bc 0a 6d f9 22 e6 b0 e9 7e ef 6b 5a 88 62 fa 2e bd aa 47 ae 30 02 72 13 d3 a7 02 1d f3 f4 9f eb e2 8b 44 93 2d 4f 1c 33 68 ae 31 69 af 0a e6 0f e9 54 20 70 a4 f4 14 da ab 9d 35 6a 01 33 e0 ff dc fd cb 4b dc 45 92 08 48 cb 1b 82 00 e9 8c b3 bd 47 0a 0e fd a8 0e 38 88 f0 23 45 96 ae fb 71 6d b5 bb 96 71 7f 64 da 41 e0 9f 2c 53 36 8b aa 10 06 9a 11 23 70 54 20 02 9a 2b e5 b3 10 3e d2 Data Ascii: A[k@([q`N$\|{Tc}Xu)w=k`P<)0H\@<K''8iUg086M\|Xjdm"~kZb.G0rD-O3h1iT p5j3KEHG8#EqmqdA,S6#pT +>
2024-11-01 15:52:29 UTC	1392	IN	Data Raw: ab 73 4c a9 51 ee 34 18 a9 f3 3d 5e dc d1 8a a7 54 8b d5 49 77 9a d2 b3 88 16 6e 89 44 e5 c0 24 e5 74 09 5b 68 73 97 d9 8b 07 b9 d6 77 4d 67 ab bb 6e 70 ed 06 07 ec 75 42 7d 31 40 40 a2 bb d0 64 ab 92 5c 01 53 d7 1e 22 ea 69 ae 73 be 99 c8 17 8f 2a 35 9e ac 61 ea 16 00 bd 66 f2 dc f3 f1 ca 11 d8 fc 11 21 63 89 c3 01 61 7f 25 fb c2 fd 81 60 7c ad eb 56 b3 a8 d4 e1 3f 8d 83 22 7a 15 d3 75 5f cc 1a 87 58 20 c8 dd 4a c8 04 f8 bb 86 af e9 70 1c b9 0c ea 11 68 72 c6 69 c0 78 b3 50 df b7 52 51 3b 51 4e 77 25 2e f0 f6 88 9a ce 6a 0c 5b d1 6d 4c 33 0e 46 c2 4b 33 44 71 19 2b f7 49 5a 72 9b ef 38 f2 91 43 be 76 98 8c d4 eb 86 74 16 c3 7f 9a ab ea 03 50 6b f1 91 23 f8 64 68 dd f6 18 64 b0 de ef 3c 88 ba 28 a4 e0 98 4f 4a 43 39 e4 da e6 86 43 29 b4 0a 3c 9f c1 2f 32 Data Ascii: sLQ4=^TIwnD$t[hswMgnpuB}1@@d\S"is*5af!ca%`\|V?"zu_X JphrixPRQ;QNw%.j[mL3FK3Dq+IZr8CvtPk#dhd<(OJC9C)</2
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ca 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 31 0d 0a c3 0d 0a 35 62 37 0d 0a 38 b5 84 cf f4 68 a4 10 d6 08 65 1f ba 3e 1e aa d6 17 8e 86 7a 05 af df ff 71 20 bd 9a 78 94 63 0d e6 06 59 a3 e4 3c 5d ab 20 fb a9 46 43 15 38 b2 b1 81 f7 8c e1 83 85 97 4c c1 93 ae 25 85 23 27 7c bc 4c fd 48 9c 46 cc 0a b4 43 ad 41 c3 f5 93 2c fd 28 d6 bb 5f eb d0 df 59 65 13 43 c5 73 b5 b8 ef 9d e3 de aa f6 a8 d1 93 f2 cb 37 07 76 a2 62 8f ca 39 6a af 6a 2c 1a af 1c dc e1 ef b6 e8 85 9b 5b 32 98 2f f0 9e 5b 1e fc 99 2f 68 5c 46 e2 ea db 14 b1 d8 4d Data Ascii: 0000000100000001b0000000100000001^00000001}00000001U00000001s015b78he>zq xcY<] FC8L%#'\|LHFCA,(_YeCs7vb9jj,[2/[/h\FM
2024-11-01 15:52:29 UTC	160	IN	Data Raw: aa 9a ef d0 66 78 e4 c9 df 49 03 32 c6 69 e2 ef 16 7d e1 4f 9b 7e 8f 7a 00 e6 79 54 ea d7 fe 74 b8 66 2f 87 84 a3 5c 07 6c e7 34 63 ac 22 74 dc a6 df 06 fe 18 13 d5 08 c5 b5 6a 68 44 0d 00 82 9a c5 a8 d9 43 ab 1e 69 10 2d 42 a9 ef e0 cb 63 e4 f0 c5 bf 7f db 35 16 9a 00 8c ca 5c ad e0 75 fd 97 bd bd af 60 28 a0 2b da 70 19 2c 60 ae 80 69 2e e0 7f 22 cf 9d 9e 37 3d 6f 3a 6e 8f 7b 5e b7 d9 3b 1f b4 44 b3 ed fe 86 77 85 c3 c5 ff 00 00 00 ff ff 03 00 80 35 9e 50 89 6f 00 00 0d 0a Data Ascii: fxI2i}O~zyTtf/\l4c"tjhDCi-Bc5\u`(+p,`i."7=o:n{^;Dw5Po
2024-11-01 15:52:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49818	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: b969442b0ad2c89fd1a7acfcc31752e3 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:47:04 GMT Expires: Sat, 25 Oct 2025 15:47:04 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605125 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a c4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 66 66 32 0d 0a db 36 92 fe bf 4f 41 2b 1b 8f 98 21 d9 94 d4 52 b7 28 cb 49 c6 49 ce e6 4c 32 33 27 ce fe f2 fa cc f0 02 4a 1c 53 a4 0e 49 b5 dc 51 f4 14 fb 77 9f 6e 9f 64 bf c2 8d 20 29 75 3b d9 3d 67 ad d8 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001000000010000ff26OA+!R(IIL23'JSIQwnd )u;=g
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: e1 f3 76 46 6f cb 1d c3 24 c0 c0 11 d2 b4 8e 55 89 af 5b 74 83 62 63 ac cc fb d9 c3 72 24 39 fb 96 4f a1 b4 b1 41 ce 67 50 4d 58 25 96 e5 a7 f2 48 2b 63 a8 c0 b6 d9 e5 f6 38 c7 86 ca d7 bb 7f 58 af ea 7d 58 58 7c 3b ad 47 5b a8 4f fc c1 da 84 7b 77 6a 25 30 4c 49 79 2c dc ac 61 bb 91 55 61 56 eb 51 74 68 1a a8 b9 f5 55 9c 67 f1 87 f5 e8 5f 4f fe 79 64 d1 02 bb 62 75 3b 4d 98 31 6c e1 c1 8d f3 b2 66 6e 59 e0 0b 7a 59 61 95 01 5d a8 88 c4 7f 6d bd 4a b2 07 c5 c7 03 e7 63 84 46 93 bb f4 e8 46 65 9e 8c 5e d3 a0 af 6e 08 d4 c3 68 60 10 dc a8 62 e1 07 8b 7f 3d 56 e1 be 87 7e 83 61 d0 4b f6 fe 87 b4 0a d7 b4 1a 76 e8 21 cc 0f 4c fd bc ae 73 c0 d8 b2 10 72 c7 97 44 9a 72 6c 0e 5b ae 06 36 96 d2 66 21 a7 1f 21 17 a9 a7 62 af a9 6d fd 25 df a8 62 95 f6 58 a5 fd 53 Data Ascii: vFo$U[tbcr$9OAgPMX%H+c8X}XX\|;G[O{wj%0LIy,aUaVQthUg_Oydbu;M1lfnYzYa]mJcFFe^nh`b=V~aKv!LsrDrl[6f!!bm%bXS
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: ba a4 4f 97 fb 3e a5 a9 bf f0 a7 7a e3 60 0e 7d 04 df bf bd bd ef cd a4 8f 73 ef 43 53 ba f3 e9 a3 2c 92 c9 ed 44 ce 8a d7 63 06 03 99 1a 42 5a fd 24 82 5a aa 68 e3 c2 83 35 7c 67 c7 69 92 a4 72 db b5 42 31 31 98 4f 9f ae 40 3a f0 38 5d 32 26 e0 7c 41 3b c0 79 3a 53 bb 51 2a 95 6b c2 b1 55 a7 4c ee 67 b9 a8 1d 70 c8 26 6a 6c 21 80 0e 34 4e f1 11 23 f3 c9 9b 40 73 03 ea 89 97 15 ec 68 3b f9 65 12 dd a7 6a 6a 5a 23 a2 1e 56 3c a5 4f 4f 00 3d 9c c8 4f 58 24 4d 95 10 42 0f 61 b9 8c c3 54 4e 54 0b a2 87 93 ce e3 bb a5 54 3d 25 8c 1e 0a bb 0f ef 42 b9 7b a4 40 7a 18 64 a4 94 99 12 42 e9 21 98 26 88 5b 4c b9 c7 e6 d8 5e 53 f9 8f 98 2c 37 b0 7a 7f 62 8b 4a 51 a5 28 1e b9 75 58 d4 48 50 ab 2c 0d 2c 14 7a 0e 55 cc ac b7 68 b3 50 2a 1d 39 d6 4f 65 84 48 56 fd fc a6 Data Ascii: O>z`}sCS,DcBZ$Zh5\|girB11O@:8]2&\|A;y:SQkULgp&jl!4N#@sh;ejjZ#V<OO=OX$MBaTNTT=%B{@zdB!&[L^S,7zbJQ(uXHP,,zUhP9OeHV
2024-11-01 15:52:29 UTC	401	IN	Data Raw: 53 14 ed 06 49 11 e4 49 36 9e 26 ac 3c ee a7 47 05 98 a0 b2 57 ae e1 4b 0d e9 09 73 c5 fd 50 1b 71 f0 a8 43 84 0f dc b9 b6 93 00 41 d1 43 c4 27 14 77 22 cb f2 e0 6d 2f 39 92 95 32 80 1d 02 4a 95 1e 6d 23 52 02 61 d5 fe d1 ee b8 8b 4e 5f 43 9f 24 16 d7 a2 21 0e 35 4b 0c a9 4f 43 1c 01 c0 4d 2a 23 3b eb 60 19 00 7b 25 d6 a6 03 e7 4d f6 8a fb 26 e1 5b 29 80 65 d5 ea a2 c7 5d 75 3d d4 4a 59 16 dc 4f 43 c9 82 5b 11 ee 1a 56 dc 8f 5c 68 ad dd 41 e3 a0 41 28 52 d0 61 d3 d4 71 5b 44 e7 5d c9 9b da 67 2b 5f 25 35 f8 12 25 a5 c4 11 ea b3 9b 0a 07 b5 2a b8 ea 22 6f 20 1a 8a eb f9 c9 7b c0 85 65 21 2d c7 b5 28 dc 63 81 8b 74 11 2f 38 7d 1a 17 30 8c 4d 77 09 aa b6 c5 00 f6 5c 20 25 02 2b fb c4 2d 9d c1 29 77 25 dc fe 05 7c 77 e2 22 0e e5 e8 9d c9 19 b9 19 24 f6 a4 1c Data Ascii: SII6&<GWKsPqCAC'w"m/92Jm#RaN_C$!5KOCM#;`{%M&[)e]u=JYOC[V\hAA(Raq[D]g+_%5%"o {e!-(ct/8}0Mw\ %+-)w%\|w"$
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 36 62 32 0d 0a 4a a8 d0 6e 7e 37 a6 8d 31 b8 71 57 de bf 2d a0 91 0e 89 22 99 26 09 c3 2c 4b 2e 86 27 7d ce c7 4b 22 17 bd b6 b1 9d 8d fc 9d 0f 63 80 8c c1 e4 a6 36 66 7e 25 c0 30 d5 f6 d3 48 5f d0 cb 2b b4 b5 54 fb f2 e9 02 0c b6 35 c0 34 35 57 a8 1b 1a 4a 01 01 3e ed 49 1c 6d ec 7e 20 10 58 0b 54 98 17 28 de e1 f8 87 fb c4 36 62 17 39 0f b7 07 24 d4 de 5e b8 60 5f 79 93 a1 25 9f 66 89 cf 9e be c9 24 2e 5a 9d 44 01 5c 14 9b 8b 92 b2 aa 01 8e 4a c6 21 9b 41 2a bc 12 19 ac 4b d7 7c 03 c4 bd 73 54 7c 7b ce 5d b6 e2 b8 09 77 7d 1b dc 57 52 66 be 29 f7 81 37 43 15 45 d4 c3 a4 c4 f9 e1 b0 d1 de af 93 68 2f 81 f2 3a 8e c0 db dc 51 b0 a0 e9 0d fa 0d e7 85 ca 2e 6a 27 b2 d4 60 4e c4 37 70 e9 56 96 d8 82 5a 74 a8 47 Data Ascii: 000000010006b2Jn~71qW-"&,K.'}K"c6f~%0H_+T545WJ>Im~ XT(6b9$^`_y%f$.ZD\J!A*K\|sT\|{]w}WRf)7CEh/:Q.j'`N7pVZtG
2024-11-01 15:52:29 UTC	329	IN	Data Raw: 24 39 c0 13 4e 5d 56 10 a8 58 a6 f7 9e 5e 14 51 19 32 65 2d 86 10 05 75 59 d9 6a fd ae 74 d6 e2 5e e8 b0 97 9a a4 3a 78 23 97 d8 0e 1a c6 f8 bf 12 24 f4 46 d4 d8 88 19 e6 6e e3 5e 1e 1c 08 6e 8c 34 b8 a5 f5 39 fd d5 67 77 dc ab f2 dc 2f a6 cb 7a 9d f6 df 49 fa 7f c1 55 9f 1b 23 fe 11 4a 26 df 34 bf 21 8d 53 e9 a0 bf 92 b7 2e 78 9a 2e f3 06 ac 97 4a 70 3d ba eb 46 e5 5f f3 30 4f cb dc f2 a6 e2 3c ef 4c 2f 82 4f e2 1a 12 85 61 3d ad ce 8a fd 01 4f 9f 8d 3d 6b a4 1b 66 b9 65 a0 26 6a d5 f8 90 e2 28 d1 18 7d 22 47 7f 47 2f e3 de 5b 6d 0c 2f 14 a5 d3 d9 0c e8 94 8e 20 f6 c7 6b f6 77 fa ca e3 7b db fa ac f7 c0 f1 14 16 78 5b ca ef 5e a5 b8 32 f4 e8 ee 0f f4 ff a6 c0 c8 73 8b 32 a1 f3 67 b8 6c cf cd 87 10 9e 50 e3 cb 2f 96 1c ba 18 bc ff 68 9f ff e0 8c 46 ef 6d Data Ascii: $9N]VX^Q2e-uYjt^:x#$Fn^n49gw/zIU#J&4!S.x.Jp=F_0O<L/Oa=O=kfe&j(}"GG/[m/ kw{x[^2s2glP/hFm
2024-11-01 15:52:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49816	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:28 UTC	689	OUT	GET /gui/16339.77d3ab69801aa191ff1b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f46266b7b04d7b15421f1df5bcfb4781 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:35 GMT Expires: Fri, 31 Oct 2025 12:18:35 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99234 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001000000010000000100000001000000010000000100000001
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 84 26 aa 02 98 c9 3b f4 27 79 94 0c 4a a5 0d 8d c4 8f 5f b8 71 f2 18 63 39 f3 93 cb c7 c9 71 b8 3a f2 67 f3 e4 7b 3f f6 47 81 97 0d c9 f6 d5 a0 ee 94 75 3f 80 80 fb fb 9b 64 fd 45 b9 3d fd 45 a1 3b 98 67 f4 e0 24 f6 bc 25 ee de 97 92 79 e4 b9 49 d5 1d 03 ef 4a 76 69 e1 06 e7 6e e4 55 a7 ee c2 0f 2e f1 20 0e a7 09 3f 49 c2 30 38 f5 93 d2 07 c7 5f 8e 83 f5 c4 8b b9 67 04 6f 6f a8 fb e8 5f d7 47 3f eb a3 0f 02 b3 1b a6 be 86 a9 bf 05 53 03 a4 1e d6 53 a9 54 a9 ec 00 ea 2b a0 d1 71 f8 38 f0 dd f8 b7 83 ea d8 5d ac 5c 7f b6 fc 8f 84 d6 51 18 78 5b a0 d1 e8 06 94 f8 22 1c 48 52 1c f8 b7 ae 2b 03 07 64 59 69 14 78 b3 1e 05 fe d8 25 22 f1 04 8b fd ba f1 45 de 2a 8c 76 22 f2 6f 3d 88 63 30 0f 0f 94 ea f9 72 b2 26 09 c0 db 46 61 63 9e 3e 7b e9 da a5 14 2f 71 99 12 Data Ascii: &;'yJ_qc9q:g{?Gu?dE=E;g$%yIJvinU. ?I08_goo_G?SST+q8]\Qx["HR+dYix%"E*v"o=c0r&Fac>{/q
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 0e fd 56 e9 1e f8 7b d6 a2 27 9a 5c de 6c be 32 ad e2 35 9a cf 6c 52 c3 c8 9f f9 cb 0a 74 bc 91 93 2d df f8 35 3f 76 fe 1c 86 b3 c0 13 90 3c 07 bd 0a 1e 8d 9c 49 38 fe 01 22 1f 88 18 75 79 30 72 66 41 38 f2 5e 80 ac d2 fd 86 a0 71 b6 0e b0 70 95 14 57 52 a0 18 fb d1 38 f0 5e 84 63 2e f7 e1 83 5d 96 e1 67 13 44 df c3 34 73 63 c4 bd 5e bd aa c7 48 ec 6b 2f e2 6a 98 42 b5 bf 5f 9b 1c 64 30 0d 86 c1 1e 4d 6d a0 db 0b 1c a2 bf b6 ae 39 be ae e6 38 ab 39 1e c6 7b 6a 8e 75 cd a6 76 5e 90 59 37 e2 5e d7 88 9b 35 e2 0e dd 3d 8d b8 ba 11 37 25 ee 27 44 29 d3 71 4c ae 6b 62 92 35 31 19 4e f6 34 31 d1 4d 4c 20 fe 30 7b 48 2b 1f 5f 57 f9 38 ab 7c 3c 1c 83 25 01 11 2f 92 93 dd 2b 7f ac 1b 19 43 12 22 3e 73 72 0e 46 73 82 09 c9 4c 07 ab eb 5a 5b 65 ad ad 86 ab fc 1e df Data Ascii: V{'\l25lRt-5?v<I8"uy0rfA8^qpWR8^c.]gD4sc^Hk/jB_d0Mm989{juv^Y7^5=7%'D)qLkb51N41ML 0{H+_W8\|<%/+C">srFsLZ[e
2024-11-01 15:52:29 UTC	479	IN	Data Raw: 99 b8 b6 73 e6 06 6b 38 5e 0a c5 23 e0 6c 93 6d 63 40 37 53 71 65 10 24 da 9e c3 06 b3 2e 0d 9c 60 17 70 9e 01 38 cf 7e 63 e0 00 2c 44 4a 36 7a b7 f3 6f 14 68 21 9d 82 75 9b ab e2 09 00 f0 44 01 00 84 3b d0 42 5a 66 ba 48 ad 53 79 23 4e 49 0b 41 f4 d5 43 c2 fb 02 45 37 e8 36 b7 ca 63 c4 50 95 81 8e 37 78 6a a8 5f e8 7b 73 8d f4 b3 38 f3 4e a0 68 dd e2 d3 3f 61 b8 3f ed 1b 6e 6a 9f da 31 78 03 ab 79 c0 d7 8f 57 35 af 86 9a ee 59 33 c1 ef d6 05 3e 4d 18 59 cd 1e 24 27 a4 f5 dd f6 9c 11 af f7 8f 1f 79 aa f2 ca a8 6d d7 dc 6d e8 7d 0b e8 7d 4b d0 33 f7 13 26 05 d5 50 da 2d e5 dc 3a 07 70 77 0d 74 0f f9 7f 89 be bf bc a5 99 d7 d2 c9 2d 50 78 4d 9d e0 72 ad 07 e3 fc 14 fa cb 72 c9 b6 e0 95 61 a8 d9 6e 34 67 e6 d2 7e 85 11 bf da 37 62 26 eb 85 a5 9d 9a 25 f7 e8 Data Ascii: sk8^#lmc@7Sqe$.`p8~c,DJ6zoh!uD;BZfHSy#NIACE76cP7xj_{s8Nh?a?nj1xyW5Y3>MY$'ymm}}K3&P-:pwt-PxMrran4g~7b&%
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 33 33 62 37 0d 0a 82 f0 1c e8 20 f0 d0 1b cf 97 e4 c8 05 dd 15 6f 04 6d 74 7a 42 f5 c1 ba 1e c2 81 3f 52 b5 e3 17 3e 2b 5c 0b 35 e6 aa 61 09 48 62 0a a2 b1 62 1f fe 8d 6e 64 67 20 c0 5b 74 c2 84 13 fc 0c 9d c2 2c 68 8d c7 b0 04 f3 e3 3c d9 65 4f d7 6a 75 5f ab 28 f4 03 52 57 fc 1b 11 0c 38 f5 54 3c d4 2c d3 45 4d e9 49 7e f5 4e b0 f7 85 c5 ee 61 bf 55 17 30 9d 6e 6c fd 13 c8 63 3d 71 2f 75 2f cc 25 9e 3a 9d 30 78 00 41 83 49 ed 2a ff ef 25 09 6a fa d0 6d 7f c9 ab e4 07 3f 80 1f c8 8d 89 03 75 fe 36 f0 f5 d7 82 d0 6e 42 59 7a f8 3c 3c 8c 95 7b c9 f6 7c 40 c8 4a bd Data Ascii: 0000000110000000100000001v000000010000000133b7 omtzB?R>+\5aHbbndg [t,h<eOju_(RW8T<,EMI~NaU0nlc=q/u/%:0xAI*%jm?u6nBYz<<{\|@J
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 4f 21 ba e9 04 59 97 5f 13 64 dd 56 82 ac 73 24 c8 8a 93 eb 32 64 91 61 03 66 65 22 e2 88 48 8d d7 48 26 56 76 1c 07 9c 56 f2 90 29 ab 39 bc b8 dd e1 fb 0f 42 42 e1 7e 25 09 b5 08 15 57 ce 0b 44 a4 92 40 a7 8a ca 5b da 22 0d ef d4 e5 83 b9 e7 4e 80 b9 71 fa 20 08 5d d2 5e e0 7e 13 7b c9 5b ae 0f 09 3f 82 a0 9c 54 ae 58 38 4c db 70 b6 0a 6c 05 d0 6e 6f fe 22 22 16 11 f0 a8 10 22 2b 3b 37 58 64 56 64 cf 81 8b 28 76 46 fc 4c 9b bc e4 46 8a 8d a1 62 b1 e4 72 4e ce a6 ca f9 6c 01 77 53 44 ad 6b 69 37 21 19 3d ef 67 a3 1e 61 b3 42 50 48 2d 2f 60 5a 3c 34 0d 8d 47 69 84 82 e9 f0 b9 a4 ae 2f 55 d7 a1 e6 70 27 d4 c7 88 fe 99 eb 5e 42 72 ae d6 3f 11 e3 2b ca ea 38 08 13 8b 4c ed c3 92 de 64 51 95 08 6c 7d f8 56 36 aa f0 82 41 99 b4 93 e8 f4 3c 1d da fc 21 78 24 c7 Data Ascii: O!Y_dVs$2dafe"HH&VvV)9BB~%WD@["Nq ]^~{[?TX8Lplno"""+;7XdVd(vFLFbrNlwSDki7!=gaBPH-/`Z<4Gi/Up'^Br?+8LdQl}V6A<!x$
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 72 c9 da 8e 91 c2 c6 a2 95 4a 24 f7 7d 82 5f 60 52 9f a5 59 f5 82 aa 5e 48 d5 e6 10 65 3b 52 98 2c ed 63 4f 5d 25 aa 68 d6 0a a5 a6 68 9a 36 bb 25 ef ca 95 f2 7e 4f 95 0d 2a 7a ed 61 cd c0 cf f4 25 02 49 1f 99 37 03 ca 95 1f 87 88 4a 25 13 b4 22 30 6a d2 35 c1 24 74 bd 9e 3a 1b 7c 38 4f 9d 41 c5 36 1b 3b a6 7c 64 3b b5 6e 41 42 6a b7 38 a9 1c 5c 8a de 2d 20 75 1b e7 62 47 a4 37 ed 53 07 2c 9d 6f a0 2e 3b cf a9 e2 68 fd 94 6c ad 84 db fb f5 b7 48 f7 e3 b9 cb ed ef 33 c6 ff 4b 6a d1 5a 88 6b eb d8 ea 3b 87 e6 5e fb 89 0c 7d 6f e7 d5 be 27 ab 02 2a aa 14 04 45 25 24 58 b2 d2 34 89 74 45 aa c7 73 40 9c 32 1c 22 c1 18 1d 1e 00 55 a3 28 1a 4f 13 fb 6e 62 1f 1a 7a c4 c7 c0 e1 af 89 f6 6f 25 d1 fe 5b e8 11 4f 8b 7a c4 d8 79 22 49 39 3f 53 7d 98 29 ff 44 76 83 bf Data Ascii: rJ$}_`RY^He;R,cO]%hh6%~Oza%I7J%"0j5$t:\|8OA6;\|d;nABj8\- ubG7S,o.;hlH3KjZk;^}o'E%$X4tEs@2"U(Onbzo%[Ozy"I9?S})Dv
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: f8 30 fa 80 94 20 ef 4b df 7c a3 ef 4b 1f 08 bf ee f8 95 2b fc b0 9e 95 9c 59 d8 1b 22 81 3c 00 eb 8f 6e 54 9a 24 a1 95 cb 96 e8 64 34 9c e7 92 2d 2b 85 56 d6 4f 5c 92 07 e6 0f af 36 38 c1 44 8e 7c c4 91 16 ec 97 e6 c4 88 dc f3 ca 3d bb 8a f3 53 85 6a 96 44 50 40 65 43 9f 32 2b 1a ce 74 38 0f 43 99 06 b5 7b 1d 8b 42 15 bb 84 54 a0 fc 01 64 ab b7 5e c2 97 8f 64 04 14 b4 87 6e 0e 4a 8f b5 f7 9d 2a 78 ff 7f 97 1f 0d de f9 1f 9f 57 b0 77 78 34 e8 7d ac 77 3e e2 fc 55 5c 1e 06 38 2b 10 29 e4 a5 86 bb f7 1d 72 3b 2a fb 95 47 32 1a ad 80 df a0 5a 80 05 99 47 b0 9e 76 50 16 49 bb 02 00 a1 db d0 ab ea ad 6d 0d 07 c3 a6 70 ac 5c 6d d4 b0 af e2 41 60 2f 07 c6 1b b5 2f 09 1f 62 11 4b 5d 8f ae 26 d0 08 d1 66 66 a0 ae ea 36 93 eb 41 f2 3e fc d3 9f 3e 40 97 e3 65 35 60 Data Ascii: 0 K\|K+Y"<nT$d4-+VO\68D\|=SjDP@eC2+t8C{BTd^dnJxWwx4}w>U\8+)r;G2ZGvPImp\mA`//bK]&ff6A>>@e5`
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 60 88 2e 2f 53 be 13 9c 93 a9 70 46 08 6e 91 48 2b 85 9e ba 0a 03 20 92 4c b7 80 8a 86 14 90 7a fc 1b 2a 23 e3 35 f2 c9 04 d5 0e f9 f7 93 f2 27 87 67 c5 52 75 0e 03 f8 64 31 38 9e e9 ca b4 05 c4 60 87 e4 63 f5 76 9f 8b d5 63 52 c2 bc ad 1c bc dc a3 19 e1 6d 08 69 e9 5f 99 8a 11 02 60 a6 d4 f8 bc 6f 73 ac eb d3 95 18 ba 95 7c 17 94 d4 f3 e5 35 98 98 bf 5d 8b 36 8e d3 d2 fb 9d 49 56 8a b0 a0 02 db 9f 17 fd d4 f6 0d 63 cb d5 40 03 13 db eb c4 e3 20 d3 dc b0 f5 ea c8 5a 7c 35 d4 9f 14 55 4a 93 4b 48 c9 fe 58 c9 5e c8 11 83 59 ac 1c c8 ee e2 e7 74 7f 71 28 51 a9 64 33 cd b9 1a 81 4f 49 a8 62 49 8d 9e 42 0e 60 46 9d 54 99 90 c0 9a 2a 49 19 07 57 ea fd 00 db e7 cc c0 6a 53 82 c6 10 69 1e d9 d8 8a 2d b1 cd a1 ac fb 2c ff 24 e8 90 9d bf d7 6d b6 ba 70 9d c4 65 ab Data Ascii: `./SpFnH+ Lz#5'gRud18`cvcRmi_`os\|5]6IVc@ Z\|5UJKHX^Ytq(Qd3OIbIB`FTIWjSi-,$mpe
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 21 11 1b 8a b1 11 86 3c c2 90 69 98 f4 bf b6 a7 15 21 ae 0f b7 cf 77 41 39 35 18 f5 89 db b5 80 f0 21 4e c8 3c 87 57 09 72 45 d3 11 ba 0c 49 00 8f 63 5d 52 17 a3 9d 43 53 8e 17 04 3f a5 55 c7 77 11 85 c8 40 b1 ae f7 0d 57 01 30 c8 1b 92 40 01 41 04 43 47 28 24 a9 ff df d7 b5 bd dd e8 97 b8 5f e7 a7 76 31 aa 16 b3 05 a9 1c f3 3a d6 94 d5 78 dc ef b4 bf 77 01 4b 15 2d 6e 44 97 eb 3e 19 2d e2 9c ee f2 4a 21 93 72 88 a3 ea 34 80 81 fe 6a ea 69 da 79 a7 c2 db 54 46 f8 fc 1b 31 29 d9 fe 41 6a 12 a2 39 16 8b 90 11 09 52 d2 26 19 25 12 69 2f 08 3e 3e d2 88 0b 37 37 8d 86 cb 30 99 67 d9 c2 53 02 61 d9 5f d7 67 45 f6 a3 a6 03 78 33 b9 38 e9 43 77 8e 52 15 90 24 b1 b5 20 52 b4 df 85 11 98 da 6c 47 16 aa 1d 19 8e 36 2f 9f 01 c2 82 59 3c 4d 1a ba 45 f4 55 16 dc e2 e3 Data Ascii: !<i!wA95!N<WrEIc]RCS?Uw@W0@ACG($_v1:xwK-nD>-J!r4jiyTF1)Aj9R&%i/>>770gSa_gEx38CwR$ RlG6/Y<MEU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49819	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	689	OUT	GET /gui/38304.bf8d5ba4a04bb6a92f62.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: da67d3e8209c7977aa352b021143edf0 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99250 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 31 0d 0a c6 0d 0a 30 66 66 30 0d 0a b1 e7 ff fb 14 10 ad c8 a4 03 62 78 bf 8d 28 59 19 29 27 3a 91 2d 1f 8d ec f3 6d 94 d9 31 48 82 43 58 24 c1 10 e0 5c 4c f1 fb f6 59 f6 d1 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001000000010010ff0bx(Y)':-m1HCX$\LY
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 83 b9 4f a3 c8 82 c7 99 05 e1 c5 2c 19 96 00 97 92 73 15 4e 92 99 fa 2d 08 5e 9d f8 f1 2c 9a 4e e3 00 65 64 b0 56 86 bf 5e fb 37 66 d4 4f d5 82 8c af 87 a5 36 5a 1b 23 8b fe ae 87 a5 56 9b ba a5 1d 93 6b 45 f5 28 2d 4f 43 90 c5 52 b2 f6 97 f1 ca 07 52 24 a5 23 cc ff 08 13 a3 3f 0c 8d 9f 2b 2e d0 63 ee fd 67 a5 bc 5d f9 93 09 f6 e8 00 63 5f 5d 97 5c 6e 8a 3e f8 4b e6 a5 3f 77 5c 2d f4 18 83 be f3 57 a8 5d e2 e5 95 5d 52 1a 3c ca 6e ba 27 4f f8 bb 80 c0 2a dd de c9 ae 34 a4 f6 d6 9e 96 a4 e9 df d0 94 da e6 79 42 a0 3a ca e2 ba 26 16 86 62 3d 79 22 fd d9 43 d4 69 7b c6 90 9b 37 e0 54 ac 7e 80 84 1e 2c 69 77 9d ae d6 3c 98 26 83 12 76 1e ad 55 12 ad f0 bb 4f bf d1 e5 e6 9b 72 bd ca 00 d7 14 09 69 d2 ab 20 8d 5b af 55 76 3b 77 ec f1 ce 8e 87 4c 21 36 cb d8 9f Data Ascii: O,sN-^,NedV^7fO6Z#VkE(-OCRR$#?+.cg]c_]\n>K?w\-W]]R<n'O*4yB:&b=y"Ci{7T~,iw<&vUOri [Uv;wL!6
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: ce e1 12 73 1d a9 04 2a f4 e6 72 bf 60 fa b5 83 f8 7a 38 51 f4 69 0f ee e1 da 40 8d 54 e3 55 b8 04 39 26 d4 1b 03 f5 3a 9d 5a bf 71 08 f5 d6 de 04 10 db 8e 06 44 ca ff b6 93 9b 35 29 35 1a 8d 5e 5f 29 35 da 1d 28 38 48 a9 51 5e 97 fb bd 3e d4 17 5a e7 a1 d4 1b a2 f4 20 ac 54 4a 0f 52 6f f4 1b 9d 7a 5f d4 1b 4a e9 41 ea 8d 3e 1a eb 41 84 82 9f 4a ff b1 a2 66 bb 28 8b de d0 40 bf d9 ef e2 f4 b8 40 01 85 ed 33 2a d0 e8 36 68 0c 48 24 8d 0c 8f 80 76 14 fd a8 37 7a b5 3e aa 6c 50 a5 d3 6d d6 91 b8 c0 cf 7a b7 db c6 b6 21 29 01 7a 6a 65 a5 04 2e 84 03 ee 63 f7 d4 7d ef be 70 7f 75 df b9 af dc b7 ee b9 fb d2 fd c5 7d e3 be 96 0d a5 af bd ce 1f 48 81 a1 97 da d1 c9 74 c7 83 b2 e4 05 49 26 71 00 f3 5f a4 55 94 42 22 d8 e1 e3 d3 a7 b4 34 35 41 6a 8f f5 50 94 32 c1 Data Ascii: sr`z8Qi@TU9&:ZqD5)5^_)5(8HQ^>Z TJRoz_JA>AJf(@@36hH$v7z>lPmz!)zje.c}pu}HtI&q_UB"45AjP2
2024-11-01 15:52:29 UTC	416	IN	Data Raw: 6c 01 4e b1 1b b8 f2 b0 84 5d 29 db 8e e5 30 eb c0 9f dc c8 f2 9b 4a ea 0a 61 be 57 73 d8 43 e5 ca 70 bd 13 1f 52 56 08 74 4d 49 c6 57 b6 44 51 72 28 48 95 34 e2 9f aa 01 80 89 e3 9e c3 f8 d5 b5 42 40 53 9f e6 f2 de 1f a5 e3 f7 97 37 a7 40 d9 51 74 6d e4 cf a6 70 b4 94 06 4e 58 fe 48 d7 91 ed 4e 9a 9e fb bf de bc c1 c2 07 13 b3 df 4d ef ca 6a 86 7a 7a 61 91 33 22 91 a0 39 a6 f1 99 1f bf 0c 63 28 e5 c3 05 04 a8 e0 67 6f bd cb 85 9e 75 97 fb b0 f0 5e b8 90 0e 9d 55 d8 94 65 3c 0b 60 5c a6 e9 8e 1a c7 bb e0 6f 9b 10 a2 5e 73 21 74 18 26 64 78 76 fa 56 2b c5 0f 4f c3 94 90 cb 9e fe 24 3c 67 e9 38 60 78 0a 12 9f a0 db 95 32 0c 50 c8 93 fd 8a c9 ba ab 5c 32 f5 c0 2d 19 8b 17 3a 91 8d f5 10 8f 4e 35 11 3f 2f 5b 83 15 41 9d d8 c4 dc e0 9a 7a 33 7c 9d bd a6 12 95 Data Ascii: lN])0JaWsCpRVtMIWDQr(H4B@S7@QtmpNXHNMjzza3"9c(gou^Ue<`\o^s!t&dxvV+O$<g8`x2P\2-:N5?/[Az3\|
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a ad 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a c4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 44 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 88 0d 0a 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 31 0d 0a 65 0d 0a 30 66 65 65 0d 0a 02 8f f4 16 b7 64 f3 61 7c 9d 9c 1b 73 81 38 53 f8 b9 Data Ascii: 000000010000000100000001000000010000000100000001}00000001G000000010000000120000000100000001D00000001000000010000000100000001000000010000000100001e0feeda\|s8S
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: cd 08 26 fb 55 18 12 5a 45 be ac 29 64 ac ec 30 c5 25 30 1b b7 56 75 6b d7 82 05 92 fe e7 73 2c 88 ea ab 79 6d 17 c6 ef e8 3e 7f 22 b3 a2 dd ca 83 e0 89 68 b8 13 2b cf 22 00 25 7f 0e 81 47 24 1c a0 dd 6d 69 ad 02 50 a4 64 37 da 84 f3 c9 9f 70 f8 53 5b 2c 46 56 66 99 5a 29 65 a8 16 f0 7f 7d 63 38 ac 9f 3f d0 3d 8b c8 65 b0 ab 26 fe a8 74 06 8e cc ba 5b 58 f4 4c 2a b2 32 45 1d da 3f 3f 96 61 8f fc 38 a0 be 77 47 2a e1 32 11 3d c9 eb 09 25 05 bb c7 db f5 f3 9f 9f e3 bf bb 9f c1 ed ed 7e de 81 e3 85 c3 83 da 17 06 0a 34 2b a5 f5 c2 9c 58 cc cf 60 b1 27 a7 b6 d7 1d b8 83 f3 49 21 0e e6 64 21 cf 7e e4 30 e6 96 6a 5f 0e 02 b2 b2 a4 d1 68 3a 75 15 82 e1 bd f2 80 28 10 27 92 a5 09 88 ec 71 2e 11 1d ce fd 71 40 02 45 98 89 c2 fc 75 cc 9e 5b 5e 12 26 d0 8c 24 90 9d Data Ascii: &UZE)d0%0Vuks,ym>"h+"%G$miPd7pS[,FVfZ)e}c8?=e&t[XL2E??a8wG2=%~4+X`'I!d!~0j_h:u('q.q@Eu[^&$
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: c8 80 48 9a a8 16 b8 64 1b 4f 90 39 56 66 c1 5f 01 58 af 0c b0 14 b2 61 88 55 22 3a b8 f9 3a da bf a3 0a c4 8b e6 60 8f a1 1c 23 fc 73 e0 b4 d2 de e3 fd 74 00 9a ba bd 14 41 05 4a a2 d1 22 ac 48 27 bd 47 3d 6a c1 00 1b 65 a5 98 53 51 c3 7e 17 2c 37 15 39 f5 c2 54 b5 eb 92 db eb ca 0b 58 d5 fb 76 45 93 39 89 96 d3 f0 22 56 65 33 5a 5c f7 27 f7 cf 95 33 96 dd eb fd a2 d8 16 e1 c3 19 f0 5a 2c 55 d8 b0 6f 01 c4 b7 00 22 b6 be 3a 5e 83 7d a4 14 6a 12 e8 2c 52 6a 9a 0c 85 9a 1e 27 c4 86 6b c2 07 82 0a aa 90 a5 bb 52 b2 5e b1 cb 11 91 13 54 d0 9b 88 19 ab 22 39 39 c7 e8 ce 79 89 b1 8f 61 79 ab 19 32 f1 8c 57 d3 34 db 63 91 90 af 10 ce 16 b9 9a 1b c4 d7 09 d5 10 51 06 e4 9a af f3 e0 9d cb 7c a0 fe fe 56 27 e4 0b e6 34 b0 ea e8 cb 8e 2a 15 66 ea 71 0a a3 13 4c 04 Data Ascii: HdO9Vf_XaU"::`#stAJ"H'G=jeSQ~,79TXvE9"Ve3Z\'3Z,Uo":^}j,Rj'kR^T"99yay2W4cQ\|V'4*fqL
2024-11-01 15:52:29 UTC	93	IN	Data Raw: 58 47 80 24 a3 e9 fa 81 90 49 54 4f 5b 7e 8a 64 36 a3 24 d1 12 6f d5 d5 fe 58 92 b6 f9 35 87 d0 91 15 a9 ce 71 48 c4 63 1f b2 49 b8 70 22 16 0d 49 7f d9 d3 3c 25 62 92 63 84 b5 50 bc 28 39 14 e6 92 9d 91 65 bf 0d 91 98 0a d9 64 db 62 72 c8 26 0b 04 16 74 c8 50 57 da cd 4e 0d 0a Data Ascii: XG$ITO[~d6$oX5qHcIp"I<%bcP(9edbr&tPWN
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a 75 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 32 63 30 66 0d 0a 7e 31 55 42 7a 0a 11 14 07 8b 10 be d4 38 5c 39 a2 14 e4 6d d3 2a c5 24 e2 78 2c 38 09 97 d0 31 d2 19 4b cb 56 98 67 16 82 34 6b 6a 96 c2 a7 ea 6e 18 1e 7a 4c 64 d5 fb 94 dd 21 34 b4 d3 18 45 fb ba 17 5d 43 2a d3 c7 60 b1 da 14 11 d4 4c 53 a4 78 09 98 87 aa 7f 11 39 f0 4b 09 af e9 4b 0b 05 d9 5e 40 9d 17 2a fa 90 2c 7e 26 43 4b 9b a1 95 8b a0 db 28 86 12 e2 30 55 10 62 ea 8e 9e 11 9f 70 1b 3a 65 a6 7c c4 73 c6 dc 95 39 b0 b5 76 39 30 c3 1c 4f e2 9c 16 66 ca ab 9a fe 67 4f 53 c4 1b c7 3a 86 11 ed 84 d6 ad 90 cb 98 26 ab e6 20 36 5c ed b3 50 4e 17 14 d4 52 f9 48 28 e5 48 9a Data Ascii: 00000001500000001u0000000100000001P00002c0f~1UBz8\9m$x,81KVg4kjnzLd!4E]C`LSx9KK^@*,~&CK(0Ubp:e\|s9v90OfgOS:& 6\PNRH(H
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 28 ce e7 a6 72 fc 9e ad 1b 8a 26 0b a9 86 ed 57 db e2 21 45 b0 54 b5 51 6c 02 ba a4 4c 2d 96 1a a5 15 7e 1d ea 2a 79 5d 48 da 7c 15 ae be 26 a4 0f b5 87 0d 0c 02 c7 76 8e c3 5f 49 10 dc ab 75 6e 17 04 bb 2a a8 df 6b e5 42 7c 62 76 cb 1b 18 33 b2 76 64 0c ed 88 0a e6 c7 52 f6 c3 cf 18 a9 20 7c 14 7d 12 61 fc fa 0d aa d7 69 d5 fa 12 7a af d3 e8 28 31 ef d2 7d 88 44 f9 c5 5f 2b 92 48 94 e5 65 41 ca 79 ef 80 35 44 94 28 12 20 ef 11 65 47 60 47 45 f9 0e 61 b7 cd b7 58 a3 91 1a c6 24 91 27 34 b6 11 45 52 51 46 5e 38 ff 8c 54 53 bf 9e 93 06 b4 94 cb 18 9c 93 70 f9 22 d3 59 87 ec 40 b8 13 ed f1 ab 07 21 df b8 5b 69 4f 77 5b ae 06 5b 49 e8 82 38 48 85 b9 a0 65 2b 6a 63 3a 1e ad 6e db 8c 56 35 fe f4 e8 60 e3 74 a9 cb 0f 36 b5 92 53 83 ce 80 4d 3e 08 a0 7b 92 53 d0 Data Ascii: (r&W!ETQlL-~y]H\|&v_IunkB\|bv3vdR \|}aiz(1}D_+HeAy5D( eG`GEaX$'4ERQF^8TSp"Y@![iOw[[I8He+jc:nV5`t6SM>{S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49826	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	689	OUT	GET /gui/13420.2099364bebdd02277cf9.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: afae9c4b31c65facee16cdd8840c8117 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:12:01 GMT Expires: Sat, 25 Oct 2025 15:12:01 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607228 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff ec 5d 79 77 db 46 92 ff 7f 3e 05 8c cd 7a 81 31 08 53 b7 4c 99 56 14 d9 89 9d 91 8f 58 72 2e ad d6 81 c8 96 88 98 04 18 00 94 cd 48 fc ee fb ab aa 6e a0 01 42 87 93 9d 79 3b f3 66 de bc 58 6c 74 37 aa ab ab aa eb 6c b8 b3 5c 39 79 91 c5 83 c2 dd f1 72 35 3e 0b 3f aa d3 69 34 f8 b0 3f 9a 25 1f 2e 8a f7 b3 f8 fd 24 8a 93 fe 0d cf ae ae 8e 4f fc 70 3a cb 47 de f1 f1 ca da fa 6a f7 24 b8 e4 7f 7b 5e 11 a8 20 f6 fb 4f 2e 2f a2 cc c9 fb b1 b7 b2 b6 b1 d5 f5 83 ac ef c5 de a3 ed 47 2b 7e 10 7b db 5b 6b eb 5b Data Ascii: 00000001000000010000000100000001000000010000010ffa]ywF>z1SLVXr.HnBy;fXlt7l\9yr5>?i4?%.$Op:Gj${^ O./G+~{[k[
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: ef 07 9d 93 2f 1e 86 85 ca 0b 4f f9 bb ee fe 2c 2f d2 89 db 53 4b 64 c9 f0 08 19 19 88 84 0d 1a 10 c8 7a 0d 47 31 70 32 ca 10 5f 38 8a 72 af f0 77 27 61 4c 72 64 3f 9d 25 45 36 7f 15 4d 14 5a 7b ae 8c 77 65 93 d2 ac f8 6a 6e 5e a7 99 b4 b6 5e a1 8c 7e ff 68 d7 3d 44 67 e7 74 ee 68 f4 ba bd d6 8e 2f ab 8e 16 7f ba 3d 33 5c bf d8 da 88 fa eb 79 bf 20 0c 65 72 ab db ae fb 7d 0c ae a2 ed ec b9 f6 d4 37 74 b6 bb f5 64 bc 81 de 42 77 45 cd c7 fb 27 21 90 3e 88 0a ef 18 4c de 86 dc 0f 6a 8e fe 27 61 0e 6c 78 90 34 81 a2 03 56 76 2a ee b7 e2 3c c8 db da 55 29 15 e3 70 9c 0e a2 b1 da 4f 27 d3 28 53 5e ee 93 68 5a 7c 8c c7 e3 77 53 a2 50 ec db 65 c1 db ea 5a b4 ed 82 08 19 42 ab 0d f2 78 09 71 7d 33 c8 f5 17 a3 28 19 8e 15 11 b1 91 1a 32 37 88 72 4a 72 38 3a 07 a3 Data Ascii: /O,/SKdzG1p2_8rw'aLrd?%E6MZ{wejn^^~h=Dgth/=3\y er}7tdBwE'!>Lj'alx4Vv*<U)pO'(S^hZ\|wSPeZBxq}3(27rJr8:
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 3c fe 5d c9 0b e4 41 5e 7f db 5b d6 ea 03 f2 ea 15 d0 27 f6 ed a3 eb 0b 90 e3 17 20 47 12 a4 b4 77 30 5e c8 23 25 e7 da 01 1e 1e d8 b4 3a 8e ce 8d 74 8a c6 f1 39 53 dc 59 67 00 4d 5a 65 10 47 71 9e 1a 89 50 92 10 86 3c 31 93 07 ad e6 3d 3c c3 c6 0f d0 fa 3c 2c d2 83 f4 a3 ca f6 a3 1c 26 19 8e e1 c1 78 06 d6 f4 54 fd 01 a6 31 2c ac b1 a0 19 5d f6 46 90 50 ee 0e ef da ad cc fa 1a 08 78 6d 23 80 39 be 22 77 83 8c 49 ce 27 0d 50 40 f2 ab 2e 5b 1b a7 de 3f 05 f3 56 6e ad 06 db 6a df 61 9c b3 ff 35 28 99 f8 40 7c cb ae e6 ba a3 8a 31 0f 2b 27 b3 79 fa b2 e2 43 cd 0f ac c2 d7 18 d1 56 ea 7d 38 c6 8d 28 5d 2c 76 f6 bc 63 d0 68 12 4e b5 77 df 87 ab 1a 1e fc 9e 38 c5 17 fe 49 f0 94 9e 15 29 b5 06 fa 70 35 bc 02 18 d8 ef e8 07 d7 4d f3 55 9a e2 d4 48 96 e6 29 8f 95 Data Ascii: <]A^[' Gw0^#%:t9SYgMZeGqP<1=<<,&xT1,]FPxm#9"wI'P@.[?Vnja5(@\|1+'yCV}8(],vchNw8I)p5MUH)
2024-11-01 15:52:29 UTC	300	IN	Data Raw: dd 81 ce 10 e1 70 35 e9 e3 e2 41 62 0d 4e 0c ad 81 24 1b b0 b5 52 4f 82 29 10 90 94 a4 12 d2 c4 d8 7c d5 9d 1b ad 17 71 1e e3 d8 d4 69 0b 8d 87 67 71 96 17 87 e4 c6 86 76 22 51 4a a4 c5 ac 70 d0 1b 56 38 42 f1 3c 73 bd db b3 64 38 4d e3 a4 20 3b bd 0a d6 eb 50 6d 63 2d c2 80 da 4c 24 0f 88 2c 51 9a 11 c7 e5 e9 09 85 da 62 84 28 29 9b 2c 53 51 9f 99 26 78 09 f7 44 b1 80 bf d9 5e b6 3d 31 3d 53 bb 2e ce 74 24 dd f4 dc 07 55 10 5f bf 66 d7 ce 80 42 fe 03 e5 43 d9 9e 21 28 43 ee e2 97 60 4c b2 ae b7 d2 5d 40 e4 0a 8e cf d8 e2 7f ce 61 7f 68 97 48 55 20 5a 22 35 40 e2 ab 3b 39 7c f4 38 82 54 78 3a 47 18 1a 2e 0a f6 fb b8 3d 23 b0 29 b2 d3 c0 51 5f 21 52 31 27 8f be 18 a3 82 80 32 d3 44 b6 cc f3 77 78 36 bd c9 6e 8f 75 05 a3 4b b0 1c e6 71 02 a0 87 23 17 ff bf Data Ascii: p5AbN$RO)\|qigqv"QJpV8B<sd8M ;Pmc-L$,Qb(),SQ&xD^=1=S.t$U_fBC!(C`L]@ahHU Z"5@;9\|8Tx:G.=#)Q_!R1'2Dwx6nuKq#
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 31 63 61 39 0d 0a 43 6b 67 cb 01 d6 b6 5e 3f c8 ea c4 03 2b d2 69 1f 43 cf 1b 1d 85 c6 1a dd 11 c8 89 a1 69 fe ce 39 1b 42 32 1e bc 07 67 e1 8f 53 1c 0f b4 39 d5 9b b0 4c 68 09 c8 cf 81 3d f3 b4 41 ba 77 98 96 67 6b 0c 96 19 35 3a 6d 8a 2d e7 73 0d b5 d6 3a ed fe e2 98 6d 6b a3 fa c5 2f a0 57 7f d1 b6 38 b1 3f ca 23 dd 75 75 fc 8f 48 96 23 fe 01 d9 0b 88 85 69 52 02 6b 11 08 31 de 48 49 00 5f 5c c6 7a 72 69 57 68 e7 61 78 a2 f4 93 5f 18 4d 35 78 cb e5 48 7a 9a a6 06 dd 85 bb b3 de de de 8d 1f 71 27 21 e6 2a 9f 48 92 16 1a db 14 18 cc 70 7b 0d 0c 4e 45 d0 2c 5f 65 22 e8 06 7e 68 d1 59 d5 c1 6a 14 3a 67 9f 43 93 9e 58 8e 17 29 c7 17 f5 33 86 40 16 eb 53 6a 46 c2 19 87 fb b0 3f 4f Data Ascii: 00000001000000011ca9Ckg^?+iCi9B2gS9Lh=Awgk5:m-s:mk/W8?#uuH#iRk1HI_\zriWhax_M5xHzq'!*Hp{NE,_e"~hYj:gCX)3@SjF?O
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: a4 f4 2e 19 d2 1e 4a 74 28 15 5e 47 79 38 5b 3c de 8d ad a6 85 44 f4 70 f6 c8 59 d7 10 bc 96 87 4b 6b 58 75 05 44 1a b5 bf 82 f5 8d 1c 7c a9 b5 b1 cf d9 52 3a 33 a8 3f 30 1a 81 c1 6a fb cb 79 fd 9e ab 19 c9 05 c2 e9 bc 17 78 6f 87 aa 94 02 04 d8 10 a4 82 54 1f d0 f5 58 3b b8 88 ef ae a3 2b 2c 08 7e a1 02 24 ae c6 c3 1d 21 27 ce 4b 25 a2 51 a2 13 dd 0e 00 a3 a5 b9 41 00 a6 e7 d2 91 f0 f9 53 95 3b 50 29 a9 75 3b 0b 2c 4f ee 23 a1 00 21 98 05 47 54 10 63 2e e2 f1 df ef 8d 20 68 13 4f 94 f7 99 2d 23 74 69 75 f1 76 7c 99 0d 33 1e 2c 3e 71 b0 4b 2c 3d 44 e3 ed 97 38 b0 1a 65 d5 7c 46 50 8d 63 69 ad ec 8b ed 2a 87 31 62 86 da cf 4a 94 66 12 da cd ec ad 2e 58 08 4d 29 a3 e1 00 c2 22 4d de d6 4a 75 30 96 3d 8b c8 46 6f 0a 2c 72 9b 9a c1 b2 6e 56 06 61 eb 8a ec d9 Data Ascii: .Jt(^Gy8[<DpYKkXuD\|R:3?0jyxoTX;+,~$!'K%QAS;P)u;,O#!GTc. hO-#tiuv\|3,>qK,=D8e\|FPci*1bJf.XM)"MJu0=Fo,rnVa
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: ed 7f 50 12 6a 2d a5 21 0c 59 0b 2a 05 98 45 cd b5 36 8b a0 75 7b 29 9c 1a 60 95 72 5b 7d 82 ae 0e 31 cd f7 d4 98 7d 99 94 2a 3f 69 b9 e5 2b e2 04 4a 75 34 de 27 5b ba 6c 94 09 5e 40 49 2e 9b 48 61 ce a2 41 61 37 7e a9 cd 6a a3 38 b3 a7 b1 ac 1e 35 22 b4 06 4d db 79 5e 52 32 09 86 28 64 79 47 e1 0d ef 12 46 28 5f 33 24 68 bf e5 24 2e c9 db b8 08 da 8c 7e a1 ed da 7e 48 13 6f 46 45 f9 07 26 7a 4b 7a 43 e3 cc a9 cd 21 de 87 60 b5 1b cc c2 c1 48 5d 64 69 f2 14 f6 34 a1 a9 6a 79 37 e5 df 2c 44 97 bd 14 32 df 9f e5 5a 28 1f 16 6b fe 06 d6 fc ad c9 9a 77 57 ba 6c c5 4c 13 ce cd 3b c7 4b 13 89 22 86 2e 69 53 d0 c4 62 b2 64 1d 52 0b 98 0f 91 42 01 b7 3b 5d c5 c5 cc 2a 67 10 35 c8 49 05 2f 75 b5 05 b7 08 9f 77 58 e1 bb 25 81 2b 1a 24 71 2e 99 b0 8e d4 28 e3 e4 cc Data Ascii: Pj-!YE6u{)`r[}1}?i+Ju4'[l^@I.HaAa7~j85"My^R2(dyGF(_3$h$.~~HoFE&zKzC!`H]di4jy7,D2Z(kwWlL;K".iSbdRB;]*g5I/uwX%+$q.(
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 87 6b 6a b9 53 e2 49 ba 0e 1d 39 8b aa 2c 7b 40 b8 33 01 f0 6a 11 98 07 89 ad 92 34 f8 ef 8b 27 90 28 ff af 79 f1 04 b2 21 b1 fb cc 84 ff 02 f7 4e c8 6a 4c 9a d8 d2 6d 1c ff 64 d7 4e c8 6a 2e ff 3e b7 4e 90 74 9c ed dc 33 92 83 e4 46 61 5f 85 df ff 2f 17 79 c1 0e 44 18 ae 84 99 bb ff 05 93 ef 60 ef f0 e8 fd d6 fb a7 7b 3f 1d e2 e9 41 04 77 d0 16 dc aa f3 bc 7a ba b2 5e 7b bc b2 de 78 fe f2 f5 ab a3 e7 66 f0 04 ee fc 51 35 76 f3 3d 3f 2d e7 de 74 b8 03 66 5f 78 33 68 b8 33 dc 8b 82 6f 0b 88 1f 6a da 3f 9e d9 e0 c2 cf cd e0 99 49 cc 6f 9e d2 fc d0 d0 99 9f b2 94 93 4a c2 72 9e b4 2e dd 05 3e a8 d2 d6 a9 bd 45 d7 ef d6 b2 1f 39 8b 4e 27 42 72 71 2e 86 d4 40 a9 0f 4a c2 b7 9b 45 98 9e 9d 51 02 35 b4 dc 24 1c ee 21 fd df 0f 3a 9b 3a f3 97 f2 7a f9 8a 69 a8 50 Data Ascii: kjSI9,{@3j4'(y!NjLmdNj.>Nt3Fa_/yD`{?Awz^{xfQ5v=?-tf_x3h3oj?IoJr.>E9N'Brq.@JEQ5$!::ziP
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 21 c4 f7 22 e0 2f 05 5a 2e 3d da 65 72 ce 69 df 1b ca c7 cd d7 0c e9 c3 86 fa 6b 86 e4 9c d3 5f 33 ac 9c 73 70 b8 91 9f 8e bf 46 88 0f 1b 7a 2b dd 4d 78 f7 e4 cb 86 eb dd 6d b9 3f 75 18 cc 82 69 30 09 ce 83 79 70 11 9c e1 5b 80 94 ce c1 de 88 c3 7f 5f 87 f6 7f f6 c9 bf 8f fd d5 8d e0 8b fe 76 b8 11 1c f4 57 36 ba c1 eb fe 7a 17 df 57 44 c2 d8 1e fe e2 b2 d5 fd be 37 6c dc 83 96 fd 81 2f f6 11 31 37 af 22 d3 29 87 5c ba 24 54 6b 59 25 30 aa ca 36 db fe 30 ed fc 6d 83 fe e6 8a fe c6 9f 64 89 f7 b7 bb 7a d8 a7 43 50 2f 2e 66 80 b5 16 4e d6 7f 22 43 9a a7 9b 5b ed 3f e0 2e 19 dd fc e9 08 81 3b b0 18 c9 39 19 8a 0b 18 d0 e2 e1 db 94 d2 b8 f7 29 e6 e8 13 6e 66 18 bf d5 97 41 49 4f 33 73 d5 e3 fb f5 5c f7 90 d7 41 2b c2 64 3a 20 4f 4a 51 dd 40 38 a4 70 bd fe 62 Data Ascii: !"/Z.=erik_3spFz+Mxm?ui0yp[_vW6zWD7l/17")\$TkY%060mdzCP/.fN"C[?.;9)nfAIO3s\A+d: OJQ@8pb
2024-11-01 15:52:29 UTC	331	IN	Data Raw: 9b 8f 28 df 10 df 7b f7 e8 63 eb 3b e3 30 46 f6 18 28 62 2c d7 f4 1d c3 2b 3b 0c f0 0d 74 97 92 11 54 b8 d7 1f e3 b5 f4 55 a9 7f c4 6b 8d 7f 5b ea 59 2f e9 fb a1 82 b9 de fa 23 7c 3f 74 51 07 6b 7d 15 ce da 7f 04 58 a4 58 23 6d 13 06 1e 5f b0 d3 e3 bd c7 67 3d 32 af d3 c1 7e 55 4f f2 c0 d9 e8 76 11 b5 85 84 19 50 dc 4e 45 74 2b f4 b8 a3 2f da e9 85 ab 0b 72 05 88 fe cd 8f e8 96 7c 4c 73 9a b3 09 e1 5b 8f e9 ec 6f e9 82 eb 0d 70 d1 01 6e 16 45 ac 89 c2 8e fc 26 a3 4b d6 df b6 22 0f 2d 61 5e 7f de 5d 7a de e3 12 ae 7a af 70 65 87 40 ae 00 2d 1d 00 48 78 9a 65 b8 59 aa c7 c1 52 95 2d 20 2f 21 69 a1 ad 57 9d cd 65 0c b8 51 08 ed 88 ec 41 a4 d2 0a f0 b1 1d 5c 2f 74 16 4d e2 f1 bc ea cd 8d 48 ad 4a 21 db 07 c8 fd e3 df e4 69 c4 27 0e b0 ff e7 f6 2e 94 06 f1 cd Data Ascii: ({c;0F(b,+;tTUk[Y/#\|?tQk}XX#m_g=2~UOvPNEt+/r\|Ls[opnE&K"-a^]zzpe@-HxeYR- /!iWeQA\/tMHJ!i'.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49827	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	510	OUT	GET /gui/70520.2084d2d63c64ac00d8ff.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ceebb2ad2a3b7f6a8caa2cbdc500a707 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:19:31 GMT Expires: Sat, 25 Oct 2025 19:19:31 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 592378 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 39 0d 0a 00 02 ff b4 5d 6d 73 1b 37 92 fe 7e bf 02 e1 5d e5 a4 2a 2e e3 f5 6d 72 39 bb b4 57 0a 29 3b aa b5 64 95 a4 f8 6e cf 95 e2 8e c8 a1 38 1b 92 c3 9d 19 4a 56 79 f5 df ef e9 6e 34 06 c0 cc 50 a4 ec 7c b1 45 bc 74 37 80 46 a3 df 80 e9 6d ca d4 94 55 91 4d aa de eb 83 32 5d cc 06 f7 e9 cd 3a 99 fc 36 9c 6f 56 bf dd 55 e3 4d 36 5e 26 d9 ea 68 4b dd 3f ff f9 f1 d7 c3 c1 7a 53 ce 0f 3e 7e fc cf 17 df bf 7c f1 6b ff 33 ff ff ea 20 ed 67 fd ea f0 e8 cf 9f ab 41 71 90 1d f6 ab c1 f4 20 eb Data Ascii: 000000010000000100000001000000010000000100000001000010ff9]ms7~]*.mr9W);dn8JVyn4P\|Et7FmUM2]:6oVUM6^&hK?zS>~\|k3 gAq
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: bb 1a 67 53 9d d2 e6 d1 d6 d5 e7 b6 c8 37 eb dd bb bd a4 c5 d9 ab 79 99 16 e3 e4 16 1b 6f 9f 5e eb a4 2c b1 c9 f6 18 0f 08 03 26 ff fc 7c 72 0e a6 f9 fd 6a 91 27 cc 6f 3b 13 57 77 da 7f 60 41 df e7 91 ba f7 c4 2c b3 72 b2 d7 9a 49 87 fd 07 e7 fa ed 35 30 ee b5 f7 a0 b0 c5 f2 87 bd 46 65 7b ec 3f ac f4 13 64 42 55 40 6c e5 ab bd 30 86 1d bf 14 31 fa ef 35 af 01 f6 fd e7 f7 36 19 43 6b d9 7d fb 4d 57 25 3a 14 38 49 77 de 48 d4 3c 9b 6c 51 c6 23 89 55 a4 b7 a4 42 3d 8c 7f 4b 9d 82 fe e4 16 77 9d ee 92 c5 66 77 5c e9 dd 3e f2 6a 9d ad 77 07 bd dc 54 e9 a7 9d 27 69 96 2f a6 7b cc 29 1d 5f 3b c3 5e 17 f9 04 4a 20 f4 38 52 12 c7 55 52 c0 f6 db b9 37 9f 71 f9 5e 8b 01 15 78 0d 45 0b c7 2c f4 c5 12 67 c2 ce c8 a0 26 55 e3 75 5e ec 4e de b4 c8 d7 6b 7b a0 ef 8c c6 Data Ascii: gS7yo^,&\|rj'o;Ww`A,rI50Fe{?dBU@l0156Ck}MW%:8IwH<lQ#UB=Kwfw\>jwT'i/{)_;^J 8RUR7q^xE,g&Uu^Nk{
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 07 d6 11 4e 1e 9a 45 10 03 dd 92 77 94 0e 52 57 81 5a 30 b1 50 da 68 3d 36 3c ed d2 21 6e eb a4 9f 56 70 fc af 16 72 f0 f1 21 dc 53 9f ca da 2c 19 d0 34 db 50 da 78 91 53 5c 08 c1 54 1b a6 96 5a 98 90 9c 87 40 10 5a 0e 1b ad 2e c7 55 5e 77 44 43 b2 e0 ec aa b7 74 4b 4a 87 a6 87 bf 41 6a 02 23 ef 7e e5 89 77 2d 40 dd 24 df d0 81 a6 f0 7b f6 37 d5 40 8c 97 e3 44 6b 74 f2 a4 f8 a6 bd 78 12 17 eb 71 ec 84 17 66 d9 f1 8e 82 8c 1b 79 3e 9b 9e ed c8 ca cf e3 e3 af fd d5 11 12 39 0e 3e bb 44 06 de cd bd 2b c9 6b 88 6c 76 97 34 21 76 5b 49 66 de 0c c1 28 8a 4e 97 30 0a b1 61 30 4e 89 ab 0b 9c 6b c4 d8 43 20 7f a3 22 84 42 11 da 5a 22 30 5c f7 87 a1 4d 61 4a f3 6f 9f d3 c7 bf d5 4e 22 81 33 7a c0 ff 9e 51 69 66 50 5d 29 64 4e 3e 17 73 20 2e a4 c3 10 53 6f c7 4e ad Data Ascii: NEwRWZ0Ph=6<!nVpr!S,4PxS\TZ@Z.U^wDCtKJAj#~w-@${7@Dktxqfy>9>D+klv4!v[If(N0a0NkC "BZ"0\MaJoN"3zQifP])dN>s .SoN
2024-11-01 15:52:29 UTC	311	IN	Data Raw: 53 dc ea a6 a4 51 52 3a 9d c8 c5 f7 1c 07 36 d2 19 93 a1 18 1a e1 2f 6f e0 af 7a c7 75 f5 73 11 7a 10 48 02 d4 a8 5b c2 69 01 ee 21 05 ff 49 b3 d4 20 f2 1e 8c 69 47 eb 40 8c 6c 1c da 61 a7 6d 6a 03 74 01 52 de be 1c 8c fe 02 b4 22 03 28 fc e7 f0 e1 06 a5 17 ed 0b 50 9e 5d 19 4b 2e b7 79 e6 3c 43 a5 86 b5 a0 32 16 7f c7 17 db e4 9a 58 80 f9 af 88 99 98 4b aa 10 b7 51 2d f8 e1 06 94 3b 62 90 17 d0 5f 70 23 89 fd 06 b8 ed 52 3d 28 47 0d 3d 1c a6 06 85 21 53 6f 96 35 f5 8d 9e 00 ef 48 f2 55 04 29 cb 76 d7 83 b0 91 30 b2 7e 4f 39 08 b2 ca dc 27 b4 0b 49 c3 17 cf 5b 82 16 7c 1f 10 89 a3 77 59 91 af c8 db e1 28 53 fc 7a 5b 09 34 05 77 b7 9e a0 06 d7 2e f8 ae 8a 5e 6e 50 6a 14 fe e9 ca 5c 83 c6 ff c1 21 e8 61 70 63 40 6c 08 4e 81 00 07 2e 4b b9 6b 3a 3b 0f fb 19 Data Ascii: SQR:6/ozuszH[i!I iG@lamjtR"(P]K.y<C2XKQ-;b_p#R=(G=!So5HU)v0~O9'I[\|wY(Sz[4w.^nPj\!apc@lN.Kk:;
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 63 64 64 0d 0a 1d 12 35 0b f0 d3 7d b6 af 86 97 80 01 5f 74 e9 2a c0 47 62 be 34 b6 85 b9 cf aa b9 55 a6 fc b9 fc 49 6e 6d c9 65 3a 00 84 e3 54 2d 09 1b 28 8e a7 11 16 32 4b 7a 0d f1 e8 71 4e 85 06 bb 26 81 c7 5a ae 14 ea 7a a1 87 16 19 7b 59 12 98 da a3 f8 2d 23 80 ca c8 fe 6f d6 23 54 63 c2 8d 3f 0a 12 33 f2 dc 0c f9 2e a4 f9 89 2e 43 2a 56 29 e3 fb 91 66 68 b3 04 22 b4 96 98 88 4f 64 de 18 1b 78 12 1e 6b 87 Data Ascii: 00000001Z00000001000000019000000010000000120000000100000001\|0000000100000001>cdd5}_tGb4UInme:T-(2KzqN&Zz{Y-#o#Tc?3..CV)fh"Odxk
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 87 b4 45 6e 65 8e 0d bf 51 e3 54 a3 21 f5 35 c7 0e 0a 72 ad 77 80 f2 53 2b 94 9f 1c 14 a4 66 ef 00 65 d8 0a 65 08 28 9d 6f c4 89 08 be ce d7 d8 0e e4 a4 37 74 e1 92 9e 8f 8b 24 72 13 06 f7 b4 22 dc eb 4f c5 2d 7d a3 cb b3 82 f6 02 53 45 ef e8 90 5e 07 89 19 75 d3 5a 6c 22 72 e2 5a 6f b2 be 16 62 10 e2 a6 57 f5 50 43 22 90 58 bc f9 ac 9c a0 b9 b2 ee 65 58 e4 fc dc 5c 84 07 e9 79 d5 32 59 13 8f aa 23 da b5 04 2f 78 ae f1 e8 5d 39 81 1e fa ce 8f 2f 8f d5 a2 88 d0 fc 95 ab d8 43 cf 19 b8 24 0d 95 e7 6b 8f 10 54 9e db 5b 5c f1 c6 2a d8 f0 1e 2e 43 72 56 27 19 61 f4 ba 1d 8d 34 20 0a 49 06 fe 8b 75 2d 54 21 d7 60 c9 be 43 32 74 22 b2 6c dd ef 40 57 f0 32 5e 0b 55 a7 a3 ab 8e a9 e2 9a af 43 91 38 ba a0 dc d9 a7 e6 84 0e f1 5d 69 69 3c 23 d2 58 65 16 43 88 33 ec Data Ascii: EneQT!5rwS+fee(o7t$r"O-}SE^uZl"rZobWPC"XeX\y2Y#/x]9/C$kT[\*.CrV'a4 Iu-T!`C2t"l@W2^UC8]ii<#XeC3
2024-11-01 15:52:29 UTC	601	IN	Data Raw: 28 3d c4 d6 ec c3 91 d4 85 9f a5 17 f8 57 f2 33 06 ae c5 70 57 d3 27 5b e8 7d 13 a8 7a 88 3a d1 15 9c 3d 94 0c df 9f ad 1b 2e f0 9d 47 b3 16 d4 99 cd 9a 4c b1 bd 66 d0 21 e4 14 8a 36 94 ff ce 19 63 cd 60 a1 8f da b5 d9 67 ac f6 51 7d 99 d7 13 7a 61 3f 9e 55 29 dc 07 a6 3c bd 2f 20 2f f0 0c 7f 0c 91 cb f6 01 c8 f1 12 9d 16 1b 82 89 d6 c0 96 ee 03 55 9f f1 17 42 df f0 a3 fe 31 a9 b6 54 4d e1 ef 64 71 c9 e5 4d 8e ef 9d b6 07 19 ec 4a 3b 99 a7 0d 14 54 f6 25 08 e0 71 6a fb 64 80 9d 7f a9 34 a7 fc 3d 01 73 cd df 13 88 49 80 6f 8a 20 44 8d f6 19 a4 ff e1 01 41 3c a4 cf ed e4 86 82 3b d1 52 79 35 fb a0 68 f9 50 81 60 1a e9 17 0c cc 99 7c c1 20 46 a8 c5 1c 1f 91 c6 fb 20 a6 b4 4d fb 9d 03 41 48 f9 b5 df d1 9b 3f 46 9f c8 8b 31 b6 b4 d8 07 a3 1f 07 52 d6 09 22 40 Data Ascii: (=W3pW'[}z:=.GLf!6c`gQ}za?U)</ /UB1TMdqMJ;T%qjd4=sIo DA<;Ry5hP`\| F MAH?F1R"@
2024-11-01 15:52:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49824	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	510	OUT	GET /gui/75884.d7767dd34ca82b896517.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:29 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6cfcebc523a80fde8e080b70f5398dd8 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:47:05 GMT Expires: Sat, 25 Oct 2025 15:47:05 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605124 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:29 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a e2 0d 0a 31 0d 0a 46 0d 0a 30 66 66 30 0d 0a b2 ff ff 7e 0a 85 64 67 21 47 92 01 1b 1b f0 e0 89 c7 33 93 78 33 8f ac ed d9 73 b2 b3 3e 44 48 0d 28 16 12 91 84 1f 61 f8 ee f7 57 d5 dd a2 25 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001{00000001w000000011F0ff0~dg!G3x3s>DH(aW%
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: ed fa e3 c7 cf db fc 03 38 81 f7 73 08 e2 da 75 a3 5f b0 0c 33 10 c3 e6 27 b3 39 a8 f4 52 f2 05 01 b5 c1 17 6e 8e 66 d6 9e 8d 55 26 bc d4 9f be 4a d2 b7 49 fe 8a 38 00 a7 22 1c e6 c0 79 32 27 5e f7 26 20 0f f4 03 78 d5 9d a7 e2 16 c7 7b 21 c6 de 22 ca d1 04 81 8f eb 53 f7 df 5d 52 01 17 22 08 53 88 34 2d 51 93 0b d7 6c ee 04 e1 5f 24 8b 51 04 b0 fc 24 10 12 4f 68 84 9a ab 0d 47 91 17 df d4 1a ab 14 72 23 d2 0b 31 4f d2 fc 75 18 df 14 6c 60 72 9b e6 53 66 85 69 3e 8b 1a f5 c9 c7 8f f5 c9 e0 1f 3f 3d f5 ac 69 2a c6 83 da 57 cb e6 aa 06 49 81 38 0e 00 07 a8 1c 78 e9 83 95 f2 ca 4e 84 a5 6b 56 18 b0 68 38 a5 c6 6f 20 5d fe 8d 5a e0 c4 a2 75 ac a7 7b de c9 4f 50 d7 7f e4 8c 4c de 54 fc b2 10 19 90 44 e7 7b 07 bc 85 f1 44 ca 30 21 a2 6f 1c e8 01 07 7a f8 ad 07 Data Ascii: 8su_3'9RnfU&JI8"y2'^& x{!"S]R"S4-Ql_$Q$OhGr#1Oul`rSfi>?=i*WI8xNkVh8o ]Zu{OPLTD{D0!oz
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: b6 ea 06 19 fc 88 14 b0 0b ff 6c 5a a4 62 a4 79 31 32 19 72 69 d9 2c fd 26 a4 ac 02 27 4e 62 51 a4 ac a4 35 a2 b4 a5 4e 7b 20 3e 03 25 c2 01 6f 0d 4e f9 36 0f 2f e1 ed a9 c4 97 3c 62 e3 38 54 3c 5f b6 69 df 5e 9d 5b 3c 18 c6 cd c7 50 41 8e 62 e4 64 34 bf 64 d9 2e c1 f7 97 da b2 9d 3c 9d e4 a1 1c 64 b9 48 7c 21 6a a3 dc bd 0e e5 9f ee 15 dd b0 fb 3a f8 0e 35 d2 cb 10 bc 10 39 cc 16 32 08 19 40 08 8a 2f 96 01 cd ba b5 04 d2 0b 80 f4 a2 00 49 e7 0f d6 83 1d 24 f3 c3 04 fe 6f ee 21 35 4d 86 05 ba bd d8 40 b7 28 e3 08 ef 1b 07 4f d2 6c 8b 77 2c b9 79 9e cc 65 be 62 bd 86 b2 15 aa c7 c8 85 8c 12 a4 4a 66 64 8b 55 5a 65 3d 47 42 65 38 ce ac 6c 86 a0 db 15 01 fa 32 9e 40 dd 65 f5 e5 6a 93 cf 3c c8 da 43 16 66 43 4a 62 67 9b 1a 52 5d 95 54 52 e3 cc a2 95 a9 1f 3f Data Ascii: lZby12ri,&'NbQ5N{ >%oN6/<b8T<_i^[<PAbd4d.<dH\|!j:592@/I$o!5M@(Olw,yebJfdUZe=GBe8l2@ej<CfCJbgR]TR?
2024-11-01 15:52:29 UTC	415	IN	Data Raw: 1a a9 aa d5 66 9e 01 d5 a1 35 cb 48 ca cb 77 10 d5 ed cc 95 37 8f 42 75 50 da ae a9 ec 0a df 9b b2 e5 be c7 0d a6 bb ce 29 12 20 05 ac da db 29 0c 3c bb 40 54 e8 37 a8 dd 85 41 3e ed c3 09 9f df 63 fc 15 5d 9b 9e 27 67 16 78 12 26 22 b3 7e 3c bd 38 b5 52 10 de 7a 3a 52 d7 10 b0 fd b4 23 d8 09 f7 a8 5c 88 58 ee a4 d1 60 13 17 e6 49 fa 1b 85 5d 55 c8 97 b9 13 1c 45 f7 97 89 c2 ad d0 6f 74 f1 b6 4c dc e9 01 dc 6c dc 5e d2 ad 9d fe 54 cf dc 7f bc 77 cf df 9d 0d 2f af 2e 5e 9e be b1 33 77 f8 dc 7d 75 fe fa ea e5 c5 f0 f9 8f f8 7a 7e ee 5e be 7b 7f 71 f6 72 78 f6 ee f5 fb 37 6f 87 17 ef 5f bf bc 7c 79 35 7c 7b fa e6 25 fa a3 6f a9 14 52 e7 74 36 54 52 c6 3c 8e c4 3b f9 9b f5 9f be 5a 8a d5 4f f6 c2 7d 7b e7 7e b7 40 59 5f 3c 69 d4 e1 ea 52 3e f6 c1 4b 3d f2 7c Data Ascii: f5Hw7BuP) )<@T7A>c]'gx&"~<8Rz:R#\X`I]UEotLl^Tw/.^3w}uz~^{qrx7o_\|y5\|{%oRt6TR<;ZO}{~@Y_<iR>K=\|
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a b5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a ad 0d 0a 30 30 30 31 0d 0a 23 0d 0a 64 30 30 0d 0a 04 cf 5a c4 d6 9e 6b 59 c2 20 44 05 ca b5 79 28 55 88 ae 61 a9 d9 54 52 d4 c0 ef c8 43 60 8e 42 53 fe 8b ba 58 6a 56 06 e0 2c 99 cd 34 3f 14 c5 df 9b 16 e0 47 50 eb 47 6d 01 d6 Data Ascii: 00000001600000001000000010000000100000001000000010000000100000001?0000000100000001000000010000000100000001j000000010001#d00ZkY Dy(UaTRC`BSXjV,4?GPGm
2024-11-01 15:52:29 UTC	1408	IN	Data Raw: af 3f c6 8f dc 99 0f 6f 76 9a 02 58 1c 5c 5e 28 15 87 ef 05 a3 ee 58 1f 4d 3f e2 86 fb 26 be 76 2a 46 f9 6d fa a9 20 a0 32 66 d4 0c c4 48 a9 2a 89 84 ca 80 5e cf f7 c6 ea a0 05 22 2a 63 c6 1d ff a8 a7 58 4f 23 a3 32 44 74 bd 23 4f 49 8f 42 48 65 84 a9 a6 24 52 2a 03 4c 15 24 9d 0b 16 dd 76 07 e2 a5 7f c9 c3 b2 82 2d e4 13 22 aa 50 35 86 13 ed 64 a8 14 46 35 60 1a 8e fb 56 4d 86 2a d6 25 da 2c 3c ee 58 b3 ad 8b 04 99 82 44 ff c5 33 41 e3 dc b6 be 13 d1 ad c0 65 ab 67 5b a7 69 e8 45 b6 b5 5e 45 6e c9 4b 23 42 4d 94 c3 a3 57 a6 3b 2b b5 72 d1 2b 67 4c 52 2f 08 e1 7f f7 d9 ef f0 52 47 37 d4 5b 5d 10 65 62 5b 38 9e 57 d7 27 53 67 6c ba 2d 3c 12 be bd 0b 5e b6 b4 92 54 ef c8 00 8d bd 59 18 c1 92 a0 32 ad ce 5d 15 0c 6c 4c c8 10 27 f6 5b a9 98 55 57 ba 53 6e 11 Data Ascii: ?ovX\^(XM?&vFm 2fH^"cXO#2Dt#OIBHe$RL$v-"P5dF5`VM*%,<XD3Aeg[iE^EnK#BMW;+r+gLR/RG7[]eb[8W'Sgl-<^TY2]lL'[UWSn
2024-11-01 15:52:29 UTC	710	IN	Data Raw: a6 40 ba 86 eb 1e f2 2e 7a 3d ca e1 56 7b d8 df e2 02 87 cd 2e ee 43 38 05 4a 7e 73 23 1e c6 29 8a 6d 32 0b 77 3e 48 2c 66 48 75 82 b1 e8 1d 69 73 91 2d 9b 7f 5b 8e 90 32 9c a4 f4 8a 9e e2 a9 16 e7 5e 9a 34 73 3a b1 1a e4 52 a5 02 96 79 b2 5c 6b 14 dc 26 d1 73 04 fb 87 14 5d e2 0e ca d8 55 4f c3 0e 77 b4 db 7a 52 06 ad 2a ea cd c6 aa 83 66 ed b6 b4 8e d7 03 98 ad cc b5 70 b7 e0 8b 29 9b 50 07 05 ba 77 4b 73 a6 db 6c 95 36 36 07 df 79 b7 62 49 c9 fd 82 7b 67 5e 86 2b 6e f5 42 13 30 3d 25 fe 9b 7f 83 59 df d6 bc 5a b9 6c 16 55 ce 44 99 e7 8b 6f 9f 9f d2 ab c1 64 f8 ab f3 29 30 da 8f da 66 83 7b 8e 35 7f 57 6c a2 72 bb 3e 7f 7d 4e 85 b3 fe 37 bd 00 73 a7 bf 7c 87 32 86 a4 e5 b7 4b 58 93 f6 ce c4 1d 62 d6 43 84 e9 ad 23 84 be 05 1e 19 d1 bb 8e f1 19 08 db bd Data Ascii: @.z=V{.C8J~s#)m2w>H,fHuis-[2^4s:Ry\k&s]UOwzR*fp)PwKsl66ybI{g^+nB0=%YZlUDod)0f{5Wlr>}N7s\|2KXbC#
2024-11-01 15:52:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49830	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	510	OUT	GET /gui/88687.cca6b938f5ec6b221b34.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4fd5afebfb22f870196a39273a692dbf Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:42:08 GMT Expires: Sat, 25 Oct 2025 15:42:08 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605421 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 31 0d 0a 7e 0d 0a 30 66 65 65 0d 0a df 5f 51 a6 66 64 c2 0b a0 71 1f ec a6 64 4f cb 11 ea Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001Y000000010000000100000001F0000000100001~0fee_QfdqdO
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: ea 76 34 19 5d 53 a0 1c 29 5f 19 c8 61 03 39 6c 8e e5 50 48 45 40 10 c2 6c 2e d6 c2 d6 56 68 25 d9 b4 eb ac 12 0d 05 9c bd 1f 23 79 ee ca 15 b7 b2 9b 1a 12 a9 ca 07 82 8e a5 a2 47 90 48 08 93 5e 03 f6 74 6c 37 da d5 86 7a 9b 83 de b9 a0 57 12 45 82 af b2 15 d1 01 a5 0d 55 24 ad 54 88 1e a8 61 8b 9f 2f 78 b3 b0 f3 0c 71 b5 c8 9a 2b 84 09 65 9e 9a c3 37 10 83 6c 1a 3a fe eb d1 68 32 90 f3 0d e8 be 11 74 f7 e2 23 2d 59 65 d1 4b b0 b7 b9 25 2c 9e b5 88 a6 b4 e0 e3 81 e1 31 58 1b e2 88 16 aa d2 8f 34 30 29 cd de e9 4a cc 27 23 78 9a 6f 5a fc d7 66 69 98 8a 74 e9 a3 af 0f cc 67 d2 43 b0 bf de c5 94 3f 1e 78 58 1f 03 87 aa 7a 04 cb 8f c7 a6 45 bc b5 a4 2c 69 2f b3 4d d7 d5 d2 9a 66 5d 65 09 3c 7c c4 88 76 66 cf 38 36 0a fe 0b 82 34 49 5d f1 cc 16 f5 1d 6f 2c 3e Data Ascii: v4]S)_a9lPHE@l.Vh%#yGH^tl7zWEU$Ta/xq+e7l:h2t#-YeK%,1X40)J'#xoZfitgC?xXzE,i/Mf]e<\|vf864I]o,>
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 0e b5 42 27 68 ad 9a 17 3e 6a c6 42 22 1d 76 45 38 a8 a8 c0 62 03 9d 30 a5 01 c6 f2 4d d3 92 86 d7 75 59 81 19 c9 6e 26 ea 98 d6 0a e7 6b b9 e0 bc a6 2a a2 22 72 56 2f 0b 81 f5 d3 c2 20 92 61 0a 38 92 ff 31 c2 e5 e9 5d e0 35 95 d1 41 82 eb 06 3b 73 f3 68 b2 17 5e 1c 7b c5 0c 36 2d 8c 2c b3 fb fa 9b 44 2f 6b 71 bd de 5f 90 af 53 f9 87 29 b9 3d c5 06 48 7c 21 f6 0b 7c d3 86 81 9a 8b 44 d6 7b 47 6f 8e d9 b2 bc a9 2c 1a 04 d3 c8 91 c2 0a 79 c1 69 16 68 b3 90 11 e4 9c 24 4b d5 56 49 a0 2d ea 19 12 9d 32 4a 6b c9 e7 50 b4 b2 2b 35 40 aa 50 a4 1b b2 36 61 fe bd 52 5d f6 5d dd f1 56 a2 a8 b1 42 d9 c1 5f a5 99 f7 04 96 15 99 ab b5 f7 62 a1 ee ae c9 aa 16 25 92 d5 40 db a2 ad a4 1c 6a c2 14 36 e6 d8 1e 4a dd 59 cb 2d 78 57 bd e9 0e 48 57 cb 4b 02 55 39 66 4b 3e 76 Data Ascii: B'h>jB"vE8b0MuYn&k*"rV/ a81]5A;sh^{6-,D/kq_S)=H\|!\|D{Go,yih$KVI-2JkP+5@P6aR]]VB_b%@j6JY-xWHWKU9fK>v
2024-11-01 15:52:30 UTC	443	IN	Data Raw: 4f 77 21 51 dc d7 42 04 41 f3 6c 55 2e b1 93 f4 09 e8 91 04 4e 26 88 14 c7 6d f8 ea 18 93 3e 7a c3 f5 07 5d e2 d4 d7 97 0e 6c bd bf f5 b5 18 f8 29 32 05 6c c1 83 39 22 5f 93 ca f1 11 52 29 00 06 c1 a0 7f 86 b2 c9 7e 27 14 e9 12 dc e3 39 55 eb 30 a9 f3 2c da de 25 b2 c3 9e 27 ac 61 1f 35 54 0a f9 c2 8f fc 3c d0 21 b4 77 ab 01 c1 61 60 b2 08 f6 14 ab 9d 70 8f 42 52 9d ce b3 f9 4c 2e 3f ec 52 d4 07 d8 0c bc 10 d3 bd 50 a5 24 87 c5 1b f0 1d 79 51 9e 28 69 1c 76 4a 1c 69 82 fd c4 a1 7f f4 a6 d1 8f 12 14 f0 9c f3 f9 f1 fc 5e 7c 24 6b cf c7 6c 4f 4b 9c aa 5f d8 2f b5 f4 ca 6a 01 c7 e8 24 07 e2 4c a3 45 33 54 e3 be 43 12 75 ac 46 d1 7f 52 eb 11 a6 29 ba 06 35 16 b0 3c dc e7 8f bb 25 fe 93 cd 39 87 53 69 92 0f f2 b9 05 f6 1a 19 5d 9e a2 7b df 2b b5 c5 e7 33 ae 14 Data Ascii: Ow!QBAlU.N&m>z]l)2l9"_R)~'9U0,%'a5T<!wa`pBRL.?RP$yQ(ivJi^\|$klOK_/j$LE3TCuFR)5<%9Si]{+3
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 39 65 62 0d 0a 03 db 87 d5 60 b4 12 35 95 d5 ac 3b 14 4c 8a Data Ascii: 0000000100000001000000010000000150000000100000001000000010000000100000001000000001@00000001Z000000010000000100000001W00000001Y00000001000000010000000109eb`5;L
2024-11-01 15:52:30 UTC	1373	IN	Data Raw: d2 04 31 51 c3 1a 71 0f a7 b0 cb d4 67 be 63 47 91 97 32 1f f6 45 eb e3 f2 28 0a 22 86 61 89 ef c7 ef 00 07 9e 0f 18 ed 7e 7a 09 10 b7 07 18 0d f7 c5 63 1c 00 41 64 47 5e 22 66 e2 1b 30 a2 85 ef 44 34 34 8a 93 84 e0 30 4d c5 f8 18 d5 73 e6 23 aa 04 89 4b f3 35 ec 09 c4 1a 8a 61 09 02 bb 1b 84 cc 07 99 69 ec 13 ec 46 e0 1c b0 ef a5 fe 25 2c 22 f1 10 b3 00 87 11 05 97 c0 f6 13 47 f4 47 0e e8 07 bb 69 1a 60 75 c8 26 80 88 c8 1d 22 74 27 88 2d 08 79 88 25 11 5e 77 22 e2 54 04 4b 92 94 d8 42 a4 0b 85 55 3b 49 0a ec 01 68 87 64 43 db 8b 70 3d e6 7b 76 ec 78 f0 7d df 86 cb a3 1b 58 10 ca 2e 5d cf f6 e2 08 44 20 a0 46 b1 d0 84 54 26 d0 05 49 4a 6a 1a 2a f7 b7 1f 7a fd 05 38 ff 91 95 e2 ed 2c 8f b9 04 09 e4 64 09 08 87 7e 48 d1 18 8b 1d 58 86 86 49 fe 64 03 a0 31 Data Ascii: 1QqgcG2E("a~zcAdG^"f0D440Ms#K5aiF%,"GGi`u&"t'-y%^w"TKBU;IhdCp={vx}X.]D FT&IJj*z8,d~HXId1
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49829	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	510	OUT	GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: b298a140259e3286037e4b696405dd9b Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:28:24 GMT Expires: Sat, 25 Oct 2025 19:28:24 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591845 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a da 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 31 0d 0a ff 0d 0a 30 66 65 64 0d 0a f9 14 aa da 7a a1 47 92 01 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001}00000001w0000000100000001F000000010000000110fedzG
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 7e 5c 97 9b 3e 62 1e 59 10 10 e2 84 5a 18 6d 34 cb 95 5f c0 76 8d 80 77 7e 54 93 28 66 7b 7b 19 64 b0 80 e4 8a f0 2a 4c 6f 93 38 f5 43 7c 1c 47 20 e5 55 90 2e 92 02 22 c4 db a9 f6 05 05 66 8b 24 0a 40 fd 64 f2 70 f7 4c 8c 45 96 fd a1 ae 8b 2c 56 2b 83 58 bc 8d 92 1c 8b 59 52 b3 6d c7 0e d2 d8 55 9b 72 23 da b1 ed 30 b3 a7 c5 2c ae d7 6e 3f 7d aa dd 0e ff f9 9b f5 cd b2 b1 da fc f6 1b ac a5 e2 4e f1 00 91 4c 5e 41 b1 8b 87 08 f5 d8 c0 e1 1a 38 5c 13 0e 8f 6e 0a 77 11 b9 a0 7a 91 26 16 21 0b 69 87 66 0d ed 1c 5c 8b 6d cb 1b 09 68 bb 20 dd 20 36 0f 6d c2 da b6 20 92 be 5b 48 bd 71 89 7b 3b 01 f3 34 8f c8 dc 0d ed 2c 9a 4c 0b db fa 7e 96 c2 49 a5 37 22 53 fd 8f 1f ed 9b 18 1c 5b 20 c0 c8 0b e2 74 11 3e 55 ec a6 65 89 7e b1 17 8d 9f b2 51 08 eb 52 e2 a1 55 a7 Data Ascii: ~\>bYZm4_vw~T(f{{d*Lo8C\|G U."f$@dpLE,V+XYRmUr#0,n?}NL^A8\nwz&!if\mh 6m [Hq{;4,L~I7"S[ t>Ue~QRU
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 85 5b c4 9a 2d 73 b7 41 0d 71 84 6f a3 e3 53 aa af 64 77 8f f6 47 a4 25 dc 88 6f c4 08 f5 db fe 22 26 08 eb 8f e6 85 12 06 85 11 07 2a eb 82 11 6c db da 37 c3 ca e4 85 25 86 ec f7 40 dc 67 45 74 81 d8 41 45 5a 72 9e fa 11 0b 5d 59 62 39 95 69 38 45 4c 98 c8 41 de 5d 85 73 09 e6 d9 e5 73 8b 67 a2 5a 0c db 3a c4 24 b1 9b d3 e4 95 52 cc 13 d0 e8 09 d3 88 cc d6 a3 49 11 c9 4e 16 04 24 47 f1 8f 0a b2 da 82 3c da 2f c1 50 12 36 73 d8 b2 d0 62 54 62 c8 18 94 29 05 4a 3f f6 da 1a 59 06 36 46 2b 1b 32 65 94 cd 4a d1 5b a0 f7 b6 44 ef 5e c3 f8 79 d3 a7 59 5b da cd 1d 55 18 19 0f ce d3 b9 ac cc ac 51 53 d1 a0 82 b8 eb 48 51 fa 30 92 95 cf d8 55 22 92 16 8b bf a5 f6 5c 51 ed e7 8d dc b6 66 a4 8a 12 41 fa 1d 92 75 02 17 95 a4 54 c4 b2 2e ee f2 42 cc c0 5e 58 0e e9 8a Data Ascii: [-sAqoSdwG%o"&*l7%@gEtAEZr]Yb9i8ELA]ssgZ:$RIN$G</P6sbTb)J?Y6F+2eJ[D^yY[UQSHQ0U"\QfAuT.B^X
2024-11-01 15:52:30 UTC	451	IN	Data Raw: 62 73 4d c9 76 34 79 7f 19 ea fe 01 ea 9c e9 ec 2c 16 94 7e d7 6b b6 d4 3a b3 14 87 cb 2c b0 83 36 cd 58 5f 39 7c 5b 6b c7 ed b4 5e bf d3 c6 2d 2e dc 4e f3 92 5a 4a 77 d3 e8 1a 19 ee 94 f1 8d 34 b4 e5 40 aa 86 bb 42 f5 a3 44 dd 78 23 75 74 ec c1 34 45 61 62 f9 af c4 b2 c2 28 9f e3 c4 69 60 71 ad f6 e8 5f c9 ea 5f 89 c7 47 74 12 0e 12 a6 d9 c0 c2 cd 97 9a eb 8e f2 32 8a 92 35 ca 3a 06 58 b0 26 28 d6 e6 90 ce 81 d5 44 14 a0 26 91 c1 22 57 91 8f b1 cc 0d b9 5e 59 94 41 cd 95 62 df 5c ae 40 a5 df 81 d5 b0 9a 16 d5 47 3f 37 78 9d b6 6f 8e ec 3d b0 2c 57 46 36 07 35 29 64 b9 6f 3d 4a 7a 97 bc b9 12 bd e6 e1 67 fa ab 1c 69 6b 4c eb 9e 31 1e f8 bb 9b 0a 87 ed dd 58 a1 34 c6 c9 8e 0b cb bf 89 59 a3 b3 7b 8c 26 3b 91 7b 73 d0 e1 7a 0c 6d d6 f7 64 9e c9 53 73 50 4a Data Ascii: bsMv4y,~k:,6X_9\|[k^-.NZJw4@BDx#ut4Eab(i`q__Gt25:X&(D&"W^YAb\@G?7xo=,WF65)do=JzgikL1X4Y{&;{szmdSsPJ
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 31 0d 0a Data Ascii: 00000001j00000001000000010000000100000001s000000010000000100000001"00000001B00000001y00000001(00000001G000000010000000100000001#000000010000000100000001Y00000001/000001
2024-11-01 15:52:30 UTC	1399	IN	Data Raw: 9f ad b2 c1 c5 f5 82 e3 14 c5 1c 97 1e d6 b8 4a 90 2a 8c 32 c0 a8 8c 07 78 54 25 39 29 45 cd 80 2a a9 e2 85 0c d9 87 d4 80 ef 8a d4 78 a6 32 73 71 7b 32 0a 4b 45 30 43 63 03 6c ca 23 2c eb 56 af 28 a9 4e 63 66 43 3c 8d ee b0 31 91 ec b7 fa ce f9 6e 30 90 cf 66 e8 13 dc a5 c8 96 a3 14 54 8c 3e 52 24 ae 46 a1 65 f5 fd 0c b7 c2 fc 1a ce 0b f0 fe 08 84 12 21 14 23 c4 0d 43 2a 1a 93 95 40 f5 9b 40 22 09 50 b8 97 69 1f 9e fb a1 ae 8c 43 d6 a9 7f 13 a1 f8 94 cf 90 0c 4e 57 2b f5 bc 6b 89 62 39 ee 27 a9 5b 86 03 96 6d e9 e3 e8 fd d9 20 01 95 fc f8 08 66 45 b8 ca 4d 29 13 b7 5a c4 cb 39 26 21 66 c5 62 5c 0c 48 f2 a9 51 4d 88 03 8c 41 e3 68 7b 76 74 b1 d6 bd e4 19 c4 a0 b1 1a 2d 79 55 e5 25 47 69 8c b4 77 c5 07 bd 8e c7 3f 24 9c dd ab d7 3b ec 60 2d 1f 4f f8 a8 9c Data Ascii: J2xT%9)Ex2sq{2KE0Ccl#,V(NcfC<1n0fT>R$Fe!#C*@@"PiCNW+kb9'[m fEM)Z9&!fb\HQMAh{vt-yU%Giw?$;`-O
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49832	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	509	OUT	GET /gui/8405.86474e95af8bef65079f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 038d04d7e9c250a23ba89e1351b4692d Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:09:26 GMT Expires: Sat, 25 Oct 2025 16:09:26 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603783 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 31 0d 0a 8b 0d 0a 61 35 31 0d 0a 08 00 00 00 00 00 02 ff ec 5b 69 6f db 38 1a fe be bf 42 d1 62 0b 69 2b 68 9c 4c 4e 67 d5 4c d1 6b 07 e8 64 82 a4 ed 02 13 18 86 2c d3 16 a7 ba 40 52 4e 0d c7 ff 7d 1f 52 94 25 3b 76 e2 34 95 e1 16 ed 97 ca 14 45 be f7 1d 33 e7 c4 e0 82 d1 40 98 a7 16 27 d1 c0 bd 21 bd cc 0f 3e bf 0a f3 e4 f3 48 74 73 da 8d 7d 9a 78 f7 bc bb bd bd ee d8 6e 96 f3 d0 ba be 3e de 6f 1d 74 9c c9 ee fe f1 ee 49 db 12 0e 71 a8 ed bd 98 50 b7 6f 11 67 42 db 16 7e 8d a7 f6 e9 c8 67 06 f3 a8 75 b2 77 bc 7b 60 3b 09 1e f7 f6 8e 4f f6 6d 27 c5 e3 61 6b ef d7 5f 6d 87 e3 71 ff 68 77 0f 8f 3e 1e 8f 5a ad 83 5d db 89 f0 78 72 78 72 7c 64 3b a1 7c 3c 38 3c 3e b6 9d 40 ee dd db db 3f b4 4f 07 79 12 08 9a 26 46 Data Ascii: 00000001001a51[io8Bbi+hLNgLkd,@RN}R%;v4E3@'!>Hts}xn>otIqPogB~guw{`;Om'ak_mqhw>Z]xrxr\|d;\|<8<>@?Oy&F
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 54 61 c9 1d df 31 13 38 78 18 cc 1a 3c fe 9d 3d 2a 06 52 9b b8 8e ab 94 9f d0 31 c2 78 21 46 d8 45 8c 00 77 31 e7 d3 11 95 e2 54 7b de 8f b8 7d 5f f8 ca 99 e0 f5 4b ce d3 80 16 4e 5f 63 2f 3c 89 7d 89 f1 b0 c2 f3 df d8 a0 fc 0f 9c bd 8c cc b8 9b 27 96 70 69 bf 8c 9b 8c 31 25 51 df 90 94 af e2 08 fe 4a c6 0e a4 ef 2c 2c bb 08 74 66 57 c3 ff 59 f6 b4 ee dc 40 30 c5 8a d3 c2 c7 09 db 21 0a ae c2 c9 04 be ff 2a 4d 04 88 f8 b2 f4 55 17 3e f3 63 ee 4d 06 91 3f 6c 03 ce 28 8f 93 73 3f 26 6d f3 2d 56 cc a9 23 16 d7 3f 14 cb 22 9a df fe e1 c3 7b d3 89 68 f2 b9 0d 72 86 ee 5f c7 2e e8 74 45 7c 16 84 1f 59 64 4d 10 71 51 31 6e 9b 85 03 34 1d c0 d2 15 38 44 b8 80 5f 82 d4 9d f9 4f 38 62 11 4d ed 29 2e 97 5e 39 fe b2 0a 68 44 af 29 02 c2 f1 3c 24 6f be 64 94 11 09 fa Data Ascii: Ta18x<=R1x!FEw1T{}_KN_c/<}'pi1%QJ,,tfWY@0!MU>cM?l(s?&m-V#?"{hr_.tE\|YdMqQ1n48D_O8bM).^9hD)<$od
2024-11-01 15:52:30 UTC	203	IN	Data Raw: d9 c4 54 c5 37 41 ed ee 80 c5 83 58 56 e3 68 db 28 99 15 74 4f 92 cd 98 c4 29 1b 5f a8 39 c1 04 83 c7 b2 f6 bf 65 1e a2 00 b1 9b 15 30 e2 7f 05 e4 52 67 f1 b0 b1 41 5c 53 eb d4 c5 cb 46 c2 cb 4e dd db 0b ab 16 88 36 d1 b0 6b b6 65 a0 f5 a6 6c fc 3c c2 6b d5 ba 07 5a 4b 1e d3 3d 50 31 fa d2 9e 01 fe d6 4d f5 0c ca e0 1e ad 03 f0 e3 c1 c1 fd a5 5c 2a 07 f7 c1 25 0c ee cf 4e 2c 87 fd 9f 38 bf 8f 96 46 c7 3e fd c7 2f bf fc d3 e0 69 ce 02 f2 07 fe 3e 15 f3 39 1f 2f df 7b f2 ef 7e dd 63 34 3c f6 c9 c9 81 3f 38 ee 91 c1 e1 41 eb e8 64 e0 fe 8d c1 78 3f fb 3f 00 00 00 ff ff 03 00 b4 ee 92 58 6a 3c 00 00 0d 0a Data Ascii: T7AXVh(tO)_9e0RgA\SFN6kel<kZK=P1M\*%N,8F>/i>9/{~c4<?8Adx??Xj<
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49831	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	689	OUT	GET /gui/30192.1c015be440de00e9b531.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 0c4325ba2c3ff2aa7763b75a2684a224 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:21 GMT Expires: Fri, 31 Oct 2025 12:18:21 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99248 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 31 0d 0a 8b 0d 0a 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff ec 7d eb 76 db 46 b2 ee ff f3 14 30 27 e3 4d ce 80 34 49 89 ba 50 a6 15 47 76 66 bc 62 27 19 cb f1 ac 35 de 5e 0a 48 82 22 62 10 e0 00 20 65 45 e6 5a e7 35 ce eb 9d 27 39 5f 55 5f 50 b8 50 17 c7 ce c9 de db 71 12 4b 40 a3 2f d5 d5 75 af ea c6 2a f5 9d 34 4b 82 49 d6 38 6a a6 7e 38 eb 5c f8 e3 a5 37 79 77 32 5f 45 ef d6 d9 d9 2a 38 5b 78 41 34 ba e6 dd 87 0f 6f de b6 3a cb 55 3a 6f be 79 b3 d3 ed 1d f6 dd 9d ee 5e af eb 1e f6 76 07 bb ee 60 b0 7f d8 7f eb 5e ed 1c ec ef ee 0e 9b 99 eb bb 41 6b f4 e8 6a ed 25 4e 3a 0a 9a 3b bd ee c1 41 cb 8d f1 e3 ee c1 7e 77 b7 e5 7a f8 b1 b7 b7 b7 3b 68 b9 09 35 d8 db dd 43 83 10 3f ee f5 0f 76 fa 2d 37 c2 8f 07 83 Data Ascii: 0000000100010ffe}vF0'M4IPGvfb'5^H"b eEZ5'9_U_PPqK@/u4KI8j~8\7yw2_E8[xA4o:U:oy^v`^Akj%N:;A~wz;h5C?v-7
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 2d 6c c6 37 6c c6 ef d0 88 67 90 42 30 24 18 51 75 8c 4f c1 ca 96 89 3f 85 38 ec 4f cf e4 68 9b 7c b1 27 71 08 be 0f f6 ab 64 0d ac 8b 98 7d fe 1e af 0c 47 06 eb eb 64 f1 f3 f8 c2 4f 4e bc d4 6f b6 72 f6 d5 08 e3 8b 46 eb b8 91 41 c2 68 07 d1 2c 6e 0c b7 b7 5d 60 4a ab 85 6d 0e 96 18 01 04 d7 7d 31 0f ce e7 b6 fd 3c 8e fc cb eb 5a 43 46 cc 82 89 17 da 2f a6 5e 74 ee 27 8d a1 9a de 38 9e 5e b6 81 a5 59 e0 25 e8 a7 ee e1 c6 7f bf 0c e3 20 7b bc 86 84 e3 8d 83 30 c8 2e 2d a0 48 1a f4 b5 68 16 8c 2a ec fa 53 60 86 1e fe cc 13 e3 9b 5d 08 20 6b 06 5b f7 61 b9 1a 87 c1 24 bc 74 f4 a7 a1 df 00 6e 6d 6f 0f 36 bf 0e 08 54 66 f3 ec 6e 40 c8 d1 d3 60 ce 70 9a 81 b6 fe 7f 80 01 0f 7e 96 d2 e8 16 02 c7 db d7 73 11 4c b1 62 8d 88 66 df b7 37 07 d2 cf 82 04 08 69 bf d1 Data Ascii: -l7lgB0$QuO?8Oh\|'qd}GdONorFAh,n]`Jm}1<ZCF/^t'8^Y% {0.-Hh*S`] k[a$tnmo6Tfn@`p~sLbf7i
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 78 4c 76 ea 77 f4 fb 86 a0 b1 5e 85 91 9f 68 ad af a1 97 39 09 92 49 e8 3f 8f 27 dc ee ed 5b b7 a9 40 94 f3 02 fa 1e 67 e3 ee c7 60 52 83 28 13 83 03 93 df e7 18 54 76 67 5e 33 a9 79 8e bd f3 d1 7c 0b f6 ce cd cc e7 1d 92 0c e8 7c 84 1d 26 c1 2f bc 65 ab 79 55 a7 6e 0f ef 55 c9 e6 d8 4c 40 50 c2 71 4e 36 c7 a3 b1 9c 40 b1 d1 18 ce 1c e5 29 22 22 e9 aa 21 0d e9 6f 0c f9 c0 c0 81 51 75 50 b8 0d 70 20 bf 8d e9 2e 96 8d e1 bd ed 0d 41 39 08 64 05 42 bf a8 99 f1 22 9f f1 62 b4 d8 32 63 34 5a c8 19 1f af 3a 17 87 9d c4 5f 80 bf bd f0 92 77 d3 f8 22 fa 96 dd 1f ca 3a c5 fe 0d d1 97 fc b6 35 84 88 eb 88 e5 c3 ba 5e 44 68 1c 96 2a b1 ba 34 73 17 87 11 12 8b 21 56 97 a3 4b 31 9e d4 c3 2e cd 76 5f 96 89 55 eb 58 10 a6 d7 f2 4c 69 c7 11 a8 93 da 0a 45 bb b4 c0 9c bf Data Ascii: xLvw^h9I?'[@g`R(Tvg^3y\|\|&/eyUnUL@PqN6@)""!oQuPp .A9dB"b2c4Z:_w":5^Dh*4s!VK1.v_UXLiE
2024-11-01 15:52:30 UTC	249	IN	Data Raw: a5 6a bd 92 36 31 96 5c 1f d0 29 b7 e8 19 b6 e8 19 6f 11 9c fd 3a f4 13 27 b9 ba 51 26 42 14 a2 88 69 47 60 b6 bf e4 7b 97 3f 2b 74 44 44 bd 02 f1 4f a1 bc 28 33 34 c2 9c f2 81 cf e6 01 40 94 4c e6 97 67 eb fe 35 d0 a9 84 77 4a d0 3c 05 68 9e d2 09 52 84 36 2d ac c6 e0 9e 05 8b ee 0a 30 d1 cd 73 80 d4 7d 5f 0b 0d ab 63 89 7d bf ab df c0 42 43 8f 9a 83 a2 06 0e b5 d1 9f 12 06 3f 02 06 3f 12 0c 16 79 9c 68 2d 1c 44 4f 00 81 68 9d 83 41 3c 2c 74 51 0b 8a 4f a1 5a 89 01 6b d6 6e 2c 6c d5 a8 51 09 80 d7 00 c0 6b 3e 1f cb 60 1d 67 1e 42 be db c6 8c 06 26 97 6b 6f f5 e8 91 0f 42 c6 1b c4 a6 02 38 8a 7d 43 dc d7 81 05 cf a6 1a 46 8e 30 2f 19 5a 48 cf 10 58 99 43 f1 4e d3 a8 05 ad 55 27 05 96 85 86 ba 84 10 b4 ab c7 d4 0a ff e2 93 28 a7 5a 0d 0a Data Ascii: j61\)o:'Q&BiG`{?+tDDO(34@Lg5wJ<hR6-0s}_c}BC??yh-DOhA<,tQOZkn,lQk>`gB&koB8}CF0/ZHXCNU'(Z
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8c 0d 0a 31 0d 0a fd 0d 0a 31 66 66 39 0d 0a 54 67 cc 0e d3 b3 a9 bf 96 94 30 32 d3 88 58 90 af 4e 64 6a b4 10 31 c0 34 9f c8 14 1a 55 ce cd 65 cf a5 46 0c 54 84 60 15 9a 98 c1 a7 9d c2 24 6b 70 a7 2e 58 57 62 cd f7 c0 9a ef e9 d8 08 a1 49 b8 d9 7b 8a f9 22 d0 e1 a2 dd 25 b1 46 34 ab 91 da 8d 08 de 78 a4 c6 75 c8 35 a9 e3 2b 98 41 5b 8e 5c 11 34 ad 83 49 58 05 26 b9 d6 36 19 4d 24 bc 8a 8d 26 a0 64 14 9b cf 76 09 b9 ba 9f b0 ba 9f f8 4c 54 74 07 65 cd ce 45 79 63 ad ae 4a 5a a2 6f 18 b9 da 8d 1a 28 d7 45 15 cb 79 bc c0 3c 5e 7c 06 28 Data Ascii: 00000001U000000010000000100000001{000000010000000111ff9Tg02XNdj14UeFT`$kp.XWbI{"%F4xu5+A[\4IX&6M$&dvLTteEycJZo(Ey<^\|(
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 41 f4 7a 4e f6 d3 8e 20 fb 1e 91 7d d4 2c 59 31 d9 8f 2b 64 5f a1 25 11 bb b5 a4 fb 62 88 9c c4 6d eb 43 93 f1 4a 27 94 2b a5 91 fc e6 4e 54 26 63 a5 0f bb eb 37 f7 a0 8a 89 d4 f7 40 27 e8 b7 f5 a0 71 2b ef 64 3d 32 f0 28 13 7c e3 74 81 8d 99 e9 3d bb c9 1a 04 62 10 fd 43 94 f1 d9 a9 29 39 54 47 f4 6d 71 21 2a 39 74 d8 df eb 1d aa 92 43 ba b8 10 95 1c ea 0d 76 77 50 46 88 4a 0e e9 32 42 54 72 68 77 b7 3b 40 4d 22 2a 39 c4 65 8f a8 e4 10 38 08 97 3b a2 7a 41 cc 79 e8 87 bd fe 00 0d 91 73 d9 dc 3b 40 59 21 7a b4 83 56 18 07 15 88 06 87 87 5c 81 68 f7 60 07 f5 89 38 36 66 69 32 94 6e 53 60 48 b1 24 53 bf c7 f9 91 52 ee 54 8c 4a 60 4a 03 71 e2 2a 92 d3 11 b2 a2 53 59 21 d8 88 62 41 a7 97 0b a4 ac e9 b2 43 5b 0a 0a e9 36 d0 49 8e a0 31 34 49 be 9c 05 21 82 11 Data Ascii: AzN },Y1+d_%bmCJ'+NT&c7@'q+d=2(\|t=bC)9TGmq!9tCvwPFJ2BTrhw;@M"9e8;zAys;@Y!zV\h`86fi2nS`H$SRTJ`Jq*SY!bAC[6I14I!
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 2c 06 82 de 85 7c 32 15 af 57 18 aa fc a2 34 98 26 9a e5 56 72 38 58 5c c3 f2 70 40 44 72 c9 4b 0a 5b 18 75 cb fb d2 e0 9a 8a 6e 69 2c e7 00 81 6c 6a e7 80 5c 00 c6 e0 9c 6f c8 79 58 20 d7 bf 06 03 04 12 97 08 82 fc be 93 fa 19 92 91 bc 45 da bc b2 ee 9a 74 f8 c2 2d a4 0a 0d df 34 38 79 a7 f1 d6 78 ad ea 87 d3 93 86 2e 0d f3 28 93 89 a8 b3 d2 41 6a 20 06 6c e9 2c af a6 c4 4b 6a 16 54 6a 81 35 e1 e0 96 17 55 6a f4 11 eb 32 47 bd c2 7e 4a 5d cb 9d 5a 7d f8 b0 ba 79 d1 86 12 e4 40 ab d2 82 9a 77 b5 9b 67 bf bc e3 0a a1 db 95 e3 3a 79 37 cd aa 11 28 57 64 1b 76 20 b9 de 35 68 f6 c7 ac b7 c8 58 6b f6 b8 d8 a0 76 e5 c5 26 77 5c 3e 21 ae 59 ea 5d d8 fe 87 0f cb 8f 59 af 66 ed 35 0b d5 6f 6a 57 a8 df dd 75 69 2e 27 fb 0c 51 e6 33 7e b7 5a a6 a8 88 87 94 b4 36 f2 Data Ascii: ,\|2W4&Vr8X\p@DrK[uni,lj\oyX Et-48yx.(Aj l,KjTj5Uj2G~J]Z}y@wg:y7(Wdv 5hXkv&w\>!Y]Yf5ojWui.'Q3~Z6
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 24 55 2f eb 4e 12 83 3d 07 56 8d 2d 5b 74 ae b1 df 68 aa 24 39 b9 b0 97 34 e4 74 75 8c fb 4d d1 05 c4 cd 19 1b ea 1a 72 48 c3 36 e4 e7 97 c5 13 20 c7 3f 51 97 25 c0 5b a4 f5 0f f9 52 7f 5b 05 a8 2a fb 55 3c d1 db 78 1a 5f 90 20 52 78 29 08 bf 2e 71 b6 af 0a 56 15 b3 70 4d 81 2f 4a ca 94 2c d1 5e e2 f0 0a 47 c4 41 f8 15 e5 a8 22 3d 14 0c c7 89 62 e7 1d f2 7a 71 35 a5 a0 01 94 99 ea 45 97 4e ba f4 27 c1 2c 98 20 fb 94 55 65 96 1c 28 9b 94 2f 38 74 d4 05 87 ae 33 d1 c7 c1 75 90 3c 8f 24 55 e3 05 a5 14 db 84 a3 89 3a b5 ac 17 87 3d c4 89 3d 8f 70 11 05 4c 79 7f 43 20 5a fa 8f 95 8f 8b 29 e2 88 ea 1f 93 52 6b 20 ad 2d a3 64 14 21 7b a6 8e 89 65 5b a6 36 76 95 0a 85 92 22 20 45 b5 00 36 61 65 3f 43 8a a0 76 ce 06 f1 e4 d9 34 ff 99 02 2d 4d 09 57 0e 5d 8e 8f d2 Data Ascii: $U/N=V-[th$94tuMrH6 ?Q%[R[*U<x_ Rx).qVpM/J,^GA"=bzq5EN', Ue(/8t3u<$U:==pLyC Z)Rk -d!{e[6v" E6ae?Cv4-MW]
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: c2 09 29 d1 56 d8 4a 38 a8 cd 7c 01 6b c6 96 2f 44 20 85 d8 33 2a 8a e5 c9 cb 32 4d 47 b7 8a d2 e3 f4 62 d4 47 24 43 b2 4a b3 a5 fc 9d dc 4b 0a a5 b7 f6 fc 09 49 3b b9 7f 3f 81 c3 55 1a 48 96 38 52 4b 1c 29 2a a8 98 97 65 61 b3 27 bc 07 e6 1e d9 ad e6 4d bb d5 db 7d bf ea 3a 0f b3 54 aa a5 5b a0 3f 55 2a 21 d4 14 04 05 5a ba 06 95 e2 a6 2f 45 be d9 0c be 63 be a6 41 8a c4 b8 aa 14 17 03 16 6b 9d 66 3a 18 d4 ed 91 8d 55 fd 72 dc 80 df 11 d2 b4 b6 64 82 5e 9b 84 cc 1c 77 aa 01 7e 2a 60 17 d4 c9 56 b7 09 ed 4d cc 6d aa ea 42 a6 31 90 ba 6b ac c5 f2 6e 14 d6 e7 f2 f1 c8 62 2f d5 04 43 36 49 eb cb 5b c1 1a bb 41 45 d7 2d 52 ff 84 a4 fe 55 eb 68 51 90 fa 2f 8b 52 bf f1 3a e4 92 8f 6a 7e 9d dc b5 a5 0b 9a 73 de cd e5 c8 74 74 ad 00 65 f9 16 1b 4a 49 86 ba 84 0c Data Ascii: )VJ8\|k/D 32MGbG$CJKI;?UH8RK)ea'M}:T[?U!Z/EcAkf:Urd^w~`VMmB1knb/C6I[AE-RUhQ/R:j~stteJI
2024-11-01 15:52:30 UTC	1237	IN	Data Raw: cc 01 84 9b 56 f0 04 a5 57 f8 5c 70 81 07 98 8b 10 d3 03 a0 65 af 70 fe 7c 14 70 de 80 47 6e f1 9c 24 64 1b 09 5b 47 cb 1b 95 bc b9 64 03 25 25 6f db d7 f6 02 98 c2 c7 8c 66 39 f7 98 8f cc e7 65 0d 91 cf af 09 42 21 9f 13 e9 88 73 70 0c 0e 05 11 1c e3 76 3a e2 7e af 6b 39 07 2e 3e e9 2a 93 8b e5 1c 39 df 58 7f e1 1b 9f 88 6f 2c ab 7c c3 eb 3c b9 62 df c3 cd ec 42 a9 40 e9 08 95 3a 99 10 88 98 05 7a 78 8d 11 46 b1 83 55 91 84 4f 71 35 bc ff de 51 32 3a c5 32 45 b8 3f 0f ae 8c 1a 22 64 e9 b0 9e 02 1c b4 38 86 29 52 3e 2d 69 12 0e 0b c5 30 68 34 19 40 81 18 8b 8a ce 86 fb 9f a5 5a 67 ef 29 31 2a 1c 88 1f e5 a6 51 92 70 65 c5 d7 cf 41 d1 e0 db cd 41 c0 d1 d0 b5 b2 2e 99 4f e4 56 e4 63 bd 85 7c 58 02 b0 94 d4 43 03 35 27 01 77 fb 5c 4c 5f dc 20 b5 1c 99 5e ca Data Ascii: VW\pep\|pGn$d[Gd%%of9eB!spv:~k9.>9Xo,\|<bB@:zxFUOq5Q2:2E?"d8)R>-i0h4@Zg)1QpeAA.OVc\|XC5'w\L_ ^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49834	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:29 UTC	689	OUT	GET /gui/29990.af467ebfc75146d97344.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: adea1b2fd28fd2cb50a265be733d938a Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:32:15 GMT Expires: Fri, 31 Oct 2025 12:32:15 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 98414 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 31 0d 0a 00 0d 0a 30 66 66 62 0d 0a 00 00 00 02 ff ec 7d 6b 9b db c6 91 ee f7 fd 15 10 d7 d6 12 36 00 91 1c ce 8d 23 6a 3c 91 e5 78 8e 25 db ab 99 24 9b 9d cc 91 41 b2 49 22 02 01 2e 00 ce 25 14 ff fb be 55 d5 0d 34 78 99 91 ec 24 bb e7 39 b2 12 89 ec 6b 75 75 55 75 dd ba d9 58 e4 ca c9 8b 2c 1a 16 8d 93 66 ae e2 71 70 ab 06 f3 70 f8 fe e5 74 91 bc bf 29 de 2d a2 77 b3 30 4a fa 0f d4 7d f8 70 75 ed 06 f3 45 3e 6d 5e 5d 75 8e 8f 8f 5b 5e f7 f0 a0 bd 7f ed 2d 0f db fb ed fd 5e 53 79 85 97 b9 fd 17 cb 2c 18 35 0b 6f f9 1f bd 26 be 9d 79 a3 0e 7f 78 e7 c5 0b fe f0 d6 4b ff c4 1f 2e bd bf 1d f0 87 9f 57 Data Ascii: 00000001000000010000000100000001010ffb}k6#j<x%$AI".%U4x$9kuuUuX,fqppt)-w0J}puE>m^]u[^-^Sy,5o&yxK.W
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e1 c3 72 61 bb 58 00 f9 66 cd f5 b5 62 f5 9e f2 d2 60 e6 e5 c1 bf 7b cd 1c f2 61 bd 49 3f af c9 0a 41 57 ae 8a 3f 92 e4 90 01 37 b0 e5 42 a2 68 1c d6 f1 e7 f0 e8 1b ed 57 2b ac 12 a2 f9 6d 5f 37 ef bf 00 a6 93 60 f1 85 db 24 3e e2 c3 ca fb 99 24 fb 32 bf 8d 8a e1 14 bc a5 6e 20 c1 99 ad 20 d9 41 46 8d ef a2 0c 63 7c 17 c5 aa d1 e3 82 d7 61 fd bb 34 f8 c3 db d7 76 7d f5 55 aa bf 4d e9 74 b5 5b d4 4a a4 d1 f9 cf 67 a3 51 a6 f2 dc 6e 67 15 8a 90 b4 a8 e5 06 d4 72 43 92 29 c7 11 60 04 8e c8 1a 87 e5 4e 01 aa f5 07 e9 e8 de cf 15 90 31 0a b3 7b 23 84 a8 cb 0b ee c8 52 69 5d c8 1a e9 75 8b ee f1 c8 74 82 98 85 d0 4b 87 51 58 a8 d1 f3 67 3c 06 1d 0c 2d 6f 1e 90 28 ba 4c 99 7b 20 46 c1 3f 15 2a 71 0c 0d e3 c5 48 e5 cd 46 b5 1c f7 b4 d6 04 e2 20 0e 87 ca 6e e1 a1 Data Ascii: raXfb`{aI?AW?7BhW+m_7`$>$2n AFc\|a4v}UMt[JgQngrC)`N1{#Ri]utKQXg<-o(L{ F?*qHF n
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: c3 99 86 73 42 05 39 9c a0 83 f4 4e e5 e4 42 34 38 98 03 07 73 c6 81 08 79 dd c8 a7 d5 fa f0 32 39 55 b7 d2 35 02 66 ca 22 78 53 4b 97 a8 41 d1 4c f9 9d c6 0b a3 e4 af 0f 45 a7 95 05 85 f7 a4 85 f3 3b 48 52 ec 5c 32 f1 14 8c 5d 9a f4 25 39 0d 7b 8d 06 7c 0f 4f a4 04 9d a8 02 ff 90 67 ae 88 e6 36 fc e2 f0 25 ea 14 f8 75 13 67 9e e6 d0 49 c9 9f 03 6f d8 b4 68 90 ae 61 6f 9a d9 19 ed ca d5 dd b4 8f b4 9c c9 25 40 a0 9b c0 3d 46 d3 83 31 09 28 fd 95 ff 01 2a 93 80 95 88 37 e1 1c c7 6d e3 76 0a ca f0 b1 ad 43 e5 e3 88 e6 5d 6a f4 9e a0 5b 3e 4d 17 f1 08 96 c8 ed ab 7c 18 ce d5 85 82 15 90 0c 55 be 22 bc d0 e0 2e bc 6a 4c c7 44 5c b9 fe 68 f9 a7 a5 64 9b 4c a0 c3 1f 41 87 ad 87 bf 28 42 74 f8 4f ec c3 bf 12 ca 95 0a f0 89 43 60 57 4a 1f d9 e3 83 b0 0c dd 00 83 Data Ascii: sB9NB48sy29U5f"xSKALE;HR\2]%9{\|Og6%ugIohao%@=F1(*7mvC]j[>M\|U".jLD\hdLA(BtOC`WJ
2024-11-01 15:52:30 UTC	283	IN	Data Raw: a0 90 a6 81 dc c0 db 63 49 b5 a3 dc b3 1c 89 59 ea 3b f6 9f 23 70 5e 44 50 f6 0b a4 63 10 05 ba c8 0f e2 7f e0 79 3a 63 cf 53 6a 78 ea de 84 9d 2a cf d3 85 ed 79 22 c9 5d 39 3d 4c 67 52 b5 94 db 84 33 a3 d6 78 dd b4 30 d1 aa 8f eb 56 ea db 9f d6 ad 22 60 d3 ef a2 6f 26 dc ee 9a a1 88 1e f2 1c b1 30 5a 00 b4 61 4a 9c b5 9d 31 01 e2 aa f0 9f 48 da ef 99 4e 11 82 36 93 5f 02 ab 70 25 aa 97 e4 4c 4b 91 b7 98 b1 d5 7b e3 51 8c 4e d2 85 b8 e0 0e 09 c0 26 72 dc e9 1c 51 b6 2f b9 72 f6 3b 07 fb f0 c1 70 e2 ef 61 bb 8b 64 5e 4a fc 3d 3a dc eb c2 1d 43 4e 9a ee 21 e7 00 53 e2 6f b7 d3 e9 1e 6c 24 fe 76 8e 3b 2d b7 4a dc 45 48 85 ce 0a 9a 2a 33 a1 62 48 c4 1c db 4d 5a aa 0e ab d6 83 c7 17 f7 33 24 41 e9 30 f4 8e 00 b3 6e 43 c3 20 7e 8c 9c b7 bc d4 87 4d 2c 19 18 d2 Data Ascii: cIY;#p^DPcy:cSjxy"]9=LgR3x0V"`o&0ZaJ1HN6_p%LK{QN&rQ/r;pad^J=:CN!Sol$v;-JEH3bHMZ3$A0nC ~M,
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a b9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 31 0d 0a 5c 0d 0a 31 62 33 36 0d 0a e5 d3 ce 29 7a 02 37 1c c7 9d 8b 7e fb a4 78 be 1e cc 39 29 be fe da ac 5f 94 b3 b2 05 72 78 ad d4 e4 e2 1a a9 c9 27 c5 97 9d d3 91 46 0b 65 d3 c2 ad 1d 60 82 57 21 b2 e5 9a f6 ca 16 12 fd c6 18 a4 13 f6 1e 59 61 7e aa 1b d4 02 d8 d0 14 30 ca 63 5d 01 86 db b3 60 da 01 d0 b6 09 ee 19 c8 47 26 00 Data Ascii: 000000010000000100000001}00000001300000001C00000001T000000010000000100000001p0000000100000001+01\1b36)z7~x9)_rx'Fe`W!Ya~0c]`G&
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 2b ae da d7 1e f2 c5 39 2b bf f7 e8 c6 64 08 11 61 3f ae 45 64 e9 cc 33 5a a7 64 44 91 10 30 02 c1 ba af 34 ea 17 3a 75 42 6f 7a 7f 59 e1 1b 59 59 9e b5 77 9a c3 d6 4b 89 66 51 b6 92 71 1e 14 18 24 32 07 c1 f4 7b 17 5b 00 fc 43 34 75 ad 0b 69 79 80 fc 16 be 1f 62 1b 7f e2 ab b5 41 76 b1 bb 2a 11 89 20 b2 98 64 3c 36 3b dc d8 60 dc c0 41 68 96 74 0f cb 4b 64 6d 37 b2 75 e9 22 c6 83 0d f4 95 8e 07 db 54 37 53 76 37 23 b5 6d 07 18 d7 a2 34 c1 0a 26 ea 59 12 d0 84 65 80 46 ff 08 00 f4 a9 9c 86 f0 4d 64 a4 ad 11 36 42 61 f5 e1 f2 40 01 ba b3 84 e5 95 5a 13 88 57 ac 2d b6 e9 ec b1 ea 24 f8 0d ab 76 de 9c 37 97 d8 4a d4 81 42 2d a4 01 2c 70 24 71 14 08 73 bd 12 12 03 17 9d de e5 4a c1 8d 57 5e 82 ea fd 22 57 93 be 58 aa d5 2f 00 37 ff b5 a3 23 ef 69 cb e0 7c 97 Data Ascii: +9+da?Ed3ZdD04:uBozYYYwKfQq$2{[C4uiybAv* d<6;`AhtKdm7u"T7Sv7#m4&YeFMd6Ba@ZW-$v7JB-,p$qsJW^"WX/7#i\|
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 11 ef cb 34 a2 33 de 74 dc a9 af d6 e1 f1 b3 13 74 a8 d3 76 54 f4 77 ca a6 94 3c 47 11 38 e7 85 33 83 73 1e b7 90 c8 6f 5f fa f8 90 11 4e 49 19 83 e0 87 1f e8 de ce 2d 29 11 b8 79 04 d1 e4 7a b3 4a e2 7d 05 22 31 5a e1 3d 1d 93 0e e4 5e 49 7f c8 da b8 d7 80 81 e2 d6 59 03 9e b5 8d 32 84 ef 48 21 20 36 a1 c7 3c ca 2f 38 97 8a 32 dc 80 9c 76 0e 4d 9e 5a d0 c1 fc c4 f9 91 07 df 93 bd f2 06 17 27 91 95 8f 5b 04 bf 20 ff 12 51 8b db 90 f3 32 15 05 34 1d 00 45 29 9b 08 54 54 88 a6 eb 63 c2 96 c0 97 3d f1 a9 94 f6 18 67 ab 00 d4 01 6d 1a 8f 31 81 93 2e c3 c1 8f e1 4d 34 61 9d a0 c9 a5 98 db 7e a2 69 cb 02 4f 1b a0 4f 12 10 17 c3 30 49 00 87 e0 27 c2 65 ff 5f e0 e5 b0 97 6c 6a 7e 81 77 8f 2d 3b d6 37 84 2e df be 3a fb f6 cf 9a 2a 37 e2 59 bc df b2 36 3a df 85 fd Data Ascii: 43ttvTw<G83so_NI-)yzJ}"1Z=^IY2H! 6</82vMZ'[ Q24E)TTc=gm1.M4a~iOO0I'e_lj~w-;7.:*7Y6:
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 02 d6 46 1a b4 46 6a a0 45 95 20 61 ad c1 f1 f1 30 1c eb 85 96 88 58 6b 33 de 1f 1e 1e 6b d2 33 c8 58 6b a2 8e c2 c3 50 73 8f 46 c8 5a 0b 5b 4c 09 52 d6 1a d8 22 48 1e ef 60 d6 ed ec 83 bd cc 5f b2 58 16 b0 25 7f 82 45 35 aa f8 cc c5 6b 27 39 1e 3e cc a2 71 cf 69 e8 e7 15 2f 50 46 6e d2 86 e7 bc 4d 07 78 76 cb fc fb 6d 16 8e 0b cf f9 5e c1 2d 4b 2f e7 79 ce 19 cc 9b d8 73 aa 51 64 4a 1e ba 3c c7 ab 91 5f e2 aa 9c 1e b9 ac 95 1e 93 2c c4 55 cc 04 aa 22 b9 83 c2 cc 37 05 cd f6 11 36 65 e2 39 58 5e d8 34 2b d3 6b 6c 05 78 a7 61 47 15 b4 62 ad 29 42 15 b3 f5 8b 4a 4b 5b c3 c0 46 87 3c fa 9b ea b5 49 3d 5c 1b e9 56 11 1b f7 a0 15 6b 5c f2 53 ac ec c8 9a ea aa 76 60 ce 37 7a a5 55 eb 87 38 0b 71 b8 6a 5a e7 3e 5c 21 9b b3 07 91 4a 02 b0 db b5 a6 1b 90 f4 2e 4f Data Ascii: FFjE a0Xk3k3XkPsFZ[LR"H`_X%E5k'9>qi/PFnMxvm^-K/ysQdJ<_,U"76e9X^4+klxaGb)BJK[F<I=\Vk\Sv`7zU8qjZ>\!J.O
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: a6 2a 4b aa 47 30 cb 22 6a 44 de 68 ab 23 43 2e 1d 49 a6 c9 ca d8 56 2c f1 61 50 5c d2 9a 7b c2 d3 51 5e 43 8f bb fa f4 fd c4 ec 75 cb e6 3b 92 9d 38 68 b4 07 63 59 a4 48 aa 82 e2 cc eb c1 2b d8 38 58 f0 b3 58 64 14 23 06 67 b1 ab e9 06 d6 bc 25 36 ad 3a e1 dd ce 58 35 5b ee 6a 1f c5 66 4a ba 72 6a 46 65 31 6b 8f c5 3f d9 31 c5 0f 84 00 0c 64 bc de 2e ed 9e 41 ab 5d 9b d8 6e 7c 8b 1b 82 4b 38 60 bf 2c a5 f9 0c e1 d4 52 4e f4 e0 2b 6f 7d e9 b4 be 04 99 6d 2b 5e ad 02 79 ca b6 14 a0 f4 eb 4b 27 f4 17 a2 a8 f4 23 4a a4 1c 61 81 27 4c 29 f2 4b 57 3d f9 cd 06 5d 44 bf e2 d0 83 b4 52 38 23 56 01 bd ed 6a d4 20 f6 d8 f7 d8 1c b0 45 32 bd 81 b0 14 cd 8a 04 9d b0 7f b9 93 51 32 5f d0 4f ad 30 bf 0a 8b 57 7c 6f 99 9b ae 04 39 4a b8 25 de 56 ee bf e6 27 fd 5a ed d6 Data Ascii: *KG0"jDh#C.IV,aP\{Q^Cu;8hcYH+8XXd#g%6:X5[jfJrjFe1k?1d.A]n\|K8`,RN+o}m+^yK'#Ja'L)KW=]DR8#Vj E2Q2_O0W\|o9J%V'Z
2024-11-01 15:52:30 UTC	84	IN	Data Raw: 43 b5 02 7a 47 d3 bf 57 3e 50 2d 39 64 85 d7 ab ff e5 d9 b3 7f 85 be bc c8 86 0a 4f c7 21 c9 6b 82 c7 03 fb 9d e3 e3 e3 56 10 8e bb 07 87 6a 30 1e 1e ee b7 bb 07 a3 63 fc 10 4a 37 f8 6b 4e 4f 5a fe 37 00 00 00 ff ff 03 00 e6 5e c6 16 e4 91 00 00 0d 0a Data Ascii: CzGW>P-9dO!kVj0cJ7kNOZ7^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49836	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	689	OUT	GET /gui/51452.78c2117408c1bf8fcbcf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9692b51fc93498aa281baf79ec46201c Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99251 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 66 66 39 0d 0a 00 02 ff ec 7d fb 63 db c6 91 ff ef f7 57 c0 4c e2 23 53 90 26 f5 16 65 da 75 6c 27 75 13 c7 39 2b 49 db d3 e9 5c 90 5c 8a a8 48 80 05 40 3d 42 f3 7f ff 7e 66 66 17 58 3c 28 ca 89 d3 a4 f7 45 dc da 12 f6 bd 3b 3b 3b ef 69 2c 63 e5 c4 49 e4 8f 92 c6 49 33 56 b3 49 e7 5a 0d 17 de e8 f2 f9 74 19 5c 5e 25 ef 96 fe bb b9 e7 07 83 3b ca de bf 3f 3b 6f 75 16 cb 78 da 3c 3b db ef ed ed ef 9c bb ab c3 a3 ee c1 41 bf a9 dc c8 4d 5a 83 27 ab a4 79 7c 74 dc 6b 9d 5c 79 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000ff9}cWL#S&eul'u9+I\\H@=B~ffX<(E;;;i,cII3VIZt\^%;?;oux<;AMZ'y\|tk\y
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 6d 66 98 d2 a7 ec 30 8a 19 34 26 d7 ed 21 0e 94 be f2 b6 e7 4e 80 61 44 57 24 40 43 d5 f1 6d 1b 57 36 f1 bd e8 16 6d da 8e 37 02 5a 1d fb c1 85 93 84 8e 00 9d 43 7d a0 48 83 51 e2 cf 55 db bb 08 9d 65 e0 df d0 2f 66 6e e6 80 4d 05 3a 4d 73 f4 b9 53 e5 fe 4c ed ea dd e0 63 ce 2e b2 fb a0 eb 02 79 fb c1 e5 53 6b 63 03 6c 6c 80 8d 7d ec 39 d3 48 4d 0c 84 26 c0 9d 0a d7 e0 dd 70 e6 05 97 8d 27 b2 05 de 13 00 8e f4 81 7f 78 eb 5a 38 2f fe 01 1f 64 a9 5c 32 57 c0 93 f3 05 7e 16 90 88 ed 31 67 18 73 c6 87 c9 9b 29 17 4e d7 93 a1 cc aa 79 38 5d d2 ea 37 80 06 5b ad 75 01 bb 00 b3 02 7a e3 c4 89 00 80 16 0a 6b 10 0a c7 9b 87 af 06 97 b5 f0 10 14 2a 09 c2 2f 55 0b 0b d5 f0 3a 94 ea e0 d1 cb 8d c7 88 ba 30 9e 79 ea 18 fe ad f7 a7 83 0e 07 a1 79 f9 4b a5 d4 d5 20 25 Data Ascii: mf04&!NaDW$@CmW6m7ZC}HQUe/fnM:MsSLc.ySkcll}9HM&p'xZ8/d\2W~1gs)Ny8]7[uzk*/U:0yyK %
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 34 2d e7 c1 e9 cd d4 77 fe 55 98 40 f6 24 d2 1a 3a f3 30 56 e3 f4 ab 05 e0 73 00 f8 9c 01 9c b1 82 de 53 e0 52 ff ca 1f 2f bd 59 3b 05 76 c3 0c ca ee 18 0e 0d 0b 25 89 95 ec 3f 5f 25 e2 d5 c0 ac e5 e6 61 4b ca 44 de 33 c5 b8 d3 7b 8e 4b af 84 cd a4 5a 07 9f 1d 9f 85 e0 78 6e b9 0d a4 43 f2 f0 cc 43 92 08 aa 05 fc 4e 83 f8 e1 f6 98 c4 30 51 a3 df 48 a9 39 30 7b d9 39 40 92 91 1e e6 ba b8 89 e5 25 4d b0 a4 c9 7d 97 a4 81 2e dd 4c 2d 0b bd 54 b7 31 20 21 37 f9 96 20 a7 28 87 98 ae 30 d8 15 0f 96 db 9b 14 86 b1 1d e5 6d 38 8b ce 81 e0 e8 78 2a 01 b0 b5 82 40 99 e1 93 20 b5 85 b7 54 2f 12 28 00 28 d4 10 7d 67 69 95 f3 33 75 be 06 d4 8e a6 cd c8 48 43 9d 59 67 09 70 a0 17 b4 f9 f7 d7 7e 4c 80 80 2b 96 b6 59 3b 3e a0 97 de 5e 7c 55 6b 4c b2 d1 58 83 29 bd d9 c0 Data Ascii: 4-wU@$:0VsSR/Y;v%?_%aKD3{KZxnCCN0QH90{9@%M}.L-T1 !7 (0m8x*@ T/((}gi3uHCYgp~L+Y;>^\|UkLX)
2024-11-01 15:52:30 UTC	317	IN	Data Raw: ce 5c 26 13 f9 b6 81 0f 20 93 d7 ef da 7c 08 89 db 5d 06 3d af a0 27 83 fc 1d cc 3e 8c 88 b4 0d 8f 3d 0d 88 d3 60 b8 06 c5 15 2a 5d 78 62 6c 41 d3 48 0f 40 8c 0a 78 50 bc 6e 39 e1 b6 fd b6 b6 21 b0 5a 40 88 46 8a a9 ec c5 dc 8c c1 a0 27 21 8e 20 b5 2e 61 bd 88 b1 2c c9 3f ae b4 3f fa 05 de dc 1f 55 62 f1 a2 d9 cb b4 4d 6a f7 24 3b 67 55 a4 fa 86 64 9a 85 17 e1 0f d1 cc 26 52 9f 01 48 9f 31 90 ca e8 de 15 ae 13 8e 93 84 5e 83 46 84 97 1e c6 4e ed 11 ab 30 1d 7f 7e 01 c9 f1 72 3e 0c c0 29 e0 44 2c 01 7a ba c8 c8 bb 3e 8d 46 46 c4 6f 26 28 dd d2 44 8c 92 50 cf c5 26 e0 cd cd b4 2f b6 75 33 2d 9b 9f 91 81 b1 77 04 d7 9a 36 67 22 c2 ba f8 f2 94 5b 1f 9e f4 9e 36 b0 2c 95 c4 10 de f1 0f da 82 c9 42 58 f6 de bc c1 de bc c1 de e4 2e 29 99 e2 90 2a 65 e8 8d 2f a0 Data Ascii: \& \|]='>=`]xblAH@xPn9!Z@F'! .a,??UbMj$;gUd&RH1^FN0~r>)D,z>FFo&(DP&/u3-w6g"[6,BX.)e/
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 31 0d 0a 03 0d 0a 31 66 66 37 0d 0a 89 93 62 5a d2 e0 c0 22 12 f2 7d bc c3 51 ec dc 2a 96 e9 a3 9a cc 14 3f 84 c1 0c da 34 e1 08 59 94 86 eb 39 99 38 0f 9d 71 78 31 09 43 42 27 dc b6 5a fa fe 6d 6e 34 0d 81 38 d0 61 41 95 52 75 a2 f7 c0 b5 7c 2e 7c 5f 52 43 b0 44 f8 dc 22 86 4e 0c 86 4e 3a 72 9a f9 56 da 46 b1 d8 2a 34 ad c2 ca 56 b0 e2 25 69 65 b1 55 6c 5a c1 1e 54 66 a8 29 b6 74 92 90 14 55 35 f4 4d 43 df 34 64 ba 8d a8 c8 9f aa a8 Data Ascii: 000000010000000100000001M000000010000000100000001G00000001c000000010000011ff7bZ"}Q?4Y98qx1CB'Zmn48aARu\|.\|_RCD"NN:rVF4V%ieUlZTf)tU5MC4d
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 4f 65 20 fd 2f 6c c2 7f c9 26 94 89 74 26 c9 c5 40 1f e6 08 71 d2 be 80 5c 73 c1 4a 5d 67 71 c3 e6 ae 36 33 c7 0c 0d 3c a8 03 32 3d 35 5a 74 e1 e5 ac be 2d 40 df cb 36 d2 f6 7d cc 51 b1 a0 81 d8 a2 fc 25 fd 0b 26 32 a7 b9 68 57 d9 47 a4 6e 86 86 f4 cb 9f 2f 30 16 49 e9 5f e0 9f 7e ee dc a4 da 13 e7 4d 74 e1 05 fe 4f ac 18 28 d6 10 31 bb be 80 b4 34 1c b6 ef 26 e6 00 6d 1b 10 98 f9 c2 1a 82 0f 91 c6 3a 9d 02 0f 6a 6b 88 10 27 08 f9 a8 a1 d6 72 d6 21 7f c5 81 fc 95 b1 86 b5 67 1b 77 36 0f fb 7c 6d 86 64 94 59 06 3e c3 45 96 41 e0 6f 18 f1 6f c5 11 2d 4a 90 9c 2e 72 47 f2 51 f5 51 a4 8e 4a af 72 85 da e8 f5 ab d3 ef ee ab 31 2a f0 98 c6 63 c4 86 d1 0c 8c 6d 88 9e cc 10 e2 21 e5 3d b5 2e e5 5f 66 f8 00 38 95 5b c2 ff 98 23 ad 60 47 ff 1b 27 f5 df 72 59 7f 27 Data Ascii: Oe /l&t&@q\sJ]gq63<2=5Zt-@6}Q%&2hWGn/0I_~MtO(14&m:jk'r!gw6\|mdY>EAoo-J.rGQQJr1*cm!=._f8[#`G'rY'
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: ce fa 05 b4 65 a3 ef 10 e2 2e a7 97 72 ba f0 ed 34 98 27 f5 38 b5 fd 26 47 44 16 8e d4 e0 19 31 6d 1b d8 92 3b 42 92 f2 b0 14 8b 85 62 f6 c2 7c ab e8 cd c0 92 73 8a 44 aa 1d 19 52 51 fd 06 cf 05 99 01 e2 42 b4 81 d2 c4 9d ca 79 8a 3d 40 48 27 84 f4 30 c6 fa 4f 11 e5 69 e6 0d 11 b3 d7 7c 21 b1 96 9e 42 fa 29 73 cb 28 5a f5 e7 fa 27 9f 03 31 c7 32 46 ff 59 43 e1 cb 48 89 d2 28 ae 94 6c 49 25 24 24 cb 26 df c5 b0 64 9b 09 95 ae 7f 8e c8 be 64 2d 86 23 d9 41 7d 03 3d 55 ee 8c 2c 8d df 82 0e 03 be c2 38 0c ad 38 8c d2 68 18 ec d9 9b e0 34 c9 fa 0e a8 26 12 d5 99 46 b2 56 27 17 d4 c9 c5 cf 3e d1 2a 9f 94 e2 29 fe 7c 77 14 4b b9 d6 83 c5 1c 42 d3 5c 47 78 f6 8d 55 9d d1 33 6c 3f 8f 24 db 7e c4 23 ae 72 a0 a6 6d 58 ca 36 e8 cd 94 98 9e b6 54 7f 4e 95 e0 e9 82 0d Data Ascii: e.r4'8&GD1m;Bb\|sDRQBy=@H'0Oi\|!B)s(Z'12FYCH(lI%$$&dd-#A}=U,88h4&FV'>*)\|wKB\GxU3l?$~#rmX6TN
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 3a 39 9f 4c 46 ea f8 e0 50 6a 5e 44 08 a5 82 6f bb c7 de 68 6f 24 df 12 85 24 50 ce 27 3b dd d1 f1 b1 ae 36 ba f5 a8 d6 ce d1 e1 70 b8 2f b5 90 07 65 a4 67 22 1f 10 13 99 cc 90 3f 99 4c 26 a6 6f ef 16 bf 1f f0 7f d9 27 40 47 44 0d 77 f9 3f eb 3b 62 a7 53 f3 63 fa 63 7d 46 54 31 fa bc 43 7f ac cf 58 17 3e ab 03 fa 63 7d de e3 cf 23 fe cf fa bc cf 9f 87 bb f4 c7 fa 7c c0 9f 4b 33 3c e4 cf 7b 63 fa 63 d5 3e e2 cf a5 79 1f f3 e7 9e 47 7f a4 b6 36 e5 c6 fc ec 43 36 39 b3 f2 bb ed 03 a7 52 c5 ee e1 d0 2c 44 07 d4 a0 e5 59 e7 27 de 07 f8 68 9f b4 1e a9 1d 5d 0c fb 4e af e7 3a 87 87 ae b3 d3 3b 92 79 18 47 06 2e dd 47 49 ef 70 07 55 f4 7e d1 c8 d2 b0 8b 92 9d 5d 34 dc d5 b0 62 42 7a 70 c3 9d 9d 63 94 f7 f6 5d 47 97 6a 3f 08 19 f3 18 dd ee 1e e0 ff 06 6a 25 cc 1f Data Ascii: :9LFPj^Doho$$P';6p/eg"?L&o'@GDw?;bScc}FT1CX>c}#\|K3<{cc>yG6C69R,DY'h]N:;yG.GIpU~]4bBzpc]Gj?j%
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: dc d4 1f f8 48 11 13 21 c6 67 b2 46 db 79 f8 13 68 12 ba 20 3e 84 de d1 6a 81 cc 57 04 1f c8 fa ac e9 3c 46 b2 7c 0a d9 50 b4 12 9e 38 20 27 69 4f 7c 35 1b c7 6c cc 00 ad 80 bb a9 1a 6d df c6 42 48 df 91 f2 63 63 31 92 0e 45 32 ce c6 2a 63 0f d4 15 cd 64 63 0d de d3 2d 75 6e 89 e4 e3 6e b2 ad a0 7d d2 7b cc 9b d4 46 b6 bf 40 07 c6 5e 69 32 8b c2 4b 5a f5 62 4e e6 83 8c 3a 9c 7d 1b f7 68 65 7a 20 cd 89 44 c9 e5 e3 b0 da 30 b0 b5 e3 6b 4a b2 62 36 b3 72 12 94 ab ac bd 5c cc 42 6f 6c 66 41 04 64 df c0 69 c5 50 12 1a 1c 83 71 5b 44 76 62 b3 aa 0f 6d 6d 49 7c 10 7b ea 72 11 42 1d dd be a1 97 51 bf 97 d9 57 7a 0f f7 0f 0f d2 17 3b 2b 99 43 b6 73 78 70 54 51 42 cf c1 f1 31 90 79 a9 37 7e 20 25 18 bb 3c cc 59 77 fc 3e f6 40 ff 2e 80 c9 a0 b1 9c 44 30 11 8a c9 2a Data Ascii: H!gFyh >jW<F\|P8 'iO\|5lmBHcc1E2cdc-unn}{F@^i2KZbN:}hez D0kJb6r\BolfAdiPq[DvbmmI\|{rBQWz;+CsxpTQB1y7~ %<Yw>@.D0
2024-11-01 15:52:30 UTC	1266	IN	Data Raw: a5 1e c4 4c af 05 2d bc 49 37 cf 5a bd 9c 3d 89 25 21 b2 2c 1e 7e 3f 06 17 9d 62 3c 88 95 a5 e0 21 93 98 13 73 32 e9 77 51 d1 93 89 51 12 2e 47 d3 75 87 83 78 40 53 4e 1a 47 4a cf 6a 14 ec 50 11 c1 b2 ee 60 3f 35 7a ce 15 b2 91 de 6e a1 30 53 52 77 a1 e8 c9 37 b4 6d 19 2c 73 69 ee 54 8c 05 6c 8d a9 68 3e 85 bb 92 59 e5 e8 06 cb e8 2c f7 3d d3 02 4a 4e 10 78 46 c1 2a e0 c4 68 9f 32 0d 48 7e 2d 2d 6b e8 5c 09 74 c5 d9 9a 0a ad d3 02 5d 47 db 69 54 d5 92 22 c4 ec b3 ec c2 4b 96 19 b2 4c b1 8d 10 cd a3 58 b3 49 06 b8 93 b2 2e eb a4 60 f6 36 84 ce 9e 46 30 96 63 da 6c b6 30 a1 fc 7e e9 e3 ef 53 e8 b6 db 54 a7 cc b6 30 96 59 4d 6d cc f3 0b 8c 79 d8 2a 52 eb 46 b4 0a e1 ed 57 5f 3c a3 c0 6d e2 7c 60 bc 59 60 b3 79 a7 69 a6 65 ab 93 5e 6b 56 84 66 ea 43 8d 45 ef Data Ascii: L-I7Z=%!,~?b<!s2wQQ.Gux@SNGJjP`?5zn0SRw7m,siTlh>Y,=JNxFh2H~--k\t]GiT"KLXI.`6F0cl0~ST0YMmyRFW_<m\|`Y`yie^kVfCE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49840	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	510	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c249210f49c4dd776fb9b689ece67659 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:12:10 GMT Expires: Sat, 25 Oct 2025 16:12:10 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603620 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 31 0d 0a 00 0d 0a 63 66 64 0d 0a 00 00 00 02 ff ec 5a 6b 73 db 36 16 fd be bf 82 e6 76 3d e4 16 cb da 8e ed d8 f2 b2 6e 1a c7 69 d2 34 c9 d8 49 66 76 3d 1e 0e 25 c2 12 1d 8a e4 00 a0 1c 55 d6 7f df 73 01 f0 61 4b 7e 24 75 db ec ce e6 43 0c 81 20 70 df f7 dc 0b ba 95 e4 8e 54 22 1d 28 77 cf 93 3c 3b 0b 2e 78 bf 8c 07 1f 9f 8e aa fc e3 44 45 55 1a 8d e3 34 0f 6f 79 76 79 79 72 ea 07 65 25 47 de c9 c9 e6 da ee e6 f6 29 9b ed 6e ae 6f 6d f7 3c c5 38 13 7e f8 fd 4c 04 89 c7 d9 ec 9b f3 9e 87 9f 23 f6 ec a5 1e 54 ec 70 a8 07 31 7b fe 8b 1e 0c d9 87 03 3d 28 19 3f d2 83 09 53 d8 09 6f 0d d8 a7 Data Ascii: 00000001000000010000000100000001000001cfdZks6v=ni4Ifv=%UsaK~$uC pT"(w<;.xDEU4oyvyyre%G)nom<8~L#Tp1{=(?So
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 85 9a 1e 4f c7 fd 22 93 e6 ad b4 7e 6b e9 1a 68 64 8f 60 4a 1a a6 88 4a 99 e2 c2 f3 6a 58 e1 e1 dc ab 89 e9 ea 16 07 5c 0e 44 5a aa 42 68 1a 03 9e 03 7a 88 b8 9f 21 5d 13 3e d1 0e 15 c4 65 99 4d 3d b8 9a 3f b7 9b 75 80 4b 44 6f 02 05 da 73 3c 1e 36 87 23 84 10 d3 dd 19 12 04 78 76 0b 8d b2 dc 95 50 4d 4b 5e 9c 39 ea f2 b2 f1 72 47 19 d7 0e d5 89 11 43 a0 8a b7 22 1d a7 2a 9d f0 53 12 59 03 87 70 ac 45 8a 30 a5 2c 23 52 2e 2f dd 84 9f c5 55 a6 5c 9f d6 2e 1c 95 d6 a9 1a 91 43 1b 56 ce 2f 9c 77 20 e3 99 10 90 83 fb c3 0f 9d e3 9c 71 85 38 6e b9 8e 9d b2 26 c3 d1 e1 2e 70 6b 89 78 2e e1 ec 7c e8 c2 80 f9 fe b1 1e f7 5e 57 e3 3e b0 13 14 34 07 65 f5 0a df ba 95 2b b5 8e f1 86 95 01 df 47 a6 fe d6 75 e7 d0 9a 9f 02 a8 ee 5b d3 00 3f 69 ce 6b d3 d0 f2 06 db c0 Data Ascii: O"~khd`JJjX\DZBhz!]>eM=?uKDos<6#xvPMK^9rGC"*SYpE0,#R./U\.CV/w q8n&.pkx.\|^W>4e+Gu[?ik
2024-11-01 15:52:30 UTC	929	IN	Data Raw: 14 e2 20 7c 51 c5 6f a9 2e c0 5d 0d 98 4b 83 27 90 30 55 2b a6 40 41 65 6a 92 69 d0 94 12 d2 6c b3 c4 54 42 6b e3 dc d8 b8 2a 54 9c 3d cb 87 28 aa a5 09 ca e0 f0 5d 67 d2 e3 d7 12 09 75 a4 24 34 d5 59 03 9f b0 25 cb d2 2d da c7 37 6d 46 ec d6 5a 3e 40 f2 69 b6 59 6c 37 5f 27 07 32 d5 c6 a3 c5 96 17 2a 3d 9b 7a 54 e0 19 0b b9 49 8e d4 57 13 8a 64 8a f0 86 f5 54 11 22 d6 96 cd 8c 06 2c 6a af 36 1c 65 b4 7f d3 76 dd a8 88 f6 0d b5 ed 3a 7b cd 97 19 8d 6e 29 fc f6 1b 2e b8 63 19 8c 5e a3 5d 41 8d c4 d6 0b 17 fb 0b 8d 3f 30 37 69 c2 4b 84 2e 19 47 8f 41 87 3d aa 79 b5 59 e9 e4 4c 4f 0e 75 5b 5c b7 d1 ba 75 31 31 74 54 c7 dc 7c 88 04 03 2f 78 48 86 5e 3f ff 3c 86 9a 68 8f 5c 05 9f 5f ce 10 1e dc c2 cf 53 60 32 14 e4 3c 39 28 a8 3b fc c0 0c 7d ae 86 08 f3 68 6a Data Ascii: \|Qo.]K'0U+@AejilTBkT=(]gu$4Y%-7mFZ>@iYl7_'2=zTIWdT",j6ev:{n).c^]A?07iK.GA=yYLOu[\u11tT\|/xH^?<h\_S`2<9(;}hj
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49839	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	689	OUT	GET /gui/12184.6278fb6ce9aafc359333.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9b570bdc1a83ac9aee0ddcdcf2c9a00c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:28:20 GMT Expires: Sat, 25 Oct 2025 19:28:20 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591850 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 66 66 37 0d 0a ff ec 7d 79 63 db c8 95 e7 ff fb 29 60 4e 47 21 d2 00 c4 43 27 69 da 56 cb ea 8e 26 f2 b1 92 9d d9 1d 47 2b 83 24 48 22 06 01 06 00 25 31 34 bf fb fe de ab 03 05 90 94 ed 6e 4f 36 d9 51 3b b1 89 ba eb 55 d5 ab 77 57 6d 9e 05 56 96 a7 e1 20 af 75 eb 59 10 8d bc bb a0 3f f3 07 9f 4e 27 f3 f8 d3 6d 7e 33 0f 6f a6 7e 18 f7 1e c8 fb fc f9 c3 b5 ed cd e6 d9 a4 fe e1 43 b3 d5 3c da 73 5a Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000ff7}yc)`NG!C'iV&G+$H"%14nO6Q;UwWmV uY?N'm~3o~C<sZ
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: bb 8c 49 c2 56 eb e8 78 cf ee 3e 51 74 56 3d b0 97 81 77 e1 c7 c3 30 1e f7 6a 35 27 f0 8a 45 ec d5 06 7a 41 29 a7 32 f9 5e 6d 26 a0 01 da 41 6c 03 2a f4 7e 36 4e fd 61 d0 ab cd c5 0f 37 9b f7 05 0d 88 81 52 81 2b e3 fb 3c cb e6 28 ba 5e 84 21 46 19 fc 43 54 e3 9f 6f f2 49 90 f6 6a 09 fd 43 c9 ef 82 c1 24 0e 07 d8 71 a2 68 af 96 ab 14 f4 ac 6b 9f 0c 06 18 d4 34 1c e0 47 90 65 bd 9a 2f bf 5d 9f 13 44 0f 63 6c 42 86 27 f5 ac 3f 28 ef 67 1f 94 e5 db 24 cb b0 f1 6f 03 d4 1f 51 82 3b 4b 44 02 15 b9 0c 68 95 4f 7e 9a 03 8e fd f9 d8 4d f9 9b 72 de a6 e1 2d f6 d3 fb 59 94 f8 43 82 1a 7f ba 73 fe a6 02 e7 f1 20 1c e2 18 5e 06 d9 0c ab 09 88 84 32 05 ad 88 24 a3 87 ab 41 1a 04 71 36 49 72 0c 53 ff 56 fd ad ea 19 28 c4 ac b7 5c d9 76 17 1b 22 cb 2d bf f7 a1 76 05 9a Data Ascii: IVx>QtV=w0j5'EzA)2^m&Al*~6Na7R+<(^!FCToIjC$qhk4Ge/]DclB'?(g$oQ;KDhO~Mr-YCs ^2$Aq6IrSV(\v"-v
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 13 0c 16 d3 ab c4 3f a8 d5 5f 23 df cb 4d 40 5e 2b e9 7b 8d 36 f1 43 50 bd aa 89 12 85 af aa 2b ba 29 9b d0 8a 19 45 1c 0b 14 ba 9f 39 d6 08 f8 8b f6 b6 6c ae 38 db 55 8e 40 34 f9 0a 54 52 98 07 bb a3 30 0a 40 51 65 56 1f b4 bb 15 4e 71 11 80 21 05 c4 46 91 0f 4e 63 68 21 0b 7d 4e 47 f3 a8 ba 8d 6c 3d 6b c9 f5 88 96 99 13 02 8d 37 0b 07 b4 39 16 a0 68 e5 31 88 70 28 b3 81 3f 0b 40 cf 9f 27 a7 d8 84 60 59 78 db 32 0b 56 fb 25 f5 67 13 e4 09 8e 05 f2 69 e0 2c 8d aa 9c 5a 19 7b 10 3d 1a 45 e1 38 20 ba c0 a9 bd 7c 87 9b a5 76 72 45 7f 53 96 c2 9f f8 e4 01 65 b5 6b 67 84 a1 bc 68 b6 0e bc 41 32 45 fa 8b e6 41 5b fd 6c 1d b4 d4 4f 3f 89 d4 cf 31 b4 26 fa 03 7c 8d f9 19 0e a2 64 3e 54 25 cd 1c fe 9d ce a9 87 18 a4 6a aa ca 80 38 8d 92 e4 93 fa 04 a4 21 cc f6 a6 Data Ascii: ?_#M@^+{6CP+)E9l8U@4TR0@QeVNq!FNch!}NGl=k79h1p(?@'`Yx2V%gi,Z{=E8 \|vrESekghA2EA[lO?1&\|d>T%j8!
2024-11-01 15:52:30 UTC	342	IN	Data Raw: 9a ab e7 f8 b4 3f cf c1 8e 28 00 f4 f3 d8 c2 ff dd 28 8c 3f d5 ac 17 03 ac d0 a7 5e 8d 80 55 cc 43 d4 a0 ad 04 bd 33 4d a6 4e da d6 cd 8b d8 db b2 7f b6 dd b4 cf 43 6f 30 09 6e d3 24 7e 3f 3b c7 60 3b fa fb 65 72 17 53 0a ac a1 bc 38 41 6f f1 18 b4 9c d3 f7 84 f9 52 8f 01 61 98 2d 45 30 5b 72 fa 76 17 76 6d c8 f2 3d c1 e0 e6 0b 20 6f a2 38 3b 27 69 ea 2f 56 50 2f 4f 29 2b 4f 28 d1 a9 d1 19 80 d8 90 77 9e ed a8 ba cc 47 d8 f5 6a e1 35 3a a1 a8 39 ed a9 ba 55 3d f7 3c 8d 68 15 88 72 70 25 b2 cb 48 cb 3d 05 48 3c 5c 90 3e 44 e9 bd e9 4a 18 da 6d 27 4b 37 9b d5 1d 08 5a 14 86 64 1b 68 d1 10 b4 e8 f1 c1 f1 11 a8 59 22 4b 0f 5a 07 7b 07 5b c8 52 a5 0c b2 26 c4 41 6a 8a 5a 25 d3 d5 0b 86 92 41 08 6a 89 ff 45 9a 2d 09 ef 60 85 8f cf 9f 8b d2 d4 04 59 c0 a5 3d 61 Data Ascii: ?((?^UC3MNCo0n$~?;`;erS8AoRa-E0[rvvm= o8;'i/VP/O)+O(wGj5:9U=<hrp%H=H<\>DJm'K7ZdhY"KZ{[R&AjZ%AjE-`Y=a
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8d 0d 0a 30 30 30 30 30 30 30 31 0d 0a c1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 18 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 45 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a cd 0d 0a 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 66 65 64 0d 0a 36 e2 eb Data Ascii: 00000001000000010000000100000001!00000001[00000001000000010000000100000001S0000000100000001,00000001P00000001*00000001g0000000100000001E00000001#0000000100000010fed6
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 0a e1 57 0a fb 2a bd de 37 79 d2 01 ab 04 5e c9 ee 40 3a 45 42 55 b5 c0 79 65 68 e6 02 e7 6a 81 73 39 60 64 36 6c 29 18 56 c3 be 85 60 f8 b6 47 2b f7 ff 2f 85 30 dd 42 21 08 71 14 c9 79 c7 db 49 04 55 b9 20 11 4a 85 f5 22 19 f2 5d d9 dd 96 1a 0f 10 15 e3 9e ea 6d 13 51 51 74 45 23 36 c9 8a 31 2c 15 c8 e1 fa db e8 8a 4d c4 04 19 2d b4 da fb 07 10 49 4a a7 6b 87 a9 88 82 7a 98 3f 52 0f df 89 7a 98 f5 e0 1c 5d b6 48 f8 ce a2 1f 18 32 ac 09 7b 84 5b c7 e0 81 ab fc df fd 5b 1f 86 95 f0 84 b7 7e 89 92 3e 4c d9 ff ec a7 21 49 28 ff 25 2f 76 a5 0e 15 aa d7 67 6a 2e 16 31 6e 85 b0 83 a4 ba c5 97 29 3a f9 6f 2e 97 30 ae 38 e1 08 43 5b 47 de f2 0f b1 ce 4a 22 c5 92 a6 8a 90 40 f1 e3 2c 79 50 37 b9 66 a5 59 db 26 39 6a 48 fd 6b 64 77 26 f8 eb e7 f2 df 4e cd ad 3d a0 Data Ascii: W*7y^@:EBUyehjs9`d6l)V`G+/0B!qyIU J"]mQQtE#61,M-IJkz?Rz]H2{[[~>L!I(%/vgj.1n):o.08C[GJ"@,yP7fY&9jHkdw&N=
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e4 8e 01 22 d1 db 3f 09 06 24 fc 43 46 bc ff 4a a8 a2 b4 71 ef 01 d8 7b 00 f6 a9 b1 34 7e 04 e7 0e 85 cb f5 ce 52 17 06 16 9b d7 49 99 44 2b 61 3e 30 7d b5 0d 6d e3 2c 50 5e 79 79 61 ca a9 95 f4 9a 24 2b 5a c0 75 bc 86 a0 fa d1 3c 95 68 bd dc 16 a1 74 58 b9 6f ea 46 29 01 37 21 7a 50 af 6a fd 18 97 15 bd 6b 56 86 c6 68 1e f4 4f 80 d7 27 82 17 90 80 02 d1 9d 8b a8 21 96 c1 5d ec ad b1 12 c2 6c fc 01 ef 19 8a 1d c1 0e 35 fa d8 a9 13 d6 e6 13 56 26 a7 1e a4 43 e8 58 85 6a 6c a2 a4 6e 74 84 5b cb 65 2f 4a 44 c1 a0 93 2b 59 90 50 5d a8 25 aa ed c1 6e e8 5e 26 82 ee 75 62 15 70 b3 20 1e 0d 23 12 87 ea 8b 9f ef 7f 9c 13 58 fa c2 23 38 39 85 64 31 f5 af 40 b2 4c 58 97 04 2b d6 b7 a0 33 2d 62 0a 29 0c 80 50 26 c1 e1 28 a5 14 66 13 43 58 0b 0f 10 4b 80 ca 93 b3 33 Data Ascii: "?$CFJq{4~RID+a>0}m,P^yya$+Zu<htXoF)7!zPjkVhO'!]l5V&CXjlnt[e/JD+YP]%n^&ubp #X#89d1@LX+3-b)P&(fCXK3
2024-11-01 15:52:30 UTC	107	IN	Data Raw: 11 60 d4 50 98 e2 14 0e cb d2 95 98 6f ba 14 b6 ea 2b 92 65 c4 c1 f3 bc 1e d9 9d b7 f0 d1 0d b3 00 1a 06 5c fa b7 01 92 60 9c 1e c4 75 74 61 b3 27 e9 d9 a3 19 c4 77 32 83 38 ed 21 c2 c3 03 78 99 88 2a 88 f9 bf 14 e0 08 b1 ba ef fe 28 58 29 32 67 18 24 33 44 c3 47 b4 38 ad fc 66 c2 4b 69 8c 03 bd 7c 7f 40 09 ee c2 0d 0a Data Ascii: `Po+e\`uta'w28!x*(X)2g$3DG8fKi\|@
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 31 34 38 37 0d 0a 5f 40 ae c9 c4 3b 9b da 6a c3 8e 99 d1 f2 7d 7e 53 30 46 d4 13 d0 08 82 ac 85 71 Data Ascii: 000000010000000100000001y000000010000000100000001300000001y00000001H0000000100000001000000010000000170000000100000001r000000015000000010000000101487_@;j}~S0Fq
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e0 b2 fc 86 11 ab 09 22 61 59 04 10 31 31 29 a7 cc e8 5a 46 e2 91 2a 1d 41 e0 c2 4c e3 5e eb e2 88 17 73 73 99 a1 ec 64 60 2e 86 b7 00 36 60 03 c6 f3 92 3c 02 cc f8 96 af f2 10 1b f6 53 31 6a 49 3e d1 b1 95 e4 36 b0 a6 82 26 c2 22 6f a8 6c de 20 b7 0a b0 b7 2c 3b 9f 67 50 29 e3 0e 80 13 91 2b b4 e6 a4 54 46 24 84 4d cd 18 90 9c ec ec 4c 8a 31 3d 47 e5 75 f3 18 40 53 30 00 c5 93 0a 2e 3f cf 01 7d 86 26 50 15 22 07 7b 03 55 b9 c2 99 8a a6 2c ca 89 9a b4 cd fa 32 f4 cb 3b aa 70 16 e3 95 8f 20 2b 08 5e 0d 8a 1b cc a1 e0 81 4d 10 dc 28 10 dc 78 ac 76 54 b1 f2 6f 48 99 00 d5 fa a6 0e 74 b3 67 5b 9b 3d 53 cd 9e 6d 6c b6 38 e9 a7 5f 84 ee e9 ce ce 69 01 dd e2 b0 c0 37 66 cb 9c ce 11 97 fe 5c c6 5c af b0 a8 d5 c5 11 4a fa 1f 3e d2 19 36 c0 b9 1e 49 87 f7 a6 e6 ae Data Ascii: "aY11)ZF*AL^ssd`.6`<S1jI>6&"ol ,;gP)+TF$ML1=Gu@S0.?}&P"{U,2;p +^M(xvToHtg[=Sml8_i7f\\J>6I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49821	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	510	OUT	GET /gui/71288.1829e1a8db7a3e06e295.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 39ca8f913e5d2b2af8f9b04d64a0a4fe Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:29:58 GMT Expires: Sat, 25 Oct 2025 19:29:58 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591752 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec 5c 5b 97 db 36 92 7e df 5f c1 68 36 3d 62 96 64 53 54 4b 2d 51 96 13 8f 93 ec e6 9c 64 b2 6b 7b f6 c5 eb 33 a1 48 48 62 9a 22 79 48 aa 2f 91 f5 df f7 2b 5c 48 f0 d2 dd ce 65 f7 29 56 62 ab 51 85 42 a1 50 a8 1b 80 1e 1d 4b 66 94 55 11 87 d5 68 35 2e 59 b2 75 ee d8 26 0f c2 9b d7 fb 63 7a 73 5b fd f3 18 ff f3 10 c4 e9 fa 09 d8 c7 8f ef 3f 98 4e 7e 2c f7 e3 f7 ef af 27 de 62 f1 c1 3a 79 b3 e5 72 e1 8f 0b 8b 59 95 b9 7e 79 aa c6 cb c5 72 62 ae 6e 83 c2 c8 d6 d5 f8 6a 71 ed 5e 99 56 80 af 93 f9 fc 6a 66 5a 1b 7c 9d 7b 8b a9 67 5a 25 b5 ce a6 de d4 b4 d2 f5 b8 1a cf 26 93 e5 dc b4 d0 6b 3a 9b 5e 99 e6 2a 61 95 11 5b 91 15 5a 89 95 5b 3b 6b bf 2e d6 2f 0b 4e fc 76 bd 3d a6 61 15 67 a9 18 dc ca cc Data Ascii: 10fff\[6~_h6=bdSTK-Qdk{3HHb"yH/+\He)VbQBPKfUh5.Yu&czs[?N~,'b:yrY~yrbnjq^VjfZ\|{gZ%&k:^*a[Z[;k./Nv=ag
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: ad e5 02 ae 95 d6 1a 6d b2 02 18 d8 9d d8 f0 07 23 1f 56 ec de aa b4 8d ae be 46 09 d6 28 e1 ba 65 c0 46 f5 ad 47 5e da 9e 30 33 6d 5b d0 a8 d4 e0 6c 74 3b 23 27 a1 ec dd af d9 78 d4 87 6f bb d2 c9 59 1a c6 c9 77 d0 12 6d d3 68 5f fb 06 81 4b 74 93 45 0f 10 13 94 b7 2d 49 70 c1 1b ea ed 0a 17 ca 1b 14 9b 72 bf 0e 3b 13 53 17 61 0e 11 e6 24 c2 5c 29 58 9e 04 21 db c3 80 62 a5 76 49 76 c7 55 54 53 40 0d 6e 84 59 62 4f 3c ae 4f 42 e5 2e 73 e8 dd 9f a4 06 64 39 28 ab 9f 4c d3 d7 1c 26 ec ec 78 47 8b c1 f7 bd dc fe c0 11 ab dd 75 c8 e6 f9 bc ba 1d bf 47 ff c0 c9 65 94 07 5f 42 7e d4 ff 1b 76 3a 0b 52 0b 96 84 e2 39 ff 33 20 55 08 92 e1 e9 98 2f b6 2b 0f 22 46 67 f3 83 75 a0 ee 55 46 1d 2d 0e e3 e1 ce c8 ba cd e2 c8 70 4d eb b1 41 de 82 20 6c 7f 97 82 6e 51 9f Data Ascii: m#VF(eFG^03m[lt;#'xoYwmh_KtE-Ipr;Sa$\)X!bvIvUTS@nYbO<OB.sd9(L&xGuGe_B~v:R93 U/+"FguUF-pMA lnQ
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 25 c8 4e e7 f8 5f 69 ad a8 2d db bc 44 07 4b bd 0f ca 98 e6 ec ce bd cd b5 5c 57 98 d7 2c 85 1a 20 d1 a1 0a b4 86 e5 2d e9 d3 e6 be 87 e3 ce 5d af de 38 98 43 17 01 99 d2 d5 a2 33 93 2e ce c2 85 a6 b4 e7 d3 45 99 47 93 ab 89 9c 55 42 56 a3 37 90 ae 21 a4 d5 4f 22 a8 a5 da ec ec f2 b8 41 8d 92 96 72 1b 45 5b b9 ed 1a a1 e8 18 cc a5 4f 5b 20 2d 78 b8 5d 32 26 e0 7c 41 5b c0 d9 76 aa 76 a3 5a 52 1d 8e ad ea 31 b9 9f e5 a2 b6 c0 01 9b a8 b1 85 00 5a d0 70 8b 8f 18 99 4f 5e 07 ea 1b b0 9e b8 a8 5c d6 93 5f 46 9b c5 56 4d ad d6 08 59 df ac b1 42 8f 3e 1d 01 74 28 6d dc 88 6d a4 a9 12 42 e8 20 2c 97 61 b0 95 13 ad 05 d1 c1 d9 ce c2 eb a5 54 3d 25 8c 0e 0a 5b 04 d7 81 dc 3d 52 20 1d 0c dd 4c 09 a1 74 10 74 13 c4 2d a6 dc 63 33 6c 2f 4f fe 25 26 cb 0d 6c bd 3f b1 Data Ascii: %N_i-DK\W, -]8C3.EGUBV7!O"ArE[O[ -x]2&\|A[vvZR1ZpO^\_FVMYB>t(mmB ,aT=%[=R Ltt-c3l/O%&l?
2024-11-01 15:52:30 UTC	235	IN	Data Raw: 5d cf 17 03 10 f2 61 cb 25 3c 50 8f 1a f7 ea a8 f5 0c 81 38 0c 41 7b 7e 7f 46 c9 8d ae 4b 9c 70 24 7f ef c3 ff 1a b4 2a 2b e1 a9 50 40 fa fc ec e0 aa 9b b0 6b 74 e7 4d ea ba 7d 8f 90 a1 15 6f 68 30 ee c1 b4 60 03 20 dd 30 18 92 55 d5 dc cd 2e 54 bb 4a 2e 50 6a 6a 7a e8 b6 03 1c a8 dc 02 7d 84 29 6c 2c 37 cf 11 78 a3 8a 43 80 44 21 1e 37 2f 38 7b 43 f4 d5 d0 95 3b 57 7a e8 da fc eb cd 3a 19 61 32 e5 90 4f 11 54 c1 5b 97 a2 68 d7 48 8a f0 57 8e f7 34 61 15 8b 7c 7a bc 84 99 2b 83 66 6b 51 86 26 3d 61 cf b8 87 6e 62 31 1e 8f 89 c0 aa ed 2f 49 13 44 0f 11 b9 51 44 0e af e9 20 0e c1 38 b8 8c f3 80 8d c5 97 0a d5 db f0 66 a5 2c 64 23 05 10 50 aa f4 60 6a 8b a6 b5 df 9b 2d 7f d2 ea ab e9 93 c4 e2 0d 0a Data Ascii: ]a%<P8A{~FKp$*+P@ktM}oh0` 0U.TJ.Pjjz})l,7xCD!7/8{C;Wz:a2OT[hHW4a\|z+fkQ&=anb1/IDQD 8f,d#P`j-
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 37 35 35 0d 0a f5 a9 8f 23 00 38 bb d7 fc 52 0b 4b 03 98 2b b1 36 2d b8 d4 32 ee bc 84 87 a5 d0 9e e1 e2 f4 90 df 5d b5 5d d8 4a 99 1e dc 19 2f 50 82 e0 57 63 c8 cc ad b8 a3 19 68 2d ed 5e 63 af 41 28 92 df 62 b3 a5 cc 22 6f 69 4b 5e d7 3e 53 39 33 a9 c1 43 94 94 12 6f 50 b9 de 15 19 ca fa 72 17 b6 91 77 08 9a 28 e3 89 79 44 c7 85 65 a0 60 81 1b d0 41 c9 e0 43 6d 04 14 56 97 c6 00 86 b6 e9 86 a0 6a 5b f4 60 cf 85 98 22 e4 34 4f dc d2 69 9c 72 5f c3 ed 5f 2b da 6a 4d 4e cb 5a Data Ascii: 00000001Z00000001000000010000000100000001f0000000100000001!0000755#8RK+6-2]]J/PWch-^cA(b"oiK^>S93CoPrw(yDe`ACmVj[`"4Oir__+jMNZ
2024-11-01 15:52:30 UTC	571	IN	Data Raw: 1a f5 92 cb 66 7e f6 a4 d9 77 d9 2c 7c 96 b6 6d ce ce 23 cf 84 4f 9d 76 9f b3 a8 1e 11 b7 28 c8 47 f3 f2 fc cf 4e d8 b6 f2 f9 2b fa 66 77 c2 94 d9 5e ed 9b f9 15 84 16 09 3c 24 ad a1 e4 33 da 40 3c 33 57 50 9c a0 d3 55 a3 2e 85 95 8a 53 f9 e0 5d 28 46 c7 c3 df 0e 89 ce 30 6d 0a 1d 20 08 e0 d1 70 4d 80 8e 95 bb 63 d4 fd e5 3a 75 e1 20 81 37 f4 2d 12 6e 7b 96 78 10 5c 83 1f 99 06 3d 17 f7 4e f8 bb 37 fc d9 e1 4f c9 39 ac c7 3c bd c7 e6 27 55 74 ee 2e ae 70 b5 86 96 ef b6 05 8a 4c df 71 85 b7 85 d3 35 7a b5 01 38 75 20 7e 0d 69 f5 a7 94 50 99 fc 3a e1 17 7e b3 b1 57 f2 42 97 96 ee 52 88 df 3e 74 68 fb 06 fc ce 93 9a 9a ae e3 5a de 41 23 53 04 56 e3 69 f9 66 07 4d 6c 8f 2e e6 73 3c b8 ce a2 47 fd 09 5e c4 f0 2d 8e fa 89 78 bd 9f f5 e9 36 8c 3d 52 93 68 f2 ee Data Ascii: f~w,\|m#Ov(GN+fw^<$3@<3WPU.S](F0m pMc:u 7-n{x\=N7O9<'Ut.pLq5z8u ~iP:~WBR>thZA#SVifMl.s<G^-x6=Rh
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49823	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	688	OUT	GET /gui/8633.4c341e20fe5574616256.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 79d6991c24740d459e8c420ed2a66c39 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:22:02 GMT Expires: Fri, 31 Oct 2025 12:22:02 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99028 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 63 0d 0a 00 00 00 00 02 ff ec 7d 79 73 db 48 b2 e7 ff fb 29 60 f6 8c 86 ec 01 20 1e 12 25 82 a6 35 1e d9 3d ed 18 f7 f4 0b d9 de 89 5d 3f 87 1b 24 8b 24 c6 10 c0 07 80 3a 86 e6 77 df 5f 66 1d 28 80 a4 24 b7 fc 76 23 36 64 75 eb a8 23 ab 2a 2b 2b ef 2a 36 56 b9 70 f2 22 8b 26 45 63 d8 cc 45 3c f3 af c5 78 19 4e be 9c 2f 56 c9 97 ab e2 f3 2a fa 7c 19 46 c9 e8 8e ba af 5f 3f 7e 6a f9 cb 55 be 68 7e fc 78 da ef f5 dc c1 49 e7 e4 c8 3d ea 1f f7 7b 6e 6f d0 ef f6 3f b9 eb d3 d3 41 ff 28 68 16 ae 70 f3 d6 e8 c5 3a 6f 0e 4e 07 9d d6 f0 2a cc 9c 6c 94 37 8f 4e 4f da 47 2d 37 c5 af 9d 7e ff e8 b8 e5 Data Ascii: 0000000100000001000000010000000100ffc}ysH)` %5=]?$$:w_f($v#6du#++6Vp"&EcE<xN/V\|F_?~jUh~xI={no?A(hp:oNl7NOG-7~
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 2c f3 93 14 bd 93 79 c0 87 51 1e b4 29 0e da b4 7e d0 ac 13 c3 24 65 11 db be 13 80 e3 d1 07 f5 59 f4 54 a1 c4 a9 e4 75 25 2d 4a 3a 06 cd 45 e0 96 a0 dd f7 e0 cb af d2 eb e4 02 0c ad a0 b5 6e b3 ce dd 0b 98 60 01 93 fa 02 34 33 08 25 d3 2d d9 45 38 ce d3 18 27 cd 19 cf bd 71 3a bd d5 27 1a 3c c5 6b 3b e3 b4 28 d2 4b fc 02 be e4 b5 6b 87 49 c1 da 5e 42 ab b5 d9 0c a1 16 00 ab a9 bf 54 b2 12 a7 87 e4 61 f0 0e 47 3b 99 6f 5a 9f dc 39 d5 15 29 95 ba 0d 4d 5c 0d f7 2a 8d a6 4e bb e5 ee 03 f0 32 cb c2 db ad fe d6 4e df 0f e2 af 69 1a 8b 30 d9 02 62 89 a5 df 0f c4 c8 b1 12 c4 7c a4 17 33 59 e5 40 a8 92 96 ad 66 43 72 b5 09 f6 7b 9a a7 ab 6c 22 a6 5e b6 82 98 60 ae 4d 38 6a 6d 5c 56 6b 6c 1d ca 9f 42 24 af 3f 04 4d 68 54 c0 e4 f0 11 4a d5 e9 71 ff 14 ea 13 0b f6 Data Ascii: ,yQ)~$eYTu%-J:En`43%-E8'q:'<k;(KkI^BTaG;oZ9)M\*N2Ni0b\|3Y@fCr{l"^`M8jm\VklB$?MhTJq
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 5b 28 dc cb 1b af 47 66 fb 3e 87 05 49 b8 dc 9b 40 b0 89 cc 28 b5 db 8d d1 86 bd 84 f0 c9 15 69 e2 90 c9 0e ef 23 ff d1 d0 02 73 5c 24 0e fe 97 da 1f 29 fc ec be 5a 66 d1 65 98 69 b7 42 a3 a6 32 c1 25 b2 0c 13 56 ee e0 93 a3 5f 9d e7 46 02 4f 3d 72 e4 39 70 a4 f4 1c 4c 00 8e 17 a9 ff 45 e4 f4 93 83 d3 6f 98 2d 7e 84 4a 41 af 4d 4a 79 67 18 06 eb 36 58 67 11 d1 84 00 31 5c 15 69 6d 46 52 49 2d e0 1f 28 a2 a5 47 2b 18 35 ce d3 e5 ad 03 3d 03 2a 2a 3c 7d b9 13 e6 ce 32 46 74 84 17 e8 14 a9 03 5e 0b 24 44 cb 71 1a 66 5a cf d5 20 b4 5f 16 56 9b 98 15 18 ed 32 45 f4 25 85 63 5b ab 8d da 92 08 cb c5 d0 06 44 d0 86 a7 50 a9 a6 f0 01 9d 4b bb e8 9f 59 48 1a af c1 b8 86 ed 19 27 8e a4 05 f2 dd 30 4d 8c 81 39 e5 d7 81 8e 0d 91 3d a5 95 e7 8b 10 40 1d e9 95 94 04 00 Data Ascii: [(Gf>I@(i#s\$)ZfeiB2%V_FO=r9pLEo-~JAMJyg6Xg1\imFRI-(G+5=**<}2Ft^$DqfZ _V2E%c[DPKYH'0M9=@
2024-11-01 15:52:30 UTC	278	IN	Data Raw: 87 46 c9 05 2c 1a 72 3e 72 23 f2 40 f0 9f b9 28 f2 20 de b8 4a 60 07 63 40 70 cd 80 ca 62 64 1b 1a 14 6e 98 b5 22 73 87 38 ad 72 11 35 9b a6 17 39 87 d8 d4 0c 47 c2 87 61 11 df c2 31 95 b7 86 ba 81 13 d1 4a be 34 43 17 2d dd c8 45 8e 43 02 7b 08 f4 d0 da 98 36 c8 a6 aa b5 29 16 c4 a2 a9 51 d4 94 1e 02 f8 5f f1 5f b3 b5 a9 8a 39 ea c9 8e 08 37 37 de 44 b8 69 49 c1 2f 38 54 91 7d fd 4a ec 15 b8 db eb 84 f8 fa 55 0e 81 36 02 69 0a c6 0b 51 09 6a a4 23 0d 26 1f 65 3e 71 a7 73 69 64 20 05 ca 74 cf cf e4 af 41 ee e3 1c 5e c2 83 8d 83 cd d1 99 9a 6f 64 87 4f 22 45 80 2d ac 1b f9 52 60 90 db 63 14 1a 27 84 56 4d 55 ca 53 c5 77 f3 d2 b8 6e 2a dc 32 94 bc 92 e7 72 8f 73 dc c8 0a 0d c0 f2 8f eb ba 37 53 9d 45 22 fd 13 e5 34 37 ee 24 bd 84 49 29 a6 01 52 25 c6 ab 31 Data Ascii: F,r>r#@( J`c@pbdn"s8r59Ga1J4C-EC{6)Q__977DiI/8T}JU6iQj#&e>qsid tA^odO"E-R`c'VMUSwn*2rs7SE"47$I)R%1
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 31 38 33 65 0d 0a 0e cc 66 ef 08 90 b2 15 e5 50 8f 50 c1 10 7b b7 e8 28 f1 be b0 35 7e 26 fd 5e 84 bb 40 fe 6a b9 c0 ee 41 97 1a d2 93 a8 21 ed d3 44 13 78 2e 36 c0 fa a8 c4 b4 ff 8c 21 e9 a7 d7 b8 03 75 1b 4b d9 c3 a2 60 66 20 cc a6 74 58 a9 9a 5d a4 69 e1 ff d7 4a 64 b7 ef 38 0c 06 86 d1 f8 81 95 4f b8 b6 a0 4e 48 ed f2 67 41 79 20 30 98 9f 43 de c8 a2 f7 e9 f2 cf 85 9f ce 66 e0 0e b2 5a 3b 9f 76 28 d0 8c b3 9a 0f 51 7b af ee 0e b9 c4 70 48 7a 97 70 3d da 88 da bb 91 c1 d8 5f 41 de 2c d3 ac 68 b2 0a ad 72 1d 1c a4 da 20 77 11 a2 03 f1 c9 8d bb 44 c8 88 d2 e1 46 ac ee 59 69 70 13 44 97 dd 65 6b 78 cd f1 94 70 2b 7d 44 a5 6e b8 88 10 12 01 33 7d 7e 72 6f ec d8 8a 3c 64 65 80 64 1f 28 93 48 52 e9 ad 0f ca 2b Data Ascii: 00000001000183efPP{(5~&^@jA!Dx.6!uK`f tX]iJd8ONHgAy 0CfZ;v(Q{pHzp=_A,hr wDFYipDekxp+}Dn3}~ro<ded(HR+
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 40 4f 6d 25 97 85 cc 9e e1 d8 b9 d6 a3 1c dc 0c 45 1a 86 62 61 0e 12 5b 85 73 1d 15 0b 4a cf e8 1e f7 29 a3 45 a6 41 cb a0 8f 8c ec 20 e2 12 e5 0e 52 4f a0 cb cd 29 88 af 82 3d be 75 fa 59 68 b3 0a 3c 8d 32 70 45 f0 bf 26 e5 cd 62 45 7b 76 14 f1 6d 1a 52 71 d8 1d ab 55 f5 76 bc 74 86 88 d6 6c 54 5b a8 75 4d aa eb d8 ab d6 41 27 7b 2d 2a 93 80 7f f0 06 e4 42 24 06 25 08 85 48 9c 94 12 e6 21 d8 b9 5e c0 fa 72 ae 91 a2 23 a5 b2 98 3a e3 5b 95 d1 a0 02 66 e5 1c a0 a8 94 e1 b2 bc 96 6f 80 2c 03 16 71 26 9c 66 d8 2b 38 56 35 5a ce 01 2f 79 4f af 11 84 95 7b 6f cf 42 04 b0 c2 b3 64 df 7d 55 84 50 88 3b 95 57 46 8d 92 96 49 37 e7 8e dd a0 ab 8c 15 5b 23 3b 38 c8 76 48 9d 2f d8 a2 2f d8 22 5b 80 f3 54 c7 d0 98 be 68 09 5e 95 d6 fb 86 43 10 98 ae 16 ec a5 20 8a 5f Data Ascii: @Om%Eba[sJ)EA RO)=uYh<2pE&bE{vmRqUvtlT[uMA'{-*B$%H!^r#:[fo,q&f+8V5Z/yO{oBd}UP;WFI7[#;8vH//"[Th^C _
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 25 f5 36 b8 09 8b 23 24 db a8 f5 d4 9b f4 a7 9d a3 8e 5a 15 de 4a 42 5a 4e bd 85 4d 21 44 d5 77 36 d0 5b 85 9b 3a 48 03 c5 03 45 b4 95 b3 e9 74 a6 8e 5d 89 14 bb 85 68 d3 57 15 21 95 fa c9 6c 20 84 ac e7 0d ad 54 1e cf 7a fa 34 6a 44 d8 f5 38 aa 5d a1 ce b3 42 42 a5 3a 14 1d 3d b6 44 40 a5 76 32 c3 97 c6 20 16 6f 57 da 07 d0 2c 9c d3 ad ca c5 0f a6 e3 d3 99 5e 9a a1 08 75 45 a6 44 51 77 82 af 1a 02 6a 90 c6 ed a9 18 2b 56 25 91 50 6b 30 18 e0 2a b4 5a a8 41 44 ad cd ec 78 72 32 50 a4 a7 91 51 6b 22 4e c3 93 50 9d 1e 85 90 5a 0b 62 52 9a 4d 31 45 d4 97 63 b3 20 e6 98 f2 18 75 8f 71 bc f4 37 b9 58 66 b0 e6 7c e2 88 2a 54 cd e0 68 a7 e7 b5 10 c6 c4 b3 69 b3 c0 69 bc e3 27 65 9c 77 28 a3 04 d0 86 eb 5c a4 78 d1 22 d5 3f 5f 65 e1 ac 70 9d 9f 05 2e 0d d3 c3 6a Data Ascii: %6#$ZJBZNM!Dw6[:HEt]hW!l Tz4jD8]BB:=D@v2 oW,^uEDQwj+V%Pk0ZADxr2PQk"NPZbRM1Ec uq7Xf\|Thii'ew(\x"?_ep.j
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 16 2d 83 76 a5 5c 3f b7 07 16 4b ef ee d5 6a f9 11 d2 35 fb e9 6a 35 8a f1 01 20 7a b2 d8 27 d8 75 89 ce 62 ab b5 25 e8 99 5d 6e 17 f3 d9 6e 55 a6 67 dd b5 5d 9b df 83 4e a5 8d c4 30 a1 93 b2 49 b3 62 5d 16 f0 ae c8 d2 7d 5d c6 ea c1 65 bb 97 2e ab f4 c1 4d 61 c3 68 58 21 aa d4 f2 63 c4 6b 7c 0f a4 2e b5 55 d9 95 95 a4 49 55 ea e8 51 e7 b5 34 a3 c8 56 c2 e5 c6 49 b3 e3 77 59 5f 73 fe ec f8 bd ab eb 1a 4a f0 cc ad d5 81 d4 af 0a 40 f6 8c 28 77 d3 9a b5 41 2e d1 c7 c9 e9 20 07 89 4c 29 56 07 cc 86 59 fe 29 98 83 a6 d8 ee da aa ce 83 ab c8 c4 7f f8 20 da cd f5 2d 23 28 1f c1 c3 07 d1 4e 05 ac ef 5b c6 91 7e 86 87 0f a3 fc 12 df 38 8a 9e 9c 36 26 71 3d 8d f6 c2 e0 5b d7 33 72 75 a3 2a de 61 7d 91 11 2b 67 8a 3f ac 8d b5 f8 f6 ae 3d b6 6c 5f 1b 33 25 8c ea 0e Data Ascii: -v\?Kj5j5 z'ub%]nnUg]N0Ib]}]e.MahX!ck\|.UIUQ4VIwY_sJ@(wA. L)VY) -#(N[~86&q=[3ru*a}+g?=l_3%
2024-11-01 15:52:30 UTC	598	IN	Data Raw: 3f d5 d2 f8 db 6a 10 32 1b 76 27 cb 4a 23 c6 33 0d b5 db da 52 69 90 92 86 7a e9 ef ae 01 c1 07 fc 69 57 79 ad 46 7d a8 8b 4c 0a 55 0e 15 f8 b3 2a 60 b5 c9 55 9a 11 6b d6 9e ca dc ea 15 7d d2 dd 04 ae 11 e3 01 e2 d4 52 be c1 63 a3 8b dd 07 88 ac ed 32 5a b4 d9 60 39 1b f4 75 17 8f ee ba b4 4b 72 d3 96 a4 22 df aa 12 6a 88 52 15 57 33 20 99 52 55 4d 85 e0 75 99 2d 65 eb a0 aa 17 83 6d c0 f7 28 ae df 00 68 b7 5e fa 70 00 0a 27 96 62 65 fa 52 99 3d 69 ab 69 05 15 5b da 46 05 c2 e3 91 40 f0 ef 80 72 0f 06 ee ee ad d6 54 55 16 cc fc 55 f1 0e 24 68 39 c9 9e 31 57 1a 37 ba 6c 27 49 a8 ca 3b d6 71 b7 2d 53 9f d3 1d 80 ee 41 c8 bd 33 a9 e2 04 37 94 8a ba 6d fe 3b 40 54 28 46 f7 07 e8 8a c8 a8 2f 72 07 e2 2b 92 d9 b4 97 a5 7b 9b 57 06 df 21 aa 6a 70 ee c0 ed 03 37 Data Ascii: ?j2v'J#3RiziWyF}LU*`Uk}Rc2Z`9uKr"jRW3 RUMu-em(h^p'beR=ii[F@rTUU$h91W7l'I;q-SA37m;@T(F/r+{W!jp7
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49842	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	510	OUT	GET /gui/11405.39ee0be00408314d19fe.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4519b4f4c240c53f696d425c4595ed26 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:21 GMT Expires: Fri, 31 Oct 2025 12:18:21 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99249 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 63 36 64 0d 0a 00 00 02 ff ec 5a 6b 73 db 36 16 fd be bf 82 e1 76 34 e4 2c 49 4b b6 e5 87 14 da cd ba d9 d6 d3 24 ed e4 b1 9d 59 8f c7 81 48 88 42 4d 01 5c 10 94 ab 95 f5 df f7 00 24 45 ea 61 27 db 7a 93 2f fd 24 8a c4 e3 e2 de 8b 7b cf 3d 80 5d e4 d4 ca 95 64 91 b2 87 4e 4e d3 71 70 47 47 19 89 6e 2f 26 05 bf 9d a9 9b 82 dd 4c 09 e3 e1 23 df ee ef af ae dd 20 2b f2 89 73 75 d5 eb 1d 76 fb de fe e9 7e f7 da 5b 1c 1e f7 0e 0f 06 0e f5 94 27 dc f0 6c 21 82 d8 51 de e2 c5 c0 c1 3f be 74 87 33 22 2d 19 0a a7 d7 3f d8 3f 70 87 Data Ascii: 0000000100000001000000010000000100000001000000010c6dZks6v4,IK$YHBM\$Ea'z/${=]dNNqpGGn/&L# +suv~['l!Q?t3"-??p
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 13 d3 d2 15 76 2c bf 6d 4f 7a 7f ff 0c 3a 64 ff a1 6e a9 08 db b7 2b 9b a8 f0 85 94 64 1e 8c a5 98 3a c6 ad 76 8c 15 60 2b 68 2f 86 54 41 9e b2 88 42 91 07 ae 27 7e 5f 5f 64 a0 2d 73 64 30 47 06 73 b4 ad 31 69 ac b1 bf 53 cf 13 bf d7 d5 b6 31 ba 6d 29 58 eb 37 98 92 cc 71 10 31 cd 9a d6 d4 3b c7 ce 83 df 88 2a e2 9c b7 bc 62 06 31 66 5a 8c 3c 23 bc f6 8a 11 89 13 6a c1 51 e1 4b b1 9f 61 03 5b 24 65 09 87 c5 d3 b1 1f 41 37 54 5a a3 04 36 87 17 e0 59 31 ed 04 2b c7 b0 ad 6f a7 02 00 40 cc a8 0c 6d 2d 26 44 fe 5b 25 ae 9e e7 0c f2 ae 24 45 86 a9 1b 23 56 8a 96 9c ee a0 dc 9f 1b 8e a1 57 63 fc 42 69 bf 78 46 af ba d7 95 91 2b 0b 0b 04 d1 ee f5 b6 ca 27 58 eb 44 af 95 d5 0b 2d 15 be 4b 5e 2d 6d 87 8f f2 6c f8 7c 8f 19 79 11 14 8c 66 db f2 2a ef 8a 5e 43 62 ed Data Ascii: v,mOz:dn+d:v`+h/TAB'~__d-sd0Gs1iS1m)X7q1;b1fZ<#jQKa[$eA7TZ6Y1+o@m-&D[%$E#VWcBixF+'XD-K^-ml\|yf^Cb
2024-11-01 15:52:30 UTC	800	IN	Data Raw: 40 e4 25 de d8 9b 36 30 70 f4 27 0c 7c 22 18 78 b9 7d 4c c4 9f 06 06 be a5 c9 1a 04 dc cd 3c c8 b2 d5 5a e5 5c 87 ec 8a 75 90 06 ec 95 c3 7d 8a 6a e0 6b 87 20 d3 af 0f de 4c 08 2b a1 d8 4a 21 35 d8 5a bd f8 04 c3 50 b5 5b d3 d1 67 b3 0b 55 e7 07 99 85 f5 ef 6d 56 a1 d6 65 09 63 a6 4f 06 9c 76 9e 60 94 62 6c 33 0a b5 10 65 96 85 10 5f 95 51 a8 0e 3b 3e 71 7e b1 5a 8b 3e 05 7d 56 a1 0d 53 d8 98 5c 26 e7 25 70 79 16 9a 77 d2 ec 00 77 fd 68 03 a0 19 50 08 d1 5c ce 6f 58 2e f6 0d 07 2d 3c d9 bc be bf a7 41 d9 b5 82 ba 56 1a 30 8d de 2e ca 6e ef 26 60 ec de a0 16 72 94 7b 2e f4 31 41 ad ca 92 9c 81 2a 67 ca 2f 98 3f 4e 49 62 05 98 a4 c6 9b cf f7 9a 0f 1a 5c 28 a4 5e dc e5 d0 d7 05 34 61 2a 03 25 5e 09 40 b9 0b 92 53 07 b0 09 30 aa 35 3a 16 e7 cc c3 29 72 7e 77 Data Ascii: @%60p'\|"x}L<Z\u}jk L+J!5ZP[gUmVecOv`bl3e_Q;>q~Z>}VS\&%pywwhP\oX.-<AV0.n&`r{.1Ag/?NIb\(^4a%^@S05:)r~w
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49844	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	689	OUT	GET /gui/19299.9ce6ff847745ede896a5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 00e4e5043288e376a09182d59ac16420 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:34:09 GMT Expires: Fri, 31 Oct 2025 12:34:09 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 98301 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec bd 09 63 db 48 92 26 fa 57 60 ae 9f 97 dc 02 61 dd 96 28 d3 2a 59 b6 bb d4 e5 6b 2c b9 77 66 d4 5a 09 22 21 11 25 12 60 01 a0 64 b5 cc ff be 5f 44 64 26 12 07 0f bb 55 b5 d3 f3 bc db e3 12 81 44 1e 91 91 91 71 47 63 92 06 4e 9a 25 61 2f 6b ec 36 d3 60 78 e9 dd 06 17 63 bf 77 7d 30 98 44 d7 37 d9 d9 24 3c 1b f9 61 d4 9d f3 ee eb d7 93 d3 96 37 9e a4 83 e6 c9 c9 ea ce da ce 8e bb bd ba b5 bd e2 6e ae 3f db 58 75 37 77 b6 36 76 dc b5 ed 95 0d 77 75 6d 6d 7b dd 5d dd da c1 83 9d ed b5 d5 4d 77 7b 63 73 6b c7 5d dd 5e 5d df 72 b7 d6 b7 56 b6 4e dd 7b fe d5 69 66 6e e0 86 ad ee 8b fb b0 b9 b3 bd b3 da da bd f1 13 27 e9 86 cd 8d ed 67 2b 1b 2d 37 c6 9f ab 5b 5b 1b 9b 2d 37 c5 Data Ascii: 000000010fffcH&W`a(*Yk,wfZ"!%`d_Dd&UDqGcN%a/k6`xcw}0D7$<a7n?Xu7w6vwumm{]Mw{csk]^]rVN{ifn'g+-7[[-7
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: f4 cf 40 37 ee c5 c3 f6 ea 1a 35 b0 86 18 60 ca bd 6b e7 ca 1f b7 d7 f1 8a f7 ed 68 32 1a f9 c9 9d f3 fc 29 1a a2 f9 d3 6c a0 de f0 6b ab cb 0c c7 aa dd c3 51 0a 92 c6 8b 57 41 86 93 41 07 d3 fa 62 56 63 69 82 7f 69 8e 18 40 cd f8 22 ee df 15 c6 7a 9a c9 23 b4 a1 ad a0 c6 3c 29 bd 81 82 ad f4 ca 46 99 4b 40 f3 d2 42 19 69 d5 ee 0d 82 de f5 45 fc c5 f1 fc e1 50 e3 7e 57 e3 4e 08 dc c6 42 46 61 84 4d 34 4f d1 f2 73 24 df 07 7d f3 34 8e e4 73 1c 1c eb d9 61 74 03 c2 2d 6f e8 74 2b 2c d4 f8 27 bd 98 59 18 24 94 e7 f8 c0 0b 53 74 28 df 07 7d 9b de c8 cb 43 7b 86 d5 d7 f8 36 9f 6a f9 b5 0c 82 26 07 0a 08 07 c3 b0 77 1d f4 bd 0b ac 5b 48 42 f9 93 b0 b8 1c ab 25 2e 23 2f 8a 41 5d a2 2b f5 d1 20 be 3d 8a 27 49 0f 84 4b 93 cc 96 bd 23 57 d8 91 2b ec 08 f0 e1 85 34 Data Ascii: @75`kh2)lkQWAAbVcii@"z#<)FK@BiEP~WNBFaM4Os$}4sat-ot+,'Y$St(}C{6j&w[HB%.#/A]+ ='IK#W+4
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e5 04 1a a8 28 b8 75 f6 93 c4 bf 03 da 9f 0a 9f de 84 d6 d5 e2 98 3f e3 b3 cf 42 c6 14 c7 0c f1 9e f8 c5 6e 63 cb 70 41 e3 bb f6 46 89 69 1e 0f fd 5e 30 88 87 50 e3 b4 af 86 f1 ad e1 41 95 ca c1 7a ef 68 85 41 ce 88 6a 7d 80 c5 5a b2 b0 60 df b7 ad 7b a5 f6 53 f2 81 46 f8 cc 4b e3 11 c8 24 04 0e 39 af 1a 16 f6 c9 ab b9 17 ec 73 27 57 00 a4 18 5c 7e 01 fa 23 81 33 9d 71 32 45 db 8a 97 2b 50 07 2a 35 8c 16 51 f5 1c 2d 80 be 05 40 df d2 29 50 68 23 9d 6b 9c 39 c6 f1 d2 cc 8a 42 f4 03 b9 c2 f6 8d e4 53 c1 7c e9 82 d8 8a 86 3f 1c 92 fa b2 66 79 53 82 9d 25 7d ea a9 39 16 bc 1e 41 c2 aa f9 b4 35 9d 71 be a1 3e 25 34 05 3f ae e6 ea d2 9d 4b 24 02 8c 41 96 d3 34 a1 2f 6a 1f 1e 35 1f e1 8a 7d 84 bb f7 51 d2 9a 4e dd 0b 8f 19 ec 94 38 89 c4 9b 44 a9 7f 19 1c 1c 1d Data Ascii: (u?BncpAFi^0PAzhAj}Z`{SFK$9s'W\~#3q2E+P*5Q-@)Ph#k9BS\|?fyS%}9A5q>%4?K$A4/j5}QN8D
2024-11-01 15:52:30 UTC	241	IN	Data Raw: e3 51 94 e9 8d 7c cc 1f ee ca d6 dd 4f bd 2c 3e e2 a6 1a 88 9e 90 ca 6d b7 0d 47 30 19 ae 21 33 44 67 5d 08 92 2c b5 6a 0f 1b ac 45 69 7e f5 13 8f d8 21 08 c7 ef 60 a5 a5 0f be 7e 6d 1c 05 19 ff b9 27 c8 75 99 c4 23 4c b3 d3 d8 d7 4e 54 aa e1 d3 ff d3 dc eb 7c 0e bf 1e b6 a2 0c 7f 6d 7f 5d dd fa 0a ef 32 fc 79 30 04 7d 0f fa 2d e9 e1 f1 53 0f 36 c9 0c fb ba 27 ab e9 88 04 5a 05 0a 3c 8e 18 72 a4 7a 21 69 ff 75 92 c0 2b a8 01 93 3e dc 2b fa 0e 08 07 b9 78 38 59 ec f4 d1 21 39 0d 4d a0 b9 8f 70 aa 19 25 21 99 3a b8 2b 33 3f ea 05 de df a3 c3 c8 89 13 e8 58 a8 fd 05 de 10 16 a3 89 cb 1f f8 74 60 9c 98 1d b9 52 67 04 01 c9 19 f8 37 81 e3 3b 15 ac 6f b6 9c 51 90 0d e2 be 07 16 a8 d9 9a ea 43 e5 c8 6a ee 95 aa 18 0d 0a Data Ascii: Q\|O,>mG0!3Dg],jEi~!`~m'u#LNT\|m]2y0}-S6'Z<rz!iu+>+x8Y!9Mp%!:+3?Xt`Rg7;oQCj
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 33 30 30 30 0d 0a 82 7b f0 42 fb ce 10 42 92 e8 af 14 20 bb da a7 2b ec e2 b6 ea ca 69 05 56 86 cf 83 dd f0 a7 9f 5a c9 49 78 0a b7 ae f0 54 f3 4f 09 b3 53 5f 7e 08 39 0f 24 e4 5c 77 9b bd 79 42 8e dc ba 36 df a6 ed ec 8a bb 1a 97 05 16 31 cb 81 2c 10 f7 08 99 66 10 8e 0b dc 0c 58 37 cd 04 43 c4 f1 c6 60 b7 22 22 c9 46 81 5d 6a 40 ba 99 c2 6b cd ac 64 5e d8 af b2 3a 13 f0 ba 93 ee 15 04 8d aa 2a 96 f8 f3 36 0e c5 80 0c 49 6d 90 8b ab 2b f2 0d 2a 34 bd c9 7d 8e 56 81 de 6d 7f 82 53 c2 3a 5c 9c ab 08 64 92 bd 98 aa 7d 93 93 12 fb 2f f9 10 63 c8 0e 0c 87 03 38 3e 18 75 67 b1 8b 82 0c 44 2b a4 83 3a 6a 93 36 aa db 10 08 2a c1 46 4e e2 2c c3 bf 31 fd 40 77 0d c9 aa 76 64 a5 30 bf 4c db 9b 4e 11 02 90 ab c8 b5 b3 e1 fc 5c 70 26 e0 f9 14 05 aa 83 78 7c Data Ascii: 0003000{BB +iVZIxTOS_~9$\wyB61,fX7C`""F]j@kd^:6Im+4}VmS:\d}/c8>ugD+:j6*FN,1@wvd0LN\p&x\|
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e4 cf c2 27 bc e1 28 f2 13 2c 23 1e e7 3f f8 9d fa e8 32 80 94 82 08 ca df 27 d0 b8 7d 4a 53 7a 27 b4 f4 76 81 0e 90 87 5f 1c 89 aa 3c de 60 e0 98 c2 ef d2 8f c2 7f 04 a4 ab c6 ad 66 88 ae 39 87 f0 26 6a 36 ce 1a 6e 03 d6 73 0f 97 df a8 a9 95 f4 0e bc c5 07 7e b2 9f 35 57 f0 26 fe 8c 68 84 e4 c0 4f 11 e7 f8 13 9c ea 58 02 59 e5 ab c5 21 4f 54 e5 33 67 ac 40 7c 1d a9 89 80 a8 d3 15 04 4f 41 76 e7 9e db 74 f5 54 d1 6e ad e9 dc 15 98 43 1b 87 e0 97 84 14 fb dc 75 3e 26 7b ac 89 84 45 7e e3 ca 5b c3 7a 3f f4 2f 82 21 d4 dd a2 d7 44 1b 8e 20 0d a3 de 70 02 25 7d b3 d1 69 b4 f6 ee 65 aa 67 61 bf 73 52 ee 3f ec 9f c2 b5 96 7d af aa 2f b9 f3 53 ed 4f 6b 5d 2d a2 fe 84 b1 d3 d2 50 da 2a 4d cd ac 58 5a 34 e2 57 88 6d 57 f2 57 08 57 0b 38 70 c1 a0 63 3d 85 43 3d 3c Data Ascii: '(,#?2'}JSz'v_<`f9&j6ns~5W&hOXY!OT3g@\|OAvtTnCu>&{E~[z?/!D p%}iegasR?}/SOk]-P*MXZ4WmWWW8pc=C=<
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: b0 bc 54 6b 20 69 18 70 4d 3b c1 ab 1c cf e2 55 3e 11 af 72 dc da fd ad 8e 57 79 b3 88 57 59 fc 95 5a 4e 99 53 59 ee 43 42 8c 9c 53 79 d3 d5 5f cd e2 54 e4 0c 5a 7c ca 1b e1 53 3e 12 9f f2 6c 05 c1 0b ec 6b f0 ab fb de 7d e9 be 73 7f c9 e5 e1 7f fc e0 52 1e 88 4b f9 bd db fc 75 1e 97 62 64 4b be fa 91 a6 53 85 18 91 47 a0 92 53 85 f1 3c 28 3b 40 17 24 e1 dc 29 10 1f d5 65 a9 90 d0 4a 15 9f 21 b2 5f c5 d1 4b 69 fe 67 8c a7 7b 45 da 5f c3 03 9f fd 16 5f 18 2b da 82 ef 60 b8 93 7c 10 b1 89 2d 50 2a e9 59 1f aa bb e4 8c 7c a1 ec d5 5a 26 0d 3a 4f 67 11 11 4c a4 c2 85 c7 5b 0c 23 37 1f f8 59 7d 8a e4 9e 2a 39 dc 09 6d 5d df 7b b0 0d ef bb bf 98 7c 1c 66 99 ea 08 d5 66 e6 d0 74 46 79 9c 39 b9 5c 28 87 3c f7 44 93 29 c1 e5 54 09 89 aa 57 8e 3d 24 25 81 bc 3f 26 Data Ascii: Tk ipM;U>rWyWYZNSYCBSy_TZ\|S>lk}sRKubdKSGS<(;@$)eJ!_Kig{E__+`\|-PY\|Z&:OgL[#7Y}9m]{\|fftFy9\(<D)TW=$%?&
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 0b de 23 7b a9 96 4b 9e 64 1a 91 53 c1 ed 6a 0f 08 17 97 51 29 8e 4a 83 62 e7 08 af 70 6f ed 51 9e 92 ba 79 f1 d7 2a c8 cc 4c 8c d8 1b 82 2f 5d 78 16 7b 50 08 e2 e3 24 28 26 6d 2d 11 11 f5 05 41 ca fe ca 62 5b ec 05 95 a7 ca 31 8d a6 3f 4a 32 99 4e 24 63 94 35 83 44 87 67 25 2a 83 c8 3c 88 68 cf 03 3a e5 61 84 74 59 fe f0 88 aa ab d8 93 b3 74 0f 2a af cb 74 4a 69 e5 16 54 6e 72 a9 60 13 d5 3d 60 d6 ef e3 0f 61 eb 01 84 2d 62 ad 33 e7 d7 ee 3d 4a 95 75 1a 47 93 8b 51 88 8c 29 7d 67 42 25 05 d8 67 0a 2f a0 53 46 22 94 4b 64 a0 75 2e ee 90 ee 84 fc be f1 ce c7 8e c1 af 0e 4c 9a 83 64 63 a2 7b 6e b8 60 dc eb 3b da ff 78 d8 70 03 70 e5 43 fb fd 4d e8 3b fc b0 41 01 c3 a3 09 50 e6 ce 7e 3f 77 22 66 58 9e 52 63 ea be ef de cb 08 43 68 82 6e 82 21 2a 72 11 fb c7 Data Ascii: #{KdSjQ)JbpoQyL/]x{P$(&m-Ab[1?J2N$c5Dg%<h:atYttJiTnr`=`a-b3=JuGQ)}gB%g/SF"Kdu.Ldc{n`;xppCM;AP~?w"fXRcChn!r
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: b2 11 37 64 11 46 10 c8 47 d6 8b a7 a4 fb e6 32 c7 ba 6c 44 6e 11 7e 69 eb c5 73 10 a6 46 a0 c9 35 db 2f bb ba bb b2 66 1b 51 a0 08 6d a5 42 bf 50 ef 52 7a 73 2d 37 91 8a fb 25 a9 b8 37 37 d7 57 6b 54 dc f5 95 ac 77 d6 56 57 50 a8 9a 14 db 3b 6b 5b ab d0 81 97 8c bb 4a 89 cd e5 ab a5 a8 35 95 af 56 4a 6c 2e 5f 6d d4 d5 db db 5b 5b 50 4e b3 bf 8f 55 60 20 2f 3a 9d 2b 27 ae 7f 28 27 1e 40 39 41 3a a1 a3 92 f4 5d 28 04 8d 84 94 b0 0e 3a a4 ed 14 7f 06 9b d6 14 8a 9f 4c 80 c5 4a 2a 3c 40 72 c6 97 20 1f 8a c3 44 5a 16 62 54 c5 b8 60 09 6e ba 36 b2 d8 75 bf 14 d8 01 cb 0f 76 d5 b1 4a ef e8 d2 3c 16 b1 28 90 2e f9 4e 8b ae ea d2 2a 14 51 94 88 55 8c c6 12 af 12 04 ac 11 98 e7 d8 74 24 86 55 71 e1 54 a6 14 3c ab 9e b0 98 71 d1 85 90 6a 96 58 e6 0b 29 b8 ea 43 25 Data Ascii: 7dFG2lDn~isF5/fQmBPRzs-7%77WkTwVWP;k[J5VJl._m[[PNU` /:+'('@9A:](:LJ<@r DZbT`n6uvJ<(.NQUt$UqT<qjX)C%
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 8d 11 7a 87 fa 66 3c a2 2d 55 88 42 af 9e da b3 cd 5e a9 03 bf 13 ef 7e 5e aa c2 cd c3 d1 3f 95 53 06 3c b4 98 eb 38 68 53 73 f2 b3 8f b5 d1 56 a9 88 ce 22 18 2d e5 91 e5 b6 aa 80 89 cd 45 c5 05 6c e2 1c 6a 60 f1 99 b6 c0 cb 55 03 94 08 8c 11 ab 04 c2 6d 1c 7e 34 2e 56 d2 9a dd 5f 20 27 56 ef 6d d1 ee 96 76 b2 44 c9 b5 87 48 18 b5 25 99 9d b3 f2 07 a4 ec cf 37 41 23 f6 37 80 55 1f 1b 38 3b 98 73 b1 f0 50 e5 4a 3f aa 01 8f 00 8f 42 e9 2b eb cc 69 2f 22 4b 30 13 ad aa 50 56 2b 5b a5 96 52 be 33 27 3d ee 47 42 c2 e5 8b 01 10 1d c1 c4 ad 1a 00 30 9c 2d cc 70 7d b7 30 a0 e4 d2 96 63 68 10 e5 c3 ef 5e 76 f5 c7 15 41 62 5c ce 6c 7d 09 09 82 cb 45 7e bf 04 61 02 3d 4a 45 b9 d7 56 37 36 54 3e 9e be 6b e2 1e dd 9b 5c 40 18 fd 10 10 1e 48 40 b8 eb 36 fb f3 4c 5e ec Data Ascii: zf<-UB^~^?S<8hSsV"-Elj`Um~4.V_ 'VmvDH%7A#7U8;sPJ?B+i/"K0PV+[R3'=GB0-p}0ch^vAb\l}E~a=JEV76T>k\@H@6L^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49843	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	510	OUT	GET /gui/94940.0b7c2d9e5c367a9c5362.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 55bebbdb05326c1dda5679d351cd161c Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 11:33:20 GMT Expires: Fri, 31 Oct 2025 11:33:20 GMT Cache-Control: public, max-age=31536000 ETag: "bqvwsg" Content-Type: text/javascript Age: 101950 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 5c e9 73 db 46 96 ff be 7f 05 8c 24 32 90 00 10 0f 91 e2 61 ca f1 d8 9a 1a 6d 9c 19 97 25 cf 56 ad e3 92 41 a0 49 c2 02 01 0c 00 ea 30 cd ff 7d 7f af 0f b0 01 92 96 93 4d 4d ed 87 35 63 8b ea d7 e7 eb 77 bf d7 31 57 05 33 8a 32 8f 82 d2 1c 5b 05 8b 67 de 1d 9b 66 7e 70 f3 72 b1 4a 6e 6e cb eb 55 74 bd f4 a3 64 f2 15 d8 97 2f ef 3f d8 5e b6 2a 16 d6 fb f7 c3 93 e1 49 eb 83 b3 3e 39 69 77 4f 46 56 e9 30 27 b7 27 67 eb 5b 3f 37 d2 49 6e 9d 0c 4e 5b 27 b6 13 e1 6b bb df 3f e9 d9 4e 81 af 83 5e a7 d5 b2 1d 1f 5f 3b 83 4e 77 60 3b 09 f5 ed 75 4e da b6 13 e3 eb b0 d7 1f a0 75 4a ad 27 ad 5e c7 76 42 6a 1d b4 Data Ascii: 000000010000000100000010ffd\sF$2am%VAI0}MM5cw1W32[gf~prJnnUtd/?^*I>9iwOFV0''g[?7InN['k?N^_;Nw`;uNuJ'^vBj
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 1e 72 1d 68 36 ef 97 5f bc 62 91 de 5d 09 b6 c5 28 a2 46 db b6 37 1b 27 f0 8a f2 21 66 c5 84 1f 6f 95 14 fe 8c bd bc bc b4 ad d0 7b 61 3b 81 3d 86 8e 05 08 c8 97 3a c9 b6 d6 a4 77 46 42 94 6f ec 0f ce 9c 60 65 4a ad 8e a9 b1 b6 e9 08 9e b6 9d f9 44 cd 12 ac 8a 32 5d 4a 51 6e 5b 7a 77 88 9a e5 d2 cf 1f dc d2 9f 17 26 cd 6b 6f 1c ae dd 35 ad 4e 2a 78 d8 16 2c 70 58 bb f7 3b 83 2e 34 36 69 77 a9 e8 93 89 45 8a 1c 26 82 ed d0 97 fe b0 67 0b 45 df ee 75 3b 5d a1 e8 87 fd e1 e0 54 28 7a 69 09 04 5b 4b 20 c3 d7 76 b7 d3 c6 bc 2b 7c 85 4d 00 b3 82 2b ac 85 33 77 66 ce ad b3 74 1e 9c 3b e7 de b9 71 ae 9d ef 9d 5f b6 b6 c1 e5 ff db 06 7f 92 6d 70 31 b1 16 5f b3 0d b8 ee cc 57 24 b4 60 20 14 2b 58 51 96 e7 79 95 01 06 8e 21 2d b2 ca e3 cb d5 6c 16 dd 4f 4c 28 33 6a Data Ascii: rh6_b](F7'!fo{a;=:wFBo`eJD2]JQn[zw&ko5N*x,pX;.46iwE&gEu;]T(zi[K v+\|M+3wft;q_mp1_W$` +XQy!-lOL(3j
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 8b d7 2d b6 de c5 62 b2 f0 12 56 de a5 f9 cd 75 9c 0a 85 a5 db 30 8d ae 4b 08 ec 06 78 81 f3 c1 4b d2 49 ea 0e 24 75 c7 49 4a 33 95 35 99 d3 16 e1 cd ca 9c e3 46 ec d7 4c 9d 30 a5 14 85 54 75 df 6c ec 3c 62 1a 7f 4d f0 d5 d5 e4 be 38 12 b7 9a 5f f1 7d fd 59 86 b3 90 67 a4 88 f7 c9 2f 53 22 81 5b 24 e4 ed 5e 1e ba 69 cd 9d bd 54 c4 75 b9 73 cb 1e d9 17 30 e0 84 41 4b 13 5e 7c c3 84 17 6a c2 8b 83 13 6e a5 53 d3 86 23 8d 4c 0b bd fd 86 85 de aa 85 de 1e 5e 88 9b 27 9c d5 4b 95 f8 10 2c bd cf fc 53 8b 6f 1d 6e af ce 20 1a da 4a b5 38 22 77 0d e6 a8 d0 06 76 6c ca 0f f0 a7 b2 1b 75 31 ac 0c 91 ab 43 c7 d6 ac c7 ab 2d 6b 5e 4d ae 84 c5 81 04 ca 2d 0f 42 64 d7 7e 18 c2 cd af 31 73 63 44 93 43 01 be da e5 d0 7b 70 e8 fd ef e5 50 19 6d fd 1d 2e 4a 54 ed f8 ff 1e Data Ascii: -bVu0KxKI$uIJ35FL0Tul<bM8_}Yg/S"[$^iTus0AK^\|jnS#L^'K,Son J8"wvlu1C-k^M-Bd~1scDC{pPm.JT
2024-11-01 15:52:30 UTC	265	IN	Data Raw: 7c 9c 3f 53 84 33 ce 7f 9a b4 55 35 5d 4a 89 f6 85 9f bf 28 c1 3d e3 e2 2e 22 d5 83 0a cd c0 2f 98 f9 cc 1c b1 9f 26 e6 51 5c 8e cd f1 14 35 65 37 63 de 7e 26 db e7 8d f6 23 d9 ee 2f b3 fa 80 63 09 f8 ee be f3 d7 1a e4 a9 f9 54 2c f1 af 55 da 98 ec e9 76 cc 69 35 06 f5 91 fe 2a 2e 69 4c ba 51 95 48 6c 03 b4 48 9e cf b9 7c 78 cb e6 e7 f7 99 65 fe f6 db 8f 53 36 8f 92 eb 05 22 ce 90 a4 8b 12 2d a6 63 ce 4d 94 4e 21 29 ad 64 5e fe 88 ac ab 09 1f 6d 72 84 2f 1e 9b 3a d5 a4 62 25 97 88 22 ab 69 12 b9 21 49 20 fa be 22 0c 9e e6 c7 10 a8 ce fb 35 39 1d 23 b6 f9 00 d2 e7 d5 b6 9a d1 a3 2c 9b c1 b0 77 82 3a 1d 94 f4 7a 30 04 44 41 6f 77 80 3a 1e 5e f2 83 b6 c2 b6 50 a9 0a aa 82 ea 10 65 c2 a8 f0 0c 9d a7 c7 3f 3e f9 2d 31 7e 34 60 32 96 28 42 f6 33 c3 b8 ed 79 5d Data Ascii: \|?S3U5]J(=."/&Q\5e7c~&#/cT,Uvi5*.iLQHlH\|xeS6"-cMN!)d^mr/:b%"i!I "59#,w:z0DAow:^Pe?>-1~4`2(B3y]
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 98 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a 04 0d 0a 30 30 30 30 30 30 30 31 0d 0a cb 0d 0a 30 30 30 30 30 30 30 31 0d 0a f2 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a e6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 39 63 34 0d 0a 86 c4 f9 a2 34 3a ad 76 db ed b4 3a 5d 94 c8 31 6d a6 17 ab 72 81 3a 44 de fb 75 14 30 54 3e 84 06 55 80 e5 c6 af 17 57 da 02 51 b9 58 4d f9 d4 e5 dd b4 38 ae 56 3b 9e c6 e9 f4 98 02 8b c7 af 2f Data Ascii: 0000000100000001000000010000000100000001*00000001(000000010000000100000001000000010000000100000001#00000001(000000010009c44:v:]1mr:Du0T>UWQXM8V;/
2024-11-01 15:52:30 UTC	1284	IN	Data Raw: 4a 03 a7 50 12 94 93 e0 a7 10 a4 a6 41 25 55 f1 85 34 da 27 92 e9 28 c4 50 c9 8e 8b 38 72 14 56 a4 ae 9b c6 1a 58 a7 47 48 d6 9d 5e 51 52 9f 46 b7 91 f9 34 aa 43 63 22 d1 6f f3 a3 f3 e3 68 34 65 e8 c9 e8 1b d4 25 cb d7 d3 14 58 8c 3e 03 13 23 39 0a 2d 9b 9f 97 78 f2 e5 5b 19 5e ee a0 1c 1e f5 88 21 18 23 74 97 a8 cd 14 52 02 49 0b 02 51 20 d4 5e 0b b7 0f ef 3f d3 38 76 a7 6c e1 df 46 50 28 c5 12 ce e0 62 b3 f1 d7 02 4b 1c 49 15 61 d6 25 13 f4 64 1d 22 d1 0e e9 09 55 c9 6d 56 4d 4a 91 90 da f8 23 2e 9c d6 5c 59 d6 67 d3 e8 7f 9f 98 b2 31 16 e1 35 eb 3d d5 cd 7c b0 c5 77 1e 53 fd 00 af fc 20 48 ae 27 0e a3 c4 ef de ad 15 b7 f3 35 0a 9e c8 0a 89 91 8c 44 a4 73 b4 8c 42 d4 e2 6e 46 23 e0 f0 33 34 3e 91 5f 94 e0 c1 dd 3a 43 61 02 61 bf 35 96 f8 e7 05 da d8 05 Data Ascii: JPA%U4'(P8rVXGH^QRF4Cc"oh4e%X>#9-x[^!#tRIQ ^?8vlFP(bKIa%d"UmVMJ#.\Yg15=\|wS H'5DsBnF#34>_:Caa5
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49841	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	510	OUT	GET /gui/45428.d50e11e1e27c0917ea14.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9a11dcd45893c283d55efe8ef32006dc Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:09:26 GMT Expires: Sat, 25 Oct 2025 16:09:26 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603784 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec 5c f9 73 db 46 96 fe 7d fe 0a 18 4e 14 22 01 20 f0 26 21 d3 8e 22 cb b3 aa 91 ed ac ad 64 6b 56 ab 92 01 a2 49 22 06 01 2e 00 ea 08 cd ff 7d bf d7 07 d0 20 a5 d8 93 f5 ee d6 56 8d 69 49 60 9f af 8f 77 7d fd 1a e6 ba 60 46 51 e6 f1 b4 34 8f 5a 05 4b 66 ee 2d 0b 57 c1 f4 e3 c9 62 9d 7e bc 29 af d7 f1 f5 32 88 d3 c9 1f e4 7d fa 74 79 65 b9 ab 75 b1 68 5d 5e f6 fa bd ce e8 ca de f4 bd 4e df f3 5b a5 cd ec cc 9a 3c df 64 6e d4 62 f6 e6 5f fd 16 be c5 5b eb 28 61 a5 91 1f 4d b3 b4 28 8d 78 d2 f2 ec ac d5 1b 0d bd 9e e5 16 37 73 ab 95 7f fa d4 ca 27 ad 72 f2 bc b4 3e fc c5 30 9e 21 d5 b8 5b 26 69 31 31 17 65 b9 f2 0f 0f 6f 6f 6f dd db ae 9b e5 f3 c3 8e e7 79 87 28 61 1a b3 38 49 26 e6 74 Data Ascii: 00010fff\sF}N" &!"dkVI".} ViI`w}`FQ4ZKf-Wb~)2}tyeuh]^N[<dnb_[(aM(x7s'r>0![&i11eoooy(a8I&t
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: e9 2e 82 a2 65 12 01 26 f6 8d fc 4a bd 6a 5f 65 3f 58 0e 6c be 8a e0 83 03 fe 48 65 e5 a3 2c 27 bf f1 39 50 15 f8 97 af 37 62 c9 be 2d 39 7f bc 75 90 2f b6 08 f8 9a 7d fa c4 dc 9d 19 c1 84 40 bb 46 2c c7 4a 4b e6 a8 17 63 bb b5 e4 fe 9d 6c aa 0d ec d3 e3 4f e7 bf 9c 5e b7 7d f3 69 77 dc 3b 7d f5 ca b4 91 f6 f7 d3 f3 f3 b7 ff c6 53 5f 1d bf ec f4 5e ea a9 1d 94 3d 39 39 ee 79 1e 4f fd e9 fc f8 e4 6f a2 81 6e 97 a7 fc f5 dd e9 df 79 c2 b0 47 9f 3a 8d 6a be 1c d1 a7 4e eb 22 ed d5 31 7d 54 da e9 1b 5e b9 73 f2 d3 ab 5e 87 27 be 7d 77 fc e6 af 82 c8 57 a0 47 76 fc ee f4 a5 a0 f0 95 e7 b5 5f 99 5b 22 5c 30 a6 18 d3 cf c7 e7 a7 17 17 a7 fe a5 f9 b4 dd 6e 0f 7b 53 b0 c6 d3 f6 b0 e3 0d 02 fe 14 75 86 23 0c c1 7c da 09 bb 61 38 a3 a7 6e d0 63 33 fe 34 f0 86 6d f1 Data Ascii: .e&Jj_e?XlHe,'9P7b-9u/}@F,JKclO^}iw;}S_^=99yOonyG:jN"1}T^s^'}wWGv_["\0n{Su#\|a8nc34m
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 14 20 51 7e fa f4 a4 94 ee b6 21 cc 8f 0c b0 81 d8 43 6e 99 fd 9c 13 44 08 29 ca 3d 73 61 b6 3d 99 4c 32 b5 03 33 77 4a ce 2f 76 c9 a7 4f 26 66 30 58 27 a5 c9 f7 af c2 3e aa ae 72 d5 4d 7e 54 2e f2 ec d6 20 6f f7 02 a6 e2 69 9e 43 05 9b 3f fe a8 75 67 2c 61 90 19 0a 92 30 56 8a 0c e3 26 48 d6 cc 85 4b 2e f2 5a 26 60 01 d8 99 80 51 26 ec 85 10 73 fe 9b f5 32 64 39 64 ba b5 05 65 aa 84 72 f7 cd 82 33 51 0d bc 30 c0 3b ec 07 d3 dc 82 2d ac 38 35 ca 07 77 84 58 30 4c 2c fa f7 b1 2e 15 4b f8 4f 3c 1b b6 c4 2c 9e af 39 8b d0 f7 db 3c 86 98 4c 18 9e b7 96 5f 62 2b 4e 32 bb dc d2 aa bc d3 d6 89 50 e3 7f a2 4f 7f 06 7d 12 20 d2 f9 64 03 d1 c6 7c 93 7e 17 a6 1d af ae 83 28 ca 01 7a fb 66 fd 4c 39 eb 3c f1 4d fc c2 63 94 11 d2 ef 9b e2 2f 12 78 65 d1 86 de 04 6b 34 Data Ascii: Q~!CnD)=sa=L23wJ/vO&f0X'>rM~T. oiC?ug,a0V&HK.Z&`Q&s2d9der3Q0;-85wX0L,.KO<,9<L_b+N2PO} d\|~(zfL9<Mc/xek4
2024-11-01 15:52:30 UTC	238	IN	Data Raw: c7 af 4f af 5f 9e be 3f b9 7e 7d fc f3 cf 67 6f fe 2a 51 24 ad 3a ef 0e 95 1b d2 42 99 0a a5 4b 3a 07 d0 b0 12 36 ec bf d5 2e 53 ed 32 5d 6f 02 da d8 95 3d f5 98 a4 90 d4 56 ff 1e ab 7f 8f d5 37 9e 09 04 5c c4 91 90 2b 63 24 31 c2 46 a6 b0 be 78 80 89 c4 f6 60 64 06 ab 82 f2 81 d0 d1 36 31 08 05 43 ec 0a 0b 70 70 56 81 7f 0b 20 a7 d3 8f c6 ad d3 f6 3c 63 1e ac 38 14 f9 2c 8a 6f 14 3a 88 00 14 1c 0b 3a 25 0e 24 29 7c 85 8e 7b 85 6d e9 c0 4c 02 a3 c8 8d 88 1a 0f e0 8d 12 ee 94 9d cc 0a a7 5f e1 8b 62 14 65 96 25 65 bc 32 b0 89 e0 cc 66 e9 c4 cc 09 7d 32 8d 20 8d 21 44 91 e2 44 2c 09 ee 27 a6 27 7a 02 da d8 a8 a9 30 c8 60 07 db 6c e2 9e fb 74 18 cb c2 09 d6 25 b0 4c 08 67 0e bc 72 24 93 f3 93 c1 c7 2f 0d 0a Data Ascii: O_?~}go*Q$:BK:6.S2]o=V7\+c$1Fx`d61CppV <c8,o::%$)\|{mL_be%e2f}2 !DD,''z0`lt%Lgr$/
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 04 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 31 33 35 31 0d 0a 05 3d 00 88 1c 18 cd 04 e9 62 49 14 Data Ascii: 00000001000000010000000160000000120000000100000001000000010000000100000001j00000001000000010000000100000001w00000001:0000000100000001B00000001000000010001351=bI
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 97 a2 a5 47 fb c4 39 02 ed 5e f4 b9 45 0c a1 8c ca f3 37 95 2b ee e3 f0 6b 95 ac e7 71 5a f8 38 54 82 c0 89 b0 81 01 2b c1 41 47 1e 40 34 e1 cd fb 1b 3a 7a a6 8d 85 72 1c 25 e0 11 24 d8 d9 7c 8b d3 81 46 73 87 fd c1 b6 92 ab 76 49 83 a5 43 22 9c 9f bd 17 92 cb 37 cc 1f e4 84 6b a6 d3 1d 45 36 57 87 46 74 80 8c 6e 4d b0 20 80 ff 69 f9 70 9d 7b 78 a3 af e8 9c f2 e1 ec 1b 9c a9 e1 9f 5d 60 54 28 03 e9 23 39 99 54 e8 3c 23 78 8a 8f ab f0 79 30 90 3b 43 ec 79 2b 80 f9 96 03 34 d7 e6 c7 8e f2 e0 f6 27 ce d4 be 10 14 38 e2 b3 11 85 ff f1 9c df 68 f0 3d cc 20 be a1 0b 00 fd 60 73 92 43 ff 7d 66 51 c6 01 dc 12 ba 8c 04 bd 0c 48 c3 df d0 52 fb ed 36 0d ec fe 4b 06 54 00 86 e0 07 4f 04 f5 fd 7f 19 1a ad 9b 65 23 1e 48 33 c1 be 81 3e fe a6 d6 c7 ba 38 90 92 5a d7 ff Data Ascii: G9^E7+kqZ8T+AG@4:zr%$\|FsvIC"7kE6WFtnM ip{x]`T(#9T<#xy0;Cy+4'8h= `sC}fQHR6KTOe#H3>8Z
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: af d7 1b ed 8c 64 b7 cc c8 c3 4e 69 8e 67 b7 c8 20 6a f7 da 72 54 09 09 da bd 8e f4 1d 42 bb fa 0f 0b a8 a5 0a e7 0e a2 52 10 8b 42 4b 39 8b a2 99 64 bb 7a 52 f4 12 cc a3 4f 73 42 1a f9 d3 d9 98 31 91 cf 17 b4 91 d9 9f 75 15 37 aa 25 d5 f3 c1 aa 1d 26 f9 59 2e 6a 23 3b 60 6d d5 b7 98 80 46 ee 74 86 8f e8 99 0f 5e cf d4 19 b0 1a 38 c7 92 ea c1 8f 23 dc da 56 43 ab 76 84 70 56 ea 52 d3 0e 7d 76 26 60 a7 a5 d0 8b 58 28 45 95 98 84 9d 02 e3 f1 34 98 c9 81 56 13 b1 53 66 d6 9f 0e c7 72 eb a9 c9 d8 29 c2 46 c1 30 90 dc 23 27 64 a7 84 2e a6 c4 a4 ec 14 d0 45 10 97 98 92 c7 fa 60 af 8e fc 25 06 cb 05 6c c5 9f 60 51 39 55 84 87 39 30 7e 0a b8 54 79 3c 03 08 f8 9e c7 3f 1b 00 1a 0b 03 e8 b9 69 1b ef b2 10 17 a5 d5 df 97 79 30 2b 6d e3 5f 58 72 c3 80 d8 05 b6 71 9c Data Ascii: dNig jrTBRBK9dzROsB1u7%&Y.j#;`mFt^8#VCvpVR}v&`X(E4VSfr)F0#'d.E`%l`Q9U90~Ty<?iy0+m_Xrq
2024-11-01 15:52:30 UTC	966	IN	Data Raw: fe a2 41 c8 bf 87 1a e3 3b a9 9e 6c 2e 0f 9c e2 96 ee f6 a8 b5 78 70 0c 74 9b da 59 af b0 f7 22 35 08 da 54 15 23 3e 40 b7 e4 13 df e7 75 c5 4b 49 b2 fc 1f ac 2d 2f f1 54 52 27 89 8b 92 c7 39 1f ed 70 af 0e e9 21 6e e6 23 e7 6a e7 8e 4c 1f 69 78 d5 a9 64 f0 e0 05 21 95 49 56 e7 2c 01 de 0d 07 a3 07 72 48 df 8f c7 98 f1 bd d6 b8 05 c4 59 63 3f 8b e7 c1 c1 c1 42 fd 88 4b 1e b3 9c 8e 27 f1 de 83 0c 50 5f 51 d0 0b 57 60 09 e2 05 93 ac d8 78 df 6e ea 70 2a 47 dd 69 71 ee 7c b2 ae b6 5b 84 c7 f2 db 2e 42 65 c8 2f 0e f4 21 8e d8 60 81 79 0a 62 51 39 08 5b 53 7c ab d1 a6 72 a5 b8 40 eb b0 00 6a d3 6e 37 5b 9a 13 95 b9 a5 f2 a5 94 36 c4 80 55 6a 2d 65 f0 e2 57 cd da 54 f9 d2 08 a9 74 a5 74 c4 a4 f9 a1 4a 91 21 dd 2c c2 eb ed 96 6a 68 1a bd 82 a6 81 76 ea 68 26 92 Data Ascii: A;l.xptY"5T#>@uKI-/TR'9p!n#jLixd!IV,rHYc?BK'P_QW`xnp*Giq\|[.Be/!`ybQ9[S\|r@jn7[6Uj-eWTttJ!,jhvh&
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49845	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	688	OUT	GET /gui/5978.4206cee10d7d4c2afd11.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d981cf2073944b0aded91ae35d72bc8c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:43:50 GMT Expires: Sat, 25 Oct 2025 15:43:50 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605320 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 97 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 31 0d 0a c6 0d 0a 30 66 66 30 0d 0a 91 ff 7f 3f 05 4c db 13 c2 0b 40 24 67 38 07 29 4a b6 65 39 d1 da 4a b4 3a 36 9b 55 f4 14 90 6c 0e 91 01 01 06 00 e7 30 cd ef be bf aa Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001y000000010000000100010ff0?L@$g8)Je9J:6Ul0
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 08 9e bf ef ac f1 15 18 f0 f3 59 98 24 51 72 d9 f9 e0 3e ed bc da 4c 63 1c 44 82 e6 44 b9 13 4b e0 88 d2 0e a1 c8 09 67 33 20 a7 f0 1c d2 a1 6a 0d 47 af e1 44 40 bd 08 e7 9d 51 e7 1d 9f ee d0 12 9d 1d a0 9d 8b ec 59 9a 2c a2 6c f5 ed a6 28 d2 a4 8a b8 65 b1 8a dd ee f5 cf 3f 77 af 27 af fe f4 78 ca 43 9c 79 58 84 7e 21 f2 62 d2 01 ad 69 ae 2f 01 ee 38 cc 0d 93 ce b4 48 1c fc ef a7 9b 22 06 f3 f8 80 73 15 66 77 ce fa d6 1f 76 1c 12 85 49 27 df 4c 81 f7 8e 13 cd cd 32 12 66 09 48 e7 89 a3 00 d3 d8 78 fc 48 ee ff e4 4f 90 63 09 7a 1b b4 77 80 f6 8e a0 9d 47 d7 1a 9e 6b 30 c8 ec ca b9 0c d7 fe 89 13 c6 d1 65 e2 83 e4 ab dc 9f 81 5e 22 c3 5e 5f 6c 7b 3b e7 31 b0 bc 72 be 96 90 4d 3a d4 66 8e 74 ff 12 8f a3 64 bd 29 d4 e9 16 a0 74 c7 59 46 f3 b9 48 f8 88 d4 f0 Data Ascii: Y$Qr>LcDDKg3 jGD@QY,l(e?w'xCyX~!bi/8H"sfwvI'L2fHxHOczwGk0e^"^_l{;1rM:ftd)tYFH
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: b8 4e 78 89 f4 52 d0 41 7e 24 d8 20 d7 b1 4e b3 a2 db 69 4e 67 fd 04 8e 05 1e c8 0e cd 83 b7 88 e4 92 79 2c 9e d3 4e 40 be 97 51 56 c1 75 bb 20 09 fc 8a 1f a0 a7 d8 97 90 58 83 e0 c5 c1 17 37 12 1d d2 d9 80 82 58 53 22 e6 39 94 5c d1 a5 f0 f7 19 14 59 ba 92 df d9 17 f6 65 00 82 98 b4 e3 6d e7 a2 08 a3 78 b4 25 35 35 e2 ee 8e 17 cd 47 62 47 fb 42 3f 51 f8 25 19 ed 81 84 a2 14 11 e6 41 79 16 93 3b 52 9a 0c e4 7f be 94 40 8e 91 9a 48 49 8b 7d 0a 90 05 c3 a4 d3 4c 48 7f 7c d6 ad d0 90 91 86 5c 43 a5 31 0f 7e 83 6c c8 6b 31 0b d7 40 4b a8 03 7b 1e 8b dc 08 32 1b b3 74 2e 5c 95 43 6a 52 60 dc e0 89 92 85 08 49 a0 0c fb cf e0 51 29 28 5a 72 aa a9 07 77 87 34 4e c5 0d c4 04 ca ad 64 63 89 2d 99 ab 78 49 0e b2 a2 15 3b fa 20 d1 75 24 6e 46 37 51 32 4f 6f bc e9 66 Data Ascii: NxRA~$ NiNgy,N@QVu X7XS"9\Yemx%55GbGB?Q%Ay;R@HI}LH\|\C1~lk1@K{2t.\CjR`IQ)(Zrw4Ndc-xI; u$nF7Q2Oof
2024-11-01 15:52:30 UTC	418	IN	Data Raw: d5 d6 b2 ae 83 96 d2 87 08 71 52 dc 1f b7 ef 6e 8d 77 e4 2d 7d cb d6 b4 12 58 af 7d 85 39 95 4d 30 ec 18 16 06 53 1d 5b 79 95 6f a3 eb 28 a7 9a 1e 0b a5 2d 1b 39 88 3d aa d8 b1 e0 ab 2e 6f 1f ea 00 ca 6a cb d1 9d 51 89 6c ac 08 8f 16 65 3e c8 00 7d 33 99 ee 3c aa f4 fb 3b f2 d8 af 1e 7d f5 19 58 e5 2b 07 e2 56 e0 fa 32 5c 3b ce f5 30 38 0e 06 4e 77 59 14 eb 7c f4 e8 11 ae 5c a7 ba 17 79 d5 d5 23 97 67 3c 4b d7 77 19 f1 91 33 e8 f5 fb fe a0 37 38 76 e8 7a ae 5c e9 9b 4d b1 4c b3 9c 47 ff 88 f8 0f 81 2c 2e 86 a9 7c c8 79 f9 e2 ad b5 01 2e 2d 37 53 5e ba b8 99 e6 8f cc 6e 8f 70 b5 3c 7d 44 99 a4 47 3f be 78 f6 fc b7 6f 9e f3 d6 8f 46 19 e0 d9 4a de 04 31 47 ce e7 bd e9 c9 7c 1e 8e b9 09 49 d5 e8 32 45 e3 e9 69 bf b7 18 c8 c6 f5 26 83 5f 4a 8d 8b 93 c1 ac af Data Ascii: qRnw-}X}9M0S[yo(-9=.ojQle>}3<;}X+V2\;08NwY\|\y#g<Kw378vz\MLG,.\|y.-7S^np<}DG?xoFJ1G\|I2Ei&_J
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 31 0d 0a 39 0d 0a 31 32 34 30 0d 0a 5a c9 17 e0 b3 89 9c 6f 38 c8 a5 a3 5b d8 a6 08 9f 06 f6 ce a6 fa 20 37 08 c2 a1 f9 e9 78 16 fd a4 4a 40 a3 4d 69 b5 93 9f 5d 4e a1 1b fb 9e 73 76 e6 39 a8 b7 95 70 a8 1d 65 ef 10 3d fd b3 01 86 28 7c d1 ce b2 ab 87 9e c1 31 26 1e 2b 5e 51 10 c8 de c1 e0 02 fd fd a1 e7 a8 5e 09 89 da f3 02 cb 1e 9f e2 7f cd b5 52 57 72 bd 0d Data Ascii: 00000001000000010000000100000001p00000001_00000001p00000001s00000001?00000001000000010000191240Zo8[ 7xJ@Mi]Nsv9pe=(\|1&+^Q^RWr
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 15 3d 8c b4 c5 f3 0e 97 51 32 ea c9 a3 a9 f3 6b 6c 95 c7 d5 2d 60 03 e1 ab 84 98 86 55 ad c4 a8 65 7d 4d 5c 0f 18 40 f4 f7 fc e0 86 1c f0 61 ab f2 5d 2a dd a5 40 f6 de 73 c5 83 1a a3 be 71 39 d9 07 f5 85 6f c7 8a 0f 5b 1f 4f b0 5e 45 85 4f 55 0a 21 ec 02 dc 44 39 4b 1f 9e 98 64 a4 cb 83 dd ea c2 12 27 f5 4e b9 4f 7b 9f da b6 d6 59 3f c4 68 04 f9 fb 09 35 3b a4 ba 22 94 61 67 db 35 aa c3 49 72 7b 63 45 24 7e 60 4e 22 04 c3 d5 29 50 e1 00 8f 78 25 7c c8 74 81 67 0e 50 26 98 33 6f 20 af eb ed 1b 46 38 de db b9 8a 92 4d 21 f6 76 2f e1 aa cb 7d f6 0e 99 87 f4 f4 03 20 d9 3b 02 3e 78 b1 bc 67 cc 1d 39 e3 bc 4c 89 8a 5d 79 22 46 92 9f af 51 f0 a4 38 47 f1 13 3d 75 65 8d 53 b7 0e a5 1e 69 63 00 e6 b2 72 6d a9 52 f2 1b 2a 90 d4 c8 6c 05 82 2f 29 65 59 b0 86 82 98 Data Ascii: =Q2kl-`Ue}M\@a]@sq9o[O^EOU!D9Kd'NO{Y?h5;"ag5Ir{cE$~`N")Px%\|tgP&3o F8M!v/} ;>xg9L]y"FQ8G=ueSicrmRl/)eY
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 98 2e b9 28 5e e0 38 55 05 01 e5 ac fa d2 17 c7 22 54 75 44 34 a8 6e 00 47 ce 09 df da a3 76 60 30 50 77 f3 34 ce 66 d8 3a 0c 86 41 09 f4 da fa ba cf c2 2a 8d 3a 3f 0e c3 e6 ea 7f ed 7d 2b e0 32 b4 68 45 b6 e9 6d c5 7a d9 5b 83 8e d1 cf 2a ab fe ca b7 26 71 eb b4 aa e3 fb d3 48 d9 3a eb 9e a5 9b a4 b4 ee 63 4b 27 e9 c1 94 ac c1 b0 87 92 ed a3 fe 1e 94 ac 63 b6 24 d7 3e ff b7 1c d1 46 50 89 02 5d b8 24 4b c3 41 64 7a e3 9a 22 2b 7d 2c 3d 37 ba f0 3e a5 4b 46 29 d0 95 4e 8e 0e 8e 6b 9d c6 57 1b f5 02 be 9d b4 26 da e9 75 a7 ac 4b e2 45 15 eb 96 3a 86 ea ac 49 5d 59 f3 15 ed ef f3 c4 81 81 87 38 ae d5 b3 d8 ae 6b a5 e7 b6 dd 2d e5 31 e6 b0 fb 1c d3 72 54 9b 6b da 6f b8 a0 3c 5e 99 7e be de ac 38 a1 b2 86 4e d6 ab e1 a5 24 b8 d6 1d d7 fc 52 7d ab a3 13 5d 0a Data Ascii: .(^8U"TuD4nGv`0Pw4f:A:?}+2hEmz[&qH:cK'c$>FP]$KAdz"+},=7>KF)NkW&uKE:I]Y8k-1rTko<^~8N$R}]
2024-11-01 15:52:30 UTC	596	IN	Data Raw: d8 6c d2 d8 cc f6 3e 6c 9a 95 e0 94 e9 a4 b2 4d 27 e9 c8 6a 95 4b 9a 24 5a 83 03 5a 4e 60 06 df 4f 88 f2 51 17 ac 53 ce db 4f 8c 72 0c 0c 34 d9 b2 7b 93 b1 06 d9 0a 7d 16 e9 0f 60 a8 4e 95 3d 3c 58 4d ca 01 1a cd 2c 35 84 b7 2f 77 60 7f bd 8e 05 ed df ce 18 06 79 75 2a 36 51 63 86 12 0d 1b 79 22 c2 7b 39 a2 9d 5a 7a 4d a6 52 f3 fe ab ce ef 75 90 9a aa c5 3a bf a1 29 01 72 00 55 ed 90 d1 24 b3 98 85 e0 fa 1d 9f c9 06 eb 5b ca 52 11 ee 1b 2a d3 22 f5 ac 0a e1 d0 80 7c 20 4d 52 c7 c1 7d d9 97 f6 e3 b5 cd 52 9c 26 43 10 59 ff a0 6a 5c 54 8f 0a c5 64 23 d7 47 c8 8f 76 a2 c8 51 49 23 ca cb d4 ef e5 da 36 65 e3 59 3e 3d 30 e2 57 69 60 b2 a8 d5 fe 68 4e 92 e8 6d 94 b3 36 ac 8e 1e af 54 67 75 b5 b2 94 79 db f0 8f d9 0a 5b b5 c8 d5 99 e6 c1 10 f2 99 50 69 14 1b 87 Data Ascii: l>lM'jK$ZZN`OQSOr4{}`N=<XM,5/w`yu6Qcy"{9ZzMRu:)rU$[R"\| MR}R&CYj\Td#GvQI#6eY>=0Wi`hNm6Tguy[Pi
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49828	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:30 UTC	706	OUT	GET /gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:30 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: bc4c7f9e17a44a28727c0c8750f61a26 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:16:29 GMT Expires: Sat, 25 Oct 2025 15:16:29 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 606961 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:30 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 66 66 36 0d 0a ec 7d 69 77 db 46 b2 f6 f7 fc 0a 18 49 7c 80 09 00 91 d4 4e 19 56 bc de 68 e2 6d bc 24 93 28 7a 65 88 6c 92 88 48 80 01 40 c9 b2 cc fb db ef 53 d5 dd 40 03 04 65 c5 93 39 ef 97 9c 93 d8 20 d0 4b 75 75 ed 55 dd b6 17 b9 b0 f2 22 8b 07 85 7d e0 e4 62 3a 0a 2e c5 d9 3c 1a 9c 3f 9a 2c 92 f3 8b e2 74 11 9f ce a2 38 09 6f f8 f6 e9 d3 f1 89 1b cc 17 f9 c4 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001000ff6}iwFI\|NVhm$(zelH@S@e9 KuuU"}b:.<?,t8o
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 1a 42 6c 5a 88 bb f4 36 7b 9b 3b bd 9a 86 01 d1 bb 9e 52 34 83 74 46 42 ec 08 8c cd 2a 07 eb 3f c0 73 5e b0 d2 e9 6e a3 b7 1b cc 44 9e 47 63 41 8d 96 de fe fe 66 6f 6b ed 78 17 71 b6 c8 df a6 45 34 7d 13 25 c3 b3 f4 43 39 72 8e 91 49 4f 65 6a fc 3c c4 2e 68 bd 16 e4 17 63 d7 c9 c0 d6 59 e8 90 0e 73 df 7f 65 81 bb 2f c6 d6 25 91 6a 68 77 c5 cc b6 26 22 1e 4f 0a f5 e3 22 16 97 0f d3 0f a1 dd b1 3a 56 6f 0b ff d9 d6 28 86 02 b3 93 34 11 b6 f5 61 36 4d f2 d0 9e 14 c5 bc bf b1 71 79 79 19 5c 6e 06 69 36 de e8 75 3a 9d 0d 0c 6d df ff ea de 1c 04 c2 bd fc 6c 31 15 a1 2d 20 14 d3 e1 d0 b6 06 d3 78 de 7c 37 0c ed e7 3d 6b 33 d8 7e d6 ed 04 7b 3b db 5d ab db 0b 36 f1 f7 b3 9e d5 eb 06 bd cd 4e ef 87 5e ef 27 34 f8 a1 f7 ab 06 e6 eb cd c7 bb bb 4f b7 ed 0d cc 46 b3 Data Ascii: BlZ6{;R4tFB*?s^nDGcAfokxqE4}%C9rIOej<.hcYse/%jhw&"O":Vo(4a6Mqyy\ni6u:ml1- x\|7=k3~{;]6N^'4OF
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 0f 2b 15 ad a2 25 86 69 82 18 89 f1 59 8e 51 2a 74 f0 57 81 88 10 d9 07 b0 c4 f4 78 ae 7b 02 2b 00 38 0b d6 7e 6f 09 3a 95 88 29 e3 4e 18 0f ce e6 60 c2 31 32 27 11 97 d6 23 e9 bc 93 15 02 eb 7a 12 25 63 e1 73 3f 7f 06 2b dc f6 ae 87 a2 80 aa 52 c1 0f 6d 9d 7b 67 8b 33 ac 33 ef df e9 78 20 ed 39 62 53 43 3c c3 16 56 6c ac 65 60 28 f7 82 da 2c 0a f1 54 49 46 29 4d 48 32 ea f6 e5 66 d5 da 83 97 59 b1 1b ed 97 2d 36 b8 0e 69 7d 66 75 44 38 ac 31 7c 36 fa 04 cc 7f 77 79 aa 40 2b a7 2a 37 f7 8e 23 23 d1 82 6d 62 08 fb b2 6d b9 0c 65 3f af 48 76 ec 94 24 10 65 c2 bc ff 06 ae c5 28 ce f2 82 f4 c2 12 da 9a 2c 56 f5 eb fd a7 4f b0 ef 86 cb d3 86 c4 85 fe d0 74 66 01 86 36 ce 7b 4f 28 dc 40 50 6d f9 1e d0 a1 7f 4d fa 96 2b 59 d7 dd d6 a2 d9 46 ef ba e0 bd 25 4a 59 Data Ascii: +%iYQtWx{+8~o:)N`12'#z%cs?+Rm{g33x 9bSC<Vle`(,TIF)MH2fY-6i}fuD81\|6wy@+7##mbme?Hv$e(,VOtf6{O(@PmM+YF%JY
2024-11-01 15:52:30 UTC	352	IN	Data Raw: b7 8b ec bf f7 3b 3d 6e 6f 6e ef b8 de 63 3c ee 75 7b db c8 44 33 55 5a cf ae 55 ac 86 1c 4e 29 59 13 2f 3b c8 a1 b0 91 d8 2b 82 c1 6c e8 5e 0f a2 5c c0 df 8d b2 c1 c4 ee 2b cf 3e 74 12 38 9d 50 fa b9 49 4c 89 26 a6 44 95 7a b9 f7 3b 77 ef b2 11 61 78 99 72 24 e9 7c 2e b2 e9 e3 74 81 78 c8 93 64 80 a0 09 a6 a4 31 8f 3b 27 c8 b0 9f 65 22 3a 3f 50 b3 43 30 73 be c7 80 20 6b 81 20 d3 10 64 26 04 08 1a 91 9a 79 2d 90 ce cc 11 ac 91 23 79 d5 64 ab 89 50 11 40 29 fc 9c 41 51 50 49 17 c2 33 9c a7 04 61 2c a9 08 e2 b9 f7 b6 b2 9e 1f 7a 2f fe b6 9f ff 22 fb f9 8f f0 61 c3 82 8e cd 5a 3d f2 d5 50 58 07 a7 f0 55 96 8e 33 04 21 a9 50 ec a1 0e e1 eb 97 aa a0 06 d1 c2 75 9f 88 5d b9 3f 82 97 a4 91 42 f8 da e0 a4 75 86 77 b3 75 c7 5b 37 30 8b d9 ca 56 29 ab fe 74 ea f7 Data Ascii: ;=nonc<u{D3UZUN)Y/;+l^\+>t8PIL&Dz;waxr$\|.txd1;'e":?PC0s k d&y-#ydP@)AQPI3a,z/"aZ=PXU3!Pu]?Buwu[70V)t
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 31 0d 0a a5 0d 0a 31 38 61 39 0d 0a d6 2f ba 64 d4 43 75 2b 4a bc ae 8b ec 8a ad 3c d4 8c 1e c7 27 28 08 45 f5 4b 14 50 fe 47 2c 07 14 84 a5 5d 57 d9 75 56 5f 28 92 75 97 51 30 44 e1 d0 61 e1 4c dd fe ab 2c 45 4c 5a 20 05 05 13 0f f1 b4 a9 1b c0 46 48 9c cc cb dd 65 39 f1 4f c6 38 fa a5 32 30 0b de 48 2f a9 8a 6d 55 40 92 bd 2a 35 bc e3 94 bd 68 60 86 39 46 9d 2b fc f4 e9 15 71 84 7b a0 1b 58 Data Ascii: 00000001?00000001{00000001?00000001z00000001?00000001H000000010000000100000001000000118a9/dCu+J<'(EKPG,]WuV_(uQ0DaL,ELZ FHe9O820H/mU@*5h`9F+q{X
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: d5 0b ef d8 a6 70 3b 95 14 20 89 11 a3 94 c5 dc 1b fb 24 c8 11 25 74 20 17 a1 bf e9 10 12 98 5b 9f 3f d2 fd d4 71 a4 66 5f f5 5a 4e f5 1c 05 20 54 e3 08 db 01 ea 18 05 55 24 0d 1f a0 0e b1 38 1a 56 46 1e 23 b2 4e 36 87 f6 5e b4 b9 d5 19 74 77 fc d1 d6 ee c8 df da 3d db f2 f7 77 87 91 bf bd 19 89 bd c1 60 6b 6b b0 d7 b1 65 69 09 aa bc 69 40 b5 de 6a 4e 49 c8 16 ea c1 a9 7c 0e 00 bc 42 cb b7 71 41 87 9e bc 22 bc 8e 73 5d b9 21 c7 a9 7e 7b 58 33 6d 80 2e 9a 7c 06 2b 3d c9 21 9d 64 05 da 85 2e 8a f3 34 32 e4 00 fa 97 87 0a 5c 39 51 5f 67 50 82 82 e6 85 29 35 9f a2 5e d1 79 4f 31 7d 1c 6a 7a ef d9 10 c7 90 e9 c8 29 90 1f cc fc 41 e7 8b 1e 51 dc 1c e6 1c 4e ba f0 c7 16 82 21 43 41 38 44 36 ae 87 3f b1 1c 93 f1 f4 92 cc 77 0c d7 6b e4 68 44 05 17 d5 ca 53 32 20 Data Ascii: p; $%t [?qf_ZN TU$8VF#N6^tw=w`kkeii@jNI\|BqA"s]!~{X3m.\|+=!d.42\9Q_gP)5^yO1}jz)AQN!CA8D6?wkhDS2
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: ae a3 84 26 10 1c d3 ae a9 e9 5b 4f df 36 2b 84 33 14 0a 66 5a 4b bc 3a 4a cf 34 89 5c 89 f2 a1 95 1f 6f 96 42 ff 0c 59 fe 33 c9 72 9c fe c3 7d 20 f7 bf 8f 51 f8 0f 16 44 fa db d9 d8 18 c1 d9 c9 83 71 9a 42 6b 47 73 ec 00 4a 11 36 e8 4c e1 e1 28 9a c5 d3 2b ba 06 41 64 70 ad bf a3 52 8f dc 3d c0 c1 2b 1e c6 ba c7 f2 ce a2 a4 43 68 b3 9e b7 48 29 d0 13 b3 19 8a 2c 98 e7 50 51 c1 52 56 4b 44 5d 47 22 6d 7c 79 80 09 29 8f 7e 79 c8 49 2d 7a 95 6a 6f bf e6 1f b1 e6 1f 79 cd 52 b5 ac 95 4c ba e4 89 44 96 92 62 4a 5c 85 b6 04 80 ab 18 e9 26 19 48 4b 19 a7 58 15 58 66 b9 d2 4c e1 8b 4f cf e2 80 d1 82 13 a6 d5 51 3a 09 d0 fd 3a 16 c8 d7 30 31 60 fa 3f 92 0f 4b b4 4a f3 33 d4 e2 a8 7a cf 36 35 48 a6 8e 57 e9 d4 34 4d 08 65 1d 52 52 40 16 a9 50 f0 fe 4e 41 31 77 18 Data Ascii: &[O6+3fZK:J4\oBY3r} QDqBkGsJ6L(+AdpR=+ChH),PQRVKD]G"m\|y)~yI-zjoyRLDbJ\&HKXXfLOQ::01`?KJ3z65HW4MeRR@PNA1w
2024-11-01 15:52:30 UTC	1408	IN	Data Raw: c6 c9 20 9c 23 ab 2e f7 94 a3 c2 05 83 51 d0 97 19 af 95 86 fa 56 4e dd 76 cd 04 25 18 8c 1a f8 08 ae b7 83 2b dc a0 f9 90 d1 52 5a a9 14 22 0a fd 90 20 c3 9a 6e 52 ef 4b f1 b1 da 53 4f 43 02 a3 de b7 fc b2 da 1b da 8f 4a f0 20 88 57 14 5b 7d 0c b5 c6 72 04 ba 35 4f 03 df 2e bb cc 95 90 f8 da de df c5 fd 8b 38 6b 8d 2b 17 71 b4 86 6e 64 44 a9 3b 3d 6c 77 77 7b 5d 1c e4 e4 6b 17 8d 4b 21 49 d4 d1 55 d0 7b fb db 5b bb 7c 15 34 92 9d b8 c6 83 2e 82 c6 6d d2 a8 3e 46 09 2c 25 40 63 78 5e 0e 32 a2 ee 01 8e fd f3 dd d3 e4 93 7b 76 7f 92 c2 82 bf fe 2d b1 2c ba af 03 dc d1 e7 63 78 07 f4 86 cf e3 c9 fb 96 e0 fd f7 71 6d ce 74 31 4b f8 13 5f c1 d9 b7 70 d1 de b7 fc 5b 5e c3 69 bc 20 8c 8e f9 0c 57 1f 45 72 99 e3 fb 67 39 f2 0a 10 08 b8 26 10 2c 38 76 e5 14 88 53 Data Ascii: #.QVNv%+RZ" nRKSOCJ W[}r5O.8k+qndD;=lww{]kK!IU{[\|4.m>F,%@cx^2{v-,cxqmt1K_p[^i WErg9&,8vS
2024-11-01 15:52:30 UTC	818	IN	Data Raw: ce 3e 9d 75 4f b5 ff 3f 0d 62 27 42 e8 cc 9b ae 06 02 ae b5 a4 88 13 18 99 a8 9c 61 15 e8 fb 66 04 5a c6 8f 65 75 aa 76 4e b7 f6 08 8d 37 b4 d3 74 bf 4d 62 f3 a6 86 75 42 86 20 44 04 c9 ea d2 1f 5f d3 b6 74 3a bd 9d 66 77 45 98 f2 2e 51 a6 e0 1a 37 22 ec 50 da 5f 0d 08 75 cf d6 4e 2c 40 14 fb ae e9 a7 c6 d5 5a b7 94 54 9f 9b af 0a 83 b4 ce 5c 7d 6e 9f 1e 6a 57 17 9b 72 35 d2 ca fc a5 ec 6b c0 5d 56 70 56 82 ae cd 4a 5d d7 ab 15 d8 75 73 49 20 db 82 40 37 f6 a0 6c 06 92 4c 53 dc 67 05 9f 8d 5c b7 5b f8 7c 0d 80 b9 80 4d f5 c6 3f 3e d4 ee ca d7 1a b5 e3 d9 6c f2 c5 50 fc 19 0c c8 09 d7 a3 f9 26 30 d9 94 52 c5 c0 ad 23 34 dd fc 06 d2 a8 c8 c3 a0 26 2e f2 bd 40 d0 e8 b3 44 ad 76 cc 67 df f5 26 c2 a2 9b ce 50 67 80 8a 3c b7 c9 c2 b5 31 5a a1 d7 ac c6 1e 09 ea Data Ascii: >uO?b'BafZeuvN7tMbuB D_t:fwE.Q7"P_uN,@ZT\}njWr5k]VpVJ]usI @7lLSg\[\|M?>lP&0R#4&.@Dvg&Pg<1Z
2024-11-01 15:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49846	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	689	OUT	GET /gui/25076.f1d5707846ec1ba9ed7f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d46b98b5a9c038a42704f49ace4ba869 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:44:38 GMT Expires: Sat, 25 Oct 2025 15:44:38 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605273 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 34 30 36 0d 0a e3 36 10 85 ef fb 14 ac da 1a 64 21 2b b2 e3 bf 48 a1 53 20 6d 81 00 db 6e b1 c0 de 34 30 76 29 69 24 73 43 93 2a 49 29 f1 da 7a f7 8e 64 3b 6d 11 a0 57 1a 49 43 ce 99 c3 6f 18 34 0e 88 f3 56 e6 3e 48 a9 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\|000000010000000100000001n4066d!+HS mn40v)i$sC*I)zd;mWICo4V>H
2024-11-01 15:52:31 UTC	161	IN	Data Raw: 69 3f 76 f2 2b 24 e4 ba cf 0a d6 e4 fb 43 dc 91 5b 04 51 5f f6 fc 57 d2 14 93 82 75 8f 2c 36 4f 90 c5 db ab 3e 73 4d 6e af 50 c4 9a 7c c6 cb 34 ea 5b d3 60 7f 35 8d f5 db 07 1c 10 6c 25 6d 79 4d 1f f1 e8 4c 94 9f 98 56 d0 5f 4f 8c 06 ca 54 3d d4 ad 84 e7 80 6d c2 96 85 1e ef 89 52 34 ca f3 b6 eb 36 2c fd e6 ea ea 3b e2 70 bb 1c 7e 43 f8 b0 f4 c7 0f ef f8 70 eb 47 e5 a4 98 2f e3 e5 6a b6 80 7c 92 89 1b 28 96 65 f4 c5 45 3b 51 ff 0d 00 00 ff ff 03 00 83 b8 5d ba 69 06 00 00 0d 0a Data Ascii: i?v+$C[Q_Wu,6O>sMnP\|4[`5l%myMLV_OT=mR46,;p~CpG/j\|(eE;Q]i
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49847	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/26044.e227fd5c65cff1753dd6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 68a9bdd5fe9cfd482b7ce23b50ab46b8 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:30:02 GMT Expires: Sat, 25 Oct 2025 19:30:02 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591749 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 31 0d 0a ff 0d 0a 30 66 66 36 0d 0a ac 5c 69 73 db 46 9a fe be bf 02 e1 26 0a 91 02 20 dc 07 65 da 93 51 66 76 5c a3 24 b3 76 26 5b 15 af cb 01 c9 a6 88 08 24 58 00 a8 23 34 ff fb 3e 6f 1f 40 83 a4 9c 64 2b 56 22 11 7d be f7 d5 0d 8e 1b 56 2e 9d 07 36 db e6 f3 bb eb d5 6e 73 77 df 7e d8 15 1f d6 79 b1 99 7e a2 ef e3 c7 77 ef 4d 67 bb 6b 56 e3 77 ef fc d8 0d 43 2b 89 22 cf 7d 6f ed f9 d3 64 dc 5a cc aa cd e9 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001010ff6\isF& eQfv\$v&[$X#4>o@d+V"}V.6nsw~y~wMgkVwC+"}odZ
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 7b be 83 6c e9 57 18 59 ad 79 18 f0 80 13 9a c1 78 8c 14 33 a0 10 ed 2b 4e 38 02 b2 5b 96 99 13 de 78 a2 c3 62 ec 29 fb c4 f0 53 c2 98 07 f0 6e 01 40 05 83 b9 b7 52 56 89 28 ff d9 74 3a 6e 4f 28 7f 71 21 74 14 bd b0 ab 2d 57 54 61 bb 94 0d ff f8 51 cd 86 44 92 ed e9 e9 06 e3 d8 cd 06 ae cc 29 9a 1b f0 0d 76 e8 15 37 29 ab 76 5d 9a e3 a7 8f 1f c7 4f d3 d7 3f bf 58 14 f7 06 b7 78 d3 d1 83 ed b9 ae 51 16 4d 6b df d6 d5 6e 3b 12 26 69 3a 6a ab ed c4 80 55 1e db 76 bf 8f cd 07 36 b0 5e 77 4f 36 46 98 57 c6 af 36 18 ce 1e 27 86 37 7a 09 29 75 0f c6 8b 4b ac ff f2 67 a9 10 82 16 af 37 4d 71 bb 6a 9b 37 10 1e d3 9c 68 40 2d 01 d4 92 80 ba 6f ed 5d 61 37 5b 36 2f f2 d2 26 1b c9 1a a3 2d da 92 d9 cd 3a 2f 4b c3 29 d6 f9 2d 7b 93 3f 4c a1 07 ee 01 db bd 68 b6 f9 c6 Data Ascii: {lWYyx3+N8[xb)Sn@RV(t:nO(q!t-WTaQD)v7)v]O?XxQMkn;&i:jUv6^wO6FW6'7z)uKg7Mqj7h@-o]a7[6/&-:/K)-{?Lh
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: df e5 6b 86 64 9d 91 ab 10 4c 21 45 15 02 36 ef 95 b3 51 ec d1 24 4d d3 20 11 5f ea b4 ae 5f d5 13 d7 b4 bd 57 23 0b 7c 1b 21 69 25 ab de 09 8d b2 c2 bd b3 3b 36 c4 5d 56 4f 0e 6c 60 71 9d 0e 91 a1 f1 fd f8 91 39 22 3d 97 e6 9b 04 12 61 c6 35 bc 0d 15 9f c6 aa 18 a6 f1 fe 5b d0 fd 5b 4e f7 4f 04 6b c3 70 69 a0 97 3c e0 21 7a 8f ce 6b 36 8c 7a c3 d6 c5 0c f1 f2 f9 90 a9 4f cf 44 a0 d4 45 2b 88 7e 24 1f 29 7d 1c 84 40 bf c7 21 3c 37 97 12 c9 46 fa 48 9e a8 84 cf 78 14 7d 01 fe 19 b2 a4 e2 84 41 01 e3 38 de 91 b1 8c ac 1b 09 f9 53 06 eb ac 0b 50 fa a3 9b 7f 87 e7 af 7a 58 44 c6 9d 62 22 25 a4 4d 57 eb eb cc b2 26 9b 95 5a f4 d8 38 57 b7 6c c3 a8 0e bb f8 20 03 6f 5d 6a 9b 57 8d 2a 09 a3 ba 7a 6a 12 cf 1b d7 85 2c 12 c3 2f 59 b3 73 11 d1 d7 90 b2 af 21 65 cf Data Ascii: kdL!E6Q$M __W#\|!i%;6]VOl`q9"=a5[[NOkpi<!zk6zODE+~$)}@!<7FHx}A8SPzXDb"%MW&Z8Wl o]jW*zj,/Ys!e
2024-11-01 15:52:31 UTC	344	IN	Data Raw: b6 96 f1 0f 56 de 33 9c 15 e6 16 8e 5d 70 a8 67 19 fd 2a 62 4b be f4 ba da 54 a8 30 cc 21 9f 6a e5 eb 6a c1 e4 ca 5d af 98 01 1b bf 28 10 10 4c 70 66 c9 83 4c d5 30 c6 99 c9 82 dd 5a 06 2c 53 3e 56 98 49 1c 5d c7 c3 fd 9f f3 5d 70 f7 c2 4b 52 89 91 03 b4 cc d7 45 09 63 2a 4e 3f e1 40 8f 28 70 32 a1 c1 b9 ca c4 ab d9 fa 78 a5 07 1e b3 4e 0c a8 be d6 45 90 db 22 9c 85 0d 75 94 7f a3 fd 91 8a 54 64 72 11 29 c0 05 6b 73 78 87 60 4e 00 93 4a 06 30 0c b5 fe 19 59 ef ce 13 f2 14 01 ea c1 ad f4 80 16 62 8a 32 29 dd 7e 9d 69 1a f6 9c 91 86 de 6a 28 58 83 38 98 87 ca 84 76 6a a5 01 1c 85 96 11 43 9e 12 e9 09 fb 25 04 d4 d9 32 5f ce 04 60 7a 97 84 3e 84 33 f0 11 5f e3 97 0c 49 54 ee d3 41 1f fb f1 3c 95 d4 18 76 8a 35 b2 14 fe c4 a5 5f ca 69 74 a3 38 04 08 ec d9 f2 Data Ascii: V3]pgbKT0!jj](LpfL0Z,S>VI]]pKREcN?@(p2xNE"uTdr)ksx`NJ0Yb2)~ij(X8vjC%2_`z>3_ITA<v5_it8
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a a7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3a 0d 0a 30 30 30 31 0d 0a b4 0d 0a 66 65 61 0d 0a c4 91 a5 d4 24 61 51 e9 6e d3 c4 68 aa 12 f7 65 f4 0e b5 0b 8b 58 a6 ec b1 5c 4a 48 0d 62 ec 4d 53 ee 28 dd 9a 08 a5 25 6b 24 fe 73 bc 24 ea 14 90 ef 43 16 61 07 8f ef 3a 41 12 69 4a a8 75 e2 06 01 f5 fb cf 75 97 d0 1e d7 79 ae f7 11 d1 a9 ae dd fa c2 8f d4 e9 3f b3 ab 4f 9d 9d 15 91 28 0a 70 6d 4c 3c 87 86 4d 59 fe c4 88 5c 6d c9 47 bb 59 e5 b8 76 03 18 25 94 1c 9c 53 ca f4 84 51 53 04 e2 98 e5 71 dc 15 0d 4e a6 ba 1a 51 bb b9 9c 2a 62 ab 00 e0 Data Ascii: 00000001300000001&0000000100000001!00000001M0000000100000001:0001fea$aQnheX\JHbMS(%k$s$Ca:AiJuuy?O(pmL<MY\mGYv%SQSqNQ*b
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: ad 0b 27 b3 57 cf bb 06 09 ed 6d 67 e0 05 ce 32 97 ea 90 d2 a3 42 1a aa f2 35 f8 46 e4 6b a4 ca f8 c9 f0 0f b9 5a 37 49 ad fd 0c e0 52 51 4f 10 ea 24 1e 90 2b ca f1 60 f6 38 ce 56 71 a1 a4 2e 0f 7b 8f c7 08 74 e4 32 36 17 8b 97 e2 8a 7b 5b 8b 40 1f 5c d0 24 4d a3 b4 a6 ea 02 13 4d 0a 07 d2 09 44 a4 d5 38 42 5d 49 a1 42 43 bb a1 bf a7 db 81 4b 1c 70 c1 cb 70 93 a7 82 8b ae 5d 24 61 14 33 b6 d5 6e be 3a 38 fc 38 5f c0 ca 3f 22 dc e7 31 25 f9 29 d7 89 91 82 09 95 19 76 f2 7c 37 38 ea ec e3 6d d7 a1 dc 4d 9f c8 fb 4e 2b 8f 74 97 e0 c4 c4 74 81 05 a7 a0 d8 58 8a 8a 0c 14 7a 69 18 b4 9b 9d 07 2d 36 3c d4 c7 31 e4 fc 4e 79 19 2d 40 e1 db 2a 44 9f 4c 6d b9 41 cf a3 29 f2 0a 5e 4a ed b8 20 00 ea 90 95 63 24 6e e7 46 89 2e bc 4c a9 65 1f 1e 6e 47 51 55 f5 68 3c 6f Data Ascii: 'Wmg2B5FkZ7IRQO$+`8Vq.{t26{[@\$MMD8B]IBCKpp]$a3n:88_?"1%)v\|78mMN+ttXzi-6<1Ny-@*DLmA)^J c$nF.LenGQUh<o
2024-11-01 15:52:31 UTC	1365	IN	Data Raw: f0 22 df c9 d2 f0 1a 17 97 1c 37 8d 8c 00 fb c4 3e 56 c2 46 71 e8 f8 7c 35 be e9 4f 23 01 21 3f e6 9b 8e e8 6d 04 2d 9f d0 e4 c7 c2 0d 4e 7e 97 c5 e4 33 2e cf a1 08 b8 fd c8 89 ae e9 6f e2 84 41 80 cb 44 fc 8f 9f 19 41 e8 00 e0 ec 1a 48 45 71 82 4f 04 aa 1a 85 4f 7c 1e fe 02 7f 74 ab 51 be 9c e7 5f ab 95 d0 82 d5 e5 28 b1 df a7 71 e8 f5 69 86 2b 5c 74 27 17 57 82 3e 81 44 96 71 46 e8 bc 19 f0 ac 67 63 02 f2 47 29 78 95 a6 8e 8b 69 61 e6 c4 01 b8 e5 39 69 1a 02 85 7f f8 de 8f 5e 94 39 59 12 5e 07 19 ee 49 e0 2d 77 2f c5 24 5c d5 8e 13 07 df f7 84 e7 8e f5 7f 2e 16 61 22 c8 0d 98 88 0f 20 77 d4 91 9b 3e 11 b9 e9 af 20 a4 1a e5 1b 62 9e 7f 1d 62 00 b1 09 2d 90 2f 39 0a 9f 68 1e b5 08 f6 aa 51 c0 5d ec f7 e7 22 a1 09 7c 08 5b 92 fa fe 75 04 95 08 bd cc 88 3d Data Ascii: "7>VFq\|5O#!?m-N~3.oADAHEqOO\|tQ_(qi+\t'W>DqFgcG)xia9i^9Y^I-w/$\.a" w> bb-/9hQ]"\|[u=
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49849	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/92285.13a9b4319a138ac2aab7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 966d7a90e4a5c77204f3349235cbb3b7 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:19:55 GMT Expires: Fri, 31 Oct 2025 12:19:55 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99156 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 30 66 66 62 0d 0a 00 00 00 02 ff ec 5a 5b 73 db ba b5 7e ef af 80 d9 8c 87 9c 01 19 df 23 cb a6 bd 53 27 99 b8 71 9b 4c ec b4 73 92 f1 c8 90 08 49 88 29 52 9b 84 ac b8 b6 fe 7b 3f 00 84 78 11 e5 b8 7b e7 f1 3c c4 a1 48 5c 16 d6 e5 5b 17 2c 67 96 73 92 cb 4c 0c a4 73 e4 e6 3c 1e 06 73 de 9f b2 c1 ed d9 78 96 dc de c9 de 4c f4 26 4c 24 e1 13 df 1e 1f bf 5d 7b c1 74 96 8f dd 6f df 0e 77 76 3a fb d7 f4 41 ff df 75 25 e5 54 78 e1 c9 c3 1d cb 48 1a 0a 77 af f3 6a 6b cf a3 31 1e b7 0f 0e f6 f6 3d ca d4 db fd 9d bd 6d 8f 26 78 3c dc 3f e8 74 3c 9a ab 01 3b db 3b 5b 1e cd 42 17 af 3b 87 Data Ascii: 000000010000000100000001000000010010ffbZ[s~#S'qLsI)R{?x{<H\[,gsLs<sxL&L$]{towv:Au%TxHwjk1=m&x<?t<;;[B;
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 50 16 7c f8 00 55 4a e7 57 e6 68 5e b7 22 bb 17 90 dd 0b c8 6e 8d 14 76 40 ef 31 23 59 1a f3 d0 81 aa ca 34 71 2c 47 9f 94 30 19 67 7c 58 1c 99 fc a6 c1 c0 fe 32 6c e6 b9 14 51 e8 64 e9 5c 9b aa 2f a2 52 e7 18 36 ad a8 6b 45 2b 76 c8 30 f7 f7 1b 3a 9b cf 0c 5c af 27 d5 ac 00 69 b4 10 52 93 f7 59 3a bd 27 97 ef 5f c3 ec 88 4c 71 52 31 ed a7 2c 8b 9c ba 72 4c d3 5c 28 47 14 3a 32 9d b6 0a b9 b0 1e 75 12 66 19 66 a9 a8 b2 a6 45 e7 de 89 24 22 b9 98 40 cf 32 ad 7b f9 9f d9 fd 4e fa 33 e1 43 1b 67 96 0c 4b bc 9f f1 98 49 71 07 73 24 c7 46 b6 24 8f 53 68 bd 05 01 3b a3 2f 13 82 7f 7e 2c 92 5b 32 f5 b7 48 21 11 25 0b 87 28 31 2e 61 d7 ea 48 cb b9 2c 86 93 9c 4d a6 00 e7 3f c8 52 b3 03 48 36 27 83 f0 ab 87 8b e0 d7 15 31 e6 c4 4a eb 9f d0 e0 e5 60 21 f9 a4 55 3b Data Ascii: P\|UJWh^"nv@1#Y4q,G0g\|X2lQd\/R6kE+v0:\'iRY:'_LqR1,rL\(G:2uffE$"@2{N3CgKIqs$F$Sh;/~,[2H!%(1.aH,M?RH6'1J`!U;
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 32 17 ec d7 a4 2d f7 cd 9d c5 b5 2d 16 97 e5 db 2b c4 30 57 3a 5a 6a af 87 6d eb 40 b6 8c 80 6d b5 56 04 13 36 75 91 66 9e 54 6a 7d 67 58 ec 4c 05 44 4f 87 c6 2a 12 6a a4 81 26 ec 35 1f 5a 2a 9a ea 83 ae 4e 98 10 36 0b 74 9d f9 1f 6c ea b9 0f 4e 19 d9 39 5d b8 e7 42 09 17 08 4e 83 42 e9 a8 cb 71 d5 a5 ee 5d ea 4a ad 52 a0 40 44 48 80 15 9a d4 15 d6 94 d7 45 71 09 21 e1 21 06 b3 0c c9 8b bc d2 b9 c1 d1 24 f8 97 ae 79 36 d6 f4 0b 29 22 87 d4 a6 93 c8 22 e6 c8 2b 31 f5 4a 04 41 8d 46 b7 0d 6d 44 0c 54 9f a0 97 6b 8b b5 97 4f 08 0c 96 78 f8 b3 00 c1 16 ff 95 00 61 e0 c5 4a 0b 8a 4b 0b 75 77 a4 b9 b4 6a 4b aa 4e 00 4e a9 f8 a7 60 55 9b b1 14 b7 03 a4 99 97 bb dc 3b 5a de a8 ac 67 64 61 e5 fe ca f6 15 a6 2a ab 2b 39 a9 c9 46 46 0d 51 2b 7c 42 7c 6e f1 ee 0a e9 Data Ascii: 2--+0W:Zjm@mV6ufTj}gXLDOj&5ZN6tlN9]BNBq]JR@DHEq!!$y6)""+1JAFmDTkOxaJKuwjKNN`U;Zgda*+9FFQ+\|B\|n
2024-11-01 15:52:31 UTC	284	IN	Data Raw: f8 8a 59 b5 b7 a6 1f 14 3d 4a f6 ed 6f 7a 75 4d e9 f2 55 8d 6d ab 6f d1 c1 51 bc 3c 39 7e d9 42 1c 3a 39 98 ee a5 51 5c 51 29 f5 6c ea f7 0b be 38 64 2c 50 3a 4e 48 e3 e6 b3 1a 81 60 55 1d 92 2f 05 42 2d 52 d6 80 55 ed dc 80 54 0b 69 cb 99 40 4e a3 98 0d 59 16 da 5a a8 e3 3b ac 54 7f 03 65 7a f6 a6 40 e6 a3 f7 3f 05 de df d7 03 af 9d ac cb 8c 80 cb bf b6 f1 0d 78 59 5b a2 55 e3 4a 30 6e ae d9 22 26 05 c1 b5 25 d5 98 cf e9 bc b8 dc ff 72 5e ae f6 7b 68 d7 fb 19 b4 eb 45 bd 05 d5 dd d1 2d ed df 9d c3 fd 3d 34 58 a3 fd 3b 48 dc d4 34 7f ef 76 d0 a2 ad 9b bf f1 8e 99 d6 ef 4e a7 73 70 a8 5a bf 13 17 7d c4 68 72 39 ca 02 e1 e6 ca cf 65 45 ab b9 aa 13 51 07 80 84 70 87 f2 e0 75 98 2d 16 d7 de d1 5f 5e be fc 2b 31 65 2b d4 ed a6 70 5d 5f 3e 5f 84 ba 1d 3d d8 de Data Ascii: Y=JozuMUmoQ<9~B:9Q\Q)l8d,P:NH`U/B-RUTi@NYZ;Tez@?xY[UJ0n"&%r^{hE-=4X;H4vNspZ}hr9eEQpu-_^+1e+p]_>_=
2024-11-01 15:52:31 UTC	24	IN	Data Raw: 30 30 30 30 31 0d 0a 03 0d 0a 39 0d 0a 00 2f a1 91 ff 0a 2f 00 00 0d 0a Data Ascii: 000019//
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49848	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	689	OUT	GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3cf21a58423e65a37837019de4946614 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:09:39 GMT Expires: Sat, 25 Oct 2025 16:09:39 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603772 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 09 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 31 0d 0a b7 0d 0a 30 66 65 65 0d 0a f9 55 ae 39 b1 43 24 00 74 f7 05 34 ec e8 45 32 43 9f Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001w000000010000000100000001q000010feeU9C$t4E2C
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: cf c5 dd ff b8 3c 61 fe 9d 50 54 6b c4 cd e1 d5 cd c1 e1 15 62 b2 3e 7b bc f5 be 89 e2 67 4a fe db 6b 0a 8d 1a 0f 4f 4e be 5d 75 5d de 6f 2e 2e 3f 50 fc ad a4 eb 7b f4 c7 2b d8 ec c0 f5 66 87 5a 2f 4f eb 98 fc f9 cf 7d 7c cf 6f d6 57 8c 95 8f c0 46 4b 5b e1 a7 9d 64 bf 37 f3 7a 8d d0 b5 5c 8f 1f 3f 96 2a 37 26 1e c3 b5 17 6b 1b f1 56 74 48 e7 d6 fb aa 06 b6 b6 de 5f 6f d4 e2 ad f3 86 3c ee f5 1c 9f ad 0f af a2 26 ab c3 9b d2 cb f3 e4 7e 9b 4b 5b ef 6f 6d 5c 0f 5e 9e 9e 9d 5c ad cf e1 6c 9b b7 5f 3f 1b ff fc e7 83 5d 94 ed bf 1c 1e bf 7c cc a4 fd d5 bb 83 dd 9b 8b 9b c3 b3 df dc ac 5f 5d d7 39 ec ab c6 c1 ee e6 9c 6f 72 b4 31 43 e9 68 13 a4 df 77 f4 e3 83 ad a6 30 07 6b 34 d4 c9 fa e6 f0 f4 6c 17 51 5e 7f f5 a4 75 e0 67 fb fb eb 3e 10 95 9b eb ad f7 35 49 Data Ascii: <aPTkb>{gJkON]u]o..?P{+fZ/O}\|oWFK[d7z\?*7&kVtH_o<&~K[om\^\l_?]\|_]9or1Chw0k4lQ^ug>5I
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 65 b3 69 bc 36 63 1b ec fb 11 13 93 dd 9b d3 9b b3 2e e5 0d 71 7d fb 4a e2 d9 04 bf a1 58 7b cd f9 83 6a a9 e8 66 38 ee 8a 23 0f a0 c5 f2 86 6e 26 72 55 4f 6a e5 db dd 7f df 6a 5b a5 56 09 93 e2 c5 7a 0b cf d2 ee f9 05 33 e7 fc 05 26 c6 8b 0f 99 18 97 32 31 5e 6c 3d f9 b2 9b 18 98 15 e6 a6 62 32 ca b8 d8 fb d7 db 57 47 eb ab f7 2c f4 6f aa c9 91 2a 2b 6d 86 6f 59 c4 c6 b2 f2 f5 a5 34 37 d3 bd 86 58 97 bf 3e f7 ff b8 c0 42 3f 3c bf 97 bd 0d 64 e6 7f b3 ef bd f8 98 dd d3 d6 1e f1 a4 19 3f 9f 61 e6 8c 26 a3 19 2e c7 67 fb 57 bb e7 8f 3f db da fe 0a dc 6c 35 1d 8d b6 b6 bf 30 dc 57 5b db 4f c1 ad a6 43 19 49 9f 1b ee e9 d6 f6 6f 84 5b 4e c7 8b ad ed ff 36 dc 6f 9a 2f f2 f7 db 7f da fe 34 ed a4 df fd 64 27 fd 00 76 52 b3 49 fe 6e ff 0f ef 6c b6 ee 3d fa 67 fc Data Ascii: ei6c.q}JX{jf8#n&rUOjj[Vz3&21^l=b2WG,o*+moY47X>B?<d?a&.gW?l50W[OCIo[N6o/4d'vRInl=g
2024-11-01 15:52:31 UTC	443	IN	Data Raw: 9f 34 8f c7 f5 af 4f 4f f6 f9 65 97 03 e2 f3 b7 ac fc bb b6 10 98 61 ce a9 d5 e6 42 d9 58 14 a2 f7 39 a2 f7 47 3b 98 fd ed c7 3c 46 e1 91 6f 3b e7 b2 5b fe 3d bb e5 df ef 7f fa 5f bf ac de c0 be f5 db 40 b1 8f fa bb e6 d2 e0 34 a4 14 f0 27 0a f8 d3 dd 02 cc ac 1e ec 9a 49 9f fe de 5a 9e 51 c8 9d 70 60 5b fb f7 4f 7e bb ff bb be 71 b9 6b af bb e9 b4 53 f3 cb 61 f9 5b ac 04 f3 49 7e 5d 10 c1 72 35 9b 62 95 13 44 80 45 7f d3 42 08 26 4b 02 07 2c 84 00 9c fc a8 8f f1 11 6d 3d b9 e8 51 0a 07 bb a7 27 db 7f ff c9 3f fc ec ff 3e 1f fc c3 80 4d c7 0d fa 0e 8f f9 e0 f5 6c 77 b2 3b 1e 3c f6 e1 c5 d0 41 f7 b5 5f 6d 7c b7 2c c7 c1 c5 e5 db 2b 9b e8 e3 e1 68 b4 33 1e 8e 27 83 7f 47 68 b2 a4 4f 6f 6f 5e b2 76 1a f5 33 54 d5 b9 d4 b4 59 72 83 cf 7e f3 ef a5 02 16 87 db Data Ascii: 4OOeaBX9G;<Fo;[=_@4'IZQp`[O~qkSa[I~]r5bDEB&K,m=Q'?>Mlw;<A_m\|,+h3'GhOoo^v3TYr~
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 66 66 66 0d 0a d8 ff 0a 1e e7 8c b2 af f4 4f 41 8f 1b 7a fc 9c 7f 0a 9a 7e 41 bd 9e eb 9f 82 9e 1a fa d8 fe 57 d0 33 43 1f 4d f4 4f 41 cf 0d 7d af 85 0b 43 4f 4f f4 4f a1 5e 1a fa 5e bb 57 86 1e 1d ea 9f 46 dd 3d 67 b4 af 0e 32 8b 9e 76 38 ea 7a e1 b6 6c 39 11 0e 17 47 de 11 d4 da 39 ab b8 ba 57 c6 ef 44 63 7a 05 b2 8e 74 af 69 e7 ea c5 d1 de 60 34 da 1e 2c 16 db 83 f1 68 d9 da d1 6b 6c bf ce f8 65 b4 18 43 d2 f9 a5 9a db 4f 43 7e 19 4f c8 38 e9 b2 d2 5b d0 7e 1d 8f 57 fc 3e 9a 6d 0f fa af ad 25 bd ce 15 c5 4e e6 fc eb 52 db bc 86 b8 18 f1 7f ad 5f 5d 62 50 9c aa cf c3 f9 f8 68 d1 c7 35 3c 62 f7 a8 c6 2b fd b3 d9 fa bb 25 8d 87 f3 e1 38 26 0e 7d b8 4b 30 1c 4e a7 cb 3b 3d b9 4b b3 1c 22 29 9b fd b9 4b 32 3f Data Ascii: 00000001000fffOAz~AW3CMOA}COOO^^WF=g2v8zl9G9WDczti`4,hkleCOC~O8[~W>m%NR_]bPh5<b+%8&}K0N;=K")K2?
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: f3 47 ee 09 08 36 97 f5 1f b9 5d f1 c1 9f 7a 7d ad 33 be 1c 3e d8 b4 eb d7 2f de b1 8e d9 e9 c7 8e 05 56 ec bd 22 14 f3 6c fd be 9d 1e 31 09 8a 7a 25 6c bc 1f 2a d9 44 b7 fa f7 da 9c e7 50 ed 94 50 a0 ad 77 9c 46 48 2e 83 b4 0f 05 22 6d e2 d1 8d 39 6f 54 8a 8c 63 94 d9 ad b1 8e f3 b6 58 0f 32 04 d2 78 fb 07 8b 6d 68 ad fa e3 3b 5c 86 d7 8c df 25 e7 61 cc e0 9e 6f fb 0f 3a 6a df 77 9a 1d 6e ca 7c 79 7a b3 83 b3 0f 83 55 67 2b 7b ed 27 ef 9b 98 bc 87 7f eb 90 fe 9c 6c 6d e6 6e 5d 8e 1f ef 56 b8 b7 87 22 f8 13 66 ab 74 e8 29 21 f1 57 2e 9e f4 bf b3 d2 02 8a 28 07 c1 80 bc 37 46 81 ee 37 1c 6a ec a0 5c 6e 76 9e 9f ae cf 4e ae 77 14 0d 4a b4 c0 f6 87 c8 c4 8f 0f fe c8 fc c5 cd fc c1 9f 5f b2 67 68 f5 7c 90 e4 e4 10 03 5c 2d f9 20 05 9b 81 9b 97 5f 43 f3 56 bb Data Ascii: G6]z}3>/V"l1z%l*DPPwFH."m9oTcX2xmh;\%ao:jwn\|yzUg+{'lmn]V"ft)!W.(7F7j\nvNwJ_gh\|\- _CV
2024-11-01 15:52:31 UTC	1302	IN	Data Raw: 35 dd 6a 3f b8 d4 0f 46 77 4d d8 a0 ee 8b c6 07 0a f5 93 a7 6f 54 a6 13 3f 54 24 e7 53 fd a0 bb ab fe 17 b9 29 19 dd 37 a2 36 5d 8c 7e 44 7e c7 bf 48 99 be b8 6c 6d b4 9f 1f 36 ee 71 7d 87 2a a3 2f ed 60 ad ba 35 3f 58 ed e6 dd 35 56 f8 ea 1b 44 95 6c b4 51 77 80 de fd 09 4b 98 9b f3 7b 5c ab aa 02 aa b5 64 93 5b 20 ba ee ce 45 56 27 b0 5a af 63 9f 2c fd fd 31 c6 8d 2a ed 86 36 cf 42 a9 68 a3 cc 8d 55 75 83 cc da 53 4a 74 53 f7 e3 6d 18 ee 2e ef e7 f9 70 5b bc d0 92 e7 fe 62 1c cd aa 72 92 6c d9 5c 95 83 58 4c be db 07 5f 88 9d 91 b9 55 aa 45 eb 90 66 3e a8 22 77 af b2 4d 83 62 a3 ce a8 a3 f4 a9 e3 7c 69 d7 c2 94 45 c6 0a 7c 4f 02 1e e8 41 10 7f 9d 30 0c 77 f3 10 8d 72 32 df 87 07 23 69 58 83 ef da f4 6e bb 87 34 7e 88 ed f7 c4 36 18 52 bc fd 1a 9c 07 c6 Data Ascii: 5j?FwMoT?T$S)76]~D~Hlm6q}/`5?X5VDlQwK{\d[ EV'Zc,16BhUuSJtSm.p[brl\XL_UEf>"wMb\|iE\|OA0wr2#iXn4~6R
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 88 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a be 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 34 66 66 37 0d 0a bb 36 83 c9 84 58 91 c9 e4 87 69 ba 74 c0 26 6b c7 d3 bb ac 5d ec 0e e7 a3 b6 72 0d f2 b3 0d f7 26 53 2f 8a 87 0e be 07 6b ef 2e 5c 2c 24 ab d5 e7 5c 3f 62 61 9a 73 b1 1d be 4e b4 18 b5 bf 33 16 25 9e a0 1a f0 f7 e9 62 72 30 9f ee 8e e6 93 a9 92 dc 12 0b 6a 03 87 9f 53 d0 f7 95 6f 97 af ae b2 b4 ea dc 51 67 0f 2e 3a 93 29 eb df 7c fc 4c 7f 79 08 ea fb b6 c2 05 ad b4 e2 ee da f7 8d b4 ea 26 af Data Ascii: 00000001000000010000000100000001o00000001>00000001P00000001S00000001000000014ff76Xit&k]r&S/k.\,$\?basN3%br0jSoQg.:)\|Ly&
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 31 6a d3 e5 12 b3 45 f6 1c 06 a1 64 02 a1 a1 01 a8 59 8a 93 55 b9 b0 de 2e 71 41 91 9c 4c d0 82 ea ed 8c 51 e6 0f c3 d7 d2 13 ac 4a 5a c3 f0 89 1e a9 50 ef 51 35 c3 a5 7e 47 77 30 cf 60 f2 74 2a 73 0c 60 29 ee c1 f4 d5 18 61 da ec 1d dd 65 fc 31 31 c5 3e b8 2f e9 44 bd d2 6c d2 88 11 cd 45 1e a6 92 56 13 a3 96 9e 2f 91 56 16 83 31 ba 45 bf af 10 07 d5 4b 3d 2a 6e 48 ef 69 df 5c ee b4 19 ba 8c 41 23 39 1d 4d 56 cf b4 36 8c 60 22 b9 19 7b b9 cb b0 6e f4 bb 84 12 6b 47 69 69 17 99 6c 93 79 4b 4b 0f d3 9a 09 33 ce e8 27 1a 7c 4d 30 2d 26 94 37 56 f7 10 96 11 dd e7 39 51 ac a5 36 d8 0b 64 79 a3 6f df 57 59 c8 40 98 88 c7 f3 c9 53 1a fb 0c a1 fd 3e 36 51 77 7c de b1 7c be 95 ab c7 0d 32 db 56 7b 42 3b 6a 87 1f d8 4c 8f f4 6a c2 80 4d 97 8c f3 e9 f2 ce 56 f9 2f Data Ascii: 1jEdYU.qALQJZPQ5~Gw0`ts`)ae11>/DlEV/V1EK=nHi\A#9MV6`"{nkGiilyKK3'\|M0-&7V9Q6dyoWY@S>6Qw\|\|2V{B;jLjMV/
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 53 39 d8 6d b8 e5 2a 51 6b 18 0e 7c b1 53 b9 b6 b1 c1 d5 63 9d 7e 76 76 33 d0 88 85 85 57 22 f4 4b 0d a3 8e fc 34 1c 98 53 a2 df 64 48 f3 12 df 8b 55 f9 ae 62 cd d9 b9 44 56 7d 1a 4a ac d9 73 73 38 82 b3 9b c3 4f 31 9b 43 4c da c0 29 3f cc a2 7d 82 10 6c 7a 4a 0b 85 6d 82 cd 61 0d 3b 5e 83 39 99 86 df 5d b6 45 e5 d4 13 46 a8 95 01 44 af d9 26 2b 8f c6 0d 4f 8c c4 db ca 94 57 c6 ca 10 16 27 13 87 33 e4 d3 f1 8f a6 19 bc 1a 2a 8e 13 07 bb 38 2f 8e cb 4d 45 eb 4d a0 71 f2 73 b4 ab f4 4a fb 68 9d 42 20 7b 8a 67 65 f3 6c 69 0e 32 39 64 d0 41 25 22 a5 a3 11 8e c5 67 5a 2b 90 17 1d 3e 68 24 22 cd 84 99 32 71 82 9e 72 38 42 e4 a8 9b 13 22 98 84 68 eb 38 5c e1 21 e6 87 8b b4 4e 88 f4 bb c8 91 70 92 4c 6a ad 40 1c 90 99 7c 48 f0 c4 f3 95 fa a6 56 b0 db 57 7a c9 de Data Ascii: S9mQk\|Sc~vv3W"K4SdHUbDV}Jss8O1CL)?}lzJma;^9]EFD&+OW'38/MEMqsJhB {geli29dA%"gZ+>h$"2qr8B"h8\!NpLj@\|HVWz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49851	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	689	OUT	GET /gui/88116.be3428c199d3d7ca9393.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cc118cdd35971412c2b10612dd9b1887 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:08:45 GMT Expires: Sat, 25 Oct 2025 16:08:45 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603826 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 62 0d 0a 00 00 00 02 ff ec 5c 6b 77 db 38 92 fd be bf 82 d1 cc 78 c4 5e 92 d6 d3 b6 24 cb 9e 4c 3a 3d e3 39 dd e9 3e 76 72 f6 ec 66 73 d2 14 09 4a 1c 53 a4 96 a4 fc 18 59 ff 7d 6f 15 00 12 d4 23 49 cf ee d9 4f 6b 75 3b 34 1e 85 42 a1 1e 17 05 50 ad 75 21 ac a2 cc e3 a0 6c 4d da 85 48 22 ef 51 cc 56 7e 70 ff 66 b1 4e ef 1f ca cf eb f8 f3 d2 8f d3 e9 17 ea 5e 5e 3e 7e b2 bd d5 ba 58 b4 3f 7e bc b8 e8 76 cf 9c 8b b3 de a0 ff c9 d9 74 3b bd 6e 6f dc 16 4e ee 94 f6 f4 6a f3 e0 e7 56 36 2d db 83 8b f3 ce c0 76 0a 3c 76 cf ce 06 43 db 89 f1 78 d6 bb e8 f7 6c Data Ascii: 000000010000000100000001000000010000000100ffb\kw8x^$L:=9>vrfsJSY}o#IOku;4BPu!lMH"QV~pfN^^>~X?~vt;noNjV6-v<vCxl
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 90 32 fb 1f 13 a8 e5 56 93 9a 4f f5 84 82 75 51 66 4b e5 5f ec 36 69 84 3b 5b 97 25 dc 5d 8b c4 62 6f 1d 0e 38 46 d0 2a 3d 38 7d a8 a7 17 c2 3f 6e 6a d7 36 6e 23 a4 65 86 af db da 1c 80 28 c0 c9 f8 b5 75 ce 86 e7 fd e1 51 5a 3f bd 7e f7 fd cd eb 77 ef 3f df be fd e1 ed ed ed db 5b 26 79 63 d0 e9 f5 2e 46 3a 50 f6 87 e7 58 99 78 da 46 20 bc 18 75 c1 91 8a a3 2a 64 ca 40 9a 52 7d ff ac 37 44 f8 04 1f 14 80 e9 61 78 76 de 3d b7 55 18 1d e0 91 a3 a8 0a a8 01 38 1e 0e 86 d4 32 a1 d8 3a e8 0c f1 b8 ae e6 e1 ac f0 88 78 3b ec c8 88 1b 39 73 67 e1 3c 38 4b e7 d9 b9 77 1e 65 ec d5 21 cf 7a d2 71 cc 41 c8 45 18 da 94 f9 33 47 60 04 b2 8f f1 27 44 29 04 f3 d4 7b f0 93 b5 d8 06 7e 19 2c da 42 3b 59 8b b5 a7 44 c1 36 f5 c2 2c 15 d7 79 7b 66 8f 11 a0 96 71 21 bc 5c 14 Data Ascii: 2VOuQfK_6i;[%]bo8F=8}?nj6n#e(uQZ?~w?[&yc.F:PXxF ud@R}7Daxv=U82:x;9sg<8Kwe!zqAE3G`'D){~,B;YD6,y{fq!\
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: fb d1 3e 56 88 59 03 d8 2a 54 36 c4 af 16 a8 74 38 bf 95 7b 5f f0 e7 8e 1c 29 f1 de 7d f0 d6 1c 50 c8 8b c8 20 81 25 6a c0 f5 0d e2 8d 3f 16 08 6e 48 e9 29 1c 51 4e b9 6b b0 46 9e 26 85 ce 8b dc 74 cb c8 a1 21 05 57 c6 af 39 ae da b4 83 a8 42 b3 28 3f ac fe 52 c6 77 8c 6f 10 77 aa 2d c4 81 e8 aa 47 cb be 38 1a 3b e4 6a 34 8a 08 0c bd e8 41 c7 7a 40 98 93 93 57 6c e3 39 90 c8 2f 7e b9 a0 a8 9e 97 c5 bf 21 3b d2 6e 2d ca 72 35 3e 3d e5 70 b5 c8 8a b2 65 5f 43 35 e3 30 14 e9 0f 59 be f4 94 05 d8 e3 af 03 08 6d 18 d5 52 21 ab a1 e2 92 de 8b 50 10 76 ea 2c d8 76 db 6e e2 8e d6 fb c7 ec 07 b8 92 2c 27 5f 01 f9 c2 93 50 20 bf 45 60 47 42 2c 64 83 69 31 34 21 cb be 6e 9b 66 d4 81 51 09 c2 ab 14 25 a0 7c 3b 41 c3 d9 17 b3 cd 1a 5e 2b 31 ac 8f 70 8d 61 8d 5d 09 6c Data Ascii: >VY*T6t8{_)}P %j?nH)QNkF&t!W9B(?Rwow-G8;j4Az@Wl9/~!;n-r5>=pe_C50YmR!Pv,vn,'_P E`GB,di14!nfQ%\|;A^+1pa]l
2024-11-01 15:52:31 UTC	291	IN	Data Raw: 5b 98 7d 4c fb 0c cf fa cc 98 d6 08 57 e6 1d 01 6b f9 4c c7 ee cd 75 33 e0 4a eb ea 67 c2 1b c6 19 7c b5 80 c6 a1 a5 55 c1 7f ba e3 c0 aa 40 45 32 3f bf 57 a0 77 17 55 5b 44 7f 83 98 5e 0c 2c 82 11 e1 cc 0c 2c f6 82 07 b2 ca e6 ce 5d 5c 8b bd 73 00 b9 42 9a 2b cd 04 f6 2b 5a a0 07 e3 e1 7e b4 ba 87 4c ef 8f 44 2b 82 5e f5 7e 1b 46 cc b1 5a 4b 40 d6 60 7e 66 88 91 85 2d 4b 7a 4a de d8 b4 ac 1d 67 7f bc bd de 76 f1 0e 6e b7 5b a5 cc 07 63 b5 de c2 71 6e 5c 43 1e 1e 5f 4b aa da d1 21 69 3b b9 e5 e3 7c 9f f2 0d d8 52 b5 71 4c 7d 67 9e de 1f 38 8f aa 4f be bf da b7 de b5 7f 73 27 0d ce be b9 43 85 b9 be b9 47 e3 84 ec 9b 7b 69 0d db ef c0 87 79 38 ee ff 9d c2 0d bb 32 e4 62 f2 bf 5f e8 5a 85 c9 dd ce ba e2 e6 2b 04 74 14 da ed af ca 8f 74 3f b2 ea 52 5d ab db Data Ascii: [}LWkLu3Jg\|U@E2?WwU[D^,,]\sB++Z~LD+^~FZK@`~f-KzJgvn[cqn\C_K!i;\|RqL}g8Os'CG{iy82b_Z+tt?R]
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a e6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a 25 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 31 0d 0a 12 0d 0a 62 39 64 0d 0a 49 b8 a7 46 49 e0 e9 dd d6 e1 9b 7f c6 95 0a ca 29 d0 95 8b 8b d1 70 80 6b 0d b8 53 e8 e1 62 80 bc 51 d8 bf c0 3d 42 be 1e 81 b2 18 a6 d3 c6 41 95 3d f1 3d 79 5b 51 78 71 e8 fc f1 f4 bb 57 ff 99 5a df 59 b8 1d 53 e2 30 c3 5f 59 d6 c3 d0 eb 7b 3d ab 4d 59 bd 02 Data Ascii: 000000010000000100000001P00000001a0000000100000001!000000010000000100000001t00000001%000000010000000101b9dIFI)pkSbQ=BA==y[QxqWZYS0_Y{=MY
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 47 95 95 17 51 53 94 ec ba e8 78 68 1a ee 0a f7 ef c6 d6 b0 63 90 7c 72 8b 85 1f 12 94 ee 28 2e 99 9d 7d c9 d4 82 d1 5d e4 c4 d1 ab cb 73 d7 32 d8 eb da 31 84 5a f5 65 a9 c8 a1 fa 60 67 af 93 b9 12 55 a7 18 3b 18 ac 1a ff 03 7e a1 14 56 0f ff b3 57 36 56 b1 1e 90 6f 07 ba 74 a5 cf 55 8a d4 58 28 a3 1a d7 7a 02 9c ac c9 95 94 aa 66 d4 2a ad e2 81 0c dd 87 d6 60 dd 95 a8 39 ab 8a 04 4e 1c 56 86 60 42 63 a3 da d4 47 78 d6 bd 56 b1 bc d4 54 91 31 31 32 93 d1 0d 76 08 c9 76 db ef 9c ef c6 e3 99 40 4b 41 4f 08 97 22 df 20 6b eb 22 94 10 12 57 bd 50 b2 fd d3 12 c7 f7 7e 1b 97 9d 90 b3 2b 70 55 33 84 61 84 ee 32 a3 a3 26 f2 12 38 40 a5 2a 91 06 b8 9d 23 b7 7d 78 17 0d d7 e2 dc 99 c0 3d bb 18 01 a5 58 62 33 b8 d8 6e 7d dc 69 a6 00 c3 42 aa 14 b3 e9 99 10 27 9b 35 Data Ascii: GQSxhc\|r(.}]s21Ze`gU;~VW6VotUX(zf`9NV`BcGxVT112vv@KAO" k"WP~+pU3a2&8@#}x=Xb3n}iB'5
2024-11-01 15:52:31 UTC	327	IN	Data Raw: 57 a3 8a be 0f 64 c3 d0 4e ee 09 e4 06 a3 d1 84 31 56 fd 05 20 1b fe bb 5e ef ba a6 d1 8b b1 09 7d 71 09 1c b2 91 65 33 82 97 59 cc 39 b4 46 7f b2 f9 9d 2f 43 d9 f3 62 95 27 54 c7 44 06 b6 6f 3a 9d aa 21 51 65 43 35 9a 36 7c 5b dd 52 e6 dd f7 da 91 15 d7 8d 8e 92 fb c2 f8 35 28 91 87 15 a0 a1 9d 14 68 33 ea af 47 d0 07 60 12 ed 77 bc 33 cb 36 c4 54 6f d2 2a 1f a2 dc 50 c5 e2 be 68 aa a6 bf d5 21 ed d1 94 38 49 32 5f 2f 8e 9a cc 2e 23 ea 20 c3 10 a8 31 eb 8a b4 11 36 80 25 f6 04 d4 70 90 8d 4e 15 31 a3 d7 6e c8 57 ce 53 62 20 4a 16 d5 4c 1f 69 4a 6f c5 6e 64 0a 8e dc ab 9c 53 35 2e 5f 18 6b 84 4e 63 5f 65 9c 4b d8 db 3f 3a ad 16 d2 60 b9 f7 7a ea e3 9b 42 e8 eb 35 fe b9 6b 2d fc 35 59 17 17 17 67 23 fa 66 0d 5f df 72 99 79 71 3b a5 bb f9 33 f3 ba 0b de d1 Data Ascii: WdN1V ^}qe3Y9F/Cb'TDo:!QeC56\|[R5(h3G`w36To*Ph!8I2_/.# 16%pN1nWSb JLiJondS5._kNc_eK?:`zB5k-5Yg#f_ryq;3
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49852	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/76194.9a49eca4de4d4a1bd1bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4a58948f9d5d68ad4e13782cf986007d Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:45:32 GMT Expires: Sat, 25 Oct 2025 15:45:32 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605219 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 31 0d 0a 00 0d 0a 30 66 66 63 0d 0a 00 00 00 00 02 ff ec 7d 6b 77 db 46 92 f6 f7 fd 15 30 33 51 88 59 00 02 c0 3b 69 da f1 30 99 8d ce c4 71 4e e4 c9 9e 1d ad d6 01 c9 a6 88 11 09 f0 05 40 5d 42 f1 fd ed fb 54 75 37 d0 20 29 7b 26 9b 0f 7b f6 d8 b2 4d a2 af d5 d5 75 eb aa 6a a8 99 8b d5 c2 bb 17 d3 4d 34 bb 9d 2c b7 c9 ed 5d f1 61 1b 7f 58 47 71 32 fe 48 dd d3 d3 d5 b5 ed 6d b6 f9 b2 79 75 d5 eb 06 83 b6 d3 e9 74 fb 9d 6b 67 c7 9f c3 a6 70 32 a7 b0 c7 af 76 8d 6d 2e ac bc c8 e2 59 d1 18 15 5e d6 cc 6c a7 f0 e6 cd cc d9 bd b9 b9 c9 c4 4d 54 c4 69 92 bf 8f a6 2b f1 6e 31 49 93 42 24 c5 b0 89 ae db bd 3d ba 8b 32 2b 1d 17 cd 76 bf e7 b7 6d 27 Data Ascii: 00000001000000010000000110ffc}kwF03QY;i0qN@]BTu7 ){&{MujM4,]aXGq2Hmyutkgp2vm.Y^lMTi+n1IB$=2+vm'
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 0f c5 32 13 51 f1 81 f7 0c 52 54 d8 52 42 28 a6 2f c6 4d cd b7 d9 18 db 35 f5 7e 78 f3 f6 db 0f df 7c 7b 39 f9 f0 f6 cd 8f 3f 5e fc f0 6f 76 d3 06 7d 98 7c 9c 69 3e ce 58 3e a1 2a f2 ee 07 5e 91 32 6e 27 51 2e 20 81 1b 1f 4a 3e 36 c8 e0 06 64 70 c3 64 10 1d 50 b2 66 a2 b9 3b 5d a5 b3 db 06 d8 86 f8 64 ba 05 27 24 8a 0a 0e 76 96 77 db c0 86 de a7 da ae 95 1c 12 31 2f e4 8e 50 82 b4 86 68 7b 6f db f6 b0 d1 a0 8f 7d 1d e3 4d 08 03 96 18 b5 1d 83 2e 99 6d 33 c8 97 e2 3d 64 b6 80 f6 06 99 42 a8 7a 0a c6 bd b9 91 34 04 89 5a a8 93 91 f0 36 99 b8 43 bf 6f c4 22 da ae 20 85 1d e1 e5 90 02 a4 3c 22 a9 f9 9b b6 da 9e 94 65 32 a8 a3 99 7d 6a 42 28 30 29 5d d1 1a 72 13 6b 81 65 40 7b 4b bd 8b 67 7b 1b e8 33 47 28 5e 17 18 61 c4 eb 9e c7 f9 26 2a 66 cb 6f 09 ea 66 22 Data Ascii: 2QRTRB(/M5~x\|{9?^ov}\|i>X>^2n'Q. J>6dpdPf;]d'$vw1/Ph{o}M.m3=dBz4Z6Co" <"e2}jB(0)]rke@{Kg{3G(^a&fof"
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 06 64 ba 04 43 1e 5f cc 15 3d 3d 9d 00 50 37 8f 56 b3 ed 0a 53 5c aa 8d 95 28 3d 81 17 db 79 71 e4 a7 b1 78 e0 52 06 9d 9d bd 38 9e c9 74 17 6c 80 b6 cd 78 52 3a 5b f2 5b f8 a0 70 10 84 ff 84 45 03 bb 4f 5e 69 7f 87 ae 7d 85 43 77 e2 fd ea fd 20 c4 3c ff 3e ce 8b 4b d5 cd 1e ca f9 8e 37 47 52 ad 77 2b 1e 95 5f e8 b0 89 ad 78 e7 14 6e 5e f3 22 a4 93 c9 c4 63 d3 1e 1a 67 de 35 d6 b2 36 d7 b2 11 b3 38 5a b9 7c 10 c9 2d 2f 5e 83 f8 7e 8a ee d5 f1 15 6e 1c 9c b7 12 75 3c 66 77 44 e3 d5 0f 29 7c 37 06 d9 c0 a9 09 93 f7 e5 39 b5 ac fc 3e 79 6d 64 3e ef c6 cd d2 c9 55 87 90 2c 55 b5 09 c7 84 a0 ad 56 b6 b9 2c 01 79 3b 52 88 c2 d9 26 03 d9 3e bf f9 1e a4 d1 b7 11 ac 53 18 0e da 91 54 8c b3 2b ff 1a 76 6a 76 15 5c 8f c8 40 20 5f 43 ea 49 d7 d0 16 f8 d9 02 3f b4 a7 Data Ascii: dC_==P7VS\(=yqxR8tlxR:[[pEO^i}Cw <>K7GRw+_xn^"cg568Z\|-/^~nu<fwD)\|79>ymd>U,UV,y;R&>ST+vjv\@ _CI?
2024-11-01 15:52:31 UTC	271	IN	Data Raw: c9 fb 8b 77 3f 7c 78 f3 c3 37 1f 7e bc f8 f9 dd fb 4b 1d 28 2c 85 73 73 67 18 de 10 c4 06 39 b0 cd 3e 54 4b 66 80 05 f9 e5 d7 79 cd 92 82 97 13 e7 1f da 6b d0 31 10 40 c7 5a 1c 2a 49 c9 e2 9f 13 7b 39 e4 05 4c 7e 56 2d 08 13 7a f7 51 96 34 1b 7f 85 8d 8e 3c 8b 78 11 23 da 5e b3 7c 1b c8 e2 50 46 9c 3a 84 6b c5 2e 0f 18 c9 5c 1d 2f 0c c0 11 8e 50 21 3a a0 47 00 98 e3 93 c3 f8 0a 29 1b c7 c5 0e 4a 63 65 04 22 ce 84 68 17 80 ae a1 92 cc 46 91 cb e3 a3 82 44 66 79 40 8d 48 b3 56 c3 27 5b 6a bf 8c 3a 7a 03 18 73 b8 1a 01 98 15 39 db 9a fb f4 a4 71 4b ae 02 1d 94 d4 dc 48 87 26 29 39 4c e6 c8 ce ce 32 8f ac 79 52 c4 15 eb 92 0b fe b8 31 a4 0f a2 0c 68 7c 31 57 50 7f 22 7e 78 fa e0 60 c4 11 f5 cc 48 1b 51 52 4d 97 38 72 9e 7a c5 c5 7c ef 60 f3 37 60 df f9 10 d1 Data Ascii: w?\|x7~K(,ssg9>TKfyk1@Z*I{9L~V-zQ4<x#^\|PF:k.\/P!:G)Jce"hFDfy@HV'[j:zs9qKH&)9L2yR1h\|1WP"~x`HQRM8rz\|`7`
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 31 0d 0a e4 0d 0a 31 36 39 32 0d 0a b1 74 5a 54 41 c1 e7 86 90 74 7d 34 82 41 ff 39 bb 60 ca 98 e4 3f 39 d0 01 4d eb c8 a6 1e 85 1d 0a 1c d9 ac 2d 40 91 d2 6f 06 5f 5a 4a bf b9 7b e9 4c 3c 1e e1 19 80 4d 7c c9 e3 f7 71 d7 c3 b0 f1 33 a8 e7 d3 e3 a7 7b 3f b7 f7 06 24 74 b8 fc f4 40 55 Data Ascii: 00000001000000010000000100000001J00000001A00000001I00000001Q00000001B000000010000000100000001w00000001f000011692tZTAt}4A9`?9M-@o_ZJ{L<M\|q3{?$t@U
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: c9 59 ae 5a a6 48 30 28 47 36 f5 fc 61 b5 1c ff 48 39 cf c0 54 55 7f c3 9e 5b 82 12 a5 74 d1 5b 6a 92 5f 55 2b 77 4b 2c a6 42 6d 84 12 9d 32 d4 60 05 9b 07 4d 90 74 03 01 91 69 dc 26 19 5a 79 8a 74 b5 5a 85 9e 45 74 c4 40 cb 63 35 94 a4 1a d8 d8 49 be da c2 1a 06 83 30 3f 93 34 92 7f bd a0 d7 29 19 90 e7 21 89 b0 85 c6 f7 bd 56 af 63 30 a1 51 e9 e6 6b aa 0f 9f ab 5e 81 7b 7c ef b9 da 07 58 a7 26 77 9b 03 3f 50 65 f8 cc ac 21 55 96 52 44 2d 51 82 eb a2 e3 a9 65 b0 3b 7a 68 75 7c 63 c8 07 dc 95 21 af 2c 60 54 50 32 38 c7 98 a9 10 a3 bb c8 85 a3 57 c0 6b d7 38 38 ea ea 1b 48 2d fb 32 56 e4 54 2d 80 73 d4 c9 dc 89 b2 13 8e 69 02 bb c6 1f 80 17 44 61 85 f8 77 b8 8b d5 84 0b dc 12 ca 5d ca f8 74 15 21 d5 36 ca a8 46 66 fb 2c 2e 20 98 a9 81 a4 28 a3 56 51 15 4f Data Ascii: YZH0(G6aH9TU[t[j_U+wK,Bm2`Mti&ZytZEt@c5I0?4)!Vc0Qk^{\|X&w?Pe!URD-Qe;zhu\|c!,`TP28Wk88H-2VT-siDaw]t!6Ff,. (VQO
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 40 ef 8d 41 2d e3 3b f8 1c 17 c9 76 78 cb 42 54 0c 69 10 dd 9d 07 74 79 44 b3 af 6a af b2 73 34 98 b0 ff 86 16 7b c1 37 7c d1 67 84 17 80 92 92 43 70 f9 16 41 28 19 5e 0e 00 9b 8a b3 d0 57 05 26 5d c0 41 9c 18 05 07 d1 42 54 8c 4e c4 40 68 37 47 2c 78 0c ce e0 c2 c3 e7 23 d7 6f e9 ab ad f0 0b c0 f1 56 a6 2a 9a c0 97 f9 87 a7 1b ba 5c 59 6b 9e 09 84 f3 0a 08 69 44 87 e9 9b 39 94 0e 4c 0c 29 9b 42 64 66 15 a7 2d 21 31 12 ee de 44 45 e8 aa 39 95 7b 9b 71 66 cb 24 8e ca 91 ac 2a d9 f7 8c a3 98 0a e4 21 ef 0e 51 4e 19 79 8a e6 7f c7 6b 84 86 e2 01 6f 47 c4 9d 19 04 9d dd 5a d1 73 6d 8f 37 59 ca 23 be 25 78 7d e0 8b 47 10 e3 b8 fd 10 33 c6 08 5a 68 a8 e4 dd ea e1 94 f3 b0 13 44 71 9a 03 ff 4b bc 84 88 df 07 70 58 7c 62 38 0e 68 ea 89 0f bc ed 2a d3 d0 d6 92 90 Data Ascii: @A-;vxBTityDjs4{7\|gCpA(^W&]ABTN@h7G,x#oV\YkiD9L)Bdf-!1DE9{qf$!QNykoGZsm7Y#%x}G3ZhDqKpX\|b8h*
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: df 55 98 2b 3d ca 47 50 56 a6 2e ae cc 20 6b 17 28 56 99 e3 75 ed 6f 1a 0e ac fb f1 d2 88 0c 1b aa 1a 5b 5f 1c be 63 0e be 0a 99 d0 0b ab 02 91 88 c7 11 7e d9 12 72 7f f9 55 63 d2 71 21 29 92 5f b0 b6 97 6f 9f d9 91 5f 54 16 f7 28 83 b8 9e ef c8 af d7 1f d2 cb 78 84 87 df fa 82 e4 d7 7c fc d5 4b 44 77 2c 7a 77 c9 9f 52 fc 62 12 76 17 0d fa 56 30 e8 37 2c 38 41 56 e3 06 59 99 0d eb 61 bd c2 2f eb 69 d0 db 06 f0 b2 81 fb fb 7b ef be e5 a5 d9 cd 39 b2 6f fd 73 8c d1 78 85 37 08 58 2f f1 1b 16 96 f4 c5 b2 f0 da bc b7 18 06 29 d0 13 fa 08 3a 2d af db eb 56 9f 5c 45 13 4d ba 2d 30 52 8b 27 b5 5a a1 d7 1e b4 7a b8 b6 3d f0 5a 83 10 cd f1 37 f0 da 41 ff e7 56 38 c1 53 d8 f2 82 6e ab 6d 85 a1 fc 0c ba 56 0b 07 af ee 77 41 27 f4 06 fd f6 04 b7 30 3d bf df b1 5a 98 Data Ascii: U+=GPV. k(Vuo[_c~rUcq!)_o_T(x\|KDw,zwRbvV07,8AVYa/i{9osx7X/):-V\EM-0R'Zz=Z7AV8SnmVwA'0=Z
2024-11-01 15:52:31 UTC	320	IN	Data Raw: 09 cf cc 11 12 4d 8a 1f 34 96 ca 3a 89 a4 92 1f 14 92 34 4f d0 67 3b d4 3c 01 66 80 24 f6 21 37 88 29 7a 3e 3d 9b 60 63 19 80 a8 43 12 1e 62 28 68 93 76 81 1d 41 56 33 d6 a1 78 9a 29 0f cb 08 a1 bd a9 58 3e 43 49 61 d5 10 7d f5 6a f0 3a 2d 97 7a d3 02 81 dd 36 2d 90 47 c7 ba 7d f0 0a 71 30 3e 7d 9e 15 f4 c8 b3 01 2a 88 06 39 3c 7d f2 33 13 3a 49 0a f9 88 45 80 79 58 86 a2 bb c4 a6 01 3b 2d a6 e7 f9 3e 38 1f 38 f0 7b 7d 74 27 e9 07 e1 09 8b bc d3 27 7c 63 58 9c 48 a0 49 49 96 ea d9 d4 33 a0 83 9c f3 d1 bc ac a7 bd 03 eb 72 77 22 9d 01 99 5f 3c 7a 87 16 0f a5 07 79 43 04 d8 03 c6 b1 c6 2e ec 9f 3e 14 32 14 bc 1a 1d 7a 28 f4 5a 5d 1c 02 88 9c 21 30 54 3d 6d 36 b4 5e 10 c8 ee 24 a1 eb c0 ff 43 b6 10 4c b5 56 d4 16 a6 a9 86 77 5d df dd e0 a0 f2 d5 7e 7f 6d 8f Data Ascii: M4:4Og;<f$!7)z>=`cCb(hvAV3x)X>CIa}j:-z6-G}q0>}*9<}3:IEyX;->88{}t''\|cXHII3rw"_<zyC.>2z(Z]!0T=m6^$CLVw]~m
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49853	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/33274.186e9fb49d3ce6fbe3b3.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 58356d7580f0179559a776da1a5f4967 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:12:26 GMT Expires: Sat, 25 Oct 2025 16:12:26 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603605 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 31 0d 0a be 0d 0a 30 66 65 64 0d 0a bf 42 d5 b6 59 bb 2b 69 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001k00000001000000010000000160000000100000001010fedBY+i
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: fc eb 07 89 89 2b 4c 4c 93 4d 25 a6 e3 af 9c 3d a2 b7 62 b9 ce a0 9a 72 7c b3 dd 96 55 5c a5 89 86 66 c0 4c 76 9d 89 12 a5 c8 3a f4 6c 43 58 9b 55 19 cf c4 d9 9b 37 fd de d4 7a d8 df 6e d6 53 e4 9c f6 72 d9 d8 50 c0 69 2f b7 16 71 d9 d3 95 08 3a 54 d5 16 09 8a 6b 7f b6 0b 97 52 a1 e8 37 52 fa e7 a8 ec 1e 71 bf 6f ec 33 17 25 b1 a7 5e f4 d5 78 dc 2b c6 6d ce a2 44 d2 45 9e 4e 35 1b 89 c5 bd 7b 85 6a 4e 6a bb 36 e1 9e 08 aa 47 f6 56 b7 79 7d fa 24 79 a1 bb ae 3e 7d 5a 59 e8 26 4f e2 64 d1 eb 61 04 30 b7 5b 72 e7 7d fc d9 16 68 41 b4 d0 9e 0e 17 d5 32 eb f7 b2 4f 9f 7a d9 78 f9 bb f6 f5 8d bd fd 7d bf d9 1a 89 fe c1 4a 97 19 26 c8 30 41 86 fb d3 f4 42 e3 1e 32 d6 17 68 ae e4 5c 4b a9 57 98 45 7e a9 3f 60 76 da fd 13 10 3d 00 57 d5 df ce c5 75 79 b8 ce 7d 6b Data Ascii: +LLM%=br\|U\fLv:lCXU7znSrPi/q:TkR7Rqo3%^x+mDEN5{jNj6GVy}$y>}ZY&Oda0[r}hA2Ozx}J&0AB2h\KWE~?`v=Wuy}k
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: bc 24 38 1c f9 24 db 5b 82 b1 d9 03 9b d7 04 62 1f 4e 62 3e 25 18 7b cf 10 f0 3b 82 1d 74 46 f4 8a 47 04 63 2b 4a 63 f2 23 c1 43 0f 7b 6c 74 32 c6 8f ec 00 7c de 13 ec 0f 07 2e 5a e5 6b 82 b1 6b 77 20 ce 33 c6 63 60 20 ef 2b 82 03 3b 24 f5 3f 21 18 03 92 3a c0 0f 04 63 43 4e d5 fd 89 f1 e8 4f e8 6e 04 fa ee 30 04 f9 9f 04 07 f8 03 92 ef 08 46 87 09 51 93 ef 09 c6 5e 35 04 fd cf 04 83 cb 08 34 bf 10 ec b9 01 b5 ca bf 08 76 ed 11 4a fa 37 93 60 a6 01 fa 3f 4c e2 60 fb 8f 7e 57 80 64 18 62 10 a0 df 11 8c 0d 2e d5 7c 45 30 2a 4b 52 c2 a0 22 a5 0d a8 4f 25 04 07 e8 5e a8 6d 45 b0 33 0a 47 e0 59 12 8c 1d 2d 75 9e 94 60 6c ce b9 df 11 ec c3 2f 00 fc 94 61 df f6 91 37 23 d8 f3 b1 1f 46 27 24 38 08 7c 9a ad 9e 13 0c f7 0b 75 ce 35 d3 d3 f8 5b 30 85 3f 22 e9 97 4c Data Ascii: $8$[bNb>%{;tFGc+Jc#C{lt2\|.Zkkw 3c` +;$?!:cCNOn0FQ^54vJ7`?L`~Wdb.\|E0*KR"O%^mE3GY-u`l/a7#F'$8\|u5[0?"L
2024-11-01 15:52:31 UTC	452	IN	Data Raw: eb 1c b6 ca 4f 94 46 90 42 56 45 8e 63 c1 2a fa 8d f0 ea 43 26 a5 93 09 5c 0b 7f 02 cf 10 23 cb f8 42 44 df e5 f0 ec 5f a8 76 2c 45 5c 24 0b 38 3a 2b 4c 03 98 eb 7f 46 22 a3 5e 4a 0c 67 d3 15 15 7c 91 05 68 fe 55 d3 bc a3 6f c9 98 f3 44 df d7 29 0a 49 27 2a 50 58 f4 6f c2 ab 0f 95 54 55 18 a2 65 f4 1f 4a 91 b0 4c 80 45 26 a2 1c 6e 2f 02 24 2a 9d 2f e3 a8 00 8a 00 85 e2 51 15 ad 08 c9 60 1b 2d ed 8d 5f 6a 59 de d4 43 10 56 08 93 e9 25 f4 67 3a 66 08 d3 15 0c f0 e1 84 32 3f 69 58 48 94 a2 ac e2 82 16 f4 8c 26 ea 12 29 f8 7e ca 9f 32 03 3e a3 4a a2 55 86 cd 44 19 00 29 d0 9b 09 88 6b 4d 6f 26 d3 b4 80 42 f2 e2 da 94 86 af 32 f6 62 a6 6c 12 e1 8b cb 2f 5b 76 5f 79 19 af cd 45 5e a4 1f f5 68 0a 52 7c 3e a3 2f 2e b0 4a 97 82 d6 91 28 2b ac 1a 6e 12 30 d6 a2 89 Data Ascii: OFBVEcC&\#BD_v,E\$8:+LF"^Jg\|hUoD)I'PXoTUeJLE&n/$*/Q`-_jYCV%g:f2?iXH&)~2>JUD)kMo&B2bl/[v_yE^hR\|>/.J(+n0
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 4b 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 31 0d 0a d8 0d 0a 31 32 33 38 0d 0a 19 3e 99 e0 3a 2e e2 e8 4d 61 d1 af cc c1 cb a5 ea 6b 6a 6b a2 d6 50 ee 63 cd f6 04 46 f5 4a aa ad 8c ce c8 c4 ae bf 98 4d 3a 2d 23 41 a5 f1 e8 d9 6e 71 6e 0c 3f 5f b7 d3 b0 d9 ef 49 bf 66 6b 03 d8 72 20 4a df ce d6 60 97 60 27 af 7a 03 a7 38 d5 9f 07 f8 b0 3f b1 93 4f 7b d3 a7 78 b5 51 07 f8 b1 53 b2 9b 1f ed 1b 49 39 cc 2c 41 7e 3a d2 16 ca 81 9b 8c e1 63 27 5f 10 1d 97 5b e5 c5 bc df 13 38 6f 11 63 3a e6 Data Ascii: 00000001K000000010000000100000001X0000000100000001d00000001J0000000130011238>:.MakjkPcFJM:-#Anqn?_Ifkr J``'z8?O{xQSI9,A~:c'_[8oc:
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 0b 91 e1 14 45 4e 31 01 85 ee 74 73 db 9d fb 74 33 84 69 f3 72 47 07 e3 86 a2 7e ba 59 d6 87 44 aa 31 9a 43 a3 03 55 1d 50 cc d0 11 4e ea 6c a9 e1 a4 be 0f 70 e2 88 a3 6e 4e 77 0f a2 6a 9e 77 53 0e 70 e7 18 a6 4e ee fb 27 58 cc f8 bf b5 ea be c0 74 fb ff f4 91 91 59 41 56 80 6f e1 be 8c 35 7a ef 5b 4e 62 9b e4 ea b2 ad 81 e9 e0 ff 23 d3 59 f8 89 6d f9 86 4d 5f f8 07 88 3c 60 30 19 86 ec e7 02 8f da c4 80 a3 6f 5d b3 84 47 0d d7 8e 6c cb 7b e6 38 09 58 7a 06 31 f6 f1 cf 55 bf 7e a9 60 62 4a b8 45 60 0d 51 14 0a 31 1c 2b 00 06 7e 39 fc 3a 56 f8 1e 3c 28 3b 98 c8 ec 75 16 b0 20 79 5c fa a6 7f 8d ff 0f 56 6a 60 0d ce 48 00 f2 cd 81 53 48 86 0e 7f d6 92 7d 3c 2a 3f 1c 81 b8 37 64 0d 3a 84 7f 1f 5a d0 0b 8e 55 58 47 56 08 31 59 d4 85 39 ec cc 73 a7 c2 20 6d 49 Data Ascii: EN1tst3irG~YD1CUPNlpnNwjwSpN'XtYAVo5z[Nb#YmM_<`0o]Gl{8Xz1U~`bJE`Q1+~9:V<(;u y\Vj`HSH}<*?7d:ZUXGV1Y9s mI
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 02 5a 04 f4 b7 85 1e 30 3a e1 3f 2d b4 cf e8 89 47 7f 5b e8 80 d1 77 24 1c 32 7a 30 a5 bf 2d 6a 3a b6 38 20 37 6e 02 02 ed c4 f4 57 52 e3 ba 0b a2 1e a8 f2 ed 46 2e 37 49 82 a8 22 62 d1 d2 36 5f 1d a0 06 1d 4e ea 8a d4 b1 92 fb ed 37 a5 36 2d 90 bb dd d2 aa 24 b3 98 4f 22 84 9f 19 1a 9e 08 d2 5c 67 24 e5 50 25 ca 54 3c 76 a3 39 78 f6 46 1b 2a 7d 71 e8 25 67 b4 91 82 77 7a 34 18 3d 32 a3 92 40 66 c4 05 59 a4 23 c6 4d 53 a9 52 12 55 26 5e 55 d2 bc 00 ff ea 5e 2b eb ce 6f 3d 98 78 1b 05 57 eb 53 aa b3 1d b8 93 a1 6a d7 12 cf c9 d0 ad b4 eb 3b 54 74 c9 d8 ad a9 a4 be ee d2 60 53 ed 36 03 07 37 33 e8 84 78 af 28 7b 80 1b a5 fb 35 b9 4d 83 1b a7 18 42 92 46 d5 e7 36 49 30 c5 13 46 aa 56 7c b6 70 a7 a0 76 0f a1 5e 7d 94 a0 6e 2a 3c ec 81 f0 e8 8a 47 76 32 9b 4e Data Ascii: Z0:?-G[w$2z0-j:8 7nWRF.7I"b6_N76-$O"\g$P%T<v9xF}q%gwz4=2@fY#MSRU&^U^+o=xWSj;Tt`S673x({5MBF6I0FV\|pv^}n<Gv2N
2024-11-01 15:52:31 UTC	560	IN	Data Raw: e5 41 51 6a b8 83 0c af 43 89 40 5d b4 27 bd b0 b6 16 e5 8d fd cd cd 2e 52 d8 ac 9f 03 34 af d8 8c db b6 b3 ab 70 2b 84 f9 d2 90 bc a9 f2 1b 5e 9e 68 90 63 b0 d1 49 21 3d 75 03 d3 b3 7f 30 1b 62 91 2f a9 b4 5d a6 92 2e c4 e1 fd b9 ad 0f 74 3d a7 39 a7 3b 02 1e 61 6d 11 f8 d1 bc 05 47 a4 9a 78 88 e0 f2 a6 9d d3 b2 9d bd 82 db c4 97 b8 7d 7c 03 37 c7 37 4d 9f 5b c6 e5 79 53 dd 08 1e 29 fb 1b cd fe e6 f4 30 7a bb b5 e4 93 95 37 d3 14 cf f2 c1 bb 42 cf 46 9e d2 ff 70 39 93 6e d8 92 a1 82 0a 9e f2 5c 82 f7 1a c4 b2 8c e4 63 35 0a 45 4f 27 47 50 ba 40 4f de ca d7 6b d4 83 93 87 27 22 ed ab 74 49 67 88 f1 aa da 5a 7b af 55 36 32 b4 5f b0 6c 53 ab 06 92 3f ed f0 6c 9e 4a 79 6d e9 df 59 8d 79 4e bb 8b e6 01 d8 df 13 06 8f 5a 36 43 50 5a 12 7b c9 30 17 c9 ea be 91 Data Ascii: AQjC@]'.R4p+^hcI!=u0b/].t=9;amGx}\|77M[yS)0z7BFp9n\c5EO'GP@Ok'"tIgZ{U62_lS?lJymYyNZ6CPZ{0
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49854	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/21928.84211e4ee5e5aa330648.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: fb59414f3cc7a6bd94c4be75d93e785b Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:12:45 GMT Expires: Sat, 25 Oct 2025 16:12:45 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603586 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 31 0d 0a ee 0d 0a 30 66 65 65 0d 0a f7 fd 15 30 93 f1 92 09 08 f1 26 89 a2 4c 2b 8a e2 9c f8 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001{0000000100000001F0000000100010fee0&L+
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 68 30 a1 9a 82 99 9f c9 bc e0 b4 c5 8c d2 98 84 20 a5 f6 82 8c cb 49 9e ec 96 52 96 b4 6a 82 25 a5 87 3e 51 10 52 63 e1 88 28 0e b9 f7 a1 1a 45 3e 51 15 2a aa 15 33 63 46 f5 c6 fa 6f 38 27 2a 42 a6 34 4c 88 2b f8 4d 8d 85 29 35 10 e6 44 76 b8 e2 4c 77 54 2b 94 06 fd a6 c5 87 bf c9 32 9f 25 09 75 56 f1 62 5b 28 88 08 7c 8b f5 df f9 47 7c 19 cf 7c f9 9d 4d f9 2f 55 3c 8e 89 da 31 2f 89 89 4f 94 4d 46 d4 8b 89 a2 06 27 11 35 32 61 5e 4f a8 8a 89 8c db f4 6f f4 65 9a cf a9 ed 68 84 96 89 5f 51 c0 c2 26 0a 68 de 45 01 27 8d a9 82 28 0e a9 b6 68 31 4d 62 a2 2a ca 28 c7 07 9f 1a fa b0 a0 3e 7d a0 cc 1f 78 68 6f 14 c9 a8 1b ae fa 86 e9 9e f1 28 ce 12 ca 38 5b 52 1f e6 dd 25 fd ee f1 e7 1e f5 63 8e 95 47 95 ce 7d 62 da 9c d9 3f 0f a9 f1 39 4f a1 79 44 7d 9b 27 9c Data Ascii: h0 IRj%>QRc(E>Q3cFo8'B4L+M)5DvLwT+2%uVb[(\|G\|\|M/U<1/OMF'52a^Ooeh_Q&hE'(h1Mb*(>}xho(8[R%cG}b?9OyD}'
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 0a f3 a9 f9 32 55 34 f9 f4 b7 4a 49 a2 0f f4 b0 3e 71 40 11 7f 40 2b 5c e1 46 23 50 e6 39 65 ee 80 7a 64 3d ac ed a1 79 94 84 f7 cd 20 99 25 29 51 4c 35 3e 3b a0 b2 1b d5 1d 4c 48 69 11 f2 d0 3e 72 43 b7 73 44 ff 37 db 5d fe 97 9a a5 fd 2a 8a 6f ca a5 6d 29 54 1e 8e 11 86 63 44 c3 81 ad 19 21 24 d0 bb c3 1a 80 92 e4 46 59 4c 1c 61 33 a3 d2 82 24 e7 ae 6d 7a 7c d7 31 9f ee 4d 5a 85 3d f7 c5 f3 b9 9f 62 c7 d4 84 e4 67 59 5e ff ca 4f d3 64 85 41 7e 76 40 6d 4b 57 52 74 26 33 94 6b a5 4b 8a 46 c4 11 89 cb 4f 9f 20 e6 78 4d da 7a 53 0b dc c4 8b 13 3c 8b 27 5a 56 a9 61 f7 a8 75 b0 99 db cd b7 2a 78 36 ec 7c fa b4 99 ef 4f 9d e1 b0 75 06 86 1e 0e 5a 5a 08 97 f3 78 01 c6 2d 88 71 60 a3 a3 e7 ca 71 0b 03 6b a6 4a f7 10 5f c8 fa 10 45 51 8e 1d 66 3e 25 c7 10 b9 59 Data Ascii: 2U4JI>q@@+\F#P9ezd=y %)QL5>;LHi>rCsD7]om)TcD!$FYLa3$mz\|1MZ=bgY^OdA~v@mKWRt&3kKFO xMzS<'ZVaux6\|OuZZx-q`qkJ_EQf>%Y
2024-11-01 15:52:31 UTC	442	IN	Data Raw: 7f 4f 85 e7 f9 2b e5 67 f9 6b 78 e5 90 67 4d 8f 89 1b 24 ef f5 7a 55 82 a6 90 4b d6 a3 c7 f5 86 07 8c 22 b6 01 1b a6 a3 d2 1e ac c5 ed c4 e1 13 1b c8 91 d1 b0 a1 1c 48 af 02 c5 91 be 55 ea d4 78 9d c5 c9 ed 94 fa 03 15 f9 59 83 7f 95 e2 d0 1e 66 ea e4 f8 0c 51 07 c4 b1 5e 47 bf 48 96 36 db 00 03 60 5a 82 8b 4b 41 84 0e 5b 2d 3b 49 a4 9c 3a 5d 7a 4b 42 05 92 34 27 89 44 1a 94 a4 97 66 f3 cf 51 08 b7 ea 0a 1e 53 56 08 98 12 f6 10 99 09 60 d0 b0 8d 91 7b 97 5e 0d 73 8f e0 44 c6 cf 60 d8 02 39 84 14 56 e9 db e4 25 aa ad d7 c9 58 dd 53 e3 ae 76 64 08 36 5a 21 2d 5a 40 a1 6c 6b 12 10 ca 83 a1 35 b9 21 6f 6b ca 09 81 54 46 46 27 55 7f 5b aa 2c ff 0b 43 c4 75 b8 41 ac d5 4a 93 88 ec 78 00 47 55 a6 58 f3 0a 0e 64 72 c4 8f d0 b3 d4 74 6c 17 2b 21 6c a1 f1 40 37 84 Data Ascii: O+gkxgM$zUK"HUxYfQ^GH6`ZKA[-;I:]zKB4'DfQSV`{^sD`9V%XSvd6Z!-Z@lk5!okTFF'U[,CuAJxGUXdrtl+!l@7
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 30 30 30 30 30 31 0d 0a ca 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 31 66 61 63 0d 0a 94 15 91 d1 3a 07 34 6f b7 87 c7 09 3a 09 d4 d0 4c 37 9a a7 7b 24 d3 a7 4f 44 09 ed f3 28 03 19 39 e8 99 19 ca 8b a9 0a 6e b0 09 d3 78 46 75 98 0d bb 11 5f 41 7d b1 a4 4d 66 78 2d 0e 19 5a c6 0c Data Ascii: 00000001>00000001}0000000100000001000000010000000100000001_000000010000000100000001000000017000000010000000100000001001fac:4o:L7{$OD(9nxFu_A}Mfx-Z
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 7e 39 ca 8d b0 17 de 9a 8d 92 bb 4b 45 aa fa 1c 62 0e 10 d3 fe b0 37 f2 d9 55 e2 de 7c e0 6c 64 94 55 12 63 24 5e e9 b8 b4 37 c9 8a a2 e6 58 10 8a f8 7d 93 24 b9 07 58 22 bd 97 46 93 14 cd d6 6b ef 68 0e 43 d0 5e d5 2c 54 9f 36 fa 0a 60 8e 8d 62 90 b5 54 4d a9 b1 9d 78 8f d5 05 ed 6b 6c c6 57 7c e2 c0 84 8c 69 0a 10 c3 08 69 4c 76 8e 28 a9 7d 14 d5 6b d8 4a f8 69 30 6d 22 a6 06 91 3d 59 93 02 20 28 e6 47 f6 54 a5 26 b1 01 4f e6 83 6c d8 66 10 d8 b3 e1 54 eb 13 6d 86 ef aa b2 12 f0 67 e9 16 58 20 46 9d 6b dc d4 74 ac 20 82 60 0c b3 45 d6 10 20 61 5a b0 07 c5 cb 5a c0 1c a4 49 60 91 59 91 88 44 98 68 12 d2 9f d8 e8 70 5f 49 49 34 c9 53 f0 1d 8e 9c 60 3a 34 a1 f6 c0 00 66 be 2a b6 31 de ee 79 63 76 77 7a 18 8d 58 86 2f 0b 36 bc 89 42 71 58 21 20 fe 4d 15 01 Data Ascii: ~9KEb7U\|ldUc$^7X}$X"FkhC^,T6`bTMxklW\|iiLv(}kJi0m"=Y (GT&OlfTmgX Fkt `E aZZI`YDhp_II4S`:4f*1ycvwzX/6BqX! M
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 4f 0b e1 51 a5 72 91 09 60 1a a2 91 e2 ee d0 07 3a b5 5b 99 a4 dc 85 3c c5 0d 29 70 f4 98 83 53 5b b9 2c ce f7 f6 f4 94 99 a7 39 28 e5 75 63 f2 07 70 e1 82 4e 85 b2 af 49 0e 86 fe 25 05 aa 2a 83 c1 52 bb 26 ea ce 4a f1 22 f2 4b 0b c6 0a 27 3d 1d ed 85 67 9b 4e 32 62 77 05 bf 31 38 40 57 95 f8 13 b6 32 cb 1d 17 03 82 6f 38 c2 ee 35 0e b1 22 b2 47 6c 3d ab 6a 40 b1 ae 09 8c b4 92 3d ba 7a c2 e5 f3 c3 3f 80 21 0d a2 f7 2d c6 c8 d4 6d 67 d5 b1 67 0b 1a 8d 6b 90 67 6c 3e 82 c7 8c cc 40 48 51 7d b2 29 33 46 7e 38 51 4e 4a e1 47 d8 5d 2d e0 e0 72 46 93 26 45 9d 00 d0 cc 85 bf c5 37 8b f5 6d 67 de 94 23 44 ce 8f 30 38 12 9c d3 9d 98 a8 07 66 39 98 3c f3 46 b8 23 e5 47 d4 89 e3 c4 90 2f b8 01 c6 1c f0 fa fb 1b 00 b6 35 2a 2c 95 db 5c 52 35 01 4f 6d 3e 8e c1 c7 31 Data Ascii: OQr`:[<)pS[,9(ucpNI%R&J"K'=gN2bw18@W2o85"Gl=j@=z?!-mggkgl>@HQ})3F~8QNJG]-rF&E7mg#D08f9<F#G/5,\R5Om>1
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 46 31 66 57 4e 78 9e f6 4a 49 96 a2 8f a3 3c 76 f0 0f f6 56 7c e3 8c 33 5c 0a 03 1f 50 cb 59 dc b1 23 88 3a bb 09 32 9e 85 51 46 53 ad 08 46 e3 53 24 c3 da 4b 6e 09 40 a0 6e c9 0c f4 b3 03 69 b2 b4 7c 8a 2c 38 c6 89 71 b8 e4 12 2a d4 53 76 cf d3 a7 4f 65 46 6f 3c fe 4b 2c 09 28 1e 6e 20 0f 62 25 95 f9 e5 93 35 f0 17 14 83 8d 82 6c 2c 95 f9 84 65 97 a6 1f 5b 8f 89 66 ab d9 19 ae 2e 44 64 ca 1b f2 ff c1 90 49 56 af d4 98 6f 1e b3 36 a4 ba 0e a0 22 72 56 ec 02 d7 e6 ce f5 d5 64 bc f4 ec 49 2b 80 1a cb 8c ea 42 90 b2 b2 0c 70 0a ad 84 bd ac 8f d2 92 36 7e 0c cf a8 09 ed 2f 3e 7b 87 bb 16 e9 16 02 b6 b9 ea 87 8d 2b 39 50 41 aa da 92 5b 02 46 31 0d a9 59 0e 7c c7 d7 14 60 34 02 03 27 80 e6 30 c0 cf f2 d0 3c 2d 17 3e 07 95 eb 25 64 95 71 56 cd 36 6e 42 22 8b 59 Data Ascii: F1fWNxJI<vV\|3\PY#:2QFSFS$Kn@ni\|,8q*SvOeFo<K,(n b%5l,e[f.DdIVo6"rVdI+Bp6~/>{+9PA[F1Y\|`4'0<->%dqV6nB"Y
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 2e 47 5c 75 be 1a 65 07 45 6b 07 e0 e1 08 17 e0 46 f1 c1 ab 97 17 2f 7e b9 7c c1 4d 1f 0c 52 d0 f3 c0 d7 5b 8f e8 c2 3e e7 ab d6 a8 17 86 fe 29 27 01 97 8a 26 09 12 8f 8e da ad 71 47 12 17 cb 14 5b 10 4a 1c f7 3a 41 5b 27 02 0a a2 c2 fc 9f 24 e1 a2 7b a4 04 b8 15 b4 d3 92 14 c4 12 c4 13 2a a9 0e 8f a1 87 24 f1 1e 0b 85 24 c4 57 e3 40 9d 1c 1d 4b e2 24 45 20 07 d2 ba 27 7e d0 0b 24 2d 57 3e 6e e3 fe aa d3 0a f0 9e 2c 49 0a ee 7d ca d5 e9 1f 8f 46 87 92 84 0b f7 03 4d 89 24 b0 b0 a1 ea c7 63 49 c0 81 76 c8 09 74 89 fe 2b 93 f0 22 84 94 0a 76 f9 3f 2b 1d 12 81 8a 9f d0 8f 95 8c 95 48 c9 1d fa b1 92 d1 2f 24 ab 23 fa b1 92 21 da 91 1c f0 7f 56 32 44 35 92 47 5d fa b1 92 8f 38 79 8b 42 48 64 e4 ee 85 f4 63 e5 ee 73 f2 16 dd 27 9c dc f6 e9 47 72 d3 ed 90 b8 79 Data Ascii: .G\ueEkF/~\|MR[>)'&qG[J:A['${*$$W@K$E '~$-W>n,I}FM$cIvt+"v?+H/$#!V2D5G]8yBHdcs'Gry
2024-11-01 15:52:31 UTC	1260	IN	Data Raw: c8 67 f6 ba 00 a6 d8 ff 48 b7 27 9d 31 c2 79 27 69 24 12 85 0f 5a e7 17 7d 63 e6 14 b6 47 e3 b4 64 56 1b 9c 2a cb 59 fc c3 3d b0 c4 bd a2 8a 52 de 22 c0 1b 56 19 9f 86 1b 8c 70 16 eb a6 49 df d7 fe 73 ae a7 42 e7 1a af aa 79 a0 20 0d 98 4d 33 9c 8e c1 f1 ab 81 84 fd 20 ae 93 62 29 1e 34 36 d7 12 92 34 dd a6 97 25 99 26 05 7c 55 06 87 d4 69 a6 26 66 09 cb 5a 9a b1 e0 2e 06 4b 37 52 d2 2b 07 c1 74 fa 00 c8 0d 47 7b 3c 98 b5 d8 5e 0f 06 98 8b 1f 61 39 d1 32 8e 62 00 38 0f 0b dc eb 41 b3 b8 75 aa e7 31 83 fe d2 00 b2 e3 ad da 37 51 4e ef 27 84 75 88 c3 61 98 df 74 77 22 2e e5 cc cc 89 41 77 5f 36 a2 79 ef 43 84 d9 e0 bd 70 7b 1f e3 1e 68 60 c3 d4 ce de 2c a1 0f 1b f0 b3 39 30 27 70 bd ec e7 f3 dc 93 0b 97 b3 94 ac 20 3e e9 8e 33 93 80 92 02 1a 97 60 98 07 6d Data Ascii: gH'1y'i$Z}cGdV*Y=R"VpIsBy M3 b)464%&\|Ui&fZ.K7R+tG{<^a92b8Au17QN'uatw".Aw_6yCp{h`,90'p >3`m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49838	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	510	OUT	GET /gui/74278.df011db4b71607f93e04.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c3d7e804244606b2077eb307c19dd06b Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99252 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 63 0d 0a 00 00 00 00 02 ff ec 5d 7b 77 db b6 92 ff 7f 3f 05 c3 de e4 92 5b 8a 16 a9 b7 64 c6 4d 9d 74 d3 b3 4e d3 8d dd dc bd 75 bd 29 25 c1 16 1b 8a d4 92 94 1f d7 d6 77 df df 0c 00 92 7a 38 76 72 db dd 73 cf de 9e 26 22 5e 83 c1 60 30 18 cc 0c 10 2b 17 f1 b9 7b 25 c6 8b 70 f2 f1 70 b6 4c 3e 5e 16 1f 96 d1 87 79 18 25 c1 27 ca ee ee 4e cf 6c 77 b1 cc 67 d6 e9 69 af ed f7 fa 67 ce 6d db 1b b4 9b 43 ab 70 84 13 d9 c1 f3 5b 73 99 0b 23 2f b2 68 52 98 a3 cb 30 33 f2 20 b2 da fd 5e b3 6d 3b 19 3e bd 6e b7 dd b1 9d 04 9f 83 56 bf eb d9 a3 58 14 46 ea 84 4e ec 4c 9c 59 50 04 cf 0b 6e 37 0d ce 97 Data Ascii: 0000000100000001000000010000000100ffc]{w?[dMtNu)%wz8vrs&"^`0+{%ppL>^y%'NlwgigmCp[s#/hR03 ^m;>nVXFNLYPn7
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 69 67 ea f6 3b 1d 7b c4 b2 d1 88 83 53 f3 3c 8a 0b 91 99 8e 19 47 f3 a8 30 cf 9c c9 76 a6 63 a6 19 96 29 0a 67 28 84 64 89 8a 9b 0f 71 94 a3 fa 48 ef 23 c6 94 36 07 2d 33 0c 9d 4d 92 14 1b 11 33 85 1b e5 fc 8b 3c 5b cb d0 15 12 77 77 55 6d 02 41 c2 30 0a a4 04 2c 0e e8 77 68 2e 21 92 68 23 98 9a 4f f4 5e 76 7c 33 1f a7 f1 b3 67 c5 a9 fc 72 23 0c 24 84 b4 3f bb bb 2b 4e cd 6f be d1 69 60 09 14 08 ce 93 20 92 e0 73 07 9b ad 83 bd 19 62 df 89 83 27 4d 0c fb 89 37 2a b2 1b c2 36 09 ac 28 88 dc 49 18 c7 84 ab 9b 60 91 3a 24 74 81 1c 8a e5 ce 64 45 f6 93 00 f0 e4 48 46 00 e2 ad ca 5d 71 f4 04 12 c4 ca 83 44 02 89 00 64 9a 26 82 f6 c2 50 ea 19 b9 14 db 98 15 b5 75 02 98 80 ca 00 5c ec d1 6a 42 42 9c 68 07 b4 b0 50 b1 01 61 f0 40 e7 e6 56 a1 f8 04 03 57 23 72 25 Data Ascii: ig;{S<G0vc)g(dqH#6-3M3<[wwUmA0,wh.!h#O^v\|3gr#$?+Noi` sb'M7*6(I`:$tdEHF]qDd&Pu\jBBhPa@VW#r%
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 66 3b 8b 4d 14 96 7f 14 0a 37 41 7c a0 26 e2 47 91 bd 62 64 78 0e 30 0b 44 75 07 7f eb e9 08 09 7b e6 12 3e 5a f3 1e a1 86 aa 74 1d c9 a2 1b 4c 8d 95 28 99 95 14 fa bb 3b 29 b1 a8 a6 70 61 22 fa 20 09 b0 56 49 9b 5a 44 49 5e eb 36 9a 62 b9 28 62 45 53 87 8d 12 55 0e 8b 55 1c 43 6a 35 a0 9b c1 74 98 0f 4f 0b 17 4b ff 43 9c a6 1f 97 8b dc 91 a9 7c 39 9e 47 79 4e 86 a8 33 8c ca 46 f7 b0 47 61 78 f2 20 c0 fc 09 13 a5 3d 84 21 0c 15 05 d4 fc 3c 8d 2f 85 85 4c e7 12 db 16 b3 ee 83 14 5b 28 06 ce ee ee 7c 48 f2 ff 6f d4 53 cc 61 68 22 d2 f9 ee f4 c6 b9 84 ed b7 64 23 4b 8a c2 fa 99 02 c4 9e 2e 71 78 e1 15 0c 41 61 41 b2 68 45 4d 28 9b 4e 04 ee 01 1b 90 d4 61 56 c0 7e 07 6e 91 53 3e 2a 68 ef 82 72 45 0c 01 1b 23 d4 a0 5b c9 2f b9 a3 b9 22 5b 91 5e e4 40 84 40 c4 Data Ascii: f;M7A\|&Gbdx0Du{>ZtL(;)pa" VIZDI^6b(bESUUCj5tOKC\|9GyN3FGax =!</L[(\|HoSah"d#K.qxAaAhEM(NaV~nS>*hrE#[/"[^@@
2024-11-01 15:52:31 UTC	278	IN	Data Raw: 30 96 5d e0 9c 4b 46 40 c4 2b 88 6c 0e 17 58 21 d0 60 bd b8 0c 05 a8 61 48 4e 6e 9c ed d8 c0 43 47 63 e9 e8 9d d4 9d da b5 da 95 b7 17 e7 20 d5 6a b7 b7 57 35 22 27 f3 04 5e de 7e af 7d af 8c d3 b2 4d f9 61 29 42 48 05 0b 91 77 56 05 0b 91 77 b6 eb f7 e1 8e 62 ef 6c bf e3 13 b7 c4 ec a8 1d f4 e1 be 9d 50 b3 8e df 86 7f 77 46 cd e0 56 86 eb 9d 32 3d af 83 cf 25 3e bb ed 76 b7 2b 85 e3 c2 99 3b 37 ce b9 73 e9 8c 9d 0b e7 d8 b9 92 a2 52 9f 9a 8c 6b 32 42 69 1b fb 3f 9d b4 ff cf 9c b4 38 2f 62 f6 a5 49 fe 1f df 49 2b 47 a3 8f b2 5b 9e eb 7f 30 27 ad 1c cd 1f e4 a4 25 59 f4 f1 9f aa 92 8a 1e fc 7b a3 0e 8f 02 6b b1 a1 2d 65 5f 10 78 88 63 22 87 9f f0 46 0f 83 e2 9c e2 06 a6 50 2a aa dc ab 68 5a cc 02 0f e2 5f ee c1 33 41 7e 89 a0 d5 6c ca 34 40 88 ef d8 15 c0 Data Ascii: 0]KF@+lX!`aHNnCGc jW5"'^~}Ma)BHwVwblPwFV2=%>v+;7sRk2Bi?8/bII+G[0'%Y{k-e_xc"FP*hZ_3A~l4@
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 31 0d 0a ac 0d 0a 31 35 62 36 0d 0a eb c3 34 5e ce 13 0a 8c e1 2a 63 aa 10 60 27 85 63 06 a1 43 b0 fc 70 f6 1c fe 6c 04 31 04 b7 47 af be 3b 19 7a 5e d3 79 f7 fd bf bd 96 5f df be 3d 39 79 fb 66 d8 6e 3a 27 6f 7f c4 0f ce 79 a4 ee 5c 1f 93 8d 50 82 fa 71 91 97 a0 6e 6a f9 f3 f6 5f ab 7c ff 9e 82 eb 17 d7 51 2e e1 c4 bd 3e 1c a3 15 74 28 5f d1 e4 63 8e 8d d2 c1 19 af f1 d3 31 1d 90 26 ee bf ff bb ab 55 08 71 c4 a6 4a cb 3e 30 9f ce f7 9e 4e 11 39 Data Ascii: 00000001C0000000100000001+000000010000000160000000100000001000000010115b64^*c`'cCpl1G;z^y_=9yfn:'oy\Pqnj_\|Q.>t(_c1&UqJ>0N9
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: d1 de 1a 5b b5 c8 6b d2 8f 80 ec d3 40 0d 28 5b 71 60 4e 96 19 0c fd c5 24 8d d3 cc 7c ae 9c 97 fb 7b 54 63 7d 58 75 19 29 77 c2 3d ff 6b bf e9 60 a3 82 bf f8 fc a5 bc d9 a3 ce b9 50 3c 29 30 ee 48 5c 40 ed 3c a2 4b 80 27 92 c6 27 80 0b 83 38 9d e5 69 8a 55 ee 67 c9 87 0b 30 c1 c5 a3 99 80 38 e0 1f 83 0d 36 c4 03 4d d4 ff 15 1b d4 7c d3 0f b1 82 94 0e 58 6a bc b2 1f 64 8c bc 0a 6d f9 22 e6 b0 e9 7e ef 6b 5a 88 62 fa 2e bd aa 47 ae 30 02 72 13 d3 a7 02 1d f3 f4 9f eb e2 8b 44 93 2d 4f 1c 33 68 ae 31 69 af 0a e6 0f e9 54 20 70 a4 f4 14 da ab 9d 35 6a 01 33 e0 ff dc fd cb 4b dc 45 92 08 48 cb 1b 82 00 e9 8c b3 bd 47 0a 0e fd a8 0e 38 88 f0 23 45 96 ae fb 71 6d b5 bb 96 71 7f 64 da 41 e0 9f 2c 53 36 8b aa 10 06 9a 11 23 70 54 20 02 9a 2b e5 b3 10 3e d2 77 69 Data Ascii: [k@([q`N$\|{Tc}Xu)w=k`P<)0H\@<K''8iUg086M\|Xjdm"~kZb.G0rD-O3h1iT p5j3KEHG8#EqmqdA,S6#pT +>wi
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 4c a9 51 ee 34 18 a9 f3 3d 5e dc d1 8a a7 54 8b d5 49 77 9a d2 b3 88 16 6e 89 44 e5 c0 24 e5 74 09 5b 68 73 97 d9 8b 07 b9 d6 77 4d 67 ab bb 6e 70 ed 06 07 ec 75 42 7d 31 40 40 a2 bb d0 64 ab 92 5c 01 53 d7 1e 22 ea 69 ae 73 be 99 c8 17 8f 2a 35 9e ac 61 ea 16 00 bd 66 f2 dc f3 f1 ca 11 d8 fc 11 21 63 89 c3 01 61 7f 25 fb c2 fd 81 60 7c ad eb 56 b3 a8 d4 e1 3f 8d 83 22 7a 15 d3 75 5f cc 1a 87 58 20 c8 dd 4a c8 04 f8 bb 86 af e9 70 1c b9 0c ea 11 68 72 c6 69 c0 78 b3 50 df b7 52 51 3b 51 4e 77 25 2e f0 f6 88 9a ce 6a 0c 5b d1 6d 4c 33 0e 46 c2 4b 33 44 71 19 2b f7 49 5a 72 9b ef 38 f2 91 43 be 76 98 8c d4 eb 86 74 16 c3 7f 9a ab ea 03 50 6b f1 91 23 f8 64 68 dd f6 18 64 b0 de ef 3c 88 ba 28 a4 e0 98 4f 4a 43 39 e4 da e6 86 43 29 b4 0a 3c 9f c1 2f 32 1e c3 Data Ascii: LQ4=^TIwnD$t[hswMgnpuB}1@@d\S"is*5af!ca%`\|V?"zu_X JphrixPRQ;QNw%.j[mL3FK3Dq+IZr8CvtPk#dhd<(OJC9C)</2
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: ba 3e 1e aa d6 17 8e 86 7a 05 af df ff 71 20 bd 9a 78 94 63 0d e6 06 59 a3 e4 3c 5d ab 20 fb a9 46 43 15 38 b2 b1 81 f7 8c e1 83 85 97 4c c1 93 ae 25 85 23 27 7c bc 4c fd 48 9c 46 cc 0a b4 43 ad 41 c3 f5 93 2c fd 28 d6 bb 5f eb d0 df 59 65 13 43 c5 73 b5 b8 ef 9d e3 de aa f6 a8 d1 93 f2 cb 37 07 76 a2 62 8f ca 39 6a af 6a 2c 1a af 1c dc e1 ef b6 e8 85 9b 5b 32 98 2f f0 9e 5b 1e fc 99 2f 68 5c 46 e2 ea db 14 b1 d8 4d 6c fe 9d 2e fe 37 55 80 a5 3c 44 5f cf 63 dc b3 34 67 45 b1 18 ee ed 5d 5d 5d b9 57 2d 3c 4f 74 b1 87 b7 02 9a 74 e3 c0 7c 4e 12 76 9f d6 0f 7d 18 fa ca 07 00 c9 b4 14 d1 81 59 66 64 e8 cd ef ab 52 3e a0 05 f4 10 7c 5c 13 63 5b 0b d4 31 be 9a b6 a6 bd f3 73 9b db ed c9 4e 89 63 65 27 d4 9e 29 13 98 a4 84 a4 d3 a9 82 0f 17 09 a2 55 70 d9 62 b3 Data Ascii: >zq xcY<] FC8L%#'\|LHFCA,(_YeCs7vb9jj,[2/[/h\FMl.7U<D_c4gE]]]W-<Ott\|Nv}YfdR>\|\c[1sNce')Upb
2024-11-01 15:52:31 UTC	45	IN	Data Raw: 7f 22 cf 9d 9e 37 3d 6f 3a 6e 8f 7b 5e b7 d9 3b 1f b4 44 b3 ed fe 86 77 85 c3 c5 ff 00 00 00 ff ff 03 00 80 35 9e 50 89 6f 00 00 0d 0a Data Ascii: "7=o:n{^;Dw5Po
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49856	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	702	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d798c185489a232ef1358412c061624a Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:44:04 GMT Expires: Sat, 25 Oct 2025 15:44:04 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605307 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 62 0d 0a 00 00 00 02 ff 94 5a 59 73 db 38 b6 7e bf bf 82 e6 74 a9 c8 09 c5 c8 4b 36 2a b4 db 93 4e dd 72 75 a6 3b d5 4e c6 0f 6e 5f 37 44 41 12 62 0a d0 80 90 14 b7 ac ff 7e bf 03 80 8b 25 a7 27 f3 90 0a 04 02 38 07 67 f9 ce 02 87 cb 8a 07 95 d1 a2 30 e1 30 aa 78 39 49 d7 7c b4 60 c5 dd bb d9 52 de ad cc ed 52 dc ce 99 90 f9 5f 7c 7b 78 b8 be 89 d3 c5 b2 9a 45 d7 d7 af 06 83 e3 97 37 c9 e6 68 f0 f2 cd 9b 2c 32 89 4c 78 9c 9f 6e 78 aa 23 19 27 3c 1d 47 32 d9 fc cb 7c 16 97 eb 0b 59 19 56 96 5c 67 11 96 7c d8 c6 43 1e bd 79 fd e6 30 1e ae 98 0e 74 ce a3 Data Ascii: 000000010000000100000001000000010000000100ffbZYs8~tK6*Nru;Nn_7DAb~%'8g00x9I\|`RR_\|{xE7h,2Lxnx#'<G2\|YV\g\|Cy0t
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: c6 36 57 2b fe 7e c5 a5 f9 20 2a c3 25 07 e2 2d 17 40 75 3e 51 4b 39 0e 2d 67 71 9c 61 cb 8c b6 e8 94 c9 94 8d 11 d0 00 08 b8 69 a3 5e 09 f5 3e 7b 46 dc 25 76 c1 ce 99 08 7a 86 17 08 2b 53 4e 67 96 30 2a fb df 23 85 90 71 4a 00 19 6e 0d 5b 4c 0d d3 53 c8 06 81 30 b5 db 13 95 73 a8 83 98 4f 58 be a9 d6 19 4f 44 f5 fe ab e1 5a b2 32 53 89 d2 62 2a 30 b4 b4 33 b3 1d 1e a8 5e 4f a7 73 09 05 b2 54 54 9f ed c5 72 42 3b 9d 8e 45 b5 a0 88 69 17 47 e4 29 93 48 24 0c d7 00 40 ba 18 3d 06 54 e7 e2 0c 40 e9 73 01 c0 db 27 31 e7 6a 69 3a 01 34 de ec 6c e8 f5 64 ba 66 08 4d 72 ea ac e7 69 62 a1 5f 13 12 51 18 d7 d1 60 10 67 21 43 e4 5e c1 bb 11 af 88 38 38 2f 4a ce 74 4d 96 78 89 13 f5 f0 40 b6 d5 08 9f e3 00 5c e9 be 63 43 4d a0 25 c5 41 9c 12 a1 51 b2 95 98 32 a3 60 Data Ascii: 6W+~ %-@u>QK9-gqai^>{F%vz+SNg0#qJn[LS0sOXODZ2Sb*03^OsTTrB;EiG)H$@=T@s'1ji:4ldfMrib_Q`g!C^88/JtMx@\cCM%AQ2`
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: ed 5c 8b ec 6c 33 56 d2 a6 19 99 1f 1d 26 b6 e9 95 99 6b fd ec d9 cd 76 bb 7d b2 c9 77 21 b1 0a 0d 44 66 0c 9f 2f 4c 60 54 e0 6c 81 07 52 c9 be 1d a3 c9 16 d8 ca 90 2a ea df e5 05 da ab 7a cc 01 d7 2a 18 e1 0b 99 12 96 24 76 03 a3 46 53 a0 6c 4b ad 72 4d c3 19 5b f1 80 05 7b a6 17 c5 c1 9c 9b 99 1a 53 f7 d0 c5 08 f2 a6 94 04 82 5c e9 00 2d 2d 8e 58 9b d2 c5 86 71 34 80 77 d9 1b c5 90 23 b9 da 97 0e a0 b7 41 d8 c2 d1 47 74 88 50 09 91 4d d6 bf 51 c1 52 07 05 d5 2e 14 1e 27 f5 34 80 c9 1e 67 b6 20 95 cc 41 f1 f5 eb a3 e3 57 71 72 4f 5d e8 17 27 c7 87 71 32 c2 f0 e4 c5 d1 09 86 97 34 3c 19 bc 38 8a 93 8f 18 1e bf 7c fd e6 38 1e c2 8b 83 f7 c9 97 dc e4 a7 a6 ed 5c dd b9 8e 51 a2 13 91 28 00 99 0d cf a4 d3 0a 8d 37 75 13 01 da 8a bc 72 77 da 0b c1 36 7c a0 cf Data Ascii: \l3V&kv}w!Df/L`TlRz$vFSlKrM[{S\--Xq4w#AGtPMQR.'4g AWqrO]'q24<8\|8\Q(7urw6\|
2024-11-01 15:52:31 UTC	291	IN	Data Raw: 73 0b 99 59 30 01 60 5c c8 4b e4 e4 fc f3 22 18 a4 47 08 ac f0 3c 5c a7 8f d7 17 4a 2a d6 4c 8f 2b 6c db fe 2e 29 c2 21 e8 7a 26 be 40 14 62 72 df f7 93 59 80 77 9e 82 f7 47 dc ac 39 97 8e 50 89 d7 4d ca ea e7 15 48 95 fc 6b 1f c6 6b bf ac c5 d8 cc b2 e0 e5 60 b0 f8 6a 27 c0 27 de 94 fa 25 9f 98 2c 38 aa 67 9b 8b d2 e6 1d 26 c8 c8 36 74 1d b7 35 0b 0e b1 2b 70 3b bb cc 32 b7 aa 50 a5 d2 1d d9 8c d4 98 78 c7 a4 13 ca c8 56 19 fd 91 82 71 ce 71 18 ce 82 6f a2 56 d9 95 a6 5b 6e 60 b1 7d 9f 9d c1 6b 32 2a 47 f8 0e 87 0c 2a 83 57 39 fa df da 10 04 bb 9c 79 ad 11 1d 7b 8f da 83 dc 39 f8 03 10 3c 79 11 45 36 02 83 4b 43 54 03 54 47 8b 2c 18 d8 21 5e e7 66 10 62 23 09 64 51 48 9e 50 c2 9c e7 6c bb 45 1a f5 3f cf 9f ff 0d 97 a3 67 1e 54 a6 0b e4 41 78 da cc f7 4d Data Ascii: sY0`\K"G<\JL+l.)!z&@brYwG9PMHkk`j''%,8g&6t5+p;2PxVqqoV[n`}k2G*W9y{9<yE6KCTTG,!^fb#dQHPlE?gTAxM
2024-11-01 15:52:31 UTC	69	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 31 0d 0a de 0d 0a 33 0d 0a 23 00 00 0d 0a Data Ascii: 0000000100000001`000000010000000100013#
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49855	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:31 UTC	680	OUT	GET /gui/static/qrcode.min.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:31 UTC	340	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 02d20136377a0116f2ccacfa940a9363 Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:51:55 GMT Expires: Fri, 01 Nov 2024 15:52:55 GMT Cache-Control: public, max-age=60 ETag: "b_UujA" Content-Type: text/javascript Age: 36 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:31 UTC	1068	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a b4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 31 0d 0a 72 0d 0a 30 66 66 32 0d 0a db 38 b2 7e 15 5b 5b f1 90 11 24 91 d4 5d 34 95 b5 93 cc c4 3b b9 4d 2e 7b 76 cb ab 71 d1 16 25 71 23 93 2a 8a 8a 93 b2 f5 ee e7 eb 06 40 82 92 9c c9 f9 71 a6 76 63 12 04 1a 7d 47 77 03 d0 d7 30 3b fa e3 c3 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001000001r0ff28~[[$]4;M.{vq%q#*@qvc}Gw0;
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 34 43 6d fe 80 bc 5e 60 39 38 e4 28 b6 22 5e bf 08 b3 2f 25 30 76 51 e0 a2 33 ce 1f 1e 18 1f e9 7f d8 ba 4e 03 34 3a e3 e8 d0 97 68 8f db 79 bd 26 d8 75 98 ac 53 de ec 32 9f 80 ba ad 00 ab df b0 7f 63 f8 25 1a 55 7e 1b 28 6c c5 6d f8 c5 60 b4 5e 6a d1 78 71 bb 5a 5a 30 60 c6 1a 80 cf 61 a1 6f c2 f5 97 f7 61 9e 47 19 6c dc 96 83 a9 5f 39 53 2e 32 0d a3 44 24 e8 3c 65 28 a5 9b ae bb 7d 09 58 11 60 7a 38 b5 d6 c3 4b 33 15 a5 af 54 5e 6e e7 3b fb ba 22 42 20 df 4e 0e cf f0 98 3b fd 4b 78 30 3c 3f 3e dd 95 0a db 9e d1 48 e0 60 6b bc 12 c8 05 70 0d e7 b5 7a 9f ae 63 8a 55 de 67 e9 75 a4 79 e2 08 47 29 c6 e3 7d 0c d0 4c 5f a3 ff 13 83 d4 ba 64 48 ae a1 57 ca ca 4c 67 d3 ff 6e d6 b9 46 c7 c4 e5 53 7c 0b 47 7a f0 0b ac f4 22 99 d1 92 a0 d5 ba 14 d4 38 e8 9f 9c 30 Data Ascii: 4Cm^`98("^/%0vQ3N4:hy&uS2c%U~(lm`^jxqZZ0`aoaGl_9S.2D$<e(}X`z8K3T^n;"B N;Kx0<?>H`kpzcUguyG)}L_dHWLgnFS\|Gz"80
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 11 33 54 57 00 c2 98 75 53 c6 10 73 e8 cc fc 94 75 43 0a d8 9f 43 4b e9 fd 72 8e 32 69 b7 7b 92 37 65 c9 e8 72 8e c8 17 51 73 b0 e1 10 73 2a 3d 38 d7 c7 54 a5 ee 7d ba fc 9e a4 b7 71 b8 b4 30 e7 0d 4f 98 59 04 4b 4c 4b c9 5a 76 c3 45 41 28 9d 5a 53 db 5f 57 11 db ed c6 fa 23 51 a4 9e 5a a3 09 45 36 a4 55 30 af df 54 40 9b dd e8 99 a8 58 21 26 7f c6 dd ac 95 3d 72 b6 6c 2c b7 ca 58 24 f4 82 ef 04 fa b6 0e 16 cf 27 28 16 69 16 33 c5 57 06 07 6f 6d f1 d5 00 10 8f e7 cc b7 d2 fa 0a 80 24 c8 0a 83 a1 a0 57 97 5f eb f5 09 5b 24 e6 91 c2 20 3c 92 bf 02 63 50 57 82 51 64 16 9a 7b b5 65 b6 91 47 58 07 f7 5c 70 7f fb f9 cd f9 cb 0f 23 57 f0 db d9 eb f7 af ce ae d0 36 f2 64 43 51 8f 1f 75 64 c3 ef 67 6f ff 71 31 1a 6c e1 c1 ee 5f d3 b0 91 23 fe 18 b5 c5 ab 91 b7 15 Data Ascii: 3TWuSsuCCKr2i{7erQss*=8T}q0OYKLKZvEA(ZS_W#QZE6U0T@X!&=rl,X$'(i3Wom$W_[$ <cPWQd{eGX\p#W6dCQudgoq1l_#
2024-11-01 15:52:31 UTC	386	IN	Data Raw: 12 dc 81 0f 30 87 7b cd cc 41 8d ce e4 cf 6a 43 77 b7 a1 b7 db 30 90 c7 a8 08 11 90 56 4c 52 a0 7c 59 01 38 99 04 73 3f 33 b7 d8 e1 9f 2a e2 50 bc e1 da 1a 4e b7 28 2e ab 8a 55 d9 b3 ba 69 8d 8e 2a 79 47 c9 52 ad c6 65 df 4a f9 bc 64 2d 4f 81 e9 e5 82 6c d9 75 76 96 fa 0d 55 04 76 93 38 39 43 d5 75 a3 1f af fb a4 95 a4 b1 64 52 d8 26 ae 7c a7 6d a7 08 e5 ff 78 f2 67 a0 22 01 fc 21 75 d2 a0 10 19 d8 75 dd 46 63 2d 54 28 0b 25 93 61 44 84 d0 01 d4 a4 d3 0a 21 d0 56 0d a4 c0 b4 32 fb a9 63 1b 2c 2c 52 f5 88 30 a9 a0 80 c0 a4 a1 db 18 05 34 80 e2 c7 f9 23 0b e8 6a 4f dc e4 07 d1 9b d2 2e b8 c6 0c d4 14 66 7c 88 39 d4 79 8f 35 9a 0d b4 04 2b 0a 24 23 52 30 82 0b 3a 1c b9 a5 cd 0f 1f af ce 5f bf 7b fe bb b4 9c e0 f2 d2 15 c8 91 dd 21 b2 71 f9 44 f9 9e 7c 6a eb Data Ascii: 0{AjCw0VLR\|Y8s?3PN(.UiyGReJd-OluvUv89CudR&\|mxg"!uuFc-T(%aD!V2c,,R04#jO.f\|9y5+$#R0:_{!qD\|j
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 29 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a b9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 30 30 30 30 30 30 30 31 0d 0a 01 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 0d 0a b9 0d 0a 30 30 30 30 30 30 30 31 0d 0a a2 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 00000001@00000001)0000000100000001S00000001I00000001000000010000000100000001b00000001(000000010000000100000001000000010000000100000001&00000001000000010000000100000001
2024-11-01 15:52:31 UTC	1408	IN	Data Raw: 3a 47 fc a3 0c 9b e4 1d c9 1d 7c 79 e2 2b 6f 95 3b 28 ea d8 0c a5 bc 6a 5f 3e a2 03 34 fd 46 fe 04 c7 e3 05 4e 94 18 e9 68 f5 40 16 95 0f e5 91 59 ce 03 d1 95 0e 55 28 80 80 11 35 32 f0 0c 40 8a dc 51 9e c2 28 01 56 93 fa 25 1f 1d e1 39 01 a8 ec 85 74 7e 9f 04 42 58 0e 20 62 18 01 89 bf 6a 3d 0d 70 f8 d8 6c 66 45 a1 03 d9 28 91 19 ed 38 14 f8 40 97 b4 80 2f b7 4a 98 a0 5d 9e 32 96 af b8 fc b0 55 a7 14 90 7d 92 b7 87 89 0a 5a 22 e0 3f e0 39 d9 25 e0 0d 4b 23 3c 06 b5 d1 c2 8d 1d 56 6c ca c2 c8 65 0e 8a e0 04 3b aa 48 0b 38 c1 94 29 22 7c 25 ec 98 23 27 98 35 85 dc 94 1d f1 aa 8f cc 84 7d 2a 36 44 07 d4 e0 61 4b d1 a5 3d 5a fc e5 8d 5c 0f 91 a9 47 8b 22 39 61 76 18 6d 2c 34 1e bd f5 81 22 67 64 6d 78 19 0f 89 80 e7 50 3f 0a 61 3a 58 65 db 58 f8 3d 0a 47 fb Data Ascii: :G\|y+o;(j_>4FNh@YU(52@Q(V%9t~BX bj=plfE(8@/J]2U}Z"?9%K#<Vle;H8)"\|%#'5}*6DaK=Z\G"9avm,4"gdmxP?a:XeX=G
2024-11-01 15:52:31 UTC	1169	IN	Data Raw: 67 ac c2 43 fd 7a 1a 78 4d 57 ca 1d 57 7f 5b 77 71 32 c5 a9 e4 69 f4 35 be 89 de c7 df a2 e5 87 10 8b 1b 16 83 c7 8c a3 0c c1 79 a9 63 53 f0 ff 2f 9d 4b 51 d3 f5 a8 58 24 02 7e 4c 50 56 43 07 19 6a 09 7c 03 59 70 0d cb 1b 82 d8 16 74 50 5f 95 ce 9b fa 63 b9 17 bf 0c c2 6c ce 2b a9 0e 94 b1 8b bf a4 63 4f cb 46 c3 2e be 5d 2e 71 70 54 77 c4 cb d3 cc e7 d3 1e a4 33 47 24 9e 0d e2 e5 b2 83 3b 79 8a e3 ee e5 bb b7 f3 de de 79 ef d0 bb ed f3 22 81 03 33 64 91 e5 68 38 49 5a 01 0d 33 32 02 8b eb 8b f5 fb 10 77 cd a2 29 d9 91 74 02 4a 72 01 ee 9b aa 96 32 e6 d8 f1 13 8f 9a ee 0d fb 36 c3 f7 28 bf c2 ab 2a 0e f7 f0 df 1d 60 4d b9 ca e2 ab 7c 80 6b 37 17 bd aa 87 d2 a8 19 91 51 aa 3c e8 ae 57 44 62 a4 be 58 35 6f 5a e0 74 88 74 e5 5b 1f 25 4b 7a 24 8d 89 f2 c3 07 Data Ascii: gCzxMWW[wq2i5ycS/KQX$~LPVCj\|YptP_cl+cOF.].qpTw3G$;yy"3dh8IZ32w)tJr26(*`M\|k7Q<WDbX5oZtt[%Kz$
2024-11-01 15:52:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49864	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 07e24bd8a23b2c3eea70adb32e750fb5 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:15:25 GMT Expires: Sat, 25 Oct 2025 16:15:25 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603427 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 38 0d 0a 02 ff c4 5c eb 96 db 36 92 fe bf 4f 41 2b 1b 8f 98 21 d9 94 d4 52 b7 28 cb 49 c6 49 ce e6 4c 32 33 27 ce fe f2 fa cc f0 02 4a 1c 53 a4 0e 49 b5 dc 51 f4 14 fb 77 9f 6e 9f 64 bf c2 8d 20 29 75 3b d9 3d 67 ad d8 ad 46 15 0a 85 42 a1 6e 00 32 3a d4 cc aa 9b 2a 8b 9b d1 6a 5c b3 3c f5 8e 2c da 87 f1 87 37 db 43 f1 e1 a1 f9 fb 21 fb fb 2e cc 8a f5 13 b0 5f 7f 7d f7 de f6 f6 87 7a 3b 7e f7 6e 7a 37 59 de bd 77 4e fc 67 30 2e 9d ca 61 f6 fa Data Ascii: 0000000100000001000000010000000100000001000000010000000100000010ff8\6OA+!R(IIL23'JSIQwnd )u;=gFBn2:*j\<,7C!._}z;~nz7YwNg0.a
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 4f fc c1 da 84 7b 77 6a 25 30 4c 49 79 2c dc ac 61 bb 91 55 61 56 eb 51 74 68 1a a8 b9 f5 55 9c 67 f1 87 f5 e8 5f 4f fe 79 64 d1 02 bb 62 75 3b 4d 98 31 6c e1 c1 8d f3 b2 66 6e 59 e0 0b 7a 59 61 95 01 5d a8 88 c4 7f 6d bd 4a b2 07 c5 c7 03 e7 63 84 46 93 bb f4 e8 46 65 9e 8c 5e d3 a0 af 6e 08 d4 c3 68 60 10 dc a8 62 e1 07 8b 7f 3d 56 e1 be 87 7e 83 61 d0 4b f6 fe 87 b4 0a d7 b4 1a 76 e8 21 cc 0f 4c fd bc ae 73 c0 d8 b2 10 72 c7 97 44 9a 72 6c 0e 5b ae 06 36 96 d2 66 21 a7 1f 21 17 a9 a7 62 af a9 6d fd 25 df a8 62 95 f6 58 a5 fd 53 ab 34 21 19 3d 34 ee 21 73 f3 32 4c 48 53 e4 cf d7 af 6e 3a ed 24 a9 bc 6c 94 84 d3 da 5d 8c 80 43 6d 5a 1c ff b0 ed c0 18 7d 83 d1 37 34 3a c9 5b 0d 43 eb 69 65 c9 7a 44 2e 7d a4 c8 ed cb 3a 23 5b e0 56 2c 87 01 7a 60 56 e2 46 Data Ascii: O{wj%0LIy,aUaVQthUg_Oydbu;M1lfnYzYa]mJcFFe^nh`b=V~aKv!LsrDrl[6f!!bm%bXS4!=4!s2LHSn:$l]CmZ}74:[CiezD.}:#[V,z`VF
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: f0 38 5d 32 26 e0 7c 41 3b c0 79 3a 53 bb 51 2a 95 6b c2 b1 55 a7 4c ee 67 b9 a8 1d 70 c8 26 6a 6c 21 80 0e 34 4e f1 11 23 f3 c9 9b 40 73 03 ea 89 97 15 ec 68 3b f9 65 12 dd a7 6a 6a 5a 23 a2 1e 56 3c a5 4f 4f 00 3d 9c c8 4f 58 24 4d 95 10 42 0f 61 b9 8c c3 54 4e 54 0b a2 87 93 ce e3 bb a5 54 3d 25 8c 1e 0a bb 0f ef 42 b9 7b a4 40 7a 18 64 a4 94 99 12 42 e9 21 98 26 88 5b 4c b9 c7 e6 d8 5e 53 f9 8f 98 2c 37 b0 7a 7f 62 8b 4a 51 a5 28 1e b9 75 58 d4 48 50 ab 2c 0d 2c 14 7a 0e 55 cc ac b7 68 b3 50 2a 1d 39 d6 4f 65 84 48 56 fd fc a6 0a d3 c6 b1 fe 8d e5 0f 0c f5 bd d0 b1 be 46 0d 25 77 50 5a 52 54 c4 90 9c f4 ae 2c 4a 54 47 62 d8 72 45 f9 4d 99 30 49 59 43 45 8f 4d 85 ba 01 a2 80 c0 42 26 cd c2 ca 55 0d e3 c9 3d 16 65 e3 58 b0 4c e1 58 cd 4c ce d1 f7 26 a8 Data Ascii: 8]2&\|A;y:SQkULgp&jl!4N#@sh;ejjZ#V<OO=OX$MBaTNTT=%B{@zdB!&[L^S,7zbJQ(uXHP,,zUhP9OeHVF%wPZRT,JTGbrEM0IYCEMB&U=eXLXL&
2024-11-01 15:52:32 UTC	325	IN	Data Raw: 8b 4e 5f 43 9f 24 16 d7 a2 21 0e 35 4b 0c a9 4f 43 1c 01 c0 4d 2a 23 3b eb 60 19 00 7b 25 d6 a6 03 e7 4d f6 8a fb 26 e1 5b 29 80 65 d5 ea a2 c7 5d 75 3d d4 4a 59 16 dc 4f 43 c9 82 5b 11 ee 1a 56 dc 8f 5c 68 ad dd 41 e3 a0 41 28 52 d0 61 d3 d4 71 5b 44 e7 5d c9 9b da 67 2b 5f 25 35 f8 12 25 a5 c4 11 ea b3 9b 0a 07 b5 2a b8 ea 22 6f 20 1a 8a eb f9 c9 7b c0 85 65 21 2d c7 b5 28 dc 63 81 8b 74 11 2f 38 7d 1a 17 30 8c 4d 77 09 aa b6 c5 00 f6 5c 20 25 02 2b fb c4 2d 9d c1 29 77 25 dc fe 05 7c 77 e2 22 0e e5 e8 9d c9 19 b9 19 24 f6 a4 1c e4 0e 87 34 4c 39 5f 22 67 c2 6d c1 80 d8 6d 32 c2 fa ff 61 64 a5 c3 3a 4c 40 09 bb cb 7e df 8a d8 67 1e 2c 91 60 71 ed 86 c5 1f ec 3f d2 f7 00 37 92 70 f7 c2 e1 df d3 ac aa 1b 40 b3 3c 31 db f9 1d a3 4b 13 15 7d 85 b9 7f 4e e4 Data Ascii: N_C$!5KOCM#;`{%M&[)e]u=JYOC[V\hAA(Raq[D]g+_%5%"o {e!-(ct/8}0Mw\ %+-)w%\|w"$4L9_"gmm2ad:L@~g,`q?7p@<1K}N
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 36 62 31 0d 0a a8 d0 6e 7e 37 a6 8d 31 b8 71 57 de bf 2d a0 91 0e 89 22 99 26 09 c3 2c 4b 2e 86 27 7d ce c7 4b 22 17 bd b6 b1 9d 8d fc 9d 0f 63 80 8c c1 e4 a6 36 66 7e 25 c0 30 d5 f6 d3 48 5f d0 cb 2b b4 b5 54 fb f2 e9 02 0c b6 35 c0 34 35 57 a8 1b 1a 4a 01 01 3e ed 49 1c 6d ec 7e 20 10 58 0b 54 98 17 28 de e1 f8 87 fb c4 36 62 17 39 0f b7 07 24 d4 de 5e b8 60 5f 79 93 a1 25 9f 66 89 cf 9e be c9 24 2e 5a 9d 44 01 5c 14 9b 8b 92 b2 aa 01 8e 4a c6 21 9b 41 2a bc 12 19 ac 4b d7 7c 03 c4 bd 73 54 7c 7b ce 5d b6 e2 b8 09 77 7d 1b dc 57 52 66 be 29 f7 81 37 43 15 45 d4 c3 a4 c4 f9 e1 b0 d1 de af 93 68 2f 81 f2 3a 8e c0 db dc 51 b0 a0 e9 0d fa 0d e7 85 ca 2e 6a 27 b2 d4 60 Data Ascii: 0000000100000001J00006b1n~71qW-"&,K.'}K"c6f~%0H_+T545WJ>Im~ XT(6b9$^`_y%f$.ZD\J!A*K\|sT\|{]w}WRf)7CEh/:Q.j'`
2024-11-01 15:52:32 UTC	342	IN	Data Raw: 7a 98 21 08 59 73 53 44 b8 2b e1 d6 8f 24 39 c0 13 4e 5d 56 10 a8 58 a6 f7 9e 5e 14 51 19 32 65 2d 86 10 05 75 59 d9 6a fd ae 74 d6 e2 5e e8 b0 97 9a a4 3a 78 23 97 d8 0e 1a c6 f8 bf 12 24 f4 46 d4 d8 88 19 e6 6e e3 5e 1e 1c 08 6e 8c 34 b8 a5 f5 39 fd d5 67 77 dc ab f2 dc 2f a6 cb 7a 9d f6 df 49 fa 7f c1 55 9f 1b 23 fe 11 4a 26 df 34 bf 21 8d 53 e9 a0 bf 92 b7 2e 78 9a 2e f3 06 ac 97 4a 70 3d ba eb 46 e5 5f f3 30 4f cb dc f2 a6 e2 3c ef 4c 2f 82 4f e2 1a 12 85 61 3d ad ce 8a fd 01 4f 9f 8d 3d 6b a4 1b 66 b9 65 a0 26 6a d5 f8 90 e2 28 d1 18 7d 22 47 7f 47 2f e3 de 5b 6d 0c 2f 14 a5 d3 d9 0c e8 94 8e 20 f6 c7 6b f6 77 fa ca e3 7b db fa ac f7 c0 f1 14 16 78 5b ca ef 5e a5 b8 32 f4 e8 ee 0f f4 ff a6 c0 c8 73 8b 32 a1 f3 67 b8 6c cf cd 87 10 9e 50 e3 cb 2f 96 Data Ascii: z!YsSD+$9N]VX^Q2e-uYjt^:x#$Fn^n49gw/zIU#J&4!S.x.Jp=F_0O<L/Oa=O=kfe&j(}"GG/[m/ kw{x[^2s2glP/
2024-11-01 15:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49859	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/11358.3abf8514c0ca6feab7cf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4af7ad97d736be3d0fb98965457292aa Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99253 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff ec 7d fd 9b d3 46 f2 e7 ef f7 57 08 27 cb da 89 2c 6c cf bb 27 86 90 81 dd e5 02 21 5f 06 f2 7d f6 c8 3c 20 db b2 ad 60 5b 5e 49 9e 61 62 fc bf df a7 aa ba 5b dd 92 3c 0c 5c 36 77 cf 2d 21 09 33 fd 5a 5d 5d 5d 5d af ad c6 3a 8b bc 2c 4f e3 51 de 38 6d 66 d1 7c 12 5c 45 c3 55 38 7a 77 36 5b 2f df 5d e6 6f d6 f1 9b 45 18 2f 07 37 d4 7d f8 f0 fa a2 15 ac d6 d9 ac f9 fa 75 b7 bb 77 70 ec ef ef 75 bb dd 0b 7f c3 7f f7 9b 91 9f fb 49 6b 70 7f 93 04 69 33 6f f9 49 30 6e e6 fe e6 2c 4d ae c6 59 b2 4e 47 Data Ascii: 0000000100000001000000010000000100000001000000010ffa}FW',l'!_}< `[^Iab[<\6w-!3Z]]]]:,OQ8mf\|\EU8zw6[/]oE/7}uwpuIkpi3oI0n,MYNG
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 1c cd c3 eb 41 a3 d3 b8 ff 03 88 4b f7 52 cd d0 ed 1e 40 74 61 af 01 34 fe 53 01 7d 92 87 d8 ba cf 04 75 fd a7 82 fa 8a ce d6 1c 1c e5 73 31 fb af 75 42 f4 5f 22 d6 7f 27 19 fc 17 cd e8 0d e7 c9 e8 dd 67 a2 78 04 e6 f5 a7 82 7c 86 09 3f 02 b1 22 e3 1a 6a 06 ff 04 d3 5a e6 90 83 a2 94 d8 54 ae 38 aa f0 38 f5 8b 39 fd 74 36 b9 7d 9a cc bd 61 92 62 7f db 1d 6f d5 ee 34 3c cd c3 85 45 7d 1f 2f 57 6b 1c 62 f9 cd 61 df 52 f4 00 ec 7b 1c 59 07 56 4f ac 8e 1b b1 58 c5 7b 1e c5 97 06 00 c3 8e 2a fd e5 a4 ca 12 df b6 7c f0 ee 30 60 7e f3 2c 5c b5 9a 9b c6 70 da 1e 26 e3 6b f0 4c ac 77 1c a6 d7 8d fe 9d a6 ba e8 9b d1 60 1d fc f4 2a 18 ad 53 5c 08 f9 ab 2c 4a 71 4d 5e 26 f1 d8 eb 40 0e 88 3e 7c b8 13 05 d3 3c 7e 38 1a 45 59 d6 da aa 5b 8b ee a9 4f 9c 28 bf 71 a2 1c Data Ascii: AKR@ta4S}us1uB_"'gx\|?"jZT889t6}abo4<E}/WkbaR{YVOX{\|0`~,\p&kLw`S\,JqM^&@>\|<~8EY[O(q
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 48 1a b3 b5 f5 bb 27 87 dd 5e 8d d9 9e 1d 17 e2 4a 80 5d bf 0b b3 3b d9 ed 95 09 9f ec f6 ca 84 5f b2 db 9f f4 0e bb b0 cb 93 dd be 7b b0 d7 43 37 32 dc 9f ec 77 8f c4 6e bf 4f 6e 02 63 b7 3f 54 cc 73 ed cf 60 9e 67 6b bc 36 82 7b 97 da b2 ed c3 08 0f c3 f4 26 4f af 59 9a 85 69 fb 75 76 01 bb 35 1c 05 a1 16 ad 49 67 20 31 46 c8 d8 e3 2b 29 41 c1 36 0c c6 c9 32 7a 90 37 e7 ad 3e 4c d6 8b 38 23 b9 33 4b e6 97 11 8a 82 7c 16 2d 59 56 d8 92 d5 7c fa 85 6f ff 41 7c 7b 32 68 ae 4b ac 3b b3 6c fe 9b 6c 96 ac e7 e3 57 ac 44 16 fb d6 54 aa 99 ed 9c 7a 32 6e 40 13 51 15 f0 d6 a5 54 00 a5 92 0f a6 db 50 15 4a 23 ad 38 d9 4d 1e b3 6f 6d 40 32 78 1a 9c 59 1e 30 d7 f9 a6 f4 55 ab fe c9 58 71 02 1a 9b fb c7 01 d9 7f 64 40 69 2f d3 b6 7c 4d 65 30 bf 37 5f 33 94 54 03 a2 Data Ascii: H'^J];_{C72wnOnc?Ts`gk6{&OYiuv5Ig 1F+)A62z7>L8#3K\|-YV\|oA\|{2hK;llWDTz2n@QTPJ#8Mom@2xY0UXqd@i/\|Me07_3T
2024-11-01 15:52:32 UTC	301	IN	Data Raw: c7 d9 f2 af b9 97 ac f2 78 01 fd 65 cc 62 ac 50 36 c2 9e 2e 63 44 32 7c 77 6f 45 5b dc ea 5b c4 b7 c6 70 6b 1e 2e 9b 27 b9 b7 84 bf 71 d0 88 96 10 cb b5 a0 d6 b8 0f ea 40 1d 77 75 dc c5 5a c9 d7 44 6f a9 f7 6f f8 90 b1 7a 2f f2 e3 1b dd 48 b4 37 fd 9b a2 27 69 4e a6 b5 c5 8d a6 35 b2 9f 5d da 97 ae 9c 11 73 d7 7e 62 6f 0b f3 c5 15 b7 6b 8c 1f 10 4b 10 85 10 ae 0b eb 9e e1 1d 6c d8 73 00 d3 0b ac 8e 5b 5c b4 4e 07 83 a0 6a 8f d5 4e 27 8e 33 02 9f 87 5b a2 c2 5e 05 f5 c3 29 93 10 57 50 7d 75 31 a5 e3 7e 13 84 b5 1b 54 b0 c0 a2 eb e5 40 23 ba 5e 92 88 de 83 23 8d 43 b8 fe a1 29 80 1c 49 88 b8 24 33 67 ef b8 63 47 27 ab 00 6c 09 a1 8e ad 10 6a 31 50 2a 4f 25 fc 90 d0 ac 58 2d d9 cc c3 df e3 f9 f5 0b e8 1f 51 7a 2e 87 27 23 a1 01 86 49 13 19 fb 2e ba 46 59 2b Data Ascii: xebP6.cD2\|woE[[pk.'q@wuZDooz/H7'iN5]s~bokKls[\NjN'3[^)WP}u1~T@#^#C)I$3gcG'lj1P*O%X-Qz.'#I.FY+
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 78 0d 0a 30 30 30 30 30 30 30 31 0d 0a b4 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3d 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f3 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 66 65 65 0d 0a d5 81 c5 95 62 be 7b bd e3 13 15 Data Ascii: 0000000100000001x000000010000000100000001=000000010000000100000001000000010000000100000001/00000001000000010000000100000001000000010000000100000000100000feeb{
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: aa 81 ce 07 1b b6 27 f4 1b 4c 53 94 c8 e4 3d 59 82 c0 34 62 aa 08 05 de 24 0d d4 83 5b 2e 0a 53 d0 20 bc af a0 b1 09 3a 25 57 44 c4 14 ab b3 86 53 f9 da a2 44 8c 9b 9c 59 18 cf 4a 84 58 ec 05 a0 ba 0d 25 5a 5b f4 0a 5b f4 8a ef 2f 2d b6 c1 92 a3 57 a0 84 19 22 d0 7a c6 ea d5 48 35 bb c6 29 ec 85 c5 04 1a 5e a1 56 e1 d9 c4 05 6b 36 d1 ea 54 1c 0a ab b0 38 15 bd 2d a7 e8 42 35 e6 33 00 81 97 69 0b 81 79 0d ab 3d 22 a8 c9 5b a9 f6 1c 9e 50 e7 f4 88 21 d0 a5 90 e2 f8 54 c6 75 29 ac 75 0a 2e ac 47 8e 20 73 bb 44 c4 f7 71 3d fd 80 1c fe 4e b7 75 99 74 9e e2 ec 81 0a a5 a7 77 35 83 1c cb 74 33 85 28 80 84 6d 0e 6f 21 79 60 92 ac c1 1b 85 a8 e2 14 d6 4e 30 d4 12 b1 e8 d9 3f 91 4e 9e 80 4e 9e 30 9d e0 36 e6 31 84 38 16 31 65 1f cc bd 80 78 dd f3 89 40 af 89 e5 7b Data Ascii: 'LS=Y4b$[.S :%WDSDYJX%Z[[/-W"zH5)^Vk6T8-B53iy="[P!Tu)u.G sDq=Nutw5t3(mo!y`N0?NN06181ex@{
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 17 d6 c9 b8 c9 7b 81 b3 8a a7 15 90 bd fe 73 1a 5f 22 c6 68 4a 2e 59 81 9b ac e3 35 76 3f 6b e3 f9 72 c1 b3 0c c6 c6 85 9b 81 b7 00 81 c6 cf f0 8e c5 3c 82 a0 84 a8 68 24 a0 97 c1 a6 a4 74 e4 0b e1 bc c4 43 95 b9 cd 3d 95 04 a8 f2 24 28 24 7e 21 02 32 05 08 13 53 20 39 83 85 1c cd 00 95 98 8d f0 69 5d 83 90 7e 1e 4b d7 d4 81 64 37 56 31 d0 66 2a bb b3 b6 27 91 33 a2 44 ac 1a 80 42 8e 10 79 a6 b4 78 9a 49 f7 04 64 d0 c4 95 80 ef ce a7 8b 21 08 41 64 2a 19 87 c5 98 48 e3 68 03 05 1e 7e d0 1e 8c 65 d5 36 6b ed 11 2e 8a 25 3d 10 51 d9 23 cb 22 70 7e 76 03 e4 66 c6 e6 66 8e 90 99 bc df 45 24 14 2d c3 54 40 c6 53 9b c4 98 b3 6a 78 31 5a dc 0b ab 70 5a 22 1f e2 d1 ee 84 25 0f da 87 0f 08 97 d6 cb 9c 57 bb 5b cb 9c df bd 3b 77 96 09 22 6e ae 1e 08 39 16 47 be 7e Data Ascii: {s_"hJ.Y5v?kr<h$tC=$($~!2S 9i]~Kd7V1f'3DByxId!AdHh~e6k.%=Q#"p~vffE$-T@Sjx1ZpZ"%W[;w"n9G~
2024-11-01 15:52:32 UTC	100	IN	Data Raw: 80 49 6b 20 1d 1b db a3 2d 14 92 9c 9c 4a ea b8 96 76 dc 49 20 ed e4 c6 48 ed 0e fc df 71 3e 43 c8 06 49 62 98 02 be 94 94 c7 f7 c0 9d e1 50 81 bf 17 aa 75 34 86 33 ab 81 07 03 13 9c 2c 7e f0 0d bb fe 91 37 f4 f8 35 19 82 14 36 ea 05 6c ce c8 73 ae 7f 2d 0f 61 38 ea 79 3d 34 7e 32 46 66 0f 9b 0d 0a Data Ascii: Ik -JvI Hq>CIbPu43,~756ls-a8y=4~2Ff
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 31 37 65 38 0d 0a 47 8e 4c f3 a3 25 75 f9 b1 92 bb 10 28 6f 51 47 5e a1 0e 2c b1 86 3a 00 26 4b 60 8a 1c e0 d5 4e 3e 81 1c 5c 7c 12 16 5f d0 8a ad 9d a2 ed 94 5d e2 23 44 58 c9 f4 f9 a9 85 b1 66 1b 04 8b 74 72 0c 02 ea 71 f1 7f 84 09 5a ba 3e 26 04 26 9d Data Ascii: 0000000100000001!0000000100000001B000000010000000100000001000000010000000100000001(0000000100000001Z00000001V017e8GL%u(oQG^,:&K`N>\\|_]#DXftrqZ>&&
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: f4 06 6f aa 6c a7 39 fe 40 c1 be 3a 1a 36 1c e5 b5 33 34 ce c2 0d 50 5d 4d f7 75 63 6a fe 23 97 aa 62 4c fb ba 87 42 1e 3d d0 2a 28 96 69 f4 d9 63 04 5b 47 59 b5 a1 0b cb 39 80 f3 68 42 2c 03 0b 67 54 10 4e 70 f4 f9 67 8a a4 9b 20 93 a2 ef 09 ef e2 42 e6 01 45 0d c5 b9 ac 90 17 2a 9d 89 2f 5e 29 2e 44 89 79 28 05 03 24 83 47 24 93 5a cb 3c 61 6a 54 4c 57 77 62 ed 55 f1 a1 f2 d9 02 17 a3 98 df 31 11 60 92 d2 56 98 b1 15 eb d4 d2 c1 86 88 4b 63 4f 8b 04 d2 ad f6 ac ea b1 94 60 c3 dd 05 11 5d 35 8b 88 0c 56 05 71 58 cf 63 64 80 01 4e 97 7d 8f df 1b 91 e6 2c 6c 70 63 c5 c6 04 c9 86 02 1d 6e 7d 20 1b 4a 6b a1 0b 50 d3 c9 8e 31 f4 3e 39 43 28 9a 28 0f 61 e1 dd 06 94 80 11 38 45 a8 a8 ec 0c 5e 12 20 46 51 da 1a 6b 3f f5 eb 6e d2 b3 bc 4f d9 5a 3e dd a2 e6 40 3e Data Ascii: ol9@:634P]Mucj#bLB=(ic[GY9hB,gTNpg BE/^).Dy($G$Z<ajTLWwbU1`VKcO`]5VqXcdN},lpcn} JkP1>9C((a8E^ FQk?nOZ>@>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49868	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/16339.77d3ab69801aa191ff1b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d38e6228adfe7d9fa92ff83499853edf Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99253 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 66 66 34 0d 0a f9 9a db c6 b1 ef ff f7 29 20 46 51 c8 04 84 b8 6f 23 4a 96 47 52 a2 58 5b 46 23 3b 89 8e ee 18 24 41 12 1e 90 60 00 70 16 8f f8 7d f7 35 ee eb dd 27 b9 bf aa ea 06 1a 20 39 1a c9 13 3b e7 7c 92 6c 11 4b a3 97 ea ea aa ea da ba 1c 7b c1 d4 39 f7 46 2b 77 7c 7a 38 5f 2f 4f Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}000ff4) FQo#JGRX[F#;$A`p}5' 9;\|lK{9F+w\|z8_/O
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 09 3f 49 c2 30 38 f5 93 d2 07 c7 5f 8e 83 f5 c4 8b b9 67 04 6f 6f a8 fb e8 5f d7 47 3f eb a3 0f 02 b3 1b a6 be 86 a9 bf 05 53 03 a4 1e d6 53 a9 54 a9 ec 00 ea 2b a0 d1 71 f8 38 f0 dd f8 b7 83 ea d8 5d ac 5c 7f b6 fc 8f 84 d6 51 18 78 5b a0 d1 e8 06 94 f8 22 1c 48 52 1c f8 b7 ae 2b 03 07 64 59 69 14 78 b3 1e 05 fe d8 25 22 f1 04 8b fd ba f1 45 de 2a 8c 76 22 f2 6f 3d 88 63 30 0f 0f 94 ea f9 72 b2 26 09 c0 db 46 61 63 9e 3e 7b e9 da a5 14 2f 71 99 12 55 ac f2 ff 7c 90 1c 79 33 4c ed e7 c0 e3 bf df 58 5f 86 e0 0b 8c c2 37 1f e7 0e 72 fc 5b 63 f1 e3 38 0e c7 3e 71 5c 30 ba 30 ba 76 2c 9f a6 35 ff fd 90 16 b2 4c 6e fc 9a ab 93 3c 47 8c 52 44 94 22 33 37 29 db bd 7b 46 39 67 e2 26 6e 4e 9e c8 bf 8e bc 40 70 66 ee af e2 6b ca 09 b9 38 61 4e 1f 9f 4c bc b3 42 d9 Data Ascii: ?I08_goo_G?SST+q8]\Qx["HR+dYix%"E*v"o=c0r&Fac>{/qU\|y3LX_7r[c8>q\00v,5Ln<GRD"37){F9g&nN@pfk8aNLB
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: df c3 34 73 63 c4 bd 5e bd aa c7 48 ec 6b 2f e2 6a 98 42 b5 bf 5f 9b 1c 64 30 0d 86 c1 1e 4d 6d a0 db 0b 1c a2 bf b6 ae 39 be ae e6 38 ab 39 1e c6 7b 6a 8e 75 cd a6 76 5e 90 59 37 e2 5e d7 88 9b 35 e2 0e dd 3d 8d b8 ba 11 37 25 ee 27 44 29 d3 71 4c ae 6b 62 92 35 31 19 4e f6 34 31 d1 4d 4c 20 fe 30 7b 48 2b 1f 5f 57 f9 38 ab 7c 3c 1c 83 25 01 11 2f 92 93 dd 2b 7f ac 1b 19 43 12 22 3e 73 72 0e 46 73 82 09 c9 4c 07 ab eb 5a 5b 65 ad ad 86 ab fc 1e df b4 76 14 ca c5 c2 bd 56 c4 0c 4e 20 dd 4d 3d 5a f3 79 03 09 3e b9 b3 62 6c d4 f3 76 76 5d 4f ce b2 9e 9c 0d cf f2 3d 71 98 35 9a fd 39 d3 03 3f 43 0b 29 60 67 d7 35 30 cb 1a 98 0d 67 7b 66 6d a6 eb 9d 89 a9 64 11 4e fc a9 52 2d 0b 86 9c 3a e7 7d 61 34 a4 48 8e 9f 00 6b 9e b1 ad 29 25 e8 97 d7 f5 e2 32 eb c5 e5 Data Ascii: 4sc^Hk/jB_d0Mm989{juv^Y7^5=7%'D)qLkb51N41ML 0{H+_W8\|<%/+C">srFsLZ[evVN M=Zy>blvv]O=q59?C)`g50g{fmdNR-:}a4Hk)%2
2024-11-01 15:52:32 UTC	375	IN	Data Raw: 5f e8 7b 73 8d f4 b3 38 f3 4e a0 68 dd e2 d3 3f 61 b8 3f ed 1b 6e 6a 9f da 31 78 03 ab 79 c0 d7 8f 57 35 af 86 9a ee 59 33 c1 ef d6 05 3e 4d 18 59 cd 1e 24 27 a4 f5 dd f6 9c 11 af f7 8f 1f 79 aa f2 ca a8 6d d7 dc 6d e8 7d 0b e8 7d 4b d0 33 f7 13 26 05 d5 50 da 2d e5 dc 3a 07 70 77 0d 74 0f f9 7f 89 be bf bc a5 99 d7 d2 c9 2d 50 78 4d 9d e0 72 ad 07 e3 fc 14 fa cb 72 c9 b6 e0 95 61 a8 d9 6e 34 67 e6 d2 7e 85 11 bf da 37 62 26 eb 85 a5 9d 9a 25 f7 e8 0e 35 e2 df 9e ee 50 13 83 dd ea 80 6c b9 f0 3e 29 22 1b be 36 3f 65 d6 fa 9f 31 cc 9f 65 98 bb f9 7a cb e0 eb 11 36 b4 64 c1 af 03 53 4d 24 ce 19 c7 59 0c 98 51 d1 5a a1 18 13 06 01 93 50 c3 02 18 95 61 3b 27 15 a3 8a 23 78 7c 59 e2 68 66 3d f0 35 89 55 0b 67 1a 57 db 3b ed fb 62 ee b2 44 e1 61 b1 c1 0b e2 39 Data Ascii: _{s8Nh?a?nj1xyW5Y3>MY$'ymm}}K3&P-:pwt-PxMrran4g~7b&%5Pl>)"6?e1ez6dSM$YQZPa;'#x\|Yhf=5UgW;bDa9
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a d0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a cf 0d 0a 30 30 30 30 30 30 31 0d 0a 97 0d 0a 33 33 61 64 0d 0a e4 c8 05 dd 15 6f 04 6d 74 7a 42 f5 c1 ba 1e c2 81 3f 52 b5 e3 17 3e 2b 5c 0b 35 e6 aa 61 09 48 62 0a a2 b1 62 1f fe 8d 6e 64 67 20 c0 5b 74 c2 84 13 fc 0c 9d c2 2c Data Ascii: 0000000110000000100000001v00000001000000010000000100000001000000010000000100000001 00000001000000010000000100000001000000133adomtzB?R>+\5aHbbndg [t,
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: ba eb 3c ae d8 87 c8 ed 95 94 df e3 dd b9 f3 b7 0a 39 b0 86 14 36 19 26 21 65 14 ca 07 35 4a 6e a1 0a 4a 0c d5 37 81 33 06 7b 0c 17 2a 6f 52 a5 5c 5a 7a e7 86 58 5b 25 5b 83 92 d2 4a 5c 37 a5 12 6b 74 fa 0d 4e a2 d5 6c 74 ba 2d 49 2a 16 a0 4e e4 18 6b 75 1b 92 38 2b 4e ec 28 b1 97 89 ed 26 f6 24 b1 c7 89 3d 4a ec 79 62 af 13 7b 95 d8 67 89 3d 4b ec 45 62 4f 21 ba e9 04 59 97 5f 13 64 dd 56 82 ac 73 24 c8 8a 93 eb 32 64 91 61 03 66 65 22 e2 88 48 8d d7 48 26 56 76 1c 07 9c 56 f2 90 29 ab 39 bc b8 dd e1 fb 0f 42 42 e1 7e 25 09 b5 08 15 57 ce 0b 44 a4 92 40 a7 8a ca 5b da 22 0d ef d4 e5 83 b9 e7 4e 80 b9 71 fa 20 08 5d d2 5e e0 7e 13 7b c9 5b ae 0f 09 3f 82 a0 9c 54 ae 58 38 4c db 70 b6 0a 6c 05 d0 6e 6f fe 22 22 16 11 f0 a8 10 22 2b 3b 37 58 64 56 64 cf 81 Data Ascii: <96&!e5JnJ73{oR\ZzX[%[J\7ktNlt-INku8+N(&$=Jyb{g=KEbO!Y_dVs$2dafe"HH&VvV)9BB~%WD@["Nq ]^~{[?TX8Lplno"""+;7XdVd
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 3f 39 58 8a 8a 42 84 90 15 ad b6 95 5a 6d ae 66 0a 24 ef ea d0 3e 91 a2 b4 6f 73 09 01 3f 94 61 48 0b ca 46 a2 22 e5 d0 ed 92 5e 75 a7 55 13 9e 7b 48 43 ec 55 f0 df 06 bb 44 c9 27 6d 52 c7 33 ea cc 99 ea cc 6e 67 cc ed d4 43 48 d7 54 10 f4 84 f7 9a 22 12 9b a5 f2 d6 9a d2 c3 6f 2f b5 98 74 a3 0f 74 d6 a1 d4 71 9d f3 de a4 91 85 81 39 90 19 0d 64 c6 03 d9 72 c9 da 8e 91 c2 c6 a2 95 4a 24 f7 7d 82 5f 60 52 9f a5 59 f5 82 aa 5e 48 d5 e6 10 65 3b 52 98 2c ed 63 4f 5d 25 aa 68 d6 0a a5 a6 68 9a 36 bb 25 ef ca 95 f2 7e 4f 95 0d 2a 7a ed 61 cd c0 cf f4 25 02 49 1f 99 37 03 ca 95 1f 87 88 4a 25 13 b4 22 30 6a d2 35 c1 24 74 bd 9e 3a 1b 7c 38 4f 9d 41 c5 36 1b 3b a6 7c 64 3b b5 6e 41 42 6a b7 38 a9 1c 5c 8a de 2d 20 75 1b e7 62 47 a4 37 ed 53 07 2c 9d 6f a0 2e 3b Data Ascii: ?9XBZmf$>os?aHF"^uU{HCUD'mR3ngCHT"o/ttq9drJ$}_`RY^He;R,cO]%hh6%~O*za%I7J%"0j5$t:\|8OA6;\|d;nABj8\- ubG7S,o.;
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: d2 30 ac 9c 69 b2 ab 74 92 8a 3c 79 f1 25 3c 59 e6 19 ee b9 2a c7 0d 33 b1 ed 45 67 f2 36 62 e3 64 dd 06 33 ba fb 49 66 74 78 1d 33 da f7 b9 c1 8c 72 df 6b 84 cb 98 d1 e1 50 d7 51 64 46 bc 6c 0c 6e 04 67 43 92 06 1f d3 d6 a6 d6 e8 d5 84 09 ed 38 1f 53 d8 91 d6 c2 59 4f 8c 03 24 86 25 4a e4 c7 09 d0 4b 77 f4 f9 94 6f 2f 17 40 41 24 29 7c 2f 57 14 fd 81 50 f8 30 fa 80 94 20 ef 4b df 7c a3 ef 4b 1f 08 bf ee f8 95 2b fc b0 9e 95 9c 59 d8 1b 22 81 3c 00 eb 8f 6e 54 9a 24 a1 95 cb 96 e8 64 34 9c e7 92 2d 2b 85 56 d6 4f 5c 92 07 e6 0f af 36 38 c1 44 8e 7c c4 91 16 ec 97 e6 c4 88 dc f3 ca 3d bb 8a f3 53 85 6a 96 44 50 40 65 43 9f 32 2b 1a ce 74 38 0f 43 99 06 b5 7b 1d 8b 42 15 bb 84 54 a0 fc 01 64 ab b7 5e c2 97 8f 64 04 14 b4 87 6e 0e 4a 8f b5 f7 9d 2a 78 ff 7f Data Ascii: 0it<y%<Y3Eg6bd3Iftx3rkPQdFlngC8SYO$%JKwo/@A$)\|/WP0 K\|K+Y"<nT$d4-+VO\68D\|=SjDP@eC2+t8C{BTd^dnJx
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: b4 d8 7c ad 1e d0 f8 b4 ba 83 3c 23 d9 e8 b1 05 3d 49 14 b1 5b 8d 8c 6d 6d fe 78 3f ad 43 36 a5 02 c3 fb dd 80 bc e4 cc 05 d9 43 ae 93 9c db 98 e6 bb 72 90 9b f6 fa 35 3d 55 1f b2 c4 61 61 fd d0 49 74 a2 97 c7 91 41 e4 b4 8c 2d 5a 7a 5a c3 02 99 df 27 a5 81 44 3f e8 25 a0 12 54 6a ee 66 97 e0 78 8d 2d 88 57 2c 87 81 64 e0 50 f8 ac 71 4b 49 37 c6 b8 18 68 60 88 2e 2f 53 be 13 9c 93 a9 70 46 08 6e 91 48 2b 85 9e ba 0a 03 20 92 4c b7 80 8a 86 14 90 7a fc 1b 2a 23 e3 35 f2 c9 04 d5 0e f9 f7 93 f2 27 87 67 c5 52 75 0e 03 f8 64 31 38 9e e9 ca b4 05 c4 60 87 e4 63 f5 76 9f 8b d5 63 52 c2 bc ad 1c bc dc a3 19 e1 6d 08 69 e9 5f 99 8a 11 02 60 a6 d4 f8 bc 6f 73 ac eb d3 95 18 ba 95 7c 17 94 d4 f3 e5 35 98 98 bf 5d 8b 36 8e d3 d2 fb 9d 49 56 8a b0 a0 02 db 9f 17 fd Data Ascii: \|<#=I[mmx?C6Cr5=UaaItA-ZzZ'D?%Tjfx-W,dPqKI7h`./SpFnH+ Lz*#5'gRud18`cvcRmi_`os\|5]6IV
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 23 8c 8c d7 4a 0f 55 e8 8a 22 a0 99 6c 6d 34 aa 32 43 40 c4 1b 0f 2f 73 8e 43 ac ce 93 18 38 f1 cc a2 30 62 4a 14 a3 9c 76 53 7f 26 da 85 c8 20 1f 95 e4 17 69 94 61 43 94 8d 0d 9c 3a 22 a3 87 50 2f ab 7e 18 0f 5f d1 d9 2f 18 9a cc 70 02 6f 0b 6d 37 56 95 a4 e3 27 c8 66 9b 20 0f 8e a8 f2 8d 4f c7 6b c1 33 e0 80 8c ce 6c 79 fe f8 91 d2 13 e1 4e d8 09 22 40 21 11 1b 8a b1 11 86 3c c2 90 69 98 f4 bf b6 a7 15 21 ae 0f b7 cf 77 41 39 35 18 f5 89 db b5 80 f0 21 4e c8 3c 87 57 09 72 45 d3 11 ba 0c 49 00 8f 63 5d 52 17 a3 9d 43 53 8e 17 04 3f a5 55 c7 77 11 85 c8 40 b1 ae f7 0d 57 01 30 c8 1b 92 40 01 41 04 43 47 28 24 a9 ff df d7 b5 bd dd e8 97 b8 5f e7 a7 76 31 aa 16 b3 05 a9 1c f3 3a d6 94 d5 78 dc ef b4 bf 77 01 4b 15 2d 6e 44 97 eb 3e 19 2d e2 9c ee f2 4a 21 Data Ascii: #JU"lm42C@/sC80bJvS& iaC:"P/~_/pom7V'f Ok3lyN"@!<i!wA95!N<WrEIc]RCS?Uw@W0@ACG($_v1:xwK-nD>-J!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49861	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	969	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e?relationships=network_location HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTI4NzM1ODU3MTEtWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUwLjg4 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: c97fd127398e082e615eab32f8d8172e Date: Fri, 01 Nov 2024 15:52:32 GMT Server: Google Frontend Content-Length: 13863 Expires: Fri, 01 Nov 2024 15:52:32 GMT Cache-Control: private Connection: close
2024-11-01 15:52:32 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 69 64 22 3a 20 22 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 72 6c 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 72 65 64 69 72 65 63 74 69 6f 6e 5f 63 68 61 69 6e 22 Data Ascii: {"data": {"id": "70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e", "type": "url", "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e"}, "attributes": {"redirection_chain"
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 73 6d 61 2e 65 73 2f 70 75 6a 72 74 71 64 67 75 79 72 3f 65 79 43 42 74 59 67 52 46 6e 52 67 78 4c 6d 56 6e 50 76 22 2c 20 22 68 74 74 70 3a 2f 2f 72 65 66 6f 72 6d 61 73 76 61 65 73 6d 61 2e 65 73 2f 70 75 6a 72 74 71 64 67 75 79 72 22 5d 2c 20 22 6c 61 73 74 5f 6d 6f 64 69 66 69 63 61 74 69 6f 6e 5f 64 61 74 65 22 3a 20 31 37 33 30 32 38 37 30 34 39 2c 20 22 74 6f 74 61 6c 5f 76 6f 74 65 73 22 3a 20 7b 22 68 61 72 6d 6c 65 73 73 22 3a 20 30 2c 20 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 7d 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 73 65 2f 75 72 6c 3f 71 3d 25 32 35 43 48 41 52 35 66 67 64 72 65 68 73 75 61 62 66 6f 6c 62 26 72 63 74 3d 25 32 35 43 48 41 52 34 6e 64 67 73 54 59 68 66 67 79 72 76 34 35 32 6a Data Ascii: sma.es/pujrtqdguyr?eyCBtYgRFnRgxLmVnPv", "http://reformasvaesma.es/pujrtqdguyr"], "last_modification_date": 1730287049, "total_votes": {"harmless": 0, "malicious": 0}, "url": "https://www.google.se/url?q=%25CHAR5fgdrehsuabfolb&rct=%25CHAR4ndgsTYhfgyrv452j
2024-11-01 15:52:32 UTC	486	IN	Data Raw: 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 6c 69 65 6e 56 61 75 6c 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 61 6c 70 68 61 4d 6f 75 6e 74 61 69 6e 2e 61 69 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 61 6c 70 68 61 4d 6f 75 6e 74 61 69 6e 2e 61 69 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 41 6c 70 68 61 53 4f 43 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f Data Ascii: : "blacklist", "engine_name": "AlienVault", "category": "harmless", "result": "clean"}, "alphaMountain.ai": {"method": "blacklist", "engine_name": "alphaMountain.ai", "category": "harmless", "result": "clean"}, "AlphaSOC": {"method": "blacklist", "engine_
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 72 63 53 69 67 68 74 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 75 74 6f 53 68 75 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 75 74 6f 53 68 75 6e 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 78 75 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 Data Ascii: "engine_name": "ArcSight Threat Intelligence", "category": "undetected", "result": "unrated"}, "AutoShun": {"method": "blacklist", "engine_name": "AutoShun", "category": "undetected", "result": "unrated"}, "Axur": {"method": "blacklist", "engine_name": "
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 6c 75 73 74 65 72 32 35 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 6c 75 73 74 65 72 32 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 43 4d 43 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 4d 43 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d Data Ascii: "harmless", "result": "clean"}, "Cluster25": {"method": "blacklist", "engine_name": "Cluster25", "category": "undetected", "result": "unrated"}, "CMC Threat Intelligence": {"method": "blacklist", "engine_name": "CMC Threat Intelligence", "category": "harm
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 72 6d 65 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 45 53 45 54 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 45 54 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 6d 61 6c 69 63 69 6f 75 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 70 68 69 73 68 69 6e 67 22 7d 2c 20 22 45 53 54 73 65 63 75 72 69 74 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 54 73 65 63 75 72 69 74 79 22 2c 20 Data Ascii: lacklist", "engine_name": "Ermes", "category": "undetected", "result": "unrated"}, "ESET": {"method": "blacklist", "engine_name": "ESET", "category": "malicious", "result": "phishing"}, "ESTsecurity": {"method": "blacklist", "engine_name": "ESTsecurity",
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 48 75 6e 74 2e 69 6f 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 49 50 73 75 6d 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 49 50 73 75 6d 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4a 75 6e 69 70 Data Ascii: , "engine_name": "Hunt.io Intelligence", "category": "undetected", "result": "unrated"}, "IPsum": {"method": "blacklist", "engine_name": "IPsum", "category": "harmless", "result": "clean"}, "Juniper Networks": {"method": "blacklist", "engine_name": "Junip
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 74 61 62 61 73 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 50 68 69 73 68 46 6f 72 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 46 6f 72 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 50 68 69 73 68 4c 61 62 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 4c 61 62 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 Data Ascii: tabase", "category": "harmless", "result": "clean"}, "PhishFort": {"method": "blacklist", "engine_name": "PhishFort", "category": "undetected", "result": "unrated"}, "PhishLabs": {"method": "blacklist", "engine_name": "PhishLabs", "category": "undetected"
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 43 55 4d 57 41 52 45 2e 6f 72 67 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 65 63 6c 6f 6f 6b 75 70 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 63 6c 6f 6f 6b 75 70 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 4f 43 52 61 64 61 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 Data Ascii: hod": "blacklist", "engine_name": "SCUMWARE.org", "category": "harmless", "result": "clean"}, "Seclookup": {"method": "blacklist", "engine_name": "Seclookup", "category": "harmless", "result": "clean"}, "SOCRadar": {"method": "blacklist", "engine_name": "
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 55 52 4c 51 75 65 72 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 55 52 4c 51 75 65 72 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 56 69 65 74 74 65 6c 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 56 69 65 74 74 65 6c 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 Data Ascii: mless", "result": "clean"}, "URLQuery": {"method": "blacklist", "engine_name": "URLQuery", "category": "harmless", "result": "clean"}, "Viettel Threat Intelligence": {"method": "blacklist", "engine_name": "Viettel Threat Intelligence", "category": "harmle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49863	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/38304.bf8d5ba4a04bb6a92f62.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: da67d3e8209c7977aa352b021143edf0 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99253 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a b1 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001000000010000000100000001000000010000000100000001
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 4c c2 cb 20 2e e9 19 4c e3 6a dd 99 63 18 0e 8f d1 79 3e 0b 27 93 60 69 86 4c a9 ce d3 23 cc 59 0d 3f 57 e0 88 eb e9 02 aa 5c 7c 79 e1 50 77 e3 99 bf 4e 4c 57 d2 79 b4 ac ae 83 b9 4f a3 c8 82 c7 99 05 e1 c5 2c 19 96 00 97 92 73 15 4e 92 99 fa 2d 08 5e 9d f8 f1 2c 9a 4e e3 00 65 64 b0 56 86 bf 5e fb 37 66 d4 4f d5 82 8c af 87 a5 36 5a 1b 23 8b fe ae 87 a5 56 9b ba a5 1d 93 6b 45 f5 28 2d 4f 43 90 c5 52 b2 f6 97 f1 ca 07 52 24 a5 23 cc ff 08 13 a3 3f 0c 8d 9f 2b 2e d0 63 ee fd 67 a5 bc 5d f9 93 09 f6 e8 00 63 5f 5d 97 5c 6e 8a 3e f8 4b e6 a5 3f 77 5c 2d f4 18 83 be f3 57 a8 5d e2 e5 95 5d 52 1a 3c ca 6e ba 27 4f f8 bb 80 c0 2a dd de c9 ae 34 a4 f6 d6 9e 96 a4 e9 df d0 94 da e6 79 42 a0 3a ca e2 ba 26 16 86 62 3d 79 22 fd d9 43 d4 69 7b c6 90 9b 37 e0 54 ac Data Ascii: L .Ljcy>'`iL#Y?W\\|yPwNLWyO,sN-^,NedV^7fO6Z#VkE(-OCRR$#?+.cg]c_]\n>K?w\-W]]R<n'O*4yB:&b=y"Ci{7T
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: dc ed ca b5 67 04 01 b2 91 11 4f 1e 2e 3c 5f e0 c2 c3 c2 f7 dc ed c3 f7 5e 6e c1 fd 24 e1 d8 11 a1 2c 18 0a 12 67 5a 82 44 4b 4c b0 04 31 b9 85 5d 1e 81 bb 1a 0d e7 59 76 99 ce e1 12 73 1d a9 04 2a f4 e6 72 bf 60 fa b5 83 f8 7a 38 51 f4 69 0f ee e1 da 40 8d 54 e3 55 b8 04 39 26 d4 1b 03 f5 3a 9d 5a bf 71 08 f5 d6 de 04 10 db 8e 06 44 ca ff b6 93 9b 35 29 35 1a 8d 5e 5f 29 35 da 1d 28 38 48 a9 51 5e 97 fb bd 3e d4 17 5a e7 a1 d4 1b a2 f4 20 ac 54 4a 0f 52 6f f4 1b 9d 7a 5f d4 1b 4a e9 41 ea 8d 3e 1a eb 41 84 82 9f 4a ff b1 a2 66 bb 28 8b de d0 40 bf d9 ef e2 f4 b8 40 01 85 ed 33 2a d0 e8 36 68 0c 48 24 8d 0c 8f 80 76 14 fd a8 37 7a b5 3e aa 6c 50 a5 d3 6d d6 91 b8 c0 cf 7a b7 db c6 b6 21 29 01 7a 6a 65 a5 04 2e 84 03 ee 63 f7 d4 7d ef be 70 7f 75 df b9 af Data Ascii: gO.<_^n$,gZDKL1]Yvsr`z8Qi@TU9&:ZqD5)5^_)5(8HQ^>Z TJRoz_JA>AJf(@@36hH$v7z>lPmz!)zje.c}pu
2024-11-01 15:52:32 UTC	474	IN	Data Raw: 9c fe 54 12 e5 c2 5f 72 bc fd 05 78 7b eb 40 06 85 fd 32 e6 1d 46 b9 66 34 08 2c 2d d0 2a 06 08 b2 c5 42 84 28 36 4e 7f 91 f5 40 56 17 98 ed f5 9f ac 04 8b 4d fd 29 18 a5 11 6c 01 4e b1 1b b8 f2 b0 84 5d 29 db 8e e5 30 eb c0 9f dc c8 f2 9b 4a ea 0a 61 be 57 73 d8 43 e5 ca 70 bd 13 1f 52 56 08 74 4d 49 c6 57 b6 44 51 72 28 48 95 34 e2 9f aa 01 80 89 e3 9e c3 f8 d5 b5 42 40 53 9f e6 f2 de 1f a5 e3 f7 97 37 a7 40 d9 51 74 6d e4 cf a6 70 b4 94 06 4e 58 fe 48 d7 91 ed 4e 9a 9e fb bf de bc c1 c2 07 13 b3 df 4d ef ca 6a 86 7a 7a 61 91 33 22 91 a0 39 a6 f1 99 1f bf 0c 63 28 e5 c3 05 04 a8 e0 67 6f bd cb 85 9e 75 97 fb b0 f0 5e b8 90 0e 9d 55 d8 94 65 3c 0b 60 5c a6 e9 8e 1a c7 bb e0 6f 9b 10 a2 5e 73 21 74 18 26 64 78 76 fa 56 2b c5 0f 4f c3 94 90 cb 9e fe 24 3c Data Ascii: T_rx{@2Ff4,-*B(6N@VM)lN])0JaWsCpRVtMIWDQr(H4B@S7@QtmpNXHNMjzza3"9c(gou^Ue<`\o^s!t&dxvV+O$<
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a ad 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a c4 0d 0a 30 30 30 66 66 62 0d 0a 7d 47 b8 32 dc 44 02 88 86 c5 1a 10 65 02 8f f4 16 b7 64 f3 61 7c 9d 9c 1b 73 81 38 53 f8 b9 34 3b 08 3c 32 70 a8 3c 67 f1 ae 60 8d e8 02 73 58 e3 cf 61 7b 06 ad 1e fe 5b 0d 97 d3 c8 61 1d 12 2d c8 4a 2b 97 16 37 50 59 58 3a 1c ec 50 58 17 a1 c4 d1 ea 99 bd 26 b6 fa 90 b2 71 0d 89 96 17 cf 84 a0 d1 d9 80 43 0b 3a 95 68 e1 40 ad 05 34 fd b7 28 ba c0 b5 24 8e 36 6b 9c ad c0 18 29 ef bc 87 b9 9e 43 d0 c3 b5 23 c6 f5 24 58 e2 34 85 35 1e 74 ab 38 8d f7 56 76 20 c0 9f d1 81 a3 da 7c f1 93 0b c2 bd 9c 84 38 c4 9c d7 cb 31 88 10 7e d0 48 96 b0 73 Data Ascii: 0000000100000001000000010000000100000001000ffb}G2Deda\|s8S4;<2p<g`sXa{[a-J+7PYX:PX&qC:h@4($6k)C#$X45t8Vv \|81~Hs
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: f5 f3 9f 9f e3 bf bb 9f c1 ed ed 7e de 81 e3 85 c3 83 da 17 06 0a 34 2b a5 f5 c2 9c 58 cc cf 60 b1 27 a7 b6 d7 1d b8 83 f3 49 21 0e e6 64 21 cf 7e e4 30 e6 96 6a 5f 0e 02 b2 b2 a4 d1 68 3a 75 15 82 e1 bd f2 80 28 10 27 92 a5 09 88 ec 71 2e 11 1d ce fd 71 40 02 45 98 89 c2 fc 75 cc 9e 5b 5e 12 26 d0 8c 24 90 9d 2f fd cb f7 11 28 09 ad 91 b4 4c 7a 0c 59 e4 63 d0 32 98 b4 43 fe b7 f2 45 72 0b ee 37 80 41 0a ae 0d cb e4 65 30 f5 37 f3 a4 ac 8d 6d 71 a0 08 56 1c 43 0d 65 93 14 52 ef a9 94 bd 30 5e 57 76 90 1a 42 6e 8c 61 c4 ef 23 75 4e 3c d2 3a 31 85 34 ea 80 53 e0 a0 a2 5e 1e 6d d8 3a 0e 52 a5 84 dd 31 82 1d 21 8e 50 50 bb 96 f4 f5 06 76 fb 18 b0 f8 80 d0 87 58 ea cb 37 24 61 c9 ec a8 89 4d 75 88 60 31 9f a8 74 a0 bc 31 35 cf f8 63 aa 06 f9 06 5b 10 a8 f3 08 Data Ascii: ~4+X`'I!d!~0j_h:u('q.q@Eu[^&$/(LzYc2CEr7Ae07mqVCeR0^WvBna#uN<:14S^m:R1!PPvX7$aMu`1t15c[
2024-11-01 15:52:32 UTC	1350	IN	Data Raw: 2c 52 6a 9a 0c 85 9a 1e 27 c4 86 6b c2 07 82 0a aa 90 a5 bb 52 b2 5e b1 cb 11 91 13 54 d0 9b 88 19 ab 22 39 39 c7 e8 ce 79 89 b1 8f 61 79 ab 19 32 f1 8c 57 d3 34 db 63 91 90 af 10 ce 16 b9 9a 1b c4 d7 09 d5 10 51 06 e4 9a af f3 e0 9d cb 7c a0 fe fe 56 27 e4 0b e6 34 b0 ea e8 cb 8e 2a 15 66 ea 71 0a a3 13 4c 04 41 f4 9d 53 be 32 02 06 49 ca 8a 22 b2 fa 49 98 88 ed a3 21 9a 14 f2 2a eb a3 af a0 a1 7e 9e a5 4a 76 61 9b 84 fe 02 70 ff 42 e0 e6 e9 69 c9 ac 39 b9 b0 45 8d 86 3c 23 8c 7e 83 7a 6f 04 89 6c 19 f5 4b 24 bf 94 e4 1d 98 9e 09 09 68 89 5c b2 4c e4 36 86 9e 0a ac 35 56 09 57 af b5 aa 74 db de 3f 20 7d 0b 02 99 b0 04 b9 a6 5f 30 13 8a 79 87 2d 70 f4 af 18 8a e9 37 1d ca ee f8 7b b6 34 1f 79 ff 81 6b c5 99 fb 17 db eb 45 c4 9f a9 4b 84 14 f5 a9 48 c6 1d Data Ascii: ,Rj'kR^T"99yay2W4cQ\|V'4fqLAS2I"I!~JvapBi9E<#~zolK$h\L65VWt? }_0y-p7{4ykEKH
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a 75 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 32 63 30 62 0d 0a 7a 0a 11 14 07 8b 10 be d4 38 5c 39 a2 14 e4 6d d3 2a c5 24 e2 78 2c 38 09 97 d0 31 d2 19 4b cb 56 98 67 16 82 34 6b 6a 96 c2 a7 ea 6e 18 1e 7a 4c 64 d5 fb 94 dd 21 34 b4 d3 18 45 fb ba 17 5d 43 2a d3 c7 60 b1 da 14 11 d4 4c 53 a4 78 09 98 87 aa 7f 11 39 f0 4b 09 af e9 4b 0b 05 d9 5e 40 9d 17 2a fa 90 2c 7e 26 43 4b 9b a1 95 8b a0 db 28 86 12 e2 30 55 10 62 ea 8e 9e 11 9f 70 1b 3a 65 a6 7c c4 73 c6 dc 95 39 b0 b5 76 39 30 c3 Data Ascii: 00000001500000001u0000000100000001P00000001~00000001100000001U00000001B002c0bz8\9m$x,81KVg4kjnzLd!4E]C`LSx9KK^@*,~&CK(0Ubp:e\|s9v90
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 25 15 47 c8 b2 f4 46 a3 76 a6 75 d7 10 37 42 e0 7b f6 5e 63 19 50 68 23 4a 46 51 45 ca f8 c6 00 79 e9 06 7e 12 14 a2 8f 22 f8 67 c2 39 cc 28 ce e7 a6 72 fc 9e ad 1b 8a 26 0b a9 86 ed 57 db e2 21 45 b0 54 b5 51 6c 02 ba a4 4c 2d 96 1a a5 15 7e 1d ea 2a 79 5d 48 da 7c 15 ae be 26 a4 0f b5 87 0d 0c 02 c7 76 8e c3 5f 49 10 dc ab 75 6e 17 04 bb 2a a8 df 6b e5 42 7c 62 76 cb 1b 18 33 b2 76 64 0c ed 88 0a e6 c7 52 f6 c3 cf 18 a9 20 7c 14 7d 12 61 fc fa 0d aa d7 69 d5 fa 12 7a af d3 e8 28 31 ef d2 7d 88 44 f9 c5 5f 2b 92 48 94 e5 65 41 ca 79 ef 80 35 44 94 28 12 20 ef 11 65 47 60 47 45 f9 0e 61 b7 cd b7 58 a3 91 1a c6 24 91 27 34 b6 11 45 52 51 46 5e 38 ff 8c 54 53 bf 9e 93 06 b4 94 cb 18 9c 93 70 f9 22 d3 59 87 ec 40 b8 13 ed f1 ab 07 21 df b8 5b 69 4f 77 5b ae Data Ascii: %GFvu7B{^cPh#JFQEy~"g9(r&W!ETQlL-~y]H\|&v_IunkB\|bv3vdR \|}aiz(1}D_+HeAy5D( eG`GEaX$'4ERQF^8TSp"Y@![iOw[
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 68 8e d6 be 63 93 31 53 55 45 aa bf a5 aa 25 8d 53 a3 3c a7 c9 59 a4 52 35 66 49 06 11 18 0e 57 5e 32 f3 62 4e e4 5c 79 31 bb f5 76 cd c5 ff 4a 6f a2 e8 23 19 8e 92 65 2a b4 ed 3a 5a 30 c5 23 64 ab 5c dc 84 55 e8 c3 8c ad 2b 62 10 e7 ce 2c 11 dc 17 16 cf c8 2f 0a 42 e1 9a 45 b2 4d 26 bc 03 2d ff fa da d9 80 1e 0b a7 00 89 e2 72 68 1b 8c 3a bf 01 e6 a9 7a 07 d4 10 2e 87 30 18 0f 26 02 bc fd 24 51 8e 0f 36 07 c5 b3 b4 a9 74 33 73 9d 1f d1 75 7e 8e b0 ee 77 5d e7 af ec eb 27 ed c6 f4 d6 79 a8 ae 75 9d cf d4 96 c3 9e 88 c3 e7 b7 51 bc 4c 17 47 01 21 44 a6 df 9c 70 b5 58 41 9e 64 3d 34 ec 82 14 e2 6a a8 9b c8 4b 67 f7 dd b6 99 bb a7 eb f6 15 2c d5 bb 07 cd d4 09 3d 48 b8 da eb b7 c9 a4 16 26 e8 1e a2 fc cb 0b f1 30 92 55 2f c4 23 2d 84 23 44 19 12 9e ca 31 64 Data Ascii: hc1SUE%S<YR5fIW^2bN\y1vJo#e*:Z0#d\U+b,/BEM&-rh:z.0&$Q6t3su~w]'yuQLG!DpXAd=4jKg,=H&0U/#-#D1d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49860	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	689	OUT	GET /gui/44288.d69fcc0ea934ea412b4a.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 47bbc3e539e1b72fc8eba51445b71049 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:14:00 GMT Expires: Sat, 25 Oct 2025 15:14:00 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607112 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	367	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 66 31 0d 0a ff 7c 8e 41 4f 83 40 14 84 ef fe 0a 82 97 b7 c9 66 5b 2a 51 5a 82 17 e3 ad 5e 34 7a 21 a4 79 5d 5e db 2d ed 96 f0 76 51 43 f9 ef 22 3d d8 93 a7 99 cc 7c 99 4c e8 99 02 76 8d d1 2e 4c 81 e9 b0 51 9f b4 ae 51 57 4f 3b 6f ab d6 ad bc 59 1d d1 d8 ec 9f ee 7c ce 0b a1 6a cf 3b c8 f3 38 9e 25 49 21 bb 51 17 e0 24 49 16 d9 63 c7 aa 01 12 92 55 09 24 bb 8f 93 a3 67 eb 8c fb 5e c0 d0 a2 fc 0b 96 86 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000f1\|AO@f[*QZ^4z!y]^-vQC"=\|Lv.LQQWO;oY\|j;8%I!Q$IcU$g^
2024-11-01 15:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49866	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/13420.2099364bebdd02277cf9.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6e2f96b58eaafe8eab52a985092ced24 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:19:55 GMT Expires: Sat, 25 Oct 2025 19:19:55 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 592357 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 31 0d 0a 92 0d 0a 30 66 65 66 0d 0a ff 7f 3e 05 8c cd 7a 81 31 08 53 b7 4c 99 56 14 d9 89 9d 91 8f 58 72 2e ad d6 81 c8 96 88 98 04 18 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001y00000001w0000000100000001F0010fef>z1SLVXr.
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 95 03 15 b2 a5 5e 37 48 c3 59 92 47 67 6a ff f0 d0 f7 4e c3 3d 7f c1 fd 30 cb 5b 95 ab e2 ab 59 51 80 1b cc 00 87 d1 65 5e 4c 8b d3 e4 75 ff fe d2 93 e3 ee c9 bd 3e b6 b5 be f4 ab ab 5a 47 59 11 fa ed 5f 5d dd e3 27 16 36 c1 0c b4 00 3c 95 31 d6 d2 18 ca 21 de 7f 10 9d aa 31 e0 23 6a 2f 34 e9 a9 3e f1 24 86 81 94 6a 6f 23 80 01 16 08 ff 22 8d 87 4e 97 66 de 2d 7a 4d 18 35 c1 3f 3c fe ef 07 9d 93 2f 1e 86 85 ca 0b 4f f9 bb ee fe 2c 2f d2 89 db 53 4b 64 c9 f0 08 19 19 88 84 0d 1a 10 c8 7a 0d 47 31 70 32 ca 10 5f 38 8a 72 af f0 77 27 61 4c 72 64 3f 9d 25 45 36 7f 15 4d 14 5a 7b ae 8c 77 65 93 d2 ac f8 6a 6e 5e a7 99 b4 b6 5e a1 8c 7e ff 68 d7 3d 44 67 e7 74 ee 68 f4 ba bd d6 8e 2f ab 8e 16 7f ba 3d 33 5c bf d8 da 88 fa eb 79 bf 20 0c 65 72 ab db ae fb 7d 0c Data Ascii: ^7HYGgjN=0[YQe^Lu>ZGY_]'6<1!1#j/4>$jo#"Nf-zM5?</O,/SKdzG1p2_8rw'aLrd?%E6MZ{wejn^^~h=Dgth/=3\y er}
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: f0 18 c2 e7 60 71 4b 93 30 cc 01 25 9b 5f 72 c8 97 ed db d9 64 90 e6 fc cd 0d aa d8 9e f6 88 37 c8 3e a2 98 d6 9a 7b 73 ac fd 4b 95 55 aa fd 4a e2 31 09 6a 8f 8d 96 60 ba 98 df 8b 7a 37 db 5c 35 5d ed b6 c5 49 70 bc 04 9d f6 04 c9 96 1e 5a 2a 90 56 53 f4 82 48 4a b4 2e 84 27 94 d1 4f d1 c7 f0 5e e0 d2 08 39 7f e0 5c d3 58 b1 ac 38 1c 4a 4d af 87 06 45 c4 41 db cb 8c 87 46 7a 94 0e 8b 3c fe 5d c9 0b e4 41 5e 7f db 5b d6 ea 03 f2 ea 15 d0 27 f6 ed a3 eb 0b 90 e3 17 20 47 12 a4 b4 77 30 5e c8 23 25 e7 da 01 1e 1e d8 b4 3a 8e ce 8d 74 8a c6 f1 39 53 dc 59 67 00 4d 5a 65 10 47 71 9e 1a 89 50 92 10 86 3c 31 93 07 ad e6 3d 3c c3 c6 0f d0 fa 3c 2c d2 83 f4 a3 ca f6 a3 1c 26 19 8e e1 c1 78 06 d6 f4 54 fd 01 a6 31 2c ac b1 a0 19 5d f6 46 90 50 ee 0e ef da ad cc fa Data Ascii: `qK0%_rd7>{sKUJ1j`z7\5]IpZ*VSHJ.'O^9\X8JMEAFz<]A^[' Gw0^#%:t9SYgMZeGqP<1=<<,&xT1,]FP
2024-11-01 15:52:32 UTC	429	IN	Data Raw: d4 03 d7 5d 80 37 fc 38 71 8a 56 9a 90 1d c3 b2 29 fb 01 1b 53 f2 85 44 32 92 b3 f8 7c c6 12 8b 7e 7f cc e2 42 47 39 16 7e af 00 31 f6 e3 a0 58 d0 ae 0c 8b da b6 20 d9 e3 df 39 2e 7f 20 c7 c5 10 bb 33 63 69 23 d4 e0 be 4b 3e 24 70 85 ec a7 43 45 87 1a 9d 8c 43 b5 a0 74 a3 69 d1 f7 de ff 1f 64 aa 90 67 e3 28 2d a2 71 2d db c4 d2 cc cb ac 14 b8 a3 a3 49 8e fc 8b 9f bf 09 9f 3e fb 7a ef dd 81 ce 10 e1 70 35 e9 e3 e2 41 62 0d 4e 0c ad 81 24 1b b0 b5 52 4f 82 29 10 90 94 a4 12 d2 c4 d8 7c d5 9d 1b ad 17 71 1e e3 d8 d4 69 0b 8d 87 67 71 96 17 87 e4 c6 86 76 22 51 4a a4 c5 ac 70 d0 1b 56 38 42 f1 3c 73 bd db b3 64 38 4d e3 a4 20 3b bd 0a d6 eb 50 6d 63 2d c2 80 da 4c 24 0f 88 2c 51 9a 11 c7 e5 e9 09 85 da 62 84 28 29 9b 2c 53 51 9f 99 26 78 09 f7 44 b1 80 bf d9 Data Ascii: ]78qV)SD2\|~BG9~1X 9. 3ci#K>$pCECtidg(-q-I>zp5AbN$RO)\|qigqv"QJpV8B<sd8M ;Pmc-L$,Qb(),SQ&xD
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 66 66 62 0d 0a cb 01 d6 b6 5e 3f c8 ea c4 03 2b d2 69 1f 43 cf 1b 1d 85 c6 1a dd 11 c8 89 a1 69 fe ce 39 1b 42 32 1e bc 07 67 e1 8f 53 1c 0f b4 39 d5 9b b0 4c 68 09 c8 cf 81 3d f3 b4 41 ba 77 98 96 67 6b 0c 96 19 35 3a 6d 8a 2d e7 73 0d b5 d6 3a ed fe e2 98 6d 6b a3 fa c5 2f a0 57 7f d1 b6 38 b1 3f ca 23 dd 75 75 fc 8f 48 96 23 fe 01 d9 0b 88 85 69 52 02 6b 11 08 31 de 48 49 00 5f 5c c6 7a 72 69 57 68 e7 61 78 a2 f4 93 5f 18 4d 35 78 cb e5 48 7a 9a a6 06 dd 85 bb b3 de de de 8d 1f 71 27 21 e6 2a 9f 48 92 16 1a db 14 18 cc 70 7b 0d 0c 4e 45 d0 2c 5f 65 Data Ascii: 000000010000000100000001C00000001k00000001g0000ffb^?+iCi9B2gS9Lh=Awgk5:m-s:mk/W8?#uuH#iRk1HI_\zriWhax_M5xHzq'!*Hp{NE,_e
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: cc e4 6d af cf 10 a6 32 81 3e 94 8b d5 27 03 82 af 9f 2a 35 53 a5 d5 54 3b 79 5f fc b8 e4 20 33 85 38 14 5b da 6d 26 a4 f4 2e 19 d2 1e 4a 74 28 15 5e 47 79 38 5b 3c de 8d ad a6 85 44 f4 70 f6 c8 59 d7 10 bc 96 87 4b 6b 58 75 05 44 1a b5 bf 82 f5 8d 1c 7c a9 b5 b1 cf d9 52 3a 33 a8 3f 30 1a 81 c1 6a fb cb 79 fd 9e ab 19 c9 05 c2 e9 bc 17 78 6f 87 aa 94 02 04 d8 10 a4 82 54 1f d0 f5 58 3b b8 88 ef ae a3 2b 2c 08 7e a1 02 24 ae c6 c3 1d 21 27 ce 4b 25 a2 51 a2 13 dd 0e 00 a3 a5 b9 41 00 a6 e7 d2 91 f0 f9 53 95 3b 50 29 a9 75 3b 0b 2c 4f ee 23 a1 00 21 98 05 47 54 10 63 2e e2 f1 df ef 8d 20 68 13 4f 94 f7 99 2d 23 74 69 75 f1 76 7c 99 0d 33 1e 2c 3e 71 b0 4b 2c 3d 44 e3 ed 97 38 b0 1a 65 d5 7c 46 50 8d 63 69 ad ec 8b ed 2a 87 31 62 86 da cf 4a 94 66 12 da cd Data Ascii: m2>'5ST;y_ 38[m&.Jt(^Gy8[<DpYKkXuD\|R:3?0jyxoTX;+,~$!'K%QAS;P)u;,O#!GTc. hO-#tiuv\|3,>qK,=D8e\|FPci1bJf
2024-11-01 15:52:32 UTC	1351	IN	Data Raw: bb 52 bd e4 94 83 74 65 18 51 f3 05 dd a4 61 e3 8c 4c 70 34 44 85 ee d4 a4 e9 da d9 b3 24 ca 98 91 2b 41 28 5a 06 3c ed 7f 50 12 6a 2d a5 21 0c 59 0b 2a 05 98 45 cd b5 36 8b a0 75 7b 29 9c 1a 60 95 72 5b 7d 82 ae 0e 31 cd f7 d4 98 7d 99 94 2a 3f 69 b9 e5 2b e2 04 4a 75 34 de 27 5b ba 6c 94 09 5e 40 49 2e 9b 48 61 ce a2 41 61 37 7e a9 cd 6a a3 38 b3 a7 b1 ac 1e 35 22 b4 06 4d db 79 5e 52 32 09 86 28 64 79 47 e1 0d ef 12 46 28 5f 33 24 68 bf e5 24 2e c9 db b8 08 da 8c 7e a1 ed da 7e 48 13 6f 46 45 f9 07 26 7a 4b 7a 43 e3 cc a9 cd 21 de 87 60 b5 1b cc c2 c1 48 5d 64 69 f2 14 f6 34 a1 a9 6a 79 37 e5 df 2c 44 97 bd 14 32 df 9f e5 5a 28 1f 16 6b fe 06 d6 fc ad c9 9a 77 57 ba 6c c5 4c 13 ce cd 3b c7 4b 13 89 22 86 2e 69 53 d0 c4 62 b2 64 1d 52 0b 98 0f 91 42 01 Data Ascii: RteQaLp4D$+A(Z<Pj-!YE6u{)`r[}1}?i+Ju4'[l^@I.HaAa7~j85"My^R2(dyGF(_3$h$.~~HoFE&zKzC!`H]di4jy7,D2Z(kwWlL;K".iSbdRB
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 25 0d 0a 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 44 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 63 61 34 0d 0a cb c0 ae c2 1d ec bd 37 f0 dd 21 fd 8d b2 db d2 f1 05 35 49 0a 3c 5e 61 55 86 8f aa 33 bd ba b3 c1 94 d9 92 c4 43 82 56 59 b4 ac ed 19 ae 7a d7 d3 5b 45 ca 34 31 c3 8c 54 6f 5d 48 4d d7 92 57 8b c4 dd e7 c8 06 a1 bc 50 dc be 80 74 d0 c0 a5 8b 15 38 34 5f 56 3d 22 bd a9 d1 87 6b 6a b9 53 e2 49 ba 0e 1d 39 8b aa 2c 7b 40 b8 33 01 f0 6a 11 98 07 89 ad 92 34 f8 ef 8b 27 90 28 ff af 79 f1 04 b2 21 b1 fb cc 84 ff 02 f7 4e c8 6a 4c 9a d8 d2 6d 1c ff 64 d7 4e c8 6a 2e Data Ascii: 0000000100000001%000000010000000100000001Z00000001D00000001\|0000ca47!5I<^aU3CVYz[E41To]HMWPt84_V="kjSI9,{@3j4'(y!NjLmdNj.
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 1d a8 0a 0b 59 da 1f 73 87 95 5e f5 6d 9b 20 ae 5f bd 0f b4 a6 32 6f c4 00 f0 a7 56 55 ce c6 f8 8a 25 47 1a 33 cb d6 48 79 40 03 3f 57 57 1c 45 e0 40 6e 9d 2e 45 be 8d f9 db 6a 3a 4c 4c c6 82 16 90 e2 72 31 d0 b6 61 5e 12 bd 78 77 f9 32 4a da 23 62 38 6e b1 b7 c5 aa 96 96 ab 23 b5 9c a0 54 05 f9 b3 01 33 43 a6 d3 5d 9b 8f 4a 14 ec de 65 5d 25 60 d0 0f 98 4b c0 bd 36 68 56 e9 9d 80 e6 9b af cb a1 ec ae 1c 41 bb 6a 8f b2 aa ec ec 05 35 41 a5 f3 a3 9a 8f 04 90 ce 83 b0 e7 ca 0d cd e2 da 01 5c 24 02 ab bd 0d d7 1a 23 86 15 48 f2 e9 dc aa 43 2a bd b0 27 54 66 42 a8 33 3c 21 c4 f7 22 e0 2f 05 5a 2e 3d da 65 72 ce 69 df 1b ca c7 cd d7 0c e9 c3 86 fa 6b 86 e4 9c d3 5f 33 ac 9c 73 70 b8 91 9f 8e bf 46 88 0f 1b 7a 2b dd 4d 78 f7 e4 cb 86 eb dd 6d b9 3f 75 18 cc 82 Data Ascii: Ys^m _2oVU%G3Hy@?WWE@n.Ej:LLr1a^xw2J#b8n#T3C]Je]%`K6hVAj5A\$#HC*'TfB3<!"/Z.=erik_3spFz+Mxm?u
2024-11-01 15:52:32 UTC	522	IN	Data Raw: f6 59 bb 92 46 ea 8e 51 08 e9 9c 30 c3 2a 7b ec ae e3 58 1f 2e 4b 1a 96 15 e2 83 60 0f 2a e5 1e 65 ab 0e ad 6c 55 c4 47 12 f2 a8 ef 1f 1e fa de 80 b2 55 87 fe ce 21 27 ab a6 94 8e 0a 1b b7 c0 07 8b e4 a3 54 9c 56 45 79 96 fb 76 a6 2a 5b b6 65 92 e5 75 63 ab fc d4 da e0 da de 57 59 7d d7 cd 62 65 8c d6 a6 b1 14 bc 3f 37 89 75 14 dd 3e 91 98 6b 4b 08 61 e4 2f 8f ae b2 37 6b a0 8b f6 57 75 df ef 9b c5 37 d3 19 25 5d 5b 30 56 16 d4 52 5a e3 3e e2 7f ab ab 9b db 1b 6d 2e d0 47 1b eb 5b 72 57 6b 82 b0 0e 2e 20 8a bd b5 ed 0d 7c 09 07 f7 0f 22 44 e7 a5 74 fd 20 5c a5 db db 9b 8f 28 df 10 df 7b f7 e8 63 eb 3b e3 30 46 f6 18 28 62 2c d7 f4 1d c3 2b 3b 0c f0 0d 74 97 92 11 54 b8 d7 1f e3 b5 f4 55 a9 7f c4 6b 8d 7f 5b ea 59 2f e9 fb a1 82 b9 de fa 23 7c 3f 74 51 07 Data Ascii: YFQ0{X.K`elUGU!'TVEyv*[eucWY}be?7u>kKa/7kWu7%][0VRZ>m.G[rWk. \|"Dt \({c;0F(b,+;tTUk[Y/#\|?tQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49867	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	510	OUT	GET /gui/30192.1c015be440de00e9b531.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:32 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 0c4325ba2c3ff2aa7763b75a2684a224 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:21 GMT Expires: Fri, 31 Oct 2025 12:18:21 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99251 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:32 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 66 66 32 0d 0a db 46 b2 ee ff f3 14 30 27 e3 4d ce 80 34 49 89 ba 50 a6 15 47 76 66 bc 62 27 19 cb f1 ac 35 de 5e 0a 48 82 22 62 10 e0 00 20 65 45 e6 5a e7 35 ce eb 9d 27 39 5f 55 5f 50 b8 50 17 c7 ce c9 de db 71 12 4b Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}000000010000001v0ff2F0'M4IPGvfb'5^H"b eEZ5'9_U_PPqK
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: aa 2c a8 85 15 bd c2 96 fb 00 ed b3 68 ba 22 2a ea a7 d7 ae 2f 9b 27 be 97 b5 3d 42 1c ac ee e6 e5 02 75 bd c5 d2 0b ce 23 42 52 8b 07 f8 25 f1 97 71 f2 87 85 c7 4b ff 1c e8 7a 27 60 fc d7 5a e8 8b 38 0b d6 1e 9d c9 3b 2c f2 0f 86 bc 8f d3 34 9e 04 44 19 1e 13 42 5e bf 10 bb 3d 7f b0 45 bc e4 73 40 84 f1 da 93 f7 c7 3c 2e cf e2 c9 49 bc 8a 32 3f b9 76 f2 e2 e0 ff a1 a0 9f 04 e9 bb 97 38 04 75 cc 88 c9 33 04 8c 9c 8f f8 35 6c c6 97 af fd 2d 6c c6 37 6c c6 ef d0 88 67 90 42 30 24 18 51 75 8c 4f c1 ca 96 89 3f 85 38 ec 4f cf e4 68 9b 7c b1 27 71 08 be 0f f6 ab 64 0d ac 8b 98 7d fe 1e af 0c 47 06 eb eb 64 f1 f3 f8 c2 4f 4e bc d4 6f b6 72 f6 d5 08 e3 8b 46 eb b8 91 41 c2 68 07 d1 2c 6e 0c b7 b7 5d 60 4a ab 85 6d 0e 96 18 01 04 d7 7d 31 0f ce e7 b6 fd 3c 8e fc Data Ascii: ,h"*/'=Bu#BR%qKz'`Z8;,4DB^=Es@<.I2?v8u35l-l7lgB0$QuO?8Oh\|'qd}GdONorFAh,n]`Jm}1<
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: ef 99 7d 17 22 0d e4 22 43 4b 60 06 df a2 21 7a 06 04 9e 98 08 1b 22 dd 37 6f 1a 45 ab 5b 13 ae 07 86 88 da ab 57 6c 92 63 03 c8 33 20 15 b6 e5 ad 5b 35 44 d2 47 d3 ce 78 75 4e 6d a8 41 c5 30 e9 aa 26 73 6f b1 f0 93 7f a2 ef c9 dc b4 b5 a6 13 dd 26 63 a3 a1 79 ab 2d 13 fc 4e 51 27 43 8f 2a bb 6f cf 85 80 cf 5d 35 e8 98 b1 af 45 d2 48 27 a7 9d a9 42 ca ce df e2 f8 3c f4 15 4c 9e e1 84 85 c7 d3 ce 34 9e fc 13 9c 1d bc 8e a6 3c 9c 76 ce c3 78 4c 76 ea 77 f4 fb 86 a0 b1 5e 85 91 9f 68 ad af a1 97 39 09 92 49 e8 3f 8f 27 dc ee ed 5b b7 a9 40 94 f3 02 fa 1e 67 e3 ee c7 60 52 83 28 13 83 03 93 df e7 18 54 76 67 5e 33 a9 79 8e bd f3 d1 7c 0b f6 ce cd cc e7 1d 92 0c e8 7c 84 1d 26 c1 2f bc 65 ab 79 55 a7 6e 0f ef 55 c9 e6 d8 4c 40 50 c2 71 4e 36 c7 a3 b1 9c 40 b1 Data Ascii: }""CK`!z"7oE[Wlc3 [5DGxuNmA0&so&cy-NQ'C*o]5EH'B<L4<vxLvw^h9I?'[@g`R(Tvg^3y\|\|&/eyUnUL@PqN6@
2024-11-01 15:52:32 UTC	396	IN	Data Raw: d9 f1 6a 4c 12 75 c1 97 55 2d f4 14 f3 3d 2d ed 9b 30 d1 ef 3a 84 f3 6d d6 3d c1 0c da 55 13 3f 53 87 ba ff e5 e0 a3 70 91 72 34 a4 c4 9d 27 98 c3 13 c2 c7 87 4c 8b d2 d5 82 c8 2d 3b 6f 1c c4 56 f8 e1 a8 41 a1 94 29 6d 16 3c 11 69 be 5d 95 f6 d8 b5 ca 33 d3 c7 0f 08 5b 05 e3 89 ce 9d d3 cb 94 fa b9 4d 7f d8 22 a5 f9 09 bb ad 3d 96 bf 41 89 d1 b1 90 67 c4 44 d2 ea 10 46 8a 90 86 14 f8 72 8d 12 5a 52 60 c4 3c 02 a3 84 06 1d 8a 88 e6 f5 9e a5 6a bd 92 36 31 96 5c 1f d0 29 b7 e8 19 b6 e8 19 6f 11 9c fd 3a f4 13 27 b9 ba 51 26 42 14 a2 88 69 47 60 b6 bf e4 7b 97 3f 2b 74 44 44 bd 02 f1 4f a1 bc 28 33 34 c2 9c f2 81 cf e6 01 40 94 4c e6 97 67 eb fe 35 d0 a9 84 77 4a d0 3c 05 68 9e d2 09 52 84 36 2d ac c6 e0 9e 05 8b ee 0a 30 d1 cd 73 80 d4 7d 5f 0b 0d ab 63 89 Data Ascii: jLuU-=-0:m=U?Spr4'L-;oVA)m<i]3[M"=AgDFrZR`<j61\)o:'Q&BiG`{?+tDDO(34@Lg5wJ<hR6-0s}_c
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8c 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0e 0d 0a 30 30 30 30 30 31 0d 0a d3 0d 0a 33 30 62 37 0d 0a b3 a9 bf 96 94 30 32 d3 88 58 90 af 4e 64 6a b4 10 31 c0 34 9f c8 14 1a 55 ce cd 65 cf a5 46 0c 54 84 60 15 9a 98 c1 a7 9d c2 24 6b 70 a7 2e 58 57 62 cd f7 c0 9a ef e9 d8 08 a1 49 b8 d9 7b 8a f9 22 d0 e1 a2 dd 25 b1 46 34 ab 91 da 8d 08 de 78 a4 c6 75 c8 35 a9 e3 2b 98 41 5b 8e 5c 11 Data Ascii: 00000001U000000010000000100000001{00000001000000010000000100000001T00000001g000000010000000100000130b702XNdj14UeFT`$kp.XWbI{"%F4xu5+A[\
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: cf 18 71 1a 4b 2f 9b cc 9f 52 2a 51 33 42 eb 13 45 1a f8 f7 c6 1a df b7 f1 7d c3 bd 1a af c6 30 47 a6 c3 7b 5d 97 d4 82 18 ca 05 ff ec 21 48 00 ee 95 d0 c7 6f 1b 64 92 a8 b5 8a 1d 02 dd 87 fe bc 41 f4 7a 4e f6 d3 8e 20 fb 1e 91 7d d4 2c 59 31 d9 8f 2b 64 5f a1 25 11 bb b5 a4 fb 62 88 9c c4 6d eb 43 93 f1 4a 27 94 2b a5 91 fc e6 4e 54 26 63 a5 0f bb eb 37 f7 a0 8a 89 d4 f7 40 27 e8 b7 f5 a0 71 2b ef 64 3d 32 f0 28 13 7c e3 74 81 8d 99 e9 3d bb c9 1a 04 62 10 fd 43 94 f1 d9 a9 29 39 54 47 f4 6d 71 21 2a 39 74 d8 df eb 1d aa 92 43 ba b8 10 95 1c ea 0d 76 77 50 46 88 4a 0e e9 32 42 54 72 68 77 b7 3b 40 4d 22 2a 39 c4 65 8f a8 e4 10 38 08 97 3b a2 7a 41 cc 79 e8 87 bd fe 00 0d 91 73 d9 dc 3b 40 59 21 7a b4 83 56 18 07 15 88 06 87 87 5c 81 68 f7 60 07 f5 89 38 Data Ascii: qK/RQ3BE}0G{]!HodAzN },Y1+d_%bmCJ'+NT&c7@'q+d=2(\|t=bC)9TGmq!9tCvwPFJ2BTrhw;@M"*9e8;zAys;@Y!zV\h`8
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 4d 6a 2a cd e4 88 f1 87 0f 31 53 8a ba 11 6b d6 6a 3b cb df 95 46 d5 74 aa a6 a1 1c 17 51 8f 8a 42 89 71 51 48 c4 a7 7a 04 7e fa 1c 65 62 ec 32 8b 8f 4b a3 69 2f 4b b1 8d 1c 08 49 32 28 12 05 22 2c 06 82 de 85 7c 32 15 af 57 18 aa fc a2 34 98 26 9a e5 56 72 38 58 5c c3 f2 70 40 44 72 c9 4b 0a 5b 18 75 cb fb d2 e0 9a 8a 6e 69 2c e7 00 81 6c 6a e7 80 5c 00 c6 e0 9c 6f c8 79 58 20 d7 bf 06 03 04 12 97 08 82 fc be 93 fa 19 92 91 bc 45 da bc b2 ee 9a 74 f8 c2 2d a4 0a 0d df 34 38 79 a7 f1 d6 78 ad ea 87 d3 93 86 2e 0d f3 28 93 89 a8 b3 d2 41 6a 20 06 6c e9 2c af a6 c4 4b 6a 16 54 6a 81 35 e1 e0 96 17 55 6a f4 11 eb 32 47 bd c2 7e 4a 5d cb 9d 5a 7d f8 b0 ba 79 d1 86 12 e4 40 ab d2 82 9a 77 b5 9b 67 bf bc e3 0a a1 db 95 e3 3a 79 37 cd aa 11 28 57 64 1b 76 20 b9 Data Ascii: Mj*1Skj;FtQBqQHz~eb2Ki/KI2(",\|2W4&Vr8X\p@DrK[uni,lj\oyX Et-48yx.(Aj l,KjTj5Uj2G~J]Z}y@wg:y7(Wdv
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: c7 e6 c0 8a a9 ba 96 e6 6b 63 ab f3 2d 5d cc 86 10 06 04 75 98 f6 fa 55 e3 96 bd 9b d8 8a bc 6f 6b d2 14 9d e6 cf ae ef b6 ce f3 83 9e ad a2 22 16 53 9c a0 24 4b 45 c0 d4 08 c6 06 f5 8a 9b 5d dd 24 55 2f eb 4e 12 83 3d 07 56 8d 2d 5b 74 ae b1 df 68 aa 24 39 b9 b0 97 34 e4 74 75 8c fb 4d d1 05 c4 cd 19 1b ea 1a 72 48 c3 36 e4 e7 97 c5 13 20 c7 3f 51 97 25 c0 5b a4 f5 0f f9 52 7f 5b 05 a8 2a fb 55 3c d1 db 78 1a 5f 90 20 52 78 29 08 bf 2e 71 b6 af 0a 56 15 b3 70 4d 81 2f 4a ca 94 2c d1 5e e2 f0 0a 47 c4 41 f8 15 e5 a8 22 3d 14 0c c7 89 62 e7 1d f2 7a 71 35 a5 a0 01 94 99 ea 45 97 4e ba f4 27 c1 2c 98 20 fb 94 55 65 96 1c 28 9b 94 2f 38 74 d4 05 87 ae 33 d1 c7 c1 75 90 3c 8f 24 55 e3 05 a5 14 db 84 a3 89 3a b5 ac 17 87 3d c4 89 3d 8f 70 11 05 4c 79 7f 43 20 Data Ascii: kc-]uUok"S$KE]$U/N=V-[th$94tuMrH6 ?Q%[R[*U<x_ Rx).qVpM/J,^GA"=bzq5EN', Ue(/8t3u<$U:==pLyC
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: a1 fb d1 65 40 0b b6 d4 b1 37 3d cf cb dc 2f 91 8f e2 8c cf cb 55 f0 79 7a a6 32 3e 76 01 86 56 58 07 09 e2 6a 82 6c f7 81 32 42 7f c3 32 aa 1e d6 9a 48 35 c8 d9 52 9a db 5a 38 da c7 e0 2f 4c 27 c2 09 29 d1 56 d8 4a 38 a8 cd 7c 01 6b c6 96 2f 44 20 85 d8 33 2a 8a e5 c9 cb 32 4d 47 b7 8a d2 e3 f4 62 d4 47 24 43 b2 4a b3 a5 fc 9d dc 4b 0a a5 b7 f6 fc 09 49 3b b9 7f 3f 81 c3 55 1a 48 96 38 52 4b 1c 29 2a a8 98 97 65 61 b3 27 bc 07 e6 1e d9 ad e6 4d bb d5 db 7d bf ea 3a 0f b3 54 aa a5 5b a0 3f 55 2a 21 d4 14 04 05 5a ba 06 95 e2 a6 2f 45 be d9 0c be 63 be a6 41 8a c4 b8 aa 14 17 03 16 6b 9d 66 3a 18 d4 ed 91 8d 55 fd 72 dc 80 df 11 d2 b4 b6 64 82 5e 9b 84 cc 1c 77 aa 01 7e 2a 60 17 d4 c9 56 b7 09 ed 4d cc 6d aa ea 42 a6 31 90 ba 6b ac c5 f2 6e 14 d6 e7 f2 f1 Data Ascii: e@7=/Uyz2>vVXjl2B2H5RZ8/L')VJ8\|k/D 32MGbG$CJKI;?UH8RK)ea'M}:T[?U!Z/EcAkf:Urd^w~`VMmB1kn
2024-11-01 15:52:32 UTC	1408	IN	Data Raw: 97 f3 57 3d 55 83 4a 5c 8f 8e 76 2c 8e 68 86 2f cc 07 48 42 08 60 ba 31 73 35 77 82 b7 36 d5 76 48 1e f0 3a af 3b 24 e1 35 1b 01 ec b2 2a be 95 6e 10 58 c6 4b 1a 1d e5 fc e9 39 52 09 5e e1 69 3a cc 01 84 9b 56 f0 04 a5 57 f8 5c 70 81 07 98 8b 10 d3 03 a0 65 af 70 fe 7c 14 70 de 80 47 6e f1 9c 24 64 1b 09 5b 47 cb 1b 95 bc b9 64 03 25 25 6f db d7 f6 02 98 c2 c7 8c 66 39 f7 98 8f cc e7 65 0d 91 cf af 09 42 21 9f 13 e9 88 73 70 0c 0e 05 11 1c e3 76 3a e2 7e af 6b 39 07 2e 3e e9 2a 93 8b e5 1c 39 df 58 7f e1 1b 9f 88 6f 2c ab 7c c3 eb 3c b9 62 df c3 cd ec 42 a9 40 e9 08 95 3a 99 10 88 98 05 7a 78 8d 11 46 b1 83 55 91 84 4f 71 35 bc ff de 51 32 3a c5 32 45 b8 3f 0f ae 8c 1a 22 64 e9 b0 9e 02 1c b4 38 86 29 52 3e 2d 69 12 0e 0b c5 30 68 34 19 40 81 18 8b 8a ce Data Ascii: W=UJ\v,h/HB`1s5w6vH:;$5nXK9R^i:VW\pep\|pGn$d[Gd%%of9eB!spv:~k9.>9Xo,\|<bB@:zxFUOq5Q2:2E?"d8)R>-i0h4@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49865	142.250.185.100	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	660	OUT	GET /js/bg/p-7RyvuJU9m0QQmVDJx8SL9t4pWXVpOJSp0296ydJmo.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:32 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18916 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 31 Oct 2024 15:23:32 GMT Expires: Fri, 31 Oct 2025 15:23:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 22 Oct 2024 16:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 88140 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 15:52:32 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 66 3d 28 62 3d 6e 75 6c 6c 2c 7a 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 66 7c 7c 21 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 54 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 54 2c 63 72 65 61 74 65 53 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var z=this\|\|self,L=function(f,b){if(f=(b=null,z).trustedTypes,!f\|\|!f.createPolicy)return b;try{b=f.createPolicy("bg",{createHTML:T,createScript:T,createS
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 57 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 34 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 29 7b 66 6f 72 28 64 3d 28 54 3d 42 28 66 29 2c 30 29 3b 62 3e 30 3b 62 2d 2d 29 64 3d 64 3c 3c 38 7c 67 28 66 29 3b 68 28 54 2c 66 2c 64 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 47 3f 62 4b 28 66 2e 59 2c 66 29 3a 65 28 38 2c 66 2c 74 72 75 65 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 66 2e 47 29 72 65 74 75 72 6e 20 62 4b 28 66 2e 59 2c 66 29 3b 72 65 74 75 72 6e 20 62 3d 65 28 38 2c 66 2c 74 72 75 65 29 2c 62 26 31 32 38 26 26 28 62 Data Ascii: LC',' SPDX-License-Identifier: Apache-2.0','*/','var W=this\|\|self,f4=function(f,b,d,T){for(d=(T=B(f),0);b>0;b--)d=d<<8\|g(f);h(T,f,d)},g=function(f){return f.G?bK(f.Y,f):e(8,f,true)},B=function(f,b){if(f.G)return bK(f.Y,f);return b=e(8,f,true),b&128&&(b
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 66 29 2c 42 28 66 29 29 2c 5a 28 66 2c 64 29 29 29 2c 54 2c 66 29 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 2c 6c 2c 6b 29 7b 69 66 28 62 2e 41 2e 6c 65 6e 67 74 68 29 7b 62 2e 5a 53 3d 28 28 62 2e 52 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 62 29 2e 52 3d 74 72 75 65 2c 66 29 3b 74 72 79 7b 6c 3d 62 2e 42 28 29 2c 62 2e 49 3d 6c 2c 62 2e 53 3d 30 2c 62 2e 76 3d 30 2c 62 2e 4c 3d 6c 2c 54 3d 57 31 28 66 2c 62 29 2c 66 3d 64 3f 30 3a 31 30 2c 6b 3d 62 2e 42 28 29 2d 62 2e 49 2c 62 2e 4b 57 2b 3d 6b 2c 62 2e 70 57 26 26 62 2e 70 57 28 6b 2d 62 2e 4f 2c 62 2e 67 2c 62 2e 55 2c 62 2e 53 29 2c 62 2e 4f 3d 30 2c 62 2e 67 3d 66 61 6c 73 65 2c 62 2e 55 3d 66 61 6c 73 65 2c 6b 3c 66 7c 7c 62 2e 41 63 2d 2d 3c 3d 30 7c 7c 28 6b 3d 4d 61 74 Data Ascii: f),B(f)),Z(f,d))),T,f)},I=function(f,b,d,T,l,k){if(b.A.length){b.ZS=((b.R&&":TQR:TQR:"(),b).R=true,f);try{l=b.B(),b.I=l,b.S=0,b.v=0,b.L=l,T=W1(f,b),f=d?0:10,k=b.B()-b.I,b.KW+=k,b.pW&&b.pW(k-b.O,b.g,b.U,b.S),b.O=0,b.g=false,b.U=false,k<f\|\|b.Ac--<=0\|\|(k=Mat
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 28 7a 7c 30 29 26 28 31 3c 3c 7a 29 2d 31 29 3c 3c 28 6c 7c 30 29 2d 28 7a 7c 30 29 2c 6c 2d 3d 7a 2c 59 2b 3d 7a 3b 72 65 74 75 72 6e 20 68 28 31 39 39 2c 62 2c 28 4f 7c 28 64 3d 54 2c 30 29 29 2b 28 66 7c 30 29 29 2c 64 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 2c 6c 2c 6b 29 7b 69 66 28 64 2e 43 3d 3d 64 29 66 6f 72 28 6b 3d 5a 28 64 2c 62 29 2c 62 3d 3d 35 36 7c 7c 62 3d 3d 37 30 7c 7c 62 3d 3d 32 34 35 3f 28 62 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 70 2c 79 2c 7a 29 7b 69 66 28 6b 2e 7a 59 21 3d 28 70 3d 28 7a 3d 6b 2e 6c 65 6e 67 74 68 2c 28 7a 7c 30 29 2d 34 3e 3e 33 29 2c 70 29 29 7b 70 3d 28 70 3c 3c 33 29 2d 28 79 3d 5b 30 2c 30 2c 28 6b 2e 7a 59 3d 70 2c 6c 5b 31 5d 29 2c 6c 5b 32 5d 5d 2c 34 29 3b 74 72 79 7b 6b 2e 4d 37 3d 79 Data Ascii: (z\|0)&(1<<z)-1)<<(l\|0)-(z\|0),l-=z,Y+=z;return h(199,b,(O\|(d=T,0))+(f\|0)),d},Q=function(f,b,d,T,l,k){if(d.C==d)for(k=Z(d,b),b==56\|\|b==70\|\|b==245?(b=function(O,p,y,z){if(k.zY!=(p=(z=k.length,(z\|0)-4>>3),p)){p=(p<<3)-(y=[0,0,(k.zY=p,l[1]),l[2]],4);try{k.M7=y
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 68 28 66 2c 54 3e 3e 38 26 32 35 35 2c 54 26 32 35 35 29 2c 6c 21 3d 76 6f 69 64 20 30 26 26 4f 2e 70 75 73 68 28 6c 26 32 35 35 29 29 2c 66 3d 22 22 2c 64 26 26 28 64 2e 6d 65 73 73 61 67 65 26 26 28 66 2b 3d 64 2e 6d 65 73 73 61 67 65 29 2c 64 2e 73 74 61 63 6b 26 26 28 66 2b 3d 22 3a 22 2b 64 2e 73 74 61 63 6b 29 29 2c 64 3d 5a 28 62 2c 33 39 37 29 2c 64 5b 30 5d 3e 33 29 29 7b 64 3d 28 66 3d 4e 50 28 28 64 5b 66 3d 66 2e 73 6c 69 63 65 28 30 2c 28 64 5b 30 5d 7c 30 29 2d 33 29 2c 30 5d 2d 3d 28 66 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 2c 66 29 29 2c 62 2e 43 29 2c 62 2e 43 3d 62 3b 74 72 79 7b 62 2e 61 45 3f 28 70 3d 28 70 3d 5a 28 62 2c 33 36 30 29 29 26 26 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 6b 3d 5a 28 62 2c 35 34 29 29 26 26 6b Data Ascii: h(f,T>>8&255,T&255),l!=void 0&&O.push(l&255)),f="",d&&(d.message&&(f+=d.message),d.stack&&(f+=":"+d.stack)),d=Z(b,397),d[0]>3)){d=(f=NP((d[f=f.slice(0,(d[0]\|0)-3),0]-=(f.length\|0)+3,f)),b.C),b.C=b;try{b.aE?(p=(p=Z(b,360))&&p[p.length-1]\|\|95,(k=Z(b,54))&&k
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 68 28 37 30 2c 66 2c 28 68 28 31 36 38 2c 28 28 68 28 31 31 36 2c 28 50 28 38 30 2c 28 50 28 32 31 36 2c 28 50 28 32 35 2c 28 50 28 31 39 30 2c 28 50 28 28 68 28 32 36 2c 66 2c 28 68 28 31 39 39 2c 28 28 66 2e 6c 61 61 6e 74 66 3d 28 66 2e 6b 75 79 64 71 73 3d 5b 5d 2c 66 2e 63 70 6e 71 6a 6e 3d 22 22 2c 66 2e 62 67 6f 64 6e 64 3d 30 2c 5b 5d 29 2c 66 2e 44 26 26 66 2e 44 2e 61 29 26 26 28 28 64 3d 66 2e 44 2e 62 29 26 26 28 66 2e 62 67 6f 64 6e 64 3d 64 29 2c 28 64 3d 66 2e 44 2e 63 29 26 26 28 66 2e 63 70 6e 71 6a 6e 3d 64 29 2c 28 64 3d 66 2e 44 2e 64 29 26 26 28 66 2e 6b 75 79 64 71 73 3d 64 29 2c 28 64 3d 66 2e 44 2e 65 29 26 26 28 66 2e 6c 61 61 6e 74 66 3d 64 29 29 2c 66 29 2c 30 29 2c 30 29 29 2c 36 38 29 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 Data Ascii: h(70,f,(h(168,((h(116,(P(80,(P(216,(P(25,(P(190,(P((h(26,f,(h(199,((f.laantf=(f.kuydqs=[],f.cpnqjn="",f.bgodnd=0,[]),f.D&&f.D.a)&&((d=f.D.b)&&(f.bgodnd=d),(d=f.D.c)&&(f.cpnqjn=d),(d=f.D.d)&&(f.kuydqs=d),(d=f.D.e)&&(f.laantf=d)),f),0),0)),68),f,function(z)
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 2c 4d 2c 4e 29 7b 66 6f 72 28 4e 3d 28 4d 3d 28 4c 3d 5a 28 7a 2c 28 59 3d 28 78 3d 42 28 7a 29 2c 6e 3d 4c 34 28 7a 29 2c 22 22 29 2c 35 31 31 29 29 2c 4c 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 6e 2d 2d 3b 29 4e 3d 28 28 4e 7c 30 29 2b 28 4c 34 28 7a 29 7c 30 29 29 25 4d 2c 59 2b 3d 70 5b 4c 5b 4e 5d 5d 3b 68 28 78 2c 7a 2c 59 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 66 34 28 7a 2c 34 29 7d 29 29 2c 68 29 28 34 37 35 2c 66 2c 5b 31 36 30 2c 30 2c 30 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 2c 6e 29 7b 68 28 28 59 3d 28 6e 3d 5a 28 7a 2c 28 4c 3d 28 6e 3d 28 59 3d 42 28 7a 29 2c 42 29 28 7a 29 2c 42 29 28 7a 29 2c 6e 29 29 2c 5a 28 7a 2c 59 29 3d 3d 6e 29 2c 4c 29 2c 7a 2c 2b 59 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 29 Data Ascii: ,M,N){for(N=(M=(L=Z(z,(Y=(x=B(z),n=L4(z),""),511)),L.length),0);n--;)N=((N\|0)+(L4(z)\|0))%M,Y+=p[L[N]];h(x,z,Y)})),function(z){f4(z,4)})),h)(475,f,[160,0,0]),function(z,L,Y,n){h((Y=(n=Z(z,(L=(n=(Y=B(z),B)(z),B)(z),n)),Z(z,Y)==n),L),z,+Y)})),function(z,L,Y)
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 77 20 78 5b 4d 5d 3a 6e 3d 3d 31 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 29 3a 6e 3d 3d 32 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 29 3a 6e 3d 3d 33 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 2c 4c 5b 32 5d 29 3a 6e 3d 3d 34 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 2c 4c 5b 32 5d 2c 4c 5b 33 5d 29 3a 32 28 29 2c 68 28 59 2c 7a 2c 4c 29 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 2c 6e 2c 78 2c 4d 2c 4e 29 7b 69 66 28 21 47 28 74 72 75 65 2c 74 72 75 65 2c 7a 2c 4c 29 29 7b 69 66 28 54 4c 28 28 59 3d 28 78 3d 5a 28 28 4d 3d 5a 28 28 4c 3d 28 4d 3d 28 59 3d 28 4c 3d 28 78 3d 42 28 7a 29 2c 42 28 7a 29 29 2c 42 28 7a 29 29 2c 42 28 7a 29 29 2c 5a 28 7a 2c 4c 29 29 2c 7a 29 2c 4d 29 2c 7a Data Ascii: w x[M]:n==1?new x[M](L[0]):n==2?new x[M](L[0],L[1]):n==3?new x[M](L[0],L[1],L[2]):n==4?new x[M](L[0],L[1],L[2],L[3]):2(),h(Y,z,L))})),f),function(z,L,Y,n,x,M,N){if(!G(true,true,z,L)){if(TL((Y=(x=Z((M=Z((L=(M=(Y=(L=(x=B(z),B(z)),B(z)),B(z)),Z(z,L)),z),M),z
2024-11-01 15:52:32 UTC	1378	IN	Data Raw: 20 30 29 2c 66 7d 2c 41 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 74 68 69 73 2e 48 3d 74 68 69 73 2e 6c 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 54 29 7b 62 2e 63 34 28 54 29 2c 66 2e 63 34 28 54 29 7d 2c 28 66 3d 28 62 3d 28 28 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 39 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 3d 3d 3d 30 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 6c 2f 74 68 69 73 2e 6e 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 29 2e 63 34 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 6c 29 7b 74 68 69 73 2e 6c 2b 3d 28 6c 3d 54 2d 74 68 69 73 2e 48 2c 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 48 2b 3d 6c 2f 74 68 69 73 2e 6e 2c 6c 29 2a Data Ascii: 0),f},AB=function(f,b){function d(){this.H=this.l=this.n=0}return[function(T){b.c4(T),f.c4(T)},(f=(b=((d.prototype.O9=function(){return this.n===0?0:Math.sqrt(this.l/this.n)},d.prototype).c4=function(T,l){this.l+=(l=T-this.H,this.n++,this.H+=l/this.n,l)*
2024-11-01 15:52:33 UTC	1378	IN	Data Raw: 74 65 3d 3d 3d 22 6c 6f 61 64 69 6e 67 22 26 26 28 62 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 4f 7c 7c 28 4f 3d 74 72 75 65 2c 6b 28 29 29 7d 57 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 4f 3d 66 61 6c 73 65 2c 70 29 2c 4a 29 2c 57 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 70 2c 4a 29 7d 29 7d 7d 2c 53 2c 4a 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 28 66 3d 28 62 3d 6e 75 6c 6c 2c 57 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 66 29 7c 7c 21 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 66 2e 63 72 65 61 74 65 50 Data Ascii: te==="loading"&&(b.Z=function(k,O){function p(){O\|\|(O=true,k())}W.document.addEventListener("DOMContentLoaded",(O=false,p),J),W.addEventListener("load",p,J)})}},S,JB=function(f,b){if((f=(b=null,W.trustedTypes),!f)\|\|!f.createPolicy)return b;try{b=f.createP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49871	142.250.185.131	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:32 UTC	752	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=h5acdqhznrsa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:33 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Fri, 01 Nov 2024 15:52:32 GMT Date: Fri, 01 Nov 2024 15:52:32 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-11-01 15:52:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49882	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	980	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/comments?relationships=author&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTA4NzA3OTkwOTQtWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 96a16a709f0c16a4da6bd82534658c3a Date: Fri, 01 Nov 2024 15:52:33 GMT Server: Google Frontend Content-Length: 194 Expires: Fri, 01 Nov 2024 15:52:33 GMT Cache-Control: private Connection: close
2024-11-01 15:52:33 UTC	194	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 63 6f 6d 6d 65 6e 74 73 3f 6c 69 6d 69 74 3d 35 26 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 61 75 74 68 6f 72 22 7d 7d Data Ascii: {"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/comments?limit=5&relationships=author"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49879	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	977	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?relationships=owner&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTMxNzE2NTUzMTItWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 996e39a3265c77e068f87b0eea094431 Date: Fri, 01 Nov 2024 15:52:33 GMT Server: Google Frontend Content-Length: 191 Expires: Fri, 01 Nov 2024 15:52:33 GMT Cache-Control: private Connection: close
2024-11-01 15:52:33 UTC	191	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 67 72 61 70 68 73 3f 6c 69 6d 69 74 3d 35 26 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 6f 77 6e 65 72 22 7d 7d Data Ascii: {"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?limit=5&relationships=owner"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49880	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	976	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?relationships=voter&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTE0MDE1NDg4NTQtWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 64216b9f151513c5ad0306bf34be0b10 Date: Fri, 01 Nov 2024 15:52:33 GMT Server: Google Frontend Content-Length: 190 Expires: Fri, 01 Nov 2024 15:52:33 GMT Cache-Control: private Connection: close
2024-11-01 15:52:33 UTC	190	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 76 6f 74 65 73 3f 6c 69 6d 69 74 3d 35 26 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 76 6f 74 65 72 22 7d 7d Data Ascii: {"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?limit=5&relationships=voter"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49883	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	510	OUT	GET /gui/29990.af467ebfc75146d97344.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 77f9333c42cac043796f6706238d6242 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:19 GMT Expires: Fri, 31 Oct 2025 12:18:19 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99254 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 31 0d 0a ff 0d 0a 30 66 66 36 0d 0a ec 7d 6b 9b db c6 91 ee f7 fd 15 10 d7 d6 12 36 00 91 1c ce 8d 23 6a 3c 91 e5 78 8e 25 db ab 99 24 9b 9d cc 91 41 b2 49 22 02 01 2e 00 ce 25 14 ff fb be 55 d5 0d 34 78 99 91 ec 24 bb e7 39 b2 12 89 ec 6b 75 75 55 75 dd ba d9 58 e4 ca c9 8b 2c 1a 16 8d 93 66 ae e2 71 70 ab 06 f3 70 f8 fe e5 74 91 bc bf 29 de 2d a2 77 b3 30 4a fa 0f d4 7d f8 70 75 ed 06 f3 45 3e 6d 5e Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100010ff6}k6#j<x%$AI".%U4x$9kuuUuX,fqppt)-w0J}puE>m^
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: f2 40 33 da b7 61 11 f6 af ae 57 40 f2 48 65 af a3 bc a8 93 bd 45 6b f7 a0 b5 7b d0 da 6e 06 d7 64 35 f3 c3 45 91 12 87 db fc ae d9 dd 67 79 62 f8 25 10 09 41 eb 2a 8b f0 b9 c8 b0 1d 76 e1 c3 72 61 bb 58 00 f9 66 cd f5 b5 62 f5 9e f2 d2 60 e6 e5 c1 bf 7b cd 1c f2 61 bd 49 3f af c9 0a 41 57 ae 8a 3f 92 e4 90 01 37 b0 e5 42 a2 68 1c d6 f1 e7 f0 e8 1b ed 57 2b ac 12 a2 f9 6d 5f 37 ef bf 00 a6 93 60 f1 85 db 24 3e e2 c3 ca fb 99 24 fb 32 bf 8d 8a e1 14 bc a5 6e 20 c1 99 ad 20 d9 41 46 8d ef a2 0c 63 7c 17 c5 aa d1 e3 82 d7 61 fd bb 34 f8 c3 db d7 76 7d f5 55 aa bf 4d e9 74 b5 5b d4 4a a4 d1 f9 cf 67 a3 51 a6 f2 dc 6e 67 15 8a 90 b4 a8 e5 06 d4 72 43 92 29 c7 11 60 04 8e c8 1a 87 e5 4e 01 aa f5 07 e9 e8 de cf 15 90 31 0a b3 7b 23 84 a8 cb 0b ee c8 52 69 5d c8 Data Ascii: @3aW@HeEk{nd5Egyb%A*vraXfb`{aI?AW?7BhW+m_7`$>$2n AFc\|a4v}UMt[JgQngrC)`N1{#Ri]
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 82 4f 92 b8 e1 9c 4e a3 d1 48 19 d7 41 89 23 f4 35 9f 59 bb 5d 6b 26 52 5c 94 5b 31 4f d7 1a ec 30 38 d3 1b 95 8d e3 f4 d6 bf cd e0 4a 0b 93 fb db a9 c2 f9 c1 a0 54 be 3e a3 3d 3e 7f 16 c3 99 86 73 42 05 39 9c a0 83 f4 4e e5 e4 42 34 38 98 03 07 73 c6 81 08 79 dd c8 a7 d5 fa f0 32 39 55 b7 d2 35 02 66 ca 22 78 53 4b 97 a8 41 d1 4c f9 9d c6 0b a3 e4 af 0f 45 a7 95 05 85 f7 a4 85 f3 3b 48 52 ec 5c 32 f1 14 8c 5d 9a f4 25 39 0d 7b 8d 06 7c 0f 4f a4 04 9d a8 02 ff 90 67 ae 88 e6 36 fc e2 f0 25 ea 14 f8 75 13 67 9e e6 d0 49 c9 9f 03 6f d8 b4 68 90 ae 61 6f 9a d9 19 ed ca d5 dd b4 8f b4 9c c9 25 40 a0 9b c0 3d 46 d3 83 31 09 28 fd 95 ff 01 2a 93 80 95 88 37 e1 1c c7 6d e3 76 0a ca f0 b1 ad 43 e5 e3 88 e6 5d 6a f4 9e a0 5b 3e 4d 17 f1 08 96 c8 ed ab 7c 18 ce d5 Data Ascii: ONHA#5Y]k&R\[1O08JT>=>sB9NB48sy29U5f"xSKALE;HR\2]%9{\|Og6%ugIohao%@=F1(*7mvC]j[>M\|
2024-11-01 15:52:33 UTC	345	IN	Data Raw: 91 8d db ff 09 82 62 46 f8 e7 ec 38 11 02 25 5e 51 da 60 8d c7 24 ec 6c 61 19 07 a1 de af f2 88 b4 58 52 82 a2 84 c1 ca e3 d8 a4 75 b8 46 88 6e 9c 0c 94 2f f7 e1 43 23 79 16 1a f7 16 b9 a0 90 a6 81 dc c0 db 63 49 b5 a3 dc b3 1c 89 59 ea 3b f6 9f 23 70 5e 44 50 f6 0b a4 63 10 05 ba c8 0f e2 7f e0 79 3a 63 cf 53 6a 78 ea de 84 9d 2a cf d3 85 ed 79 22 c9 5d 39 3d 4c 67 52 b5 94 db 84 33 a3 d6 78 dd b4 30 d1 aa 8f eb 56 ea db 9f d6 ad 22 60 d3 ef a2 6f 26 dc ee 9a a1 88 1e f2 1c b1 30 5a 00 b4 61 4a 9c b5 9d 31 01 e2 aa f0 9f 48 da ef 99 4e 11 82 36 93 5f 02 ab 70 25 aa 97 e4 4c 4b 91 b7 98 b1 d5 7b e3 51 8c 4e d2 85 b8 e0 0e 09 c0 26 72 dc e9 1c 51 b6 2f b9 72 f6 3b 07 fb f0 c1 70 e2 ef 61 bb 8b 64 5e 4a fc 3d 3a dc eb c2 1d 43 4e 9a ee 21 e7 00 53 e2 6f b7 Data Ascii: bF8%^Q`$laXRuFn/C#ycIY;#p^DPcy:cSjx*y"]9=LgR3x0V"`o&0ZaJ1HN6_p%LK{QN&rQ/r;pad^J=:CN!So
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 31 62 33 63 0d 0a 1c b9 70 92 2b 5c e5 d3 ce 29 7a 02 37 1c c7 9d 8b 7e fb a4 78 be 1e cc 39 29 be fe da ac 5f 94 b3 b2 05 72 78 ad d4 e4 e2 1a a9 c9 27 c5 97 9d d3 91 46 0b 65 d3 c2 ad 1d 60 82 57 21 b2 e5 9a f6 ca 16 12 fd c6 18 a4 13 f6 1e 59 61 7e aa 1b d4 02 d8 d0 14 30 ca 63 5d 01 86 db b3 60 da 01 d0 b6 09 ee 19 c8 47 26 00 72 e1 ab 96 64 43 46 b0 aa 10 ac 57 69 36 12 19 a9 25 0e 80 79 a2 2a bb 84 28 cd ca 33 78 62 f2 0c d8 19 a4 8d 20 47 31 dd c3 0a b8 12 1a 42 1c e0 e7 2c 9a c1 bf 7f a3 ae 89 26 85 49 a1 44 Data Ascii: 000000010000000100000001}00000001300000001C00000001T0001b3cp+\)z7~x9)_rx'Fe`W!Ya~0c]`G&rdCFWi6%y*(3xb G1B,&ID
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 14 18 24 32 07 c1 f4 7b 17 5b 00 fc 43 34 75 ad 0b 69 79 80 fc 16 be 1f 62 1b 7f e2 ab b5 41 76 b1 bb 2a 11 89 20 b2 98 64 3c 36 3b dc d8 60 dc c0 41 68 96 74 0f cb 4b 64 6d 37 b2 75 e9 22 c6 83 0d f4 95 8e 07 db 54 37 53 76 37 23 b5 6d 07 18 d7 a2 34 c1 0a 26 ea 59 12 d0 84 65 80 46 ff 08 00 f4 a9 9c 86 f0 4d 64 a4 ad 11 36 42 61 f5 e1 f2 40 01 ba b3 84 e5 95 5a 13 88 57 ac 2d b6 e9 ec b1 ea 24 f8 0d ab 76 de 9c 37 97 d8 4a d4 81 42 2d a4 01 2c 70 24 71 14 08 73 bd 12 12 03 17 9d de e5 4a c1 8d 57 5e 82 ea fd 22 57 93 be 58 aa d5 2f 00 37 ff b5 a3 23 ef 69 cb e0 7c 97 4a 8f ad 59 e9 aa 0e be c0 5c b9 07 7b 19 a0 78 a4 09 52 8e 34 0b 01 1b 8c 22 76 a1 1b 91 61 9f 64 d6 aa fd da c6 56 d8 70 5d 60 11 0b df 1c a8 d6 a1 5c a0 5f 1b bf 2c e6 61 d6 d6 08 7b 9a Data Ascii: $2{[C4uiybAv* d<6;`AhtKdm7u"T7Sv7#m4&YeFMd6Ba@ZW-$v7JB-,p$qsJW^"WX/7#i\|JY\{xR4"vadVp]`\_,a{
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 7a b3 4a e2 7d 05 22 31 5a e1 3d 1d 93 0e e4 5e 49 7f c8 da b8 d7 80 81 e2 d6 59 03 9e b5 8d 32 84 ef 48 21 20 36 a1 c7 3c ca 2f 38 97 8a 32 dc 80 9c 76 0e 4d 9e 5a d0 c1 fc c4 f9 91 07 df 93 bd f2 06 17 27 91 95 8f 5b 04 bf 20 ff 12 51 8b db 90 f3 32 15 05 34 1d 00 45 29 9b 08 54 54 88 a6 eb 63 c2 96 c0 97 3d f1 a9 94 f6 18 67 ab 00 d4 01 6d 1a 8f 31 81 93 2e c3 c1 8f e1 4d 34 61 9d a0 c9 a5 98 db 7e a2 69 cb 02 4f 1b a0 4f 12 10 17 c3 30 49 00 87 e0 27 c2 65 ff 5f e0 e5 b0 97 6c 6a 7e 81 77 8f 2d 3b d6 37 84 2e df be 3a fb f6 cf 9a 2a 37 e2 59 bc df b2 36 3a df 85 fd 88 d6 36 ef 8d fd 26 02 5e 63 b1 4d 62 fe 7d 4a 58 86 1b 0f 71 62 75 13 81 84 35 ca b1 dc c7 49 5a 7a cb 3a c0 08 36 65 7f 2c 69 fe f3 b7 aa 4e fe 24 f7 08 f1 b2 7f 94 b1 68 24 9c e4 af ee Data Ascii: zJ}"1Z=^IY2H! 6</82vMZ'[ Q24E)TTc=gm1.M4a~iOO0I'e_lj~w-;7.:*7Y6:6&^cMb}JXqbu5IZz:6e,iN$h$
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: cc 5f b2 58 16 b0 25 7f 82 45 35 aa f8 cc c5 6b 27 39 1e 3e cc a2 71 cf 69 e8 e7 15 2f 50 46 6e d2 86 e7 bc 4d 07 78 76 cb fc fb 6d 16 8e 0b cf f9 5e c1 2d 4b 2f e7 79 ce 19 cc 9b d8 73 aa 51 64 4a 1e ba 3c c7 ab 91 5f e2 aa 9c 1e b9 ac 95 1e 93 2c c4 55 cc 04 aa 22 b9 83 c2 cc 37 05 cd f6 11 36 65 e2 39 58 5e d8 34 2b d3 6b 6c 05 78 a7 61 47 15 b4 62 ad 29 42 15 b3 f5 8b 4a 4b 5b c3 c0 46 87 3c fa 9b ea b5 49 3d 5c 1b e9 56 11 1b f7 a0 15 6b 5c f2 53 ac ec c8 9a ea aa 76 60 ce 37 7a a5 55 eb 87 38 0b 71 b8 6a 5a e7 3e 5c 21 9b b3 07 91 4a 02 b0 db b5 a6 1b 90 f4 2e 4f 42 ee 02 f6 d8 b5 d5 46 b8 95 f3 95 a2 a9 5e b3 85 1a 2a a9 61 60 dd 3b d8 1b 76 8d 08 2d d9 ca 02 78 bf eb 39 07 a0 a7 43 7d 12 56 43 08 d4 c7 e3 70 3c 90 b5 d8 55 1a fa 2e 0e 03 bc 03 4f Data Ascii: _X%E5k'9>qi/PFnMxvm^-K/ysQdJ<_,U"76e9X^4+klxaGb)BJK[F<I=\Vk\Sv`7zU8qjZ>\!J.OBF^*a`;v-x9C}VCp<U.O
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 2b d8 38 58 f0 b3 58 64 14 23 06 67 b1 ab e9 06 d6 bc 25 36 ad 3a e1 dd ce 58 35 5b ee 6a 1f c5 66 4a ba 72 6a 46 65 31 6b 8f c5 3f d9 31 c5 0f 84 00 0c 64 bc de 2e ed 9e 41 ab 5d 9b d8 6e 7c 8b 1b 82 4b 38 60 bf 2c a5 f9 0c e1 d4 52 4e f4 e0 2b 6f 7d e9 b4 be 04 99 6d 2b 5e ad 02 79 ca b6 14 a0 f4 eb 4b 27 f4 17 a2 a8 f4 23 4a a4 1c 61 81 27 4c 29 f2 4b 57 3d f9 cd 06 5d 44 bf e2 d0 83 b4 52 38 23 56 01 bd ed 6a d4 20 f6 d8 f7 d8 1c b0 45 32 bd 81 b0 14 cd 8a 04 9d b0 7f b9 93 51 32 5f d0 4f ad 30 bf 0a 8b 57 7c 6f 99 9b ae 04 39 4a b8 25 de 56 ee bf e6 27 fd 5a ed d6 07 31 c5 49 41 74 04 25 aa 3b bf 73 49 83 a3 97 32 21 7b c1 47 3e a5 d3 08 3d 9b d3 cb 88 47 e6 8f 1e 49 76 2d f1 5a 27 ba aa d7 5a c5 d1 92 59 8b 02 4a f4 00 6f 0f ee fb 68 0e 5f ea 89 08 Data Ascii: +8XXd#g%6:X5[jfJrjFe1k?1d.A]n\|K8`,RN+o}m+^yK'#Ja'L)KW=]DR8#Vj E2Q2_O0W\|o9J%V'Z1IAt%;sI2!{G>=GIv-Z'ZYJoh_
2024-11-01 15:52:33 UTC	21	IN	Data Raw: 4f 5a fe 37 00 00 00 ff ff 03 00 e6 5e c6 16 e4 91 00 00 0d 0a Data Ascii: OZ7^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49881	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	966	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/last_serving_ip_address HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTc4NDc1NDQ4MjItWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: f7a90092f84a82a847e9cd464734b723 Date: Fri, 01 Nov 2024 15:52:33 GMT Server: Google Frontend Content-Length: 15293 Expires: Fri, 01 Nov 2024 15:52:33 GMT Cache-Control: private Connection: close
2024-11-01 15:52:33 UTC	526	IN	Data Raw: 7b 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 6c 61 73 74 5f 73 65 72 76 69 6e 67 5f 69 70 5f 61 64 64 72 65 73 73 22 7d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 31 7d 2c 20 22 64 61 74 61 22 3a 20 7b 22 69 64 22 3a 20 22 38 32 2e 32 32 33 2e 36 37 2e 31 34 36 22 2c 20 22 74 79 70 65 22 3a 20 22 69 70 5f 61 64 64 72 65 73 73 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 Data Ascii: {"links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/last_serving_ip_address"}, "meta": {"count": 1}, "data": {"id": "82.223.67.146", "type": "ip_address", "links": {"self": "https://www.v
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 39 38 34 33 63 65 64 63 63 64 33 38 37 35 66 33 63 63 33 37 64 35 65 35 36 39 38 65 37 32 33 65 65 33 38 66 30 64 64 65 34 35 35 65 36 63 66 62 63 32 34 32 37 36 62 66 32 34 64 31 34 37 37 65 37 34 32 65 36 36 66 63 35 30 36 34 38 61 39 34 39 39 35 63 65 39 62 36 65 30 30 34 66 64 37 65 38 36 65 36 65 33 66 30 65 64 33 63 30 32 39 62 66 39 66 62 36 34 36 31 61 35 39 38 30 62 38 62 30 62 66 36 34 64 30 37 33 30 63 33 65 38 35 36 63 66 35 66 62 66 66 38 30 31 34 38 30 35 63 65 37 39 33 66 65 31 34 36 34 30 63 39 30 35 31 63 64 34 37 62 34 66 35 62 31 61 61 39 63 32 66 63 30 34 39 37 35 66 37 30 37 37 66 62 36 66 31 34 33 32 34 30 65 31 34 34 66 30 36 64 62 65 61 66 63 63 30 39 34 65 31 35 64 30 34 30 64 35 63 38 34 35 31 64 35 30 62 62 39 37 66 63 62 65 36 Data Ascii: 9843cedccd3875f3cc37d5e5698e723ee38f0dde455e6cfbc24276bf24d1477e742e66fc50648a94995ce9b6e004fd7e86e6e3f0ed3c029bf9fb6461a5980b8b0bf64d0730c3e856cf5fbff8014805ce793fe14640c9051cd47b4f5b1aa9c2fc04975f7077fb6f143240e144f06dbeafcc094e15d040d5c8451d50bb97fcbe6
2024-11-01 15:52:33 UTC	486	IN	Data Raw: 64 39 30 62 61 37 63 37 35 31 66 64 62 33 36 39 36 65 63 62 63 31 63 31 36 65 61 64 32 34 61 66 31 37 66 64 63 37 65 39 62 63 65 64 63 36 62 37 39 63 66 30 64 65 31 34 31 33 39 37 65 36 37 36 66 32 31 39 36 36 33 36 66 35 37 61 63 64 63 32 61 35 63 61 30 33 30 38 36 37 35 32 37 35 65 33 37 37 32 38 35 37 65 38 31 37 64 35 64 61 38 62 36 62 35 31 36 38 61 30 63 33 64 36 64 34 30 39 33 32 38 35 31 30 64 63 30 65 32 32 32 30 35 38 34 62 37 33 62 65 32 64 37 36 63 65 33 61 39 61 61 64 62 39 61 35 39 39 37 35 66 65 38 33 32 32 66 37 39 61 38 38 63 65 39 38 36 64 32 65 34 31 61 35 65 63 38 33 36 31 37 63 36 30 30 62 63 38 61 37 32 62 37 31 65 63 36 37 66 38 33 37 65 66 36 32 35 66 38 31 37 30 31 66 32 61 37 39 64 30 62 33 64 31 38 62 62 39 36 65 36 39 66 66 30 Data Ascii: d90ba7c751fdb3696ecbc1c16ead24af17fdc7e9bcedc6b79cf0de141397e676f2196636f57acdc2a5ca0308675275e3772857e817d5da8b6b5168a0c3d6d409328510dc0e2220584b73be2d76ce3a9aadb9a59975fe8322f79a88ce986d2e41a5ec83617c600bc8a72b71ec67f837ef625f81701f2a79d0b3d18bb96e69ff0
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 6d 62 70 72 69 6e 74 22 3a 20 22 66 30 39 31 38 37 36 61 66 38 38 61 31 32 31 65 38 33 36 34 34 37 38 39 65 39 64 61 61 62 39 62 32 39 61 65 33 36 39 61 22 2c 20 22 73 65 72 69 61 6c 5f 6e 75 6d 62 65 72 22 3a 20 22 33 62 62 35 37 38 32 33 61 63 62 36 64 33 32 37 35 36 35 30 62 39 30 64 37 65 35 33 31 31 39 36 38 34 37 22 2c 20 22 69 73 73 75 65 72 22 3a 20 7b 22 43 22 3a 20 22 55 53 22 2c 20 22 4f 22 3a 20 22 4c 65 74 27 73 20 45 6e 63 72 79 70 74 22 2c 20 22 43 4e 22 3a 20 22 52 31 30 22 7d 2c 20 22 73 75 62 6a 65 63 74 22 3a 20 7b 22 43 4e 22 3a 20 22 76 70 73 30 2e 70 79 6d 65 75 70 2e 6e 65 74 22 7d 7d 2c 20 22 6c 61 73 74 5f 6d 6f 64 69 66 69 63 61 74 69 6f 6e 5f 64 61 74 65 22 3a 20 31 37 33 30 34 31 37 37 34 34 2c 20 22 77 68 6f 69 73 22 3a 20 22 Data Ascii: mbprint": "f091876af88a121e83644789e9daab9b29ae369a", "serial_number": "3bb57823acb6d3275650b90d7e531196847", "issuer": {"C": "US", "O": "Let's Encrypt", "CN": "R10"}, "subject": {"CN": "vps0.pymeup.net"}}, "last_modification_date": 1730417744, "whois": "
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 3a 20 32 30 31 36 2d 30 34 2d 31 31 54 31 36 3a 31 36 3a 34 38 5a 5c 6e 73 6f 75 72 63 65 3a 20 52 49 50 45 5c 6e 22 2c 20 22 74 6f 74 61 6c 5f 76 6f 74 65 73 22 3a 20 7b 22 68 61 72 6d 6c 65 73 73 22 3a 20 30 2c 20 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 7d 2c 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 32 2e 32 32 33 2e 30 2e 30 2f 31 36 22 2c 20 22 6a 61 72 6d 22 3a 20 22 32 39 64 32 39 64 31 35 64 32 39 64 32 39 64 30 30 30 34 32 64 34 32 64 30 30 30 30 30 30 64 66 31 33 33 30 31 39 36 30 30 61 38 33 61 62 66 62 30 39 36 66 66 33 65 38 36 63 64 37 39 64 22 2c 20 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 72 65 73 75 6c 74 73 22 3a 20 7b 22 41 63 72 6f 6e 69 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e Data Ascii: : 2016-04-11T16:16:48Z\nsource: RIPE\n", "total_votes": {"harmless": 0, "malicious": 0}, "network": "82.223.0.0/16", "jarm": "29d29d15d29d29d00042d42d000000df133019600a83abfb096ff3e86cd79d", "last_analysis_results": {"Acronis": {"method": "blacklist", "en
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 6e 74 69 79 2d 41 56 4c 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 72 63 53 69 67 68 74 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 72 63 53 69 67 68 74 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 75 74 6f 53 68 75 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c Data Ascii: ngine_name": "Antiy-AVL", "category": "undetected", "result": "unrated"}, "ArcSight Threat Intelligence": {"method": "blacklist", "engine_name": "ArcSight Threat Intelligence", "category": "undetected", "result": "unrated"}, "AutoShun": {"method": "blackl
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 3a 20 22 43 52 44 46 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 43 53 49 53 20 53 65 63 75 72 69 74 79 20 47 72 6f 75 70 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 53 49 53 20 53 65 63 75 72 69 74 79 20 47 72 6f 75 70 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 53 6e 6f 72 74 20 49 50 20 73 61 6d 70 6c 65 20 6c 69 73 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 Data Ascii: : "CRDF", "category": "undetected", "result": "unrated"}, "CSIS Security Group": {"method": "blacklist", "engine_name": "CSIS Security Group", "category": "undetected", "result": "unrated"}, "Snort IP sample list": {"method": "blacklist", "engine_name": "
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 45 6d 73 69 73 6f 66 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 6d 73 69 73 6f 66 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 46 6f 72 63 65 70 6f 69 6e 74 20 54 68 72 65 61 74 53 65 65 6b 65 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 46 6f 72 63 65 70 6f 69 6e 74 20 54 68 72 65 61 74 53 65 65 6b 65 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e Data Ascii: "undetected", "result": "unrated"}, "Emsisoft": {"method": "blacklist", "engine_name": "Emsisoft", "category": "undetected", "result": "unrated"}, "Forcepoint ThreatSeeker": {"method": "blacklist", "engine_name": "Forcepoint ThreatSeeker", "category": "un
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 4b 61 73 70 65 72 73 6b 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4b 61 73 70 65 72 73 6b 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 4c 69 6f 6e 69 63 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 Data Ascii: cklist", "engine_name": "Juniper Networks", "category": "undetected", "result": "unrated"}, "Kaspersky": {"method": "blacklist", "engine_name": "Kaspersky", "category": "undetected", "result": "unrated"}, "Lionic": {"method": "blacklist", "engine_name": "
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 50 52 45 42 59 54 45 53 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 52 45 42 59 54 45 53 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 50 72 65 63 69 73 69 6f 6e 53 65 63 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 72 65 63 69 73 69 6f 6e 53 65 63 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 Data Ascii: ategory": "undetected", "result": "unrated"}, "PREBYTES": {"method": "blacklist", "engine_name": "PREBYTES", "category": "undetected", "result": "unrated"}, "PrecisionSec": {"method": "blacklist", "engine_name": "PrecisionSec", "category": "undetected", "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49877	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	510	OUT	GET /gui/51452.78c2117408c1bf8fcbcf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4be0365206b085be64a456c5bece0bd2 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:18:11 GMT Expires: Fri, 31 Oct 2025 12:18:11 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99262 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 31 0d 0a 00 0d 0a 30 66 66 38 0d 0a 02 ff ec 7d fb 63 db c6 91 ff ef f7 57 c0 4c e2 23 53 90 26 f5 16 65 da 75 6c 27 75 13 c7 39 2b 49 db d3 e9 5c 90 5c 8a a8 48 80 05 40 3d 42 f3 7f ff 7e 66 66 17 58 3c 28 ca 89 d3 a4 f7 45 dc da 12 f6 bd 3b 3b 3b ef 69 2c 63 e5 c4 49 e4 8f 92 c6 49 33 56 b3 49 e7 5a 0d 17 de e8 f2 f9 74 19 5c 5e 25 ef 96 fe bb b9 e7 07 83 3b ca de bf 3f 3b 6f 75 16 cb 78 da 3c 3b db ef ed ed ef 9c bb ab c3 a3 ee c1 41 bf a9 dc c8 4d 5a 83 27 ab a4 79 7c 74 dc 6b 9d 5c Data Ascii: 0000000100000001000000010000000100000001000000010000000110ff8}cWL#S&eul'u9+I\\H@=B~ffX<(E;;;i,cII3VIZt\^%;?;oux<;AMZ'y\|tk\
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: ca 6d 66 98 d2 a7 ec 30 8a 19 34 26 d7 ed 21 0e 94 be f2 b6 e7 4e 80 61 44 57 24 40 43 d5 f1 6d 1b 57 36 f1 bd e8 16 6d da 8e 37 02 5a 1d fb c1 85 93 84 8e 00 9d 43 7d a0 48 83 51 e2 cf 55 db bb 08 9d 65 e0 df d0 2f 66 6e e6 80 4d 05 3a 4d 73 f4 b9 53 e5 fe 4c ed ea dd e0 63 ce 2e b2 fb a0 eb 02 79 fb c1 e5 53 6b 63 03 6c 6c 80 8d 7d ec 39 d3 48 4d 0c 84 26 c0 9d 0a d7 e0 dd 70 e6 05 97 8d 27 b2 05 de 13 00 8e f4 81 7f 78 eb 5a 38 2f fe 01 1f 64 a9 5c 32 57 c0 93 f3 05 7e 16 90 88 ed 31 67 18 73 c6 87 c9 9b 29 17 4e d7 93 a1 cc aa 79 38 5d d2 ea 37 80 06 5b ad 75 01 bb 00 b3 02 7a e3 c4 89 00 80 16 0a 6b 10 0a c7 9b 87 af 06 97 b5 f0 10 14 2a 09 c2 2f 55 0b 0b d5 f0 3a 94 ea e0 d1 cb 8d c7 88 ba 30 9e 79 ea 18 fe ad f7 a7 83 0e 07 a1 79 f9 4b a5 d4 d5 20 Data Ascii: mf04&!NaDW$@CmW6m7ZC}HQUe/fnM:MsSLc.ySkcll}9HM&p'xZ8/d\2W~1gs)Ny8]7[uzk*/U:0yyK
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 72 34 2d e7 c1 e9 cd d4 77 fe 55 98 40 f6 24 d2 1a 3a f3 30 56 e3 f4 ab 05 e0 73 00 f8 9c 01 9c b1 82 de 53 e0 52 ff ca 1f 2f bd 59 3b 05 76 c3 0c ca ee 18 0e 0d 0b 25 89 95 ec 3f 5f 25 e2 d5 c0 ac e5 e6 61 4b ca 44 de 33 c5 b8 d3 7b 8e 4b af 84 cd a4 5a 07 9f 1d 9f 85 e0 78 6e b9 0d a4 43 f2 f0 cc 43 92 08 aa 05 fc 4e 83 f8 e1 f6 98 c4 30 51 a3 df 48 a9 39 30 7b d9 39 40 92 91 1e e6 ba b8 89 e5 25 4d b0 a4 c9 7d 97 a4 81 2e dd 4c 2d 0b bd 54 b7 31 20 21 37 f9 96 20 a7 28 87 98 ae 30 d8 15 0f 96 db 9b 14 86 b1 1d e5 6d 38 8b ce 81 e0 e8 78 2a 01 b0 b5 82 40 99 e1 93 20 b5 85 b7 54 2f 12 28 00 28 d4 10 7d 67 69 95 f3 33 75 be 06 d4 8e a6 cd c8 48 43 9d 59 67 09 70 a0 17 b4 f9 f7 d7 7e 4c 80 80 2b 96 b6 59 3b 3e a0 97 de 5e 7c 55 6b 4c b2 d1 58 83 29 bd d9 Data Ascii: r4-wU@$:0VsSR/Y;v%?_%aKD3{KZxnCCN0QH90{9@%M}.L-T1 !7 (0m8x*@ T/((}gi3uHCYgp~L+Y;>^\|UkLX)
2024-11-01 15:52:33 UTC	318	IN	Data Raw: 52 ce 5c 26 13 f9 b6 81 0f 20 93 d7 ef da 7c 08 89 db 5d 06 3d af a0 27 83 fc 1d cc 3e 8c 88 b4 0d 8f 3d 0d 88 d3 60 b8 06 c5 15 2a 5d 78 62 6c 41 d3 48 0f 40 8c 0a 78 50 bc 6e 39 e1 b6 fd b6 b6 21 b0 5a 40 88 46 8a a9 ec c5 dc 8c c1 a0 27 21 8e 20 b5 2e 61 bd 88 b1 2c c9 3f ae b4 3f fa 05 de dc 1f 55 62 f1 a2 d9 cb b4 4d 6a f7 24 3b 67 55 a4 fa 86 64 9a 85 17 e1 0f d1 cc 26 52 9f 01 48 9f 31 90 ca e8 de 15 ae 13 8e 93 84 5e 83 46 84 97 1e c6 4e ed 11 ab 30 1d 7f 7e 01 c9 f1 72 3e 0c c0 29 e0 44 2c 01 7a ba c8 c8 bb 3e 8d 46 46 c4 6f 26 28 dd d2 44 8c 92 50 cf c5 26 e0 cd cd b4 2f b6 75 33 2d 9b 9f 91 81 b1 77 04 d7 9a 36 67 22 c2 ba f8 f2 94 5b 1f 9e f4 9e 36 b0 2c 95 c4 10 de f1 0f da 82 c9 42 58 f6 de bc c1 de bc c1 de e4 2e 29 99 e2 90 2a 65 e8 8d 2f Data Ascii: R\& \|]='>=`]xblAH@xPn9!Z@F'! .a,??UbMj$;gUd&RH1^FN0~r>)D,z>FFo&(DP&/u3-w6g"[6,BX.)e/
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a f2 0d 0a 30 30 30 30 32 61 39 33 Data Ascii: 000000010000000100000001M000000010000000100000001G00000001c0000000100000001000000010000000100000001b00000001Z00000001000000010000000100000001"000000010000000100002a93
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 2c 06 60 5d b6 4a 9d 62 8d fe ee cf d8 d5 3f d3 ae f2 2e d0 5f d8 02 eb 09 61 f0 20 73 49 98 39 6a 75 b2 db d0 46 6f f0 38 b4 e4 f0 7f 41 4f 7f a1 9e f2 f4 64 c5 01 61 19 39 ff 3c 39 1f fa a4 4f 44 13 ad 22 c9 c6 7c c8 72 20 d3 18 9b 55 69 55 b6 01 5c cd d0 9c ed 9d 1b 41 25 8c 08 98 c7 81 f2 1b 74 7a ca 6c 9a af 3d 5d 91 6c 93 cc b7 7d d3 d8 4f 3f ed 98 4f e4 66 2d fd ed ea 4f 65 20 fd 2f 6c c2 7f c9 26 94 89 74 26 c9 c5 40 1f e6 08 71 d2 be 80 5c 73 c1 4a 5d 67 71 c3 e6 ae 36 33 c7 0c 0d 3c a8 03 32 3d 35 5a 74 e1 e5 ac be 2d 40 df cb 36 d2 f6 7d cc 51 b1 a0 81 d8 a2 fc 25 fd 0b 26 32 a7 b9 68 57 d9 47 a4 6e 86 86 f4 cb 9f 2f 30 16 49 e9 5f e0 9f 7e ee dc a4 da 13 e7 4d 74 e1 05 fe 4f ac 18 28 d6 10 31 bb be 80 b4 34 1c b6 ef 26 e6 00 6d 1b 10 98 f9 c2 Data Ascii: ,`]Jb?._a sI9juFo8AOda9<9OD"\|r UiU\A%tzl=]l}O?Of-Oe /l&t&@q\sJ]gq63<2=5Zt-@6}Q%&2hWGn/0I_~MtO(14&m
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 93 e4 71 74 92 fc e1 0f ad f0 2c 39 47 d4 d0 c4 08 16 9c 90 77 e9 a7 9a 5f fc 58 21 53 bf 28 f0 8b 4d 48 3d e2 ce db d4 e0 fd b5 7f e3 07 14 a6 34 8b a4 da d2 ca b9 ed b1 54 33 73 51 88 c8 3d f8 d0 7e 80 53 c8 f7 86 93 f4 e3 17 c6 4e 39 43 09 33 8a fa e2 53 98 d6 09 5c 17 f9 37 28 bc be 82 ef 08 c5 51 0d 3b 2f cf 1a 44 19 92 55 3f f9 27 c0 be a9 9d 5a 3b 37 ce 8d c6 e6 65 6a ce fa 05 b4 65 a3 ef 10 e2 2e a7 97 72 ba f0 ed 34 98 27 f5 38 b5 fd 26 47 44 16 8e d4 e0 19 31 6d 1b d8 92 3b 42 92 f2 b0 14 8b 85 62 f6 c2 7c ab e8 cd c0 92 73 8a 44 aa 1d 19 52 51 fd 06 cf 05 99 01 e2 42 b4 81 d2 c4 9d ca 79 8a 3d 40 48 27 84 f4 30 c6 fa 4f 11 e5 69 e6 0d 11 b3 d7 7c 21 b1 96 9e 42 fa 29 73 cb 28 5a f5 e7 fa 27 9f 03 31 c7 32 46 ff 59 43 e1 cb 48 89 d2 28 ae 94 6c Data Ascii: qt,9Gw_X!S(MH=4T3sQ=~SN9C3S\7(Q;/DU?'Z;7eje.r4'8&GD1m;Bb\|sDRQBy=@H'0Oi\|!B)s(Z'12FYCH(l
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 74 78 82 d7 af be b7 06 40 14 e0 25 e2 a3 a3 eb e4 7a 18 3f 4a 47 7b 34 9c 85 c3 47 14 e6 fc 11 9c 87 5f 7e 7b fa 92 87 7e d4 8f 30 9f 55 bb 3d 8c db 43 e4 82 e9 3b 9f 74 87 7b e3 b1 77 c2 9f 28 e4 c9 45 88 8f 07 07 bd ee 64 47 3e 2e 96 d1 02 31 e4 f1 71 b2 b7 33 ea e9 8f b0 2f a1 c6 fc 9f 7c c2 73 8b 2f 23 e4 45 d8 e9 ca 17 e4 b0 42 fc 56 7c 54 fb 88 e1 a8 3f de 22 ec 1b 52 3a 39 9f 4c 46 ea f8 e0 50 6a 5e 44 08 a5 82 6f bb c7 de 68 6f 24 df 12 85 24 50 ce 27 3b dd d1 f1 b1 ae 36 ba f5 a8 d6 ce d1 e1 70 b8 2f b5 90 07 65 a4 67 22 1f 10 13 99 cc 90 3f 99 4c 26 a6 6f ef 16 bf 1f f0 7f d9 27 40 47 44 0d 77 f9 3f eb 3b 62 a7 53 f3 63 fa 63 7d 46 54 31 fa bc 43 7f ac cf 58 17 3e ab 03 fa 63 7d de e3 cf 23 fe cf fa bc cf 9f 87 bb f4 c7 fa 7c c0 9f 4b 33 3c e4 Data Ascii: tx@%z?JG{4G_~{~0U=C;t{w(EdG>.1q3/\|s/#EBV\|T?"R:9LFPj^Doho$$P';6p/eg"?L&o'@GDw?;bScc}FT1CX>c}#\|K3<
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 7c 2b f3 bd 59 f0 5f 85 a6 5a 68 8b 90 7b cd 33 8a 28 74 de 92 9f 39 50 e2 39 18 f4 8d 45 7a 3c 59 8c 41 bf 95 53 8b af 2e 56 c0 9b 44 85 cc 10 28 08 a1 ba fa 12 b5 7a 7d 46 2a 8f 73 19 82 ec 0a 07 10 22 28 33 85 f4 03 a7 01 45 66 38 6f 96 2b 02 55 92 4c 73 5f ae 95 ba cc 7d a0 96 f8 d0 6f 23 75 f6 a5 9f b4 d1 05 b4 99 a0 58 90 8b ee 12 98 3c 8d 3a ba 1a 43 46 88 2c 4e 98 0a dc d4 1f f8 48 11 13 21 c6 67 b2 46 db 79 f8 13 68 12 ba 20 3e 84 de d1 6a 81 cc 57 04 1f c8 fa ac e9 3c 46 b2 7c 0a d9 50 b4 12 9e 38 20 27 69 4f 7c 35 1b c7 6c cc 00 ad 80 bb a9 1a 6d df c6 42 48 df 91 f2 63 63 31 92 0e 45 32 ce c6 2a 63 0f d4 15 cd 64 63 0d de d3 2d 75 6e 89 e4 e3 6e b2 ad a0 7d d2 7b cc 9b d4 46 b6 bf 40 07 c6 5e 69 32 8b c2 4b 5a f5 62 4e e6 83 8c 3a 9c 7d 1b f7 Data Ascii: \|+Y_Zh{3(t9P9Ez<YAS.VD(z}Fs"(3Ef8o+ULs_}o#uX<:CF,NH!gFyh >jW<F\|P8 'iO\|5lmBHcc1E2cdc-unn}{F@^i2KZbN:}
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: b4 f4 49 6d 40 11 11 1b 96 d9 0f d4 06 14 b5 01 85 51 56 42 a8 01 56 b4 60 3e 90 99 39 d4 06 14 da e2 a2 36 a0 a8 0d 28 6a 03 8a da 80 82 a4 9a b6 75 45 6d 40 51 1b 50 d8 f2 71 d0 9b bf ad 01 c5 30 a7 74 43 dc 23 98 8e d6 56 15 96 55 45 6d b3 00 8b 8b bc fd 45 6d b3 b0 d9 e2 a1 93 4b 7f 9a 9a 53 68 4b bd 4c ed 55 54 18 1b e5 97 36 83 c9 c4 ce 1a 5b b0 90 be b5 4d d5 66 3d 35 a5 1e c4 4c af 05 2d bc 49 37 cf 5a bd 9c 3d 89 25 21 b2 2c 1e 7e 3f 06 17 9d 62 3c 88 95 a5 e0 21 93 98 13 73 32 e9 77 51 d1 93 89 51 12 2e 47 d3 75 87 83 78 40 53 4e 1a 47 4a cf 6a 14 ec 50 11 c1 b2 ee 60 3f 35 7a ce 15 b2 91 de 6e a1 30 53 52 77 a1 e8 c9 37 b4 6d 19 2c 73 69 ee 54 8c 05 6c 8d a9 68 3e 85 bb 92 59 e5 e8 06 cb e8 2c f7 3d d3 02 4a 4e 10 78 46 c1 2a e0 c4 68 9f 32 0d Data Ascii: Im@QVBV`>96(juEm@QPq0tC#VUEmEmKShKLUT6[Mf=5L-I7Z=%!,~?b<!s2wQQ.Gux@SNGJjP`?5zn0SRw7m,siTlh>Y,=JNxF*h2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49885	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	510	OUT	GET /gui/12184.6278fb6ce9aafc359333.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 35a90a6ac48fe3b20ac6b109b34d8d8d Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:17:00 GMT Expires: Sat, 25 Oct 2025 16:17:00 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603333 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 31 0d 0a 8b 0d 0a 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff ec 7d 79 63 db c8 95 e7 ff fb 29 60 4e 47 21 d2 00 c4 43 27 69 da 56 cb ea 8e 26 f2 b1 92 9d d9 1d 47 2b 83 24 48 22 06 01 06 00 25 31 34 bf fb fe de ab 03 05 90 94 ed 6e 4f 36 d9 51 3b b1 89 ba eb 55 d5 ab 77 57 6d 9e 05 56 96 a7 e1 20 af 75 eb 59 10 8d bc bb a0 3f f3 07 9f 4e 27 f3 f8 d3 6d 7e 33 0f 6f a6 7e 18 f7 1e c8 fb fc f9 c3 b5 ed cd e6 d9 a4 fe e1 43 b3 d5 3c da 73 5a 87 ed 43 a7 b5 df 6c 1e 39 7b 87 7b c7 c7 4e bb d9 38 68 38 ad 83 f6 de be b3 bf 77 78 b8 e7 1c ee b5 5b 4e ab d9 6c 35 9c 66 73 ef 78 ff da 59 72 a1 4e 3d 70 72 27 b5 7b cf 96 b7 7e 6a 65 bd b4 be 77 74 d8 d8 b3 9d 04 3f 9b 07 07 7b fb b6 e3 e3 e7 61 b3 d1 6c d9 4e 8c 9f 07 Data Ascii: 0000000100010ffe}yc)`NG!C'iV&G+$H"%14nO6Q;UwWmV uY?N'm~3o~C<sZCl9{{N8h8wx[Nl5fsxYrN=pr'{~jewt?{alN
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: f6 6a 09 fd 43 c9 ef 82 c1 24 0e 07 d8 71 a2 68 af 96 ab 14 f4 ac 6b 9f 0c 06 18 d4 34 1c e0 47 90 65 bd 9a 2f bf 5d 9f 13 44 0f 63 6c 42 86 27 f5 ac 3f 28 ef 67 1f 94 e5 db 24 cb b0 f1 6f 03 d4 1f 51 82 3b 4b 44 02 15 b9 0c 68 95 4f 7e 9a 03 8e fd f9 d8 4d f9 9b 72 de a6 e1 2d f6 d3 fb 59 94 f8 43 82 1a 7f ba 73 fe a6 02 e7 f1 20 1c e2 18 5e 06 d9 0c ab 09 88 84 32 05 ad 88 24 a3 87 ab 41 1a 04 71 36 49 72 0c 53 ff 56 fd ad ea 19 28 c4 ac b7 5c d9 76 17 1b 22 cb 2d bf f7 a1 76 05 9a 6e 90 5b 8b 64 9e 5a 69 f0 b7 39 26 5a 73 6a f2 68 5a c3 20 f7 c3 28 43 ca db 20 cd e8 64 1b 49 38 8f a3 30 15 94 60 ed 9a 37 53 5c d9 41 1f b0 ac dc c1 ff 46 fb 97 a2 f9 5e e3 ba 27 bb 35 52 31 0f 14 96 fd be 14 dd f6 9a 28 59 4e 12 c5 d4 60 54 b9 16 ca 55 d2 54 7b c5 10 7b Data Ascii: jC$qhk4Ge/]DclB'?(g$oQ;KDhO~Mr-YCs ^2$Aq6IrSV(\v"-vn[dZi9&ZsjhZ (C dI80`7S\AF^'5R1(YN`TUT{{
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 7d 4e 47 f3 a8 ba 8d 6c 3d 6b c9 f5 88 96 99 13 02 8d 37 0b 07 b4 39 16 a0 68 e5 31 88 70 28 b3 81 3f 0b 40 cf 9f 27 a7 d8 84 60 59 78 db 32 0b 56 fb 25 f5 67 13 e4 09 8e 05 f2 69 e0 2c 8d aa 9c 5a 19 7b 10 3d 1a 45 e1 38 20 ba c0 a9 bd 7c 87 9b a5 76 72 45 7f 53 96 c2 9f f8 e4 01 65 b5 6b 67 84 a1 bc 68 b6 0e bc 41 32 45 fa 8b e6 41 5b fd 6c 1d b4 d4 4f 3f 89 d4 cf 31 b4 26 fa 03 7c 8d f9 19 0e a2 64 3e 54 25 cd 1c fe 9d ce a9 87 18 a4 6a aa ca 80 38 8d 92 e4 93 fa 04 a4 21 cc f6 a6 34 fa 17 e2 c3 6c e5 6f 7f 53 05 17 fe 24 81 9c 44 8c 59 7c 88 d6 17 00 50 70 ef e1 e3 ba 2b 24 fb f7 4b 5c e7 3f f9 c0 f1 06 dd 1c 8f 12 a9 89 48 ec 25 d4 1c 4f d2 cf 9f 9f e4 f8 7f 60 03 87 e3 44 c7 c1 9d 75 96 a6 50 4f d4 5e 81 a8 26 fc 06 84 99 10 9d 0e f0 02 8b 03 ad 10 Data Ascii: }NGl=k79h1p(?@'`Yx2V%gi,Z{=E8 \|vrESekghA2EA[lO?1&\|d>T%j8!4loS$DY\|Pp+$K\?H%O`DuPO^&
2024-11-01 15:52:33 UTC	250	IN	Data Raw: 98 2d 45 30 5b 72 fa 76 17 76 6d c8 f2 3d c1 e0 e6 0b 20 6f a2 38 3b 27 69 ea 2f 56 50 2f 4f 29 2b 4f 28 d1 a9 d1 19 80 d8 90 77 9e ed a8 ba cc 47 d8 f5 6a e1 35 3a a1 a8 39 ed a9 ba 55 3d f7 3c 8d 68 15 88 72 70 25 b2 cb 48 cb 3d 05 48 3c 5c 90 3e 44 e9 bd e9 4a 18 da 6d 27 4b 37 9b d5 1d 08 5a 14 86 64 1b 68 d1 10 b4 e8 f1 c1 f1 11 a8 59 22 4b 0f 5a 07 7b 07 5b c8 52 a5 0c b2 26 c4 41 6a 8a 5a 25 d3 d5 0b 86 92 41 08 6a 89 ff 45 9a 2d 09 ef 60 85 8f cf 9f 8b d2 d4 04 59 c0 a5 3d 61 9f 17 3c a7 7f 4d 8a e0 89 32 bd bb 5a 4c fb 49 b4 b3 13 7c 10 bf 3c f0 42 60 44 93 f4 fa f3 e7 00 6c fc 0b f5 0d de 17 43 a0 76 9e f4 52 d1 3c 54 ca 8e ef c4 20 c5 3f 5c 63 8a 4f 1a 4e 1f 94 5b 17 3c 23 8d d6 07 50 7a 60 ca 21 17 a2 b1 7a 31 30 82 d3 c0 0d 0a Data Ascii: -E0[rvvm= o8;'i/VP/O)+O(wGj5:9U=<hrp%H=H<\>DJm'K7ZdhY"KZ{[R&AjZ%AjE-`Y=a<M2ZLI\|<B`DlCvR<T ?\cON[<#Pz`!z10
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8d 0d 0a 30 30 30 30 30 30 30 31 0d 0a c1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 18 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 31 0d 0a d2 0d 0a 31 66 66 31 0d 0a 45 23 cd 95 36 e2 eb 3e 81 b2 0c aa 4c 5f 34 92 a2 91 21 18 21 32 dd 0b 85 09 65 e6 41 16 38 0f c0 0d 48 44 8a c6 72 c0 18 63 b1 bb 2b a0 9e 01 00 6a 2f 31 2c 98 40 f4 82 Data Ascii: 00000001000000010000000100000001!00000001[00000001000000010000000100000001S0000000100000001,00000001P00000001*00000001g000011ff1E#6>L_4!!2eA8HDrc+j/1,@
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: ff 2f 85 30 dd 42 21 08 71 14 c9 79 c7 db 49 04 55 b9 20 11 4a 85 f5 22 19 f2 5d d9 dd 96 1a 0f 10 15 e3 9e ea 6d 13 51 51 74 45 23 36 c9 8a 31 2c 15 c8 e1 fa db e8 8a 4d c4 04 19 2d b4 da fb 07 10 49 4a a7 6b 87 a9 88 82 7a 98 3f 52 0f df 89 7a 98 f5 e0 1c 5d b6 48 f8 ce a2 1f 18 32 ac 09 7b 84 5b c7 e0 81 ab fc df fd 5b 1f 86 95 f0 84 b7 7e 89 92 3e 4c d9 ff ec a7 21 49 28 ff 25 2f 76 a5 0e 15 aa d7 67 6a 2e 16 31 6e 85 b0 83 a4 ba c5 97 29 3a f9 6f 2e 97 30 ae 38 e1 08 43 5b 47 de f2 0f b1 ce 4a 22 c5 92 a6 8a 90 40 f1 e3 2c 79 50 37 b9 66 a5 59 db 26 39 6a 48 fd 6b 64 77 26 f8 eb e7 f2 df 4e cd ad 3d a0 f4 54 77 9b a0 5a 69 bc ff 34 77 1b c4 a3 25 15 a6 fe de c2 fd 86 86 0a b3 c4 fd 52 e4 05 27 b4 bb f3 2d 77 1b 4b f2 e9 6a 9b 6d bf da 54 dd e2 a2 2a Data Ascii: /0B!qyIU J"]mQQtE#61,M-IJkz?Rz]H2{[[~>L!I(%/vgj.1n):o.08C[GJ"@,yP7fY&9jHkdw&N=TwZi4w%R'-wKjmT*
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 7d b5 0d 6d e3 2c 50 5e 79 79 61 ca a9 95 f4 9a 24 2b 5a c0 75 bc 86 a0 fa d1 3c 95 68 bd dc 16 a1 74 58 b9 6f ea 46 29 01 37 21 7a 50 af 6a fd 18 97 15 bd 6b 56 86 c6 68 1e f4 4f 80 d7 27 82 17 90 80 02 d1 9d 8b a8 21 96 c1 5d ec ad b1 12 c2 6c fc 01 ef 19 8a 1d c1 0e 35 fa d8 a9 13 d6 e6 13 56 26 a7 1e a4 43 e8 58 85 6a 6c a2 a4 6e 74 84 5b cb 65 2f 4a 44 c1 a0 93 2b 59 90 50 5d a8 25 aa ed c1 6e e8 5e 26 82 ee 75 62 15 70 b3 20 1e 0d 23 12 87 ea 8b 9f ef 7f 9c 13 58 fa c2 23 38 39 85 64 31 f5 af 40 b2 4c 58 97 04 2b d6 b7 a0 33 2d 62 0a 29 0c 80 50 26 c1 e1 28 a5 14 66 13 43 58 0b 0f 10 4b 80 ca 93 b3 33 bb 7f a3 ac d0 f3 9c 28 4d ce 89 07 0e 12 0a 5d 91 2d 6f c4 0a c7 09 eb a1 a0 2f da 21 4b 2b 44 ba 58 6b 84 8c 48 b2 2f 36 13 25 22 00 cb db 30 3e 67 Data Ascii: }m,P^yya$+Zu<htXoF)7!zPjkVhO'!]l5V&CXjlnt[e/JD+YP]%n^&ubp #X#89d1@LX+3-b)P&(fCXK3(M]-o/!K+DXkH/6%"0>g
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: d9 a3 19 c4 77 32 83 38 ed 21 c2 c3 03 78 99 88 2a 88 f9 bf 14 e0 08 b1 ba ef fe 28 58 29 32 67 18 24 33 44 c3 47 b4 38 ad fc 66 c2 4b 69 8c 03 bd 7c 7f 40 09 ee c2 82 d1 79 99 b1 33 79 48 1d ae 83 37 96 72 35 b0 14 5f 40 ae c9 c4 3b 9b da 6a c3 8e 99 d1 f2 7d 7e 53 30 46 d4 13 d0 08 82 ac 85 71 bd f6 97 18 41 e8 86 de 9f fe 04 77 ab 78 f8 2e 39 8d c2 59 3f 21 3b 8c 1c c6 d3 ab 22 90 b5 98 8d 90 2f c0 79 4e 47 79 92 f3 e2 f0 77 72 ef d6 eb ea 80 f0 ae e5 71 fb 18 a6 3f 9b 45 0b 5a 3b 38 51 cb c7 88 2c 3c 47 64 2f 6f ea 3e 1f 21 a2 40 6a 14 49 00 f1 b6 0d e7 ec 70 ad 0c fb 96 73 a1 b8 2e 09 46 c6 8c 70 e9 86 79 f8 4b 10 81 54 45 9e 33 81 7d 15 07 5c b8 82 08 8e 98 82 78 8a 08 0a a6 81 ff 87 72 a5 6b f9 14 92 e1 01 20 02 da 55 78 d4 15 9c c3 e1 75 f8 3a c8 Data Ascii: w28!x*(X)2g$3DG8fKi\|@y3yH7r5_@;j}~S0FqAwx.9Y?!;"/yNGywrq?EZ;8Q,<Gd/o>!@jIps.FpyKTE3}\xrk Uxu:
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: cb 3b aa 70 16 e3 95 8f 20 2b 08 5e 0d 8a 1b cc a1 e0 81 4d 10 dc 28 10 dc 78 ac 76 54 b1 f2 6f 48 99 00 d5 fa a6 0e 74 b3 67 5b 9b 3d 53 cd 9e 6d 6c b6 38 e9 a7 5f 84 ee e9 ce ce 69 01 dd e2 b0 c0 37 66 cb 9c ce 11 97 fe 5c c6 5c af b0 a8 d5 c5 11 4a fa 1f 3e d2 19 36 c0 b9 1e 49 87 f7 a6 e6 ae cd 8e e1 58 06 ee 9b 64 86 b3 6d 32 c3 39 c9 0c 67 76 f7 8c 75 42 a1 d4 ea 9c 56 f4 3f 05 6d 5f a8 4b 44 8d 84 4a 42 7c 59 44 9c 2c b4 48 a5 56 98 59 f8 d5 b5 49 cf cc 04 f6 6f 6a 81 35 ed 5f 6e 41 06 b3 c1 2d 02 d2 04 d1 fe c1 ad e8 1d 0a f2 c8 d0 d0 d7 48 59 56 9a a6 41 8e 14 1d 9d f6 14 b0 36 69 96 40 26 49 2b 02 12 c7 9e 02 d9 68 dd d2 e9 ca 39 a0 77 a3 0d d1 2c 09 31 c9 ab ec e8 18 7e 5c 1c b0 dd 83 0c 52 3c 37 dd 3e 82 b3 17 36 30 08 8f b8 ee 43 dd 56 87 b0 Data Ascii: ;p +^M(xvToHtg[=Sml8_i7f\\J>6IXdm29gvuBV?m_KDJB\|YD,HVYIoj5_nA-HYVA6i@&I+h9w,1~\R<7>60CV
2024-11-01 15:52:33 UTC	1337	IN	Data Raw: e4 35 0f f7 f5 01 e4 7e 08 23 cc 33 3c ea e0 b5 0f f7 8d 43 68 64 ba d9 94 f2 5b db b2 23 9c 9e 86 b7 2d f7 1e d4 a9 79 ba cd 86 ef 29 b3 b5 a5 d7 16 65 6a 2c 22 a7 28 86 eb a2 e2 a6 69 f0 2b 34 78 a9 a4 61 34 79 ef 42 5e 38 24 52 ba 21 47 c9 c3 59 87 4c 01 18 55 45 4c 1c b5 9a 3c 77 05 83 b5 aa 0d 03 a8 ba 2e 43 45 74 45 4e 84 6b 95 cc 95 d0 95 10 ea 1c 8f bf 53 c4 73 68 8b 1b 16 36 85 d5 c2 ff 19 2b 1b ab 58 74 38 4a c0 e2 b9 14 68 5e 0b ba cd 85 32 b2 13 5c 12 14 21 8d 67 21 76 94 91 2b 77 15 77 64 ec 7d da 32 2d 05 18 92 47 c1 36 19 1b 52 1f 04 93 34 36 b2 cd fd 08 cc ba 56 0a 4f 15 96 9a 31 69 64 6e 46 15 a8 34 24 ca ad fe e0 fc a1 d3 e9 07 28 19 d0 2f 5c 97 41 ba ec 27 80 62 f8 77 40 a2 23 6b 21 65 f5 62 4a 2f 0e d7 a1 4f 1e 41 42 0b 9f 58 bc 8d 0c Data Ascii: 5~#3<Chd[#-y)ej,"(i+4xa4yB^8$R!GYLUEL<w.CEtENkSsh6+Xt8Jh^2\!g!v+wwd}2-G6R46VO1idnF4$(/\A'bw@#k!ebJ/OABX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49878	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	959	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTEyMTkzMjUwMTEtWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzOA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: e0b8147da52433820c0d1c885bc15256 Date: Fri, 01 Nov 2024 15:52:33 GMT Server: Google Frontend Content-Length: 14050 Expires: Fri, 01 Nov 2024 15:52:33 GMT Cache-Control: private Connection: close
2024-11-01 15:52:33 UTC	526	IN	Data Raw: 7b 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 72 6c 73 2f 37 30 65 63 34 39 35 33 63 34 62 66 63 36 62 39 37 36 30 64 30 32 39 66 66 66 30 62 34 32 62 64 64 63 31 62 39 38 66 35 61 32 32 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 22 7d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 31 7d 2c 20 22 64 61 74 61 22 3a 20 7b 22 69 64 22 3a 20 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 73 65 22 2c 20 22 74 79 70 65 22 3a 20 22 64 6f 6d 61 69 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 Data Ascii: {"links": {"self": "https://www.virustotal.com/ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location"}, "meta": {"count": 1}, "data": {"id": "www.google.se", "type": "domain", "links": {"self": "https://www.virustotal.c
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 6e 73 65 72 76 65 72 3a 20 6e 73 33 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 6e 6e 73 65 72 76 65 72 3a 20 6e 73 34 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 6e 72 65 67 69 73 74 72 61 72 3a 20 4d 61 72 6b 4d 6f 6e 69 74 6f 72 20 49 6e 63 5c 6e 73 74 61 74 65 3a 20 61 63 74 69 76 65 5c 6e 73 74 61 74 75 73 3a 20 73 65 72 76 65 72 44 65 6c 65 74 65 50 72 6f 68 69 62 69 74 65 64 5c 6e 73 74 61 74 75 73 3a 20 73 65 72 76 65 72 54 72 61 6e 73 66 65 72 50 72 6f 68 69 62 69 74 65 64 5c 6e 73 74 61 74 75 73 3a 20 73 65 72 76 65 72 55 70 64 61 74 65 50 72 6f 68 69 62 69 74 65 64 5c 6e 74 72 61 6e 73 66 65 72 72 65 64 3a 20 32 30 30 39 2d 30 33 2d 30 36 22 2c 20 22 74 6c 64 22 3a 20 22 73 65 22 2c 20 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 64 61 74 65 22 3a 20 31 37 33 Data Ascii: nserver: ns3.google.com\nnserver: ns4.google.com\nregistrar: MarkMonitor Inc\nstate: active\nstatus: serverDeleteProhibited\nstatus: serverTransferProhibited\nstatus: serverUpdateProhibited\ntransferred: 2009-03-06", "tld": "se", "last_analysis_date": 173
2024-11-01 15:52:33 UTC	488	IN	Data Raw: 3a 20 22 68 74 74 70 3a 2f 2f 6f 2e 70 6b 69 2e 67 6f 6f 67 2f 77 72 32 22 2c 20 22 43 41 20 49 73 73 75 65 72 73 22 3a 20 22 68 74 74 70 3a 2f 2f 69 2e 70 6b 69 2e 67 6f 6f 67 2f 77 72 32 2e 63 72 74 22 7d 2c 20 22 73 75 62 6a 65 63 74 5f 61 6c 74 65 72 6e 61 74 69 76 65 5f 6e 61 6d 65 22 3a 20 5b 22 2a 2e 67 6f 6f 67 6c 65 2e 73 65 22 2c 20 22 67 6f 6f 67 6c 65 2e 73 65 22 5d 2c 20 22 63 65 72 74 69 66 69 63 61 74 65 5f 70 6f 6c 69 63 69 65 73 22 3a 20 5b 22 32 2e 32 33 2e 31 34 30 2e 31 2e 32 2e 31 22 5d 2c 20 22 63 72 6c 5f 64 69 73 74 72 69 62 75 74 69 6f 6e 5f 70 6f 69 6e 74 73 22 3a 20 5b 22 68 74 74 70 3a 2f 2f 63 2e 70 6b 69 2e 67 6f 6f 67 2f 77 72 32 2f 39 55 56 62 4e 30 77 35 45 36 59 2e 63 72 6c 22 5d 2c 20 22 31 2e 33 2e 36 2e 31 2e 34 2e 31 Data Ascii: : "http://o.pki.goog/wr2", "CA Issuers": "http://i.pki.goog/wr2.crt"}, "subject_alternative_name": ["*.google.se", "google.se"], "certificate_policies": ["2.23.140.1.2.1"], "crl_distribution_points": ["http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"], "1.3.6.1.4.1
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 22 2c 20 22 65 63 22 3a 20 7b 22 6f 69 64 22 3a 20 22 73 65 63 70 32 35 36 72 31 22 2c 20 22 70 75 62 22 3a 20 22 33 30 35 39 33 30 31 33 30 36 30 37 32 61 38 36 34 38 63 65 33 64 30 32 30 31 30 36 30 38 32 61 38 36 34 38 63 65 33 64 30 33 30 31 30 37 30 33 34 32 30 30 30 34 37 36 38 62 66 33 61 31 63 39 38 66 39 31 39 65 36 38 34 30 36 65 36 34 39 34 64 66 65 66 39 64 31 63 63 37 36 66 65 33 34 33 31 39 32 33 38 38 62 63 38 33 65 63 61 64 64 65 38 64 63 35 31 38 61 61 35 32 66 30 35 33 66 64 33 31 34 64 39 61 33 32 63 63 35 62 33 33 37 37 34 33 61 34 64 32 32 62 33 62 66 63 32 66 35 63 66 63 64 63 38 34 38 32 32 39 31 35 31 65 38 39 34 37 61 64 37 33 22 7d 7d 2c 20 22 74 68 75 6d 62 70 72 69 6e 74 5f 73 68 61 32 35 36 22 3a 20 22 62 39 37 63 36 30 37 32 Data Ascii: ", "ec": {"oid": "secp256r1", "pub": "3059301306072a8648ce3d020106082a8648ce3d03010703420004768bf3a1c98f919e68406e6494dfef9d1cc76fe343192388bc83ecadde8dc518aa52f053fd314d9a32cc5b337743a4d22b3bfc2f5cfcdc848229151e8947ad73"}}, "thumbprint_sha256": "b97c6072
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 41 49 4c 61 62 73 20 28 4d 4f 4e 49 54 4f 52 41 50 50 29 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 49 4c 61 62 73 20 28 4d 4f 4e 49 54 4f 52 41 50 50 29 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 41 6c 69 65 6e 56 61 75 6c 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 6c 69 65 6e 56 61 75 6c 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 Data Ascii: ss", "result": "clean"}, "AILabs (MONITORAPP)": {"method": "blacklist", "engine_name": "AILabs (MONITORAPP)", "category": "harmless", "result": "clean"}, "AlienVault": {"method": "blacklist", "engine_name": "AlienVault", "category": "harmless", "result":
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 65 72 74 65 67 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 65 72 74 65 67 6f 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 68 6f 6e 67 20 4c 75 61 20 44 61 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 68 6f 6e 67 20 4c 75 61 20 44 61 6f 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 49 4e 53 20 41 72 6d 79 22 3a Data Ascii: "result": "clean"}, "Certego": {"method": "blacklist", "engine_name": "Certego", "category": "harmless", "result": "clean"}, "Chong Lua Dao": {"method": "blacklist", "engine_name": "Chong Lua Dao", "category": "harmless", "result": "clean"}, "CINS Army":
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 44 72 2e 57 65 62 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 45 72 6d 65 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 72 6d 65 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 45 53 45 54 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 45 54 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 Data Ascii: engine_name": "Dr.Web", "category": "harmless", "result": "clean"}, "Ermes": {"method": "blacklist", "engine_name": "Ermes", "category": "undetected", "result": "unrated"}, "ESET": {"method": "blacklist", "engine_name": "ESET", "category": "harmless", "re
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 48 65 69 6d 64 61 6c 20 53 65 63 75 72 69 74 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 48 65 69 6d 64 61 6c 20 53 65 63 75 72 69 74 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 48 75 6e 74 2e 69 6f 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 48 75 6e 74 2e 69 6f 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 Data Ascii: egory": "undetected", "result": "unrated"}, "Heimdal Security": {"method": "blacklist", "engine_name": "Heimdal Security", "category": "harmless", "result": "clean"}, "Hunt.io Intelligence": {"method": "blacklist", "engine_name": "Hunt.io Intelligence", "
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 67 20 44 61 74 61 62 61 73 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 69 6e 67 20 44 61 74 61 62 61 73 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 50 68 69 73 68 46 6f 72 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 46 6f 72 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 50 68 69 73 68 4c 61 62 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 Data Ascii: g Database": {"method": "blacklist", "engine_name": "Phishing Database", "category": "harmless", "result": "clean"}, "PhishFort": {"method": "blacklist", "engine_name": "PhishFort", "category": "undetected", "result": "unrated"}, "PhishLabs": {"method": "
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 3a 20 22 53 65 63 6c 6f 6f 6b 75 70 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 65 63 75 72 65 42 72 61 69 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 63 75 72 65 42 72 61 69 6e 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 53 65 67 61 73 65 63 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 67 61 73 65 63 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 Data Ascii: : "Seclookup", "category": "harmless", "result": "clean"}, "SecureBrain": {"method": "blacklist", "engine_name": "SecureBrain", "category": "undetected", "result": "unrated"}, "Segasec": {"method": "blacklist", "engine_name": "Segasec", "category": "undet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49886	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	509	OUT	GET /gui/8633.4c341e20fe5574616256.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9413258fe6f24714beba944976b30270 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:19:55 GMT Expires: Fri, 31 Oct 2025 12:19:55 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99158 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 31 0d 0a 00 0d 0a 30 66 66 63 0d 0a 00 00 00 00 02 ff ec 7d 79 73 db 48 b2 e7 ff fb 29 60 f6 8c 86 ec 01 20 1e 12 25 82 a6 35 1e d9 3d ed 18 f7 f4 0b d9 de 89 5d 3f 87 1b 24 8b 24 c6 10 c0 07 80 3a 86 e6 77 df 5f 66 1d 28 80 a4 24 b7 fc 76 23 36 64 75 eb a8 23 ab 2a 2b 2b ef 2a 36 56 b9 70 f2 22 8b 26 45 63 d8 cc 45 3c f3 af c5 78 19 4e be 9c 2f 56 c9 97 ab e2 f3 2a fa 7c 19 46 c9 e8 8e ba af 5f 3f 7e 6a f9 cb 55 be 68 7e fc 78 da ef f5 dc c1 49 e7 e4 c8 3d ea 1f f7 7b 6e 6f d0 ef f6 3f b9 eb d3 d3 41 ff 28 68 16 ae 70 f3 d6 e8 c5 3a 6f 0e 4e 07 9d d6 f0 2a cc 9c 6c 94 37 8f 4e 4f da 47 2d 37 c5 af 9d 7e ff e8 b8 e5 86 f8 b5 df 3d ed 75 5b Data Ascii: 00000001000000010000000110ffc}ysH)` %5=]?$$:w_f($v#6du#++6Vp"&EcE<xN/V\|F_?~jUh~xI={no?A(hp:oNl7NOG-7~=u[
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 87 51 1e b4 29 0e da b4 7e d0 ac 13 c3 24 65 11 db be 13 80 e3 d1 07 f5 59 f4 54 a1 c4 a9 e4 75 25 2d 4a 3a 06 cd 45 e0 96 a0 dd f7 e0 cb af d2 eb e4 02 0c ad a0 b5 6e b3 ce dd 0b 98 60 01 93 fa 02 34 33 08 25 d3 2d d9 45 38 ce d3 18 27 cd 19 cf bd 71 3a bd d5 27 1a 3c c5 6b 3b e3 b4 28 d2 4b fc 02 be e4 b5 6b 87 49 c1 da 5e 42 ab b5 d9 0c a1 16 00 ab a9 bf 54 b2 12 a7 87 e4 61 f0 0e 47 3b 99 6f 5a 9f dc 39 d5 15 29 95 ba 0d 4d 5c 0d f7 2a 8d a6 4e bb e5 ee 03 f0 32 cb c2 db ad fe d6 4e df 0f e2 af 69 1a 8b 30 d9 02 62 89 a5 df 0f c4 c8 b1 12 c4 7c a4 17 33 59 e5 40 a8 92 96 ad 66 43 72 b5 09 f6 7b 9a a7 ab 6c 22 a6 5e b6 82 98 60 ae 4d 38 6a 6d 5c 56 6b 6c 1d ca 9f 42 24 af 3f 04 4d 68 54 c0 e4 f0 11 4a d5 e9 71 ff 14 ea 13 0b f6 c4 8d 5d a5 37 b9 8b 52 Data Ascii: Q)~$eYTu%-J:En`43%-E8'q:'<k;(KkI^BTaG;oZ9)M\*N2Ni0b\|3Y@fCr{l"^`M8jm\VklB$?MhTJq]7R
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: fb 3e 87 05 49 b8 dc 9b 40 b0 89 cc 28 b5 db 8d d1 86 bd 84 f0 c9 15 69 e2 90 c9 0e ef 23 ff d1 d0 02 73 5c 24 0e fe 97 da 1f 29 fc ec be 5a 66 d1 65 98 69 b7 42 a3 a6 32 c1 25 b2 0c 13 56 ee e0 93 a3 5f 9d e7 46 02 4f 3d 72 e4 39 70 a4 f4 1c 4c 00 8e 17 a9 ff 45 e4 f4 93 83 d3 6f 98 2d 7e 84 4a 41 af 4d 4a 79 67 18 06 eb 36 58 67 11 d1 84 00 31 5c 15 69 6d 46 52 49 2d e0 1f 28 a2 a5 47 2b 18 35 ce d3 e5 ad 03 3d 03 2a 2a 3c 7d b9 13 e6 ce 32 46 74 84 17 e8 14 a9 03 5e 0b 24 44 cb 71 1a 66 5a cf d5 20 b4 5f 16 56 9b 98 15 18 ed 32 45 f4 25 85 63 5b ab 8d da 92 08 cb c5 d0 06 44 d0 86 a7 50 a9 a6 f0 01 9d 4b bb e8 9f 59 48 1a af c1 b8 86 ed 19 27 8e a4 05 f2 dd 30 4d 8c 81 39 e5 d7 81 8e 0d 91 3d a5 95 e7 8b 10 40 1d e9 95 94 04 00 9f bd 80 a0 01 0e af b5 Data Ascii: >I@(i#s\$)ZfeiB2%V_FO=r9pLEo-~JAMJyg6Xg1\imFRI-(G+5=**<}2Ft^$DqfZ _V2E%c[DPKYH'0M9=@
2024-11-01 15:52:33 UTC	270	IN	Data Raw: 72 23 f2 40 f0 9f b9 28 f2 20 de b8 4a 60 07 63 40 70 cd 80 ca 62 64 1b 1a 14 6e 98 b5 22 73 87 38 ad 72 11 35 9b a6 17 39 87 d8 d4 0c 47 c2 87 61 11 df c2 31 95 b7 86 ba 81 13 d1 4a be 34 43 17 2d dd c8 45 8e 43 02 7b 08 f4 d0 da 98 36 c8 a6 aa b5 29 16 c4 a2 a9 51 d4 94 1e 02 f8 5f f1 5f b3 b5 a9 8a 39 ea c9 8e 08 37 37 de 44 b8 69 49 c1 2f 38 54 91 7d fd 4a ec 15 b8 db eb 84 f8 fa 55 0e 81 36 02 69 0a c6 0b 51 09 6a a4 23 0d 26 1f 65 3e 71 a7 73 69 64 20 05 ca 74 cf cf e4 af 41 ee e3 1c 5e c2 83 8d 83 cd d1 99 9a 6f 64 87 4f 22 45 80 2d ac 1b f9 52 60 90 db 63 14 1a 27 84 56 4d 55 ca 53 c5 77 f3 d2 b8 6e 2a dc 32 94 bc 92 e7 72 8f 73 dc c8 0a 0d c0 f2 8f eb ba 37 53 9d 45 22 fd 13 e5 34 37 ee 24 bd 84 49 29 a6 01 52 25 c6 ab 31 04 79 8e 5f b1 7b ad 0d Data Ascii: r#@( J`c@pbdn"s8r59Ga1J4C-EC{6)Q__977DiI/8T}JU6iQj#&e>qsid tA^odO"E-R`c'VMUSwn*2rs7SE"47$I)R%1y_{
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0e 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 31 38 33 61 0d 0a 08 90 b2 15 e5 50 8f 50 c1 10 7b b7 e8 28 f1 be b0 35 7e 26 fd 5e 84 bb 40 fe 6a b9 c0 ee 41 97 1a d2 93 a8 21 ed d3 44 13 78 2e 36 c0 fa a8 c4 b4 ff 8c 21 e9 a7 d7 b8 03 75 1b 4b d9 c3 a2 60 66 20 cc a6 74 58 a9 9a 5d a4 69 e1 ff d7 4a 64 b7 ef 38 0c 06 86 d1 f8 81 95 4f b8 b6 a0 4e 48 ed f2 67 41 79 20 30 98 9f 43 de c8 a2 f7 e9 f2 cf 85 9f ce 66 e0 0e b2 5a 3b 9f 76 28 d0 8c b3 9a 0f 51 7b af ee 0e b9 c4 70 48 7a 97 70 3d da 88 da bb 91 c1 d8 5f 41 de 2c d3 ac 68 b2 0a ad 72 1d 1c a4 da 20 77 11 a2 03 f1 c9 8d bb 44 c8 88 d2 e1 46 ac Data Ascii: 00000001000000010000000100000001f00000001000183aPP{(5~&^@jA!Dx.6!uK`f tX]iJd8ONHgAy 0CfZ;v(Q{pHzp=_A,hr wDF
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 56 0b da ad 17 6d ed 7d 2f 83 6f 32 d0 73 cf c6 97 f1 f8 ef 1a b0 c6 79 69 d0 96 38 25 ae 1c 62 28 70 63 6b a7 cf 36 0e 64 8c 44 ad d6 8e 6a cb 40 4f 6d 25 97 85 cc 9e e1 d8 b9 d6 a3 1c dc 0c 45 1a 86 62 61 0e 12 5b 85 73 1d 15 0b 4a cf e8 1e f7 29 a3 45 a6 41 cb a0 8f 8c ec 20 e2 12 e5 0e 52 4f a0 cb cd 29 88 af 82 3d be 75 fa 59 68 b3 0a 3c 8d 32 70 45 f0 bf 26 e5 cd 62 45 7b 76 14 f1 6d 1a 52 71 d8 1d ab 55 f5 76 bc 74 86 88 d6 6c 54 5b a8 75 4d aa eb d8 ab d6 41 27 7b 2d 2a 93 80 7f f0 06 e4 42 24 06 25 08 85 48 9c 94 12 e6 21 d8 b9 5e c0 fa 72 ae 91 a2 23 a5 b2 98 3a e3 5b 95 d1 a0 02 66 e5 1c a0 a8 94 e1 b2 bc 96 6f 80 2c 03 16 71 26 9c 66 d8 2b 38 56 35 5a ce 01 2f 79 4f af 11 84 95 7b 6f cf 42 04 b0 c2 b3 64 df 7d 55 84 50 88 3b 95 57 46 8d 92 96 Data Ascii: Vm}/o2syi8%b(pck6dDj@Om%Eba[sJ)EA RO)=uYh<2pE&bE{vmRqUvtlT[uMA'{-*B$%H!^r#:[fo,q&f+8V5Z/yO{oBd}UP;WF
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: e6 dd 19 5a 60 bf 3b 3e 51 fb 0a 23 5c 5e 52 d9 6a d5 1d d0 57 75 f6 ac b0 ea 17 6c 00 a9 db ee b7 bb e6 e0 60 0d f5 06 ed f6 11 6e ba 4a 20 7a 25 f5 36 b8 09 8b 23 24 db a8 f5 d4 9b f4 a7 9d a3 8e 5a 15 de 4a 42 5a 4e bd 85 4d 21 44 d5 77 36 d0 5b 85 9b 3a 48 03 c5 03 45 b4 95 b3 e9 74 a6 8e 5d 89 14 bb 85 68 d3 57 15 21 95 fa c9 6c 20 84 ac e7 0d ad 54 1e cf 7a fa 34 6a 44 d8 f5 38 aa 5d a1 ce b3 42 42 a5 3a 14 1d 3d b6 44 40 a5 76 32 c3 97 c6 20 16 6f 57 da 07 d0 2c 9c d3 ad ca c5 0f a6 e3 d3 99 5e 9a a1 08 75 45 a6 44 51 77 82 af 1a 02 6a 90 c6 ed a9 18 2b 56 25 91 50 6b 30 18 e0 2a b4 5a a8 41 44 ad cd ec 78 72 32 50 a4 a7 91 51 6b 22 4e c3 93 50 9d 1e 85 90 5a 0b 62 52 9a 4d 31 45 d4 97 63 b3 20 e6 98 f2 18 75 8f 71 bc f4 37 b9 58 66 b0 e6 7c e2 88 Data Ascii: Z`;>Q#\^RjWul`nJ z%6#$ZJBZNM!Dw6[:HEt]hW!l Tz4jD8]BB:=D@v2 oW,^uEDQwj+V%Pk0*ZADxr2PQk"NPZbRM1Ec uq7Xf\|
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 87 40 be fa a1 8a 40 5f b3 00 48 a7 67 20 36 be c1 b3 7e 4d 64 ad 4b 02 5d e2 3c 8b 70 5b 28 2b 10 ee b2 da eb 97 28 ca f6 ba a4 d2 9e df 7f c0 16 2d 83 76 a5 5c 3f b7 07 16 4b ef ee d5 6a f9 11 d2 35 fb e9 6a 35 8a f1 01 20 7a b2 d8 27 d8 75 89 ce 62 ab b5 25 e8 99 5d 6e 17 f3 d9 6e 55 a6 67 dd b5 5d 9b df 83 4e a5 8d c4 30 a1 93 b2 49 b3 62 5d 16 f0 ae c8 d2 7d 5d c6 ea c1 65 bb 97 2e ab f4 c1 4d 61 c3 68 58 21 aa d4 f2 63 c4 6b 7c 0f a4 2e b5 55 d9 95 95 a4 49 55 ea e8 51 e7 b5 34 a3 c8 56 c2 e5 c6 49 b3 e3 77 59 5f 73 fe ec f8 bd ab eb 1a 4a f0 cc ad d5 81 d4 af 0a 40 f6 8c 28 77 d3 9a b5 41 2e d1 c7 c9 e9 20 07 89 4c 29 56 07 cc 86 59 fe 29 98 83 a6 d8 ee da aa ce 83 ab c8 c4 7f f8 20 da cd f5 2d 23 28 1f c1 c3 07 d1 4e 05 ac ef 5b c6 91 7e 86 87 0f Data Ascii: @@_Hg 6~MdK]<p[(+(-v\?Kj5j5 z'ub%]nnUg]N0Ib]}]e.MahX!ck\|.UIUQ4VIwY_sJ@(wA. L)VY) -#(N[~
2024-11-01 15:52:33 UTC	646	IN	Data Raw: 4e be cb 00 15 ec 54 e8 46 4e 7b 07 d9 1c d3 95 1d ba 3c 04 51 65 e6 f0 58 6c 75 f6 43 7d 14 92 1e 03 77 e3 4b 95 7c 2d 7f 94 fe 08 a5 a9 3f 3a 3f d5 d2 f8 db 6a 10 32 1b 76 27 cb 4a 23 c6 33 0d b5 db da 52 69 90 92 86 7a e9 ef ae 01 c1 07 fc 69 57 79 ad 46 7d a8 8b 4c 0a 55 0e 15 f8 b3 2a 60 b5 c9 55 9a 11 6b d6 9e ca dc ea 15 7d d2 dd 04 ae 11 e3 01 e2 d4 52 be c1 63 a3 8b dd 07 88 ac ed 32 5a b4 d9 60 39 1b f4 75 17 8f ee ba b4 4b 72 d3 96 a4 22 df aa 12 6a 88 52 15 57 33 20 99 52 55 4d 85 e0 75 99 2d 65 eb a0 aa 17 83 6d c0 f7 28 ae df 00 68 b7 5e fa 70 00 0a 27 96 62 65 fa 52 99 3d 69 ab 69 05 15 5b da 46 05 c2 e3 91 40 f0 ef 80 72 0f 06 ee ee ad d6 54 55 16 cc fc 55 f1 0e 24 68 39 c9 9e 31 57 1a 37 ba 6c 27 49 a8 ca 3b d6 71 b7 2d 53 9f d3 1d 80 ee Data Ascii: NTFN{<QeXluC}wK\|-?:?j2v'J#3RiziWyF}LU*`Uk}Rc2Z`9uKr"jRW3 RUMu-em(h^p'beR=ii[F@rTUU$h91W7l'I;q-S
2024-11-01 15:52:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49887	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	509	OUT	GET /gui/5978.4206cee10d7d4c2afd11.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d981cf2073944b0aded91ae35d72bc8c Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:43:50 GMT Expires: Sat, 25 Oct 2025 15:43:50 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605323 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 66 66 33 0d 0a 97 db c6 91 ff 7f 3f 05 4c db 13 c2 0b 40 24 67 38 07 29 4a b6 65 39 d1 da 4a b4 3a 36 9b 55 f4 14 90 6c 0e 91 01 01 06 00 e7 30 cd ef be bf aa 3e d0 38 c8 99 28 89 37 2f 6f 35 f6 88 ec b3 ba ee aa 2e 40 9d 4d 2e 9c bc c8 a2 59 d1 19 77 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001y00ff3?L@$g8)Je9J:6Ul0>8(7/o5.@M.Yw
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 4b e0 88 d2 0e a1 c8 09 67 33 20 a7 f0 1c d2 a1 6a 0d 47 af e1 44 40 bd 08 e7 9d 51 e7 1d 9f ee d0 12 9d 1d a0 9d 8b ec 59 9a 2c a2 6c f5 ed a6 28 d2 a4 8a b8 65 b1 8a dd ee f5 cf 3f 77 af 27 af fe f4 78 ca 43 9c 79 58 84 7e 21 f2 62 d2 01 ad 69 ae 2f 01 ee 38 cc 0d 93 ce b4 48 1c fc ef a7 9b 22 06 f3 f8 80 73 15 66 77 ce fa d6 1f 76 1c 12 85 49 27 df 4c 81 f7 8e 13 cd cd 32 12 66 09 48 e7 89 a3 00 d3 d8 78 fc 48 ee ff e4 4f 90 63 09 7a 1b b4 77 80 f6 8e a0 9d 47 d7 1a 9e 6b 30 c8 ec ca b9 0c d7 fe 89 13 c6 d1 65 e2 83 e4 ab dc 9f 81 5e 22 c3 5e 5f 6c 7b 3b e7 31 b0 bc 72 be 96 90 4d 3a d4 66 8e 74 ff 12 8f a3 64 bd 29 d4 e9 16 a0 74 c7 59 46 f3 b9 48 f8 88 d4 f0 46 90 ec a7 59 c7 f9 7a b6 0c 93 4b 60 81 f7 50 db 33 0c b5 5f f6 29 6e fc f3 9e b3 f2 c3 4d Data Ascii: Kg3 jGD@QY,l(e?w'xCyX~!bi/8H"sfwvI'L2fHxHOczwGk0e^"^_l{;1rM:ftd)tYFHFYzK`P3_)nM
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 88 e4 92 79 2c 9e d3 4e 40 be 97 51 56 c1 75 bb 20 09 fc 8a 1f a0 a7 d8 97 90 58 83 e0 c5 c1 17 37 12 1d d2 d9 80 82 58 53 22 e6 39 94 5c d1 a5 f0 f7 19 14 59 ba 92 df d9 17 f6 65 00 82 98 b4 e3 6d e7 a2 08 a3 78 b4 25 35 35 e2 ee 8e 17 cd 47 62 47 fb 42 3f 51 f8 25 19 ed 81 84 a2 14 11 e6 41 79 16 93 3b 52 9a 0c e4 7f be 94 40 8e 91 9a 48 49 8b 7d 0a 90 05 c3 a4 d3 4c 48 7f 7c d6 ad d0 90 91 86 5c 43 a5 31 0f 7e 83 6c c8 6b 31 0b d7 40 4b a8 03 7b 1e 8b dc 08 32 1b b3 74 2e 5c 95 43 6a 52 60 dc e0 89 92 85 08 49 a0 0c fb cf e0 51 29 28 5a 72 aa a9 07 77 87 34 4e c5 0d c4 04 ca ad 64 63 89 2d 99 ab 78 49 0e b2 a2 15 3b fa 20 d1 75 24 6e 46 37 51 32 4f 6f bc e9 66 0a 77 2e 1f 7d d6 f3 60 d6 66 22 26 27 17 df 76 ee 58 25 90 20 0e 0d e9 03 4e 64 ba 80 ce 0b Data Ascii: y,N@QVu X7XS"9\Yemx%55GbGB?Q%Ay;R@HI}LH\|\C1~lk1@K{2t.\CjR`IQ)(Zrw4Ndc-xI; u$nF7Q2Oofw.}`f"&'vX% Nd
2024-11-01 15:52:33 UTC	387	IN	Data Raw: 4d 30 ec 18 16 06 53 1d 5b 79 95 6f a3 eb 28 a7 9a 1e 0b a5 2d 1b 39 88 3d aa d8 b1 e0 ab 2e 6f 1f ea 00 ca 6a cb d1 9d 51 89 6c ac 08 8f 16 65 3e c8 00 7d 33 99 ee 3c aa f4 fb 3b f2 d8 af 1e 7d f5 19 58 e5 2b 07 e2 56 e0 fa 32 5c 3b ce f5 30 38 0e 06 4e 77 59 14 eb 7c f4 e8 11 ae 5c a7 ba 17 79 d5 d5 23 97 67 3c 4b d7 77 19 f1 91 33 e8 f5 fb fe a0 37 38 76 e8 7a ae 5c e9 9b 4d b1 4c b3 9c 47 ff 88 f8 0f 81 2c 2e 86 a9 7c c8 79 f9 e2 ad b5 01 2e 2d 37 53 5e ba b8 99 e6 8f cc 6e 8f 70 b5 3c 7d 44 99 a4 47 3f be 78 f6 fc b7 6f 9e f3 d6 8f 46 19 e0 d9 4a de 04 31 47 ce e7 bd e9 c9 7c 1e 8e b9 09 49 d5 e8 32 45 e3 e9 69 bf b7 18 c8 c6 f5 26 83 5f 4a 8d 8b 93 c1 ac af 1a 11 60 d3 64 fe 23 9b c0 44 68 99 a1 36 73 d0 93 2d 28 ab 03 fb a0 51 0c cf 8e 7b aa f1 4e Data Ascii: M0S[yo(-9=.ojQle>}3<;}X+V2\;08NwY\|\y#g<Kw378vz\MLG,.\|y.-7S^np<}DG?xoFJ1G\|I2Ei&_J`d#Dh6s-(Q{N
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 31 32 34 39 0d 0a 1b 70 5f 70 73 3f a4 1f 39 5a c9 17 e0 b3 89 9c 6f 38 c8 a5 a3 5b d8 a6 08 9f 06 f6 ce a6 fa 20 37 08 c2 a1 f9 e9 78 16 fd a4 4a 40 a3 4d 69 b5 93 9f 5d 4e a1 1b fb 9e 73 76 e6 39 a8 b7 95 70 a8 1d 65 ef 10 3d fd b3 01 86 28 7c d1 ce b2 ab 87 9e c1 31 26 1e 2b 5e 51 10 c8 de c1 e0 02 fd fd a1 e7 a8 5e 09 89 da f3 02 cb 1e 9f e2 7f cd b5 52 57 72 bd 0d d5 72 20 81 1c e5 74 c0 d3 c1 f4 4c d1 d5 d4 24 34 46 0d 2e e8 a7 0a 3d 2b 22 6b a5 41 ef b4 37 30 82 83 33 d4 07 f4 7a 27 27 e7 b5 93 d4 c7 9c f7 c0 29 d5 f3 d4 87 9c ce fb 27 7d 75 2a d4 d2 2d 8b c6 46 36 87 10 57 1f 1c a0 49 45 35 19 9b 69 c1 92 3d 5b cc e7 0b 25 76 25 52 ec 11 a2 47 3f 55 84 54 fa 67 8b 0b 21 64 Data Ascii: 0000000100000011249p_ps?9Zo8[ 7xJ@Mi]Nsv9pe=(\|1&+^Q^RWrr tL$4F.=+"kA703z'')'}u*-F6WIE5i=[%v%RG?UTg!d
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 9f da b6 d6 59 3f c4 68 04 f9 fb 09 35 3b a4 ba 22 94 61 67 db 35 aa c3 49 72 7b 63 45 24 7e 60 4e 22 04 c3 d5 29 50 e1 00 8f 78 25 7c c8 74 81 67 0e 50 26 98 33 6f 20 af eb ed 1b 46 38 de db b9 8a 92 4d 21 f6 76 2f e1 aa cb 7d f6 0e 99 87 f4 f4 03 20 d9 3b 02 3e 78 b1 bc 67 cc 1d 39 e3 bc 4c 89 8a 5d 79 22 46 92 9f af 51 f0 a4 38 47 f1 13 3d 75 65 8d 53 b7 0e a5 1e 69 63 00 e6 b2 72 6d a9 52 f2 1b 2a 90 d4 c8 6c 05 82 2f 29 65 59 b0 86 82 98 7d a4 f9 5c 53 a9 c9 6b a3 11 cf 95 d5 75 69 f6 57 ce 46 3e 9e eb b2 eb c2 3d 45 d5 2c c9 d6 ee bd 7c 34 eb c3 56 e7 b0 e9 84 ce 67 d1 8a ea 67 f1 60 c2 ce ce e6 91 12 61 69 f2 6f c9 eb 51 3e 57 d9 4a be ce f0 ec d4 78 63 65 cf 0a 79 bb b3 d3 f3 96 1e 32 f5 17 17 94 00 97 1e 5c 39 87 9d 1f a4 c4 da ba b8 0f b1 cd fa Data Ascii: Y?h5;"ag5Ir{cE$~`N")Px%\|tgP&3o F8M!v/} ;>xg9L]y"FQ8G=ueSicrmR*l/)eY}\SkuiWF>=E,\|4Vgg`aioQ>WJxcey2\9
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: c1 94 ac c1 b0 87 92 ed a3 fe 1e 94 ac 63 b6 24 d7 3e ff b7 1c d1 46 50 89 02 5d b8 24 4b c3 41 64 7a e3 9a 22 2b 7d 2c 3d 37 ba f0 3e a5 4b 46 29 d0 95 4e 8e 0e 8e 6b 9d c6 57 1b f5 02 be 9d b4 26 da e9 75 a7 ac 4b e2 45 15 eb 96 3a 86 ea ac 49 5d 59 f3 15 ed ef f3 c4 81 81 87 38 ae d5 b3 d8 ae 6b a5 e7 b6 dd 2d e5 31 e6 b0 fb 1c d3 72 54 9b 6b da 6f b8 a0 3c 5e 99 7e be de ac 38 a1 b2 86 4e d6 ab e1 a5 24 b8 d6 1d d7 fc 52 7d ab a3 13 5d 0a 55 25 56 79 83 0a 1e 49 71 53 eb 08 e5 57 c5 9d c9 fe ca 80 1b 5a cf 51 dc b1 4e d5 8d 40 86 17 60 90 d1 1f 17 e9 7a e4 a3 c8 62 17 f0 fb c1 24 ff c8 57 85 b5 46 67 b2 cb 04 05 88 3b 35 5f 55 7b c0 57 b5 1e 95 25 44 9d 1f de aa 62 17 c4 c8 89 8a 77 74 3e 8f 39 46 c1 51 91 81 46 78 67 0f a2 18 8c 93 7f 65 0c 63 77 6b Data Ascii: c$>FP]$KAdz"+},=7>KF)NkW&uKE:I]Y8k-1rTko<^~8N$R}]U%VyIqSWZQN@`zb$WFg;5_U{W%Dbwt>9FQFxgecwk
2024-11-01 15:52:33 UTC	490	IN	Data Raw: 4d a6 52 f3 fe ab ce ef 75 90 9a aa c5 3a bf a1 29 01 72 00 55 ed 90 d1 24 b3 98 85 e0 fa 1d 9f c9 06 eb 5b ca 52 11 ee 1b 2a d3 22 f5 ac 0a e1 d0 80 7c 20 4d 52 c7 c1 7d d9 97 f6 e3 b5 cd 52 9c 26 43 10 59 ff a0 6a 5c 54 8f 0a c5 64 23 d7 47 c8 8f 76 a2 c8 51 49 23 ca cb d4 ef e5 da 36 65 e3 59 3e 3d 30 e2 57 69 60 b2 a8 d5 fe 68 4e 92 e8 6d 94 b3 36 ac 8e 1e af 54 67 75 b5 b2 94 79 db f0 8f d9 0a 5b b5 c8 d5 99 e6 c1 10 f2 99 50 69 14 1b 87 d5 8a 57 18 77 78 86 0e 0e 2d a2 f2 92 aa 9a 5d e5 c3 76 a6 f2 81 51 40 6b a9 43 18 2e e0 f1 52 2b 54 4c bd 5d b7 2a ef e6 39 a8 91 57 ab 2e ee 54 cb 88 ba 8c 9d 1e b4 18 b3 ac 79 08 89 9e 05 ac 65 77 b5 c0 ea db 70 bc b2 73 41 cf 0f fa 78 14 a1 8a 29 05 86 0d c0 81 08 50 12 d4 86 9c 34 f7 a5 f6 2e e8 5f b3 69 92 ca Data Ascii: MRu:)rU$[R"\| MR}R&CYj\Td#GvQI#6eY>=0Wi`hNm6Tguy[PiWwx-]vQ@kC.R+TL]9W.TyewpsAx)P4._i
2024-11-01 15:52:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49888	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	527	OUT	GET /gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:33 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 2628b96fb15261c894e4ed6e31acb6b2 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:30:53 GMT Expires: Sat, 25 Oct 2025 19:30:53 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591700 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:33 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 31 0d 0a ff 0d 0a 30 66 66 36 0d 0a ec 7d 69 77 db 46 b2 f6 f7 fc 0a 18 49 7c 80 09 00 91 d4 4e 19 56 bc de 68 e2 6d bc 24 93 28 7a 65 88 6c 92 88 48 80 01 40 c9 b2 cc fb db ef 53 d5 dd 40 03 04 65 c5 93 39 ef 97 9c 93 d8 20 d0 4b 75 75 ed 55 dd b6 17 b9 b0 f2 22 8b 07 85 7d e0 e4 62 3a 0a 2e c5 d9 3c 1a 9c 3f 9a 2c 92 f3 8b e2 74 11 9f ce a2 38 09 6f f8 f6 e9 d3 f1 89 1b cc 17 f9 c4 39 3e de d9 df db de Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010010ff6}iwFI\|NVhm$(zelH@S@e9 KuuU"}b:.<?,t8o9>
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 36 7b 9b 3b bd 9a 86 01 d1 bb 9e 52 34 83 74 46 42 ec 08 8c cd 2a 07 eb 3f c0 73 5e b0 d2 e9 6e a3 b7 1b cc 44 9e 47 63 41 8d 96 de fe fe 66 6f 6b ed 78 17 71 b6 c8 df a6 45 34 7d 13 25 c3 b3 f4 43 39 72 8e 91 49 4f 65 6a fc 3c c4 2e 68 bd 16 e4 17 63 d7 c9 c0 d6 59 e8 90 0e 73 df 7f 65 81 bb 2f c6 d6 25 91 6a 68 77 c5 cc b6 26 22 1e 4f 0a f5 e3 22 16 97 0f d3 0f a1 dd b1 3a 56 6f 0b ff d9 d6 28 86 02 b3 93 34 11 b6 f5 61 36 4d f2 d0 9e 14 c5 bc bf b1 71 79 79 19 5c 6e 06 69 36 de e8 75 3a 9d 0d 0c 6d df ff ea de 1c 04 c2 bd fc 6c 31 15 a1 2d 20 14 d3 e1 d0 b6 06 d3 78 de 7c 37 0c ed e7 3d 6b 33 d8 7e d6 ed 04 7b 3b db 5d ab db 0b 36 f1 f7 b3 9e d5 eb 06 bd cd 4e ef 87 5e ef 27 34 f8 a1 f7 ab 06 e6 eb cd c7 bb bb 4f b7 ed 0d cc 46 b3 de ff ea ab af 20 a8 Data Ascii: 6{;R4tFB*?s^nDGcAfokxqE4}%C9rIOej<.hcYse/%jhw&"O":Vo(4a6Mqyy\ni6u:ml1- x\|7=k3~{;]6N^'4OF
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 69 82 18 89 f1 59 8e 51 2a 74 f0 57 81 88 10 d9 07 b0 c4 f4 78 ae 7b 02 2b 00 38 0b d6 7e 6f 09 3a 95 88 29 e3 4e 18 0f ce e6 60 c2 31 32 27 11 97 d6 23 e9 bc 93 15 02 eb 7a 12 25 63 e1 73 3f 7f 06 2b dc f6 ae 87 a2 80 aa 52 c1 0f 6d 9d 7b 67 8b 33 ac 33 ef df e9 78 20 ed 39 62 53 43 3c c3 16 56 6c ac 65 60 28 f7 82 da 2c 0a f1 54 49 46 29 4d 48 32 ea f6 e5 66 d5 da 83 97 59 b1 1b ed 97 2d 36 b8 0e 69 7d 66 75 44 38 ac 31 7c 36 fa 04 cc 7f 77 79 aa 40 2b a7 2a 37 f7 8e 23 23 d1 82 6d 62 08 fb b2 6d b9 0c 65 3f af 48 76 ec 94 24 10 65 c2 bc ff 06 ae c5 28 ce f2 82 f4 c2 12 da 9a 2c 56 f5 eb fd a7 4f b0 ef 86 cb d3 86 c4 85 fe d0 74 66 01 86 36 ce 7b 4f 28 dc 40 50 6d f9 1e d0 a1 7f 4d fa 96 2b 59 d7 dd d6 a2 d9 46 ef ba e0 bd 25 4a 59 fa 92 22 36 31 1a e7 Data Ascii: iYQtWx{+8~o:)N`12'#z%cs?+Rm{g33x 9bSC<Vle`(,TIF)MH2fY-6i}fuD81\|6wy@+7##mbme?Hv$e(,VOtf6{O(@PmM+YF%JY"61
2024-11-01 15:52:33 UTC	345	IN	Data Raw: 6e 6f 6e ef b8 de 63 3c ee 75 7b db c8 44 33 55 5a cf ae 55 ac 86 1c 4e 29 59 13 2f 3b c8 a1 b0 91 d8 2b 82 c1 6c e8 5e 0f a2 5c c0 df 8d b2 c1 c4 ee 2b cf 3e 74 12 38 9d 50 fa b9 49 4c 89 26 a6 44 95 7a b9 f7 3b 77 ef b2 11 61 78 99 72 24 e9 7c 2e b2 e9 e3 74 81 78 c8 93 64 80 a0 09 a6 a4 31 8f 3b 27 c8 b0 9f 65 22 3a 3f 50 b3 43 30 73 be c7 80 20 6b 81 20 d3 10 64 26 04 08 1a 91 9a 79 2d 90 ce cc 11 ac 91 23 79 d5 64 ab 89 50 11 40 29 fc 9c 41 51 50 49 17 c2 33 9c a7 04 61 2c a9 08 e2 b9 f7 b6 b2 9e 1f 7a 2f fe b6 9f ff 22 fb f9 8f f0 61 c3 82 8e cd 5a 3d f2 d5 50 58 07 a7 f0 55 96 8e 33 04 21 a9 50 ec a1 0e e1 eb 97 aa a0 06 d1 c2 75 9f 88 5d b9 3f 82 97 a4 91 42 f8 da e0 a4 75 86 77 b3 75 c7 5b 37 30 8b d9 ca 56 29 ab fe 74 ea f7 39 24 ea f3 f0 2d 59 Data Ascii: nonc<u{D3UZUN)Y/;+l^\+>t8PIL&Dz;waxr$\|.txd1;'e":?PC0s k d&y-#ydP@)AQPI3a,z/"aZ=PXU3!Pu]?Buwu[70V)t9$-Y
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 31 38 61 62 0d 0a d5 a5 d6 2f ba 64 d4 43 75 2b 4a bc ae 8b ec 8a ad 3c d4 8c 1e c7 27 28 08 45 f5 4b 14 50 fe 47 2c 07 14 84 a5 5d 57 d9 75 56 5f 28 92 75 97 51 30 44 e1 d0 61 e1 4c dd fe ab 2c 45 4c 5a 20 05 05 13 0f f1 b4 a9 1b c0 46 48 9c cc cb dd 65 39 f1 4f c6 38 fa a5 32 30 0b de 48 2f a9 8a 6d 55 40 92 bd 2a 35 bc e3 94 bd 68 60 86 39 46 9d 2b fc f4 e9 15 71 84 7b a0 1b 58 29 cd f5 8b 13 7b 68 e9 51 b1 af 9d 60 bf a1 b9 0c 78 a2 95 Data Ascii: 00000001?00000001{00000001?00000001z00000001?00000001H000000010000000100018ab/dCu+J<'(EKPG,]WuV_(uQ0DaL,ELZ FHe9O820H/mU@*5h`9F+q{X){hQ`x
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 11 25 74 20 17 a1 bf e9 10 12 98 5b 9f 3f d2 fd d4 71 a4 66 5f f5 5a 4e f5 1c 05 20 54 e3 08 db 01 ea 18 05 55 24 0d 1f a0 0e b1 38 1a 56 46 1e 23 b2 4e 36 87 f6 5e b4 b9 d5 19 74 77 fc d1 d6 ee c8 df da 3d db f2 f7 77 87 91 bf bd 19 89 bd c1 60 6b 6b b0 d7 b1 65 69 09 aa bc 69 40 b5 de 6a 4e 49 c8 16 ea c1 a9 7c 0e 00 bc 42 cb b7 71 41 87 9e bc 22 bc 8e 73 5d b9 21 c7 a9 7e 7b 58 33 6d 80 2e 9a 7c 06 2b 3d c9 21 9d 64 05 da 85 2e 8a f3 34 32 e4 00 fa 97 87 0a 5c 39 51 5f 67 50 82 82 e6 85 29 35 9f a2 5e d1 79 4f 31 7d 1c 6a 7a ef d9 10 c7 90 e9 c8 29 90 1f cc fc 41 e7 8b 1e 51 dc 1c e6 1c 4e ba f0 c7 16 82 21 43 41 38 44 36 ae 87 3f b1 1c 93 f1 f4 92 cc 77 0c d7 6b e4 68 44 05 17 d5 ca 53 32 20 a0 93 24 e4 4e 94 30 6e fc b6 31 5e c4 8e 7f 1c f9 1f 4f be Data Ascii: %t [?qf_ZN TU$8VF#N6^tw=w`kkeii@jNI\|BqA"s]!~{X3m.\|+=!d.42\9Q_gP)5^yO1}jz)AQN!CA8D6?wkhDS2 $N0n1^O
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: 5a 4b bc 3a 4a cf 34 89 5c 89 f2 a1 95 1f 6f 96 42 ff 0c 59 fe 33 c9 72 9c fe c3 7d 20 f7 bf 8f 51 f8 0f 16 44 fa db d9 d8 18 c1 d9 c9 83 71 9a 42 6b 47 73 ec 00 4a 11 36 e8 4c e1 e1 28 9a c5 d3 2b ba 06 41 64 70 ad bf a3 52 8f dc 3d c0 c1 2b 1e c6 ba c7 f2 ce a2 a4 43 68 b3 9e b7 48 29 d0 13 b3 19 8a 2c 98 e7 50 51 c1 52 56 4b 44 5d 47 22 6d 7c 79 80 09 29 8f 7e 79 c8 49 2d 7a 95 6a 6f bf e6 1f b1 e6 1f 79 cd 52 b5 ac 95 4c ba e4 89 44 96 92 62 4a 5c 85 b6 04 80 ab 18 e9 26 19 48 4b 19 a7 58 15 58 66 b9 d2 4c e1 8b 4f cf e2 80 d1 82 13 a6 d5 51 3a 09 d0 fd 3a 16 c8 d7 30 31 60 fa 3f 92 0f 4b b4 4a f3 33 d4 e2 a8 7a cf 36 35 48 a6 8e 57 e9 d4 34 4d 08 65 1d 52 52 40 16 a9 50 f0 fe 4e 41 31 77 18 d4 32 44 59 5a 90 ea 35 0a 23 a4 b3 ac 6c 57 bd 73 4f d1 07 Data Ascii: ZK:J4\oBY3r} QDqBkGsJ6L(+AdpR=+ChH),PQRVKD]G"m\|y)~yI-zjoyRLDbJ\&HKXXfLOQ::01`?KJ3z65HW4MeRR@PNA1w2DYZ5#lWsO
2024-11-01 15:52:33 UTC	1408	IN	Data Raw: fa 56 4e dd 76 cd 04 25 18 8c 1a f8 08 ae b7 83 2b dc a0 f9 90 d1 52 5a a9 14 22 0a fd 90 20 c3 9a 6e 52 ef 4b f1 b1 da 53 4f 43 02 a3 de b7 fc b2 da 1b da 8f 4a f0 20 88 57 14 5b 7d 0c b5 c6 72 04 ba 35 4f 03 df 2e bb cc 95 90 f8 da de df c5 fd 8b 38 6b 8d 2b 17 71 b4 86 6e 64 44 a9 3b 3d 6c 77 77 7b 5d 1c e4 e4 6b 17 8d 4b 21 49 d4 d1 55 d0 7b fb db 5b bb 7c 15 34 92 9d b8 c6 83 2e 82 c6 6d d2 a8 3e 46 09 2c 25 40 63 78 5e 0e 32 a2 ee 01 8e fd f3 dd d3 e4 93 7b 76 7f 92 c2 82 bf fe 2d b1 2c ba af 03 dc d1 e7 63 78 07 f4 86 cf e3 c9 fb 96 e0 fd f7 71 6d ce 74 31 4b f8 13 5f c1 d9 b7 70 d1 de b7 fc 5b 5e c3 69 bc 20 8c 8e f9 0c 57 1f 45 72 99 e3 fb 67 39 f2 0a 10 08 b8 26 10 2c 38 76 e5 14 88 53 fa 39 ea 7b d0 75 6b fe 81 df 11 9b 8e 28 a7 04 58 22 94 f9 Data Ascii: VNv%+RZ" nRKSOCJ W[}r5O.8k+qndD;=lww{]kK!IU{[\|4.m>F,%@cx^2{v-,cxqmt1K_p[^i WErg9&,8vS9{uk(X"
2024-11-01 15:52:33 UTC	798	IN	Data Raw: a4 88 13 18 99 a8 9c 61 15 e8 fb 66 04 5a c6 8f 65 75 aa 76 4e b7 f6 08 8d 37 b4 d3 74 bf 4d 62 f3 a6 86 75 42 86 20 44 04 c9 ea d2 1f 5f d3 b6 74 3a bd 9d 66 77 45 98 f2 2e 51 a6 e0 1a 37 22 ec 50 da 5f 0d 08 75 cf d6 4e 2c 40 14 fb ae e9 a7 c6 d5 5a b7 94 54 9f 9b af 0a 83 b4 ce 5c 7d 6e 9f 1e 6a 57 17 9b 72 35 d2 ca fc a5 ec 6b c0 5d 56 70 56 82 ae cd 4a 5d d7 ab 15 d8 75 73 49 20 db 82 40 37 f6 a0 6c 06 92 4c 53 dc 67 05 9f 8d 5c b7 5b f8 7c 0d 80 b9 80 4d f5 c6 3f 3e d4 ee ca d7 1a b5 e3 d9 6c f2 c5 50 fc 19 0c c8 09 d7 a3 f9 26 30 d9 94 52 c5 c0 ad 23 34 dd fc 06 d2 a8 c8 c3 a0 26 2e f2 bd 40 d0 e8 b3 44 ad 76 cc 67 df f5 26 c2 a2 9b ce 50 67 80 8a 3c b7 c9 c2 b5 31 5a a1 d7 ac c6 1e 09 ea 74 90 6f 8d 51 b5 d8 58 84 1e 07 3e 11 07 f9 57 02 90 7a 98 Data Ascii: afZeuvN7tMbuB D_t:fwE.Q7"P_uN,@ZT\}njWr5k]VpVJ]usI @7lLSg\[\|M?>lP&0R#4&.@Dvg&Pg<1ZtoQX>Wz
2024-11-01 15:52:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49889	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:33 UTC	967	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/related_comments?limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTUzNDQ3NDE3ODctWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjIzOA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 2a25a56af364b4a1ad1acd68e619f960 Date: Fri, 01 Nov 2024 15:52:34 GMT Server: Google Frontend Content-Length: 5289 Expires: Fri, 01 Nov 2024 15:52:34 GMT Cache-Control: private Connection: close
2024-11-01 15:52:34 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 64 2d 77 77 77 2e 67 6f 6f 67 6c 65 2e 73 65 2d 39 36 31 33 35 36 35 31 22 2c 20 22 74 79 70 65 22 3a 20 22 63 6f 6d 6d 65 6e 74 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 63 6f 6d 6d 65 6e 74 73 2f 64 2d 77 77 77 2e 67 6f 6f 67 6c 65 2e 73 65 2d 39 36 31 33 35 36 35 31 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 74 65 78 74 22 3a 20 22 54 68 69 73 20 69 6e 64 69 63 61 74 6f 72 20 77 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 69 6e 20 61 20 72 65 70 6f 72 74 2e 5c 6e 5c 6e 5c 75 64 38 33 64 5c 75 64 64 30 65 20 54 69 74 6c 65 3a 20 4e 65 77 20 57 69 64 65 73 70 72 65 61 64 20 45 Data Ascii: {"data": [{"id": "d-www.google.se-96135651", "type": "comment", "links": {"self": "https://www.virustotal.com/ui/comments/d-www.google.se-96135651"}, "attributes": {"text": "This indicator was mentioned in a report.\n\n\ud83d\udd0e Title: New Widespread E
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 64 34 61 33 65 32 2f 63 6f 6d 6d 65 6e 74 73 20 66 6f 72 20 72 65 70 6f 72 74 27 73 20 72 65 6c 61 74 65 64 20 69 6e 64 69 63 61 74 6f 72 73 29 5c 6e 22 2c 20 22 64 61 74 65 22 3a 20 31 37 32 36 30 37 38 35 32 35 2c 20 22 76 6f 74 65 73 22 3a 20 7b 22 70 6f 73 69 74 69 76 65 22 3a 20 30 2c 20 22 6e 65 67 61 74 69 76 65 22 3a 20 30 2c 20 22 61 62 75 73 65 22 3a 20 30 7d 2c 20 22 74 61 67 73 22 3a 20 5b 22 35 37 35 64 34 61 33 65 32 22 5d 2c 20 22 68 74 6d 6c 22 3a 20 22 54 68 69 73 20 69 6e 64 69 63 61 74 6f 72 20 77 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 69 6e 20 61 20 72 65 70 6f 72 74 2e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 5c 75 64 38 33 64 5c 75 64 64 30 65 20 54 69 74 6c 65 3a 20 4e 65 77 20 57 69 64 65 73 70 72 65 61 64 20 45 78 74 65 6e 73 69 6f 6e Data Ascii: d4a3e2/comments for report's related indicators)\n", "date": 1726078525, "votes": {"positive": 0, "negative": 0, "abuse": 0}, "tags": ["575d4a3e2"], "html": "This indicator was mentioned in a report.<br /><br />\ud83d\udd0e Title: New Widespread Extension
2024-11-01 15:52:34 UTC	489	IN	Data Raw: 64 64 30 65 20 54 69 74 6c 65 3a 20 45 78 74 65 6e 73 69 6f 6e 20 54 72 6f 6a 61 6e 20 4d 61 6c 77 61 72 65 20 43 61 6d 70 61 69 67 6e 20 7c 20 52 65 61 73 6f 6e 4c 61 62 73 3c 62 72 20 2f 3e 5c 75 64 38 33 64 5c 75 64 63 64 31 20 52 65 66 65 72 65 6e 63 65 3a 20 68 74 74 70 73 3a 2f 2f 72 65 61 73 6f 6e 6c 61 62 73 2e 63 6f 6d 2f 72 65 73 65 61 72 63 68 2f 6e 65 77 2d 77 69 64 65 73 70 72 65 61 64 2d 65 78 74 65 6e 73 69 6f 6e 2d 74 72 6f 6a 61 6e 2d 6d 61 6c 77 61 72 65 2d 63 61 6d 70 61 69 67 6e 3c 62 72 20 2f 3e 5c 75 64 38 33 64 5c 75 64 63 63 36 20 52 65 70 6f 72 74 20 50 75 62 6c 69 73 68 20 44 61 74 65 3a 20 32 30 32 34 2d 30 38 2d 30 36 3c 62 72 20 2f 3e 5c 75 64 38 33 63 5c 75 64 66 66 37 5c 75 66 65 30 66 20 52 65 66 65 72 65 6e 63 65 20 49 44 Data Ascii: dd0e Title: Extension Trojan Malware Campaign \| ReasonLabs<br />\ud83d\udcd1 Reference: https://reasonlabs.com/research/new-widespread-extension-trojan-malware-campaign<br />\ud83d\udcc6 Report Publish Date: 2024-08-06<br />\ud83c\udff7\ufe0f Reference ID
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 36 38 34 65 63 37 36 64 61 32 33 37 38 33 32 35 30 37 35 36 65 31 66 37 35 34 36 34 37 39 36 66 64 36 38 37 32 30 2d 62 63 39 34 62 63 64 61 22 2c 20 22 74 79 70 65 22 3a 20 22 63 6f 6d 6d 65 6e 74 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 63 6f 6d 6d 65 6e 74 73 2f 75 2d 38 66 62 32 61 63 36 30 34 61 34 66 61 34 35 35 31 61 31 31 31 37 39 30 34 31 36 38 34 65 63 37 36 64 61 32 33 37 38 33 32 35 30 37 35 36 65 31 66 37 35 34 36 34 37 39 36 66 64 36 38 37 32 30 2d 62 63 39 34 62 63 64 61 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 74 65 78 74 22 3a 20 22 4a 6f 65 20 53 61 6e 64 62 6f 78 20 41 6e 61 6c 79 73 69 73 3a 20 5c 6e 5c Data Ascii: 684ec76da23783250756e1f75464796fd68720-bc94bcda", "type": "comment", "links": {"self": "https://www.virustotal.com/ui/comments/u-8fb2ac604a4fa4551a11179041684ec76da23783250756e1f75464796fd68720-bc94bcda"}, "attributes": {"text": "Joe Sandbox Analysis: \n\
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 22 68 74 6d 6c 22 3a 20 22 4a 6f 65 20 53 61 6e 64 62 6f 78 20 41 6e 61 6c 79 73 69 73 3a 20 3c 62 72 20 2f 3e 5c 74 5c 74 5c 74 3c 62 72 20 2f 3e 56 65 72 64 69 63 74 3a 20 4d 41 4c 3c 62 72 20 2f 3e 53 63 6f 72 65 3a 20 35 32 2f 31 30 30 3c 62 72 20 2f 3e 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3a 20 6d 61 6c 35 32 2e 70 68 69 73 2e 77 69 6e 40 32 38 2f 30 40 31 38 2f 31 38 36 3c 62 72 20 2f 3e 54 68 72 65 61 74 20 4e 61 6d 65 3a 20 48 54 4d 4c 50 68 69 73 68 65 72 3c 62 72 20 2f 3e 44 6f 6d 61 69 6e 73 3a 20 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 6f 33 32 34 33 37 34 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 2e 69 6f 20 65 78 70 2e 6e 6f 74 69 6f 6e 2e 73 6f 20 63 68 Data Ascii: "html": "Joe Sandbox Analysis: <br />\t\t\t<br />Verdict: MAL<br />Score: 52/100<br />Classification: mal52.phis.win@28/0@18/186<br />Threat Name: HTMLPhisher<br />Domains: a.nel.cloudflare.com accounts.google.com o324374.ingest.sentry.io exp.notion.so ch
2024-11-01 15:52:34 UTC	49	IN	Data Raw: 32 33 63 33 32 61 35 62 35 34 61 32 30 63 38 33 61 39 30 37 65 2f 72 65 6c 61 74 65 64 5f 63 6f 6d 6d 65 6e 74 73 3f 6c 69 6d 69 74 3d 35 22 7d 7d Data Ascii: 23c32a5b54a20c83a907e/related_comments?limit=5"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49897	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	510	OUT	GET /gui/19299.9ce6ff847745ede896a5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: df5c4115e2523b7ca923e17332bcd855 Content-Encoding: gzip Server: Google Frontend Date: Thu, 31 Oct 2024 12:20:24 GMT Expires: Fri, 31 Oct 2025 12:20:24 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 99130 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 09 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 31 0d 0a 26 0d 0a 30 66 65 65 0d 0a fa 57 60 ae 9f 97 dc 02 61 dd 96 28 d3 2a 59 b6 bb d4 e5 6b Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001c0000000100000001H00000001001&0feeW`a(*Yk
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: bc 41 36 c2 2a c6 80 ff b8 fb ea dc 79 7c bf 32 75 ce 15 fc 14 38 80 12 c0 f8 47 dd 6e 33 93 89 11 5c b1 96 9b 38 ec 3b 2b 78 0e 24 d6 58 b7 67 75 3a 42 a7 23 ea f4 f9 4d d6 9e 84 ed b1 7f 15 f4 db c3 30 cd 1c 0f 00 62 c8 36 68 c0 86 e3 69 c8 cb ef 17 32 8f e7 4f cb 1f be d0 53 53 df cb 3e aa 8f e5 87 2c f5 98 36 ba d9 6a 75 ac f9 dc 60 3e 37 3c 9f 74 18 67 4e e4 8f 82 6e 23 18 8d b3 bb 76 9a 61 eb 1a 2f 9e 3f a5 37 18 a4 d5 52 20 53 fd 30 51 00 0d ad 42 ee 0e 9d de 71 a7 fd f0 c6 61 9c ed 36 18 cd da 49 90 8e 81 a8 e1 0d 7a 76 9e f3 b3 42 03 c7 1f 86 57 51 7b 14 f6 81 85 dc 84 10 92 9a 26 f4 cf 40 37 ee c5 c3 f6 ea 1a 35 b0 86 18 60 ca bd 6b e7 ca 1f b7 d7 f1 8a f7 ed 68 32 1a f9 c9 9d f3 fc 29 1a a2 f9 d3 6c a0 de f0 6b ab cb 0c c7 aa dd c3 51 0a 92 c6 Data Ascii: A6*y\|2u8Gn3\8;+x$Xgu:B#M0b6hi2OSS>,6ju`>7<tgNn#va/?7R S0QBqa6IzvBWQ{&@75`kh2)lkQ
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 1e 07 17 8b ed c8 64 5d 33 e6 99 f4 1e 4f 3b a5 16 b4 26 b4 b6 86 a2 27 67 99 7f 35 d5 4a 17 06 25 26 f7 29 f8 7d 12 26 41 ff 30 ba 8c 8f e3 8f e1 4d 9c 41 67 63 9f 88 63 60 dc 31 51 2a 5f 13 2a 25 14 0e 89 4d 82 44 94 85 90 06 1b ce 20 09 2e 35 79 72 9e cb 94 db 99 de 20 c7 93 27 ba c5 f3 a7 e5 16 44 c7 7c 3e 3d a0 4d a9 17 5e be 62 45 50 bf d5 ec 7b ff b9 4d 34 e5 28 f0 93 de e0 73 32 c4 0c c1 9b 14 a4 ee 0f 98 e5 07 3e b7 55 e9 95 09 2b c9 89 f9 6c 31 58 79 fc e5 66 68 a4 4b 8d 6e 05 fe ba 75 4f 7a c2 ac a2 d4 7b b1 62 91 2f a3 3f c2 9d b0 67 ff e8 6c 56 05 ff 43 ac eb 90 d6 c5 04 06 a4 e5 04 1a a8 28 b8 75 f6 93 c4 bf 03 da 9f 0a 9f de 84 d6 d5 e2 98 3f e3 b3 cf 42 c6 14 c7 0c f1 9e f8 c5 6e 63 cb 70 41 e3 bb f6 46 89 69 1e 0f fd 5e 30 88 87 50 e3 b4 Data Ascii: d]3O;&'g5J%&)}&A0MAgcc`1Q_%MD .5yr 'D\|>=M^bEP{M4(s2>U+l1XyfhKnuOz{b/?glVC(u?BncpAFi^0P
2024-11-01 15:52:34 UTC	440	IN	Data Raw: 39 3d 9c 7e fd 9a 9d 34 7e fe 59 ff 6e 9c 12 71 a3 b3 f5 a8 1b 4a f7 09 9b a7 22 70 82 f0 d5 18 76 1f ad c0 97 e8 d1 ea 6e 96 dc d1 6c 21 c7 10 9d ef 41 12 23 5d 12 44 ec 2f 99 bb 42 06 31 5e 8c e0 4b 33 6c 41 43 19 aa 95 ec a2 93 d5 a9 f1 8b d9 7d d4 1c 76 9b 49 37 95 4e 42 74 d2 8f a3 00 c6 8d a6 2f 9e 56 89 77 e3 0f 27 01 29 de 44 fa 44 67 01 60 8d b9 b4 76 a7 50 65 f6 06 04 3b 4c 0b 72 53 37 9b 62 f1 98 ce dd bd 9a e2 23 2c 5c ad c8 13 19 9a 1d 6d 42 f5 a3 d9 72 d5 2c 23 9a 25 54 24 d2 c8 74 83 55 f6 5b b8 6f e2 5b 27 9e 82 0f 62 e7 1b 7f 8a ed c0 0e 94 37 04 8d 65 1b 1b e4 6a 06 ef 1a e3 51 94 e9 8d 7c cc 1f ee ca d6 dd 4f bd 2c 3e e2 a6 1a 88 9e 90 ca 6d b7 0d 47 30 19 ae 21 33 44 67 5d 08 92 2c b5 6a 0f 1b ac 45 69 7e f5 13 8f d8 21 08 c7 ef 60 a5 Data Ascii: 9=~4~YnqJ"pvnl!A#]D/B1^K3lAC}vI7NBt/Vw')DDg`vPe;LrS7b#,\mBr,#%T$tU[o['b7ejQ\|O,>mG0!3Dg],jEi~!`
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 66 66 33 0d 0a bb da a7 2b ec e2 b6 ea ca 69 05 56 86 cf 83 dd f0 a7 9f 5a c9 49 78 0a b7 ae f0 54 f3 4f 09 b3 53 5f 7e 08 39 0f 24 e4 5c 77 9b bd 79 42 8e dc ba 36 df a6 ed ec 8a bb 1a 97 05 16 31 cb 81 2c 10 f7 08 99 66 10 8e 0b dc 0c 58 37 cd 04 43 Data Ascii: 0000000100000001{0000000100000001B00000001000000010000000100000001B0000000100000001000000010000000100000001 00ff3+iVZIxTOS_~9$\wyB61,fX7C
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 49 e9 7e bb 17 50 59 48 27 11 20 25 a2 66 05 bb c0 2d b8 6c 27 2b cb 88 96 23 99 78 86 c7 2c ca fd 97 90 13 0f 3f 3e 94 8c b8 40 10 0b c7 fb ca b7 17 27 ce cd 66 33 d8 d9 1c 1e 65 11 ef 8d b3 9c 77 ac 59 c9 5c e4 22 43 40 6f 96 21 a0 4f 86 80 5e 6b f7 cb 42 43 c0 b5 6d 08 50 97 ba 71 58 b8 ee ea 0e ca 0a 7c 69 59 f6 c8 b8 86 0a 9f a3 4f bf 59 85 2f da 7a f8 fd 2d e1 ba b0 b5 bd be be 55 ab ac ff e1 8d f0 b0 b1 a7 42 31 af ba a4 05 86 bd 56 ec bf 1d 58 8f c9 e4 cf c2 27 bc e1 28 f2 13 2c 23 1e e7 3f f8 9d fa e8 32 80 94 82 08 ca df 27 d0 b8 7d 4a 53 7a 27 b4 f4 76 81 0e 90 87 5f 1c 89 aa 3c de 60 e0 98 c2 ef d2 8f c2 7f 04 a4 ab c6 ad 66 88 ae 39 87 f0 26 6a 36 ce 1a 6e 03 d6 73 0f 97 df a8 a9 95 f4 0e bc c5 07 7e b2 9f 35 57 f0 26 fe 8c 68 84 e4 c0 4f 11 Data Ascii: I~PYH' %f-l'+#x,?>@'f3ewY\"C@o!O^kBCmPqX\|iYOY/z-UB1VX'(,#?2'}JSz'v_<`f9&j6ns~5W&hO
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 15 e5 93 d5 e7 29 b2 2d 7c c3 bd a5 83 a3 6d 75 cf f7 a9 a4 6a 75 4f f5 6a aa 70 b9 ab ec 10 de 82 14 e0 6c cf ed c7 55 56 51 44 99 ab ec ce 4f 7c eb 16 b3 f0 4c 31 0e 85 2b 4c b8 a0 a0 3e a0 4c 25 4e fc 24 7d 28 49 ce a0 5f 0d ff a3 a3 ca 67 ec d5 43 dd 7f 46 54 56 78 50 a7 0c 2a 89 c9 45 6d a2 52 02 41 68 fe 23 d5 41 04 29 a2 56 08 a5 7a 70 b5 86 c5 eb 99 c8 f3 3f 47 aa 1d 71 a6 b3 d4 f9 8f fd 4f fb 0e 2d d1 56 25 b0 26 1f 4a 7f e8 35 6a 44 5d 85 3a 5a bb b0 bc 54 6b 20 69 18 70 4d 3b c1 ab 1c cf e2 55 3e 11 af 72 dc da fd ad 8e 57 79 b3 88 57 59 fc 95 5a 4e 99 53 59 ee 43 42 8c 9c 53 79 d3 d5 5f cd e2 54 e4 0c 5a 7c ca 1b e1 53 3e 12 9f f2 6c 05 c1 0b ec 6b f0 ab fb de 7d e9 be 73 7f c9 e5 e1 7f fc e0 52 1e 88 4b f9 bd db fc 75 1e 97 62 64 4b be fa 91 Data Ascii: )-\|mujuOjplUVQDO\|L1+L>L%N$}(I_gCFTVxP*EmRAh#A)Vzp?GqO-V%&J5jD]:ZTk ipM;U>rWyWYZNSYCBSy_TZ\|S>lk}sRKubdK
2024-11-01 15:52:34 UTC	37	IN	Data Raw: 55 84 9a 9e 29 10 0c 5f 22 2f de 5b 14 fc a8 76 cd d5 28 e0 dc 42 30 44 ec 7e de 50 51 c9 79 4b 0c bc 80 0d 0a Data Ascii: U)_"/[v(B0D~PQyK
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 90 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 31 0d 0a 86 0d 0a 34 66 65 65 0d 0a f0 14 c9 11 16 d7 d9 a3 91 f7 0b 25 e8 18 87 92 cd 00 7e Data Ascii: 000000010000000100000001t00000001e0000000100000001000000010000000100000001n00000001\|0000000100000001m00000001000000010000000100000001.0000000100014fee%~
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 90 55 e2 b0 25 b5 b0 54 03 f3 ce f8 be 47 92 c8 ca e5 23 7e 46 6f ce e9 0c 60 3a 3a 01 af 7d a6 0e b1 ea 43 ac 9a 9a f0 b6 15 a7 2d 17 1b 4e 70 99 5b d1 a5 1c ed be c4 1d a5 08 41 92 53 da 23 aa 9a 83 ea 06 eb 12 90 64 4a 5f 29 7e 43 f2 82 69 e2 64 be 28 25 e1 22 72 2a 3c 84 b4 a7 df 0a ce 2c f3 8b 72 83 31 4b 78 21 96 91 44 94 04 02 58 6c 82 7d d2 c5 9b a3 38 e7 e5 77 dd c6 15 c5 1f 29 82 69 21 42 3e 4f 0b 1f 14 6f 67 b6 fa ad 48 80 3c dd ef d9 ea 57 d8 c7 57 7a 1f ed 69 19 70 7e cf 06 d0 c7 10 08 50 de 68 06 e4 ad 15 69 54 d1 27 ad 8e fb 92 82 af 02 6d ec df 60 4b 6f fa f8 82 52 c5 59 f8 fe fc e9 60 0b 2d 00 46 dd 44 b2 7b d8 55 43 9c d1 05 57 c1 fc 3c a6 79 a6 0e ca eb 52 68 0f 25 dc 47 d4 0f 09 32 69 36 e9 87 28 9a 88 b2 bb ba bc 11 3c e8 99 62 a7 48 Data Ascii: U%TG#~Fo`::}C-Np[AS#dJ_)~Cid(%"r*<,r1Kx!DXl}8w)i!B>OogH<WWzip~PhiT'm`KoRY`-FD{UCW<yRh%G2i6(<bH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49895	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	510	OUT	GET /gui/25076.f1d5707846ec1ba9ed7f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d46b98b5a9c038a42704f49ace4ba869 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:44:38 GMT Expires: Sat, 25 Oct 2025 15:44:38 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605276 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 34 30 33 0d 0a 85 ef fb 14 ac da 1a 64 21 2b b2 e3 bf 48 a1 53 20 6d 81 00 db 6e b1 c0 de Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\|000000010000000100000001n00000001000000016000000010000403d!+HS mn
2024-11-01 15:52:34 UTC	201	IN	Data Raw: b0 fb 06 bb 27 b7 85 6c 4f 26 f1 e0 62 02 c1 f1 7c 49 49 25 ea 84 4c 50 60 4a 84 ea f1 41 15 3b 97 90 1c 01 03 9b e2 e0 69 3f 76 f2 2b 24 e4 ba cf 0a d6 e4 fb 43 dc 91 5b 04 51 5f f6 fc 57 d2 14 93 82 75 8f 2c 36 4f 90 c5 db ab 3e 73 4d 6e af 50 c4 9a 7c c6 cb 34 ea 5b d3 60 7f 35 8d f5 db 07 1c 10 6c 25 6d 79 4d 1f f1 e8 4c 94 9f 98 56 d0 5f 4f 8c 06 ca 54 3d d4 ad 84 e7 80 6d c2 96 85 1e ef 89 52 34 ca f3 b6 eb 36 2c fd e6 ea ea 3b e2 70 bb 1c 7e 43 f8 b0 f4 c7 0f ef f8 70 eb 47 e5 a4 98 2f e3 e5 6a b6 80 7c 92 89 1b 28 96 65 f4 c5 45 3b 51 ff 0d 00 00 ff ff 03 00 83 b8 5d ba 69 06 00 00 0d 0a Data Ascii: 'lO&b\|II%LP`JA;i?v+$C[Q_Wu,6O>sMnP\|4[`5l%myMLV_OT=mR46,;p~CpG/j\|(eE;Q]i
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49896	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	510	OUT	GET /gui/88116.be3428c199d3d7ca9393.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 35f04afc0b88d8b8d83dbc650c6f6872 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:47:07 GMT Expires: Sat, 25 Oct 2025 15:47:07 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 605127 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 31 0d 0a 00 0d 0a 30 66 66 38 0d 0a 02 ff ec 5c 6b 77 db 38 92 fd be bf 82 d1 cc 78 c4 5e 92 d6 d3 b6 24 cb 9e 4c 3a 3d e3 39 dd e9 3e 76 72 f6 ec 66 73 d2 14 09 4a 1c 53 a4 96 a4 fc 18 59 ff 7d 6f 15 00 12 d4 23 49 cf ee d9 4f 6b 75 3b 34 1e 85 42 a1 1e 17 05 50 ad 75 21 ac a2 cc e3 a0 6c 4d da 85 48 22 ef 51 cc 56 7e 70 ff 66 b1 4e ef 1f ca cf eb f8 f3 d2 8f d3 e9 17 ea 5e 5e 3e 7e b2 bd d5 ba 58 b4 3f 7e bc b8 e8 76 cf 9c 8b b3 de a0 ff c9 d9 74 3b bd 6e 6f dc 16 4e ee 94 f6 f4 6a f3 Data Ascii: 0000000100000001000000010000000100000001000000010000000110ff8\kw8x^$L:=9>vrfsJSY}o#IOku;4BPu!lMH"QV~pfN^^>~X?~vt;noNj
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 99 51 b1 d3 d2 4b d2 72 1e b2 38 b4 3a b6 73 8c 82 64 62 8f 80 e6 e1 3d c4 fb 4f 93 90 32 fb 1f 13 a8 e5 56 93 9a 4f f5 84 82 75 51 66 4b e5 5f ec 36 69 84 3b 5b 97 25 dc 5d 8b c4 62 6f 1d 0e 38 46 d0 2a 3d 38 7d a8 a7 17 c2 3f 6e 6a d7 36 6e 23 a4 65 86 af db da 1c 80 28 c0 c9 f8 b5 75 ce 86 e7 fd e1 51 5a 3f bd 7e f7 fd cd eb 77 ef 3f df be fd e1 ed ed ed db 5b 26 79 63 d0 e9 f5 2e 46 3a 50 f6 87 e7 58 99 78 da 46 20 bc 18 75 c1 91 8a a3 2a 64 ca 40 9a 52 7d ff ac 37 44 f8 04 1f 14 80 e9 61 78 76 de 3d b7 55 18 1d e0 91 a3 a8 0a a8 01 38 1e 0e 86 d4 32 a1 d8 3a e8 0c f1 b8 ae e6 e1 ac f0 88 78 3b ec c8 88 1b 39 73 67 e1 3c 38 4b e7 d9 b9 77 1e 65 ec d5 21 cf 7a d2 71 cc 41 c8 45 18 da 94 f9 33 47 60 04 b2 8f f1 27 44 29 04 f3 d4 7b f0 93 b5 d8 06 7e 19 Data Ascii: QKr8:sdb=O2VOuQfK_6i;[%]bo8F=8}?nj6n#e(uQZ?~w?[&yc.F:PXxF ud@R}7Daxv=U82:x;9sg<8Kwe!zqAE3G`'D){~
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: c4 d8 ec 95 2b f6 20 70 37 c8 ee e4 2c 7e ed 6f 4d 86 7d ed 1c 7c 09 a7 ed 89 0c 60 fb d1 3e 56 88 59 03 d8 2a 54 36 c4 af 16 a8 74 38 bf 95 7b 5f f0 e7 8e 1c 29 f1 de 7d f0 d6 1c 50 c8 8b c8 20 81 25 6a c0 f5 0d e2 8d 3f 16 08 6e 48 e9 29 1c 51 4e b9 6b b0 46 9e 26 85 ce 8b dc 74 cb c8 a1 21 05 57 c6 af 39 ae da b4 83 a8 42 b3 28 3f ac fe 52 c6 77 8c 6f 10 77 aa 2d c4 81 e8 aa 47 cb be 38 1a 3b e4 6a 34 8a 08 0c bd e8 41 c7 7a 40 98 93 93 57 6c e3 39 90 c8 2f 7e b9 a0 a8 9e 97 c5 bf 21 3b d2 6e 2d ca 72 35 3e 3d e5 70 b5 c8 8a b2 65 5f 43 35 e3 30 14 e9 0f 59 be f4 94 05 d8 e3 af 03 08 6d 18 d5 52 21 ab a1 e2 92 de 8b 50 10 76 ea 2c d8 76 db 6e e2 8e d6 fb c7 ec 07 b8 92 2c 27 5f 01 f9 c2 93 50 20 bf 45 60 47 42 2c 64 83 69 31 34 21 cb be 6e 9b 66 d4 81 Data Ascii: + p7,~oM}\|`>VY*T6t8{_)}P %j?nH)QNkF&t!W9B(?Rwow-G8;j4Az@Wl9/~!;n-r5>=pe_C50YmR!Pv,vn,'_P E`GB,di14!nf
2024-11-01 15:52:34 UTC	319	IN	Data Raw: 58 0b a5 ce df 23 c3 21 37 a2 ef 39 db e3 b1 98 45 a8 4f a5 55 56 a1 f2 a9 46 2c 90 5b 98 7d 4c fb 0c cf fa cc 98 d6 08 57 e6 1d 01 6b f9 4c c7 ee cd 75 33 e0 4a eb ea 67 c2 1b c6 19 7c b5 80 c6 a1 a5 55 c1 7f ba e3 c0 aa 40 45 32 3f bf 57 a0 77 17 55 5b 44 7f 83 98 5e 0c 2c 82 11 e1 cc 0c 2c f6 82 07 b2 ca e6 ce 5d 5c 8b bd 73 00 b9 42 9a 2b cd 04 f6 2b 5a a0 07 e3 e1 7e b4 ba 87 4c ef 8f 44 2b 82 5e f5 7e 1b 46 cc b1 5a 4b 40 d6 60 7e 66 88 91 85 2d 4b 7a 4a de d8 b4 ac 1d 67 7f bc bd de 76 f1 0e 6e b7 5b a5 cc 07 63 b5 de c2 71 6e 5c 43 1e 1e 5f 4b aa da d1 21 69 3b b9 e5 e3 7c 9f f2 0d d8 52 b5 71 4c 7d 67 9e de 1f 38 8f aa 4f be bf da b7 de b5 7f 73 27 0d ce be b9 43 85 b9 be b9 47 e3 84 ec 9b 7b 69 0d db ef c0 87 79 38 ee ff 9d c2 0d bb 32 e4 62 f2 Data Ascii: X#!79EOUVF,[}LWkLu3Jg\|U@E2?WwU[D^,,]\sB++Z~LD+^~FZK@`~f-KzJgvn[cqn\C_K!i;\|RqL}g8Os'CG{iy82b
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 50 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a e6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 62 61 32 0d 0a 74 25 e3 8e 12 49 b8 a7 46 49 e0 e9 dd d6 e1 9b 7f c6 95 0a ca 29 d0 95 8b 8b d1 70 80 6b 0d b8 53 e8 e1 62 80 bc 51 d8 bf c0 3d 42 be 1e 81 b2 18 a6 d3 c6 41 95 3d f1 3d 79 5b 51 78 71 e8 fc f1 f4 bb 57 ff 99 5a df 59 b8 1d 53 e2 30 c3 5f 59 d6 c3 d0 eb 7b 3d ab 4d 59 bd 02 69 3d b8 bd 99 ae 45 32 76 79 6a 73 8f 37 d9 ea 39 8f e7 8b d2 ea 75 ba 5d b7 d7 e9 f5 ad f7 38 74 a8 29 11 80 c9 f2 82 5b ff 18 e3 5a 56 81 a3 0c ba bd 95 5b Data Ascii: 000000010000000100000001P00000001a0000000100000001!00000001000000010ba2t%IFI)pkSbQ=BA==y[QxqWZYS0_Y{=MYi=E2vyjs79u]8t)[ZV[
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 5a f5 65 a9 c8 a1 fa 60 67 af 93 b9 12 55 a7 18 3b 18 ac 1a ff 03 7e a1 14 56 0f ff b3 57 36 56 b1 1e 90 6f 07 ba 74 a5 cf 55 8a d4 58 28 a3 1a d7 7a 02 9c ac c9 95 94 aa 66 d4 2a ad e2 81 0c dd 87 d6 60 dd 95 a8 39 ab 8a 04 4e 1c 56 86 60 42 63 a3 da d4 47 78 d6 bd 56 b1 bc d4 54 91 31 31 32 93 d1 0d 76 08 c9 76 db ef 9c ef c6 e3 99 40 4b 41 4f 08 97 22 df 20 6b eb 22 94 10 12 57 bd 50 b2 fd d3 12 c7 f7 7e 1b 97 9d 90 b3 2b 70 55 33 84 61 84 ee 32 a3 a3 26 f2 12 38 40 a5 2a 91 06 b8 9d 23 b7 7d 78 17 0d d7 e2 dc 99 c0 3d bb 18 01 a5 58 62 33 b8 d8 6e 7d dc 69 a6 00 c3 42 aa 14 b3 e9 99 10 27 9b 35 4a ec f0 9e 08 95 8c 59 0d 2f 45 4e 6a eb 8f d9 39 6d 38 58 36 a9 19 fa 7f c8 4d d9 e8 8b 33 b6 f6 47 ba 9e f7 c9 96 cf 9c e1 fe 84 5d f9 d1 2a 35 9e 9c 8c 76 Data Ascii: Ze`gU;~VW6VotUX(zf`9NV`BcGxVT112vv@KAO" k"WP~+pU3a2&8@#}x=Xb3n}iB'5JY/ENj9m8X6M3G]*5v
2024-11-01 15:52:34 UTC	274	IN	Data Raw: d9 f3 62 95 27 54 c7 44 06 b6 6f 3a 9d aa 21 51 65 43 35 9a 36 7c 5b dd 52 e6 dd f7 da 91 15 d7 8d 8e 92 fb c2 f8 35 28 91 87 15 a0 a1 9d 14 68 33 ea af 47 d0 07 60 12 ed 77 bc 33 cb 36 c4 54 6f d2 2a 1f a2 dc 50 c5 e2 be 68 aa a6 bf d5 21 ed d1 94 38 49 32 5f 2f 8e 9a cc 2e 23 ea 20 c3 10 a8 31 eb 8a b4 11 36 80 25 f6 04 d4 70 90 8d 4e 15 31 a3 d7 6e c8 57 ce 53 62 20 4a 16 d5 4c 1f 69 4a 6f c5 6e 64 0a 8e dc ab 9c 53 35 2e 5f 18 6b 84 4e 63 5f 65 9c 4b d8 db 3f 3a ad 16 d2 60 b9 f7 7a ea e3 9b 42 e8 eb 35 fe b9 6b 2d fc 35 59 17 17 17 67 23 fa 66 0d 5f df 72 99 79 71 3b a5 bb f9 33 f3 ba 0b de d1 af 86 9d 6d b7 9f ec c9 bf 9c 9e fe 0e db 10 3a f3 c3 37 f4 c0 f5 cf f1 9d 37 53 fe 22 2f 6f 26 fa 83 de 45 d0 1d 8d c2 7e 78 1e f8 a3 fe a8 ef fd bd a0 2f 30 Data Ascii: b'TDo:!QeC56\|[R5(h3G`w36To*Ph!8I2_/.# 16%pN1nWSb JLiJondS5._kNc_eK?:`zB5k-5Yg#f_ryq;3m:77S"/o&E~x/0
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49898	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	523	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5f4206d646754bbdb137509b7f04e9e5 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:13:55 GMT Expires: Sat, 25 Oct 2025 15:13:55 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607119 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 66 66 62 0d 0a 00 00 00 02 ff 94 5a 59 73 db 38 b6 7e bf bf 82 e6 74 a9 c8 09 c5 c8 4b 36 2a b4 db 93 4e dd 72 75 a6 3b d5 4e c6 0f 6e 5f 37 44 41 12 62 0a d0 80 90 14 b7 ac ff 7e bf 03 80 8b 25 a7 27 f3 90 0a 04 02 38 07 67 f9 ce 02 87 cb 8a 07 95 d1 a2 30 e1 30 aa 78 39 49 d7 7c b4 60 c5 dd bb d9 52 de ad cc ed 52 dc ce 99 90 f9 5f 7c 7b 78 b8 be 89 d3 c5 b2 9a 45 d7 d7 af 06 83 e3 97 37 c9 e6 68 f0 f2 cd 9b 2c 32 89 4c 78 9c 9f 6e 78 aa 23 19 27 3c 1d 47 32 d9 fc cb 7c 16 97 eb 0b 59 19 56 96 5c 67 11 96 7c d8 c6 43 1e bd 79 fd e6 30 1e ae 98 0e 74 ce Data Ascii: 0000000100000001000000010000000100000001000ffbZYs8~tK6*Nru;Nn_7DAb~%'8g00x9I\|`RR_\|{xE7h,2Lxnx#'<G2\|YV\g\|Cy0t
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: b6 c6 36 57 2b fe 7e c5 a5 f9 20 2a c3 25 07 e2 2d 17 40 75 3e 51 4b 39 0e 2d 67 71 9c 61 cb 8c b6 e8 94 c9 94 8d 11 d0 00 08 b8 69 a3 5e 09 f5 3e 7b 46 dc 25 76 c1 ce 99 08 7a 86 17 08 2b 53 4e 67 96 30 2a fb df 23 85 90 71 4a 00 19 6e 0d 5b 4c 0d d3 53 c8 06 81 30 b5 db 13 95 73 a8 83 98 4f 58 be a9 d6 19 4f 44 f5 fe ab e1 5a b2 32 53 89 d2 62 2a 30 b4 b4 33 b3 1d 1e a8 5e 4f a7 73 09 05 b2 54 54 9f ed c5 72 42 3b 9d 8e 45 b5 a0 88 69 17 47 e4 29 93 48 24 0c d7 00 40 ba 18 3d 06 54 e7 e2 0c 40 e9 73 01 c0 db 27 31 e7 6a 69 3a 01 34 de ec 6c e8 f5 64 ba 66 08 4d 72 ea ac e7 69 62 a1 5f 13 12 51 18 d7 d1 60 10 67 21 43 e4 5e c1 bb 11 af 88 38 38 2f 4a ce 74 4d 96 78 89 13 f5 f0 40 b6 d5 08 9f e3 00 5c e9 be 63 43 4d a0 25 c5 41 9c 12 a1 51 b2 95 98 32 a3 Data Ascii: 6W+~ %-@u>QK9-gqai^>{F%vz+SNg0#qJn[LS0sOXODZ2Sb*03^OsTTrB;EiG)H$@=T@s'1ji:4ldfMrib_Q`g!C^88/JtMx@\cCM%AQ2
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: c5 ed 5c 8b ec 6c 33 56 d2 a6 19 99 1f 1d 26 b6 e9 95 99 6b fd ec d9 cd 76 bb 7d b2 c9 77 21 b1 0a 0d 44 66 0c 9f 2f 4c 60 54 e0 6c 81 07 52 c9 be 1d a3 c9 16 d8 ca 90 2a ea df e5 05 da ab 7a cc 01 d7 2a 18 e1 0b 99 12 96 24 76 03 a3 46 53 a0 6c 4b ad 72 4d c3 19 5b f1 80 05 7b a6 17 c5 c1 9c 9b 99 1a 53 f7 d0 c5 08 f2 a6 94 04 82 5c e9 00 2d 2d 8e 58 9b d2 c5 86 71 34 80 77 d9 1b c5 90 23 b9 da 97 0e a0 b7 41 d8 c2 d1 47 74 88 50 09 91 4d d6 bf 51 c1 52 07 05 d5 2e 14 1e 27 f5 34 80 c9 1e 67 b6 20 95 cc 41 f1 f5 eb a3 e3 57 71 72 4f 5d e8 17 27 c7 87 71 32 c2 f0 e4 c5 d1 09 86 97 34 3c 19 bc 38 8a 93 8f 18 1e bf 7c fd e6 38 1e c2 8b 83 f7 c9 97 dc e4 a7 a6 ed 5c dd b9 8e 51 a2 13 91 28 00 99 0d cf a4 d3 0a 8d 37 75 13 01 da 8a bc 72 77 da 0b c1 36 7c a0 Data Ascii: \l3V&kv}w!Df/L`TlRz$vFSlKrM[{S\--Xq4w#AGtPMQR.'4g AWqrO]'q24<8\|8\Q(7urw6\|
2024-11-01 15:52:34 UTC	292	IN	Data Raw: b1 73 0b 99 59 30 01 60 5c c8 4b e4 e4 fc f3 22 18 a4 47 08 ac f0 3c 5c a7 8f d7 17 4a 2a d6 4c 8f 2b 6c db fe 2e 29 c2 21 e8 7a 26 be 40 14 62 72 df f7 93 59 80 77 9e 82 f7 47 dc ac 39 97 8e 50 89 d7 4d ca ea e7 15 48 95 fc 6b 1f c6 6b bf ac c5 d8 cc b2 e0 e5 60 b0 f8 6a 27 c0 27 de 94 fa 25 9f 98 2c 38 aa 67 9b 8b d2 e6 1d 26 c8 c8 36 74 1d b7 35 0b 0e b1 2b 70 3b bb cc 32 b7 aa 50 a5 d2 1d d9 8c d4 98 78 c7 a4 13 ca c8 56 19 fd 91 82 71 ce 71 18 ce 82 6f a2 56 d9 95 a6 5b 6e 60 b1 7d 9f 9d c1 6b 32 2a 47 f8 0e 87 0c 2a 83 57 39 fa df da 10 04 bb 9c 79 ad 11 1d 7b 8f da 83 dc 39 f8 03 10 3c 79 11 45 36 02 83 4b 43 54 03 54 47 8b 2c 18 d8 21 5e e7 66 10 62 23 09 64 51 48 9e 50 c2 9c e7 6c bb 45 1a f5 3f cf 9f ff 0d 97 a3 67 1e 54 a6 0b e4 41 78 da cc f7 Data Ascii: sY0`\K"G<\JL+l.)!z&@brYwG9PMHkk`j''%,8g&6t5+p;2PxVqqoV[n`}k2G*W9y{9<yE6KCTTG,!^fb#dQHPlE?gTAx
2024-11-01 15:52:34 UTC	70	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 31 0d 0a de 0d 0a 33 0d 0a 23 00 00 0d 0a Data Ascii: 0000000100000001`0000000100000001000013#
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49893	142.250.185.131	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	397	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:34 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Fri, 01 Nov 2024 15:52:34 GMT Date: Fri, 01 Nov 2024 15:52:34 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49900	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	501	OUT	GET /gui/static/qrcode.min.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	340	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 775dad548014b5cd0ef606f0db3513fe Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:52:02 GMT Expires: Fri, 01 Nov 2024 15:53:02 GMT Cache-Control: public, max-age=60 Age: 32 ETag: "b_UujA" Content-Type: text/javascript Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1068	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 31 0d 0a 8b 0d 0a 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff b4 5c eb 72 db 38 b2 7e 15 5b 5b f1 90 11 24 91 d4 5d 34 95 b5 93 cc c4 3b b9 4d 2e 7b 76 cb ab 71 d1 16 25 71 23 93 2a 8a 8a 93 b2 f5 ee e7 eb 06 40 82 92 9c c9 f9 71 a6 76 63 12 04 1a 7d 47 77 03 d0 d7 30 3b fa e3 c3 f3 74 1a f9 c7 b3 4d 72 93 c7 69 62 d9 f7 fa f1 28 b7 72 fb 3e 5f c4 eb e6 2d fa 04 eb e6 9b 77 2f 5e 5e 0d ce 2f 3e 5d 9d ff fb d3 4b c1 9f a6 61 1e 06 b9 7c 5e 85 d9 3a 9a be a0 96 cb 89 3f 4b 33 eb 2b a6 88 f0 22 b2 c0 11 69 50 8c 68 2e a3 64 9e 2f fc 74 9c f9 59 bd 6e df 53 c7 d8 f8 7e b3 08 33 c2 ec 2c b7 32 db 8f c7 bd 6e b7 dd 7b 66 45 97 ce 24 f0 3a ce 83 e5 0e da 5d c7 19 9c c4 f6 78 3c 76 07 22 ba 74 27 81 eb 0d 1e 2c af 3b 70 3a Data Ascii: 00000001010ffe\r8~[[$]4;M.{vq%q#*@qvc}Gw0;tMrib(r>_-w/^^/>]Ka\|^:?K3+"iPh.d/tYnS~3,2n{fE$:]x<v"t',;p:
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: fb ba 22 42 20 df 4e 0e cf f0 98 3b fd 4b 78 30 3c 3f 3e dd 95 0a db 9e d1 48 e0 60 6b bc 12 c8 05 70 0d e7 b5 7a 9f ae 63 8a 55 de 67 e9 75 a4 79 e2 08 47 29 c6 e3 7d 0c d0 4c 5f a3 ff 13 83 d4 ba 64 48 ae a1 57 ca ca 4c 67 d3 ff 6e d6 b9 46 c7 c4 e5 53 7c 0b 47 7a f0 0b ac f4 22 99 d1 92 a0 d5 ba 14 d4 38 e8 9f 9c 30 ca 3c cf a7 62 a1 25 cf a5 d6 3c 62 30 2f 19 b4 62 ea a5 bf 68 80 1b bf 81 8f ca a3 17 70 12 d2 26 4b f0 52 09 f6 16 eb d2 b8 68 c5 25 a7 cd 42 0c 57 25 8c 02 3e 90 de 8a 0a 13 4c 91 98 9a 09 cb d6 5e 24 0b 1a ae df 1f 07 32 f0 83 81 1e 5b 0d 77 1c e4 f5 ec 90 31 a2 d9 b6 f5 d0 54 0d 4d 59 f1 68 54 54 4f 0f 8d e2 66 49 b0 d2 f2 4b 00 82 a1 d6 a1 9f d9 38 70 4e 4e 7a c0 00 0c c3 a2 0f 08 3d fc 6b 3f 3c a4 fa 4b 2a bf 00 23 7c c9 f0 05 63 bc Data Ascii: "B N;Kx0<?>H`kpzcUguyG)}L_dHWLgnFS\|Gz"80<b%<b0/bhp&KRh%BW%>L^$2[w1TMYhTTOfIK8pNNz=k?<K*#\|c
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 6f 6d f1 d5 00 10 8f e7 cc b7 d2 fa 0a 80 24 c8 0a 83 a1 a0 57 97 5f eb f5 09 5b 24 e6 91 c2 20 3c 92 bf 02 63 50 57 82 51 64 16 9a 7b b5 65 b6 91 47 58 07 f7 5c 70 7f fb f9 cd f9 cb 0f 23 57 f0 db d9 eb f7 af ce ae d0 36 f2 64 43 51 8f 1f 75 64 c3 ef 67 6f ff 71 31 1a 6c e1 c1 ee 5f d3 b0 91 23 fe 18 b5 c5 ab 91 b7 15 9b e0 fe fd d9 a7 4f 2f 3f bc 75 1c 07 1f 8a 17 17 3d f5 8b eb 00 78 f1 e2 62 ac 7a 41 44 8e 59 8a 17 77 d4 2d 5e 30 a6 57 be b8 a3 fe 56 2c 8b b9 ae de bf fb 78 f1 e9 e2 dd db ab 4f 67 e7 af 5f 8e 2e 51 c1 bc ec 09 77 c0 7f 3c 4f fe e9 f1 9f b6 23 ff 74 d4 37 d1 56 bd 3a a2 a3 3b 8a 8e ec eb 0d 44 57 75 77 44 57 8e 68 7b a2 2b 47 b4 3b a2 67 8c 10 3d 35 a8 27 3a 03 d1 97 e3 bc 1e 20 88 be 1a 4a 40 44 5f 8d c6 4b 4f 0c 24 80 36 5e 06 62 a0 Data Ascii: om$W_[$ <cPWQd{eGX\p#W6dCQudgoq1l_#O/?u=xbzADYw-^0WV,xOg_.Qw<O#t7V:;DWuwDWh{+G;g=5': J@D_KO$6^b
2024-11-01 15:52:34 UTC	238	IN	Data Raw: 01 d4 a4 d3 0a 21 d0 56 0d a4 c0 b4 32 fb a9 63 1b 2c 2c 52 f5 88 30 a9 a0 80 c0 a4 a1 db 18 05 34 80 e2 c7 f9 23 0b e8 6a 4f dc e4 07 d1 9b d2 2e b8 c6 0c d4 14 66 7c 88 39 d4 79 8f 35 9a 0d b4 04 2b 0a 24 23 52 30 82 0b 3a 1c b9 a5 cd 0f 1f af ce 5f bf 7b fe bb b4 9c e0 f2 d2 15 c8 91 dd 21 b2 71 f9 44 f9 9e 7c 6a eb 27 f9 b1 d3 11 9c 4b ba 02 4f 1e 25 90 f2 89 d2 5e 7e 72 e5 d0 3e 52 c5 2e b7 e1 a9 43 d9 a7 27 90 a4 b9 fd e2 49 02 86 87 41 9a cc 8d c8 b0 db 04 06 99 a1 23 3c 1a 82 19 ba 42 ce 8b 0c 96 32 59 fe dc eb 8b 0e 8d 06 c4 36 12 4a 81 bf f8 48 f3 ca 16 20 ce 2d 12 18 52 ec 1e 8d 43 65 a1 2d 3c 9a 9f 9f 98 58 f9 44 78 22 b5 47 b9 40 f5 1b 8a 36 c2 54 82 86 2c 13 7d e4 3c 3c b2 3d 44 52 2a 0d 0a Data Ascii: !V2c,,R04#jO.f\|9y5+$#R0:_{!qD\|j'KO%^~r>R.C'IA#<B2Y6JH -RCe-<XDx"G@6T,}<<=DR*
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 29 0d 0a 30 30 30 31 0d 0a 92 0d 0a 65 39 31 0d 0a 53 49 95 eb b9 62 28 c9 ea 81 82 01 26 ef b9 a2 4d 68 63 28 ba 51 4b c7 95 dc 95 2d a0 8b 5b e4 c4 c8 ae 91 d3 12 fa 6d aa 11 20 17 06 07 80 82 44 95 53 63 42 a1 2f 99 87 27 74 c7 78 6e 91 6c 60 12 31 6a d0 17 3d 39 6f 6f 48 d4 ba 28 80 48 e6 a3 1a 82 d7 21 cd 8b c9 65 05 82 5a 88 79 68 e1 d9 89 c1 a8 af 12 e5 f8 03 f9 61 2c 5e 45 97 5a 38 c1 47 36 8d bf 60 2f 4d db 56 88 00 63 a0 26 11 01 19 62 e8 01 a6 8b ea fc 90 da 50 c3 d8 23 09 f4 7a 8e 00 4a 7d e1 11 6c 88 53 f1 99 51 e2 d9 90 d2 03 1d 62 01 2a 08 c4 0c 10 c3 ec e5 16 26 02 b8 74 80 3f e3 ab 05 0f ae 80 0c 12 3c 86 e3 ab 0b 0a c1 fa 82 c3 a8 b1 b0 08 ba a2 d7 85 08 d0 cf 85 ac a8 Data Ascii: 00000001@00000001)0001e91SIb(&Mhc(QK-[m DScB/'txnl`1j=9ooH(H!eZyha,^EZ8G6`/MVc&bP#zJ}lSQb*&t?<
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 0f 91 a9 47 8b 22 39 61 76 18 6d 2c 34 1e bd f5 81 22 67 64 6d 78 19 0f 89 80 e7 50 3f 0a 61 3a 58 65 db 58 f8 3d 0a 47 fb 44 42 87 73 1e e0 8c bf 2e 6f 19 77 41 4f 07 2b 83 47 d9 11 e7 5f 5d a0 d5 41 34 dd 06 86 9e dc 46 a5 65 c7 a1 fc 0e e1 05 e7 c4 7d 78 d8 2e 65 3d 43 b4 f2 be 71 1f e3 7b 70 a8 1d 62 0a ef df 0e 30 47 8f 12 10 6c 99 b6 79 23 7b 48 eb 36 85 8d c8 58 70 91 0d f8 20 c9 86 77 ee c3 c1 53 d6 c3 a9 29 d2 19 24 79 5d 44 bd e8 d9 e9 c9 4c 08 e4 0f f1 da 43 fe da 75 b9 c9 43 b0 32 1c c2 ff 52 48 d1 e6 80 8d 18 e0 3a 58 0f fb e0 4b 97 93 3c ac a6 14 45 80 0f 03 07 d9 90 cc 7c ba b4 0d ec 62 07 79 80 c0 ba 27 25 d2 a3 36 0f f4 0d 21 83 1e f3 dc ed 53 92 dd 46 72 30 04 05 7d ce a3 dc 01 07 ff b4 a4 3a 90 4d 9f 77 e1 dd 21 bd 77 69 47 18 53 41 82 Data Ascii: G"9avm,4"gdmxP?a:XeX=GDBs.owAO+G_]A4Fe}x.e=Cq{pb0Gly#{H6Xp wS)$y]DLCuC2RH:XK<E\|by'%6!SFr0}:Mw!wiGSA
2024-11-01 15:52:34 UTC	955	IN	Data Raw: 80 6b 37 17 bd aa 87 d2 a8 19 91 51 aa 3c e8 ae 57 44 62 a4 be 58 35 6f 5a e0 74 88 74 e5 5b 1f 25 4b 7a 24 8d 89 f2 c3 07 5c 65 41 d9 41 0a 78 9c 26 60 c7 27 ca 3b af da 6f 19 19 e7 7e 64 27 d3 b5 0a 32 fa 9a f6 95 e6 45 11 56 69 11 1e 0c ae 50 27 48 75 4c 85 72 41 aa 04 d0 8a 71 2a 85 23 ac 0c b7 0f 38 ec 58 98 ef a1 ed 63 19 7a 94 7c 1d 7f e9 d8 82 4e 8e c4 e3 8d 8f e3 22 c5 f5 2f 2a 33 c4 aa cc c0 f9 e7 ac 3c b0 b2 11 4b 1b 5b f1 cb a7 89 98 06 1b 5c 1d 44 5c 99 67 e9 97 e8 23 4d 19 cc 9e a5 32 04 e3 eb df ea 99 c3 31 38 6b ba 2d f8 3f 14 24 e2 f7 05 b2 26 05 45 3f 31 88 ba 7d 40 18 65 cd c5 94 fc 02 4e f5 a8 19 b9 d5 88 35 e7 76 bd d9 35 83 cf 29 37 c0 8f 1c 1a 73 13 c5 4b 6b 6e 37 f4 10 7e 9f f2 3b 8d d8 4a 11 9a fa e8 54 8a 0d f8 21 06 ba 2c 8a 05 Data Ascii: k7Q<WDbX5oZtt[%Kz$\eAAx&`';o~d'2EViP'HuLrAq#8Xcz\|N"/3<K[\D\g#M218k-?$&E?1}@eN5v5)7sKkn7~;JT!,
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49894	142.250.184.228	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	487	OUT	GET /js/bg/p-7RyvuJU9m0QQmVDJx8SL9t4pWXVpOJSp0296ydJmo.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:34 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18916 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 31 Oct 2024 16:21:14 GMT Expires: Fri, 31 Oct 2025 16:21:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 22 Oct 2024 16:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 84680 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 15:52:34 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 7a 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 66 3d 28 62 3d 6e 75 6c 6c 2c 7a 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 66 7c 7c 21 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 54 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 54 2c 63 72 65 61 74 65 53 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var z=this\|\|self,L=function(f,b){if(f=(b=null,z).trustedTypes,!f\|\|!f.createPolicy)return b;try{b=f.createPolicy("bg",{createHTML:T,createScript:T,createS
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 57 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 34 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 29 7b 66 6f 72 28 64 3d 28 54 3d 42 28 66 29 2c 30 29 3b 62 3e 30 3b 62 2d 2d 29 64 3d 64 3c 3c 38 7c 67 28 66 29 3b 68 28 54 2c 66 2c 64 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 47 3f 62 4b 28 66 2e 59 2c 66 29 3a 65 28 38 2c 66 2c 74 72 75 65 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 66 2e 47 29 72 65 74 75 72 6e 20 62 4b 28 66 2e 59 2c 66 29 3b 72 65 74 75 72 6e 20 62 3d 65 28 38 2c 66 2c 74 72 75 65 29 2c 62 26 31 32 38 26 26 28 62 Data Ascii: LC',' SPDX-License-Identifier: Apache-2.0','*/','var W=this\|\|self,f4=function(f,b,d,T){for(d=(T=B(f),0);b>0;b--)d=d<<8\|g(f);h(T,f,d)},g=function(f){return f.G?bK(f.Y,f):e(8,f,true)},B=function(f,b){if(f.G)return bK(f.Y,f);return b=e(8,f,true),b&128&&(b
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 66 29 2c 42 28 66 29 29 2c 5a 28 66 2c 64 29 29 29 2c 54 2c 66 29 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 2c 6c 2c 6b 29 7b 69 66 28 62 2e 41 2e 6c 65 6e 67 74 68 29 7b 62 2e 5a 53 3d 28 28 62 2e 52 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 62 29 2e 52 3d 74 72 75 65 2c 66 29 3b 74 72 79 7b 6c 3d 62 2e 42 28 29 2c 62 2e 49 3d 6c 2c 62 2e 53 3d 30 2c 62 2e 76 3d 30 2c 62 2e 4c 3d 6c 2c 54 3d 57 31 28 66 2c 62 29 2c 66 3d 64 3f 30 3a 31 30 2c 6b 3d 62 2e 42 28 29 2d 62 2e 49 2c 62 2e 4b 57 2b 3d 6b 2c 62 2e 70 57 26 26 62 2e 70 57 28 6b 2d 62 2e 4f 2c 62 2e 67 2c 62 2e 55 2c 62 2e 53 29 2c 62 2e 4f 3d 30 2c 62 2e 67 3d 66 61 6c 73 65 2c 62 2e 55 3d 66 61 6c 73 65 2c 6b 3c 66 7c 7c 62 2e 41 63 2d 2d 3c 3d 30 7c 7c 28 6b 3d 4d 61 74 Data Ascii: f),B(f)),Z(f,d))),T,f)},I=function(f,b,d,T,l,k){if(b.A.length){b.ZS=((b.R&&":TQR:TQR:"(),b).R=true,f);try{l=b.B(),b.I=l,b.S=0,b.v=0,b.L=l,T=W1(f,b),f=d?0:10,k=b.B()-b.I,b.KW+=k,b.pW&&b.pW(k-b.O,b.g,b.U,b.S),b.O=0,b.g=false,b.U=false,k<f\|\|b.Ac--<=0\|\|(k=Mat
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 28 7a 7c 30 29 26 28 31 3c 3c 7a 29 2d 31 29 3c 3c 28 6c 7c 30 29 2d 28 7a 7c 30 29 2c 6c 2d 3d 7a 2c 59 2b 3d 7a 3b 72 65 74 75 72 6e 20 68 28 31 39 39 2c 62 2c 28 4f 7c 28 64 3d 54 2c 30 29 29 2b 28 66 7c 30 29 29 2c 64 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 64 2c 54 2c 6c 2c 6b 29 7b 69 66 28 64 2e 43 3d 3d 64 29 66 6f 72 28 6b 3d 5a 28 64 2c 62 29 2c 62 3d 3d 35 36 7c 7c 62 3d 3d 37 30 7c 7c 62 3d 3d 32 34 35 3f 28 62 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 70 2c 79 2c 7a 29 7b 69 66 28 6b 2e 7a 59 21 3d 28 70 3d 28 7a 3d 6b 2e 6c 65 6e 67 74 68 2c 28 7a 7c 30 29 2d 34 3e 3e 33 29 2c 70 29 29 7b 70 3d 28 70 3c 3c 33 29 2d 28 79 3d 5b 30 2c 30 2c 28 6b 2e 7a 59 3d 70 2c 6c 5b 31 5d 29 2c 6c 5b 32 5d 5d 2c 34 29 3b 74 72 79 7b 6b 2e 4d 37 3d 79 Data Ascii: (z\|0)&(1<<z)-1)<<(l\|0)-(z\|0),l-=z,Y+=z;return h(199,b,(O\|(d=T,0))+(f\|0)),d},Q=function(f,b,d,T,l,k){if(d.C==d)for(k=Z(d,b),b==56\|\|b==70\|\|b==245?(b=function(O,p,y,z){if(k.zY!=(p=(z=k.length,(z\|0)-4>>3),p)){p=(p<<3)-(y=[0,0,(k.zY=p,l[1]),l[2]],4);try{k.M7=y
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 68 28 66 2c 54 3e 3e 38 26 32 35 35 2c 54 26 32 35 35 29 2c 6c 21 3d 76 6f 69 64 20 30 26 26 4f 2e 70 75 73 68 28 6c 26 32 35 35 29 29 2c 66 3d 22 22 2c 64 26 26 28 64 2e 6d 65 73 73 61 67 65 26 26 28 66 2b 3d 64 2e 6d 65 73 73 61 67 65 29 2c 64 2e 73 74 61 63 6b 26 26 28 66 2b 3d 22 3a 22 2b 64 2e 73 74 61 63 6b 29 29 2c 64 3d 5a 28 62 2c 33 39 37 29 2c 64 5b 30 5d 3e 33 29 29 7b 64 3d 28 66 3d 4e 50 28 28 64 5b 66 3d 66 2e 73 6c 69 63 65 28 30 2c 28 64 5b 30 5d 7c 30 29 2d 33 29 2c 30 5d 2d 3d 28 66 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 2c 66 29 29 2c 62 2e 43 29 2c 62 2e 43 3d 62 3b 74 72 79 7b 62 2e 61 45 3f 28 70 3d 28 70 3d 5a 28 62 2c 33 36 30 29 29 26 26 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 6b 3d 5a 28 62 2c 35 34 29 29 26 26 6b Data Ascii: h(f,T>>8&255,T&255),l!=void 0&&O.push(l&255)),f="",d&&(d.message&&(f+=d.message),d.stack&&(f+=":"+d.stack)),d=Z(b,397),d[0]>3)){d=(f=NP((d[f=f.slice(0,(d[0]\|0)-3),0]-=(f.length\|0)+3,f)),b.C),b.C=b;try{b.aE?(p=(p=Z(b,360))&&p[p.length-1]\|\|95,(k=Z(b,54))&&k
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 68 28 37 30 2c 66 2c 28 68 28 31 36 38 2c 28 28 68 28 31 31 36 2c 28 50 28 38 30 2c 28 50 28 32 31 36 2c 28 50 28 32 35 2c 28 50 28 31 39 30 2c 28 50 28 28 68 28 32 36 2c 66 2c 28 68 28 31 39 39 2c 28 28 66 2e 6c 61 61 6e 74 66 3d 28 66 2e 6b 75 79 64 71 73 3d 5b 5d 2c 66 2e 63 70 6e 71 6a 6e 3d 22 22 2c 66 2e 62 67 6f 64 6e 64 3d 30 2c 5b 5d 29 2c 66 2e 44 26 26 66 2e 44 2e 61 29 26 26 28 28 64 3d 66 2e 44 2e 62 29 26 26 28 66 2e 62 67 6f 64 6e 64 3d 64 29 2c 28 64 3d 66 2e 44 2e 63 29 26 26 28 66 2e 63 70 6e 71 6a 6e 3d 64 29 2c 28 64 3d 66 2e 44 2e 64 29 26 26 28 66 2e 6b 75 79 64 71 73 3d 64 29 2c 28 64 3d 66 2e 44 2e 65 29 26 26 28 66 2e 6c 61 61 6e 74 66 3d 64 29 29 2c 66 29 2c 30 29 2c 30 29 29 2c 36 38 29 2c 66 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 Data Ascii: h(70,f,(h(168,((h(116,(P(80,(P(216,(P(25,(P(190,(P((h(26,f,(h(199,((f.laantf=(f.kuydqs=[],f.cpnqjn="",f.bgodnd=0,[]),f.D&&f.D.a)&&((d=f.D.b)&&(f.bgodnd=d),(d=f.D.c)&&(f.cpnqjn=d),(d=f.D.d)&&(f.kuydqs=d),(d=f.D.e)&&(f.laantf=d)),f),0),0)),68),f,function(z)
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 2c 4d 2c 4e 29 7b 66 6f 72 28 4e 3d 28 4d 3d 28 4c 3d 5a 28 7a 2c 28 59 3d 28 78 3d 42 28 7a 29 2c 6e 3d 4c 34 28 7a 29 2c 22 22 29 2c 35 31 31 29 29 2c 4c 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 6e 2d 2d 3b 29 4e 3d 28 28 4e 7c 30 29 2b 28 4c 34 28 7a 29 7c 30 29 29 25 4d 2c 59 2b 3d 70 5b 4c 5b 4e 5d 5d 3b 68 28 78 2c 7a 2c 59 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 66 34 28 7a 2c 34 29 7d 29 29 2c 68 29 28 34 37 35 2c 66 2c 5b 31 36 30 2c 30 2c 30 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 2c 6e 29 7b 68 28 28 59 3d 28 6e 3d 5a 28 7a 2c 28 4c 3d 28 6e 3d 28 59 3d 42 28 7a 29 2c 42 29 28 7a 29 2c 42 29 28 7a 29 2c 6e 29 29 2c 5a 28 7a 2c 59 29 3d 3d 6e 29 2c 4c 29 2c 7a 2c 2b 59 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 29 Data Ascii: ,M,N){for(N=(M=(L=Z(z,(Y=(x=B(z),n=L4(z),""),511)),L.length),0);n--;)N=((N\|0)+(L4(z)\|0))%M,Y+=p[L[N]];h(x,z,Y)})),function(z){f4(z,4)})),h)(475,f,[160,0,0]),function(z,L,Y,n){h((Y=(n=Z(z,(L=(n=(Y=B(z),B)(z),B)(z),n)),Z(z,Y)==n),L),z,+Y)})),function(z,L,Y)
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 77 20 78 5b 4d 5d 3a 6e 3d 3d 31 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 29 3a 6e 3d 3d 32 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 29 3a 6e 3d 3d 33 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 2c 4c 5b 32 5d 29 3a 6e 3d 3d 34 3f 6e 65 77 20 78 5b 4d 5d 28 4c 5b 30 5d 2c 4c 5b 31 5d 2c 4c 5b 32 5d 2c 4c 5b 33 5d 29 3a 32 28 29 2c 68 28 59 2c 7a 2c 4c 29 29 7d 29 29 2c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 7a 2c 4c 2c 59 2c 6e 2c 78 2c 4d 2c 4e 29 7b 69 66 28 21 47 28 74 72 75 65 2c 74 72 75 65 2c 7a 2c 4c 29 29 7b 69 66 28 54 4c 28 28 59 3d 28 78 3d 5a 28 28 4d 3d 5a 28 28 4c 3d 28 4d 3d 28 59 3d 28 4c 3d 28 78 3d 42 28 7a 29 2c 42 28 7a 29 29 2c 42 28 7a 29 29 2c 42 28 7a 29 29 2c 5a 28 7a 2c 4c 29 29 2c 7a 29 2c 4d 29 2c 7a Data Ascii: w x[M]:n==1?new x[M](L[0]):n==2?new x[M](L[0],L[1]):n==3?new x[M](L[0],L[1],L[2]):n==4?new x[M](L[0],L[1],L[2],L[3]):2(),h(Y,z,L))})),f),function(z,L,Y,n,x,M,N){if(!G(true,true,z,L)){if(TL((Y=(x=Z((M=Z((L=(M=(Y=(L=(x=B(z),B(z)),B(z)),B(z)),Z(z,L)),z),M),z
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 20 30 29 2c 66 7d 2c 41 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 74 68 69 73 2e 48 3d 74 68 69 73 2e 6c 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 54 29 7b 62 2e 63 34 28 54 29 2c 66 2e 63 34 28 54 29 7d 2c 28 66 3d 28 62 3d 28 28 64 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 39 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 3d 3d 3d 30 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 6c 2f 74 68 69 73 2e 6e 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 29 2e 63 34 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 6c 29 7b 74 68 69 73 2e 6c 2b 3d 28 6c 3d 54 2d 74 68 69 73 2e 48 2c 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 48 2b 3d 6c 2f 74 68 69 73 2e 6e 2c 6c 29 2a Data Ascii: 0),f},AB=function(f,b){function d(){this.H=this.l=this.n=0}return[function(T){b.c4(T),f.c4(T)},(f=(b=((d.prototype.O9=function(){return this.n===0?0:Math.sqrt(this.l/this.n)},d.prototype).c4=function(T,l){this.l+=(l=T-this.H,this.n++,this.H+=l/this.n,l)*
2024-11-01 15:52:34 UTC	1378	IN	Data Raw: 74 65 3d 3d 3d 22 6c 6f 61 64 69 6e 67 22 26 26 28 62 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 4f 7c 7c 28 4f 3d 74 72 75 65 2c 6b 28 29 29 7d 57 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 4f 3d 66 61 6c 73 65 2c 70 29 2c 4a 29 2c 57 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 70 2c 4a 29 7d 29 7d 7d 2c 53 2c 4a 42 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 62 29 7b 69 66 28 28 66 3d 28 62 3d 6e 75 6c 6c 2c 57 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 66 29 7c 7c 21 66 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 66 2e 63 72 65 61 74 65 50 Data Ascii: te==="loading"&&(b.Z=function(k,O){function p(){O\|\|(O=true,k())}W.document.addEventListener("DOMContentLoaded",(O=false,p),J),W.addEventListener("load",p,J)})}},S,JB=function(f,b){if((f=(b=null,W.trustedTypes),!f)\|\|!f.createPolicy)return b;try{b=f.createP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49899	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	510	OUT	GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	354	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f931380638cc2472262235f7cc9b1e9a;o=1 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 19:30:32 GMT Expires: Sat, 25 Oct 2025 19:30:32 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 591722 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	1054	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff ec bd 09 77 dd c7 71 b7 f9 55 ae 39 b1 43 24 00 74 f7 05 34 ec e8 45 32 43 9f a1 12 1f 3b d1 3b af 3c 3e 09 96 4b 12 11 08 60 b0 90 a2 69 7e f7 79 7e d5 5d cb 05 40 6a b5 e5 99 23 cb 12 aa eb 56 6f d5 d5 d5 d5 d5 d5 fd 7f 7c bd 3e 7b be fb 66 7d 74 79 78 fc e5 c1 cb db f3 2f 5f df fc e7 ed e9 7f be 3a 3c 3d df ff c8 6f 7f fe f3 1f fe b8 b5 7b 79 7b fd f2 f1 1f fe 30 99 8f 67 93 3f 6e bf b3 bf 7b 8f 0f b6 d7 db 57 5b fb bf 7a f7 e8 f6 7a 3d b8 be b9 3a 3d be 79 f4 e4 f5 e1 d5 e0 66 ff ea f1 74 b9 18 4e b7 b6 cf Data Ascii: 00000001000000010000000100000001000000010010ffawqU9C$t4E2C;;<>K`i~y~]@j#Vo\|>{f}tyx/_:<=o{y{0g?n{W[zz=:=yftN
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: d2 cb f3 e4 7e 9b 4b 5b ef 6f 6d 5c 0f 5e 9e 9e 9d 5c ad cf e1 6c 9b b7 5f 3f 1b ff fc e7 83 5d 94 ed bf 1c 1e bf 7c cc a4 fd d5 bb 83 dd 9b 8b 9b c3 b3 df dc ac 5f 5d d7 39 ec ab c6 c1 ee e6 9c 6f 72 b4 31 43 e9 68 13 a4 df 77 f4 e3 83 ad a6 30 07 6b 34 d4 c9 fa e6 f0 f4 6c 17 51 5e 7f f5 a4 75 e0 67 fb fb eb 3e 10 95 9b eb ad f7 35 49 29 f7 6b db 3f 68 83 75 97 03 ef 8b 52 fb fa 71 72 b5 d0 46 b1 d7 53 eb b6 8a 9d ca 94 c7 d6 7b 38 7d 62 93 c4 16 83 c1 c1 fe 7f dd 5c 1d 9e 5f 9f 31 c3 fe af c7 3b 7f f7 6e 34 1c fe c3 fd 06 bf ff f9 d6 7f 75 85 fa 98 15 60 f7 e5 cd ab b3 ad c7 47 c8 e5 d1 fe d9 7f 0d 7e 79 72 fa 7a f0 4f af 34 05 99 e3 57 fb 8f fe ee dd f0 fd 23 c7 dc de 38 c2 d6 a6 fd 47 4d 33 ed d0 02 98 8a 1e 18 28 d3 f3 b3 8b 37 3b 2f 4f 4f 4e d6 e7 Data Ascii: ~K[om\^\l_?]\|_]9or1Chw0k4lQ^ug>5I)k?huRqrFS{8}b\_1;n4u`G~yrzO4W#8GM3(7;/OON
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 3f 3c bf 97 bd 0d 64 e6 7f b3 ef bd f8 98 dd d3 d6 1e f1 a4 19 3f 9f 61 e6 8c 26 a3 19 2e c7 67 fb 57 bb e7 8f 3f db da fe 0a dc 6c 35 1d 8d b6 b6 bf 30 dc 57 5b db 4f c1 ad a6 43 19 49 9f 1b ee e9 d6 f6 6f 84 5b 4e c7 8b ad ed ff 36 dc 6f 9a 2f f2 f7 db 7f da fe 34 ed a4 df fd 64 27 fd 00 76 52 b3 49 fe 6e ff 0f ef 6c b6 ee 3d fa 67 fc 68 6f 2f 6e 07 5f b2 b5 c1 e1 f8 68 bb 4f 5a fc 7b c7 c7 2c 84 37 d7 83 17 ec f2 8c e6 f0 f8 18 8f 22 1b b7 c1 ff c1 2e e8 e5 a3 ed 32 9b a1 1f 1c 5c bc 7a 75 7b 7e 7a f3 76 00 a5 f2 b2 51 62 eb 78 6d 99 c9 25 47 b5 e5 dc 1e 1c 52 ca c5 99 8a 5a 7f 75 79 76 71 b5 1e 5c dc 5e d9 22 8d 92 1f bc 3e bd be 25 eb db ed 81 39 ae d8 82 0e 6e d0 0d 87 37 03 6c 98 57 17 e7 ac 2f 37 a7 eb eb 01 9e ce c1 0b b9 ab d8 15 0c 58 dc 4f 8f Data Ascii: ?<d?a&.gW?l50W[OCIo[N6o/4d'vRInl=gho/n_hOZ{,7".2\zu{~zvQbxm%GRZuyvq\^">%9n7lW/7XO
2024-11-01 15:52:34 UTC	301	IN	Data Raw: 42 08 26 4b 02 07 2c 84 00 9c fc a8 8f f1 11 6d 3d b9 e8 51 0a 07 bb a7 27 db 7f ff c9 3f fc ec ff 3e 1f fc c3 80 4d c7 0d fa 0e 8f f9 e0 f5 6c 77 b2 3b 1e 3c f6 e1 c5 d0 41 f7 b5 5f 6d 7c b7 2c c7 c1 c5 e5 db 2b 9b e8 e3 e1 68 b4 33 1e 8e 27 83 7f 47 68 b2 a4 4f 6f 6f 5e b2 76 1a f5 33 54 d5 b9 d4 b4 59 72 83 cf 7e f3 ef a5 02 16 87 db 23 2b fa e6 cd d1 f5 27 51 db 27 b8 73 8e 3e d1 b2 f5 c9 b3 df 1c fc cb bf fe fe 5f ac ea 4f f6 ae 68 cf bb 1d f9 8c 8e ce 6e d7 7b 83 ff 6d 78 34 3d 39 39 7c 62 28 59 97 2f 2e 40 ce e7 a3 e1 f3 71 43 5e de 5e b1 12 09 f9 7c 3a 3e 1e 75 e4 e9 f9 97 ca 6c ff 6b 28 2c 41 30 c7 b3 f1 74 3c 6c 18 e2 16 38 e4 03 b9 9e 2d 26 c3 8e 7c 8b c5 71 f1 06 e4 f3 e3 f5 6a be 68 94 2f b0 56 cf c1 4d 56 87 c7 d3 e3 86 bb 59 1f 9e 81 1a 0f Data Ascii: B&K,m=Q'?>Mlw;<A_m\|,+h3'GhOoo^v3TYr~#+'Q's>_Ohn{mx4=99\|b(Y/.@qC^^\|:>ulk(,A0t<l8-&\|qjh/VMVY
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 35 66 66 63 0d 0a 1e e7 8c b2 af f4 4f 41 8f 1b 7a fc 9c 7f 0a 9a 7e 41 bd 9e eb 9f 82 9e 1a fa d8 fe 57 d0 33 43 1f 4d f4 4f 41 cf 0d 7d af 85 0b 43 4f 4f f4 4f a1 5e 1a fa 5e bb 57 86 1e 1d ea 9f 46 dd 3d 67 b4 af 0e 32 8b 9e 76 38 ea 7a e1 b6 6c 39 11 0e 17 47 de 11 d4 da 39 ab b8 ba 57 c6 ef 44 63 7a 05 b2 8e 74 af 69 e7 ea c5 d1 de 60 34 da 1e 2c 16 db 83 f1 68 d9 da d1 6b 6c bf ce f8 65 b4 18 43 d2 f9 a5 9a db 4f 43 7e 19 4f c8 38 e9 b2 d2 5b d0 7e 1d 8f 57 fc 3e 9a 6d 0f fa af ad 25 bd ce 15 c5 4e e6 fc eb 52 db bc 86 b8 18 f1 7f ad 5f 5d 62 50 9c aa cf c3 f9 f8 68 d1 c7 35 3c 62 f7 a8 c6 2b fd Data Ascii: 000000010000000100000001000000015ffcOAz~AW3CMOA}COOO^^WF=g2v8zl9G9WDczti`4,hkleCOC~O8[~W>m%NR_]bPh5<b+
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 30 5d 6c 0f 51 56 0d 2d 1a ef 0f f7 6c b1 78 67 5a 72 b3 b4 a2 8f 1e 5a 36 b6 c8 8b 77 fb f1 1f 74 86 f3 47 ee 09 08 36 97 f5 1f b9 5d f1 c1 9f 7a 7d ad 33 be 1c 3e d8 b4 eb d7 2f de b1 8e d9 e9 c7 8e 05 56 ec bd 22 14 f3 6c fd be 9d 1e 31 09 8a 7a 25 6c bc 1f 2a d9 44 b7 fa f7 da 9c e7 50 ed 94 50 a0 ad 77 9c 46 48 2e 83 b4 0f 05 22 6d e2 d1 8d 39 6f 54 8a 8c 63 94 d9 ad b1 8e f3 b6 58 0f 32 04 d2 78 fb 07 8b 6d 68 ad fa e3 3b 5c 86 d7 8c df 25 e7 61 cc e0 9e 6f fb 0f 3a 6a df 77 9a 1d 6e ca 7c 79 7a b3 83 b3 0f 83 55 67 2b 7b ed 27 ef 9b 98 bc 87 7f eb 90 fe 9c 6c 6d e6 6e 5d 8e 1f ef 56 b8 b7 87 22 f8 13 66 ab 74 e8 29 21 f1 57 2e 9e f4 bf b3 d2 02 8a 28 07 c1 80 bc 37 46 81 ee 37 1c 6a ec a0 5c 6e 76 9e 9f ae cf 4e ae 77 14 0d 4a b4 c0 f6 87 c8 c4 8f Data Ascii: 0]lQV-lxgZrZ6wtG6]z}3>/V"l1z%l*DPPwFH."m9oTcX2xmh;\%ao:jwn\|yzUg+{'lmn]V"ft)!W.(7F7j\nvNwJ
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 3f 5a ba f2 7e 57 b7 6b 36 7f 67 7f b3 d9 df f7 bb 76 b1 eb 1d ff 6d 8e ce 8d 02 cc fe b4 6d 4f 1c 46 35 dd 6a 3f b8 d4 0f 46 77 4d d8 a0 ee 8b c6 07 0a f5 93 a7 6f 54 a6 13 3f 54 24 e7 53 fd a0 bb ab fe 17 b9 29 19 dd 37 a2 36 5d 8c 7e 44 7e c7 bf 48 99 be b8 6c 6d b4 9f 1f 36 ee 71 7d 87 2a a3 2f ed 60 ad ba 35 3f 58 ed e6 dd 35 56 f8 ea 1b 44 95 6c b4 51 77 80 de fd 09 4b 98 9b f3 7b 5c ab aa 02 aa b5 64 93 5b 20 ba ee ce 45 56 27 b0 5a af 63 9f 2c fd fd 31 c6 8d 2a ed 86 36 cf 42 a9 68 a3 cc 8d 55 75 83 cc da 53 4a 74 53 f7 e3 6d 18 ee 2e ef e7 f9 70 5b bc d0 92 e7 fe 62 1c cd aa 72 92 6c d9 5c 95 83 58 4c be db 07 5f 88 9d 91 b9 55 aa 45 eb 90 66 3e a8 22 77 af b2 4d 83 62 a3 ce a8 a3 f4 a9 e3 7c 69 d7 c2 94 45 c6 0a 7c 4f 02 1e e8 41 10 7f 9d 30 0c Data Ascii: ?Z~Wk6gvmmOF5j?FwMoT?T$S)76]~D~Hlm6q}/`5?X5VDlQwK{\d[ EV'Zc,16BhUuSJtSm.p[brl\XL_UEf>"wMb\|iE\|OA0
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 25 9e a0 1a f0 f7 e9 62 72 30 9f ee 8e e6 93 a9 92 dc 12 0b 6a 03 87 9f 53 d0 f7 95 6f 97 af ae b2 b4 ea dc 51 67 0f 2e 3a 93 29 eb df 7c fc 4c 7f 79 08 ea fb b6 c2 05 ad b4 e2 ee da f7 8d b4 ea 26 af 59 fc 77 17 2b 5b ec 0f 46 b3 d5 ee 6c a9 05 7f bc bb 58 6a c9 44 23 4f 16 bb d3 e9 b8 c3 93 03 e1 56 53 96 d1 21 bf 8d 57 5c 57 1b cc 27 83 d5 88 ff 1e cc c6 0d 0f 02 6b c6 a9 00 47 93 c9 81 fe 60 15 2c e7 53 44 19 f5 34 99 f0 d0 d3 6a 97 f1 9a ec 4a 25 8f 91 72 9f eb 3f f6 c2 b3 c9 a2 d9 98 67 db 86 33 e4 4b 33 71 49 37 c7 bb d3 11 f2 36 e6 5e 3a 36 0e 7f f9 97 9b 7b 0b e4 4f f0 64 d4 e9 80 e7 74 11 eb 61 66 bc c1 00 b0 9f 06 33 31 ac c1 48 78 e3 62 ff 89 c7 d5 22 97 c1 bd 34 83 87 73 2e 85 4d 07 73 d6 82 21 13 62 ba 64 f9 1b 2d b1 d8 58 b4 07 d3 c5 f8 2f Data Ascii: %br0jSoQg.:)\|Ly&Yw+[FlXjD#OVS!W\W'kG`,SD4jJ%r?g3K3qI76^:6{Odtaf31Hxb"4s.Ms!bd-X/
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: e7 39 51 ac a5 36 d8 0b 64 79 a3 6f df 57 59 c8 40 98 88 c7 f3 c9 53 1a fb 0c a1 fd 3e 36 51 77 7c de b1 7c be 95 ab c7 0d 32 db 56 7b 42 3b 6a 87 1f d8 4c 8f f4 6a c2 80 4d 97 8c f3 e9 f2 ce 56 f9 2f e1 d7 f9 90 67 c0 1b f9 9d 5a cf e0 8f 56 7f bd c6 e7 92 21 29 98 c1 3b 9c 64 9f cf 35 87 87 d3 67 53 26 f3 72 b5 1a 4c a6 4f a7 73 f7 06 7c 7b 2b f9 61 89 78 c8 7f fb 1d 36 18 78 a2 97 9a d8 d3 19 db 4c f6 0b 23 56 a4 29 ee 5b 19 20 cd 7b 20 2b 40 e0 54 1b d8 66 8d a0 59 4c 2f e3 aa 9d 33 ed cc d9 6d ab 36 ea 89 df 84 1b b3 71 33 cb 85 b4 60 65 b7 bf 13 8c 51 a6 e6 d8 f4 25 b3 06 83 80 2f fa 90 e6 2f c9 d1 e2 6f 72 1f 36 c1 08 6e cd 3b 98 60 ca b0 84 46 cb 27 f2 a6 f4 5e 19 4c 4f f5 37 7a 0f 8b 9d 2b 52 a9 70 e7 60 24 db 5a 26 3c 9c 62 ad 77 52 2d fb e4 d6 Data Ascii: 9Q6dyoWY@S>6Qw\|\|2V{B;jLjMV/gZV!);d5gS&rLOs\|{+ax6xL#V)[ { +@TfYL/3m6q3`eQ%//or6n;`F'^LO7z+Rp`$Z&<bwR-
2024-11-01 15:52:34 UTC	1408	IN	Data Raw: 67 5a 2b 90 17 1d 3e 68 24 22 cd 84 99 32 71 82 9e 72 38 42 e4 a8 9b 13 22 98 84 68 eb 38 5c e1 21 e6 87 8b b4 4e 88 f4 bb c8 91 70 92 4c 6a ad 40 1c 90 99 7c 48 f0 c4 f3 95 fa a6 56 b0 db 57 7a c9 de 4d e9 32 26 cc 08 a4 bd b1 c4 20 1a ab 70 89 e9 8c 49 af 79 61 3a c3 86 06 ad 31 99 b1 5d d2 b9 06 d8 89 2a e9 d4 06 f7 a1 d1 22 49 bc 10 54 4e 8d e3 c7 87 66 8c be e8 25 1b 56 0a ab 53 47 3b be ef 41 c5 77 93 55 f9 a9 38 9d 56 d8 07 e7 53 9c cc f6 24 83 41 b4 0d e3 89 41 a5 9f b5 5f 64 8f 88 04 1b b5 25 ed 1c 57 a7 7a f9 b3 f8 44 d2 73 f7 a4 95 fd f9 6c 32 24 47 43 29 72 87 83 2a 1d fc 5a 01 d8 19 5e 36 da 2e aa 35 74 6b 51 e4 e8 c9 e1 e7 bd cd 9c 7c f7 46 eb 20 da 41 c9 bd ca ef ed e7 08 d2 cb 57 54 81 57 6b e8 d6 22 9d 41 59 8e 9e 9c 3f f3 b6 52 c6 18 75 Data Ascii: gZ+>h$"2qr8B"h8\!NpLj@\|HVWzM2& pIya:1]"ITNf%VSG;AwU8VS$AA_d%WzDsl2$GC)rZ^6.5tkQ\|F AWTWk"AY?Ru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49902	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	537	OUT	GET /gui/manifest.json HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 15:52:34 UTC	341	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f856fd09b3027df25ab4ade30bec1282 Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:51:58 GMT Expires: Fri, 01 Nov 2024 15:52:58 GMT Cache-Control: public, max-age=60 Age: 36 ETag: "b_UujA" Content-Type: application/json Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:34 UTC	269	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 31 0d 0a 08 0d 0a 65 33 0d 0a 00 00 00 00 00 02 ff 8c 90 c1 0e 82 30 0c 86 ef 3c c5 32 af 0a 4e c3 41 9f c3 78 31 86 54 98 b8 38 36 b2 0e 03 12 df dd 75 98 78 22 7a 68 0f fd fa f7 ff d3 31 61 8c 1b 68 24 df 33 7e 54 ae c3 83 f5 a0 f9 92 e6 78 b3 ce 17 b3 d4 43 a0 9d d3 24 4d b3 49 52 29 6c 35 0c 34 42 0f a6 02 6d 8d 9c 90 bf c9 46 16 a5 d5 d6 11 5e 6c af b9 b8 e4 13 bb 40 79 af 9d ed 4c 35 b3 a0 4a 6b 30 c8 4e 21 17 63 63 ec 94 d0 95 74 4b 35 50 4b cc 1a 30 ea 2a d1 67 b4 bd 12 bb 4d 1f 2a 6d 4d 1d 4d 48 c8 51 3d 25 dd e1 1f fa 25 7e 68 e3 13 e2 ad 8c 44 d1 e4 45 9f f8 d3 31 17 9b 3e d4 8c e3 87 fe 76 0c 86 e7 f8 ff 87 74 a8 ac 89 71 d3 ad 10 e9 9a 27 af e4 0d 00 00 Data Ascii: 000000010000000100001e30<2NAx1T86ux"zh1ah$3~TxC$MIR)l54BmF^l@yL5Jk0N!cctK5PK0gMmMMHQ=%%~hDE1>vtq'
2024-11-01 15:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49901	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:34 UTC	970	OUT	GET /ui/files/b19e94149729ebbf76d9a027e6e9ea53f796c5bafd5c281fa87c023ad59b13e8?attributes=meaningful_name HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x311x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTg3MDMxNzEzNTUtWkc5dWRDQmlaU0JsZG1scy0xNzMwNDc2MzUyLjU5Mg== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:34 UTC	240	IN	HTTP/1.1 404 Not Found Content-Type: application/json Vary: Accept-Encoding X-Cloud-Trace-Context: 10303aeb5888394e5c88a4ed68549c84 Date: Fri, 01 Nov 2024 15:52:34 GMT Server: Google Frontend Content-Length: 134 Connection: close
2024-11-01 15:52:34 UTC	134	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 4e 6f 74 46 6f 75 6e 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 46 69 6c 65 20 5c 22 62 31 39 65 39 34 31 34 39 37 32 39 65 62 62 66 37 36 64 39 61 30 32 37 65 36 65 39 65 61 35 33 66 37 39 36 63 35 62 61 66 64 35 63 32 38 31 66 61 38 37 63 30 32 33 61 64 35 39 62 31 33 65 38 5c 22 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 7d Data Ascii: {"error": {"code": "NotFoundError", "message": "File \"b19e94149729ebbf76d9a027e6e9ea53f796c5bafd5c281fa87c023ad59b13e8\" not found"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49903	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	510	OUT	GET /gui/44288.d69fcc0ea934ea412b4a.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 47bbc3e539e1b72fc8eba51445b71049 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 15:14:00 GMT Expires: Sat, 25 Oct 2025 15:14:00 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 607115 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:35 UTC	364	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 66 31 0d 0a ff 7c 8e 41 4f 83 40 14 84 ef fe 0a 82 97 b7 c9 66 5b 2a 51 5a 82 17 e3 ad 5e 34 7a 21 a4 79 5d 5e db 2d ed 96 f0 76 51 43 f9 ef 22 3d d8 93 a7 99 cc 7c 99 4c e8 99 02 76 8d d1 2e 4c 81 e9 b0 51 9f b4 ae 51 57 4f 3b 6f ab d6 ad bc 59 1d d1 d8 ec 9f ee 7c ce 0b a1 6a cf 3b c8 f3 38 9e 25 49 21 bb 51 17 e0 24 49 16 d9 63 c7 aa 01 12 92 55 09 24 bb 8f 93 a3 67 eb 8c fb 5e c0 d0 a2 fc 0b 96 86 dd 18 fa Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001f1\|AO@f[*QZ^4z!y]^-vQC"=\|Lv.LQQWO;oY\|j;8%I!Q$IcU$g^
2024-11-01 15:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49905	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	580	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e?relationships=network_location HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 511db8b933eb391733495487520c7b4f Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49904	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	587	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/comments?relationships=author&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 34df0921146a5f97a8e7155f1fad9dc8 Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49906	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	738	OUT	GET /gui/images/favicon.svg HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	338	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ceb519a91c97dda1c6fe52e091d11888 Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:52:22 GMT Expires: Fri, 01 Nov 2024 15:53:22 GMT Cache-Control: public, max-age=60 Age: 13 ETag: "b_UujA" Content-Type: image/svg+xml Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:35 UTC	415	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 31 0d 0a 85 0d 0a 62 36 0d 0a 77 7e c5 cd 75 a6 bd 54 50 6a 28 83 13 83 ae ee 9a 56 4a 52 1e d1 4a 0d Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001L0000000100000001;0000000100000001000000010000000011b6w~uTPj(VJRJ
2024-11-01 15:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49907	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	752	OUT	GET /gui/images/manifest/icon-192x192.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	304	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7ad025d0be2a93d0de7b8015436b952f Server: Google Frontend Content-Length: 8764 Date: Fri, 01 Nov 2024 15:51:36 GMT Expires: Fri, 01 Nov 2024 15:52:36 GMT Cache-Control: public, max-age=60 Age: 59 ETag: "b_UujA" Content-Type: image/png Connection: close
2024-11-01 15:52:35 UTC	1104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 22 03 49 44 41 54 78 da ed 5d eb 93 1d c5 75 df 9a 8f fa c8 1f a0 8f 77 85 1d 13 13 48 1c b0 63 9b 18 02 d8 ae 04 9c aa c4 09 55 c1 49 91 4d 85 72 19 dd 15 c8 b0 bc 21 2b 21 0c c8 8b 29 05 81 09 e6 21 05 6c 48 04 c6 c1 06 8c 6d 08 60 63 84 c1 98 60 dd bb 2f 69 57 fb 92 b4 ab 7d bf d5 99 9e fb ea e9 e9 e9 3e a7 1f 77 e6 6a 7b aa a6 6e ef dd 99 73 e7 d1 a7 fb 3c 7e e7 d7 6d 6d 6d 6d 41 5b 7c 0b b8 cf 36 c1 31 69 c7 41 b6 c0 e0 bb da f7 81 a2 0d 95 25 3b 0e d2 6e 33 b8 f7 ac e4 a7 3d 47 d9 fb 0d 34 de 57 ab c9 47 3d e0 00 f1 d2 02 83 17 26 bb c9 c0 40 be 89 32 ab 14 33 d0 bc d6 66 c9 6f 93 bc c3 40 f2 bd ee f5 e6 5d be 56 a7 c6 be 4c d3 d1 2e 40 8e 0e 98 Data Ascii: PNGIHDRRl"IDATx]uwHcUIMr!+!)!lHm`c`/iW}>wj{ns<~mmmmA[\|61iA%;n3=G4WG=&@23fo@]VL.@
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: da 74 21 c1 b2 30 a2 2b 87 2f cf f2 21 9d 4e 85 cb 82 74 e2 2c e4 57 fb e6 26 84 d9 13 40 0b a9 6b 51 9f 2e ec c3 37 4d 8c 60 a6 4e 6c 9a 5e 36 aa ca 4c 2a 6c cc 3e cf f2 75 b2 ba aa e7 9f b1 fc 2e 83 b2 da f4 29 a2 5a cc d2 63 32 02 a9 70 41 90 e8 05 04 23 03 4d 92 e9 82 d5 d2 66 13 5b 60 b8 66 c8 77 e1 58 e7 44 3e ed a3 67 58 2f 55 25 95 6a 1d 63 07 48 67 b4 83 9e eb ca 04 d2 ad 8c ca ab 7c 95 59 89 19 ac 72 2a 7f 2b 90 95 24 80 4c 0f 35 88 f3 d6 66 65 22 5d 27 d4 b0 a1 3b 6c 49 63 de e5 9f ee ed aa 02 40 39 45 41 a3 3f 2d 60 df ab 63 d6 60 5e 0a 34 f6 af 6b 77 ba 9e aa 5b 31 27 80 09 31 63 67 ad ac e4 93 4a 8d f1 66 09 d1 96 b0 22 2c 15 3c 44 2a 95 fe a8 38 ba ac b3 99 14 b3 63 a3 03 a6 89 21 1d 47 32 ef f2 75 4c 4d e8 80 96 23 f9 1d 48 c2 b7 b6 54 96 Data Ascii: t!0+/!Nt,W&@kQ.7M`Nl^6Ll>u.)Zc2pA#Mf[`fwXD>gX/U%jcHg\|Yr+$L5fe"]';lIc@9EA?-`c`^4kw[1'1cgJf",<D*8c!G2uLM#HT
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: c6 db 97 ec 1c 24 db 9e 18 25 db 9e dc b8 fb 45 3b 06 95 ca c1 2a 80 e7 05 d2 84 30 b8 04 4b ad 87 ed d1 a9 15 b2 f7 95 13 e4 82 3b 07 04 21 42 ce b1 ac 8e 98 57 ee 19 22 6f f7 2e 90 93 f3 6b 64 7a 61 63 ee d7 ef 1f 13 24 de 38 33 48 90 09 f6 bc 40 1a 68 50 97 b4 28 34 47 70 f8 d8 32 d9 fd 3f c7 c9 67 6f ef e7 ec 64 b1 63 78 f6 0d bd 64 fb fe d1 28 b7 b0 51 a1 d1 37 7f 7f 5c 9a 4d 67 9d 60 cf 0b 94 63 05 a8 e5 08 ca 63 4b 64 e7 81 09 72 fe 2d fd 8c 33 98 92 48 0a f7 73 ba 7a c9 ad 3f 18 27 43 27 56 9a 02 a0 cb 1b 2f 90 48 01 44 09 32 5d f9 ba e8 5d a8 fc a6 85 41 75 23 35 58 76 64 88 f2 c9 94 61 25 54 82 0f 87 16 c9 8d 4f 8f 91 3f be b1 2f 7d 06 60 14 e3 53 37 f5 91 fb 7e 74 8c 4c 4c af 6e a8 7a 00 ba d5 14 a0 3d 2d 5c 0b c8 03 d8 ba 36 1d f9 4e 4b 22 21 Data Ascii: $%E;*0K;!BW"o.kdzac$83H@hP(4Gp2?godcxd(Q7\Mg`ccKdr-3Hsz?'C'V/HD2]]Au#5Xvda%TO?/}`S7~tLLnz=-\6NK"!
2024-11-01 15:52:35 UTC	176	IN	Data Raw: 20 52 9f 01 8a 3c 23 5c 3c 43 6e 32 48 61 93 63 48 f9 1d 56 22 40 58 13 48 16 b9 d0 e1 15 35 19 2d 30 cb 04 a9 8e 9b 5b 5a 23 4f be 3e 15 d5 07 c4 28 4b 44 bc 3d 61 67 39 b7 ab 8f 74 3d 35 46 3e 1c 5e 8c 8a 71 b0 19 5c 93 08 09 24 21 86 86 43 0b 68 56 6a 26 90 2b 38 b4 4a f1 15 f2 d1 cc 70 81 09 37 a8 8d 9b d5 d1 7e db 89 16 59 c8 71 6a 6e 8d ec 79 e9 04 f9 f4 ad 7c b6 98 c3 ca 57 9d e4 3f bd b9 8f ec 38 30 11 65 8b 69 6d b2 4a 3e b4 f3 ea 5e 3f 26 a2 52 af 08 eb 4c 82 02 59 3f 00 98 94 42 87 b9 55 89 53 80 fc d6 82 43 db Data Ascii: R<#\<Cn2HacHV"@XH5-0[Z#O>(KD=ag9t=5F>^q\$!ChVj&+8Jp7~Yqjny\|W?80eimJ>^?&RLY?BUSC
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: c6 fa 40 ce c5 98 6d b5 ff 8d 9d 5c 25 df fa e1 31 72 de cd 7d 49 c6 04 6e 36 a0 ed cf dc d6 1f 41 2c 46 26 57 22 a7 1a 8a 65 81 d8 ef d8 eb 87 cc 08 ac 13 5c 10 f1 0e 71 4c d4 ba f2 75 df 2d c2 ea 30 86 43 5b 29 89 74 b5 2a 0b 94 55 58 d7 21 93 d9 df c3 27 56 c8 1d cf 4e 34 6a 8b 19 22 59 11 a3 32 a5 64 f9 8f 9f 4d 46 d9 62 48 74 c4 56 56 18 12 51 49 7b af c9 92 c8 92 b0 84 54 57 3e 86 03 4a 47 3e 41 2e 91 24 a5 8d 33 81 43 eb 14 38 98 9a 49 d8 02 0a 0c 2e a7 16 1e ed 1b 5b 26 d7 ff e7 58 54 5b cc 92 ef b2 f4 83 ac b3 4c cb 2a 9f 7a eb 64 e8 4b ac 6b d9 f1 aa e4 11 06 57 04 99 25 58 13 a8 1e 09 aa 26 c4 0a 8c 63 0c 5d e1 05 73 0c 34 42 e6 3a 0a 94 9a 08 cb aa 20 06 6a 1f db c4 17 a5 dd 03 2d 8d fc dd 91 45 72 cd 63 23 e4 ac ed 22 ee fe 38 9c 9a 76 96 2f Data Ascii: @m\%1r}In6A,F&W"e\qLu-0C[)tUX!'VN4j"Y2dMFbHtVVQI{TW>JG>A.$3C8I.[&XT[LzdKkW%X&c]s4B: j-Erc#"8v/
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: e5 c1 b1 35 40 78 5e 20 cf 0b a4 35 53 b0 bb 98 1e bd cc d9 ca a5 58 e7 a7 ab c5 bc 7f b8 91 e8 c2 e0 8d 3c 2f 90 e7 05 32 36 05 4c 7c 02 d9 02 19 49 f6 b7 52 2c 59 44 4b 1c ff f9 e1 a3 e4 ed de 79 e1 a2 79 58 de 21 13 1c 93 e7 05 f2 bc 40 20 0c 50 da 83 8d 2f 91 54 4e 10 5d d5 13 5e d5 f6 99 db 4a e4 8a 07 86 c8 2f 3e 9a 8b 42 a5 b6 78 87 3c 2f 10 58 86 e7 05 32 09 a9 f2 8b e4 3d 9f 58 24 af cc 95 34 36 22 3f 14 06 f1 95 fb 0e 93 17 df 9b 21 f3 80 f5 00 a0 23 3b 14 92 61 a2 f0 20 13 c8 f3 02 b9 35 87 f2 c4 0b 14 2d 93 fa 7f 73 e4 2f ba d9 05 b3 cb f5 c4 56 81 e3 f9 d9 12 ee 5f dc 35 48 0e fc 7a 3a 9a 35 54 f1 6d 1d de 21 cc f5 7b 5e 20 cf 0b 04 56 08 fe b3 b6 50 f6 c5 3b 6a 9d bf 24 ad 93 6d 8f 96 43 ea 8f b8 7d 66 99 2c 2f 24 12 63 e2 1b 41 e5 7b 5e 20 Data Ascii: 5@x^ 5SX</26L\|IR,YDKyyX!@ P/TN]^J/>Bx</X2=X$46"?!#;a 5-s/V_5Hz:5Tm!{^ VP;j$mC}f,/$cA{^
2024-11-01 15:52:35 UTC	1280	IN	Data Raw: 47 7e 41 e8 33 2d 24 5a 87 ff 76 26 21 d1 2c 73 32 8b 1d ca a5 7c f6 fc 62 23 f9 27 ac fd 2d b2 e8 d7 b8 d9 c3 3a c6 a6 51 2d 55 16 db 40 be 11 37 68 cc 14 62 13 61 98 22 0b 59 14 47 75 1e 24 93 99 f6 90 e6 16 2b 2c 0e 7f 75 cf e1 78 21 7b 0c e5 59 16 d4 b8 0a 9c e2 62 52 79 da 8b f2 08 52 5e e5 f3 59 6e 1e ec 96 08 79 0a d6 05 28 70 bf a9 63 d3 db 18 14 01 f2 3b 30 c4 0f 32 ac 74 53 12 61 b6 da 14 e2 f0 f2 07 b3 51 39 23 9b e5 15 47 7d f8 e4 57 29 8e 81 17 2c 0b 94 ec b0 b2 24 5a ce e4 17 cb 89 11 3d 8d ce 91 6f 17 98 73 0b 8c e2 b8 80 ba 58 e2 93 ed d0 ae 00 53 81 e1 6c a6 dc a1 18 70 08 16 88 26 ba de 2c cd 87 4e 6c 83 ab bf d0 59 16 82 ba 0a 7c f2 ab 98 34 33 58 5a f0 b4 ce c5 e3 87 0a ec 3a c0 39 93 9f a8 ed e5 62 fb b1 d5 2c d9 91 9f 25 c4 e5 56 89 Data Ascii: G~A3-$Zv&!,s2\|b#'-:Q-U@7hba"YGu$+,ux!{YbRyR^Yny(pc;02tSaQ9#G}W),$Z=osXSlp&,NlY\|43XZ:9b,%V
2024-11-01 15:52:35 UTC	572	IN	Data Raw: bd 45 f9 b4 0f ee 6a b3 b4 a5 01 e3 d2 32 c4 fb 3c 2f 90 e7 05 ca 92 17 88 f6 41 c3 be ae e6 05 92 99 42 e1 3e e5 79 81 3c 2f 50 46 f2 a7 68 1f c4 26 75 b5 a0 10 69 a6 51 4d 09 74 a3 37 9e 17 c8 f3 02 69 ca 4f eb fc 46 0e b0 2a 1f 90 b6 82 0c 58 09 3c 2f 90 e7 05 b2 20 bf d6 f9 03 1b 70 1f 25 2f 10 24 73 4c bd f0 70 9f c2 9a 18 9e 17 28 bb e3 6d 24 aa 32 90 9f d6 f9 b5 92 5f 20 5e 20 85 62 b0 f9 01 3a 13 ec a3 9e b9 ad 17 e6 79 81 3c 2f 10 13 ed d9 67 cb ec 41 f1 02 01 7c 02 1e 33 44 43 a4 8b 90 c4 88 8d d1 c4 f3 02 e9 c9 c7 44 d2 b2 e4 05 a2 39 27 9b a1 4e 34 2f 10 a2 92 8c 8f 10 f5 a8 cc 14 cf 0b e4 79 81 14 01 8a 1e 49 92 2b d0 68 e3 79 81 24 23 be d2 de a2 f8 8c 2a 48 c9 7a fc df 65 7e 01 9a 9c 69 45 f9 ad c0 0b 44 fb 8c 09 b6 c7 6a 35 18 50 11 52 db Data Ascii: Ej2</AB>y</PFh&uiQMt7iOFX</ p%/$sLp(m$2_ ^ b:y</gA\|3DCD9'N4/yI+hy$#Hze~iEDj5PR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49908	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	583	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/votes?relationships=voter&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 00887d775b17f411037a64e3e95a843c Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49909	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	608	OUT	GET /gui/service-worker.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.virustotal.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3ef28efaa8eca27b40695dd19247eec0 Content-Encoding: gzip Server: Google Frontend Date: Fri, 25 Oct 2024 16:09:34 GMT Expires: Sat, 25 Oct 2025 16:09:34 GMT Cache-Control: public, max-age=31536000 ETag: "u7_udQ" Content-Type: text/javascript Age: 603781 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:35 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 39 0d 0a 00 02 ff ec bd 09 7b e4 c6 91 e7 fd 55 d8 7c fc ca c5 71 11 c6 59 00 d8 a6 7a 65 49 1e 6b c7 92 3c 92 3c de d9 7e b5 3d 38 12 24 a4 62 81 46 55 75 37 cd e6 77 df 5f 64 02 75 f0 68 06 65 4b de f1 a3 39 d4 64 b1 00 24 32 23 e3 f8 c7 3f 22 27 93 a3 d3 0f af 0f d7 4b 73 b0 5c f5 6d b5 3a 7c fe ba e8 0f cc e9 f5 2c 0b 4e ec 1f 57 fd d5 f5 d2 cc 9b 97 87 6f ba fe fb b2 7b 7b 52 15 d5 b9 29 ca b9 39 ee cd f2 b2 5b 2c cd 49 ea f9 9e 7f f8 ed 07 1f bc 9a 1c dd 54 c5 aa 3a 9f Data Ascii: 0000000100000001000000010000000100000001000000010000000100ff9{U\|qYzeIk<<~=8$bFUu7w_duheK9d$2#?"'Ks\m:\|,NWo{{R)9[,IT:
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 74 73 33 19 c5 ec ce dc 58 2d d4 71 8f 1d 29 b1 e3 35 6e 19 9d aa 93 07 bb 2d 5f b1 12 53 64 ed c3 d5 8e 20 1e b4 a8 c0 62 51 99 ae 39 58 1d 1d 3d 17 f5 b7 9e ce 07 d5 d8 d8 67 fc d9 14 df 7f 5e 5c 4e cf f7 7e ab f7 7e bb da fb ed 72 f7 37 7b cf d7 a7 d7 22 ea 56 86 99 d1 66 62 76 9f fc d9 27 bf fd a6 2f 16 cb c2 1a 04 fb f7 43 91 d3 43 d9 18 a3 05 38 b7 9b c5 1c 89 7d 38 ec ec 2e fb 1a fd 67 be 40 cf 2d f7 be 69 bc db 7f 7e f7 ae de bd 7a 29 d7 ed 5d b2 b8 73 c9 cb e0 db 17 4e 2b 9d ec fd 71 b2 f7 9b 7d 38 aa ea e8 66 58 c8 72 62 64 f7 de 4c 97 66 75 32 bc ef e9 87 f6 c3 d3 c5 f4 19 76 e2 bc 58 da 3f b0 12 ef 99 04 74 c9 76 0a de bd 3b dc 19 f2 bb 77 2b 26 ef c0 ec 98 d0 8b 1d 51 32 98 4d 26 f4 93 62 55 94 05 db fb b2 ef 56 dd ea ea 12 b1 d8 ce 31 77 bc Data Ascii: ts3X-q)5n-_Sd bQ9X=g^\N~~r7{"Vfbv'/CC8}8.g@-i~z)]sN+q}8fXrbdLfu2vX?tv;w+&Q2M&bUV1w
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: c3 13 fb 73 b7 98 5f b1 8b 24 8e 04 a4 03 a0 21 d2 da 80 69 c5 56 4d 8e ce 2c 98 14 7b c9 f9 ee 05 60 5a e1 c0 b4 0a 30 ad fa 4d f1 bc 42 cf 2e 5f 56 fb 60 5a b5 f1 e2 7b ac 44 7b da f2 86 b8 2a 93 a5 b7 3c 6f 9b d5 44 14 fd e4 aa 35 f3 7a 8c f9 3d f1 78 5f b6 2f 17 df 4e f0 76 97 80 75 c0 35 16 0a c1 8d 21 7c fb fb 21 09 e2 5f df 87 24 14 a2 da 3e c2 b1 16 00 a7 98 2e ef 43 12 c4 f3 dd ff ce 16 49 28 b4 48 c2 6a 7c fc 5d 24 61 34 fe 1f 0f de 43 0b 32 7a f3 5a 16 fc c3 b7 93 b7 93 eb 1b bc 8d 29 ff 95 50 fd 44 bc 6c ec e3 e9 87 9f 59 7f fb dd 3b e3 24 da 7e ea 82 58 41 1e 4f 3f 7c f6 6c fb 0d f1 de e5 53 6c ed e4 b5 80 81 e0 e3 47 db 0d f6 e5 4f ac 3b 46 23 72 f0 89 cc ec a0 92 c7 0f ff 56 cc e8 bd 2b fd a5 62 a5 f7 be f3 c0 4a 0f 7e d8 77 a7 87 16 ff 39 Data Ascii: s_$!iVM,{`Z0MB._V`Z{D{*<oD5z=x_/Nvu5!\|!_$>.CI(Hj\|]$a4C2zZ)PDlY;$~XAO?\|lSlGO;F#rV+bJ~w9
2024-11-01 15:52:35 UTC	315	IN	Data Raw: 19 bc 8b 9e 8c ba 7c b7 e4 2f 22 4e 7c 65 6a 2f 28 84 00 71 d0 d9 44 dc d2 81 1e e7 c5 6b 73 50 1c dc 11 bf c9 d1 c1 85 59 9d 77 b5 a0 1f 32 39 64 b0 4f c1 1a 96 a7 cf 82 ed ac ec cc 15 a8 da 28 38 37 fb 73 25 57 33 c7 68 99 b7 04 7a c3 c5 07 92 bf 95 19 03 a8 b8 35 31 3c c2 47 41 da 99 d9 79 80 64 cf 0b c0 7a 6b bf 17 a8 32 21 99 f0 fb f0 13 36 89 bd 45 d0 78 25 52 bf 3c 72 13 da de f0 3f e3 4d 0e 9c 8c 5c 5b b3 8a 30 20 1f e4 f5 dd f2 1d 21 08 90 48 c6 df 36 46 6d 81 51 eb 4f dd 46 5b 11 1e 91 a4 5a 60 d4 7a e2 52 b2 f8 8b 6d 58 bb 7d ca 37 b2 af 7e c2 bc ff e6 f5 3e 97 2d 3f 48 e6 f8 e1 8f 1a 32 7d a3 08 99 f6 be f3 60 c8 64 a9 0b 7f 72 ae c2 36 b4 71 be fc c6 41 1f 16 47 ed ca 0f e4 13 08 09 eb c5 02 43 8b e8 0e b1 43 6f fa f5 62 c8 6b 98 7a fb f9 45 Data Ascii: \|/"N\|ej/(qDksPYw29dO(87s%W3hz51<GAydzk2!6Ex%R<r?M\[0 !H6FmQOF[Z`zRmX}7~>-?H2}`dr6qAGCCobkzE
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a f4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a b7 0d 0a 30 30 30 30 30 30 30 31 0d 0a e6 0d 0a 30 30 30 30 30 30 31 0d 0a f3 0d 0a 34 66 66 38 0d 0a 7d e7 5f 94 be f7 6a f3 be a3 a2 17 9d 28 7f b8 fd d6 c4 f9 bb 5f 67 db 0d 3e a6 6c 84 57 7b 6f fb 82 a0 c7 78 8b ee cd e4 e8 38 30 d1 bf dc fe fb 89 0f 85 c3 f9 76 fc 69 ff 85 84 d6 b5 e3 52 93 20 b1 37 1f 26 5a b0 33 77 a1 70 01 9d db ba b4 3e b0 0c 79 e3 e4 39 0d 0d 91 e6 f4 2f 68 fb e7 a2 0c c4 ef 6c bd 25 2a e5 d9 a4 03 51 5a 48 90 22 2a 65 e3 0f af 4e 47 7f f8 96 db 39 8c 61 bb 36 e4 48 37 e4 42 78 68 32 fb 1b 6d e2 35 e8 16 c6 Data Ascii: 0000000100000001}00000001W0000000100000001>000000010000000100000014ff8}_j(_g>lW{ox80viR 7&Z3wp>y9/hl%QZH"eNG9a6H7Bxh2m5
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 04 46 fb b6 c7 83 42 db 5a 8f 86 1c 9c f8 23 12 1e 88 9b 40 e8 e4 e8 f8 96 7d 61 1d 07 cf 15 c4 01 45 11 3e d9 b9 bc 55 2a b7 6f 45 aa be 5b 62 36 6c 11 dd 31 01 f9 d5 a6 5c f5 70 7a ed 3e 3e e9 61 4f d8 5c 08 25 92 64 45 e6 c0 52 84 69 ed e9 f5 a0 0e 4f 44 01 3a d5 bd 24 df 3a 7c 4a 80 68 cb e3 4e 24 67 2e 75 72 c3 ef df 00 9d 6f 3e 93 5f 6e 24 69 f8 62 81 17 75 d2 12 d7 6e d4 9b 4d f9 6c c0 94 bf 8e 88 0d f0 3b 8f 1b 9d b0 89 54 fd 31 1d 87 65 57 5f 49 0d 89 71 4e d3 ee 57 8c 27 7f 3c 9a fe 95 90 74 eb 3f f1 5b 70 63 ff 33 58 93 bf 52 ed f4 a2 b3 df 3d 19 bd 13 92 82 92 fc 1e be b1 f7 60 0a a5 20 17 fc e7 ee 78 45 17 3b 20 ea ef ed b6 ff 2f 85 db be f7 9d 07 dc f6 e9 7f 3e c0 cf 1a 67 fd e0 7f ff a3 36 80 01 a9 fc c9 0c da f8 ba ee 91 b2 9d 1e 49 30 62 Data Ascii: FBZ#@}aE>U*oE[b6l1\pz>>aO\%dERiOD:$:\|JhN$g.uro>_n$ibunMl;T1eW_IqNW'<t?[pc3XR=` xE; />g6I0b
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 41 60 d8 a1 43 74 23 d9 7e 3b 03 18 08 3a 8e d8 32 52 e8 a8 d5 63 30 1e dd 12 af 37 f7 3f 69 a5 35 df 70 4b fb e9 72 40 06 e9 f8 b7 27 9c ab 7b 94 82 bd 60 a3 aa b6 04 29 bd 94 52 cc 38 48 69 7f 3a e2 87 93 dd e1 4d 77 5f fe a4 70 65 b7 9b 47 22 43 a3 a4 2c 07 a9 1a ac 20 6b f4 ee 9d cb df 29 c5 1a d5 23 14 69 fb 4e 6e b1 07 d6 2b 94 ad 47 d5 7f 7b 6a 6d ff 90 45 26 fe 82 8e ea 54 47 31 4c 6e b7 b7 5e ed f4 d0 75 8e 70 9d 2d 20 5b 6d 78 a2 b0 6b ec 18 8e 29 f3 45 55 ad ce 8f 17 dd 6e 5e 54 ea 91 fb 49 61 f3 ad 9b dc e8 28 15 9d f7 ca 2c 96 90 48 c7 14 e5 d7 45 63 be e9 3e 16 79 12 ba 3f c6 e2 d9 72 80 54 61 ee 6e b5 db 56 fe 84 16 66 07 60 eb 99 e7 fc b6 bb 04 d3 66 78 9f dd 4c b9 2d ab 5c d3 de 0f 61 dd 33 3b f6 3e 1b 5a 17 d2 59 9f 9e bf 70 f2 bb 1b b7 Data Ascii: A`Ct#~;:2Rc07?i5pKr@'{`)R8Hi:Mw_peG"C, k)#iNn+G{jmE&TG1Ln^up- [mxk)EUn^TIa(,HEc>y?rTanVf`fxL-\a3;>ZYp
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 62 c7 fb e5 90 75 1c 27 e1 1e 41 dc be 48 c7 6a 8c 37 da 0b 76 b7 41 f5 9e fe b0 c2 41 f8 44 55 f4 d1 0d cb 33 5e 7b ef 66 60 10 e3 de bb 6f 3b ec 8c 62 ea a4 85 c9 a2 0e 74 13 07 23 27 43 3e c6 4d e2 36 44 fb fa 67 f7 ee 9f a8 cb c4 47 ff dd dd bb e1 05 34 ee dd 1f ff b9 dc bb e1 75 ee ba 77 c3 1f 7e 24 f7 6e e3 45 7e 6a a7 f3 1f 11 27 7f cc 93 37 fa 7b 1c cf 8f ca ec e3 5d 1f 8f 93 f7 bf f4 50 9c ec dc e3 cf cc e6 24 c2 bf bb a7 bc e3 18 9f fe 76 df 4d 1e 8e 37 1c fc e5 57 cd c0 e9 f8 a6 fb c2 ac e4 bc 4f 00 49 b0 3a fc e3 db 7f 70 4e dd e0 56 3b 94 f6 33 e9 2b 79 79 f5 95 a9 5b 9a 2c d1 23 d5 a6 6a a4 af e1 e8 de 2d ff 68 b9 3d 00 a6 83 a7 b5 83 ed 89 1b 39 b8 8c 07 ac e7 9e b3 e7 d0 ec 31 93 3c 74 b5 f8 7c c8 8e 8f 17 f5 94 fb 0f 38 25 cd 24 ed e1 2f Data Ascii: bu'AHj7vAADU3^{f`o;bt#'C>M6DgG4uw~$nE~j'7{]P$vM7WOI:pNV;3+yy[,#j-h=91<t\|8%$/
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: b6 09 97 66 23 a3 ae bb 85 b8 4f 6e 23 9e bb d7 da 75 af 46 24 aa d9 65 7d 0f 32 2e 52 6b f5 c6 ee 05 ef de 9d cb 9b 35 a7 d2 51 5f 6a c2 36 3e 88 93 16 4e fc 3a 25 da 18 3f b5 a7 46 b2 f6 e7 b6 11 d8 b0 c4 0e 21 91 f3 bd 65 7e 9f f0 76 74 58 bc 9b 9b 64 34 d4 bf db 74 12 65 23 bb 63 1d a7 f6 d6 c7 8f 3d 57 f2 ac b6 fa 40 0e 0a 19 5a 41 ff a8 c8 2c a6 e3 71 64 76 ff 4b 0f 20 b3 63 06 fb 60 33 ee 2d c8 dc 3e d0 50 85 46 6b 08 62 23 84 e6 5b fb 88 6b 45 1c 25 96 62 cb 90 c0 37 de 76 1f 59 05 30 2a 03 69 45 67 65 d2 7a 96 72 a2 0b 7e b0 13 1e 67 40 2c 81 b7 1f f6 0f 4c 9c 97 e8 c2 b1 17 4e 31 e4 56 5b f6 e0 7d b9 d5 76 c8 ad ca 58 38 05 74 38 1f 6c ec 7f 63 f7 c6 6a ba 1d 18 a7 da 8e 0a b3 1f a9 fb 2c 29 42 38 16 7a 70 44 cc 72 7a 8b c5 55 20 d5 e2 eb 17 43 Data Ascii: f#On#uF$e}2.Rk5Q_j6>N:%?F!e~vtXd4te#c=W@ZA,qdvK c`3->PFkb#[kE%b7vY0*iEgezr~g@,LN1V[}vX8t8lcj,)B8zpDrzU C
2024-11-01 15:52:35 UTC	1408	IN	Data Raw: 4c a0 e0 30 63 1b 98 f6 ae c7 41 b1 b4 43 fa 78 f0 bd 8e 01 f8 d0 e6 64 75 d2 a9 15 08 48 3f ec 88 09 35 d8 cf 80 bf dd b9 36 4e 60 06 16 82 9b e5 0e 6f 79 e8 1f 73 f3 f2 fa 97 9c 47 df 2e db 6e f1 4b eb 4a 4f 7f 49 48 f8 cb 93 5f fe fa 6c dd fe da 0f 0a 93 66 45 1e d4 c5 ac 8c aa 3a 8e a3 d4 7b d3 35 cd 2f 6f a6 ef bf 30 4f cc ac 09 67 79 9d 16 55 58 9a b8 49 42 e5 85 55 68 4c 14 67 59 1d 67 a6 0e 83 28 6a 74 17 d6 b1 a9 67 7e ed 47 49 58 c8 33 eb c6 57 5d 18 f8 a1 9f 79 79 69 ca 2a 88 ca 32 8c 66 49 1a 86 b3 2c 9a 79 df 2d 1f 7b 4f 2e 8e 33 2f e6 5d fd ac 9c f9 65 12 57 59 c3 bf 45 a6 ba 38 49 66 5e 5c d5 95 09 f2 aa 89 2a 93 d7 89 f1 9b 40 f7 e4 2c cd bd a8 4e 4b bf 0e 4d 32 cb aa aa 28 f8 31 4f 54 4f ae 82 ac 66 9e 4d 5a 64 c9 ac 2e fd 2c b0 93 15 3e Data Ascii: L0cACxduH?56N`oysG.nKJOIH_lfE:{5/o0OgyUXIBUhLgYg(jtg~GIX3W]yyi2fI,y-{O.3/]eWYE8If^\@,NKM2(1OTOfMZd.,>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49910	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	573	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/last_serving_ip_address HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 75168a3e22cca7e008bf60a93750eb10 Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49911	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	566	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/network_location HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: f449b95cca07346fae58ee2f4498f73a Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49912	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	584	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/graphs?relationships=owner&limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 09804c5203d898e48b6ace50d2830ac3 Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49913	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:35 UTC	574	OUT	GET /ui/urls/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/related_comments?limit=5 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 489216f6378c811cc76aec5657fb7b43 Date: Fri, 01 Nov 2024 15:52:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-01 15:52:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49915	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:36 UTC	513	OUT	GET /gui/images/manifest/icon-192x192.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:36 UTC	303	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 968f229afa4cc71a78d610d30f742f5a Server: Google Frontend Content-Length: 8764 Date: Fri, 01 Nov 2024 15:52:36 GMT Expires: Fri, 01 Nov 2024 15:53:36 GMT Cache-Control: public, max-age=60 ETag: "b_UujA" Content-Type: image/png Age: 0 Connection: close
2024-11-01 15:52:36 UTC	1105	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 22 03 49 44 41 54 78 da ed 5d eb 93 1d c5 75 df 9a 8f fa c8 1f a0 8f 77 85 1d 13 13 48 1c b0 63 9b 18 02 d8 ae 04 9c aa c4 09 55 c1 49 91 4d 85 72 19 dd 15 c8 b0 bc 21 2b 21 0c c8 8b 29 05 81 09 e6 21 05 6c 48 04 c6 c1 06 8c 6d 08 60 63 84 c1 98 60 dd bb 2f 69 57 fb 92 b4 ab 7d bf d5 99 9e fb ea e9 e9 e9 3e a7 1f 77 e6 6a 7b aa a6 6e ef dd 99 73 e7 d1 a7 fb 3c 7e e7 d7 6d 6d 6d 6d 41 5b 7c 0b b8 cf 36 c1 31 69 c7 41 b6 c0 e0 bb da f7 81 a2 0d 95 25 3b 0e d2 6e 33 b8 f7 ac e4 a7 3d 47 d9 fb 0d 34 de 57 ab c9 47 3d e0 00 f1 d2 02 83 17 26 bb c9 c0 40 be 89 32 ab 14 33 d0 bc d6 66 c9 6f 93 bc c3 40 f2 bd ee f5 e6 5d be 56 a7 c6 be 4c d3 d1 2e 40 8e 0e 98 Data Ascii: PNGIHDRRl"IDATx]uwHcUIMr!+!)!lHm`c`/iW}>wj{ns<~mmmmA[\|61iA%;n3=G4WG=&@23fo@]VL.@
2024-11-01 15:52:36 UTC	1408	IN	Data Raw: 74 21 c1 b2 30 a2 2b 87 2f cf f2 21 9d 4e 85 cb 82 74 e2 2c e4 57 fb e6 26 84 d9 13 40 0b a9 6b 51 9f 2e ec c3 37 4d 8c 60 a6 4e 6c 9a 5e 36 aa ca 4c 2a 6c cc 3e cf f2 75 b2 ba aa e7 9f b1 fc 2e 83 b2 da f4 29 a2 5a cc d2 63 32 02 a9 70 41 90 e8 05 04 23 03 4d 92 e9 82 d5 d2 66 13 5b 60 b8 66 c8 77 e1 58 e7 44 3e ed a3 67 58 2f 55 25 95 6a 1d 63 07 48 67 b4 83 9e eb ca 04 d2 ad 8c ca ab 7c 95 59 89 19 ac 72 2a 7f 2b 90 95 24 80 4c 0f 35 88 f3 d6 66 65 22 5d 27 d4 b0 a1 3b 6c 49 63 de e5 9f ee ed aa 02 40 39 45 41 a3 3f 2d 60 df ab 63 d6 60 5e 0a 34 f6 af 6b 77 ba 9e aa 5b 31 27 80 09 31 63 67 ad ac e4 93 4a 8d f1 66 09 d1 96 b0 22 2c 15 3c 44 2a 95 fe a8 38 ba ac b3 99 14 b3 63 a3 03 a6 89 21 1d 47 32 ef f2 75 4c 4d e8 80 96 23 f9 1d 48 c2 b7 b6 54 96 b8 Data Ascii: t!0+/!Nt,W&@kQ.7M`Nl^6Ll>u.)Zc2pA#Mf[`fwXD>gX/U%jcHg\|Yr+$L5fe"]';lIc@9EA?-`c`^4kw[1'1cgJf",<D*8c!G2uLM#HT
2024-11-01 15:52:36 UTC	1408	IN	Data Raw: db 97 ec 1c 24 db 9e 18 25 db 9e dc b8 fb 45 3b 06 95 ca c1 2a 80 e7 05 d2 84 30 b8 04 4b ad 87 ed d1 a9 15 b2 f7 95 13 e4 82 3b 07 04 21 42 ce b1 ac 8e 98 57 ee 19 22 6f f7 2e 90 93 f3 6b 64 7a 61 63 ee d7 ef 1f 13 24 de 38 33 48 90 09 f6 bc 40 1a 68 50 97 b4 28 34 47 70 f8 d8 32 d9 fd 3f c7 c9 67 6f ef e7 ec 64 b1 63 78 f6 0d bd 64 fb fe d1 28 b7 b0 51 a1 d1 37 7f 7f 5c 9a 4d 67 9d 60 cf 0b 94 63 05 a8 e5 08 ca 63 4b 64 e7 81 09 72 fe 2d fd 8c 33 98 92 48 0a f7 73 ba 7a c9 ad 3f 18 27 43 27 56 9a 02 a0 cb 1b 2f 90 48 01 44 09 32 5d f9 ba e8 5d a8 fc a6 85 41 75 23 35 58 76 64 88 f2 c9 94 61 25 54 82 0f 87 16 c9 8d 4f 8f 91 3f be b1 2f 7d 06 60 14 e3 53 37 f5 91 fb 7e 74 8c 4c 4c af 6e a8 7a 00 ba d5 14 a0 3d 2d 5c 0b c8 03 d8 ba 36 1d f9 4e 4b 22 21 ab Data Ascii: $%E;*0K;!BW"o.kdzac$83H@hP(4Gp2?godcxd(Q7\Mg`ccKdr-3Hsz?'C'V/HD2]]Au#5Xvda%TO?/}`S7~tLLnz=-\6NK"!
2024-11-01 15:52:36 UTC	175	IN	Data Raw: 52 9f 01 8a 3c 23 5c 3c 43 6e 32 48 61 93 63 48 f9 1d 56 22 40 58 13 48 16 b9 d0 e1 15 35 19 2d 30 cb 04 a9 8e 9b 5b 5a 23 4f be 3e 15 d5 07 c4 28 4b 44 bc 3d 61 67 39 b7 ab 8f 74 3d 35 46 3e 1c 5e 8c 8a 71 b0 19 5c 93 08 09 24 21 86 86 43 0b 68 56 6a 26 90 2b 38 b4 4a f1 15 f2 d1 cc 70 81 09 37 a8 8d 9b d5 d1 7e db 89 16 59 c8 71 6a 6e 8d ec 79 e9 04 f9 f4 ad 7c b6 98 c3 ca 57 9d e4 3f bd b9 8f ec 38 30 11 65 8b 69 6d b2 4a 3e b4 f3 ea 5e 3f 26 a2 52 af 08 eb 4c 82 02 59 3f 00 98 94 42 87 b9 55 89 53 80 fc d6 82 43 db Data Ascii: R<#\<Cn2HacHV"@XH5-0[Z#O>(KD=ag9t=5F>^q\$!ChVj&+8Jp7~Yqjny\|W?80eimJ>^?&RLY?BUSC
2024-11-01 15:52:36 UTC	1408	IN	Data Raw: c6 fa 40 ce c5 98 6d b5 ff 8d 9d 5c 25 df fa e1 31 72 de cd 7d 49 c6 04 6e 36 a0 ed cf dc d6 1f 41 2c 46 26 57 22 a7 1a 8a 65 81 d8 ef d8 eb 87 cc 08 ac 13 5c 10 f1 0e 71 4c d4 ba f2 75 df 2d c2 ea 30 86 43 5b 29 89 74 b5 2a 0b 94 55 58 d7 21 93 d9 df c3 27 56 c8 1d cf 4e 34 6a 8b 19 22 59 11 a3 32 a5 64 f9 8f 9f 4d 46 d9 62 48 74 c4 56 56 18 12 51 49 7b af c9 92 c8 92 b0 84 54 57 3e 86 03 4a 47 3e 41 2e 91 24 a5 8d 33 81 43 eb 14 38 98 9a 49 d8 02 0a 0c 2e a7 16 1e ed 1b 5b 26 d7 ff e7 58 54 5b cc 92 ef b2 f4 83 ac b3 4c cb 2a 9f 7a eb 64 e8 4b ac 6b d9 f1 aa e4 11 06 57 04 99 25 58 13 a8 1e 09 aa 26 c4 0a 8c 63 0c 5d e1 05 73 0c 34 42 e6 3a 0a 94 9a 08 cb aa 20 06 6a 1f db c4 17 a5 dd 03 2d 8d fc dd 91 45 72 cd 63 23 e4 ac ed 22 ee fe 38 9c 9a 76 96 2f Data Ascii: @m\%1r}In6A,F&W"e\qLu-0C[)tUX!'VN4j"Y2dMFbHtVVQI{TW>JG>A.$3C8I.[&XT[LzdKkW%X&c]s4B: j-Erc#"8v/
2024-11-01 15:52:36 UTC	1408	IN	Data Raw: e5 c1 b1 35 40 78 5e 20 cf 0b a4 35 53 b0 bb 98 1e bd cc d9 ca a5 58 e7 a7 ab c5 bc 7f b8 91 e8 c2 e0 8d 3c 2f 90 e7 05 32 36 05 4c 7c 02 d9 02 19 49 f6 b7 52 2c 59 44 4b 1c ff f9 e1 a3 e4 ed de 79 e1 a2 79 58 de 21 13 1c 93 e7 05 f2 bc 40 20 0c 50 da 83 8d 2f 91 54 4e 10 5d d5 13 5e d5 f6 99 db 4a e4 8a 07 86 c8 2f 3e 9a 8b 42 a5 b6 78 87 3c 2f 10 58 86 e7 05 32 09 a9 f2 8b e4 3d 9f 58 24 af cc 95 34 36 22 3f 14 06 f1 95 fb 0e 93 17 df 9b 21 f3 80 f5 00 a0 23 3b 14 92 61 a2 f0 20 13 c8 f3 02 b9 35 87 f2 c4 0b 14 2d 93 fa 7f 73 e4 2f ba d9 05 b3 cb f5 c4 56 81 e3 f9 d9 12 ee 5f dc 35 48 0e fc 7a 3a 9a 35 54 f1 6d 1d de 21 cc f5 7b 5e 20 cf 0b 04 56 08 fe b3 b6 50 f6 c5 3b 6a 9d bf 24 ad 93 6d 8f 96 43 ea 8f b8 7d 66 99 2c 2f 24 12 63 e2 1b 41 e5 7b 5e 20 Data Ascii: 5@x^ 5SX</26L\|IR,YDKyyX!@ P/TN]^J/>Bx</X2=X$46"?!#;a 5-s/V_5Hz:5Tm!{^ VP;j$mC}f,/$cA{^
2024-11-01 15:52:36 UTC	1408	IN	Data Raw: 47 7e 41 e8 33 2d 24 5a 87 ff 76 26 21 d1 2c 73 32 8b 1d ca a5 7c f6 fc 62 23 f9 27 ac fd 2d b2 e8 d7 b8 d9 c3 3a c6 a6 51 2d 55 16 db 40 be 11 37 68 cc 14 62 13 61 98 22 0b 59 14 47 75 1e 24 93 99 f6 90 e6 16 2b 2c 0e 7f 75 cf e1 78 21 7b 0c e5 59 16 d4 b8 0a 9c e2 62 52 79 da 8b f2 08 52 5e e5 f3 59 6e 1e ec 96 08 79 0a d6 05 28 70 bf a9 63 d3 db 18 14 01 f2 3b 30 c4 0f 32 ac 74 53 12 61 b6 da 14 e2 f0 f2 07 b3 51 39 23 9b e5 15 47 7d f8 e4 57 29 8e 81 17 2c 0b 94 ec b0 b2 24 5a ce e4 17 cb 89 11 3d 8d ce 91 6f 17 98 73 0b 8c e2 b8 80 ba 58 e2 93 ed d0 ae 00 53 81 e1 6c a6 dc a1 18 70 08 16 88 26 ba de 2c cd 87 4e 6c 83 ab bf d0 59 16 82 ba 0a 7c f2 ab 98 34 33 58 5a f0 b4 ce c5 e3 87 0a ec 3a c0 39 93 9f a8 ed e5 62 fb b1 d5 2c d9 91 9f 25 c4 e5 56 89 Data Ascii: G~A3-$Zv&!,s2\|b#'-:Q-U@7hba"YGu$+,ux!{YbRyR^Yny(pc;02tSaQ9#G}W),$Z=osXSlp&,NlY\|43XZ:9b,%V
2024-11-01 15:52:36 UTC	444	IN	Data Raw: 20 85 62 b0 f9 01 3a 13 ec a3 9e b9 ad 17 e6 79 81 3c 2f 10 13 ed d9 67 cb ec 41 f1 02 01 7c 02 1e 33 44 43 a4 8b 90 c4 88 8d d1 c4 f3 02 e9 c9 c7 44 d2 b2 e4 05 a2 39 27 9b a1 4e 34 2f 10 a2 92 8c 8f 10 f5 a8 cc 14 cf 0b e4 79 81 14 01 8a 1e 49 92 2b d0 68 e3 79 81 24 23 be d2 de a2 f8 8c 2a 48 c9 7a fc df 65 7e 01 9a 9c 69 45 f9 ad c0 0b 44 fb 8c 09 b6 c7 6a 35 18 50 11 52 db e1 fd 6c 0a 6f a6 8b 48 ea 09 3c 2f 90 e7 05 aa 7e d2 3e 42 fb ca a6 b6 26 6e 52 5e 20 d3 6a 32 ae a8 66 6b 75 df eb 79 81 f2 23 1f ea 57 41 95 03 23 9f 54 ea cd a3 7e c1 14 b3 04 c0 40 0d 36 0a 84 e7 05 52 b4 55 17 14 a4 98 46 b4 d0 be a3 ca 38 91 ba b3 c7 98 b4 d3 e4 92 0a f3 75 6c 67 8f 11 fd cd 1f 2b fa 3e af f2 65 bf 25 db 45 32 d3 da 1a f2 37 b7 e5 6c 83 74 f2 c0 c0 11 c1 28 Data Ascii: b:y</gA\|3DCD9'N4/yI+hy$#*Hze~iEDj5PRloH</~>B&nR^ j2fkuy#WA#T~@6RUF8ulg+>e%E27lt(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49916	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:36 UTC	499	OUT	GET /gui/images/favicon.svg HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1730476343.1.0.1730476343.0.0.0; _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1
2024-11-01 15:52:36 UTC	337	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 97c36225d059e72936dd8f64f450b66a Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:52:36 GMT Expires: Fri, 01 Nov 2024 15:53:36 GMT Cache-Control: public, max-age=60 ETag: "b_UujA" Content-Type: image/svg+xml Age: 0 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:36 UTC	379	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 31 0d 0a 82 0d 0a 62 39 0d 0a 30 14 85 77 7e c5 cd 75 a6 bd 54 50 6a 28 83 13 83 ae ee 9a 56 4a 52 1e d1 4a 0d bf de 62 1c 9c 4e be 9c 9c 47 f5 9c 5b 08 9d f6 56 61 66 7a 04 6b ba d6 fa 1f bc 7b 37 3c 15 5a ef a7 03 e7 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001L0000000100000001;000000011b90w~uTPj(VJRJbNG[Vafzk{7<Z
2024-11-01 15:52:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49918	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:48 UTC	689	OUT	GET /gui/90396.306e7eb0c5c689cee651.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1; _ga_BLNDV9X2JR=GS1.1.1730476343.1.1.1730476367.0.0.0
2024-11-01 15:52:48 UTC	347	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6365608e68271a812126339ed73de430 Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:37:21 GMT Expires: Sat, 01 Nov 2025 15:37:21 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 927 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:48 UTC	1061	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 66 66 36 0d 0a ec 7d 7b 97 db c6 b1 e7 ff fb 29 60 3a 56 48 5f 02 e2 63 38 0f 8e 29 45 51 9c ac 76 9d c4 47 92 73 f7 ae 56 47 06 49 90 44 04 12 bc 00 38 8f d0 bc 9f 7d 7f 55 d5 dd e8 06 c0 99 91 ec 3c ee 39 63 c7 11 d5 8f ea ea ea ea aa ea aa ea 46 6b 97 47 5e 5e 64 f1 ac 68 5d b6 f3 28 59 04 d7 d1 74 1b ce 3e be 5c ed 36 1f af 8a 0f bb f8 c3 3a 8c 37 93 3b ea 7e fa Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100ff6}{)`:VH_c8)EQvGsVGID8}U<9cFkG^^dh](Yt>\6:7;~
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: fe 36 ed 00 4c 91 be 81 98 de 2c db c4 97 bc 93 a3 e7 3f fe 6a 9f 1e 9e 6b 10 93 5f ed a3 c3 8f e3 f4 70 b8 dc b6 df 81 ea 61 b0 55 d2 0b 54 27 09 35 fe 6d 9a 26 51 b8 39 74 de 77 57 54 59 a4 54 dc 6d e9 25 69 75 af d2 78 ee f5 3a dd 63 10 04 89 1a 00 8d c3 5b 90 f7 b3 41 08 cd 7e 36 80 92 6e 25 a8 d5 44 4f 68 b6 cb 8b 74 ad e4 4b a7 4d 1c e1 4f 77 45 01 71 d7 22 b2 74 0e dd 51 1f aa e5 67 2a ad 8b b3 d3 13 d1 4e 9b ee bc 9b 94 da 69 f6 a8 9d 7e 01 ed 14 07 b3 55 04 23 25 ce 66 49 c4 6a 26 0e a2 1b 08 99 35 24 7c ba 79 9b 61 63 43 6b a9 9a 1b 48 4d b7 6d bc 59 a4 65 67 d6 43 eb 5f 40 0f 25 d1 55 94 4c 5a 50 aa e1 2e 29 3e 45 e1 bc 9b 06 2f de df a5 72 36 50 0f 9b 49 e2 aa 9c 30 81 6d 22 52 1e 82 9d c4 ae 17 cf 27 2d 68 4d e8 d2 e2 0d fe 6e 14 51 9e a4 c5 Data Ascii: 6L,?jk_paUT'5m&Q9twWTYTm%iux:c[A~6n%DOhtKMOwEq"tQg*Ni~U#%fIj&5$\|yacCkHMmYegC_@%ULZP.)>E/r6PI0m"R'-hMnQ
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 67 1e 6c 1f 6c 06 9b 24 36 30 35 8b e6 3f 6c d6 c4 c0 96 87 68 15 65 a9 9f 84 a0 59 e1 11 ff c0 af 0a d6 59 24 3b 9c b9 d7 f1 c6 bf 5a 11 bb 95 ec 1a 4e 61 2e 41 4f 60 95 b6 e0 46 f8 7a b2 a2 c6 69 b0 e4 ec ce 70 40 de f8 9b f4 3a 0b b7 15 be b5 46 f7 93 68 01 ff 0d 80 af 37 c0 24 f1 fb 03 fe 23 59 fa 27 fc e3 e6 26 f1 87 de 16 1e 26 e5 d5 62 b0 4b 8c 05 3c f8 77 be 82 37 e2 63 0d 9b 75 e1 87 bb 22 a5 a1 43 cf f2 3b e9 f5 9c fb f1 86 7d 59 04 c4 5b 5c fb d3 34 99 b3 cf 6c e0 a1 fc a3 f1 71 ad a7 fe 09 41 89 75 4f c7 57 c5 0c 8d 15 89 9f 79 7f 48 bd 29 f9 dd d8 dd 64 39 dd 74 93 da fe 99 83 3c 1b 12 01 98 2d 4b 01 35 75 6f 8a bf 63 57 61 da 6a 37 e7 b3 f4 0a 0b b4 2c 62 f8 ba a0 b1 e1 5a c3 11 0a 92 aa a1 1c e3 cb 48 ce 1f e2 fe 0a 6d d7 e2 12 ae c5 2e ab Data Ascii: gll$605?lheYY$;ZNa.AO`Fzip@:Fh7$#Y'&&bK<w7cu"C;}Y[\4lqAuOWyH)d9t<-K5uocWaj7,bZHm.
2024-11-01 15:52:48 UTC	348	IN	Data Raw: e2 9f 34 de 51 75 82 14 2f 21 93 89 86 14 74 bf 8b f3 22 a0 75 87 fb 21 6f 23 64 97 fb fa 28 34 6f e1 24 c9 c7 c0 a6 3e 30 8e 6a cd 6d 2f 28 4f ed 2f 74 aa c2 89 89 dc bd f5 29 c6 39 84 1d 8f 86 69 ca 3c c5 f8 e0 79 be c5 89 e4 a7 9f 54 79 be 83 37 2b 17 93 bc 85 7e aa 17 63 17 e7 64 ce bc 9a f3 60 32 12 fb a4 b9 f2 83 f8 ac b5 c1 f3 e2 0a 1e 5a da 63 dc ae 71 4c 99 44 05 11 e5 1b 2e b1 a0 98 63 18 88 b3 73 87 f3 ec 4e 9c 9d 14 74 55 3b a0 ae 57 bd b7 48 4f 32 c6 91 47 bf 11 71 52 08 11 63 a9 38 ac 6d f4 58 13 c7 1e 7e 53 22 30 e6 4d a5 3b e9 58 a6 d5 dc c6 70 01 0c 17 c0 90 8c a2 86 a6 76 06 92 9e d4 2d ba 20 dc f0 a3 91 8c 5f e2 28 3d c3 f1 e8 a3 36 b7 c4 da 52 69 3d 11 82 00 11 42 a2 88 79 6f 0a f0 21 85 bc b5 b7 00 79 31 c9 6d 89 3a bb a0 25 67 67 dc Data Ascii: 4Qu/!t"u!o#d(4o$>0jm/(O/t)9i<yTy7+~cd`2ZcqLD.csNtU;WHO2GqRc8mX~S"0M;Xpv- _(=6Ri=Byo!y1m:%gg
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 31 0d 0a 2e 0d 0a 32 31 34 66 0d 0a 81 ec 5f 96 23 86 28 cd 2e ac 3f bc 7d c5 e6 c7 9f 17 ca 86 81 3f ab d1 d7 85 86 4a 93 8b 22 47 3b 1e 45 c5 3e 6a 74 bd 4f 8c 6b cf 97 f6 84 95 09 84 7a 1b 7d c4 36 fa 48 db 48 7c da 5a 38 b0 89 a6 f2 f2 2c 2f 29 6b 53 e5 98 af 44 00 e0 84 37 a9 80 ae 29 Data Ascii: 00000001]00000001`00000001b000000010000000100000001 00000001S00000001000000012000000010000000100000001w001.214f_#(.?}?J"G;E>jtOkz}6HH\|Z8,/)kSD7)
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 1d 92 eb be ec 4d 4f e6 f3 f0 92 8b 90 66 1f 2f 53 14 9e 22 71 7b 31 90 c2 ed 2e 43 a2 05 15 2e 4e 06 b3 be 2a 44 be 14 75 e6 7f a4 08 36 31 4a 66 a3 c1 c9 a0 27 25 30 c1 11 8b 46 61 34 3a 1b f6 54 e1 2d f2 34 d2 6b 14 2e 66 d1 c5 e9 99 b4 a4 08 d1 06 65 c3 8b 70 76 32 93 b2 02 a9 82 28 1a f4 66 17 17 aa d9 ec 36 a4 56 83 f3 b3 e9 74 24 ad 10 10 82 e5 cf 98 48 c1 f5 0a 87 07 14 2c 16 0b 0d 3b bc c5 df 4f f9 9f b2 08 79 32 19 75 1c f2 3f 56 39 d2 e0 a8 fb 05 fd 6b 15 23 67 9e 8a 07 f4 af 55 8c 79 a1 38 3a a5 7f ad e2 13 2e 9e f1 3f 56 31 4e 69 68 3d 1d d2 bf 56 f1 29 17 d7 30 3c e3 e2 93 39 fd 6b b5 3e e7 e2 1a de 17 5c dc 0f e9 5f 69 ad 22 3f 18 d1 5e 64 15 08 41 a9 4d 6d ba fd 42 0d 7b 67 53 3d 11 75 a1 06 a5 f6 fa 49 7a 11 0a ed 95 56 23 f9 d9 72 3a f6 Data Ascii: MOf/S"q{1.C.N*Du61Jf'%0Fa4:T-4k.fepv2(f6Vt$H,;Oy2u?V9k#gUy8:.?V1Nih=V)0<9k>\_i"?^dAMmB{gS=uIzV#r:
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 14 ee 96 cb 15 3f bc 7d a4 cc 2c 0a 13 01 0b cc 11 cd f1 68 d5 c7 98 ae 5d 14 b0 6a d6 91 8f db e7 85 bf 88 a3 64 9e fb 74 15 0a ef 06 75 8f 35 23 e4 8e 56 22 07 17 77 06 8e 56 23 67 0c 17 b8 68 9c a3 4d e6 21 6c 97 3b 5b c0 8e 2a 56 f7 b4 b9 25 83 8a c1 94 a4 b0 26 ce 44 f2 f3 2d dc 2f 92 9a b8 57 46 0c dd d2 b0 da c9 e3 35 7e c9 25 7b 4d 3a a2 11 52 8f c1 a9 55 a2 f2 52 fa f9 35 45 01 34 31 1b 91 58 c4 49 e4 ef b6 94 59 a1 b1 20 f3 6c ac b9 a0 61 28 41 16 08 72 5f b9 ce 91 66 9f da db f2 a7 20 e1 f5 e3 16 5e a8 c2 bf 21 bd a3 b4 5e 59 4a da 66 74 76 6a f4 61 59 b3 86 e7 e4 ec f4 bc a1 86 84 ed c5 05 44 65 0d 1a ab 1f 38 25 9a aa b8 0e d6 e5 f6 e6 10 20 0d 54 76 20 bd e6 a4 58 d9 bf 81 ea 72 f4 9e 55 c7 92 d4 52 7a a8 72 ec 5f 85 89 2e ae 5a b9 ba 5c 1b Data Ascii: ?},h]jdtu5#V"wV#ghM!l;[*V%&D-/WF5~%{M:RUR5E41XIY la(Ar_f ^!^YJftvjaYDe8% Tv XrURzr_.Z\
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 8e 4a 78 f6 1f d3 74 54 d6 d0 63 9a 8e 9c 93 1e d3 74 74 ca d4 63 9a 8e 44 05 4c 22 ce 63 9a 8e 32 e9 1e d3 74 ac 24 a3 c7 34 1d 1f 4e d7 8f 15 a7 97 ed 58 aa 56 3f a6 e9 50 6e ba 73 a0 7f 4c d3 79 4c d3 01 53 58 79 38 ca 21 50 4f c0 c1 7d d9 18 19 00 ce d9 be de 4a 67 e1 68 30 ff 3d d2 74 56 d9 1e 1f 13 59 c6 1b f6 bc 22 c1 a0 e2 42 b0 67 ad a3 54 1c ed 61 9f 19 2e fd d6 1c 66 12 18 57 b9 78 c6 bf 7a 58 8d ba 01 fe 5b 9d e0 8f 13 35 a6 4f fd 7b f0 7e 12 02 20 30 be 5a b3 16 f7 a0 84 79 55 78 96 a2 fd 56 bc 75 8c 2c 83 2a 9a 4e 9a 64 e7 a0 46 29 fd 86 f0 f9 ce da e8 c7 59 7b de bf 79 c1 f0 ea ba a3 83 80 c8 89 d1 f9 60 7d 4e 7e e8 ec 6b 00 90 3b 0b d7 e4 41 4d a3 ee 91 3c 6c ef 9a 13 b9 35 0f c8 f8 21 3f b8 6e a7 a6 cb d9 7e 82 a8 ca 00 ca d6 61 e2 cc 57 Data Ascii: JxtTcttcDL"c2t$4NXV?PnsLyLSXy8!PO}Jgh0=tVY"BgTa.fWxzX[5O{~ 0ZyUxVu,*NdF)Y{y`}N~k;AM<l5!?n~aW
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: d9 f9 f6 fa 8c 55 61 c3 ac 14 9c 2a 85 d9 bf d2 c0 73 56 62 ae 55 2b f6 b5 02 45 78 0b 7f d6 87 ab 0c 83 eb 74 73 7c eb 36 83 30 41 12 7c 7d 2e 55 92 18 3b e9 18 f9 3f 07 6d 07 87 bb 90 37 2e e9 7d 93 9d 58 61 33 d6 46 8a b7 f8 b7 36 97 83 51 03 59 b4 6d fd fe bf 6c 81 c8 01 82 ae 5d c2 84 36 78 d4 1b 6b af b6 7a df cd 9c 8a 68 50 e7 a3 12 5a f0 8a 47 02 62 06 e1 41 3d 92 94 e1 bb c3 72 f7 ff 08 cb f3 f2 d7 c3 8a a5 33 d2 72 5b b2 ec 46 c8 8a 02 45 8e d4 12 21 b7 cb 92 f6 af f6 6b 7c fa db 92 4c 0f 12 68 3c 86 c7 5e 39 7a ce 02 c7 07 c4 c5 38 28 dc f1 8e 09 3b 0a a3 05 ba 2d 1d 39 d0 b4 5e f6 00 7a c9 51 ff 08 d5 94 1f c0 d9 85 86 9d 8f d2 ce 3a d0 8b 60 90 c9 48 c6 ba e9 6e bd 1b 86 eb a9 fc 60 c3 11 74 2d 81 e1 2c 71 59 fe b9 cb fc c0 01 b5 9c d2 54 6a Data Ascii: Ua*sVbU+Exts\|60A\|}.U;?m7.}Xa3F6QYml]6xkzhPZGbA=r3r[FE!k\|Lh<^9z8(;-9^zQ:`Hn`t-,qYTj
2024-11-01 15:52:48 UTC	1408	IN	Data Raw: 3a 5f 30 71 37 be 51 aa 55 f5 ee 34 76 36 64 d5 a4 69 6a e9 92 04 8c cf d9 3a 5a ca 55 96 b6 41 10 1a b4 a8 2b eb eb 4f e8 ab 69 ca d2 42 67 e9 ab f9 b9 99 f1 15 44 6a e2 05 27 48 bd 7c f3 db 06 be a6 65 2a 5f 98 d3 5a af 02 55 15 1b 58 22 41 ee 5a 6a ce 4d 2a 6f a4 3c 60 e5 b9 07 72 5e cd a2 73 e8 fa 08 22 50 22 95 1a 25 d4 20 35 e5 e2 90 bd 5b dc 07 80 85 1c 5a 08 d2 c6 92 6d 42 b2 ad 19 e8 03 78 47 83 b3 e4 af 01 2c eb f6 c9 3c a0 f1 52 dd 49 e8 7e 06 07 09 62 b8 91 a3 ec 96 26 aa 56 68 a7 bd 7d c8 5d d1 37 6f f9 11 73 5c 54 61 da ed 2d 2d a8 ad a1 3e f2 0e 2a ca d7 0a a1 95 8b 55 16 1a 66 52 02 bd bc 18 54 59 04 11 5f 3a 65 4e 2c 5f 4b ca 4b 12 1d 15 38 2f 3d ea 27 26 65 ed fe 71 2f 53 06 76 92 bc 56 1a f6 0d d8 4b 22 ab d6 81 f5 8c 3c f9 28 81 7e 72 Data Ascii: :_0q7QU4v6dij:ZUA+OiBgDj'H\|e_ZUX"AZjMo<`r^s"P"% 5[ZmBxG,<RI~b&Vh}]7os\Ta-->*UfRTY_:eN,_KK8/='&eq/SvVK"<(~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49920	74.125.34.46	443	4108	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:52:49 UTC	510	OUT	GET /gui/90396.306e7eb0c5c689cee651.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.530598666.1730476344; _gid=GA1.2.236531566.1730476346; _gat=1; _ga_BLNDV9X2JR=GS1.1.1730476343.1.1.1730476367.0.0.0
2024-11-01 15:52:49 UTC	347	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6365608e68271a812126339ed73de430 Content-Encoding: gzip Server: Google Frontend Date: Fri, 01 Nov 2024 15:37:21 GMT Expires: Sat, 01 Nov 2025 15:37:21 GMT Cache-Control: public, max-age=31536000 ETag: "b_UujA" Content-Type: text/javascript Age: 928 Connection: close Transfer-Encoding: chunked
2024-11-01 15:52:49 UTC	1061	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 97 0d 0a 30 30 31 0d 0a db 0d 0a 30 66 66 31 0d 0a c6 b1 e7 ff fb 29 60 3a 56 48 5f 02 e2 63 38 0f 8e 29 45 51 9c ac 76 9d c4 47 92 73 f7 ae 56 47 06 49 90 44 04 12 bc 00 38 8f d0 bc 9f 7d 7f 55 d5 dd e8 06 c0 99 91 ec 3c ee 39 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001{000000010010ff1)`:VH_c8)EQvGsVGID8}U<9
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: 98 46 c3 c8 26 9b e8 da fb e1 f5 77 ed d4 6c 9f 2c c8 a3 30 9b ad be 0f b3 70 9d 07 e1 76 0b 26 69 b7 34 bf b5 34 ba 0a 52 f7 9e f6 1f f4 c4 3e ec b2 b8 d2 59 23 fe 36 ed 00 4c 91 be 81 98 de 2c db c4 97 bc 93 a3 e7 3f fe 6a 9f 1e 9e 6b 10 93 5f ed a3 c3 8f e3 f4 70 b8 dc b6 df 81 ea 61 b0 55 d2 0b 54 27 09 35 fe 6d 9a 26 51 b8 39 74 de 77 57 54 59 a4 54 dc 6d e9 25 69 75 af d2 78 ee f5 3a dd 63 10 04 89 1a 00 8d c3 5b 90 f7 b3 41 08 cd 7e 36 80 92 6e 25 a8 d5 44 4f 68 b6 cb 8b 74 ad e4 4b a7 4d 1c e1 4f 77 45 01 71 d7 22 b2 74 0e dd 51 1f aa e5 67 2a ad 8b b3 d3 13 d1 4e 9b ee bc 9b 94 da 69 f6 a8 9d 7e 01 ed 14 07 b3 55 04 23 25 ce 66 49 c4 6a 26 0e a2 1b 08 99 35 24 7c ba 79 9b 61 63 43 6b a9 9a 1b 48 4d b7 6d bc 59 a4 65 67 d6 43 eb 5f 40 0f 25 d1 55 Data Ascii: F&wl,0pv&i44R>Y#6L,?jk_paUT'5m&Q9twWTYTm%iux:c[A~6n%DOhtKMOwEq"tQg*Ni~U#%fIj&5$\|yacCkHMmYegC_@%U
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: ac 07 63 40 40 d3 4d 14 28 80 c7 a6 b3 00 c3 09 a5 e4 30 a6 a9 75 c4 05 d2 f2 5c b6 79 e6 bd 89 ca d9 e6 51 01 c7 c5 32 c7 98 02 0d 33 69 06 ab 3c 2a 06 9c 62 b7 67 1e 6c 1f 6c 06 9b 24 36 30 35 8b e6 3f 6c d6 c4 c0 96 87 68 15 65 a9 9f 84 a0 59 e1 11 ff c0 af 0a d6 59 24 3b 9c b9 d7 f1 c6 bf 5a 11 bb 95 ec 1a 4e 61 2e 41 4f 60 95 b6 e0 46 f8 7a b2 a2 c6 69 b0 e4 ec ce 70 40 de f8 9b f4 3a 0b b7 15 be b5 46 f7 93 68 01 ff 0d 80 af 37 c0 24 f1 fb 03 fe 23 59 fa 27 fc e3 e6 26 f1 87 de 16 1e 26 e5 d5 62 b0 4b 8c 05 3c f8 77 be 82 37 e2 63 0d 9b 75 e1 87 bb 22 a5 a1 43 cf f2 3b e9 f5 9c fb f1 86 7d 59 04 c4 5b 5c fb d3 34 99 b3 cf 6c e0 a1 fc a3 f1 71 ad a7 fe 09 41 89 75 4f c7 57 c5 0c 8d 15 89 9f 79 7f 48 bd 29 f9 dd d8 dd 64 39 dd 74 93 da fe 99 83 3c 1b Data Ascii: c@@M(0u\yQ23i<*bgll$605?lheYY$;ZNa.AO`Fzip@:Fh7$#Y'&&bK<w7cu"C;}Y[\4lqAuOWyH)d9t<
2024-11-01 15:52:49 UTC	402	IN	Data Raw: 85 a4 f5 90 b4 06 33 7d c9 6b 10 b7 e1 4b ed 61 d5 d1 ab 0f bc 6b 49 88 50 5e 84 03 a0 25 07 d3 d6 58 3c 97 02 80 3d 78 ba b3 55 44 bd a7 41 bc f8 1d e7 ef cc 3b e2 9f 34 de 51 75 82 14 2f 21 93 89 86 14 74 bf 8b f3 22 a0 75 87 fb 21 6f 23 64 97 fb fa 28 34 6f e1 24 c9 c7 c0 a6 3e 30 8e 6a cd 6d 2f 28 4f ed 2f 74 aa c2 89 89 dc bd f5 29 c6 39 84 1d 8f 86 69 ca 3c c5 f8 e0 79 be c5 89 e4 a7 9f 54 79 be 83 37 2b 17 93 bc 85 7e aa 17 63 17 e7 64 ce bc 9a f3 60 32 12 fb a4 b9 f2 83 f8 ac b5 c1 f3 e2 0a 1e 5a da 63 dc ae 71 4c 99 44 05 11 e5 1b 2e b1 a0 98 63 18 88 b3 73 87 f3 ec 4e 9c 9d 14 74 55 3b a0 ae 57 bd b7 48 4f 32 c6 91 47 bf 11 71 52 08 11 63 a9 38 ac 6d f4 58 13 c7 1e 7e 53 22 30 e6 4d a5 3b e9 58 a6 d5 dc c6 70 01 0c 17 c0 90 8c a2 86 a6 76 06 92 Data Ascii: 3}kKakIP^%X<=xUDA;4Qu/!t"u!o#d(4o$>0jm/(O/t)9i<yTy7+~cd`2ZcqLD.csNtU;WHO2GqRc8mX~S"0M;Xpv
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 66 66 34 0d 0a 2e 81 ec 5f 96 23 86 28 cd 2e ac 3f bc 7d c5 e6 c7 9f 17 ca 86 81 3f ab d1 d7 85 86 4a 93 8b 22 47 3b 1e 45 c5 3e 6a 74 bd 4f 8c 6b cf 97 f6 84 95 09 84 7a 1b 7d c4 36 fa 48 db 48 7c da 5a 38 b0 89 a6 f2 f2 2c 2f 29 6b 53 e5 98 af 44 00 e0 84 37 a9 80 ae 29 66 39 56 Data Ascii: 00000001]00000001`00000001b000000010000000100000001 00000001S00000001000000012000000010000000100000001w00000ff4._#(.?}?J"G;E>jtOkz}6HH\|Z8,/)kSD7)f9V
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: be ec 4d 4f e6 f3 f0 92 8b 90 66 1f 2f 53 14 9e 22 71 7b 31 90 c2 ed 2e 43 a2 05 15 2e 4e 06 b3 be 2a 44 be 14 75 e6 7f a4 08 36 31 4a 66 a3 c1 c9 a0 27 25 30 c1 11 8b 46 61 34 3a 1b f6 54 e1 2d f2 34 d2 6b 14 2e 66 d1 c5 e9 99 b4 a4 08 d1 06 65 c3 8b 70 76 32 93 b2 02 a9 82 28 1a f4 66 17 17 aa d9 ec 36 a4 56 83 f3 b3 e9 74 24 ad 10 10 82 e5 cf 98 48 c1 f5 0a 87 07 14 2c 16 0b 0d 3b bc c5 df 4f f9 9f b2 08 79 32 19 75 1c f2 3f 56 39 d2 e0 a8 fb 05 fd 6b 15 23 67 9e 8a 07 f4 af 55 8c 79 a1 38 3a a5 7f ad e2 13 2e 9e f1 3f 56 31 4e 69 68 3d 1d d2 bf 56 f1 29 17 d7 30 3c e3 e2 93 39 fd 6b b5 3e e7 e2 1a de 17 5c dc 0f e9 5f 69 ad 22 3f 18 d1 5e 64 15 08 41 a9 4d 6d ba fd 42 0d 7b 67 53 3d 11 75 a1 06 a5 f6 fa 49 7a 11 0a ed 95 56 23 f9 d9 72 3a f6 fa fd ae Data Ascii: MOf/S"q{1.C.N*Du61Jf'%0Fa4:T-4k.fepv2(f6Vt$H,;Oy2u?V9k#gUy8:.?V1Nih=V)0<9k>\_i"?^dAMmB{gS=uIzV#r:
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: cb 15 3f bc 7d a4 cc 2c 0a 13 01 0b cc 11 cd f1 68 d5 c7 98 ae 5d 14 b0 6a d6 91 8f db e7 85 bf 88 a3 64 9e fb 74 15 0a ef 06 75 8f 35 23 e4 8e 56 22 07 17 77 06 8e 56 23 67 0c 17 b8 68 9c a3 4d e6 21 6c 97 3b 5b c0 8e 2a 56 f7 b4 b9 25 83 8a c1 94 a4 b0 26 ce 44 f2 f3 2d dc 2f 92 9a b8 57 46 0c dd d2 b0 da c9 e3 35 7e c9 25 7b 4d 3a a2 11 52 8f c1 a9 55 a2 f2 52 fa f9 35 45 01 34 31 1b 91 58 c4 49 e4 ef b6 94 59 a1 b1 20 f3 6c ac b9 a0 61 28 41 16 08 72 5f b9 ce 91 66 9f da db f2 a7 20 e1 f5 e3 16 5e a8 c2 bf 21 bd a3 b4 5e 59 4a da 66 74 76 6a f4 61 59 b3 86 e7 e4 ec f4 bc a1 86 84 ed c5 05 44 65 0d 1a ab 1f 38 25 9a aa b8 0e d6 e5 f6 e6 10 20 0d 54 76 20 bd e6 a4 58 d9 bf 81 ea 72 f4 9e 55 c7 92 d4 52 7a a8 72 ec 5f 85 89 2e ae 5a b9 ba 5c 1b b9 70 79 Data Ascii: ?},h]jdtu5#V"wV#ghM!l;[*V%&D-/WF5~%{M:RUR5E41XIY la(Ar_f ^!^YJftvjaYDe8% Tv XrURzr_.Z\py
2024-11-01 15:52:49 UTC	28	IN	Data Raw: f6 1f d3 74 54 d6 d0 63 9a 8e 9c 93 1e d3 74 74 ca d4 63 9a 8e 44 05 4c 22 ce 0d 0a Data Ascii: tTcttcDL"
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1e 0d 0a 30 30 30 30 30 30 30 31 0d 0a d3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 31 31 35 33 0d 0a 24 a3 c7 34 1d 1f 4e d7 8f 15 a7 97 ed 58 aa 56 3f a6 e9 50 6e ba 73 a0 7f 4c d3 79 4c d3 01 53 58 79 38 ca 21 50 4f c0 c1 7d d9 18 19 00 ce d9 be de 4a 67 e1 68 30 ff 3d d2 74 56 d9 1e 1f 13 59 c6 1b f6 bc 22 c1 a0 e2 42 b0 67 ad a3 54 1c ed 61 9f 19 2e fd d6 1c 66 12 18 57 b9 78 c6 bf 7a 58 8d ba 01 fe 5b 9d e0 8f 13 35 a6 4f fd 7b f0 7e 12 02 20 30 be 5a b3 16 f7 a0 84 79 55 78 96 a2 fd 56 Data Ascii: 00000001c000000010000000100000001200000001000000010000000100000001t000000011153$4NXV?PnsLyLSXy8!PO}Jgh0=tVY"BgTa.fWxzX[5O{~ 0ZyUxV
2024-11-01 15:52:49 UTC	1408	IN	Data Raw: 4d df ef d5 d8 ea 88 c0 6b 56 ef a4 af 5d 68 d4 b0 33 a0 db c7 53 76 7e 6c e0 c5 6e 5f f4 be c2 25 aa c6 e2 06 70 9c be a8 87 ae 18 1b 77 db e6 74 80 96 bb dd 16 f5 f8 c9 89 4e 57 ea 86 b8 f3 6d ea 14 b0 f2 c1 16 23 09 ca 6d 32 66 62 44 73 3b 05 5d 70 d2 d9 f9 f6 fa 8c 55 61 c3 ac 14 9c 2a 85 d9 bf d2 c0 73 56 62 ae 55 2b f6 b5 02 45 78 0b 7f d6 87 ab 0c 83 eb 74 73 7c eb 36 83 30 41 12 7c 7d 2e 55 92 18 3b e9 18 f9 3f 07 6d 07 87 bb 90 37 2e e9 7d 93 9d 58 61 33 d6 46 8a b7 f8 b7 36 97 83 51 03 59 b4 6d fd fe bf 6c 81 c8 01 82 ae 5d c2 84 36 78 d4 1b 6b af b6 7a df cd 9c 8a 68 50 e7 a3 12 5a f0 8a 47 02 62 06 e1 41 3d 92 94 e1 bb c3 72 f7 ff 08 cb f3 f2 d7 c3 8a a5 33 d2 72 5b b2 ec 46 c8 8a 02 45 8e d4 12 21 b7 cb 92 f6 af f6 6b 7c fa db 92 4c 0f 12 68 Data Ascii: MkV]h3Sv~ln_%pwtNWm#m2fbDs;]pUa*sVbU+Exts\|60A\|}.U;?m7.}Xa3F6QYml]6xkzhPZGbA=r3r[FE!k\|Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:07 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 01 Nov 2024 06:15:12 GMT ETag: "0x8DCFA3C8B31D3C9" x-ms-request-id: 9bc4dc4d-a01e-0084-152e-2c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155306Z-16ccfc498976vdjnhC1DFW5ann00000000w00000000096nu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:07 UTC	15869	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L>
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 Data Ascii: </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns="">
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 Data Ascii: N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_C
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 Data Ascii: eateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPer
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 Data Ascii: > </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="2
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c Data Ascii: liseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 Data Ascii: "I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedC
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 Data Ascii: <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="
2024-11-01 15:53:07 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 Data Ascii: <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f684d678-801e-008c-7c65-2b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155308Z-16dc884887bnphrshC1DFWzprc00000000g000000000cr76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:08 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a3e6b75e-301e-000c-5a08-2c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155308Z-16ccfc49897cvhbphC1DFWt5d800000000vg00000000n4md x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:08 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:08 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a28262d6-f01e-0003-5708-2c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155308Z-16dc884887bvr5slhC1DFWw7rw00000000pg000000006qv8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:08 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:08 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9d856691-501e-0035-564e-2cc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155308Z-176bd8f9bc59g2s2hC1DFWby18000000010g000000004nr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:08 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:08 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 134b0bf0-a01e-0098-2f2e-2c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155308Z-16dc884887bqz426hC1DFWhv2000000000r0000000009b0v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155309Z-16ccfc498974624whC1DFWdg3800000000n000000000rf2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: ab6d44c0-401e-005b-6508-2c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155309Z-16ccfc49897kh956hC1DFW2afc00000000x000000000dv2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:09 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 070d1cb7-b01e-0084-2b6b-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155309Z-159b85dff8fvjwrdhC1DFWymhn00000001sg00000000k2pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 250fb995-801e-0078-4343-2bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155310Z-16ccfc498972c2r2hC1DFWxq6800000000v0000000004dcv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: d7649e4f-901e-0015-0208-2cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155310Z-16ccfc49897z67z2hC1DFW6cd800000000t000000000cthn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 718751ec-501e-0078-1528-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155310Z-176bd8f9bc55qmmkhC1DFW300000000000qg00000000c3f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 15:53:10 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 15:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 15:53:10 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 12e859be-a01e-0098-7408-2c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T155310Z-16dc884887bb4p45hC1DFWv3z000000000t000000000gxuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 15:53:10 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	11:52:09
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:52:13
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,11781724367075088181,9093435567813915424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:52:16
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KFBGZNL
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=h5acdqhznrsa
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KFBGZNL
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=h5acdqhznrsa

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="author".. found
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="author".. found

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_205.1.dr	String found in binary or memory: DF_Mk([DF_Ms({type:Boolean,K:!0}),DF_Ml("design:type",Object)],DF_M1f.prototype,"isBot",void 0);DF_Mk([DF_Ms(),DF_Ml("design:type",Object)],DF_M1f.prototype,"screenReaderTextKey",void 0);DF_M1f=DF_Mk([DF_Mp("df-text-message"),DF_Ml("design:paramtypes",[String,String])],DF_M1f);var DF_M2f=DF_Mq([":host(:only-child) .wrapper{padding:var(--df-messenger-video-inner-padding,0)}:host(:not(.markdown):not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,none);border-radius:var(--df-messenger-video-inner-border-radius,0);overflow:hidden}:host(:not(:only-child)) .wrapper{padding:var(--df-messenger-card-padding,16px)}:host(.markdown) .wrapper{display:inline-block;padding:var(--df-messenger-card-padding,16px);padding-left:0;padding-right:0}:host(.markdown:first-child) .wrapper{padding-top:0}:host(.markdown:last-child) .wrapper{padding-bottom:0}:host(.markdown) .embed,:host(:not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,var(--df-messenger-video-border,var(--df-messenger-default-border)\n )\n );border-radius:var(--df-messenger-video-inner-border-radius,var(--df-messenger-video-border-radius,var(--df-messenger-default-border-radius)\n )\n );overflow:hidden}.link{display:inline-block;position:relative;text-decoration:none}.thumbnail,video{height:var(--df-messenger-video-height,auto);width:var(--df-messenger-video-width,auto)}.thumbnail,iframe,video{display:block;max-width:100%}iframe{height:var(--df-messenger-video-embed-height,var(--df-messenger-video-height,315px)\n );width:var(--df-messenger-video-embed-width,var(--df-messenger-video-width,560px)\n )}.title{align-items:center;color:var(--df-messenger-font-color,var(--df-messenger-default-font-color)\n );display:flex;font-family:var(--df-messenger-font-family,var(--df-messenger-default-font-family)\n );font-size:var(--df-messenger-font-size,var(--df-messenger-default-font-size)\n );padding:12px 16px}.youtube svg{height:24px;margin-right:8px;width:24px}.play{background:#000;border-radius:999px;height:36px;left:50%;opacity:.8;padding:8px;pointer-events:none;position:absolute;top:50%;transform:translate(-50%,-50%);width:36px}.play svg{fill:#fff;height:inherit;width:inherit}"]);function DF_M3f(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_M4f(c):null}function DF_M5f(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_M4f(c):null}function DF_M4f(a){this.href=(a==null?void 0:a.href)\|\|"";this.target=(a==null?void 0:a.target)\|\|"_blank";this.rel=(a==null?void 0:a.rel)\|\|"noopener noreferrer"};var DF_M6f=DF_Mc([' <div class="wrapper">\n <div class="video">\n <video src="','" controls>',"</video>\n ","\n </div>\n </div>"]),DF_M7f=DF_Mc(["https://www.youtube.com/embed"]),DF_M8f=DF_Mc([' <div class="wrapper">\n <d
Source: chromecache_147.1.dr, chromecache_167.1.dr, chromecache_269.1.dr, chromecache_258.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.virustotal.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Windows Analysis Report
https://www.virustotal.com/gui/url/70ec4953c4bfc6b9760d029fff0b42bddc1b98f5a2223c32a5b54a20c83a907e/details